dsh-global-todo 0.11.1 → 0.11.3

package/CHANGELOG.md

@@ -1,3 +1,27 @@
+## [0.11.3] — 2026-10-21
+
+Say where the plugin is actually listed, and make that claim checkable.
+
+- **`docs/DISTRIBUTION.md`** — every registry with its real state: live (npm, 1024 Store, dsh.pub,
+  DSH-Plugins-Marketplace, awesome-dsh-plugin, walkinglabs), in review (five pull requests),
+  promised (dshopen.org), and the topic feeds collected without a PR. npm is named as the only
+  install source; a listing showing an older version is described as normal rather than hidden.
+- **`tools/listings.mjs`** — asks npm, the 1024 API, dsh.pub, the marketplace registry and two
+  repository files, each with a 25-second timeout, and prints one status per registry. A fetch that
+  cannot answer reports `error`, never "listed".
+- **Both READMEs** gained a compact table; the shipped tarball now includes the doc they link to.
+
+## [0.11.2] — 2026-10-21
+
+One test, because a review suggested lowering the Node floor.
+
+- **`test/manifest.test.mjs` now pins the runtime floors in both directions.** It asserts that
+  `engines.node` stays `>=22.19.x` (the Web profile's own requirement — 18 and 20 are EOL, and a
+  lower floor only moves the failure from install time to startup), and that both READMEs quote
+  exactly the same Node version and DSH range. Verified by temporarily setting `>=18.0.0`: the
+  test fails with the reason instead of the package shipping a promise it cannot keep.
+- No runtime change: the engines, the code and the docs were already correct.
+
 ## [0.11.1] — 2026-10-20
 
 Two small things the release exposed.

package/README.md

@@ -18,7 +18,7 @@ Three things it does that a session-local plan cannot:
 dsh plugin add dsh-global-todo
 ```
 
-[在线主页](https://lugabeeee.github.io/dsh-global-todo/) · [中文说明](README.zh.md) · [5-minute quickstart](docs/QUICKSTART.md) · [FAQ](docs/FAQ.md) · [Every state has a baseline image](#screenshots) · [Design notes](docs/DESIGN.md)
+[Live page](https://lugabeeee.github.io/dsh-global-todo/) (22-second typographic demo) · [中文说明](README.zh.md) · [5-minute quickstart](docs/QUICKSTART.md) · [FAQ](docs/FAQ.md) · [Every state has a baseline image](#screenshots) · [Design notes](docs/DESIGN.md)
 
 ---
 
@@ -390,6 +390,24 @@ Errors are typed: `400` for a rejected value, `404` for an unknown id, `413` for
 oversized body, `403` for a request that fails the fence, `502` when a hand-off cannot
 reach the agents service. The body is always `{ ok, ... }` with a machine `reason`.
 
+## Where it is listed
+
+npm is the only install source; every registry below is a discovery surface. Verified 2026-10-21 —
+re-check with `node tools/listings.mjs` rather than trusting this list.
+
+| Registry | Form | State |
+|---|---|---|
+| [npm](https://www.npmjs.com/package/dsh-global-todo) | the package | `0.11.2` |
+| [1024 Store](https://deepseek1024.com) | catalog entry ([PR #654](https://github.com/imsai-sh/awesome-deepseek-harness-plugins/pull/654), merged) | listed; its install line still resolves to the GitHub source |
+| [dsh.pub](https://dsh.pub/en/plugins/dsh-global-todo/) | published page + `dshpub` CLI | live, pinned to a commit |
+| [DSH-Plugins-Marketplace](https://github.com/bradeGithub/DSH-Plugins-Marketplace) | `registry.json`, collected from the `dsh-plugin` topic | `v0.11.2`, risk tier `safe` |
+| [awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin) (19.7k★) | one YAML per plugin | merged ([PR #7498](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/7498)) |
+| [walkinglabs](https://github.com/walkinglabs/awesome-deepseek-harness-plugins) | source-verified README | merged ([PR #114](https://github.com/walkinglabs/awesome-deepseek-harness-plugins/pull/114)) |
+
+Five more are in review (Zhiyuan-Fan, kejixiaoliang, beancookie, dshworks, losebird) and one
+maintainer promised to include it (dshopen.org). The full table, including the auto-collected
+topic feeds we have not verified, is [docs/DISTRIBUTION.md](docs/DISTRIBUTION.md).
+
 ## Where the data lives
 
 `$DSH_HOME/global-todo/todos.json`, or any absolute path you set:

package/README.zh.md

@@ -14,7 +14,7 @@
 dsh plugin add dsh-global-todo
 ```
 
-[在线主页](https://lugabeeee.github.io/dsh-global-todo/) · [English](README.md) · [5 分钟上手](docs/QUICKSTART.md) · [常见问题](docs/FAQ.md) · [每个条件状态都有基线图](#截图) · [设计说明](docs/DESIGN.md)
+[在线主页](https://lugabeeee.github.io/dsh-global-todo/)（22 秒排版演示）· [English](README.md) · [5 分钟上手](docs/QUICKSTART.md) · [常见问题](docs/FAQ.md) · [每个条件状态都有基线图](#截图) · [设计说明](docs/DESIGN.md)
 
 ---
 
@@ -310,6 +310,24 @@ dsh plugin --profile web remove dsh-global-todo
 文件坏了会明确报 `store-corrupt` 而不是被静默清空；单条记录坏了只跳过那一条。
 备份就是复制这个文件。
 
+## 收录情况
+
+npm 是唯一安装源，下面每个地方都只是「能不能被找到」。核对日期 2026-10-21；复核用
+`node tools/listings.mjs`，不要只信这张表。
+
+| 渠道 | 形式 | 状态 |
+|---|---|---|
+| [npm](https://www.npmjs.com/package/dsh-global-todo) | 包本体 | `0.11.2` |
+| [1024 Store](https://deepseek1024.com) | 目录条目（[PR #654](https://github.com/imsai-sh/awesome-deepseek-harness-plugins/pull/654) 已合并） | 已收录；安装行仍解析成 GitHub 源 |
+| [dsh.pub](https://dsh.pub/zh/plugins/dsh-global-todo/) | 目录页 + `dshpub` CLI | 已上线，pin 到某个 commit |
+| [DSH-Plugins-Marketplace](https://github.com/bradeGithub/DSH-Plugins-Marketplace) | `registry.json`，按 `dsh-plugin` topic 采集 | `v0.11.2`，风险分级 `safe` |
+| [awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin)（19.7k★） | 每个插件一个 YAML | 已合并（[PR #7498](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/7498)） |
+| [walkinglabs](https://github.com/walkinglabs/awesome-deepseek-harness-plugins) | 带来源核验的 README | 已合并（[PR #114](https://github.com/walkinglabs/awesome-deepseek-harness-plugins/pull/114)） |
+
+另有五个在审（Zhiyuan-Fan、kejixiaoliang、beancookie、dshworks、losebird），一个维护者已承诺
+下次提交收录（dshopen.org）。完整表格、以及我们尚未逐条核实的 topic 自动采集渠道，见
+[docs/DISTRIBUTION.md](docs/DISTRIBUTION.md)。
+
 ## 设计取舍
 
 **附件是引用，不是上传。** 文档就是一个原地不动的绝对路径，地址就是一个 URL。

package/docs/DISTRIBUTION.md

@@ -0,0 +1,65 @@
+# Where this plugin is listed
+
+**npm is the only install source.** Every registry below is a discovery surface: it decides whether
+someone finds the plugin, not what they get when they install it. The line that matters is
+
+```sh
+dsh plugin add dsh-global-todo
+```
+
+A registry that shows an older version is normal — their crawlers run on their own schedule. Last
+verified **2026-10-21 11:27 (+08:00)**; in a checkout, re-check with `node tools/listings.mjs` instead
+of trusting this table.
+
+## Live
+
+| Registry | Form | What it gives you | Verified state |
+|---|---|---|---|
+| **npm** | the package | the install path | `dsh-global-todo@0.11.2` |
+| **1024 Store** ([deepseek1024.com](https://deepseek1024.com)) · [repo](https://github.com/imsai-sh/awesome-deepseek-harness-plugins) | catalog entry, merged [#654](https://github.com/imsai-sh/awesome-deepseek-harness-plugins/pull/654) | searchable, has a public API | 🟡 entry live, but its install line still resolves to `github:LUgABeEEE/dsh-global-todo` — their npm enrichment has not caught up. Install works either way. |
+| **dsh.pub** · [page](https://dsh.pub/en/plugins/dsh-global-todo/) | published page + `dshpub` CLI | `npx dshpub add LUgABeEEE/dsh-global-todo` | ✅ page live, pinned to a commit |
+| **DSH-Plugins-Marketplace** ([bradeGithub](https://github.com/bradeGithub/DSH-Plugins-Marketplace)) | `registry.json`, collected from the `dsh-plugin` topic | one-click install inside DSH | ✅ `v0.11.2`, risk tier `safe` |
+| **awesome-dsh-plugin** ([19.7k★](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin)) | one YAML per plugin | the largest directory | ✅ merged [#7498](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/7498) |
+| **walkinglabs/awesome-deepseek-harness-plugins** | README entry (source-verified list) | review-backed listing | ✅ merged [#114](https://github.com/walkinglabs/awesome-deepseek-harness-plugins/pull/114) |
+
+## Pending review
+
+Open PRs, all made by hand against each repository's own format:
+
+| Registry | Pull request | Note |
+|---|---|---|
+| Zhiyuan-Fan/Awesome-DeepSeek-Harness-Plugins | [#93](https://github.com/Zhiyuan-Fan/Awesome-DeepSeek-Harness-Plugins/pull/93) | 574★, curated bilingually |
+| kejixiaoliang/awesome-dsh-plugins | [#144](https://github.com/kejixiaoliang/awesome-dsh-plugins/pull/144) | merges in monthly batches; first-time contributor CI needs the maintainer |
+| beancookie/awesome-dsh-plugin | [#233](https://github.com/beancookie/awesome-dsh-plugin/pull/233) | same batch pattern |
+| dshworks/awesome-dsh-plugins | [#174](https://github.com/dshworks/awesome-dsh-plugins/pull/174) | machine-readable registry; this PR is a re-verification |
+| losebird/dsh-plugin-market | [#49](https://github.com/losebird/dsh-plugin-market/pull/49) | replaces a broken auto entry (`github:…#v0.6.6`, manual install) with an npm spec |
+| polang233/dsh-plugin-index (dshopen.org) | [issue #16](https://github.com/polang233/dsh-plugin-index/issues/16) | no PR channel; maintainer replied "will be included in the next commit" |
+
+## Collected automatically
+
+These scan the GitHub topic `dsh-plugin` (this repository carries it, plus `dsh`,
+`deepseek-harness`, `cordis`, `todo-list`, `task-management`, `agent-tools`). No PR exists or is
+needed; appearance depends on their scan cycle, and we have **not** verified each one:
+
+`0xsline/awesome-deepseek-harness` · `vvlife/awesome-deepseek-harness-plugins` ·
+`ZASENJC/dsh-plugins-store` · `YELEBAI/dsh-plugin-marketplace` ·
+`awesome-dsh-plugin/dsh-find-plugin`
+
+## How to keep this honest
+
+```sh
+node tools/listings.mjs
+```
+
+It asks npm, the 1024 API, dsh.pub, the marketplace registry, and two repository files, each with a
+25-second timeout, and prints a status per registry. A fetch that cannot answer is reported as
+`error`, never as "listed" — an unknown state should look unknown.
+
+## What we deliberately do not do
+
+- **No duplicate PRs.** If a PR is open, it gets a comment with the current version, not a second
+  submission.
+- **No PR to auto-collected lists.** A topic-tagged repository flows in by itself; a PR there is
+  noise for the maintainer.
+- **No claims about a listing before it is visible.** "Pending" means a pull request exists, not
+  that the entry does.

package/docs/screenshots/README.md

@@ -18,9 +18,12 @@
 | [`panel-review.png`](panel-review.png) | 待确认：Agent 已完成、等人回答 | `npm run screenshots` |
 | [`panel-reminders.png`](panel-reminders.png) | 到点提醒条 | `npm run screenshots` |
 | [`tour.gif`](tour.gif) | 十帧幻灯片（列表 → 详情 → 列表 → 待确认 → 列表 → 收件箱 → 列表 → 提醒 → 列表 → 选择），2 秒一帧 | `npm run tour`（需要 ffmpeg；没有就跳过） |
+| [`demo.mp4`](demo.mp4) | 22 秒**排版演示**：暗色主题下 2× 渲染的真实面板，五个主张逐屏给出，配轻音效、无旁白 | 见 [`docs/DEMO.md`](../DEMO.md)，`tools/demo/` 下四个步骤 |
+| [`demo-poster.png`](demo-poster.png) | 上面视频的首帧海报（12 秒处），给不自动播放的环境 | 从 `demo.mp4` 抽一帧 |
 
 `npm run screenshots` 会重写九张 PNG（顺序见 `tools/screenshot.mjs` 的 `SHOTS`）；`npm run tour` 只重做
-gif，并要求 PNG 已经存在。
+gif，并要求 PNG 已经存在。`demo.mp4` 是**另一条流水线**：它必须由真实浏览器录制，静态渲染做不到滚动、
+悬停和点击 —— 见 `docs/DEMO.md`。
 
 ## 这些图证明不了什么
 

package/lib/index.js

@@ -36,7 +36,7 @@ import { createStore, resolveStorePath } from './store.js'
 import { createTools } from './tools.js'
 
 /** Must equal `package.json`'s version; `npm run check` enforces that. */
-export const VERSION = '0.11.1'
+export const VERSION = '0.11.3'
 
 /** Plugin id. Also the Loader row id in `cordis.patch.yml`. */
 export const name = 'dsh-global-todo'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-global-todo",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "icon": "./docs/icon.svg",
   "description": "Global, cross-session todos for DeepSeek Harness: one list owned by the human and the agent together, with creation time, attached documents and links, and one-click hand-off to an agent session. 全局待办：跨会话一份清单，记录加入时间，可挂文档与地址，可一键交给 Agent 继续干。",
   "type": "module",
@@ -41,6 +41,7 @@
     "locale",
     "cordis.patch.yml",
     "docs/DESIGN.md",
+    "docs/DISTRIBUTION.md",
     "docs/ROADMAP.md",
     "docs/QUICKSTART.md",
     "docs/FAQ.md",
@@ -48,6 +49,7 @@
     "docs/screenshots",
     "!docs/screenshots/demo.mp4",
     "!docs/index.html",
+    "!docs/assets",
     "LICENSE",
     "README.md",
     "README.zh.md",