fix(obsidian): clear community-store review for 0.1.2 + asset attestations (#2107)

Obsidian community-store automated review (v0.1.1) flagged three errors and a
warning; this clears them and adds build-provenance attestations.

Errors:
- Manifest description must not include the word 'Obsidian' → reworded to
  '...cites the source notes. Your vault stays the single source of truth.'
- no-static-styles-assignment (chat-view.ts): el.style.height = ... →
  el.setCssStyles({ height }) per the plugin guidelines.
- no-unsupported-api (main.ts): Workspace.revealLeaf requires Obsidian v1.7.2 →
  bump minAppVersion 1.5.0 → 1.7.2 (matches the obsidian@^1.7.2 types we build
  against). versions.json 0.1.2 → 1.7.2.

Warning:
- builtin-modules dep → Node's built-in module.builtinModules in esbuild config;
  dependency removed.

Recommendation (build-provenance attestations for main.js/styles.css):
- Add actions/attest-build-provenance for the Obsidian assets in
  release-integration.yml (+ attestations: write). Assets release in the
  dedicated repo while the build runs here, so verify at owner scope:
  gh attestation verify main.js --owner vectorize-io.

Bumps manifest to 0.1.2. Verified with the bot's own linter
(eslint-plugin-obsidianmd): both code errors clear. build + tsc + 46 tests pass.

Author: benfrank241

.github/workflows/release-integration.yml

@@ -9,7 +9,8 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     permissions:
-      id-token: write  # for PyPI trusted publishing
+      id-token: write  # for PyPI trusted publishing + build-provenance attestations
+      attestations: write  # for actions/attest-build-provenance (Obsidian assets)
       # No `contents: write`: we never create releases in this repo. The Obsidian
       # plugin's distribution release is pushed to its dedicated repo using
       # OBSIDIAN_DIST_TOKEN (see the "Mirror Obsidian plugin" step below).
@@ -115,6 +116,18 @@ jobs:
       working-directory: ./hindsight-integrations/${{ steps.info.outputs.integration }}
       run: npm run build
 
+    # Build-provenance attestations for the Obsidian release assets (community-store
+    # recommendation). Runs after the build so main.js exists. The assets are
+    # released in the dedicated repo while the build runs here, so users verify at
+    # owner scope: `gh attestation verify main.js --owner vectorize-io`.
+    - name: Attest Obsidian plugin build provenance
+      if: steps.type.outputs.type == 'typescript' && steps.info.outputs.integration == 'obsidian'
+      uses: actions/attest-build-provenance@v2
+      with:
+        subject-path: |
+          hindsight-integrations/obsidian/main.js
+          hindsight-integrations/obsidian/styles.css
+
     # ── Obsidian plugin — mirror to its dedicated repo + cut the BRAT release ──
     # We do NOT create a GitHub Release in this monorepo: per-integration
     # releases pollute the repo's release list (it's for the core product) and

hindsight-integrations/obsidian/esbuild.config.mjs

@@ -1,6 +1,7 @@
 import esbuild from "esbuild";
 import process from "node:process";
-import builtins from "builtin-modules";
+// Node's own builtins list — replaces the external "builtin-modules" package.
+import { builtinModules as builtins } from "node:module";
 
 const production = process.argv[2] === "production";
 

hindsight-integrations/obsidian/manifest.json

@@ -1,9 +1,9 @@
 {
   "id": "hindsight",
   "name": "Hindsight",
-  "version": "0.1.1",
-  "minAppVersion": "1.5.0",
-  "description": "Ground your AI agents on your vault. Sync notes into Hindsight memory and chat with an agent that cites your notes — Obsidian stays the source of truth.",
+  "version": "0.1.2",
+  "minAppVersion": "1.7.2",
+  "description": "Sync your notes into a Hindsight memory bank and chat with an AI agent that answers from your vault and cites the source notes. Your vault stays the single source of truth.",
   "author": "Vectorize",
   "authorUrl": "https://hindsight.vectorize.io",
   "isDesktopOnly": true

hindsight-integrations/obsidian/package-lock.json

@@ -32,7 +32,6 @@
   ],
   "devDependencies": {
     "@types/node": "^22.0.0",
-    "builtin-modules": "^4.0.0",
     "esbuild": "^0.24.0",
     "obsidian": "^1.7.2",
     "typescript": "^5.7.0",

hindsight-integrations/obsidian/package.json

@@ -93,8 +93,10 @@ export class ChatView extends ItemView {
   /** Resize the composer to fit its content, up to INPUT_MAX_HEIGHT (then it scrolls). */
   private autoGrowInput(): void {
     const el = this.input;
-    el.style.height = "auto";
-    el.style.height = `${Math.min(el.scrollHeight, INPUT_MAX_HEIGHT)}px`;
+    // Use Obsidian's setCssStyles (not el.style.x =) per the plugin guidelines.
+    // Reset to auto first so scrollHeight reflects the content's natural height.
+    el.setCssStyles({ height: "auto" });
+    el.setCssStyles({ height: `${Math.min(el.scrollHeight, INPUT_MAX_HEIGHT)}px` });
   }
 
   private buildHeader(root: HTMLElement): void {

hindsight-integrations/obsidian/src/chat-view.ts

@@ -1,4 +1,5 @@
 {
   "0.1.0": "1.5.0",
-  "0.1.1": "1.5.0"
+  "0.1.1": "1.5.0",
+  "0.1.2": "1.7.2"
 }