owfadev 0.4.1 → 0.4.2

package/.owfa/VERSION

@@ -1 +1 @@
-0.4.1
+0.4.2

package/.owfa/protocol/actions.md

@@ -1,7 +1,7 @@
 # Action discipline: path zones × action tiers
 
-> The semantic shape of permissions: this table does not rely on code for "enforcement", but deterministic structural operations are entrusted to scripts (`.owfa/scripts/owfa_kernel.py`: compliance / dependencies / injection / registry / copy sync; `.owfa/scripts/pipeline.py`: index / tags rebuild, hot / log rolling, post-write self-attestation), while semantic judgment is entrusted to the LLM; the agent consults this table before acting, and check audits afterwards from script output and git traces.
-> Four execution principles: deterministic structural operations go through scripts, semantic judgment through the LLM; rules spell out in plain text "how to do" rather than "what it is"; if one read suffices, there is no second scan (call frugality); write commands must close with `pipeline.py verify` self-attestation (the minimal attester form: the LLM executes, the script attests).
+> The semantic shape of permissions: this table does not rely on code for "enforcement", but deterministic structural operations are entrusted to scripts (`.owfa/scripts/owfa_kernel.py`: compliance / dependencies / injection / registry / copy sync; the suite-provided pipeline, `.owfa/plugins/domains/personal/pipeline.py` (deprecated host copy `.owfa/scripts/pipeline.py` until 0.5.0): index / tags rebuild, hot / log rolling, post-write self-attestation), while semantic judgment is entrusted to the LLM; the agent consults this table before acting, and check audits afterwards from script output and git traces.
+> Four execution principles: deterministic structural operations go through scripts, semantic judgment through the LLM; rules spell out in plain text "how to do" rather than "what it is"; if one read suffices, there is no second scan (call frugality); write commands must close with the pipeline's `verify` self-attestation (the minimal attester form: the LLM executes, the script attests; the pipeline is suite machinery — with the personal suite since 0.1.1).
 
 ## Path zones
 
@@ -17,7 +17,7 @@
 
 | Tier | Typical actions | How executed |
 |---|---|---|
-| Mechanical-auto | index / tags / registry rebuild, injection-region rebuild, hot window eviction, log archival routing, hash recalculation, query log lines, command copy sync, post-write self-attestation | Execute directly (whatever scripts can do goes through scripts: `owfa_kernel.py` and `pipeline.py`), no asking |
+| Mechanical-auto | index / tags / registry rebuild, injection-region rebuild, hot window eviction, log archival routing, hash recalculation, query log lines, command copy sync, post-write self-attestation | Execute directly (whatever scripts can do goes through scripts: `owfa_kernel.py` (framework) and the suite pipeline), no asking |
 | Mechanical-confirm | tag merges (batch edits to plugin fields), reserved-field migration, tmp over-age cleanup (present list, delete after confirmation) | Present the list, execute after confirmation |
 | Semantic-report | note-merge suggestions, near-duplicate alerts, staleness judgments on proxy descriptions | Report the differences; the human decides |
 | Always-human | deletion, history rewriting, changes to existing `vault/` files, rewriting note bodies | Commands never execute these; ghost-writing on explicit user instruction must leave a log trace |
@@ -39,4 +39,4 @@ The criterion: touching "plugin-owned fields or regenerable pages" → mechanica
 - **hot**: ≤25 entries, <5 days, ≤200 characters per entry. Write hot entries via `pipeline.py hot <type> "<one-liner>"`—out-of-window entries are evicted and over-long entries truncated automatically before writing
 - **Index / registry**: on deviation from reality → rebuild directly inside check (`pipeline.py index` / `tags`; `owfa_kernel.py all`), no asking
 - **Vocabulary**: before writing tags, map / save first reads `wiki/tags.md` (the derived zone is the vocabulary), preferring to reuse existing words; near-duplicate merging is a mechanical-confirm item
-- **Parameter ownership**: mechanical parameters such as rolling windows defer to the `pipeline.py` source (the script source is the rule list), while plugin PLUGIN.md files keep the semantic explanations—commands and docs do not re-copy the numbers
+- **Parameter ownership**: mechanical parameters such as rolling windows defer to the pipeline source (suite package root) (the script source is the rule list), while plugin PLUGIN.md files keep the semantic explanations—commands and docs do not re-copy the numbers

package/.owfa/scripts/pipeline.py

@@ -1,6 +1,12 @@
 #!/usr/bin/env python3
 # -*- coding: utf-8 -*-
-"""Derived-layer post-write pipeline: index / tags / hot / log / verify.
+"""DEPRECATED HOST COPY — retires in 0.5.0. Since suite 0.1.1 the pipeline ships with
+the personal suite at the package root (instance path:
+.owfa/plugins/domains/personal/pipeline.py); the kernel never calls it. This
+framework-tree copy is a one-version compatibility shim for reverse-order upgrades
+(framework before suite). Do not edit here — source of truth: owfadev/owfa-personal.
+
+Derived-layer post-write pipeline: index / tags / hot / log / verify.
 
 Positioning (.owfa/protocol/actions.md execution principles): deterministic structural
 operations go to this script; semantic judgment goes to the LLM. Rebuild and rolling

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "owfadev",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "OWFA — One Workspace For All (agents). Install, initialize and upgrade the owfa agent workspace framework.",
   "keywords": [
     "owfa",

package/payloads/personal/PKG.yaml

@@ -1,13 +1,13 @@
 schema_version: 1
 id: personal
 kind: suite
-version: 0.1.0
+version: 0.1.1
 compat: ">= 0.4"
 members: [calendar, cron, device, domain, hot, index, instance-git, language, link, log, mapping, notes, sessions, structure, tag, tmp, todo, trust, user-profile, vault, wiki]
 depends: [framework]
 skeleton: [vault/, wiki/notes/, wiki/sessions/, wiki/vault/]
 uninstall:
-  anchors: [wiki/profile.md, wiki/language.md, wiki/calendar.md, wiki/todo.md, wiki/cron/]
+  anchors: [wiki/profile.md, wiki/language.md, wiki/structure.md, wiki/calendar.md, wiki/todo.md, wiki/cron/]
   retains: [vault/, wiki/]
   credentials: []
   bridges: []

package/payloads/personal/calendar/PLUGIN.md

@@ -32,5 +32,6 @@ A derivation-destination bridge governing schedules: domain plugins one-way deri
 ## Changelog
 
 - 0.5 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
-- 0.4 (2026-10-06) inject line: sections lost to the kernel comment-strip clip restored (quoted values are now protected), tightened for budget headroom — issue #12 post-migration nit- 0.3 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.2 2026-10-02: global-domain batch two — established the on-demand bridge as the derivation destination; domain-plugin self-descriptions retained with a pointer
+- 0.4 (2026-10-06) inject line: sections lost to the kernel comment-strip clip restored (quoted values are now protected), tightened for budget headroom — issue #12 post-migration nit
+- 0.3 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.2 2026-10-02: global-domain batch two — established the on-demand bridge as the derivation destination; domain-plugin self-descriptions retained with a pointer
 - 0.1 2026-09-19: established — month-page two-section scheme, the open source model, the freezing regime; lark-calendar as the first source adapter

package/payloads/personal/command/owfa-map/SKILL.md

@@ -20,7 +20,7 @@ Read: registry (`.owfa/protocol/registry.yaml`, field and value-set anchor), tag
 2. Read the target asset in vault/
 3. Assemble the proxy-page draft per the write-side contracts in the injection region (mapping mirror and registration fields, trust generated, tag labeling); **present the mapping preview** (path / hash / description / tags) and wait for user confirmation
 4. After confirmation, write the proxy page
-5. **Post-write pipeline** (deterministic, mechanical and automatic, no prompting): execute each plugin's write calls in injection-region order, then finish with `python .owfa/scripts/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`映射: <asset name>`, see the vocabulary in `.owfa/protocol/actions.md`)
+5. **Post-write pipeline** (deterministic, mechanical and automatic, no prompting): execute each plugin's write calls in injection-region order, then finish with `python .owfa/plugins/domains/personal/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`映射: <asset name>`, see the vocabulary in `.owfa/protocol/actions.md`)
 6. Report: path / hash / description / tags
 
 ## Prohibitions
@@ -59,14 +59,14 @@ Output language takes the default key of the language declaration page `wiki/lan
 <!-- /usage:tag -->
 
 <!-- usage:index -->
-- Post-write rebuild (mechanical, automatic): `python .owfa/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
+- Post-write rebuild (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
 <!-- /usage:index -->
 
 <!-- usage:hot -->
-- Writing entries (mechanical, automatic): `python .owfa/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
+- Writing entries (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
 <!-- /usage:hot -->
 
 <!-- usage:log -->
-- Writing lines (mechanical, automatic): `python .owfa/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
+- Writing lines (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
 <!-- /usage:log -->
 <!-- cmd-inject:end -->

package/payloads/personal/command/owfa-profile/SKILL.md

@@ -20,7 +20,7 @@ Read: registry (`.owfa/protocol/registry.yaml`, field and value-set anchor), tru
 2. **Judge signals** (criteria in the user-profile usage block below): if this session's and recent observations do not qualify, report and exit — never force a write
 3. Assemble the update: incremental assertions (new value replaces old + body trace) or construction / consolidation (whole-page rewrite) — construction and consolidation **present a profile preview** (assertions / evidence / layers) and wait for user confirmation
 4. Write the page (layered placement and stale_after renewal per the usage block below)
-5. **Post-write pipeline** (deterministic, mechanical and automatic, no prompting): execute each plugin's write calls in injection-region order, then finish with `python .owfa/scripts/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`画像: <one line>`, see the vocabulary in `.owfa/protocol/actions.md`)
+5. **Post-write pipeline** (deterministic, mechanical and automatic, no prompting): execute each plugin's write calls in injection-region order, then finish with `python .owfa/plugins/domains/personal/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`画像: <one line>`, see the vocabulary in `.owfa/protocol/actions.md`)
 6. Report: what was updated / the evidence chain / which layer it landed in
 
 ## Prohibitions
@@ -62,14 +62,14 @@ Output language takes the default key of the language declaration page `wiki/lan
 <!-- /usage:trust -->
 
 <!-- usage:index -->
-- Post-write rebuild (mechanical, automatic): `python .owfa/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
+- Post-write rebuild (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
 <!-- /usage:index -->
 
 <!-- usage:hot -->
-- Writing entries (mechanical, automatic): `python .owfa/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
+- Writing entries (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
 <!-- /usage:hot -->
 
 <!-- usage:log -->
-- Writing lines (mechanical, automatic): `python .owfa/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
+- Writing lines (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
 <!-- /usage:log -->
 <!-- cmd-inject:end -->

package/payloads/personal/command/owfa-save/SKILL.md

@@ -33,7 +33,7 @@ type / status value sets defer to the registry (a one-time read anchor; do not r
 4. Rewrite in declarative present tense: write knowledge, not dialogue
 5. Create the page per the write-side contracts in the injection region (notes / sessions destinations and shapes, trust generated, tag labeling); the session type goes to the long-sessions section
 6. Write wiki pages mentioned in the conversation into related with wikilinks
-7. **Post-write pipeline** (deterministic, mechanical, automatic): execute each plugin's write calls in injection-region order, then finish with `python .owfa/scripts/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`保存: <page title>`, see `.owfa/protocol/actions.md`)
+7. **Post-write pipeline** (deterministic, mechanical, automatic): execute each plugin's write calls in injection-region order, then finish with `python .owfa/plugins/domains/personal/pipeline.py verify` (post-write self-verification; on failure, go back and fix); then commit per the commit discipline (`保存: <page title>`, see `.owfa/protocol/actions.md`)
 8. Report: `Saved as [[title]] in wiki/notes/` (session type: `... in wiki/sessions/`)
 
 ## Long Sessions (session backbone)
@@ -62,7 +62,7 @@ Declarative present tense; output language takes the default key of the language
 
 <!-- usage:sessions -->
 - Landing spot `wiki/sessions/YYYY-MM-DD-<topic>.md` (default naming), type: session, participants required (actor list)
-- Backbone page five-section shape: Core Conclusions / Decisions & Rationale / Non-obvious Insights / Open Questions / Related Pages (full-shape sample in the Example section of `.owfa/plugins/sessions/PLUGIN.md`)
+- Backbone page five-section shape: Core Conclusions / Decisions & Rationale / Non-obvious Insights / Open Questions / Related Pages (full-shape sample in the Example section of `.owfa/plugins/domains/personal/sessions/PLUGIN.md`)
 - Standalone high-value topics promoted to `wiki/notes/` pages, the backbone page keeping a wikilink; dedupe before promotion
 <!-- /usage:sessions -->
 
@@ -81,14 +81,14 @@ Declarative present tense; output language takes the default key of the language
 <!-- /usage:trust -->
 
 <!-- usage:index -->
-- Post-write rebuild (mechanical, automatic): `python .owfa/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
+- Post-write rebuild (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
 <!-- /usage:index -->
 
 <!-- usage:hot -->
-- Writing entries (mechanical, automatic): `python .owfa/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
+- Writing entries (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
 <!-- /usage:hot -->
 
 <!-- usage:log -->
-- Writing lines (mechanical, automatic): `python .owfa/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
+- Writing lines (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
 <!-- /usage:log -->
 <!-- cmd-inject:end -->

package/payloads/personal/device/PLUGIN.md

@@ -35,5 +35,6 @@
 ## Changelog
 
 - 0.5 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
-- 0.4 (2026-10-06) inject line: sections lost to the kernel comment-strip clip restored (quoted values are now protected), tightened for budget headroom — issue #12 post-migration nit- 0.3 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.2 2026-10-04: added the tool-environment summary section — the body's `## Tool Environment` records presence-level info on connectors/runtimes/channels, a cross-device lookup registry, the AGENTS shell pointing to the pages; presence-level granularity, (un)install syncing, no full inventory
+- 0.4 (2026-10-06) inject line: sections lost to the kernel comment-strip clip restored (quoted values are now protected), tightened for budget headroom — issue #12 post-migration nit
+- 0.3 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.2 2026-10-04: added the tool-environment summary section — the body's `## Tool Environment` records presence-level info on connectors/runtimes/channels, a cross-device lookup registry, the AGENTS shell pointing to the pages; presence-level granularity, (un)install syncing, no full inventory
 - 0.1 2026-10-04: established — reusing the notes territory (type: entity suggested), the device block mapping minimal key set, the attached-audit expiry scan (30-day window), expiry entering todo via delegation and confirmation; zero commands; depends wiki

package/payloads/personal/hot/PLUGIN.md

@@ -28,6 +28,7 @@ hot.max_entry_chars: 200   # parameters calibrated against the original reposito
 
 ## Changelog
 
+- 0.11 2026-11-15: pipeline call path relocated to the suite package root (suite 0.1.1)
 - 0.10 2026-09-23: added the wiki dependency edge — inner-side plugins attach to wiki, aligning with the domain 0.1 declaration; omitted from the 2026-09-22 domain-ization batch
 - 0.9 2026-09-13: usage's type parameter gained its value-set source — same as log, pointing to the log block of the AGENTS injection region
 - 0.8 2026-09-13: injection source moved to the manifest — removed Checks, Usage, Inject, Attachments sections, md returned to pure documentation

package/payloads/personal/hot/PLUGIN.yaml

@@ -1,15 +1,15 @@
 id: hot
 schema_version: 1
-version: 0.10
+version: 0.11
 depends:
   - wiki
-updated: 2026-10-06
+updated: 2026-11-15
 attachment:
   - "wiki/hot.md — single-file hot cache"
 fields: {}
 inject: "Hot cache `wiki/hot.md`: recent-change digest (≤25 entries, <5 days, ≤200 chars per entry); agents read this page first on entering the repository; evict out-of-window entries before writing"
 usage:
-  - Writing entries (mechanical, automatic): `python .owfa/scripts/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
+  - Writing entries (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py hot <type> "<wikilink + one-sentence essence>"` (type value set same as log, see the log block of the AGENTS injection region); window eviction and truncation are performed by the script
 checks:
   - Window out of bounds (>25 entries / >5 days / >200 chars per entry) → run `pipeline.py hot <type> "<backfill>"` once, or wait for the next write to converge naturally then re-check
   - Contradiction with log (log has records while hot shows no trace) → warning

package/payloads/personal/index/PLUGIN.md

@@ -25,6 +25,7 @@
 
 ## Changelog
 
+- 0.15 2026-11-15: pipeline call path relocated to the suite package root (`.owfa/plugins/domains/personal/pipeline.py`) — derived-layer machinery travels with the suite (suite 0.1.1)
 - 0.14 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.13 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.12 2026-09-23: added the wiki dependency edge — inner-side plugins attach to wiki, aligning with the domain 0.1 declaration; omitted from the 2026-09-22 domain-ization batch
 - 0.11 2026-09-19: concept-page detection excluded wiki/tmp/ — the temporary zone stays out of indexes and tags, in step with the tmp plugin's establishment

package/payloads/personal/index/PLUGIN.yaml

@@ -1,10 +1,10 @@
 id: index
 schema_version: 1
-version: 0.14
+version: 0.15
 depends:
   - tag
   - wiki
-updated: 2026-11-09
+updated: 2026-11-15
 attachment:
   - "wiki/index.md — root index (always present; carries format_version; directly lists reachable pages)"
   - "Per-directory index.md — born of the overflow-offloading scheme (split out when a list overflows the window, disappearing on rebuild once merged back into the parent)"
@@ -12,7 +12,7 @@ attachment:
 fields: {}
 inject: "Index `wiki/index.md` (+ subtree index.md on overflow): derived, never hand-edited — rebuild via `pipeline.py index`; lists every reachable page by full path; the overflow cure is subdirectories; details PLUGIN.md"
 usage:
-  - Post-write rebuild (mechanical, automatic): `python .owfa/scripts/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
+  - Post-write rebuild (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py index` (index — overflow-offloading scheme, including deletion of obsolete old indexes after merge-back) and the same script's `tags` (tag reverse index); LLMs never hand-write indexes
 checks:
   - Deviation between indexes and the actual page set (including merged-back indexes pending deletion) → fixed by running `pipeline.py index` to rebuild (idempotent; no diff means consistent); same for tags (`pipeline.py tags`)
   - Traces of hand editing → warning

package/payloads/personal/log/PLUGIN.md

@@ -42,6 +42,7 @@ log.max_chars: 14000     # window character cap, approximate
 
 ## Changelog
 
+- 0.17 2026-11-15: pipeline call path relocated (suite 0.1.1); `usage_routes: [owfa-query]` added — the log projection in owfa-query's usage block is now manifest-backed
 - 0.16 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.15 2026-10-02: global-domain batch one — established the mandatory bridge, i.e. the recording bridge; domain bases must depend on it, kernel verifies completeness; entries gained the omissible `[domain]` tag; pipeline log gained the `--domain` parameter
 - 0.13 2026-09-23: added the wiki dependency edge — inner-side plugins attach to wiki, aligning with the domain 0.1 declaration; omitted from the 2026-09-22 domain-ization batch

package/payloads/personal/log/PLUGIN.yaml

@@ -1,18 +1,20 @@
 id: log
 schema_version: 1
-version: 0.16
+version: 0.17
 bridge: 必依
 depends:
   - wiki
-updated: 2026-11-09
+updated: 2026-11-15
 attachment:
   - "wiki/log.md — single-file operation journal (rolling window)"
   - "wiki/archive/YYYY-MM/log.md — archive spillover (immutable zone, grouped by entry month)"
   - "scripts/check.py — attached audit (entry date contract)"
 fields: {}
+usage_routes:
+  - owfa-query
 inject: "Run log `wiki/log.md`: prepend, never rewrite; entry = date + type (map/save/query/check/plugin/todo/profile/other) + optional [domain] + one sentence, written via `pipeline.py log`; >100 entries auto-archived; details PLUGIN.md"
 usage:
-  - Writing lines (mechanical, automatic): `python .owfa/scripts/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
+  - Writing lines (mechanical, automatic): `python .owfa/plugins/domains/personal/pipeline.py log <type> "<one sentence>" [--domain <domain>]` (type value set in the log block of the AGENTS injection region; domain tag = domain-plugin name such as bb/lark/vault, mandatory for in-domain transactions, omitted for framework and native transactions); rolling window and archiving are performed by the script
 checks:
   - Mechanical items (attached-audit script `scripts/check.py`, executed on audit discovery): undated entries (starting with `- ` yet not matching the date format, main file and archive checked alike) → error
   - Semantic items (check command): historical entries modified (verifiable via git) → error; capacity over the limit → re-check after mechanical archiving

package/payloads/personal/pipeline.py

@@ -0,0 +1,441 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+"""Derived-layer post-write pipeline: index / tags / hot / log / verify.
+
+Lives at the personal-suite package root since 0.1.1 (protocol machinery travels with
+the suite; the kernel never calls it). Instance path: .owfa/plugins/domains/personal/pipeline.py.
+The framework tree keeps a deprecated host copy until 0.5.0.
+
+Positioning (.owfa/protocol/actions.md execution principles): deterministic structural
+operations go to this script; semantic judgment goes to the LLM. Rebuild and rolling
+rules and window parameters are governed by this file's source (the script source is
+the rule list); PLUGIN.md keeps the semantic explanation; commands uniformly end by
+invoking this pipeline instead of hand-writing derived pages themselves. verify is
+post-write self-attestation (the minimal attester form): the LLM executes, the script
+certifies.
+
+Usage:
+  python .owfa/plugins/domains/personal/pipeline.py index  # canonical suite location (host shim: .owfa/scripts/pipeline.py, deprecated)
+  python .owfa/scripts/pipeline.py index              # deprecated host shim, retires in 0.5.0 (overflow-offloading scheme, idempotent; includes deleting surplus indexes after merging back)
+  python .owfa/scripts/pipeline.py tags               # rebuild wiki/tags.md (idempotent)
+  python .owfa/scripts/pipeline.py hot <type> <one-liner>   # evict out-of-window entries + prepend a hot-cache entry
+  python .owfa/scripts/pipeline.py log <type> <one-liner> [--domain domain]   # capacity archive + prepend a log line (domain tag optional — domainless transactions)
+  python .owfa/scripts/pipeline.py verify             # post-write self-attestation: attached audits + derived-area drift check
+
+Type enumeration: map / save / query / check / plugin / todo / profile / other (the log plugin).
+Concept-page determination (what enters the index): all .md under wiki/, excluding —
+reserved names (index.md, log.md), wiki-root derived pages (hot.md, tags.md), the
+archive/ subtree (immutable region, never rewritten by this script), and the tmp/
+subtree (temporary zone: invisible to the derived layer, no retention promise, see the
+tmp plugin). Index overflow-offloading scheme: a single index list holds at most
+INDEX_MAX_ENTRIES entries (page entries + directory entries); the root index always
+exists; on overflow, split off the subdirectories with the most pages (ties by name)
+into their own indexes until it fits; pure-function rebuild (same structure, same result).
+"""
+import datetime
+import os
+import re
+import subprocess
+import sys
+
+if hasattr(sys.stdout, "reconfigure"):
+    sys.stdout.reconfigure(encoding="utf-8")
+    sys.stderr.reconfigure(encoding="utf-8")
+
+# Location-adaptive bootstrap. Two legal hosts:
+#   suite install: <root>/.owfa/plugins/domains/personal/pipeline.py  (canonical since 0.1.1)
+#   framework host shim: <root>/.owfa/scripts/pipeline.py  (deprecated, retires in 0.5.0)
+_here = os.path.dirname(os.path.abspath(__file__))
+if os.path.basename(_here) == "scripts":
+    ROOT = os.path.dirname(os.path.dirname(_here))            # <root>/.owfa/scripts
+else:
+    ROOT = os.path.dirname(os.path.dirname(os.path.dirname(_here)))  # .../personal -> domains -> plugins -> .owfa -> root is one more up
+    ROOT = os.path.dirname(ROOT)
+sys.path.insert(0, os.path.join(ROOT, ".owfa", "scripts"))    # wikilib is a framework-level shared library
+sys.path.insert(0, _here)
+import wikilib
+WIKI = os.path.join(ROOT, "wiki")
+FORMAT_VERSION = "0.2"
+DESC_MAX = 80
+ROOT_RESERVED = {"hot.md", "tags.md"}  # wiki-root derived pages (log.md/index.md are reserved names, excluded uniformly)
+
+# rolling-window parameters (mechanical authoritative source for the hot / log plugins; PLUGIN.md keeps the semantic explanation)
+HOT_MAX_ENTRIES = 25
+HOT_MAX_DAYS = 5
+HOT_MAX_CHARS = 200
+LOG_MAX_ENTRIES = 100
+INDEX_MAX_ENTRIES = 25  # single index-list window (page entries + directory entries; overflow-offloading split basis)
+TYPE_ORDER = ["map", "save", "query", "check", "plugin", "todo", "profile", "other"]
+HOT_HEADER = ("# 热缓存\n\n> 最近变更摘要；≤25 条且 <5 日，窗外即删；可整体再生。"
+              "规则见 `.owfa/plugins/domains/personal/hot/`，写走 `pipeline.py hot`。\n")
+LOG_HEADER = ("# 运行日志\n\n> 置顶追加、只增不删；条目 = `- YYYY-MM-DD <类型> [<域>]：一句话`（域标可缺省——无域事务，log 桥）。"
+              "规则见 `.owfa/plugins/domains/personal/log/`，写走 `pipeline.py log`。\n")
+DATE_RE = re.compile(r"^- (\d{4}-\d{2}-\d{2}) ")
+
+
+def _today():
+    return datetime.date.today().isoformat()
+
+
+# ---------- concept pages and index / tags ----------
+
+def _cut(text):
+    return text if len(text) <= DESC_MAX else text[: DESC_MAX - 1] + "…"
+
+
+def _desc(fm, body):
+    d = fm.get("description")
+    if d:
+        return _cut(str(d))
+    for line in body.splitlines():
+        t = line.strip()
+        if t and not t.startswith(("#", ">", "|", "```")):
+            return _cut(t)
+    return "（无描述）"
+
+
+def concept_pages():
+    """[(page full name = path minus .md, containing dir, frontmatter, description)], sorted by full name."""
+    out = []
+    for rel, fm, body in wikilib.walk_pages(ROOT):
+        d, _, fn = rel.rpartition("/")
+        if fn in ("index.md", "log.md"):
+            continue  # reserved names: not concept pages
+        if d == "" and fn in ROOT_RESERVED:
+            continue
+        if rel.startswith("archive/") or d.startswith("archive/") or d == "archive":
+            continue
+        if rel.startswith("tmp/") or d.startswith("tmp/") or d == "tmp":
+            continue  # temporary zone: invisible to the derived layer
+        out.append((rel[:-3], d, fm, _desc(fm, body)))
+    return sorted(out)
+
+
+def all_dirs(pages):
+    """The set of directories under wiki/ that should get an index (including empty ones; excluding the archive/ subtree)."""
+    dirs = {""}
+    for _, d, _, _ in pages:
+        parts = d.split("/") if d else []
+        for i in range(len(parts) + 1):
+            dirs.add("/".join(parts[:i]))
+    for dirpath, subdirs, _files in os.walk(WIKI):
+        if "archive" in subdirs:
+            subdirs.remove("archive")  # do not descend into the immutable region
+        if "tmp" in subdirs:
+            subdirs.remove("tmp")  # no index for the temporary zone
+        rel = os.path.relpath(dirpath, WIKI).replace(os.sep, "/")
+        dirs.add("" if rel == "." else rel)
+    return dirs
+
+
+def subdirs_of(d, dirs):
+    """Direct subdirectory names of d (sorted)."""
+    prefix = d + "/" if d else ""
+    depth = d.count("/") + 1 if d else 0
+    return sorted(x[len(prefix):] for x in dirs
+                  if x != d and x.startswith(prefix) and x.count("/") == depth)
+
+
+def _count_subtree(full, pages):
+    return sum(1 for name, d, _, _ in pages if d == full or d.startswith(full + "/"))
+
+
+def plan_index_dirs(pages, dirs):
+    """Overflow-offloading plan: returns the set of directories that should get an index.md (the root always present).
+
+    A directory's list = its own concept pages + pages of un-split subtrees (transparent
+    inlining) + directory entry lines; on overflow, split off the subdirectories with the
+    most pages (ties by name) into their own indexes until it fits. A split saves at least
+    S-1 lines, so a subdirectory with S<2 is never split; an empty subtree (S=0) costs
+    one inline line (the visibility line). Pure function: same structure guarantees the
+    same result, no historical state.
+    """
+    own = {}
+    for _, d, _, _ in pages:
+        own[d] = own.get(d, 0) + 1
+
+    planned = set()
+
+    def plan(d):
+        planned.add(d)
+        kids = subdirs_of(d, dirs)
+        sizes = {c: _count_subtree((d + "/" + c) if d else c, pages) for c in kids}
+        total = own.get(d, 0) + sum(s if s > 0 else 1 for s in sizes.values())
+        if total <= INDEX_MAX_ENTRIES:
+            return
+        for c in sorted((k for k in kids if sizes[k] >= 2),
+                        key=lambda c: (-sizes[c], c)):
+            if total <= INDEX_MAX_ENTRIES:
+                break
+            plan((d + "/" + c) if d else c)
+            total -= sizes[c] - 1
+
+    plan("")
+    return planned
+
+
+def visible_pages(d, pages, planned):
+    """Pages listed directly in d's index: this directory's pages + all descendant pages whose path crosses no split directory (transparent inlining)."""
+    pre = d + "/" if d else ""
+    out = []
+    for name, dd, fm, desc in pages:
+        if dd == d:
+            out.append((name, fm, desc))
+        elif dd.startswith(pre):
+            parts = dd[len(pre):].split("/")
+            if all((pre + "/".join(parts[:i])) not in planned for i in range(1, len(parts) + 1)):
+                out.append((name, fm, desc))
+    return out
+
+
+def render_index(d, pages, dirs, planned):
+    """Full text of directory d's index.md (overflow-offloading scheme: reachable pages listed directly; split subdirectories as entry lines)."""
+    is_root = d == ""
+    lines = []
+    if is_root:
+        lines += ["---", f"format_version: {FORMAT_VERSION}", "---", ""]
+    lines.append("# 索引" if is_root else f"# {d.rsplit('/', 1)[-1]} 索引")
+    lines.append("")
+    tip = ("溢出减负：本页直列可达页面；清单超窗时子目录自立索引（入口行带页数），下钻读之。"
+           if is_root else "本目录索引：直列未切子树页面，已切子目录见入口行。")
+    lines.append(f"> {tip}只聚合、永不手编，由 index 插件经 `pipeline.py index` 重建。")
+    lines.append("")
+    entries = []
+    for s in subdirs_of(d, dirs):
+        full = (d + "/" + s) if d else s
+        n = _count_subtree(full, pages)
+        if full in planned:
+            entries.append(f"- [[{full}/index|{s}/]]（{n} 页）")
+        elif n == 0:
+            entries.append(f"- {s}/（0 页）")  # empty-subtree visibility line: no index to link, excluded from the broken-link graph
+    if entries:
+        lines += ["## 子目录", ""] + entries + [""]
+    groups = {}
+    for name, fm, desc in visible_pages(d, pages, planned):
+        groups.setdefault(str(fm.get("type") or "未分类"), []).append((name, desc))
+    for t in sorted(groups):
+        lines.append(f"## {t}")
+        lines.append("")
+        for name, desc in sorted(groups[t]):
+            lines.append(f"- [[{name}]] —— {desc}")
+        lines.append("")
+    if not entries and not groups:
+        lines.append("（暂无页面）")
+        lines.append("")
+    return "\n".join(lines).rstrip() + "\n"
+
+
+def render_tags(pages):
+    tag_map = {}
+    for name, d, fm, _ in pages:
+        tags = fm.get("tags")
+        if tags is None:
+            continue
+        if not isinstance(tags, list):
+            tags = [tags]
+        for t in tags:
+            tag_map.setdefault(str(t), []).append(name)
+    lines = ["# tag 索引", "",
+             "> tag → 页面反向索引；只聚合、永不手编，由 index 插件经 `pipeline.py tags` 重建。", ""]
+    if not tag_map:
+        lines.append("（暂无）")
+        lines.append("")
+    for t in sorted(tag_map):
+        lines.append(f"## {t}")
+        lines.append("")
+        for name in sorted(tag_map[t]):
+            lines.append(f"- [[{name}]]")
+        lines.append("")
+    return "\n".join(lines).rstrip() + "\n"
+
+
+def index_targets():
+    pages = concept_pages()
+    dirs = all_dirs(pages)
+    planned = plan_index_dirs(pages, dirs)
+    targets = {(d + "/" if d else "") + "index.md": render_index(d, pages, dirs, planned)
+               for d in planned}
+    return planned, targets
+
+
+def write_changed(path, content):
+    if os.path.exists(path) and open(path, encoding="utf-8").read() == content:
+        return False
+    os.makedirs(os.path.dirname(path), exist_ok=True)
+    open(path, "w", encoding="utf-8", newline="\n").write(content)
+    return True
+
+
+def do_index(check_only=False):
+    _, targets = index_targets()
+    drift, changed = [], 0
+    for rel, content in sorted(targets.items()):
+        path = os.path.join(WIKI, rel)
+        cur = open(path, encoding="utf-8").read() if os.path.exists(path) else None
+        if cur == content:
+            continue
+        if check_only:
+            drift.append(rel)
+        elif write_changed(path, content):
+            changed += 1
+            print(f"[index] rebuilt wiki/{rel}")
+    # unplanned index.md files (old indexes after offloading merges back): delete / report drift; archive/ and tmp/ subtrees untouched
+    for dirpath, subdirs, files in os.walk(WIKI):
+        if "archive" in subdirs:
+            subdirs.remove("archive")  # do not descend into the immutable region
+        if "tmp" in subdirs:
+            subdirs.remove("tmp")  # the temporary zone is outside this pipeline's jurisdiction
+        if "index.md" not in files:
+            continue
+        rel = os.path.relpath(os.path.join(dirpath, "index.md"), WIKI).replace(os.sep, "/")
+        if rel not in targets:
+            if check_only:
+                drift.append(rel)
+            else:
+                os.remove(os.path.join(WIKI, rel))
+                changed += 1
+                print(f"[index] removed wiki/{rel} (merged back into parent)")
+    if not check_only:
+        print(f"[index] done, {changed} file(s) changed (idempotent)")
+    return drift
+
+
+def do_tags(check_only=False):
+    path = os.path.join(WIKI, "tags.md")
+    content = render_tags(concept_pages())
+    cur = open(path, encoding="utf-8").read() if os.path.exists(path) else None
+    if cur == content:
+        if not check_only:
+            print("[tags] unchanged")
+        return []
+    if check_only:
+        return ["tags.md"]
+    write_changed(path, content)
+    print("[tags] rebuilt wiki/tags.md")
+    return []
+
+
+# ---------- hot / log rolling ----------
+
+def do_hot(kind, text):
+    if kind not in TYPE_ORDER:
+        print(f"[hot] type must be one of {'/'.join(TYPE_ORDER)} (got {kind})")
+        return False
+    entry = f"- {_today()} {text}"[:HOT_MAX_CHARS]
+    # collect existing entries (with section membership), mechanically evict out-of-window ones
+    sections = {t: [] for t in TYPE_ORDER}
+    hot_path = os.path.join(WIKI, "hot.md")
+    if os.path.exists(hot_path):
+        cur = None
+        for raw in open(hot_path, encoding="utf-8").read().splitlines():
+            m = re.match(r"^##\s*Recent (\S+)", raw)
+            if m and m.group(1) in TYPE_ORDER:
+                cur = m.group(1)
+                continue
+            dm = DATE_RE.match(raw)
+            if dm and cur:
+                if (datetime.date.today() - datetime.date.fromisoformat(dm.group(1))).days < HOT_MAX_DAYS:
+                    sections[cur].append(raw[:HOT_MAX_CHARS])
+    sections[kind].insert(0, entry)  # prepend
+    flat = [e for t in TYPE_ORDER for e in sections[t]]
+    if len(flat) > HOT_MAX_ENTRIES:  # overall overflow: keep the 25 most recent by date uniformly (stable sort, same-day keeps section order)
+        keep = set(sorted(flat, key=lambda e: e[2:12], reverse=True)[:HOT_MAX_ENTRIES])
+        for t in TYPE_ORDER:
+            sections[t] = [e for e in sections[t] if e in keep]
+    body = [HOT_HEADER.rstrip()]
+    any_entry = False
+    for t in TYPE_ORDER:
+        if not sections[t]:
+            continue
+        any_entry = True
+        body += ["", f"## Recent {t}", ""] + sections[t]
+    if not any_entry:
+        body += ["", "（暂无）"]
+    write_changed(hot_path, "\n".join(body) + "\n")
+    print(f"[hot] written ({kind}), {min(len(flat), HOT_MAX_ENTRIES)} entries")
+    return True
+
+
+def _split_domain(args):
+    """Extract --domain <domain> / --domain=<domain> from the argument list (the log bridge's domain tag); the remaining args are returned in order."""
+    dom, rest, i = None, [], 0
+    while i < len(args):
+        if args[i] == "--domain" and i + 1 < len(args):
+            dom = args[i + 1]
+            i += 2
+            continue
+        if args[i].startswith("--domain="):
+            dom = args[i].split("=", 1)[1]
+            i += 1
+            continue
+        rest.append(args[i])
+        i += 1
+    return dom, rest
+
+
+def do_log(kind, text, domain=None):
+    if kind not in TYPE_ORDER:
+        print(f"[log] type must be one of {'/'.join(TYPE_ORDER)} (got {kind})")
+        return False
+    log_path = os.path.join(WIKI, "log.md")
+    entries = []
+    if os.path.exists(log_path):
+        for raw in open(log_path, encoding="utf-8").read().splitlines():
+            if DATE_RE.match(raw):
+                entries.append(raw)
+    tag = f" [{domain}]" if domain else ""
+    entries.insert(0, f"- {_today()} {kind}{tag}：{text}")  # prepend; existing entries are never rewritten
+    overflow = entries[LOG_MAX_ENTRIES:]
+    if overflow:  # window overflow: the oldest stretch is grouped by entry month into archive/<month>/log.md (position move only)
+        for month in sorted({e[2:9] for e in overflow}):
+            moved = [e for e in overflow if e[2:9] == month]
+            adir = os.path.join(WIKI, "archive", month)
+            apath = os.path.join(adir, "log.md")
+            old = open(apath, encoding="utf-8").read() if os.path.exists(apath) else f"# 归档 {month}\n"
+            write_changed(apath, old.rstrip() + "\n" + "\n".join(moved) + "\n")
+            print(f"[log] archived {len(moved)} entries to wiki/archive/{month}/log.md")
+    write_changed(log_path, LOG_HEADER + "\n" + "\n".join(entries[:LOG_MAX_ENTRIES]) + "\n")
+    print(f"[log] written ({kind}), main file {min(len(entries), LOG_MAX_ENTRIES)} entries")
+    return True
+
+
+# ---------- post-write self-attestation ----------
+
+def do_verify():
+    ok = True
+    r = subprocess.run(
+        [sys.executable, os.path.join(ROOT, ".owfa", "scripts", "owfa_kernel.py"), "audit"])
+    if r.returncode != 0:
+        ok = False
+        print("[verify] plugin audit has errors")
+    drift = do_index(check_only=True) + do_tags(check_only=True)
+    if drift:
+        ok = False
+        print("[verify] derived drift: " + ", ".join("wiki/" + d for d in drift) + " (run pipeline.py index / tags to fix)")
+    else:
+        print("[verify] derived area consistent")
+    print("[verify] " + ("passed" if ok else "failed"))
+    return 0 if ok else 1
+
+
+def main():
+    cmd = sys.argv[1] if len(sys.argv) > 1 else ""
+    if cmd == "index":
+        do_index()
+        return 0
+    if cmd == "tags":
+        do_tags()
+        return 0
+    if cmd == "hot":
+        return 0 if do_hot(sys.argv[2], " ".join(sys.argv[3:])) else 1
+    if cmd == "log":
+        dom, rest = _split_domain(sys.argv[3:])
+        return 0 if do_log(sys.argv[2], " ".join(rest), domain=dom) else 1
+    if cmd == "verify":
+        return do_verify()
+    print(__doc__)
+    return 2
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/payloads/personal/sessions/PLUGIN.md

@@ -52,6 +52,7 @@ The performance budget for volumetric fog on low-end machines?
 
 ## Changelog
 
+- 0.11 2026-11-15: manifest path fix — `.owfa/plugins/sessions/` → `.owfa/plugins/domains/personal/sessions/` (stale pre-split deployment path)
 - 0.10 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.9 2026-09-23: added the wiki dependency edge — inner plugins attach to wiki, aligning with the domain 0.1 declaration; missed in the 2026-09-22 domainization batch
 - 0.8 2026-09-13: made the usage sample pointer explicit — added the `.owfa/plugins/sessions/PLUGIN.md` path, zero priors

package/payloads/personal/sessions/PLUGIN.yaml

@@ -1,9 +1,9 @@
 id: sessions
 schema_version: 1
-version: 0.10
+version: 0.11
 depends:
   - wiki
-updated: 2026-11-09
+updated: 2026-11-15
 attachment:
   - "wiki/sessions/ — native sessions zone, session-type backbone pages"
 fields:
@@ -13,7 +13,7 @@ commands:
 inject: "Native sessions `wiki/sessions/`: session backbone pages (`type: session`, `participants` required, named YYYY-MM-DD-<topic>); high-value topics promoted to `wiki/notes/` with a back-link; commands append, never modify"
 usage:
   - Landing spot `wiki/sessions/YYYY-MM-DD-<topic>.md` (default naming), type: session, participants required (actor list)
-  - Backbone page five-section shape: Core Conclusions / Decisions & Rationale / Non-obvious Insights / Open Questions / Related Pages (full-shape sample in the Example section of `.owfa/plugins/sessions/PLUGIN.md`)
+  - Backbone page five-section shape: Core Conclusions / Decisions & Rationale / Non-obvious Insights / Open Questions / Related Pages (full-shape sample in the Example section of `.owfa/plugins/domains/personal/sessions/PLUGIN.md`)
   - Standalone high-value topics promoted to `wiki/notes/` pages, the backbone page keeping a wikilink; dedupe before promotion
 checks:
   - Mechanical (covered by audit): session-type pages outside `wiki/sessions/` (or the reverse) → warning; participants missing or entries violating the actor convention → warning

package/payloads/personal/tmp/PLUGIN.md

@@ -24,4 +24,5 @@
 ## Changelog
 
 - 0.4 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
-- 0.3 (2026-10-06) inject line: code formatting restored on the territory path (issue #12 post-migration nit)- 0.2 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.1 2026-09-19: established — path-as-territory, invisible to the derived layer, stale_after cleanup prompts, delete upon promotion
+- 0.3 (2026-10-06) inject line: code formatting restored on the territory path (issue #12 post-migration nit)
+- 0.2 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.1 2026-09-19: established — path-as-territory, invisible to the derived layer, stale_after cleanup prompts, delete upon promotion

package/payloads/personal/user-profile/PLUGIN.md

@@ -35,7 +35,8 @@ The cognition bridge: the global profile's extension point toward domain-level c
 
 - 0.8 2026-11-12: contract-had-no-enforcement fix — mechanical checks (wrong-territory error / page-absent info) landed as the attached-audit script scripts/check.py, closing the gap between the declared checks and execution
 - 0.7 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
-- 0.6 (2026-10-06) inject line: sections lost to the kernel comment-strip clip restored (quoted values are now protected), tightened for budget headroom — issue #12 post-migration nit- 0.5 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.4 2026-10-02: global-domain batch three — established the cognition bridge, on-demand: the profile body `## Domain Cognition` registration section, aggregate-don't-copy, read-first discipline; bb-track user.md the first registration; the mapping edge removed — under the bridge law it reached domain via the vault chain, causing a global plugin to be misjudged, caught by an actual kernel test; the 'hanging edges are harmless' premise failed
+- 0.6 (2026-10-06) inject line: sections lost to the kernel comment-strip clip restored (quoted values are now protected), tightened for budget headroom — issue #12 post-migration nit
+- 0.5 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.4 2026-10-02: global-domain batch three — established the cognition bridge, on-demand: the profile body `## Domain Cognition` registration section, aggregate-don't-copy, read-first discipline; bb-track user.md the first registration; the mapping edge removed — under the bridge law it reached domain via the vault chain, causing a global plugin to be misjudged, caught by an actual kernel test; the 'hanging edges are harmless' premise failed
 - 0.3 2026-09-29: profile command established — the write side shed its parasitism on the map and save dual entry points, both commands' consumes entries removed; the evidence domain opened to any page inside wiki, dissolving the cross-domain ownership suspension; first creation self-builds on trigger, absorbing the profile part of the pending initialization items; tags explicitly not applied; depends kept, ruling: reference-level edges retained, not cut
 - 0.2 2026-09-14: usage added the profile distillation methodology — signal criteria, layered placement, assertions concrete and verifiable; the executable part of the distillation entered the write-side contract, closing the SASU-L disclosure loop: an agent running map or save knows how to distill, without relying on model priors; the full text remains in `docs/research-user-profile.md`
 - 0.1 2026-09-13: established — `wiki/profile.md` convergence-style cognition profile, type: profile entered the registry value set; depends were wiki, trust, mapping, sessions; dual signal channels hung on save and map, consumes inserted after trust and before derivation; three checks — the assertion evidence gate as warning, wrong territory as error, page absence as info-level