0.7.0

0.7.0 — Directory compliance, OS keychain for your API key, mobile fix

This release brings the plugin in line with Obsidian's automated community-directory
review, moves your OpenAI API key out of plaintext on supported versions, and fixes a
bug that stopped the plugin loading on mobile.

Changed — command IDs (breaking for custom hotkeys)

Obsidian namespaces every command with the plugin ID automatically, so the old IDs
repeated it. Three commands were renamed:

Command	Old ID	New ID
Process notes	openaugi-process-notes	process-notes
Process recent activity	openaugi-process-recent	process-recent-activity
Save context	openaugi-save-context	save-context

If you bound a custom hotkey to any of these three, you'll need to rebind it —
Obsidian has no way to carry a hotkey across an ID change. The command names in the
palette are unchanged, and the other eight commands are untouched.

Added — API key stored in your OS credential store

On Obsidian 1.11.4 and later, your OpenAI API key is now stored via Obsidian's
Secret Storage API — macOS Keychain, Windows Credential Manager, or Linux libsecret —
instead of in plaintext in the plugin's data.json. You can see and manage it under
Settings → Keychain.

• An existing key is migrated automatically the first time you open the plugin on a
  supporting version, and the plaintext copy is removed from data.json.
• On older Obsidian versions nothing changes; data.json remains the store.
• If the credential store is unavailable (locked, permission denied), the plugin falls
  back to data.json rather than losing access to your key.
• OS credential stores don't sync between devices, so on 1.11.4+ you enter the key once
  per device.

The settings tab now tells you which store is in use.

Fixed

• The plugin failed to load on Obsidian Mobile. Task Dispatch imported Node.js
  built-ins (child_process, fs, path, util) at the top level, which don't exist
  on mobile. They're now loaded lazily and only on desktop, so the rest of the plugin
  loads normally on mobile.
• Tag stripping broke on older iPhones and iPads. The tag-removal pattern used a
  regex lookbehind, unsupported on iOS before 16.4.
• Network calls now use Obsidian's requestUrl instead of fetch, which avoids CORS
  restrictions and works properly on mobile.
• Removed a deprecated substr call and a deprecated CSS property from the context
  preview.

Changed — appearance and settings

• All inline element styles moved into styles.css, so themes and custom CSS snippets
  can now restyle the plugin's modals and settings.
• Settings section headings use Obsidian's native heading component, so they match the
  rest of the settings window.
• Various UI labels corrected to sentence case ("Refresh models" rather than
  "Refresh Models").

Changed — store listing

The directory description no longer leads with voice notes. It now reads: "The human
context layer for your AI agents. Gather bounded context from linked notes and
backlinks, queue agent tasks, and distill raw material into atomic notes, summaries,
or posts."

Internal

• npm run lint runs the official eslint-plugin-obsidianmd — the same best-practices
  checks Obsidian's automated review applies. Both scripts/release.sh and the tag
  workflow now fail a release on any lint error.
• The release workflow attests build provenance for main.js and styles.css, so users
  can verify the assets were built from this repository.
• Test suite grew from 157 to 175 tests, covering the key-storage migration end to end.
• New docs/COMPLIANCE.md documents what the scan checks, what blocks a listing, and
  which warnings are accepted.

Notes

• The README now documents every network request the plugin makes, when it fires, and
  what it sends. There is still exactly one external endpoint, api.openai.com, and no
  telemetry.
• Task Dispatch remains deprecated and will be removed in a future release. Prefer the
  Augi task-file commands.