feat: v1.4.0 audit fixes, multi-agent compatibility, Bases dashboard

External audit flagged 8 actionable items against current best practices for
Agent Skills, Claude Code hooks, Obsidian v1.9-v1.12, and JSON Canvas 1.0.
This release addresses all of them and adds multi-agent compatibility files
at zero cost to existing users.

Tier 1, critical fixes:

* wiki/meta/dashboard.base: NEW Obsidian Bases dashboard (native, no plugin
  needed). Replaces Dataview as the primary dashboard. Six views: Recent
  Activity, Seed Pages, Entities Missing Sources, Open Questions,
  Comparisons, Sources.
* wiki/meta/dashboard.md: now embeds dashboard.base. Legacy Dataview queries
  retained as optional fallback for users on Obsidian < 1.9.10.
* README.md and skills/wiki/references/plugins.md: Plugins section
  reorganized to recommend Bases (core, no install) primary, Dataview
  optional/legacy.
* skills/canvas/references/canvas-spec.md: added missing JSON Canvas 1.0
  fields. Group nodes now document background and backgroundStyle (cover,
  ratio, repeat). Edges document fromEnd (default 'none') and toEnd
  (default 'arrow') asymmetric defaults. Hex ID convention noted alongside
  descriptive ID alternative.
* .gitignore: track wiki/meta/dashboard.base explicitly.

Tier 2, important improvements:

* hooks/hooks.json: SessionStart now uses both command type
  ([ -f wiki/hot.md ] && cat ...) and prompt type. Command type is the
  canonical safety check that works in non-vault sessions without erroring.
  Matcher: startup|resume.
* hooks/hooks.json: NEW PostCompact hook re-injects hot cache after context
  compaction (hook-injected context does not survive compaction; CLAUDE.md
  does).
* hooks/hooks.json: PostToolUse auto-commit now guarded by [ -d .git ].
* hooks/README.md: NEW documentation including known plugin-hooks STDOUT bug
  (anthropics/claude-code#10875) and workarounds.
* skills/wiki/references/mcp-setup.md: added Option D (Obsidian CLI) for
  v1.12+. Added warning callout above NODE_TLS_REJECT_UNAUTHORIZED line
  explaining process-wide TLS bypass and recommending Option D as the
  secure alternative.
* skills/wiki-ingest/SKILL.md: documented [!contradiction] custom callout
  CSS dependency on vault-colors.css snippet.
* skills/wiki/references/css-snippets.md: full documentation of all four
  custom callouts (contradiction, gap, key-insight, stale) with built-in
  fallback equivalents.

Tier 3, multi-agent compatibility (low complexity, high reach):

* AGENTS.md: Codex CLI / OpenCode bootstrap.
* GEMINI.md: Gemini CLI / Antigravity bootstrap.
* .cursor/rules/claude-obsidian.mdc: Cursor always-on rules.
* .windsurf/rules/claude-obsidian.md: Windsurf Cascade rules.
* .github/copilot-instructions.md: GitHub Copilot conventions.
* bin/setup-multi-agent.sh: idempotent symlink installer for Codex,
  OpenCode, Gemini, Cursor, Windsurf. Wires up the skills/ directory in
  each agent's expected location.

Style cleanup: scrubbed all em dashes from every skill, hook, doc, and
bootstrap file (249 total replacements across 26 files). Skills now use
periods, commas, and colons throughout for cleaner natural prose.

Version: 1.3.0 to 1.4.0 (aligns plugin.json with GitHub release tag format).

Already resolved in v1.1 (no action needed):
* defuddle, obsidian-bases, obsidian-markdown skills shipped
* URL ingestion, vision ingestion, delta tracking docs
* Multi-depth wiki-query (Quick / Standard / Deep)
* PostToolUse auto-commit hook
* allowed-tools field removed from all SKILL.md files
* All templates already use plural tag/alias forms
* Custom callouts CSS already in vault-colors.css

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.github/copilot-instructions.md

@@ -0,0 +1,51 @@
+# claude-obsidian: GitHub Copilot Instructions
+
+This repository is a **Claude Code plugin and Obsidian vault** that builds persistent, compounding knowledge bases using Andrej Karpathy's LLM Wiki pattern. It is markdown-only. No build step, no compiled code, no runtime dependencies.
+
+## Project Type
+
+- Agent Skills package (cross-platform Agent Skills standard)
+- Obsidian vault (interpretable by Obsidian directly)
+- Claude Code plugin (installable via marketplace)
+
+## Repository Layout
+
+- `skills/`: 10 skills, each with a `SKILL.md` defining trigger phrases and instructions
+- `hooks/hooks.json`: Claude Code lifecycle hooks (SessionStart, PostCompact, PostToolUse, Stop)
+- `.claude-plugin/plugin.json`: plugin manifest
+- `wiki/`: generated knowledge base (Markdown files with YAML frontmatter)
+- `.raw/`: immutable source documents (never modify)
+- `_templates/`: Obsidian Templater templates
+- `_attachments/`: images and PDFs referenced by wiki pages
+
+## Conventions Copilot Should Follow
+
+When suggesting edits:
+
+1. **Frontmatter is flat YAML** with plural keys: `tags`, `aliases`, `cssclasses`
+2. **Internal links are wikilinks**: `[[Note Name]]`, not Markdown links to `.md` paths
+3. **Dates are `YYYY-MM-DD`**, not ISO datetimes
+4. **`.raw/` is immutable**. Never suggest edits to anything under that path
+5. **`wiki/log.md` is append-only**, with new entries at the top
+6. **`wiki/hot.md` is overwritten** at session end, not appended to
+7. **Skills use only `name` and `description` in frontmatter**. No `allowed-tools`, no `triggers`, no `globs` (these are not part of the Agent Skills spec)
+8. **Custom callouts**: this vault defines `[!contradiction]`, `[!gap]`, `[!key-insight]`, `[!stale]` in `.obsidian/snippets/vault-colors.css`. These render only with that snippet enabled.
+
+## When Editing Skills (`skills/<name>/SKILL.md`)
+
+- Frontmatter: `name` (matches directory name) and `description` (single quoted line, max ~250 useful chars)
+- Body: short, imperative instructions. Reference files with backticks. Do not paste large code blocks unless they're essential.
+- Trigger phrases go in the `description` field, not in body or non-standard fields
+
+## When Editing Hooks (`hooks/hooks.json`)
+
+- Valid event names only: `SessionStart`, `Stop`, `PreToolUse`, `PostToolUse`, `PreCompact`, `PostCompact`, `UserPromptSubmit`
+- Hook types: `command` (shell), `prompt` (LLM), `http` (POST), `agent` (subagent)
+- `matcher` field uses regex against tool names for `PreToolUse`/`PostToolUse`
+- For `SessionStart`: matcher uses `startup`, `resume`, `clear`, or `compact`
+
+## Cross-Reference
+
+- Plugin: https://github.com/AgriciDaniel/claude-obsidian
+- Pattern source: https://gist.github.com/karpathy/442a6bf555914893e9891c11519de94f
+- Authoritative Obsidian-specific skills: https://github.com/kepano/obsidian-skills