Bundle detection for the sidecar convention. A top-level knowledge_bundle/ with its own index.md, in a vault whose root index.md carries no LOKF header, becomes the bundle root with nothing configured. A vault whose root index.md is itself a header stays the whole-vault bundle it always was.
The Diátaxis map is a record the registrar accepts.diataxis.md now carries a type: Document header with a minted id and generated provenance naming the plugin; without one, lokf validate aborted the whole run. An older headerless map gains a header on its next refresh.
Semantic release. The version is computed from Conventional Commits on main, and CHANGELOG.md’s ## [Unreleased] section is promoted into a dated heading and used as the release notes; manifest.json, package.json and versions.json bump as they always did. The resulting tag runs the same build, attestation and draft release as before, and a hand-pushed tag still does too. See CONTRIBUTING.md.
Changed
Renamed KTL Registrar - id ktl-registrar, repository obsidian-ktl-registrar - for the role the READMEs already gave it, and to stop shadowing an unrelated community plugin one letter away. Nothing was published under the old name, so there is no migration: settings live in .obsidian/plugins/ktl-registrar/ and the read-only API at app.plugins.plugins["ktl-registrar"].api. A diataxis.md map stamped by an earlier build is still recognised as this plugin’s own.
A dot-folder bundle root is accepted, not refused - a community plugin can expose one to Obsidian’s index. The scan checks the live index first and explains an absent root instead of assuming.
“How this fits” rewritten around one desk that is always the person’s: this plugin is the registrar there, KTL Curator the curator’s assistant. It covers both ways of reaching a bundle - the doorway opened as its own vault, or a real knowledge_bundle/ folder inside your own vault - and names the vault the workshop, the bundle the exhibition.
The frozen template fixture is now scripts/fixtures/sidecar-skeleton/, named for the upstream ktl-sidecar skill.
Removed
The Alternative OKF validator settings group, its community-plugin deep link and its one-time notice, now that the OKF v0.2 base layer is checked here directly. A saved recommendOkfValidator / okfValidatorNoticeShown is ignored.
OKF v0.2 base layer (checkOkfBaseLayer, on by default): checks the plain-OKF v0.2 rules LOKF subsumes (required type, Attested Computation shape, index.md/log.md structure, v0.1→v0.2 migration hints), so a bundle stays checkable without a separate OKF validator. Severity follows the spec (REQUIRED/MUST → error); a settings toggle can downgrade those to warnings mid-migration.
Look up a LOKF field (command): searchable reference of frontmatter fields, sourced from the schema’s own slot definitions so wording never forks.
Generate Obsidian affordances: three commands projecting LOKF facts into Obsidian conventions - #genre tags and ## Related wikilinks in a managed block, plus a diataxis.md Map of Content. Idempotent, marker-delimited.
Inline diagnostics: CodeMirror 6 extension underlines offending frontmatter values (wavy red/amber) with the finding on hover.
Jump-to-line from the report: finding rows are clickable, opening the note with the cursor on the offending key.
Key anchors on findings: new src/locator.ts maps a key path to its line/column in raw frontmatter (prerequisite for underlines/jump).
Incremental re-validation: editing a note re-checks just that note from the metadata cache instead of a full rescan.
Schema-derived vocabulary manifest (src/lokf-vocab.json, npm run build-vocab): default type/predicate/genre vocabulary now derives from the LOKF schema, adding Role and the full 15-value RelationType.
Concept graph + quick-switcher: in-memory index of each concept’s type/id/relations, plus “Find a concept” and “Find an orphan concept” commands.
Trust/lifecycle shape checks (OKF v0.2 §5): validates the shape of verified/generated, status, stale_after, sources - never their credibility depth. All warnings, on by default.
Frontmatter value autocomplete: EditorSuggest for type/genre/status/predicate values and relation targets.
Safe quick-fixes (command + vault-wide variant): applies deterministic corrections (missing base_iri terminator, type aliases, bare-string relations) in one undo step; never guesses owned values.
Promote body links to typed relations (command): guesses a typed relation for body links resolving to another concept, confirmed via a review dialog before writing.
Per-note opt-out: lokf: ignore frontmatter key silences a note while it stays a concept in the graph.
Disable on this device: device-local switch (never synced) that silences the plugin entirely on one device.
Per-rule severity escalation: settings list of rule ids whose warnings become errors; escalation only, never downgrades.
Report context menu, finding grouping, render caps: right-click actions, grouping by top-level key, and a 300-file/100-finding-per-file cap with a filter hint.
Ribbon icon to open the report; last scan is retained across reopens.
Read-only public API at app.plugins.plugins["ktl-registrar"].api: getReport(), validatePath(path), onValidated(cb).
Field aliasing (advanced, off by default): user=canonical pairs rename a vault’s own keys onto LOKF ones before validation.
Node-tested throughout: locator, vocabulary manifest, concept graph, §5 checks, autocomplete, safe fixes, body-link promotion, opt-out, severity escalation, report filter, grouping, and field aliasing all carry smoke-test coverage.
Changed
Severity icons in the report via setIcon instead of spelled-out words.
Keyboard-operable collapse/expand in the report (role="button", aria-expanded, Enter/Space, focus ring).
Aligned three rules with upstream LOKF PR #69: base_iri may end in #; the by actor check matches the schema’s exact pattern; http_method is no longer a recommended-field warning on a Service.
@codemirror/state/@codemirror/view moved to devDependencies (types only; external at runtime).
tsconfig.json enables resolveJsonModule for the bundled vocabulary manifest.
Bundle root folders: a vault can hold several independent bundles as sibling project folders instead of one bundle per vault; a misconfigured root is reported rather than silently producing an empty “clean” bundle.
Scaffold command targets the active note’s bundle, asking when several are configured and none is open.
Settings shortcut to install OKF Enforcer from the community-plugin browser.
Unit tests for bundle-resolution logic, extracted into plain Obsidian-free functions.
Golden-fixture bundle checks in npm run smoke-test against a frozen scaffolding template and this repo’s own .lokf/knowledge/.
This repo’s .lokf/knowledge/ bundle is now maintained by lokf-agent-skills installed at run time rather than committed.
Type-vocabulary lookups are cached instead of rebuilt per note.
Renamed knowledge-validate.yaml to knowledge-registrar.yaml, matching upstream lokf-agent-skills v0.12.0; cross-references updated across docs.
SECURITY.md now inventories every workflow and the librarian’s privilege split.
.markdownlint-cli2.jsonc disables MD060 (padded-header/bare-separator tables used throughout this repo).
Fixed
An unreadable note was silently dropped mid-scan yet still counted as “scanned”; now gets its own report row and separate count.
An unreadable root index.md no longer aborts an entire scan; scaffold command refuses to write when it can’t read the file first.
The knowledge-librarian’s prompt-building script executed part of its own prompt as shell commands due to an unescaped heredoc; re-scaffolded.
.lokf/knowledge/ drift: two concepts described a nonexistent command, one misattributed scan batching to the wrong file.
A stale, frontmatter-free planning doc under .lokf/knowledge/ crashed lokf validate for the whole bundle; removed.
LOFK -> LOKF transposition fixed in manifest.json, package.json, and community-plugin-entry.json.
A folder in Excluded folders written with a trailing/leading slash, whitespace, or ./ prefix silently excluded nothing; now normalized like Bundle root folders.
Base_iri authority check compared URL.host (includes :port) against the denylist, so a ported hostname bypassed it; now compares hostname.
A relation field written as a bare scalar instead of a list passed validation clean even though the schema requires an array; now warned.
type set to a number, boolean, list, or mapping produced no finding at all; a list/mapping now gets its own shape warning.
Validate active note went completely silent when run on an excluded or out-of-bundle note; now always produces a Notice.
The report panel’s “N clean” count undercounted by subtracting bundle-level findings that were never scanned files to begin with.
Various markdownlint fixes (MD060 tables, MD001 heading skip, MD032 spaced-dash-as-list-item).
Security
release.yml passes the pushed tag through the environment instead of interpolating it into a shell command, closing a script-injection path.
knowledge-librarian.yaml no longer runs a repository variable’s content as a shell command; runs a pinned wrapper script and fails if the agent writes outside .lokf/knowledge/.
knowledge-librarian.yaml split into two jobs so the agent and the write-scoped token never meet: refresh (read-only, third-party code) hands a patch artifact to publish (no agent code, holds write access). Ported from lokf-agent-skills v0.11.0.
knowledge-librarian.sh parses AGENT_CLI into a quoted argv array instead of expanding it unquoted, closing a shell-injection path (SC2086).
The scheduled librarian run is armed by a dedicated KNOWLEDGE_LIBRARIAN_ENABLED repository variable rather than inferred from AGENT_CLI being set.
Validates the LOKF semantic layer on top of OKF v0.2: bundle-root header, base_iri checks, the type vocabulary, typed relationships, and id/IRI-minting consistency.
Vault-wide scan with a status-bar indicator and a side-panel report.
Declarative settings (Obsidian 1.13.0+).
Standard obsidian-sample-plugin tooling: esbuild, strict TypeScript, ESLint, a Node 20/22/24 CI matrix, and attested draft GitHub releases.
