v1.0.4-rc1

Release candidate. Addresses Obsidian plugin scanner findings surfaced during v1.0.3 community review.

What's new

• README code-level disclosures — new "Code-level disclosures" subsection under Privacy & security with file:line tables for every atob/btoa, clipboard, and vault-enumeration call site
• Disclosure-pointer comments at btoa/atob call sites
• In-plugin funding buttons removed — 2 of 3 scanner-flagged domains gone (3 → 1). Funding still surfaces via the Obsidian plugin directory UI via manifest.json fundingUrl
• README Network access table updated

No behavior change. No data.json schema change.

What's NOT here

The declarative settings API migration is deferred — the refactor is substantial (10+ complex sections in settings.ts) and warrants its own focused release. The 13 display is deprecated lint warnings remain, as in v1.0.3, and are non-blocking per the 1.0.3 notes.

Rolling back

Install the v1.0.3 release assets (main.js, manifest.json, styles.css) into your <vault>/.obsidian/plugins/curtis-ai-chat/ folder and reload Obsidian. All settings round-trip cleanly — no data loss.

Feedback

Please report regressions in PR #7 or open a new issue. Stable 1.0.4 ships after 3-5 days of community feedback.

1.0.3

[1.0.3] — 2026-07-23

Hotfix release. The 1.0.2 manifest declared minAppVersion: 1.13.0 (a catalyst/insider-only build), which made the plugin uninstallable for every user on stable Obsidian (latest stable is 1.12.7). This release lowers the floor to 1.11.4 by removing the only 1.13-pinned APIs.

Fixed

• Install failure on stable Obsidian — minAppVersion lowered from 1.13.0 → 1.11.4. The 1.0.2 settings migration to the declarative getSettingDefinitions() API (Obsidian 1.13+) was the trigger; this reverts to the imperative display() API, which works on every version including 1.13+.
• Settings tab renders again — renderSettings() → display() (public override), and all 12 internal this.update() refresh calls swapped back to this.display(). The 1.0.2 changelog claimed this was deferred to v1.1; the version-floor bug forced the revert early.
• Destructive buttons — 3 ButtonComponent.setDestructive() calls (1.13-only) replaced with btn.buttonEl.addClass('mod-destructive'). Identical styling (Obsidian applies the same CSS class internally), ancient DOM API.

Notes

• The true API floor is 1.11.4, set by the SecretStorage API used for per-provider key storage in core/secrets.ts. App.loadLocalStorage/saveLocalStorage (1.8.7) and Workspace.revealLeaf (1.7.2) are also in use but below the floor. Nothing 1.13-specific remains.
• The declarative settings API is still the intended future path; it will be re-adopted once 1.13 reaches stable. The 13 display is deprecated lint warnings are expected and non-blocking for plugin review.

1.0.2

Settings migrated to declarative API (getSettingDefinitions). Unlocks settings search. All scorecard warnings resolved.

1.0.1

Scorecard fixes.

Curtis AI Chat 1.0.0

Initial release.