dsh-global-todo 0.13.0 → 0.13.1

package/CHANGELOG.md

@@ -1,3 +1,16 @@
+## [0.13.1] — 2026-10-22
+
+The sort orders are total orders now, which is what CI caught.
+
+- **Two todos created in the same millisecond could sort in either order.** The comparators
+  returned 0 for equal timestamps and leaned on the sort's stability, so a fast machine (the
+  packed `npm pack --dry-run` step, where the whole suite runs again) produced a different order
+  than the same tests a minute earlier. `seq`, which the service assigns monotonically, is the
+  final tiebreaker for all four sorts.
+- **The ordering test uses a stepping clock**, so it asserts the semantics it is named for instead
+  of depending on how fast the machine creates three todos; a second test pins the same-millisecond
+  case on purpose.
+
 ## [0.13.0] — 2026-10-22
 
 Batch capture now scores what it is given, and drops what is not worth a todo.

package/lib/index.js

@@ -37,7 +37,7 @@ import { createStore, resolveStorePath } from './store.js'
 import { createTools } from './tools.js'
 
 /** Must equal `package.json`'s version; `npm run check` enforces that. */
-export const VERSION = '0.13.0'
+export const VERSION = '0.13.1'
 
 /** Plugin id. Also the Loader row id in `cordis.patch.yml`. */
 export const name = 'dsh-global-todo'

package/lib/service.js

@@ -219,20 +219,24 @@ export function createService(options) {
     if (!SORTS.includes(sort)) {
       throw new TodoError('invalid-body', `排序只能是 ${SORTS.join(' / ')}，收到 ${sort}`)
     }
+    // Every comparator ends on `seq`, which the service assigns monotonically: two todos
+    // created in the same millisecond used to tie, and the order then depended on the sort's
+    // stability rather than on anything the list guarantees. A CI run caught that.
+    const newestFirst = (a, b) => b.createdAt - a.createdAt || (b.seq ?? 0) - (a.seq ?? 0)
     out = out.slice().sort((a, b) => {
-      if (sort === 'updated') return b.updatedAt - a.updatedAt
+      if (sort === 'updated') return b.updatedAt - a.updatedAt || (b.seq ?? 0) - (a.seq ?? 0)
       if (sort === 'due') {
         const left = a.dueAt === null ? Number.POSITIVE_INFINITY : Date.parse(a.dueAt)
         const right = b.dueAt === null ? Number.POSITIVE_INFINITY : Date.parse(b.dueAt)
         if (left !== right) return left - right
-        return b.createdAt - a.createdAt
+        return newestFirst(a, b)
       }
       if (sort === 'priority') {
         const rank = PRIORITY_RANK[a.priority] - PRIORITY_RANK[b.priority]
         if (rank !== 0) return rank
-        return b.createdAt - a.createdAt
+        return newestFirst(a, b)
       }
-      return b.createdAt - a.createdAt
+      return newestFirst(a, b)
     })
 
     const limit = Number.isInteger(query.limit) && query.limit > 0 ? Math.min(query.limit, 1000) : 200

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-global-todo",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "icon": "./docs/icon.svg",
   "description": "Cross-session todo list for DeepSeek Harness: one JSON file a person and an agent both write to, with step plans that ship as a numbered hand-off, session read-back, and a human confirmation before an agent's \"done\" counts.",
   "type": "module",