v1.4.0: Audit Fixes, Multi-Agent Compatibility, Bases Dashboard
External audit (compass artifact, 21 sources) flagged 8 actionable items against current best practices for Agent Skills, Claude Code hooks, Obsidian v1.9 to v1.12, and JSON Canvas 1.0. This release addresses all of them and adds multi-agent compatibility files at zero cost to existing users.
Audit score: 6.5/10, target 8/10 after this release.
Security Note
This release also scrubs a placeholder email reference from marketplace.json and supporting docs, and rewrites git history to remove it from all prior commits. The owner field in marketplace.json now uses the GitHub profile URL instead of an email.
Tier 1: Critical Fixes
Dataview to Bases Dashboard
- NEW
wiki/meta/dashboard.base: native Obsidian Bases dashboard with 6 views (Recent Activity, Seed Pages, Entities Missing Sources, Open Questions, Comparisons, Sources). Works in Obsidian v1.9.10+ with zero plugin install. wiki/meta/dashboard.md: now embeds the Bases file as primary. Legacy Dataview queries retained as optional fallback for older Obsidian versions.README.mdandskills/wiki/references/plugins.md: Plugins section reorganized. Bases (core, no install) is now primary, Dataview marked optional/legacy.
Canvas Spec Completeness
skills/canvas/references/canvas-spec.md updated with previously missing JSON Canvas 1.0 fields:
- Group nodes:
backgroundandbackgroundStyle(cover/ratio/repeat) - Edges:
fromEnd(default"none") andtoEnd(default"arrow"). Asymmetric defaults that produce a single arrow without explicit specification. - Hex ID format documented as the official JSON Canvas convention alongside the descriptive ID alternative.
Version Alignment
Bumped from 1.3.0 to 1.4.0 to keep plugin.json in lockstep with the GitHub release tag (v1.4.0).
Tier 2: Important Improvements
Hooks Hardening + PostCompact
hooks/hooks.json:
- SessionStart now uses both
commandandprompttypes. The command type runs[ -f wiki/hot.md ] && cat wiki/hot.md || trueas the canonical safety check. Works in non-vault sessions without erroring. Matcher:startup|resume. - NEW PostCompact hook re-injects
wiki/hot.mdafter context compaction. Hook-injected context does NOT survive compaction (onlyCLAUDE.mddoes), so this restores the hot cache mid-session. - PostToolUse auto-commit now guarded by
[ -d .git ]so it never errors in non-git directories. - NEW
hooks/README.mddocuments all hooks plus the known plugin-hooks STDOUT bug (anthropics/claude-code#10875) and workarounds.
MCP Setup Updated
skills/wiki/references/mcp-setup.md:
- NEW Option D: Obsidian CLI (v1.12+). No MCP server, no plugins, no TLS workarounds. Recommended for new installs.
> [!warning]callout above theNODE_TLS_REJECT_UNAUTHORIZED: "0"line explaining the process-wide TLS bypass and pointing users to Option D as the secure alternative.
Custom Callouts Documented
skills/wiki-ingest/SKILL.md: explicit note that[!contradiction]is a custom callout requiringvault-colors.css.skills/wiki/references/css-snippets.md: full documentation of all four custom callouts (contradiction,gap,key-insight,stale) with their colors, icons, use cases, and built-in fallback equivalents.
Tier 3: Multi-Agent Compatibility
The plugin now ships with bootstrap files for 6 AI agents at zero compatibility cost. Skills are already in the cross-platform Agent Skills format (only name + description in frontmatter, matching the kepano/obsidian-skills convention).
| File | For |
|---|---|
AGENTS.md |
Codex CLI, OpenCode |
GEMINI.md |
Gemini CLI, Antigravity |
.cursor/rules/claude-obsidian.mdc |
Cursor (always-on rules) |
.windsurf/rules/claude-obsidian.md |
Windsurf Cascade |
.github/copilot-instructions.md |
GitHub Copilot |
bin/setup-multi-agent.sh |
Idempotent symlink installer |
Run once to wire up the skills directory in every agent's expected location:
bash bin/setup-multi-agent.shStyle Cleanup
Scrubbed all em dashes from every skill, hook, doc, and bootstrap file (249 total replacements across 26 files). Skills now use periods, commas, and colons throughout for cleaner natural prose.
Already Resolved in v1.1 (audit was outdated)
For completeness, these audit findings were already addressed in v1.1:
- defuddle, obsidian-bases, obsidian-markdown skills shipped
- URL ingestion, vision ingestion, delta tracking documented in wiki-ingest
- Multi-depth wiki-query (Quick / Standard / Deep modes)
- PostToolUse auto-commit hook
- Invalid
allowed-toolsfield removed from all SKILL.md files - All templates use plural
tags/aliases(Obsidian v1.9.10+ requirement) - Custom callouts CSS already in
.obsidian/snippets/vault-colors.css
Deferred to v1.5.0
/adoptcommand (import existing vaults)- Vault graph analysis enhancement to wiki-lint
- Semantic search via qmd MCP server
- Marp slide output
Verification
After upgrading:
- Open
wiki/meta/dashboard.basein Obsidian. Confirm the table view renders. - Disable Dataview plugin. Confirm the Bases dashboard still works.
- Open Claude Code in a non-vault directory. SessionStart hook should not error.
- Run
bash bin/setup-multi-agent.sh. Symlinks created in~/.codex/skills/, etc. - Edit any wiki page. Auto-commit hook fires.