0.2.3

Patch release: correct minAppVersion floor.

Fix

• minAppVersion raised from 1.8.0 → 1.8.7. The Obsidian community-plugin lint flagged Notice.messageEl as newer than 1.8.0; the API was actually added in 1.8.7 (per the @since tag in obsidian-api).

No behavior changes — purely a manifest correction.

Supply chain

Release artifacts carry a signed SLSA build-provenance attestation. Verify with:

gh attestation verify main.js -R J3F3H/sillage

0.2.2

Patch release covering a second pass of the Obsidian community-plugin review.

Fixes

• Top-level settings heading removed. The previous "Sillage settings" heading was flagged for containing both the plugin name and the word "settings" — both are redundant since Obsidian already labels the settings tab with the plugin name.
• minAppVersion raised to 1.8.0 so that Notice.messageEl (used by the cancel-on-click handler in one-shot note commands) lines up with the declared minimum.

Supply chain

• Release artifacts (main.js, styles.css) carry a signed SLSA build-provenance attestation as in 0.2.1. Verify with:

  gh attestation verify main.js -R J3F3H/sillage

Upgrading from 0.2.1 is purely a metadata + cosmetic update; no behavior changes.

0.2.1

Hardening release driven by the Obsidian community-plugin review. No new features; the Reload skills command is the only user-visible addition.

User-facing

• Skill auto-discovery now subscribes to Obsidian vault events instead of fs.watch. Cross-platform (works on Linux), no more fs.watch({recursive:true}) limitation. Added a Reload skills command as an explicit fallback for vaults where .agents/ isn't indexed.
• minAppVersion raised to 1.7.2 so the awaited Workspace.revealLeaf signature matches the running Obsidian.

Internals / review fixes

• Command id no longer carries the redundant sillage- prefix.
• Settings heading rendered via new Setting().setHeading() instead of a raw <h2>.
• Notice click target switched from deprecated noticeEl to messageEl.
• All setTimeout/clearTimeout calls routed through window.* for popout-window compatibility.
• MarkdownRenderer.render is now tied to the chat view's component lifecycle (was leaking under the plugin's lifetime).
• Floating Promise<void> calls in event handlers explicitly voided.
• Subprocess data callbacks and vibe session-meta JSON typed; no more any propagation.
• builtin-modules dependency replaced with the native node:module.builtinModules.

Supply chain

• Release artifacts (main.js, styles.css) now carry a signed SLSA build-provenance attestation. Verify with:

  gh attestation verify main.js -R J3F3H/sillage

Host access disclosures

The README now has a dedicated Host access (Obsidian review disclosures) section explicitly enumerating the three flagged behaviors:

• child_process.spawn for the user-configured vibe binary.
• fs.promises read of $VIBE_HOME/logs/session/*/meta.json (the only path Sillage touches outside the vault).
• navigator.clipboard.writeText from the explicit Copy button on assistant bubbles.

0.2.0

First public release.

Features

• Chat panel — streams vibe --output streaming into a sidebar view, with cancel button, tool-call visibility, and Insert / Copy buttons on assistant bubbles
• Persisted chat history + safe session resume — chat survives Obsidian reloads, subsequent turns use vibe --resume <session_id> so terminal vibe sessions can't collide; falls back fresh if the session has aged out of $VIBE_HOME/logs/session/
• Note commands — Summarize, Extract action items (Obsidian Tasks plugin syntax), Rewrite selection, Translate selection (English / French); each cancellable via the persistent Notice
• Skill auto-discovery — any user-invocable: true skill under <vault>/.agents/skills/ registers as a command; fs.watch hot-reloads new/edited skills on macOS and Windows
• Editor context menu — right-click in any note for the selection / note commands
• Cost / turn / duration telemetry pulled from vibe's per-session meta.json
• Configurable Agent (accept-edits default, auto-approve, or default) to control vibe's tool-use approval
• Subprocess hardening — stdin closed, PATH augmented for ~/.local/bin, in-flight processes killed on plugin unload, per-send timeout
• Debug logging toggle for [sillage] console output

Requirements

• Desktop Obsidian 1.5.0+
• Mistral Vibe CLI installed and authenticated (vibe --setup)

Install (manual)

See the README for clone-and-symlink instructions.

Privacy

Note content is sent to Mistral via vibe whenever a command runs. See Privacy / data flow in the README for the full breakdown.