Shelf v0.4.7

Shelf v0.4.7

Shelf v0.4.7 introduces the external Chat popover: an isolated provider
window for ChatGPT and Gemini that keeps Shelf's local workspace data private.

Changes

• External Chat popover:

  • Adds a sidebar Chat button and Cmd+Shift+A shortcut.
  • Opens ChatGPT or Gemini in an isolated Electron child window with dedicated
    persistent provider sessions.
  • Preserves provider state and window bounds without reopening the popover at
    app launch.

• Privacy and security contract:

  • Keeps Shelf free of data-integrated AI: no notes, database, Studio content,
    files, or command palette data are bridged into provider pages.
  • Replaces the old no-ai guard with a contract guard that permits only the
    isolated external assistant surface.
  • Enforces provider navigation allowlists, https: URLs, isolated webviews,
    and a minimal shell preload.

• Provider login and navigation polish:

  • Supports Google OAuth and macOS passkey selection for provider login flows.
  • Keeps ChatGPT project and conversation links inside the popover instead of
    opening them externally.
  • Hides native traffic lights in the popover and moves the provider disclosure
    above the webview so it does not collide with ChatGPT's composer.

Tester Notes

Open Chat from the sidebar or press Cmd+Shift+A. Confirm ChatGPT and Gemini
load, login state persists, ChatGPT project sidebar links open inside the
popover, and the disclosure text remains visible without covering the provider
composer.