v1.3.1

Security

• Enforce the vault boundary on resolved paths: a symlinked daily-notes folder
  or note file that resolves outside the (canonicalized) vault root is refused
  for reads and writes. Atomic note writes resolve the parent directory first
  and create the temp file with O_EXCL (create_new) under an unpredictable
  name, so a pre-created *.tmp-obsidian-daily-qs symlink can no longer
  redirect a write outside the vault.

Artifact: obsidian-daily-qs-1.3.1-linux-x86_64.tar.gz (statically linked musl x86_64).

v1.3.0

Added

• Panel search: / jumps to the search field (also from the empty add-todo
  field); matching is a case-insensitive substring filter that keeps
  ancestors of matches so nested context stays readable, and combines with
  the open-only filter. Esc clears the query and returns focus to the add
  field, a second Esc closes the panel.

Artifact: obsidian-daily-qs-1.3.0-linux-x86_64.tar.gz (statically linked musl x86_64).

v1.2.1

Fixed

• Todo text containing &, <, or > (e.g. Team & Agile Meetings) was
  dropped entirely and rendered as an empty checkbox. Todo rows are always
  PlainText, so such text is now kept (only control characters are
  stripped); error strings remain strictly sanitized.

Artifact: obsidian-daily-qs-1.2.1-linux-x86_64.tar.gz (statically linked musl x86_64).

v1.2.0

Added

• Nested todo lists: checkbox indentation (tabs or two-space levels) is parsed
  into depth / parentLine per item, rendered indented in the panel, and
  preserved by carry-over. The open-only filter keeps ancestors of open items
  so nested context stays readable.
• Scrollable panel: content flicks vertically with a scrollbar when the list
  exceeds the panel height; Up/Down/j/k scroll while the input field is not
  focused.
• New todos insert under a ## Todos heading as well as ## Tasks.

Fixed

• Arrow keys are no longer swallowed while the add-todo field has focus.

Artifact: obsidian-daily-qs-1.2.0-linux-x86_64.tar.gz (statically linked musl x86_64).

v1.1.0

Added

• Bar label shows done/total (☐ 2/5).
• Panel day navigation (previous / today / next) with the same todo UX.
• Open-only filter in the panel (default via openOnly widget setting).
• Carry over yesterday's still-open todos into today (skips duplicates).
• Open the viewed daily note in Obsidian via obsidian://open?path=….
• Left-click opens the panel with focus in the add field (quick capture).

Artifact: obsidian-daily-qs-1.1.0-linux-x86_64.tar.gz (statically linked musl x86_64).

v1.0.0

Added

• Initial Omarchy Quattro bar widget for today's Obsidian daily note todos.
• Vault path from OBSIDIAN_VAULT_ROOT; daily note location from
  .obsidian/daily-notes.json (folder, format, optional template).
• List, add, and toggle markdown checkbox todos (- [ ] / - [x]).
• New items insert under a ## Tasks heading when present, otherwise append
  at the end of the note. Adding creates today's note from the configured
  template when needed.
• Marketplace-ready musl x86_64 backend bundle with byte-identical CI
  attestation (make verify-bundle).

Fixed

• Exit watch when stdout is broken so a crashed shell cannot leave a
  polling helper behind.
• Reject .. / null path components from daily-notes settings so notes and
  templates cannot escape the vault root.
• Drop HTML markup from helper JSON before QML display and force
  Text.PlainText for note-derived strings.
• Reject multiline todo text so add cannot inject extra markdown lines.

Artifact: obsidian-daily-qs-1.0.0-linux-x86_64.tar.gz (statically linked musl x86_64).