pinax 0.1.5

Added

• pinax-api.d.ts: TypeScript declarations for the window.pinax API (apiVersion 1). Companion plugin authors copy one file and get a typed global with autocomplete; npm run check:api in CI fails if the file drifts from the source types.
• Keyboard and screen-reader support for the core UI: aria-labels on topbar buttons and the palette input, tablist/tab roles with aria-selected, collapsible pane headers focusable with aria-expanded and Enter/Space, board columns labelled and cards focusable (Enter/Space opens the note), sortable table headers operable from the keyboard.

Fixed

• Live re-renders no longer reset the dashboard scroll position, and are deferred while the user is typing in an input inside the view.

Commits

• 1c33ebe release: 0.1.5
• 33418b2 feat: typed api declarations for companion plugins (pinax-api.d.ts + drift check)
• b6da075 Merge pull request #3 from sphragis-oss/fix/render-polish-a11y
• 0bc2514 docs: changelog entries for render polish and a11y
• 37ada2f feat: keyboard and aria support for core interactive elements
• d7bc711 ci: enable dependabot for npm dependencies
• 30a73ed fix: preserve scroll and input focus across live re-renders

Full Changelog: 0.1.4...0.1.5

Verify this build

gh attestation verify main.js --repo sphragis-oss/pinax

pinax 0.1.4

Added

• command-buttons: optional per-button color (accent, success, warning, danger); theme-safe tint driven by CSS variables, neutral default unchanged.

Changed

• Shipped sre and helm profiles no longer include command buttons for skills that are not publicly available (/github-trending-radar, /standup-brief, /dr-daily, /dr-weekly, /claude-code-releases, /clotributor-radar); the reader panes fed by those scan folders are unchanged.
• README: note that probe env overrides are not inherited by a GUI-launched Obsidian.

Commits

• 7c7ded2 release: 0.1.4
• 95a66a3 fix: drop private-skill buttons from shipped profiles, document probe env caveat
• 68a87e5 feat: per-button color option in command-buttons
• 1740a5a Merge pull request #2 from sphragis-oss/dependabot/github_actions/actions/setup-node-6.4.0
• b1c07e4 ci: bump actions/setup-node from 4.4.0 to 6.4.0
• 9435b6e Merge pull request #1 from sphragis-oss/dependabot/github_actions/actions/checkout-7.0.0
• 0e2d5ea ci: bump actions/checkout from 4.3.1 to 7.0.0
• 1f5f837 ci: release notes from the CHANGELOG section plus commit list
• 4119a79 ci: dependabot weekly updates for github actions
• 77a0ce2 test: deterministic mtimes in the mock vault

Full Changelog: 0.1.3...0.1.4

Verify this build

gh attestation verify main.js --repo sphragis-oss/pinax

pinax 0.1.3

Review-scorecard cleanup; no user-facing changes.

Changed

• Node builtins (fs, path, os, child_process, process.env) are accessed through minimal local typings and envVar/envAll helpers, so the code typechecks without @types/node; clears the unsafe-any warnings on the community review scorecard.
• Settings tab re-renders via an internal redraw() instead of calling the deprecated display().

Commits

• d917e4a 0.1.3: clear review scorecard warnings
• 9249ecd chore: verify main ruleset allows admin direct push
• 9aedcd1 ci: lint the companion plugin template as CommonJS
• 0296460 fix: ignore only the root main.js so the companion plugin template ships

Full Changelog: 0.1.2...0.1.3

Verify this build

gh attestation verify main.js --repo sphragis-oss/pinax

pinax 0.1.2

Removes in-vault code execution to comply with the Obsidian community review; custom widgets now come from companion plugins.

Removed

• The widgets.js runtime loader and the "Custom widget code" trust gate. Released versions never execute code from the vault. The loader is preserved on the feature/widgets-js branch.

Changed

• Custom widgets are registered by companion plugins via window.pinax.registerWidget(...); a copy-paste template (manifest.json + main.js) ships in examples/companion-widget-plugin/ and AUTHORING.md, written so an LLM can generate a working widget plugin from it.
• Profile bundles still carry widgets.js as inert data for sharing; settings texts, SECURITY.md and README updated accordingly (three trust gates now).

Commits

• 3b172b1 0.1.2: remove in-vault code execution, document companion-plugin widgets

Full Changelog: 0.1.1...0.1.2

Verify this build

gh attestation verify main.js --repo sphragis-oss/pinax

pinax 0.1.1

Community review fixes; no user-facing feature changes.

Changed

• minAppVersion raised to 1.8.7 (needs Workspace.revealLeaf returning a promise and App#loadLocalStorage/App#saveLocalStorage).
• UI state (theme, density, collapsed panes, autorefresh) is stored per vault via App#saveLocalStorage instead of shared localStorage.
• Popout-window compatibility: activeDocument instead of document, window.require instead of globalThis.require, createSvg for SVG nodes.
• The "Open dashboard" command id no longer duplicates the plugin id (re-bind your hotkey if you had one).
• Internal Plugin.settings property renamed to avoid colliding with the Obsidian 1.13 settings API.
• npm run lint:obsidian mirrors the community review bot (eslint-plugin-obsidianmd).

Commits

• f9ccb76 0.1.1: address Obsidian community review findings

Full Changelog: 0.1.0...0.1.1

Verify this build

gh attestation verify main.js --repo sphragis-oss/pinax

pinax 0.1.0

Initial release: a domain-agnostic, config-driven dashboard framework for Obsidian, seeded from the "command-center" (The Helm) plugin.

Added

• Profile-driven runtime: profile.json (grid or tabs layout, schemaVersion: 1) renders the whole dashboard; edits hot-reload without a rebuild.
• 11 built-in widgets: folder-latest, folder-list, markdown-embed, table, form, command-buttons, iframe, heatmap, board, stat, custom.
• Notes-as-records model: table/board/stat/heatmap read a folder or a tag set (source.tags), filtered by ANDed where clauses (is/not/above/below/after/before).
• Live dashboard: note edits, creations, renames and deletions re-render affected panes automatically (debounced); optional per-pane refreshSec for external data.
• Write-back, always gated and undoable: board drag & drop (touch devices get a move menu), row/card actions that rewrite frontmatter, forms that create notes or quick-capture into journal/{{today}}.md (auto-created), heatmap day-note creation. Every mutation shows an Undo notice.
• Tokens in paths and templates: {{today}}, rolling {{today-7d}}/{{today+1d}}, {{vaultName}}, {{time}}.
• Per-profile trust model: web embeds, command buttons, note writing and custom widget code are four toggles, all OFF by default; imported profiles never inherit trust. Command buttons copy + open a terminal, never auto-execute.
• Public API window.pinax (apiVersion 1): widget registration and safe vault helpers.
• Profile-local widgets.js (behind the code gate), export/import bundles, import from https URL (behind the web gate), one-click profile duplication, obsidian://pinax?profile=<id> deep links, first-run profile picker.
• LLM authoring path: profile.schema.json, AUTHORING.md, and the bundled build-your-pinax command.
• Bundled profiles: sre, helm (full multi-tab seed parity), reading (Bookshelf).
• 18 CSS-variable themes, command palette, density toggle, mobile support (isDesktopOnly: false).
• Tooling: unit tests, headless end-to-end harness against a mock vault, domain-neutrality check for the core, ESLint, 10k-note perf bench, SHA-pinned CI and release workflows with build provenance attestation.
• "Copy diagnostics" command for bug reports.

Commits

• a9b4542 ci: validate the reading profile (crm was renamed)
• 3f1d793 pinax 0.1.0: config-driven dashboard framework for Obsidian

Full Changelog: https://github.com/sphragis-oss/pinax/commits/0.1.0

Verify this build

gh attestation verify main.js --repo sphragis-oss/pinax