Clinical Workspace 0.3.7

Clinical Workspace 0.3.7

This patch release improves the public project experience and closes a defence-in-depth gap in the separate surgery-logbook exporter.

What changed

• Rebuilt the project documentation around Community installation, a synthetic first-use walkthrough, the clinical safety boundary, folder migration, and logbook export.
• Added clearly labelled abstract artwork and a real Clinical Workspace screenshot captured from a disposable vault containing synthetic records only.
• Added support, conduct, contribution, feature-request, and pull-request guidance, plus Dependabot configuration.
• The repository-only Node.js logbook exporter now rejects every destination inside this public source checkout, including relative paths and symlink-disguised parents. It already rejected destinations inside the source vault.
• Added CI protection for public text and visual assets: reviewed image checksums, rejection of EXIF/text metadata, and broader identifier-shaped-value scanning.
• Clarified that default CSV exports are pseudonymized and confidential—not anonymous or de-identified—and that identified exports require explicit authorization and --identifiers.

The exporter remains a desktop, repository-only utility. It is not bundled into the Community plugin and cannot run on iPhone or iPad. The installed plugin's clinical record schema and workflow are unchanged in this patch.

Validation

• 177/177 tests passed, including 26 exporter tests.
• Typecheck, zero-warning lint, production build, release verification, Community preflight, and public-asset verification passed.
• npm audit reports zero vulnerabilities.
• Release provenance attestations were produced for all three plugin assets.

Install or update

Update through Obsidian → Settings → Community plugins → Check for updates, or install the three matching assets below together. Requires Obsidian 1.13.0 or newer.

Full changelog: 0.3.6...0.3.7