GitHub Vault Sync v0.2.0

中文

完整双语更新说明 · 验证范围 · 独立安装指南

下载与校验

下载唯一手动附件 github-vault-sync-0.2.0.zip；GitHub 自动生成的 Source code 包不含已构建的 main.js，不是插件安装包。

• 大小：67,739 字节
• SHA-256：39749135ea6c3e188e6d97b5e44e8efa7aa1a16a008fa20c984e80622ce944a3
• 发布提交：81b75af9f9a33a5cf4a95f65f56f63a6d781424f

升级前保存并备份 Vault，正常退出 Obsidian，只替换插件目录中的 manifest.json、main.js、styles.css，保留本机 data.json。

主要变化

• 上传前媒体优化建议、第五个设置页、AVIF LFS 规则迁移与防覆盖转换命令。
• 单文件／全部命令复制、批量复制状态同步、滚动自动加载与数量展示。
• 只读远程重建清单，以及带远端预检、bundle 验证、精确仓库名和多项危险确认的删库同名重建流程。

验证与限制

• 本机 TypeScript、23 个测试文件／101 项测试和生产构建通过；macOS Obsidian 1.14.4 宿主验收覆盖五页、媒体交互及只读重建门控。
• PR CI 38888236716 与 main CI 38888443508 均在 macOS／Windows 成功。
• Tag CI 38888735252 在两个平台均实际执行并通过安装包一致性检查。
• **Windows 原生 Obsidian GUI 验收继续延期；Windows CI 不等于 GUI 验收。**远程删库同名重建后，第二设备须先备份旧克隆，再重新克隆并执行 git lfs pull，核对插件绑定与恢复密钥后才能恢复双端同步。

English

Full bilingual notes · Validation scope · Standalone install guide

Download only github-vault-sync-0.2.0.zip (67,739 bytes), not the automatic Source code archive. SHA-256: 39749135ea6c3e188e6d97b5e44e8efa7aa1a16a008fa20c984e80622ce944a3.

This release adds media optimization guidance, a fifth settings page, copy-all/copy-state feedback, scroll loading, AVIF LFS migration, and a guarded remote delete-and-recreate workflow. The v0.2.0 tag points to 81b75af9f9a33a5cf4a95f65f56f63a6d781424f; macOS and Windows tag CI both passed the archive check. Native Windows Obsidian GUI acceptance remains deferred. After an actual remote rebuild, back up the other device's old clone, clone again, run git lfs pull, and verify the plugin binding and recovery key before resuming sync.

GitHub Vault Sync v0.1.3

GitHub Vault Sync v0.1.3 — Second-device bootstrap and network resilience

2026-10-14 · v0.1.3 release. One installable ZIP for desktop Obsidian; preserve local settings when upgrading. The v0.1.2 tag and assets are unchanged. Native Windows second-device acceptance, corporate proxies and full multi-device scenarios remain explicitly unverified; see the validation record.

中文

本版本针对第二台 Windows 设备从空 Vault 拉取私有仓库的部署记录进行修复，重点覆盖授权后绑定、加密恢复、Git LFS、网络代理、旧配置迁移和跨宿主 UI 差异。

已修复/改进

• 旧版或原型 .github-vault-sync.json / data.json 的排除规则会自动补齐当前安全必需规则；第三方插件 data.json、临时密文包、常见凭据文件不会因旧配置而恢复成明文同步。
• 第二设备导入恢复密钥后不会立即开启加密上传；必须先检查远端密文包并完成“解密并恢复”，避免空配置包覆盖主设备或两台设备因 PAT 不同发生密文摘要乒乓。
• 加密包摘要忽略设备私有身份字段（PAT、授权类型、OAuth Client ID、Git 代理），但密文本身仍可在用户明确选择“完整恢复本插件登录”时恢复；兼容 v0.1.2 的旧摘要格式。
• 远程优先克隆不再依赖 Git LFS 全局 smudge 状态：先以无 smudge 方式克隆，再执行本地 git lfs install 与 git lfs pull；无 Git LFS 时，如果远端确有 LFS 指针，会明确阻止继续而不是落下不可用的指针文件。
• 增加可选的仓库级 Git HTTP/SOCKS 代理设置，适合 GitHub API 可访问但 Git HTTPS 端点被网络重置的环境；代理只作为 Git 命令参数使用，不写进远端 URL。网络错误会给出代理/网络排查提示。
• 同步失败状态带时间信息，成功检查会清除旧错误；远端存在明文插件 data.json 时给出明确的安全策略错误，而不是普通路径失败。
• 旧版 Obsidian 主题/Electron 壳不支持 color-mix() 时，设置页按钮、页签和卡片仍有稳定的主题变量回退样式，减少双端基态/悬停态差异。

安全边界

• 不会将公开插件仓库改成笔记仓库；PAT、恢复密钥和 Vault 内容不进入公开源码或发行包。
• v0.1.2 公开 Release 和标签不被覆盖或移动。v0.1.3 安装包由本次发布提交构建；仍需先预览、再确认真实 Vault 同步。
• Windows CI/本地 Git 测试不等于 Windows Obsidian 图形界面实机验收；代理和 LFS 仍依赖用户本机环境。

验证状态（2026-10-14）

• 对源码提交 bbbd5e2，本机 TypeScript、20 个测试文件／72 项测试及构建通过，macOS／Windows CI 通过；macOS Obsidian 1.14.4 的正常重启、运行版本、四页切换及 schema 1 → 2 配置迁移已做基础验收。
• Windows 原生第二设备、企业代理及完整多设备同步仍有未验证范围；没有用真实 Vault 执行上传或恢复回归。详细证据范围与发布前检查见验收记录。

安装／升级

下载本次 Release 唯一的手动附件 github-vault-sync-0.1.3.zip，不要使用自动生成的 Source code ZIP。保存笔记、备份 Vault 后正常退出 Obsidian；将三安装文件放到 .obsidian/plugins/github-vault-sync/，保留现有本机 data.json。重开后确认插件设置显示 v0.1.3。详细步骤见独立中文指南，ZIP 也附有同一份中英说明。

首次启动会迁移旧配置并可能更新本地密文包。升级差异仍需预览；当密文包两端都变更时，不要自动选择一端覆盖。恢复密钥与备份留在 Vault 之外；发布源码或安装插件不授权同步私人笔记。

安装包只收录三运行文件及双语指南，动效／工程文档是固定到版本标签的在线链接。新增七项打包测试覆盖白名单、版本一致性、字节一致性、可重复构建、缺失链接和失败时保留旧包；本次发布准备的全量本机验证为 21 个测试文件／79 项测试，类型检查和生产构建通过。

English

This release hardens second-device bootstrap from an empty Vault while preserving preview-first synchronization. Native Windows GUI acceptance is still pending; the release does not claim that every target environment has been tested.

Fixes and improvements

• Legacy/prototype sync policies are upgraded with mandatory safety exclusions, so third-party plugin data.json, temporary encrypted bundles, and common credential files do not silently become plaintext sync inputs.
• Importing a recovery key on a second device no longer immediately enables encrypted uploads. The remote encrypted bundle must be reviewed and restored first, preventing an empty local bundle from overwriting the primary device or PAT differences from causing digest ping-pong.
• Encrypted bundle digests ignore device-local identity fields (PAT, auth type, OAuth Client ID, and Git proxy) while the encrypted payload remains available for an explicit full-login restore; v0.1.2 legacy digests remain readable.
• Remote-first clone avoids depending on the global Git LFS smudge filter: it clones without smudging, installs the local LFS filter, and pulls objects explicitly. A repository with LFS pointers is rejected clearly when Git LFS is unavailable.
• Adds an optional repository-scoped Git HTTP/SOCKS proxy. It is passed only to Git commands and never written into the remote URL. Transport errors explain whether to inspect the configured proxy or the network path.
• Error feedback includes a timestamp and clears after a successful check; plaintext remote plugin data.json files produce a specific safety-policy error.
• Adds theme-token fallbacks for older Electron shells without color-mix(), reducing baseline/hover differences across Obsidian installations.

Validation status (2026-10-14)

Source commit bbbd5e2 passed local TypeScript checks, 20 test files / 72 tests, the production build, and macOS/Windows CI. A separate macOS Obsidian 1.14.4 smoke check verified normal restart, the running plugin version, four settings pages, and schema 1 → 2 migration. These checks do not establish native Windows second-device, corporate-proxy, or full multi-device-sync acceptance; no real-vault upload or restore regression was performed. See the validation record.

The existing v0.1.2 tag and assets are not modified. v0.1.3 is distributed with the remaining native Windows and environment-specific verification limits disclosed, not counted as passed.

Installation / upgrade

Download the single manual asset github-vault-sync-0.1.3.zip, not GitHub's automatic Source code archive. Save notes, back up the vault, and exit Obsidian normally. Replace only the three runtime files in .obsidian/plugins/github-vault-sync/ and keep your existing local data.json. Reopen Obsidian and confirm v0.1.3 in plugin settings. The ZIP includes the same standalone English guide and its Chinese counterpart.

The first load migrates legacy settings and can update the local encrypted bundle. Review the resulting differences; do not silently overwrite an encrypted bundle changed on both devices. Keep recovery keys and backups outside the vault. Publishing or installing the plugin does not authorize syncing private notes.

The fixed package allowlist contains three runtime files and two independent guides. Videos and engineering records are online-only links pinned to the version tag. Seven new packaging tests cover member/version/byte consistency, repeatability, missing guide links, and preserving an existing valid archive when a new candidate fails validation. Release preparation passed 21 test files / 79 tests, type checking and the production build.

Release verification / 发行校验

• Frozen release commit / 发布提交: dc2fa74de94215fcc5e90b4b15e1effdbace9f97
• Main CI — macOS + Windows passed
• v0.1.3 tag CI — macOS + Windows passed, including archive/source-byte verification
• Local TypeScript, production build and 21 files / 79 tests passed. Package runtime bytes are identical to the macOS-host-verified v0.1.3 installation.
• One manually uploaded asset: github-vault-sync-0.1.3.zip (57,320 bytes). No personal vault, local settings, PAT or recovery key is included.

SHA-256 (github-vault-sync-0.1.3.zip):

23e2c3d1db97d0e76a628d138f6530d0432645d822e3a323ad8c757bf08ebce2

Known verification limits / 已知验证限制： native Windows Obsidian second-device GUI, corporate/authenticated proxy environments and full multi-device attachment/restore scenarios are not claimed as passed. Windows CI and the macOS host smoke check do not substitute for those checks. Existing v0.1.2 tags and Release assets are preserved.

GitHub Vault Sync v0.1.2

GitHub Vault Sync v0.1.2 — Four-page settings and desktop portability

中文

这是 v0.1.1 的兼容迭代，继续保留“同步当前笔记”、同步前预览、手工冲突确认与加密配置备份。不会自动上传真实笔记。

变化

• 设置页现在有四个真正独立的页面：笔记同步、隐私与恢复、账户与仓库、高级设置。点击页签直接切换，不再滚动跳转；草稿控件保持挂载，支持左右键与 Home/End。
• 对照 Obsidian 原生设置及 Easy Typing 的页签模式，调整标题/说明对齐、间距、按钮主次与危险状态、状态摘要、窄窗口 2×2 页签；动效有边界，遵守系统减少动态效果设置。
• 恢复密钥与恢复备份默认改为用户所属系统的数据目录：macOS ~/Library/Application Support/github-vault-sync-backups/、Windows %APPDATA%\github-vault-sync-backups\、Linux 的 XDG 用户数据目录。macOS 路径保持向后兼容；Windows 不把 POSIX chmod 当作 ACL 保证。
• 单一 ZIP 同时适用于 Windows 与 macOS 的 Obsidian 桌面版 1.13.0+。系统 Git 与需要上传附件时的 Git LFS 仍需另行安装。macOS／Windows CI 检查代码、临时本地 Git/LFS、构建、归档文件一致性；CI 不等于 Windows Obsidian 图形界面实机验收。

安装与更新

只下载本次 Release 的 github-vault-sync-0.1.2.zip，解压到 Vault 的 .obsidian/plugins/，最后应有 .obsidian/plugins/github-vault-sync/manifest.json、main.js 与 styles.css。升级时备份 Vault 并保留本机原有 data.json；保存正在编辑的笔记再重启 Obsidian，在「设置 → 第三方插件」启用。压缩包附中英文说明，不含私人笔记、访问令牌或恢复密钥。不要使用 GitHub 自动生成的 Source code ZIP 作为插件安装包。

连接的是你自己另建的私有笔记仓库，不是本公开插件源码仓库。同步前仍需逐次预览和确认；恢复密钥须单独安全保存。

English

This is a compatible follow-up to v0.1.1. Current-note sync, preview-first merging, manual conflict review, and encrypted configuration backups remain available. The plugin does not automatically upload a real vault.

Changes

• Four actual settings pages—Notes, Privacy & Recovery, Account & Repository, Advanced—replace scrolling jump links. Switching keeps form controls mounted and supports Left/Right and Home/End.
• Refined heading/description alignment, spacing, primary/secondary/danger button states, status summary, responsive 2×2 tab layout, and bounded transitions that honor reduced-motion preferences.
• Recovery keys and restore backups now use the OS user data directory: ~/Library/Application Support/github-vault-sync-backups/ on macOS (unchanged), %APPDATA%\github-vault-sync-backups\ on Windows, and the XDG user data directory on Linux. Windows ACLs are not equivalent to POSIX chmod.
• One ZIP supports Obsidian desktop 1.13.0+ on Windows and macOS; install system Git and Git LFS separately where needed. macOS/Windows CI checks source, temporary local Git/LFS behavior, builds, and archive contents. CI is not a native Windows Obsidian GUI session.

Install / update

Download the release asset github-vault-sync-0.1.2.zip (not GitHub's automatic source ZIP). Extract into the Vault's .obsidian/plugins/, so github-vault-sync/ contains manifest.json, main.js, and styles.css. Back up the Vault and keep your existing local data.json when upgrading. Save open notes, restart Obsidian, and enable the plugin in Settings → Community plugins. The ZIP includes English and Chinese instructions, but no personal notes, PAT, or recovery key.

Bind your own separate private vault repository, not the public plugin source repository. Every upload still requires a preview and explicit confirmation; store your recovery key independently.

GitHub Vault Sync v0.1.1

GitHub Vault Sync v0.1.1 — Note-first sync and safer Vault migration

中文

这是公开 v0.1.0 之后的兼容更新，适合已经使用 v0.1.x 的用户。内部曾使用过更高编号原型的用户不应仅为下载本包而覆盖正在工作的安装；手动替换前请备份 Vault，并保留本机插件 data.json。

主要变化

• 在当前 Markdown 笔记标题栏、命令面板和同步中心增加“仅同步当前笔记”入口。
• 当前笔记预览只纳入 Obsidian 元数据中实际嵌入的非 Markdown 附件；普通笔记链接不会被误当成上传范围。
• 单笔记上传只暂存批准的笔记与附件，检查 GitHub 提交、Git 索引和文件指纹；预览后任一端变化、已有暂存或合并未完成时拒绝过期上传。
• 首次绑定已有仓库前检查同路径笔记内容、配置、附件、同名不同目录、大小写/Unicode 及文件/文件夹冲突；仓库优先会在当前 Vault 旁边创建独立副本，不清空当前笔记库。
• 设置页按常用操作、隐私恢复、账户仓库和高级规则分组；同步预览按 Markdown、笔记文件夹附件、Obsidian 配置、其他文件排序，并显示文件级差异百分比与上传阶段进度。
• 冲突批量选择只作用于 Markdown；插件配置、加密包和二进制附件仍需逐文件确认。重复点击和过期确认会被阻止。
• 继续使用客户端 AES-256-GCM 加密同步插件 data.json 与配置例外；明文凭据、PAT、恢复密钥和私人笔记不进入公开项目或安装包。

安装

下载本 Release 的唯一手动资产 github-vault-sync-0.1.1.zip，解压到 <Vault>/.obsidian/plugins/，确认目录为 <Vault>/.obsidian/plugins/github-vault-sync/，重启 Obsidian 后在「设置 → 第三方插件」启用。需要 Obsidian 桌面版 1.13.0+、系统 Git；同步符合规则的图片、PDF、音视频等附件时还需要 Git LFS。ZIP 已包含插件运行所需的 manifest.json、编译后的 main.js、styles.css 和双语说明，无需 Node.js 或 pnpm。

GitHub 自动生成的 Source code 压缩包不是插件安装包；它们不包含项目根目录被忽略的构建产物 main.js。笔记必须连接到你自己控制的另一个私有 GitHub 仓库，不要把笔记上传到公开插件仓库。

安装包 SHA-256：bba0cb1ab7ea304896a881c5d562bc54c00038b8e3687fbd9abfb4c81c5cd675。

English

This is a compatible follow-up to public v0.1.0 for users already on v0.1.x. If you use an internal build with a higher prototype number, do not overwrite a working installation merely to install this public package; back up the vault and keep the local plugin data.json before any manual replacement.

Highlights

• Adds a dedicated “sync current note only” action in the active Markdown view, command palette, and Sync Center.
• The current-note preview includes only non-Markdown files that Obsidian metadata identifies as actual embeds; ordinary note links are not silently expanded into upload scope.
• Current-note upload stages only the approved note and attachments and rechecks the GitHub commit, index, and file fingerprint. It rejects stale previews, existing staged files, and unfinished merges.
• First binding now reviews same-path Markdown bytes, configuration, attachments, same-name notes in different folders, case/Unicode collisions, and file/folder collisions. Repository-first creates a separate Vault copy beside the current Vault instead of clearing it.
• Settings are organized around common actions, privacy/recovery, account/repository, and advanced rules. The sync preview orders Markdown, note-folder attachments, Obsidian configuration, and other files, while showing file-level difference percentage and honest transfer progress.
• Bulk conflict selection applies only to Markdown. Plugin configuration, encrypted bundles, and binary attachments still require file-level choices. Repeated clicks and stale approvals are guarded.
• Client-side AES-256-GCM encrypted sync remains available for plugin data.json and configured exceptions. Plaintext credentials, PATs, recovery keys, and personal notes are not shipped in the public project or installer.

Install

Download the only manually uploaded Release asset, github-vault-sync-0.1.1.zip, and extract it into <Vault>/.obsidian/plugins/. Confirm the folder is <Vault>/.obsidian/plugins/github-vault-sync/, restart Obsidian, and enable the plugin under Settings → Community plugins. Requires Obsidian desktop 1.13.0+, system Git, and Git LFS for attachments matching the configured rules. The ZIP includes manifest.json, the compiled main.js, styles.css, and bilingual instructions; Node.js and pnpm are not needed for installation.

GitHub-generated Source code archives are not plugin installers because they omit the ignored root build output main.js. Connect your notes to a separate private GitHub repository that you control; never upload notes to this public plugin repository.

Installer SHA-256: bba0cb1ab7ea304896a881c5d562bc54c00038b8e3687fbd9abfb4c81c5cd675.

GitHub Vault Sync v0.1.0

GitHub Vault Sync v0.1.0 — First public release

中文

这是 GitHub Vault Sync 的首次公开发布（版本编号 v0.1.0）。它基于此前的本地原型功能制作；如果你已在个人 Vault 中使用编号更高的内部原型，不必为此首发版盲目降级。此公开插件仓库只包含代码/安装包；你的 Obsidian 笔记必须绑定另外一个私有仓库。

主要功能：同步前笔记优先差异预览、本机/仓库/逐篇 Markdown 冲突决策、未选版本本地备份、附件 Git LFS、阶段进度、只检查不自动上传、插件私有配置客户端 AES-256-GCM 加密镜像和手动恢复。无强制推送；明文 data.json、PAT、恢复密钥不在安装包中。

安装：下载本 Release 的 github-vault-sync-0.1.0.zip，解压到 <Vault>/.obsidian/plugins/，启用插件并先备份 Vault。需要 Obsidian 桌面版 1.13.0+、Git，附件匹配 LFS 规则时需要 Git LFS。详情见 ZIP 内 README.zh-CN.md 或仓库根目录中文说明。

English

This is the first public release (v0.1.0), packaged from the existing local prototype. If you already run an internal build numbered above v0.1.0, do not replace it blindly. This public plugin repository distributes code only; connect a different private GitHub repository for your notes.

Highlights: note-first preview with a required per-run Markdown conflict priority, preservation of the losing text version, Git LFS attachments, honest phase progress, background checking without automatic uploads, and authenticated client-side AES-256-GCM backups of excluded plugin settings. No force push. The ZIP has no plaintext data.json, PAT, or recovery key.

Install: extract github-vault-sync-0.1.0.zip into <Vault>/.obsidian/plugins/, enable the plugin and back up your vault first. Requires Obsidian desktop 1.13.0+, Git and Git LFS when syncing matching attachments. See README.md inside the ZIP or the repository root.

唯一安装资产 / Single install asset

• github-vault-sync-0.1.0.zip — 唯一需要下载的插件安装包，内部包含 github-vault-sync/manifest.json、main.js、styles.css、中英文安装说明；解压到 <Vault>/.obsidian/plugins/，重启后启用。无需再下载其他 Release 资产。电脑上仍需已有 Git，按附件规则使用 Git LFS 时仍需安装 Git LFS。

• GitHub 自动显示的 Source code (zip/tar.gz) 无法手动删除，且源码包不含项目根目录的构建产物 main.js，请勿把它当作插件安装包。

• github-vault-sync-0.1.0.zip is the only manually uploaded release asset. It includes manifest.json, main.js, styles.css, and English/Chinese setup instructions under one github-vault-sync/ folder. Extract into <Vault>/.obsidian/plugins/, restart Obsidian, and enable the plugin. No other Release downloads, Node.js, or pnpm are needed for installation. Git and (for matching attachments) Git LFS are still operating-system prerequisites.

• GitHub-generated Source code (zip/tar.gz) links cannot be removed and are not plugin installers: the source tree does not contain the compiled root main.js.

ZIP SHA-256 / 安装包 SHA-256：c5768e674ad6db7674b23827ca63a4e725b1cc65cbdf092d7f81288ec95ace38。

No vault notes, plaintext credentials, recovery keys, or private development conversations are shipped.