@perrylink/dsh-ticktick 0.1.2

package/CHANGELOG.md

@@ -0,0 +1,24 @@
+# Changelog
+
+All notable changes to this project are documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.1.2] - 2026-09-04
+
+### Changed
+
+- Republish under the scoped npm name `@perrylink/dsh-ticktick`: the bare `dsh-ticktick` name is owned by another account (publish E403), so the package, the bundle-patch row, the client bundle id, and the five-language install commands now carry the scoped name; the plugin id (`ticktick`), settings namespace, tools, and repository stay unchanged.
+- Align the devDependency pins to the published dsh `0.1.2-rc.1` line and add the `dshWorkshop` omdsh-workshop-package/v1 intake manifest (carried over from the unreleased 0.1.1).
+
+## [0.1.0] - 2026-09-03
+
+### Added
+
+- TickTick (Dida365) task bridge over the official MCP endpoint: minimal streamable-HTTP MCP client (initialize handshake, session-id and protocol-version carry-over, Retry-After on 429, `isError` surfaced).
+- `TicktickService` under the `ticktick` Typert Remote namespace: status, projects, tasks (aggregated with per-list warnings), add (with read-after-write verification), complete, remove, setDue (with the measured move-to-inbox detour for the server-side `update_task` crash), reorder (descending sortOrder semantics), completed (30-day window), search, batchAdd.
+- Eleven curated agent tools (`ticktick_status/lists/tasks/add/complete/delete/due/reorder/completed/search/batch_add`) plus a system-prompt usage section; Code Mode calls come free via `output.schema`.
+- Session-header task panel (`conversation.session.header.actions`): list filter, undone/completed views, full-text search, quick add, complete, delete with confirm, inline due dates with overdue/today/tomorrow chips, drag reorder (undone, single-list views).
+- Plugin settings card (`settings.plugin.item`, key `ticktick`): secret token, token file, MCP endpoint, protected task ids; live token re-read with 401-triggered client reset.
+- Protected task ids refuse every mutating operation before any wire call.
+- Zero-dependency live-endpoint probes (`probes/`) for handshake, CRUD, due-date detour, reorder semantics, and query-tool contract discovery.
+- Setup UX: DIDA365_TOKEN env fallback, one-step in-panel token setup with a connection status badge, settings-card Test-connection / Clear-credentials buttons, and CN/International endpoint presets.
+- Unit specs: domain normalization, MCP client, service workarounds, drag math, due-date presentation, token resolution.

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 PerryLink
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.es.md

@@ -0,0 +1,41 @@
+# dsh-ticktick
+
+[English](README.md) | [涓枃](README.zh.md) | **Espa帽ol** | [Portugu锚s](README.pt.md) | [啶灌た啶ㄠ啶︵](README.hi.md)
+
+Puente de tareas de TickTick / Dida365 (婊寸瓟娓呭崟) para [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness): un panel de tareas en la cabecera de sesi贸n (filtro por lista, alta r谩pida, completar, borrar, fechas l铆mite, reordenar arrastrando), once herramientas para el agente, una tarjeta de configuraci贸n y un servicio Remote tipado 鈥?todo sobre el endpoint MCP oficial de TickTick.
+
+## Caracter铆sticas
+
+- **Panel de sesi贸n** 鈥?el bot贸n `ticktick` de la cabecera abre una ventana emergente: filtrar por lista (Todas + cada lista), a帽adir tareas con fecha opcional, completar, borrar (con confirmaci贸n), fijar/limpiar fechas l铆mite con etiquetas vencida/hoy/ma帽ana y reordenar arrastrando (vistas de una sola lista).
+- **Ocho herramientas** 鈥?`ticktick_status`, `ticktick_lists`, `ticktick_tasks`, `ticktick_add`, `ticktick_complete`, `ticktick_delete`, `ticktick_due`, `ticktick_reorder`; Code Mode obtiene `await tools.ticktick_*(args)` gratis.
+- **Tarjeta de configuraci贸n** 鈥?Ajustes 鈫?Plugins 鈫?TickTick: token API (secreto), archivo de token, endpoint MCP, ids protegidos.
+- **Relectura del token en vivo** 鈥?el token se relee en cada petici贸n (secreto de la tarjeta > archivo, por defecto `$DSH_HOME/.ticktick-token`); un 401 reinicia el cliente.
+- **Contorneos medidos** 鈥?el MCP de TickTick rechaza `update_task` para tareas de proyectos reales ("Expecting value鈥?); el puente reintenta con mover-a-bandeja 鈫?actualizar 鈫?devolver. Las listas con fallos de validaci贸n del servidor se omiten y se notifican como advertencias.
+- **Ids protegidos** 鈥?las operaciones de mutaci贸n rechazan tareas protegidas antes de llamar a la red.
+- **Sincronizaci贸n multidispositivo** 鈥?cada escritura va a la nube de TickTick; m贸vil, escritorio y web la ven.
+
+## Instalaci贸n
+
+```sh
+dsh plugin --profile web add @perrylink/dsh-ticktick   # npm (incluye lib/)
+dsh plugin --profile web add "github:PerryLink/dsh-ticktick#<sha>"   # git
+dsh plugin --profile web add link:/path/to/dsh-ticktick              # local
+```
+
+Reinicia `dsh web`. Obt茅n el token API 鍙ｄ护 (prefijo `dp_`) en la web de Dida365 (Perfil 鈫?Ajustes 鈫?Cuenta y seguridad 鈫?API 鍙ｄ护) y p茅galo en la tarjeta o escr铆belo en `$DSH_HOME/.ticktick-token`.
+
+| Clave | Por defecto | Significado |
+|---|---|---|
+| `tokenFile` | `''` | Archivo de token; vac铆o = `$DSH_HOME/.ticktick-token` |
+| `mcpUrl` | `https://mcp.dida365.com` | Endpoint MCP (el internacional no est谩 verificado) |
+| `toolCallTimeoutMs` | `30000` | Plazo por tools/call en ms |
+| `protectedTaskIds` | `[]` | Ids que las mutaciones rechazan |
+| `tools.*` | `''` | Nombres MCP fijados; `''` = descubrir |
+
+## Limitaciones
+
+El endpoint internacional no est谩 verificado; las vistas de completadas y la b煤squeda se difieren (contratos descubiertos por `probes/probe-queries.mjs`); no expongas `dsh web` a internet. Verificaci贸n en vivo: exporta `DIDA365_TOKEN` y ejecuta `node probes/probe-*.mjs`.
+
+## Licencia
+
+[Apache-2.0](LICENSE)

package/README.hi.md

@@ -0,0 +1,33 @@
+# dsh-ticktick
+
+[English](README.md) | [涓枃](README.zh.md) | [Espa帽ol](README.es.md) | [Portugu锚s](README.pt.md) | **啶灌た啶ㄠ啶︵**
+
+[DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 啶曕 啶侧た啶?TickTick / Dida365 (婊寸瓟娓呭崟) 啶曕ぞ啶班啶?啶膏啶む: 啶膏い啷嵿ぐ-啶多啶班啶?啶曕ぞ啶班啶?啶啶ㄠげ (啶膏啶氞 啶ぜ啶苦げ啷嵿啶? 啶む啶掂ぐ啶苦い 啶溹啶∴ぜ, 啶啶班啶?啶曕ぐ啷囙, 啶灌啶距啶? 啶ㄠた啶い 啶むた啶ムた啶ぞ啶? 啶∴啶班啶?啶曕啶班ぎ), 啶嗋 啶忇啷囙啶?啶夃お啶曕ぐ啶? 啶膏啶熰た啶傕 啶曕ぞ啶班啶?啶斷ぐ 啶忇 啶熰ぞ啶囙お啷嵿ぁ Remote 啶膏啶掂ぞ 鈥?啶膏が 啶嗋ぇ啶苦啶距ぐ啶苦 TickTick MCP 啶忇啶∴お啷夃啶傕 啶ぐ啷?
+## 啶掂た啶多啶粪い啶距啶?
+- **啶膏い啷嵿ぐ 啶啶ㄠげ** 鈥?啶多啶班啶?啶曕ぞ `ticktick` 啶啶?啶啶啶?啶栢啶侧い啶?啶灌: 啶膏啶氞 啶膏 啶ぜ啶苦げ啷嵿啶?(啶膏き啷€ + 啶灌ぐ 啶膏啶氞), 啶掂啶曕げ啷嵿お啶苦 啶むた啶ムた 啶曕 啶膏ぞ啶?啶溹啶∴ぜ啶ㄠぞ, 啶啶班啶?啶曕ぐ啶ㄠぞ, 啶灌啶距え啶?(啶啶粪啶熰た 啶膏す啶苦い), 啶呧い啶苦う啷囙く/啶嗋/啶曕げ 啶氞た啶啶?啶曕 啶膏ぞ啶?啶むた啶ムた 啶膏啶?啶膏ぞ啶ぜ 啶曕ぐ啶ㄠぞ, 啶斷ぐ 啶∴啶班啶?啶曕啶班ぎ (啶忇啶?啶膏啶氞 啶︵啶多啶?啷?- **啶嗋 啶夃お啶曕ぐ啶?* 鈥?`ticktick_status`, `ticktick_lists`, `ticktick_tasks`, `ticktick_add`, `ticktick_complete`, `ticktick_delete`, `ticktick_due`, `ticktick_reorder`; Code Mode 啶曕 `await tools.ticktick_*(args)` 啶啶ぜ啷嵿い 啶た啶侧い啶?啶灌啷?- **啶膏啶熰た啶傕 啶曕ぞ啶班啶?* 鈥?啶膏啶熰た啶傕啷嵿じ 鈫?啶啶侧啶囙え啷嵿じ 鈫?TickTick: API 啶熰啶曕え (啶椸啶啶?, 啶熰啶曕え 啶ぜ啶距啶? MCP 啶忇啶∴お啷夃啶傕, 啶膏啶班啷嵿し啶苦い id啷?- **啶侧ぞ啶囙さ 啶熰啶曕え 啶啶ㄠぐ啷嵿お啶犩え** 鈥?啶熰啶曕え 啶灌ぐ 啶呧え啷佮ぐ啷嬥ぇ 啶ぐ 啶︵啶ぞ啶班ぞ 啶あ啶监ぞ 啶溹ぞ啶むぞ 啶灌 (啶曕ぞ啶班啶?啶椸啶啶?> 啶ぜ啶距啶? 啶∴た啶ぜ啷夃げ啷嵿 `$DSH_HOME/.ticktick-token`); 401 啶曕啶侧ぞ啶囙啶?啶班啶膏啶?啶曕ぐ啶むぞ 啶灌啷?- **啶ぞ啶 啶椸 啶夃お啶距く** 鈥?TickTick MCP 啶掂ぞ啶膏啶むさ啶苦 啶ぐ啶苦く啷嬥啶ㄠぞ啶撪 啶曕 啶曕ぞ啶班啶啶?啶曕 啶侧た啶?`update_task` 啶呧じ啷嵿さ啷€啶曕ぞ啶?啶曕ぐ啶むぞ 啶灌 ("Expecting value鈥?); 啶膏啶む 啶囙え啶啶曕啶?啶侧-啶溹ぞ啶?鈫?啶呧お啶∴啶?鈫?啶掂ぞ啶じ-啶侧ぞ啶?啶膏 啶啶ㄠ 啶啶班く啶距じ 啶曕ぐ啶むぞ 啶灌啷?啶膏ぐ啷嵿さ啶?啶膏い啷嵿く啶距お啶?啶啶?啶掂た啶げ 啶膏啶氞た啶ぞ啶?啶涏啶∴ぜ啷€ 啶溹ぞ啶む 啶灌啶?啶斷ぐ 啶氞啶むぞ啶掂え啷€ 啶曕 啶班啶?啶啶?啶︵た啶栢い啷€ 啶灌啶傕イ
+- **啶膏啶班啷嵿し啶苦い id** 鈥?啶夃い啷嵿お啶班た啶掂ぐ啷嵿い啶?啶膏啶氞ぞ啶侧え 啶ㄠ啶熰さ啶班啶?啶曕啶?啶膏 啶す啶侧 啶膏啶班啷嵿し啶苦い 啶曕ぞ啶班啶啶?啶曕 啶呧じ啷嵿さ啷€啶曕ぞ啶?啶曕ぐ啶む 啶灌啶傕イ
+- **啶す啷?啶∴た啶掂ぞ啶囙じ 啶膏ぎ啶ㄠ啶掂く** 鈥?啶灌ぐ 啶侧啶栢え TickTick 啶曕啶侧ぞ啶夃ぁ 啶ぐ 啶溹ぞ啶むぞ 啶灌; 啶ぜ啷嬥え, 啶∴啶膏啶曕啷夃お 啶斷ぐ 啶掂啶?啶夃じ啷?啶︵啶栢い啷?啶灌啶傕イ
+
+## 啶囙啶膏啶熰啶侧啶多え
+
+```sh
+dsh plugin --profile web add @perrylink/dsh-ticktick # npm (lib/ 啶膏す啶苦い)
+dsh plugin --profile web add "github:PerryLink/dsh-ticktick#<sha>"   # git
+dsh plugin --profile web add link:/path/to/dsh-ticktick              # 啶膏啶ムぞ啶ㄠ啶?```
+
+`dsh web` 啶啶ㄠ 啶嗋ぐ啶傕き 啶曕ぐ啷囙啷?Dida365 啶掂啶?(啶啶班啶ぜ啶距啶?鈫?啶膏啶熰た啶傕啷嵿じ 鈫?啶栢ぞ啶むぞ 啶斷ぐ 啶膏啶班啷嵿し啶?鈫?API 鍙ｄ护) 啶膏 `dp_` 啶熰啶曕え 啶侧啶?啶斷ぐ 啶曕ぞ啶班啶?啶啶?啶氞た啶啶距啶?啶ぞ `$DSH_HOME/.ticktick-token` 啶啶?啶侧た啶栢啶傕イ
+
+| 啶曕啶傕啷€ | 啶∴た啶ぜ啷夃げ啷嵿 | 啶呧ぐ啷嵿ぅ |
+|---|---|---|
+| `tokenFile` | `''` | 啶熰啶曕え 啶ぜ啶距啶? 啶栢ぞ啶侧 = `$DSH_HOME/.ticktick-token` |
+| `mcpUrl` | `https://mcp.dida365.com` | MCP 啶忇啶∴お啷夃啶傕 (啶呧啶むぐ啷嵿ぐ啶距し啷嵿啷嵿ぐ啷€啶?啶膏い啷嵿く啶距お啶苦い 啶ㄠす啷€啶? |
+| `toolCallTimeoutMs` | `30000` | 啶啶班い啶?tools/call 啶膏ぎ啶?啶膏啶ぞ (ms) |
+| `protectedTaskIds` | `[]` | 啶掂 id 啶溹た啶ㄠ啶灌啶?啶夃い啷嵿お啶班た啶掂ぐ啷嵿い啶?啶呧じ啷嵿さ啷€啶曕ぞ啶?啶曕ぐ啶む 啶灌啶?|
+| `tools.*` | `''` | 啶ㄠた啶多啶氞た啶?MCP 啶ㄠぞ啶? `''` = 啶栢啶溹啶?|
+
+## 啶膏啶ぞ啶忇
+
+啶呧啶むぐ啷嵿ぐ啶距し啷嵿啷嵿ぐ啷€啶?啶忇啶∴お啷夃啶傕 啶膏い啷嵿く啶距お啶苦い 啶ㄠす啷€啶?啶灌; 啶啶班啶?啶︵啶多啶?啶斷ぐ 啶栢啶?啶ぞ啶?啶啶?(`probes/probe-queries.mjs` 啶呧え啷佮が啶傕ぇ 啶栢啶溹い啶?啶灌); `dsh web` 啶曕 啶囙啶熰ぐ啶ㄠ啶?啶ぐ 啶夃啶距啶?啶?啶曕ぐ啷囙啷?啶侧ぞ啶囙さ 啶膏い啷嵿く啶距お啶? `DIDA365_TOKEN` 啶ㄠた啶班啶ぞ啶?啶曕ぐ啷囙 啶斷ぐ `node probes/probe-*.mjs` 啶氞げ啶距啶佮イ
+
+## 啶侧ぞ啶囙じ啷囙啶?
+[Apache-2.0](LICENSE)

package/README.md

@@ -0,0 +1,111 @@
+# dsh-ticktick
+
+**English** | [中文](README.zh.md) | [Español](README.es.md) | [Português](README.pt.md) | [हिन्दी](README.hi.md)
+
+TickTick / Dida365 (滴答清单) task bridge for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness): a Session-header task panel (list filter, quick add, complete, delete, due dates, drag reorder), eight curated agent tools, a plugin settings card, and a typed Remote service — all over the official TickTick MCP endpoint.
+
+## Features
+
+- **Session-header panel** — the `ticktick` action in the Session header opens a popup: filter by list (All + every list), toggle undone/completed views, full-text search, add tasks with an optional due date, complete, delete (with confirm), set/clear due dates with overdue/today/tomorrow chips, and drag-reorder (undone, single-list views). A status dot shows the connection state; when no token is configured the panel offers one-step in-panel token setup.
+- **Eleven agent tools** — `ticktick_status`, `ticktick_lists`, `ticktick_tasks`, `ticktick_add`, `ticktick_complete`, `ticktick_delete`, `ticktick_due`, `ticktick_reorder`, `ticktick_completed`, `ticktick_search`, `ticktick_batch_add`; Code Mode gets `await tools.ticktick_*(args)` for free.
+- **Settings card** — Settings → Plugins → TickTick: API token (secret), token file, MCP endpoint with CN/International presets, protected task ids, a Test-connection button, and a Clear-credentials button.
+- **Live token re-read** — the Bearer token is re-read per request (card secret > token file, default `$DSH_HOME/.ticktick-token`); a 401 resets the client so a rotated token activates without restart.
+- **Measured workarounds** — the TickTick MCP server rejects `update_task` for tasks inside regular projects ("Expecting value: line 1 column 1"); the bridge retries via a move-to-inbox → update → move-back detour. Lists that fail server-side validation (historical `repeatFrom: ''` data) are skipped and reported as warnings, never silently dropped.
+- **Protected ids** — mutating operations refuse tasks on the protected-id list before any wire call.
+- **Multi-device sync** — every write lands on the TickTick cloud account, so the phone/desktop/web apps see it; every read fetches current state.
+
+## Install
+
+```sh
+# npm (published artifact includes lib/, no build permission needed)
+dsh plugin --profile web add @perrylink/dsh-ticktick
+
+# git source (pin a commit; pnpm asks you to allow the prepare build once)
+dsh plugin --profile web add "github:PerryLink/dsh-ticktick#<sha>"
+
+# local development
+dsh plugin --profile web add link:/path/to/dsh-ticktick
+```
+
+Restart `dsh web` (bundle plugins activate on restart). The `ticktick` action appears in the Session header; the card appears under Settings → Plugins.
+
+## Configuration
+
+1. Get an API 口令 (a `dp_`-prefixed token) from the Dida365/TickTick web app: Profile → Settings → Account & Security → API 口令.
+2. Pick one of three token sources (priority order): the Settings → Plugins → TickTick card's secret field, the `DIDA365_TOKEN` environment variable, or a token file (default `$DSH_HOME/.ticktick-token`, one line). Writing the file activates the bridge without any config change.
+3. Use the card's **Test connection** button to verify the token, and **Clear credentials** to wipe it.
+
+| Config key | Default | Meaning |
+|---|---|---|
+| `tokenFile` | `''` | Path to a text file holding the token; empty resolves to `$DSH_HOME/.ticktick-token` |
+| `mcpUrl` | `https://mcp.dida365.com` | TickTick MCP endpoint (the international endpoint is unverified — see below) |
+| `toolCallTimeoutMs` | `30000` | Per tools/call deadline in milliseconds |
+| `protectedTaskIds` | `[]` | Task ids every mutating operation refuses |
+| `tools.*` | `''` each | Raw MCP tool-name pins (projects/tasks/create/complete/remove/update/move); `''` = discover by pattern |
+
+## Agent tools
+
+| Tool | Purpose |
+|---|---|
+| `ticktick_status` | connection state: token configured, client connected, endpoint, last error |
+| `ticktick_lists` | every list (project), the virtual Inbox included |
+| `ticktick_tasks` | undone tasks: one list or all aggregated, with per-list warnings |
+| `ticktick_add` | create a task (list, optional ISO due date) |
+| `ticktick_complete` | complete a task (task id + list id) |
+| `ticktick_delete` | delete a task (task id + list id) |
+| `ticktick_due` | set/clear a due date (omit the date to clear) |
+| `ticktick_reorder` | assign a new integer sortOrder (lists order by descending sortOrder) |
+| `ticktick_completed` | tasks completed within a window (default 30 days), optionally one list |
+| `ticktick_search` | full-text search over tasks (the official search tool) |
+| `ticktick_batch_add` | create several tasks in one call |
+
+## Architecture
+
+```
+browser panel ── ctx.remote.ticktick.* ──▶ TicktickService (Typert Remote)
+settings card ── ctx.settingsScope ──────▶ settings namespace "ticktick"
+agent tools ─── ctx.tools (ticktick_*) ──▶ the same service
+                    │
+                    ▼
+        minimal streamable-HTTP MCP client
+        (session id, protocol version, Retry-After)
+                    │
+                    ▼
+        https://mcp.dida365.com  (official TickTick MCP)
+```
+
+## Known limitations
+
+- The international TickTick endpoint is **unverified**: `mcpUrl` defaults to the CN endpoint, and the international MCP URL has not been probed.
+- The completed view, search, and batch add ride the MCP tools `list_completed_tasks_by_date`, `search`, and `batch_add_tasks`; their wire contracts come from the published catalogue (`dida365-sdk` stubs) and **re-verification against the live endpoint is pending** — run `probes/probe-queries.mjs` with a real token before claiming them verified.
+- The measured `update_task` crash and the list-validation failure are server-side behaviors; `probes/` re-verifies them against the live endpoint before a release (run with `DIDA365_TOKEN` exported).
+- The `/api` surface the panel uses is the standard harness Typert gateway; the token is stored locally (settings document or token file) and sent only to TickTick's own servers. Do not expose a `dsh web` instance to the public internet.
+
+## Verify the bridge against the live endpoint
+
+```sh
+# PowerShell
+$env:DIDA365_TOKEN='dp_...'
+node probes/probe-bootstrap.mjs      # handshake + tool catalogue
+node probes/probe-crud.mjs           # create/complete/delete round trip
+node probes/probe-due.mjs            # due dates (+ detour with a PROJECT_ID)
+node probes/probe-reorder.mjs        # sortOrder semantics
+node probes/probe-queries.mjs        # P2 query-tool contract discovery
+```
+
+## Uninstall
+
+```sh
+dsh plugin --profile web remove @perrylink/dsh-ticktick
+```
+
+Restart `dsh web`. All runtime registrations (tools, panel, settings card, prompt section) are removed with the plugin. The only static residue is the token in the user settings document — clear it first with the card's **Clear credentials** button (or remove the token file / `DIDA365_TOKEN` variable) to detach completely. To keep the package installed but inactive, disable the row instead:
+
+```yaml
+- id: ticktick
+  disabled: true
+```
+
+## License
+
+[Apache-2.0](LICENSE)

package/README.pt.md

@@ -0,0 +1,41 @@
+# dsh-ticktick
+
+[English](README.md) | [涓枃](README.zh.md) | [Espa帽ol](README.es.md) | **Portugu锚s** | [啶灌た啶ㄠ啶︵](README.hi.md)
+
+Ponte de tarefas TickTick / Dida365 (婊寸瓟娓呭崟) para o [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness): painel de tarefas no cabe莽alho da sess茫o (filtro por lista, adi莽茫o r谩pida, concluir, excluir, datas de vencimento, reordenar arrastando), Onze ferramentas do agente, cart茫o de configura莽茫o e um servi莽o Remote tipado 鈥?tudo sobre o endpoint MCP oficial do TickTick.
+
+## Funcionalidades
+
+- **Painel da sess茫o** 鈥?o bot茫o `ticktick` do cabe莽alho abre um popup: filtrar por lista (Todas + cada lista), adicionar tarefas com data opcional, concluir, excluir (com confirma莽茫o), definir/limpar datas com selos vencida/hoje/amanh茫 e reordenar arrastando (vistas de lista 煤nica).
+- **Onze ferramentas** 鈥?`ticktick_status`, `ticktick_lists`, `ticktick_tasks`, `ticktick_add`, `ticktick_complete`, `ticktick_delete`, `ticktick_due`, `ticktick_reorder`; o Code Mode ganha `await tools.ticktick_*(args)` de gra莽a.
+- **Cart茫o de configura莽茫o** 鈥?Ajustes 鈫?Plugins 鈫?TickTick: token de API (segredo), arquivo de token, endpoint MCP, ids protegidos.
+- **Releitura do token em tempo real** 鈥?o token 茅 relido a cada requisi莽茫o (segredo do cart茫o > arquivo, padr茫o `$DSH_HOME/.ticktick-token`); um 401 reinicia o cliente.
+- **Contornos medidos** 鈥?o MCP do TickTick rejeita `update_task` para tarefas de projetos reais ("Expecting value鈥?); a ponte tenta de novo com mover-para-caixa 鈫?atualizar 鈫?devolver. Listas com falha de valida莽茫o do servidor s茫o ignoradas e reportadas como avisos.
+- **Ids protegidos** 鈥?muta莽玫es recusam tarefas protegidas antes de qualquer chamada de rede.
+- **Sincroniza莽茫o multidispositivo** 鈥?cada escrita vai para a nuvem do TickTick; celular, desktop e web a veem.
+
+## Instala莽茫o
+
+```sh
+dsh plugin --profile web add @perrylink/dsh-ticktick   # npm (inclui lib/)
+dsh plugin --profile web add "github:PerryLink/dsh-ticktick#<sha>"   # git
+dsh plugin --profile web add link:/path/to/dsh-ticktick              # local
+```
+
+Reinicie o `dsh web`. Obtenha o token API 鍙ｄ护 (prefixo `dp_`) no site do Dida365 (Perfil 鈫?Ajustes 鈫?Conta e seguran莽a 鈫?API 鍙ｄ护) e cole-o no cart茫o ou escreva-o em `$DSH_HOME/.ticktick-token`.
+
+| Chave | Padr茫o | Significado |
+|---|---|---|
+| `tokenFile` | `''` | Arquivo de token; vazio = `$DSH_HOME/.ticktick-token` |
+| `mcpUrl` | `https://mcp.dida365.com` | Endpoint MCP (o internacional n茫o est谩 verificado) |
+| `toolCallTimeoutMs` | `30000` | Prazo por tools/call em ms |
+| `protectedTaskIds` | `[]` | Ids que as muta莽玫es recusam |
+| `tools.*` | `''` | Nomes MCP fixados; `''` = descobrir |
+
+## Limita莽玫es
+
+O endpoint internacional n茫o est谩 verificado; visualiza莽茫o de conclu铆das e busca ficam adiadas (contratos descobertos por `probes/probe-queries.mjs`); n茫o exponha `dsh web` 脿 internet. Verifica莽茫o ao vivo: exporte `DIDA365_TOKEN` e execute `node probes/probe-*.mjs`.
+
+## Licen莽a
+
+[Apache-2.0](LICENSE)

package/README.zh.md

@@ -0,0 +1,111 @@
+# dsh-ticktick
+
+[English](README.md) | **中文** | [Español](README.es.md) | [Português](README.pt.md) | [हिन्दी](README.hi.md)
+
+面向 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 的滴答清单（TickTick / Dida365）任务桥：会话头部任务面板（清单筛选、快速添加、完成、删除、截止日期、拖拽排序）、8 个精选 agent 工具、插件设置卡片，以及类型化的 Remote 服务——全部走官方滴答 MCP 端点。
+
+## 功能
+
+- **会话头部面板**：会话头部的 `ticktick` 按钮打开弹窗——按清单筛选（全部 + 各清单）、未完成/已完成视图切换、全文搜索、带可选日期的快速添加、勾选完成、确认删除、设置/清除截止日期（过期/今天/明天高亮 chip）、单清单未完成视图内拖拽排序。常驻连接状态圆点；未配置令牌时面板内直接一步粘贴保存。
+- **11 个 agent 工具**：`ticktick_status`、`ticktick_lists`、`ticktick_tasks`、`ticktick_add`、`ticktick_complete`、`ticktick_delete`、`ticktick_due`、`ticktick_reorder`、`ticktick_completed`、`ticktick_search`、`ticktick_batch_add`；Code Mode 免费获得 `await tools.ticktick_*(args)`。
+- **设置卡片**：设置 → 插件 → TickTick：API 口令（secret）、令牌文件、端点预设（国内/国际版未实测/自定义）、受保护任务 id、一键**测试连接**与**清除凭据**。
+- **令牌热重读**：Bearer 令牌每次请求重读（卡片 secret 优先于令牌文件，默认 `$DSH_HOME/.ticktick-token`）；401 会重置客户端，轮换令牌无需重启。
+- **实测绕行**：滴答 MCP 对真实项目内任务调用 `update_task` 会服务端崩溃（"Expecting value: line 1 column 1"）——桥自动走「移到收件箱 → 更新 → 移回」绕行；服务端校验失败的清单（历史 `repeatFrom: ''` 数据）跳过并以警告透传，绝不静默丢弃。
+- **受保护任务**：变更操作在任何网络调用前拒绝受保护 id 列表中的任务。
+- **多端同步**：所有写入落在滴答云端账号，手机/电脑/网页版都能看到；每次读取都是当前状态。
+
+## 安装
+
+```sh
+# npm（发布产物含 lib/，无需构建许可）
+dsh plugin --profile web add @perrylink/dsh-ticktick
+
+# git 源码（钉住 commit；pnpm 首次会请你放行 prepare 构建）
+dsh plugin --profile web add "github:PerryLink/dsh-ticktick#<sha>"
+
+# 本地开发
+dsh plugin --profile web add link:/path/to/dsh-ticktick
+```
+
+重启 `dsh web`（bundle 插件重启生效）。`ticktick` 按钮出现在会话头部；设置卡片出现在 设置 → 插件。
+
+## 配置
+
+1. 在滴答网页版获取 API 口令（`dp_` 开头）：头像 → 设置 → 账户与安全 → API 口令。
+2. 三种令牌来源任选其一（优先级从高到低）：设置 → 插件 → TickTick 卡片的 secret 字段、`DIDA365_TOKEN` 环境变量、令牌文件（默认 `$DSH_HOME/.ticktick-token`，一行）。写文件即生效，无需任何配置变更。
+3. 用卡片上的**测试连接**按钮验证令牌，**清除凭据**按钮一键抹除。
+
+| 配置键 | 默认 | 含义 |
+|---|---|---|
+| `tokenFile` | `''` | 存放令牌的文本文件路径；留空 = `$DSH_HOME/.ticktick-token` |
+| `mcpUrl` | `https://mcp.dida365.com` | 滴答 MCP 端点（国际版端点未实测——见下文） |
+| `toolCallTimeoutMs` | `30000` | 单次 tools/call 截止时间（毫秒） |
+| `protectedTaskIds` | `[]` | 所有变更操作拒绝的任务 id |
+| `tools.*` | 各自 `''` | 原始 MCP 工具名钉住（projects/tasks/create/complete/remove/update/move）；`''` = 按模式发现 |
+
+## Agent 工具
+
+| 工具 | 用途 |
+|---|---|
+| `ticktick_status` | 连接状态：令牌已配置、客户端已连接、端点、最近错误 |
+| `ticktick_lists` | 全部清单（含虚拟收件箱） |
+| `ticktick_tasks` | 未完成任务：单个清单或全部聚合，附带逐清单警告 |
+| `ticktick_add` | 创建任务（清单、可选 ISO 截止日期） |
+| `ticktick_complete` | 完成任务（任务 id + 清单 id） |
+| `ticktick_delete` | 删除任务（任务 id + 清单 id） |
+| `ticktick_due` | 设置/清除截止日期（省略日期 = 清除） |
+| `ticktick_reorder` | 赋新整数 sortOrder（清单按 sortOrder 降序排列） |
+| `ticktick_completed` | 时间窗内已完成任务（默认近 30 天），可选单清单 |
+| `ticktick_search` | 任务全文搜索（官方 search 工具） |
+| `ticktick_batch_add` | 一次调用批量创建任务 |
+
+## 架构
+
+```
+浏览器面板 ── ctx.remote.ticktick.* ──▶ TicktickService（Typert Remote）
+设置卡片 ──── ctx.settingsScope ──────▶ settings 命名空间 "ticktick"
+agent 工具 ── ctx.tools（ticktick_*）──▶ 同一服务
+                    │
+                    ▼
+        迷你 streamable-HTTP MCP 客户端
+        （session id、协议版本、Retry-After）
+                    │
+                    ▼
+        https://mcp.dida365.com（官方滴答 MCP）
+```
+
+## 已知限制
+
+- 国际版 TickTick 端点**未实测**：`mcpUrl` 默认国内端点，国际版 MCP URL 尚未探测。
+- 已完成视图、搜索与批量添加走官方 MCP 的 `list_completed_tasks_by_date`、`search`、`batch_add_tasks` 工具；其线上契约来自已发布目录（dida365-sdk 存根），**对真实端点的复验待做**——先用真实令牌跑 `probes/probe-queries.mjs`，再宣称已核验。
+- 实测到的 `update_task` 崩溃与清单校验失败是服务端行为；发布前用 `probes/` 对真实端点复验（导出 `DIDA365_TOKEN` 后运行）。
+- 面板使用的 `/api` 面是 harness 标准 Typert 网关；令牌仅存本地（设置文档或令牌文件）且只发给滴答自己的服务器。不要把 `dsh web` 实例暴露到公网。
+
+## 对真实端点验证
+
+```sh
+# PowerShell
+$env:DIDA365_TOKEN='dp_...'
+node probes/probe-bootstrap.mjs      # 握手 + 工具目录
+node probes/probe-crud.mjs           # 创建/完成/删除往返
+node probes/probe-due.mjs            # 截止日期（带 PROJECT_ID 可测绕行）
+node probes/probe-reorder.mjs        # sortOrder 语义
+node probes/probe-queries.mjs        # P2 查询工具契约探测
+```
+
+## 卸载
+
+```sh
+dsh plugin --profile web remove @perrylink/dsh-ticktick
+```
+
+重启 `dsh web`。工具、面板、设置卡、系统提示等全部运行态注册随插件卸载一并撤销。唯一静态残留是用户设置文档里的令牌——卸载前用卡片的**清除凭据**按钮抹掉（或删除令牌文件 / `DIDA365_TOKEN` 变量）即可彻底断开。想保留安装但暂时停用，改禁用该行：
+
+```yaml
+- id: ticktick
+  disabled: true
+```
+
+## License
+
+[Apache-2.0](LICENSE)

package/cordis.patch.yml

@@ -0,0 +1,35 @@
+# dsh-ticktick bundle patch: mount the TickTick task bridge. `name` is the
+# package name, resolved through the profile's node_modules. An id-targeted
+# override replaces the whole config row — restate every key when overriding.
+# The Bearer token (the TickTick API 口令, dp_ prefix) is read from the
+# settings card or from $DSH_HOME/.ticktick-token at request time; writing
+# the file activates the bridge without a config change.
+- insert:
+    - id: ticktick
+      name: '@perrylink/dsh-ticktick'
+      config:
+        # Path to a text file holding the Bearer token. Empty (default)
+        # resolves to <DSH_HOME>/.ticktick-token at request time.
+        # tokenFile: ''
+        # TickTick MCP endpoint (CN default; the international endpoint is
+        # unverified — see README).
+        # mcpUrl: 'https://mcp.dida365.com'
+        # Per tools/call deadline in milliseconds.
+        # toolCallTimeoutMs: 30000
+        # Task ids every mutating operation refuses (space/comma separated).
+        # protectedTaskIds: []
+        # Raw MCP tool-name pins; each '' = discovered by pattern. The eleven
+        # operations are projects/tasks/create/complete/remove/update/move/
+        # completed/search/getTask/batchAdd.
+        # tools:
+        #   projects: list_projects
+        #   tasks: get_project_with_undone_tasks
+        #   create: create_task
+        #   complete: complete_task
+        #   remove: delete_task
+        #   update: update_task
+        #   move: move_task
+        #   completed: list_completed_tasks_by_date
+        #   search: search
+        #   getTask: get_task_by_id
+        #   batchAdd: batch_add_tasks