0.7.7

Fixed

• PDF highlights: a highlight with a malformed quad point no longer drops its text — the
  annotation's own rectangle is added whenever any quad is unusable, not only when all are.
• PubMed titles: entities are decoded — "&" stayed escaped. Decoding runs once, first, so
  entity-escaped markup (<i>) is stripped like real markup and < stays "<";
  numeric entities (β) decode too, through the same helper citeproc output uses.
• Settings text fields keep what you type, spaces included: clearing "References folder",
  "Ollama URL" or "OpenAI base URL" to retype it no longer snaps back to the default mid-edit, and
  the empty field shows the default as its placeholder. One helper, effective(), trims the value
  and applies the default (OpenRouter's base URL, not api.openai.com) wherever it is used.
• OpenAI base URL / API key and Ollama URL show whenever either the embedding provider or the
  chat LLM uses them — with embeddings on Ollama and chat on OpenRouter the key field was hidden.
• Custom summary language no longer hides itself while you type (typing "en" made it vanish).
• Abstracts and titles: tag stripping keeps comparators ("grade IV", "ASA <I and

  III") and still removes any real tag — JATS (<jats:p>), MathML (<mi>), <scp>, and tags
  with attributes. A tag is a name followed by > or by attr="value" pairs.

• Settings search on 1.13+: every row is declared once with a visible rule, so a row shows
  up in search as soon as it applies (e.g. "Ollama URL" right after switching the provider). The
  definitions are now type-checked against Obsidian's own SettingDefinitionItem (no cast).
• Ollama embeddings are validated with the same isNumberArray check as the OpenAI path.

Changed

• Release workflow split: a read-only build job runs npm ci, lint, build and tests; only
  the publish job holds write, OIDC and attestation permissions, and it signs the artifact the
  build produced. Code from a dependency no longer runs with a token that can create releases or
  request a signing token; the attestation still only proves which workflow and commit built the
  files.
• The 0.7 talk ships as a narrated video (presentation/v07/video/): MiniMax Speech 2.8 HD via
  OpenRouter, every sentence transcribed back and checked against the script, deck frames
  rendered exactly, captions and chapters for YouTube.