dsh-global-todo 0.15.0 → 0.16.1

package/CHANGELOG.md

@@ -1,3 +1,30 @@
+## [0.16.1] — 2026-10-22
+
+Same code as 0.16.0; the tag now points at a commit whose CI is green.
+
+- **0.16.0's tag commit had all three CI jobs red.** The new `before:`/`after:` test asserted the
+  order of two todos created in the same test, and CI creates them in the same millisecond, so the
+  order it asserted was not the order the default sort produces. The behaviour under test was
+  correct; the assertion was wrong. Fixed in 8024a48 — the run after it is green on both platforms.
+- **Why a release rather than a moved tag**: `v0.16.0` is published on npm, and a tag that no
+  longer matches what was published is worse than a version bump. 0.16.1 is 0.16.0 plus the
+  assertion, so its tag has a green check.
+
+## [0.16.0] — 2026-10-22
+
+The three small promises the roadmap still carried.
+
+- **`before:` / `after:` in the search box** bound the deadline (strict at the bound). Items
+  without a deadline cannot satisfy either bound, and a half-typed date such as `before:2026`
+  simply stops filtering instead of throwing on every keystroke.
+- **「重新挂载」 next to a dead attachment** re-points it in place (`POST /relink`, same
+  `{ todo, changed }` shape as `/update`), keeping the kind and title. `annotateLinks()` finally
+  has its unit test — and it now flags a dead **image** too, which it used to skip, so a missing
+  screenshot shows the existing chip instead of a broken frame.
+- **Accessibility pass**: the toast is a polite live region, errors are alerts, groups and rows
+  are list items, filter buttons report `aria-pressed`, and every icon-only button has a name.
+  `test/a11y.test.mjs` reads the client source so these cannot quietly regress without a browser.
+
 ## [0.15.0] — 2026-10-22
 
 Image attachments: a reference that renders, not a copy that goes stale.

package/README.md

@@ -252,7 +252,7 @@ Your list is not touched by install or uninstall: it lives outside the plugin, a
   That is an attempt order: an unloadable target means the next one is tried. Anything with
   nowhere to go comes back with a picker rather than being sent somewhere unchosen, and one
   failure does not abort the batch.
-- **Search syntax** — `tag:release` (or `#ops`), `is:overdue`, `is:active`, `has:link`,
+- **Search syntax** — `tag:release` (or `#ops`), `is:overdue`, `is:active`, `has:link`, `before:2026-11-01` / `after:2026-10-01` (deadline bounds; a half-typed date simply stops filtering),
   `has:note`, `level:p0`, plus free words combined with AND (which also match note text). A
   search without a colon behaves exactly as it always did.
 - **Progress notes** — an append-only trail per todo (count on the row, full text and an add
@@ -393,6 +393,7 @@ fence when that service is present, and by a strict loopback check otherwise.
 | POST | `/api/global-todo/review` | `{ id, decision: confirm\|reject }` — answer an agent's completion |
 | GET | `/api/global-todo/report?days=7` | what the agents finished in the window, and the files it touched |
 | GET | `/api/global-todo/session?id=` | what a bound conversation last said (`tail`, `alive`, `dir`) |
+| POST | `/api/global-todo/relink` | `{ id, index, value }` — re-point a dead attachment (the value must still be a valid absolute path or URL of that kind) |
 | GET | `/api/global-todo/asset?id=&index=` | the bytes of an **image** attachment (path read from the store, never from the request; ≤8 MB, png/jpg/jpeg/webp/gif/avif) |
 | POST | `/api/global-todo/link` | `{ id, add?: [...], remove?: [value \| index] }` |
 | POST | `/api/global-todo/dispatch` | `{ id, mode?: auto\|bound\|new\|current, sessionId?, dir? }` |

package/README.zh.md

@@ -207,7 +207,7 @@ dsh plugin --profile web remove dsh-global-todo
 - **「抓取」在每个对话的分组上**：让**那个对话**里的 Agent 把该跟进的事登记成待办，结果就归在它自己那组下面（分组名旁边那个「抓取」）。工具栏上的「从本对话抓取」只在**当前对话还没有分组**时出现——否则没地方点它。抓取对象没在运行会**先唤醒**再问（与派发同一条规则）。
 - **工作目录**：`选择` 会用宿主的目录选择器；如果这个部署没挂载它（远程命名空间缺失），面板会自动改为**手动填路径**（`手动填` → 粘绝对路径 → `使用`），并说明原因——不会只丢一条看不懂的错误。
 - **一键分配（多选）**：工具栏点「选择」→ 勾几条 → 「一键分配」。每条按**原对话 → 同工作区对话 → 你选的目标**的顺序尝试（是**尝试顺序**，不是一次定死：原对话加载不了就自动往下走）。都找不到的会**报回来并给你选择器**，绝不擅自送到别处；其中一条失败也不会中断整批。
-- **搜索语法**：`tag:发布`（或 `#发布`）、`is:overdue`、`is:active`、`has:link`、`has:note`、`level:p0`（也可写 `level:urgent`），自由词之间是 **AND**，并且会一并搜进展记录。不带冒号的普通搜索行为不变。
+- **搜索语法**：`tag:发布`（或 `#发布`）、`is:overdue`、`is:active`、`has:link`、`has:note`、`level:p0`（也可写 `level:urgent`）、`before:2026-11-01` / `after:2026-10-01`（按截止时间卡边界；日期没打完时只是不生效，不会报错），自由词之间是 **AND**，并且会一并搜进展记录。不带冒号的普通搜索行为不变。
 - **进展记录**：每条待办可追加「谁在什么时候说了什么」的流水（行上显示条数，详情里看全文并可直接补一条）。Agent 报「做不完、卡在哪」应该写在这里，**而不是改写你的描述**。
 - **失效附件会标出来**：文件被移走/删除的附件在行上标红、详情里注明；这个标记是**读取时算的**，不写进记录——文件回来了就不该再标红。
 - **新对话开在哪**：默认**继承写下这条待办的对话所在的工作区**（新会话的工作目录也就是那个工作区），所以「接着这个活干」不会跑到不相干的工作区去；想指定就选 `＋ 新对话 · 工作区名`（列在工作区一栏里），指定的优先。只有当两者都不知道时，才退回按工作目录判断。
@@ -294,6 +294,7 @@ dsh plugin --profile web remove dsh-global-todo
 | POST | `/api/global-todo/review` | `{ id, decision: confirm\|reject }` —— 回答 Agent 的完成声明 |
 | GET | `/api/global-todo/report?days=7` | 这段时间里 Agent 完成了什么、触及了哪些文件 |
 | GET | `/api/global-todo/session?id=` | 绑定的会话最后说了什么（`tail` / `alive` / `dir`） |
+| POST | `/api/global-todo/relink` | `{ id, index, value }`——把失效附件重新指向（新值仍须是该类型的合法绝对路径/网址） |
 | GET | `/api/global-todo/asset?id=&index=` | 读**图片附件**的字节（路径只从待办记录里取，不接受请求传路径；≤8MB，png/jpg/jpeg/webp/gif/avif） |
 | POST | `/api/global-todo/link` | `{ id, add?: [...], remove?: [值 或 下标] }` |
 | POST | `/api/global-todo/dispatch` | `{ id, mode?: auto\|bound\|new\|current, sessionId?, dir? }` |

package/docs/ROADMAP.md

@@ -200,14 +200,14 @@ of conversations involved, files touched with counts, and how many wait for revi
 time, never stored. The panel shows it from `⋯ → 本周报告`. Tests:
 `test/markdown.test.mjs` (pure aggregation) and `test/routes.test.mjs`.
 
-### 5. Image attachments
+### 5. ~~Image attachments~~ — landed in 0.15.0
 
-`kind: 'image'` beside `url` / `file`, so a screenshot can be attached instead of a path
-to one.
-
-- Today: `LINK_KINDS = ['url', 'file']` (`lib/links.js`); the link shape is already prepared.
-- Effort: medium — the store must not inline bytes, so this is a path with a preview and a
-  clear "the file is gone" state, which #3-adjacent work already models.
+`kind: 'image'` beside `url` / `file`: still an absolute reference (the store never holds
+bytes), required to carry a renderable extension, with `GET /asset?id=&index=` reading the
+path out of the record rather than from the request (8 MB cap, `nosniff`, image links only).
+The row shows a thumbnail and the detail a preview; a dead image keeps the existing
+missing-file chip instead of rendering a broken frame. `lib/links.js`, `lib/routes.js`,
+`lib/client.js`; tests in `test/links.test.mjs` and `test/routes.test.mjs`.
 
 ### 6. Source adapters for the ingest door
 
@@ -218,11 +218,17 @@ to one.
 - Effort: large, and the mode of the work is different: every adapter is an external
   dependency with its own failure modes. Do it when a real source exists, not before.
 
-### 7. Small, well-understood items
-
-- `before:` / `after:` date bounds in the search syntax (the parser already walks tokens).
-- 「重新挂载」 next to a dead attachment, plus the `annotateLinks()` unit test it owes.
-- A screen-reader pass over the panel and the group headers; the keyboard path is close.
+### 7. ~~Small, well-understood items~~ — landed in 0.16.0
+
+- **`before:` / `after:` date bounds** in the search syntax, applied to the deadline and strict
+  at the bound (`lib/service.js`); a half-typed date stops filtering instead of erroring on
+  every keystroke.
+- **「重新挂载」** beside a dead attachment (`POST /relink`, same shape as `/update`), plus the
+  `annotateLinks()` unit test the code owed — including the image kind, which the annotation
+  used to skip.
+- **Accessibility pass**: the toast is a polite live region, errors are alerts, groups and rows
+  are list items, filter buttons report `aria-pressed`, and every icon-only button carries a
+  name (`test/a11y.test.mjs` guards all of it).
 
 ### Landed after this list was written
 

package/lib/client.js

@@ -237,6 +237,7 @@ window.__ModuleLoader__.load({
       'dir.picked': '（已指定）',
       'action.save': '保存',
       'action.cancel': '取消',
+      'action.relink': '重新挂载',
       'filter.all': '全部',
       'filter.active': '未完成',
       'filter.doing': '进行中',
@@ -539,6 +540,7 @@ window.__ModuleLoader__.load({
       'meta.origin': 'from {dir}',
       'meta.completed': 'Completed {when}',
       'action.save': 'Save',
+      'action.relink': 'Re-point',
       'action.cancel': 'Cancel',
       'filter.all': 'All',
       'filter.active': 'Open',
@@ -1377,6 +1379,7 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
 .gt-pre { white-space: pre-wrap; word-break: break-word; margin: 0; line-height: 1.6; }
 .gt-muted { color: var(--dsw-alias-label-secondary); }
 .gt-links { display: flex; flex-direction: column; gap: 4px; margin: 0; padding: 0; list-style: none; }
+.gt-relink { display: flex; flex: 1 1 100%; gap: 6px; align-items: center; }
 .gt-link { display: flex; gap: 8px; align-items: center; padding: 4px 0; min-width: 0; }
 .gt-link-main { display: flex; align-items: center; gap: 6px; min-width: 0; flex: 1; }
 .gt-evidence { margin: 0; padding: 2px 0 2px 10px; border-left: 2px solid var(--dsw-alias-border-l2);
@@ -1732,6 +1735,9 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
       // the only place the question "did it get anywhere" is asked.
       const [tail, setTail] = useState(null)
       const [linkValue, setLinkValue] = useState('')
+      // Re-pointing a dead attachment: which row is editing, and what path it now holds.
+      const [relinkIndex, setRelinkIndex] = useState(null)
+      const [relinkValue, setRelinkValue] = useState('')
       const [linkTitle, setLinkTitle] = useState('')
       const [draft, setDraft] = useState({
         title: todo.title,
@@ -2429,11 +2435,53 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
                                 { type: 'button', className: 'gt-btn gt-btn-quiet', onClick: () => copy(link.value) },
                                 copied === link.value ? t('action.copied') : t('action.copy'),
                               ),
+                          link.missing === true
+                            ? h(
+                                'button',
+                                {
+                                  type: 'button',
+                                  className: 'gt-btn gt-btn-quiet',
+                                  disabled: busy,
+                                  onClick: () => {
+                                    setRelinkIndex(index)
+                                    setRelinkValue(link.value)
+                                  },
+                                },
+                                t('action.relink'),
+                              )
+                            : null,
                           h(
                             'button',
                             { type: 'button', className: 'gt-btn gt-btn-quiet', disabled: busy, onClick: () => onAction('unlink', todo, { index }) },
                             t('action.unlink'),
                           ),
+                          relinkIndex === index
+                            ? h(
+                                'span',
+                                { className: 'gt-relink' },
+                                h('input', {
+                                  className: 'gt-input',
+                                  value: relinkValue,
+                                  placeholder: t('field.linkValue'),
+                                  onChange: (event) => setRelinkValue(event.target.value),
+                                }),
+                                h(
+                                  'button',
+                                  {
+                                    type: 'button',
+                                    className: 'gt-btn',
+                                    disabled: busy || relinkValue.trim() === '',
+                                    onClick: () => onAction('relink', todo, { index, value: relinkValue }),
+                                  },
+                                  t('action.save'),
+                                ),
+                                h(
+                                  'button',
+                                  { type: 'button', className: 'gt-btn gt-btn-quiet', onClick: () => setRelinkIndex(null) },
+                                  t('action.cancel'),
+                                ),
+                              )
+                            : null,
                         ),
                       ),
                     ),
@@ -3524,6 +3572,13 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
         if (kind === 'steps') return run(todo.id, () => call('update', { method: 'POST', body: { id: todo.id, steps: payload.steps } }))
         if (kind === 'note') return run(todo.id, () => call('note', { method: 'POST', body: { id: todo.id, ...payload } }))
         if (kind === 'link') return run(todo.id, () => call('link', { method: 'POST', body: { id: todo.id, ...payload } }))
+        if (kind === 'relink') {
+          return run(todo.id, async () => {
+            await call('relink', { method: 'POST', body: { id: todo.id, ...payload } })
+            setRelinkIndex(null)
+            setRelinkValue('')
+          })
+        }
         if (kind === 'unlink') return run(todo.id, () => call('link', { method: 'POST', body: { id: todo.id, remove: [payload.index] } }))
         if (kind === 'remove') {
           return run(todo.id, async () => {
@@ -4782,7 +4837,7 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
                     const exemptGroup = typeof group.dir === 'string' && group.dir !== '' && exemptWorkspaces.includes(group.dir)
                     return h(
                       'div',
-                      { className: 'gt-group', key: group.key, 'data-collapsed': isCollapsed ? '1' : '0' },
+                      { className: 'gt-group', key: group.key, role: 'listitem', 'data-collapsed': isCollapsed ? '1' : '0' },
                       h(
                         'div',
                         { className: 'gt-group-head' },
@@ -4873,7 +4928,7 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
                         ? null
                         : h(
                             'div',
-                            { className: 'gt-list' },
+                            { className: 'gt-list', role: 'list' },
                             group.todos.map((todo) =>
                               h(TodoItem, {
                         selecting: selectMode,
@@ -4909,7 +4964,7 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
         notice !== null && notice !== undefined
           ? h(
               'div',
-              { className: 'gt-toast' },
+              { className: 'gt-toast', role: 'status', 'aria-live': 'polite' },
               h('span', null, notice.text),
               // Only offer the jump when the capability is really there: a button
               // that does nothing is worse than no button.

package/lib/index.js

@@ -37,7 +37,7 @@ import { createStore, resolveStorePath } from './store.js'
 import { createTools, normalizeToolGroups, selectTools } from './tools.js'
 
 /** Must equal `package.json`'s version; `npm run check` enforces that. */
-export const VERSION = '0.15.0'
+export const VERSION = '0.16.1'
 
 /** Plugin id. Also the Loader row id in `cordis.patch.yml`. */
 export const name = 'dsh-global-todo'

package/lib/routes.js

@@ -718,6 +718,28 @@ export function createRoutes(deps) {
       return { todo: await service.remove(body.id, { by: 'human' }) }
     }),
 
+    exact('POST', `${ROUTE_BASE}/relink`, async (request) => {
+      // Re-pointing a dead attachment: the byte-free equivalent of "upload it again".
+      const body = await readJsonBody(request)
+      if (typeof body.id !== 'string' || body.id.trim() === '') {
+        throw new TodoError('invalid-body', 'relink 需要 id')
+      }
+      const index = Number(body.index)
+      if (!Number.isInteger(index) || index < 0) {
+        throw new TodoError('invalid-body', 'relink 需要 index（附件在列表里的位置）')
+      }
+      const todo = await service.get(body.id)
+      const link = (todo.links ?? [])[index]
+      if (link === undefined) throw new TodoError('not-found', '这条待办没有这个附件')
+      if (typeof body.value !== 'string' || body.value.trim() === '') {
+        throw new TodoError('invalid-body', 'relink 需要新的 value（绝对路径或网址）')
+      }
+      const links = todo.links.slice()
+      links[index] = { kind: link.kind, value: body.value.trim(), ...(link.title === '' ? {} : { title: link.title }) }
+      // Same shape as /update: the service already answers `{ todo, changed }`.
+      return service.update(body.id, { links }, { by: 'human' })
+    }),
+
     exact('POST', `${ROUTE_BASE}/restore`, async (request) => {
       // The panel's undo: put a removed record back verbatim, timestamps and
       // attachments included, instead of re-creating it as a new todo.

package/lib/service.js

@@ -28,6 +28,7 @@ import {
   newId,
   normalizeActor,
   normalizeStored,
+  parseDueText,
   pushActivity,
   recordDispatch as recordDispatchOn,
   removeLink as removeLinkFrom,
@@ -132,8 +133,21 @@ export function createService(options) {
    * @param {string} raw
    * @returns {{ text: string[], tags: string[], levels: string[], flags: string[] }}
    */
+/**
+ * A due-date bound from a `before:` / `after:` token.
+ *
+ * Only the explicit deadline shapes are accepted (date, date+time), because a search bound
+ * that silently became New Year's Day would filter the list without saying so.
+ *
+ * @param {string} text e.g. `2026-11-01` or `2026-11-01T18:00`
+ * @returns {number | null} epoch millis, or null when the token is not a date bound
+ */
+function dueBound(text) {
+  const verdict = parseDueText(text)
+  return verdict.ok === true ? Date.parse(verdict.iso) : null
+}
   function parseQuery(raw) {
-    const parsed = { text: [], tags: [], levels: [], flags: [] }
+    const parsed = { text: [], tags: [], levels: [], flags: [], before: null, after: null }
     for (const token of String(raw).split(/\s+/)) {
       if (token === '') continue
       const lower = token.toLowerCase()
@@ -142,6 +156,17 @@ export function createService(options) {
       else if (lower.startsWith('level:') && lower.length > 6) {
         const value = lower.slice(6)
         parsed.levels.push(LEVEL_ALIAS[value] ?? value)
+      } else if (lower.startsWith('before:') && lower.length > 7) {
+        // A partial date is what a search box contains while it is being typed; turning that
+        // into an error would make the list flicker red on every keystroke. An unparseable
+        // bound is therefore ignored, and the token stays a plain search term.
+        const bound = dueBound(lower.slice(7))
+        if (bound === null) parsed.text.push(lower)
+        else parsed.before = bound
+      } else if (lower.startsWith('after:') && lower.length > 6) {
+        const bound = dueBound(lower.slice(6))
+        if (bound === null) parsed.text.push(lower)
+        else parsed.after = bound
       } else if (lower.startsWith('is:') && lower.length > 3) parsed.flags.push(lower)
       else if (lower.startsWith('has:') && lower.length > 4) parsed.flags.push(lower)
       else parsed.text.push(lower)
@@ -162,6 +187,14 @@ export function createService(options) {
     for (const level of parsed.levels) {
       if (todo.priority !== level) return false
     }
+    // A date bound is about the deadline. A todo without one cannot satisfy either bound:
+    // "what is due before Friday" has no meaningful answer for something with no deadline.
+    if (parsed.before !== null || parsed.after !== null) {
+      const due = typeof todo.dueAt === 'string' ? Date.parse(todo.dueAt) : Number.NaN
+      if (!Number.isFinite(due)) return false
+      if (parsed.before !== null && due >= parsed.before) return false
+      if (parsed.after !== null && due <= parsed.after) return false
+    }
     for (const flag of parsed.flags) {
       if (flag === 'is:overdue' && !isOverdue(todo, at)) return false
       if (flag === 'is:due' && (todo.dueAt === null || todo.dueAt === undefined)) return false
@@ -437,7 +470,9 @@ export function createService(options) {
     return {
       ...todo,
       links: todo.links.map((link) => {
-        if (link.kind !== 'file') return { ...link }
+        // A dead image must be flagged exactly like a dead document: the panel would
+        // otherwise render a broken frame instead of the existing missing-file chip.
+        if (link.kind !== 'file' && link.kind !== 'image') return { ...link }
         let present = true
         try {
           present = check(link.value) !== false

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-global-todo",
-  "version": "0.15.0",
+  "version": "0.16.1",
   "icon": "./docs/icon.svg",
   "description": "Cross-session todo list for DeepSeek Harness: one JSON file a person and an agent both write to, with step plans that ship as a numbered hand-off, session read-back, and a human confirmation before an agent's \"done\" counts.",
   "type": "module",