dsh-global-todo 0.12.3 → 0.12.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +19 -0
- package/lib/index.js +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,22 @@
|
|
|
1
|
+
## [0.12.4] — 2026-10-21
|
|
2
|
+
|
|
3
|
+
The repository leaked its own location. Three real paths, and a guard that could not see them.
|
|
4
|
+
|
|
5
|
+
- **Removed the absolute paths**: `AGENTS.md` named the guard by full path (now `$DSH_HOME/…`),
|
|
6
|
+
`tools/demo/seed.mjs` hard-coded the checkout (now resolved from `import.meta.url`),
|
|
7
|
+
`tools/demo/capture.mjs` hard-coded Playwright's location in one profile (now
|
|
8
|
+
`PLAYWRIGHT_MODULE` or the normal resolution), and `tools/demo/scenes.sh` hard-coded a font in
|
|
9
|
+
one home (now `DEMO_FONT`, else fontconfig).
|
|
10
|
+
- **The rule can now see them.** It only knew `/home/<user>/` and `/Users/<user>/`. It also
|
|
11
|
+
rejects Windows profile paths and any path containing this checkout's own home or directory —
|
|
12
|
+
computed at run time, so the repository cannot know every layout but it does know the one
|
|
13
|
+
running the check. Both shapes were verified by planting a file and watching the check fail.
|
|
14
|
+
- **The file list comes from git.** The hand-kept ignore list had drifted from `.gitignore`:
|
|
15
|
+
`reports/` and `.agent-teams/` were ignored by git yet still scanned, so a clean tree reported
|
|
16
|
+
four failures nobody could act on. `git ls-files --cached --others --exclude-standard` is now
|
|
17
|
+
the single source of truth, with the walker kept as a fallback. `reports/` also joined
|
|
18
|
+
`.gitignore`, where it belonged.
|
|
19
|
+
|
|
1
20
|
## [0.12.3] — 2026-10-21
|
|
2
21
|
|
|
3
22
|
A desktop report explained, and the packaging contract behind it guarded.
|
package/lib/index.js
CHANGED
|
@@ -36,7 +36,7 @@ import { createStore, resolveStorePath } from './store.js'
|
|
|
36
36
|
import { createTools } from './tools.js'
|
|
37
37
|
|
|
38
38
|
/** Must equal `package.json`'s version; `npm run check` enforces that. */
|
|
39
|
-
export const VERSION = '0.12.
|
|
39
|
+
export const VERSION = '0.12.4'
|
|
40
40
|
|
|
41
41
|
/** Plugin id. Also the Loader row id in `cordis.patch.yml`. */
|
|
42
42
|
export const name = 'dsh-global-todo'
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "dsh-global-todo",
|
|
3
|
-
"version": "0.12.
|
|
3
|
+
"version": "0.12.4",
|
|
4
4
|
"icon": "./docs/icon.svg",
|
|
5
5
|
"description": "Cross-session todo list for DeepSeek Harness: one JSON file a person and an agent both write to, with step plans that ship as a numbered hand-off, session read-back, and a human confirmation before an agent's \"done\" counts.",
|
|
6
6
|
"type": "module",
|