v1.0.4-rc1

Release candidate. Addresses Obsidian plugin scanner findings surfaced during v1.0.3 community review.

What's new

• README code-level disclosures — new "Code-level disclosures" subsection under Privacy & security with file:line tables for every atob/btoa, clipboard, and vault-enumeration call site
• Disclosure-pointer comments at btoa/atob call sites
• In-plugin funding buttons removed — 2 of 3 scanner-flagged domains gone (3 → 1). Funding still surfaces via the Obsidian plugin directory UI via manifest.json fundingUrl
• README Network access table updated

No behavior change. No data.json schema change.

What's NOT here

The declarative settings API migration is deferred — the refactor is substantial (10+ complex sections in settings.ts) and warrants its own focused release. The 13 display is deprecated lint warnings remain, as in v1.0.3, and are non-blocking per the 1.0.3 notes.

Rolling back

Install the v1.0.3 release assets (main.js, manifest.json, styles.css) into your <vault>/.obsidian/plugins/curtis-ai-chat/ folder and reload Obsidian. All settings round-trip cleanly — no data loss.

Feedback

Please report regressions in PR #7 or open a new issue. Stable 1.0.4 ships after 3-5 days of community feedback.