0.3.6 — Gemini structured-output compatibility fix

Fixes persistent mobile 400 invalid_request failures by replacing the legacy responseJsonSchema request with Gemini's current generationConfig.responseFormat.text contract.

If a regional rollout rejects that structured-output field, the plugin retries once in JSON MIME mode and applies the same strict local response validation. Authorization failures are not retried.

Keeps the 8,192-token cap, cancellation, bounded responses and safe machine-readable diagnostics. Validated with 82 unit/mock tests, strict TypeScript, reproducible browser bundle checks and a dependency audit reporting zero known vulnerabilities.

0.3.5 — mobile Gemini request fix

Fixes mobile HTTP 400 invalid_request failures by moving the stateless flashcard request from the beta Interactions endpoint to standard Gemini generateContent.

• keeps structured JSON output and evidence fields;
• keeps the 8,192-token cap, cancellation, bounded responses and retries;
• preserves safe machine-readable error diagnostics without reflecting provider-controlled messages;
• includes 81 passing unit/mock tests and a clean dependency audit.

Update the plugin on mobile and retry generation. If an error remains, share only the displayed error code and HTTP status—never share the API key.

0.3.4 — actionable Gemini error codes

Shows safe machine-readable Gemini error codes and HTTP statuses in the generation dialog while suppressing provider-controlled messages that could echo note or credential data.

• recognizes Interactions API codes such as invalid_request and authentication;
• recognizes nested Google ErrorInfo reasons such as API_KEY_INVALID;
• falls back safely for unknown or malformed responses;
• includes 81 passing unit/mock tests and a clean dependency audit.

If Gemini still rejects a mobile request, copy the displayed error code and HTTP status — never share the API key.

0.3.3 — mobile layout and security hardening

Adds touch-friendly settings and preview, a ribbon command, exact Spaced Repetition separator support, bidirectional English cards, evidence-based review, and safer output handling.

Security and reliability:

• validates output paths, field sizes, and complete Gemini responses;
• neutralizes generated HTML, embeds, links, and unexpected tags;
• ignores late responses after cancellation;
• updates Vitest to 5.0.0 and esbuild to 0.28.2 after CI detected a moderate development-tool advisory;
• passes 80 unit/mock tests and npm audit with 0 known vulnerabilities.

The same bundle targets desktop Obsidian on Windows, macOS and Linux, plus Android and iOS. GitHub CI passed on Ubuntu and Windows. Native Linux/Android/iOS smoke tests are still pending; use a test vault first.

Install by downloading ai-flashcard-generator-0.3.3.zip, or copy main.js, manifest.json and styles.css into the plugin directory.