feat(plugin): implement the Topic Stream UI

.env.example

@@ -5,6 +5,7 @@ TOPIC_STREAM_BOOTSTRAP_EMBEDDING_MODEL=qwen3-embedding:0.6b
 TOPIC_STREAM_COMPOSE_DB_PRIMARY_POSTGRES_DSN=postgres://topic_stream:topic_stream@postgres:5432/topic_stream?sslmode=disable
 TOPIC_STREAM_COMPOSE_HTTP_ADDR=0.0.0.0:7331
 TOPIC_STREAM_COMPOSE_QDRANT_URL=http://qdrant:6334
+TOPIC_STREAM_CORS_ALLOWED_ORIGINS=app://obsidian.md
 TOPIC_STREAM_DB_PRIMARY_KIND=postgres
 TOPIC_STREAM_DB_PRIMARY_POSTGRES_DSN=
 TOPIC_STREAM_EMBEDDING_BATCH_INPUT_BYTES=1048576

.github/workflows/ci.yml

@@ -219,7 +219,9 @@ jobs:
     needs: changes
     if: needs.changes.outputs.plugin == 'true'
     runs-on: ubuntu-24.04
-    timeout-minutes: 10
+    timeout-minutes: 20
+    env:
+      PLAYWRIGHT_BROWSERS_PATH: ${{ github.workspace }}/.artifacts/playwright
     steps:
       - uses: actions/checkout@v7
         with:
@@ -230,9 +232,28 @@ jobs:
         with:
           node-version: '24'
           cache: pnpm
+      - name: Cache Playwright browsers
+        uses: actions/cache@v6
+        with:
+          path: ${{ github.workspace }}/.artifacts/playwright
+          key: ${{ runner.os }}-playwright-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-playwright-
       - run: pnpm install --frozen-lockfile
+      - run: pnpm --dir plugin exec playwright install --with-deps chromium
       - run: pnpm --dir plugin check
+      - run: pnpm --dir plugin test:storybook
+      - run: pnpm --dir plugin build:storybook
       - run: pnpm --dir plugin build
+      - name: Production Obsidian lifecycle and product flows (headless)
+        run: pnpm --dir plugin test:e2e:headless
+      - uses: actions/upload-artifact@v7
+        if: failure()
+        with:
+          name: plugin-host-diagnostics-${{ inputs.source_sha || github.sha }}
+          path: .artifacts/obsidian/logs/
+          retention-days: 7
+          if-no-files-found: ignore
 
   contract:
     name: Current contract and generated source
@@ -257,6 +278,7 @@ jobs:
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - run: pnpm contract:lint
+      - run: pnpm --dir plugin api:check
       - name: Validate and regenerate owned outputs
         run: |
           mise run codegen

.github/workflows/release-plugin.yml

@@ -113,6 +113,7 @@ jobs:
           test -s release-assets/main.js
           test -s release-assets/manifest.json
           test -s release-assets/styles.css
+          cmp plugin/manifest.json release-assets/manifest.json
 
           remote_tag=$(git ls-remote origin "refs/tags/$TAG")
           if [ -n "$remote_tag" ]; then

.gitignore

@@ -31,6 +31,7 @@ coverage.out
 *.tmp
 __pycache__/
 .artifacts/
+.impeccable/review/
 
 # Local product issues
 .scratch/

AGENTS.md

@@ -7,3 +7,7 @@ Issues and specs are tracked as Markdown files under `.scratch/<feature>/`. See
 ### Domain docs
 
 Domain documentation uses the single-context layout. See `docs/agents/domain.md`.
+
+### Storybook
+
+Product stories render production components and the same connected screen composition as the plugin. Mock external services and data at their ports. The primary Shell story includes every currently implemented screen and action; extend it with each feature. Keep harness-only probes hidden from the catalog. Multilingual demo content uses English and Spanish.