0.4.4

DSH Dock 0.4.4 — readiness gate: wait for the web app to actually mount

0.4.3

DSH Dock 0.4.3 — panel auth: pick the browser-session secret the targ…

0.4.2

DSH Dock 0.4.2 (marketplace install fix: tag matches manifest version)

v0.4.2

DSH Dock 0.4.2 — panel cross-site auth fix

0.4.0

feat: dock the official dsh web behind a local auth proxy (B2)

dsh web now enforces browser auth with a SameSite=Strict signed cookie, which
Obsidian's cross-site sidebar iframe can neither store nor send, so the panel
could never authenticate (shown as "dsh web authentication required; reopen the
URL printed by dsh web"). Add a loopback reverse proxy that takes over auth:

- read the target dsh web's client-connection/browser-session signing key from
  its credential store and mint a valid dsh-auth cookie (exact browser-auth
  format), injecting it on every HTTP request and WebSocket handshake
- rewrite Host/Origin/Sec-Fetch-Site to pass the official /api trust fence
- works for both auth'd (new) and no-auth (old) dsh web: probe `/`; if it
  requires auth, inject the cookie, otherwise pass through untouched
- panel baseUrl now points at the proxy; Open in system browser uses the real
  URL; popout works too because the proxy authenticates server-side
- verifyDshBrand accepts dsh web's 401 auth response as a brand signal so
  attaching to an already-running auth'd instance is no longer rejected

bump version to 0.4.0

0.3.4

chore: bump version to 0.3.4 (rename parent-folder fix)

0.3.3

chore: bump version to 0.3.3 (parent-folder create fix)

0.3.2

chore: bump version to 0.3.2 (security fixes release)

0.3.1

chore: bump version to 0.3.1 (await listNotes fix)

0.3.0

feat(B1): Obsidian API 桥 —— 把 vault/metadataCache/fileManager 喂给工具侧

插件加载即在 127.0.0.1 起 token 鉴权 HTTP 桥：
- src/bridgeTypes.ts 协议类型 + 稳定错误码（复用工具侧 VAULT_*/FS_* 词表）
- src/bridgeServer.ts 纯 Node HTTP 服务器（零 Obsidian 依赖可冒烟）：
  GET /v1/{current,notes,note,metadata,frontmatter,backlinks,search,tags,all-tags,folders}
  POST /v1/{write,edit,frontmatter,rename,trash,open,link}
- src/obsidianService.ts 用官方 API 实现：vault.* / metadataCache.* / fileManager.*
- 端口 18080+hash%4096 与 dsh web 端口域不相交；冲突顺延
- 桥地址/token 经 DSH_OBSIDIAN_BRIDGE_URL/TOKEN env（spawn 注入）+
  current-vault.json 标记文件（shared 多窗口第二通道）双通道暴露
- 设置页「启用 API 桥」开关；esbuild 产出 lib/bridgeServer.cjs
- smoke 用内存假服务逐端点验证：鉴权 401 / 路由 / 错误映射