dsh-global-todo 0.11.2 → 0.12.0

package/CHANGELOG.md

@@ -1,3 +1,34 @@
+## [0.12.0] — 2026-10-21
+
+An identity: one mark, drawn once and used everywhere.
+
+- **The mark.** A checklist card whose top-right corner is open, with an arrow leaving through
+  the gap. It states the two things this plugin adds — there is a list, and an item leaves it for
+  a conversation. Stroke-only and `currentColor`, so the shell can render it at 16px in either
+  theme; the card's corner is deliberately broken because a closed corner plus an arrow turns
+  into mush below 24px.
+- **`docs/icon.svg`** is the same geometry 20× on a `#14171C` tile (radius 116), plus PNG exports
+  at 16/32/48/64/128/256/512 in `docs/icons/`. A coloured status dot was designed and dropped:
+  at 128 and below it reads as a dirty pixel, not as information.
+- **Sidebar glyph replaced** — same shape as the tile, 1.4/1.5/1.3 stroke weights, so the entry
+  point and the app icon are recognisably one thing.
+- **The landing page is now shareable**: favicon, apple-touch icon and a 1200×630 `docs/og.png`
+  (ink tile, icon, one-liner, install command) wired through `og:*` and `twitter:*` tags. Both
+  READMEs carry the mark at 52px next to the title.
+
+## [0.11.3] — 2026-10-21
+
+Say where the plugin is actually listed, and make that claim checkable.
+
+- **`docs/DISTRIBUTION.md`** — every registry with its real state: live (npm, 1024 Store, dsh.pub,
+  DSH-Plugins-Marketplace, awesome-dsh-plugin, walkinglabs), in review (five pull requests),
+  promised (dshopen.org), and the topic feeds collected without a PR. npm is named as the only
+  install source; a listing showing an older version is described as normal rather than hidden.
+- **`tools/listings.mjs`** — asks npm, the 1024 API, dsh.pub, the marketplace registry and two
+  repository files, each with a 25-second timeout, and prints one status per registry. A fetch that
+  cannot answer reports `error`, never "listed".
+- **Both READMEs** gained a compact table; the shipped tarball now includes the doc they link to.
+
 ## [0.11.2] — 2026-10-21
 
 One test, because a review suggested lowering the Node floor.

package/README.md

@@ -1,5 +1,7 @@
 # dsh-global-todo
 
+<img src="docs/icon.svg" width="52" height="52" alt="全局待办 icon: a list card with a check and an arrow leaving it">
+
 **A cross-session todo list for DeepSeek Harness: one file you own, written by you and your
 agent, and handed to a conversation in one click.**
 
@@ -18,7 +20,7 @@ Three things it does that a session-local plan cannot:
 dsh plugin add dsh-global-todo
 ```
 
-[在线主页](https://lugabeeee.github.io/dsh-global-todo/) · [中文说明](README.zh.md) · [5-minute quickstart](docs/QUICKSTART.md) · [FAQ](docs/FAQ.md) · [Every state has a baseline image](#screenshots) · [Design notes](docs/DESIGN.md)
+[Live page](https://lugabeeee.github.io/dsh-global-todo/) (22-second typographic demo) · [中文说明](README.zh.md) · [5-minute quickstart](docs/QUICKSTART.md) · [FAQ](docs/FAQ.md) · [Every state has a baseline image](#screenshots) · [Design notes](docs/DESIGN.md)
 
 ---
 
@@ -390,6 +392,24 @@ Errors are typed: `400` for a rejected value, `404` for an unknown id, `413` for
 oversized body, `403` for a request that fails the fence, `502` when a hand-off cannot
 reach the agents service. The body is always `{ ok, ... }` with a machine `reason`.
 
+## Where it is listed
+
+npm is the only install source; every registry below is a discovery surface. Verified 2026-10-21 —
+re-check with `node tools/listings.mjs` rather than trusting this list.
+
+| Registry | Form | State |
+|---|---|---|
+| [npm](https://www.npmjs.com/package/dsh-global-todo) | the package | `0.11.2` |
+| [1024 Store](https://deepseek1024.com) | catalog entry ([PR #654](https://github.com/imsai-sh/awesome-deepseek-harness-plugins/pull/654), merged) | listed; its install line still resolves to the GitHub source |
+| [dsh.pub](https://dsh.pub/en/plugins/dsh-global-todo/) | published page + `dshpub` CLI | live, pinned to a commit |
+| [DSH-Plugins-Marketplace](https://github.com/bradeGithub/DSH-Plugins-Marketplace) | `registry.json`, collected from the `dsh-plugin` topic | `v0.11.2`, risk tier `safe` |
+| [awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin) (19.7k★) | one YAML per plugin | merged ([PR #7498](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/7498)) |
+| [walkinglabs](https://github.com/walkinglabs/awesome-deepseek-harness-plugins) | source-verified README | merged ([PR #114](https://github.com/walkinglabs/awesome-deepseek-harness-plugins/pull/114)) |
+
+Five more are in review (Zhiyuan-Fan, kejixiaoliang, beancookie, dshworks, losebird) and one
+maintainer promised to include it (dshopen.org). The full table, including the auto-collected
+topic feeds we have not verified, is [docs/DISTRIBUTION.md](docs/DISTRIBUTION.md).
+
 ## Where the data lives
 
 `$DSH_HOME/global-todo/todos.json`, or any absolute path you set:

package/README.zh.md

@@ -1,5 +1,7 @@
 # dsh-global-todo · 全局待办
 
+<img src="docs/icon.svg" width="52" height="52" alt="全局待办图标：一张打了勾、并有箭头离开的清单卡片">
+
 **一份跨会话的待办清单：一个属于你的文件，你和 Agent 读写同一份，一键交给某个对话继续干。**
 
 三件会话级计划做不到的事：
@@ -14,7 +16,7 @@
 dsh plugin add dsh-global-todo
 ```
 
-[在线主页](https://lugabeeee.github.io/dsh-global-todo/) · [English](README.md) · [5 分钟上手](docs/QUICKSTART.md) · [常见问题](docs/FAQ.md) · [每个条件状态都有基线图](#截图) · [设计说明](docs/DESIGN.md)
+[在线主页](https://lugabeeee.github.io/dsh-global-todo/)（22 秒排版演示）· [English](README.md) · [5 分钟上手](docs/QUICKSTART.md) · [常见问题](docs/FAQ.md) · [每个条件状态都有基线图](#截图) · [设计说明](docs/DESIGN.md)
 
 ---
 
@@ -310,6 +312,24 @@ dsh plugin --profile web remove dsh-global-todo
 文件坏了会明确报 `store-corrupt` 而不是被静默清空；单条记录坏了只跳过那一条。
 备份就是复制这个文件。
 
+## 收录情况
+
+npm 是唯一安装源，下面每个地方都只是「能不能被找到」。核对日期 2026-10-21；复核用
+`node tools/listings.mjs`，不要只信这张表。
+
+| 渠道 | 形式 | 状态 |
+|---|---|---|
+| [npm](https://www.npmjs.com/package/dsh-global-todo) | 包本体 | `0.11.2` |
+| [1024 Store](https://deepseek1024.com) | 目录条目（[PR #654](https://github.com/imsai-sh/awesome-deepseek-harness-plugins/pull/654) 已合并） | 已收录；安装行仍解析成 GitHub 源 |
+| [dsh.pub](https://dsh.pub/zh/plugins/dsh-global-todo/) | 目录页 + `dshpub` CLI | 已上线，pin 到某个 commit |
+| [DSH-Plugins-Marketplace](https://github.com/bradeGithub/DSH-Plugins-Marketplace) | `registry.json`，按 `dsh-plugin` topic 采集 | `v0.11.2`，风险分级 `safe` |
+| [awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin)（19.7k★） | 每个插件一个 YAML | 已合并（[PR #7498](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/7498)） |
+| [walkinglabs](https://github.com/walkinglabs/awesome-deepseek-harness-plugins) | 带来源核验的 README | 已合并（[PR #114](https://github.com/walkinglabs/awesome-deepseek-harness-plugins/pull/114)） |
+
+另有五个在审（Zhiyuan-Fan、kejixiaoliang、beancookie、dshworks、losebird），一个维护者已承诺
+下次提交收录（dshopen.org）。完整表格、以及我们尚未逐条核实的 topic 自动采集渠道，见
+[docs/DISTRIBUTION.md](docs/DISTRIBUTION.md)。
+
 ## 设计取舍
 
 **附件是引用，不是上传。** 文档就是一个原地不动的绝对路径，地址就是一个 URL。

package/docs/DISTRIBUTION.md

@@ -0,0 +1,65 @@
+# Where this plugin is listed
+
+**npm is the only install source.** Every registry below is a discovery surface: it decides whether
+someone finds the plugin, not what they get when they install it. The line that matters is
+
+```sh
+dsh plugin add dsh-global-todo
+```
+
+A registry that shows an older version is normal — their crawlers run on their own schedule. Last
+verified **2026-10-21 11:27 (+08:00)**; in a checkout, re-check with `node tools/listings.mjs` instead
+of trusting this table.
+
+## Live
+
+| Registry | Form | What it gives you | Verified state |
+|---|---|---|---|
+| **npm** | the package | the install path | `dsh-global-todo@0.11.2` |
+| **1024 Store** ([deepseek1024.com](https://deepseek1024.com)) · [repo](https://github.com/imsai-sh/awesome-deepseek-harness-plugins) | catalog entry, merged [#654](https://github.com/imsai-sh/awesome-deepseek-harness-plugins/pull/654) | searchable, has a public API | 🟡 entry live, but its install line still resolves to `github:LUgABeEEE/dsh-global-todo` — their npm enrichment has not caught up. Install works either way. |
+| **dsh.pub** · [page](https://dsh.pub/en/plugins/dsh-global-todo/) | published page + `dshpub` CLI | `npx dshpub add LUgABeEEE/dsh-global-todo` | ✅ page live, pinned to a commit |
+| **DSH-Plugins-Marketplace** ([bradeGithub](https://github.com/bradeGithub/DSH-Plugins-Marketplace)) | `registry.json`, collected from the `dsh-plugin` topic | one-click install inside DSH | ✅ `v0.11.2`, risk tier `safe` |
+| **awesome-dsh-plugin** ([19.7k★](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin)) | one YAML per plugin | the largest directory | ✅ merged [#7498](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/7498) |
+| **walkinglabs/awesome-deepseek-harness-plugins** | README entry (source-verified list) | review-backed listing | ✅ merged [#114](https://github.com/walkinglabs/awesome-deepseek-harness-plugins/pull/114) |
+
+## Pending review
+
+Open PRs, all made by hand against each repository's own format:
+
+| Registry | Pull request | Note |
+|---|---|---|
+| Zhiyuan-Fan/Awesome-DeepSeek-Harness-Plugins | [#93](https://github.com/Zhiyuan-Fan/Awesome-DeepSeek-Harness-Plugins/pull/93) | 574★, curated bilingually |
+| kejixiaoliang/awesome-dsh-plugins | [#144](https://github.com/kejixiaoliang/awesome-dsh-plugins/pull/144) | merges in monthly batches; first-time contributor CI needs the maintainer |
+| beancookie/awesome-dsh-plugin | [#233](https://github.com/beancookie/awesome-dsh-plugin/pull/233) | same batch pattern |
+| dshworks/awesome-dsh-plugins | [#174](https://github.com/dshworks/awesome-dsh-plugins/pull/174) | machine-readable registry; this PR is a re-verification |
+| losebird/dsh-plugin-market | [#49](https://github.com/losebird/dsh-plugin-market/pull/49) | replaces a broken auto entry (`github:…#v0.6.6`, manual install) with an npm spec |
+| polang233/dsh-plugin-index (dshopen.org) | [issue #16](https://github.com/polang233/dsh-plugin-index/issues/16) | no PR channel; maintainer replied "will be included in the next commit" |
+
+## Collected automatically
+
+These scan the GitHub topic `dsh-plugin` (this repository carries it, plus `dsh`,
+`deepseek-harness`, `cordis`, `todo-list`, `task-management`, `agent-tools`). No PR exists or is
+needed; appearance depends on their scan cycle, and we have **not** verified each one:
+
+`0xsline/awesome-deepseek-harness` · `vvlife/awesome-deepseek-harness-plugins` ·
+`ZASENJC/dsh-plugins-store` · `YELEBAI/dsh-plugin-marketplace` ·
+`awesome-dsh-plugin/dsh-find-plugin`
+
+## How to keep this honest
+
+```sh
+node tools/listings.mjs
+```
+
+It asks npm, the 1024 API, dsh.pub, the marketplace registry, and two repository files, each with a
+25-second timeout, and prints a status per registry. A fetch that cannot answer is reported as
+`error`, never as "listed" — an unknown state should look unknown.
+
+## What we deliberately do not do
+
+- **No duplicate PRs.** If a PR is open, it gets a comment with the current version, not a second
+  submission.
+- **No PR to auto-collected lists.** A topic-tagged repository flows in by itself; a PR there is
+  noise for the maintainer.
+- **No claims about a listing before it is visible.** "Pending" means a pull request exists, not
+  that the entry does.

package/docs/icon.svg

@@ -1,19 +1,9 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" width="512" height="512" role="img" aria-label="Global todos">
-  <rect width="512" height="512" rx="116" fill="#0d6b5e"/>
-  <rect x="92" y="104" width="328" height="304" rx="32" fill="#f4faf8"/>
-  <g>
-    <circle cx="152" cy="184" r="23" fill="#e7f2ef"/>
-    <path d="M141 184l8 8 15-17" fill="none" stroke="#0d6b5e" stroke-width="11" stroke-linecap="round" stroke-linejoin="round"/>
-    <rect x="198" y="174" width="168" height="20" rx="10" fill="#c8d6d1"/>
-  </g>
-  <g>
-    <circle cx="152" cy="264" r="23" fill="#e7f2ef"/>
-    <path d="M141 264l8 8 15-17" fill="none" stroke="#0d6b5e" stroke-width="11" stroke-linecap="round" stroke-linejoin="round"/>
-    <rect x="198" y="254" width="132" height="20" rx="10" fill="#c8d6d1"/>
-  </g>
-  <g>
-    <circle cx="152" cy="344" r="23" fill="#f7edda"/>
-    <circle cx="152" cy="344" r="9" fill="#c98a1e"/>
-    <rect x="198" y="334" width="150" height="20" rx="10" fill="#d8e2de"/>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" width="512" height="512" role="img" aria-label="全局待办 / dsh-global-todo">
+  <title>全局待办 — 跨会话待办清单</title>
+  <rect width="512" height="512" rx="116" fill="#14171C"/>
+  <g transform="translate(96 96) scale(20)" fill="none" stroke="#FFFFFF" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M9.2 2.4H4.4A1.9 1.9 0 0 0 2.5 4.3v7.4a1.9 1.9 0 0 0 1.9 1.9h6.2a1.9 1.9 0 0 0 1.9-1.9V8.4" stroke-width="1.4"/>
+    <path d="M4.9 8.5l1.9 1.9 3.5-4.3" stroke-width="1.5"/>
+    <path d="M10.4 4.6h3.1m0 0l-1.2-1.2m1.2 1.2l-1.2 1.2" stroke-width="1.3"/>
   </g>
 </svg>

package/docs/screenshots/README.md

@@ -18,9 +18,12 @@
 | [`panel-review.png`](panel-review.png) | 待确认：Agent 已完成、等人回答 | `npm run screenshots` |
 | [`panel-reminders.png`](panel-reminders.png) | 到点提醒条 | `npm run screenshots` |
 | [`tour.gif`](tour.gif) | 十帧幻灯片（列表 → 详情 → 列表 → 待确认 → 列表 → 收件箱 → 列表 → 提醒 → 列表 → 选择），2 秒一帧 | `npm run tour`（需要 ffmpeg；没有就跳过） |
+| [`demo.mp4`](demo.mp4) | 22 秒**排版演示**：暗色主题下 2× 渲染的真实面板，五个主张逐屏给出，配轻音效、无旁白 | 见 [`docs/DEMO.md`](../DEMO.md)，`tools/demo/` 下四个步骤 |
+| [`demo-poster.png`](demo-poster.png) | 上面视频的首帧海报（12 秒处），给不自动播放的环境 | 从 `demo.mp4` 抽一帧 |
 
 `npm run screenshots` 会重写九张 PNG（顺序见 `tools/screenshot.mjs` 的 `SHOTS`）；`npm run tour` 只重做
-gif，并要求 PNG 已经存在。
+gif，并要求 PNG 已经存在。`demo.mp4` 是**另一条流水线**：它必须由真实浏览器录制，静态渲染做不到滚动、
+悬停和点击 —— 见 `docs/DEMO.md`。
 
 ## 这些图证明不了什么
 

package/lib/client.js

@@ -50,7 +50,7 @@ window.__ModuleLoader__.load({
      * different mechanisms (restart vs. hot reload), so "which one am I looking
      * at" needs an answer that the bundle itself carries.
      */
-    const UI_REV = 'ui51'
+    const UI_REV = 'ui52'
     /** Last language resolved for the shell; module-level so a fetch failure can be worded too. */
     let activeLang = 'zh'
 
@@ -4870,14 +4870,41 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
     }
 
     /** @param {{ size?: number, active?: boolean }} props */
+    /**
+     * The sidebar mark: a list that leaves the panel.
+     *
+     * One card, one check, one arrow crossing the card's open corner — the two facts this
+     * plugin adds are both here (a list, and handing an item to a conversation). Stroke-only
+     * and `currentColor` because the shell renders it at 16px in either theme; the same
+     * geometry is the app icon (docs/icon.svg), scaled 20× on a #14171C tile.
+     */
     function Glyph(props) {
       const size = props?.size ?? 16
       return h(
         'svg',
         { width: size, height: size, viewBox: '0 0 16 16', fill: 'none', 'aria-hidden': 'true' },
-        h('rect', { x: 1.6, y: 2.4, width: 12.8, height: 11.2, rx: 2.4, stroke: 'currentColor', strokeWidth: 1.3 }),
-        h('path', { d: 'M4.6 6.1l1.3 1.3 2.4-2.6', stroke: 'currentColor', strokeWidth: 1.3, strokeLinecap: 'round', strokeLinejoin: 'round' }),
-        h('path', { d: 'M4.6 10.6h6.8', stroke: 'currentColor', strokeWidth: 1.3, strokeLinecap: 'round' }),
+        // The card is open at its top-right corner: that gap is where the arrow leaves,
+        // and closing it would make both shapes mush together at 16px.
+        h('path', {
+          d: 'M9.2 2.4H4.4A1.9 1.9 0 0 0 2.5 4.3v7.4a1.9 1.9 0 0 0 1.9 1.9h6.2a1.9 1.9 0 0 0 1.9-1.9V8.4',
+          stroke: 'currentColor',
+          strokeWidth: 1.4,
+          strokeLinecap: 'round',
+        }),
+        h('path', {
+          d: 'M4.9 8.5l1.9 1.9 3.5-4.3',
+          stroke: 'currentColor',
+          strokeWidth: 1.5,
+          strokeLinecap: 'round',
+          strokeLinejoin: 'round',
+        }),
+        h('path', {
+          d: 'M10.4 4.6h3.1m0 0l-1.2-1.2m1.2 1.2l-1.2 1.2',
+          stroke: 'currentColor',
+          strokeWidth: 1.3,
+          strokeLinecap: 'round',
+          strokeLinejoin: 'round',
+        }),
       )
     }
 

package/lib/index.js

@@ -36,7 +36,7 @@ import { createStore, resolveStorePath } from './store.js'
 import { createTools } from './tools.js'
 
 /** Must equal `package.json`'s version; `npm run check` enforces that. */
-export const VERSION = '0.11.2'
+export const VERSION = '0.12.0'
 
 /** Plugin id. Also the Loader row id in `cordis.patch.yml`. */
 export const name = 'dsh-global-todo'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-global-todo",
-  "version": "0.11.2",
+  "version": "0.12.0",
   "icon": "./docs/icon.svg",
   "description": "Global, cross-session todos for DeepSeek Harness: one list owned by the human and the agent together, with creation time, attached documents and links, and one-click hand-off to an agent session. 全局待办：跨会话一份清单，记录加入时间，可挂文档与地址，可一键交给 Agent 继续干。",
   "type": "module",
@@ -41,6 +41,7 @@
     "locale",
     "cordis.patch.yml",
     "docs/DESIGN.md",
+    "docs/DISTRIBUTION.md",
     "docs/ROADMAP.md",
     "docs/QUICKSTART.md",
     "docs/FAQ.md",
@@ -48,6 +49,7 @@
     "docs/screenshots",
     "!docs/screenshots/demo.mp4",
     "!docs/index.html",
+    "!docs/assets",
     "LICENSE",
     "README.md",
     "README.zh.md",