dsh-global-todo 0.16.2 → 0.16.3

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [0.16.3] — 2026-10-23
+
+Documentation release: the npm page finally shows the current install instructions.
+
+- **npm's README is frozen at publish time**, so the install/per-profile rewrite and the
+  「哪些功能还没有 / Not there yet」 sections (README.zh.md, FAQ, ROADMAP) reach GitHub but not the
+  npm page until a new version ships. Nothing in `lib/` changes.
+- **The market index no longer blocks publishing.** Its test required the index's newest version
+  to equal `package.json`'s — which cannot hold between a version bump and its publish, and
+  `prepack` runs the suite, so the first release after the market index landed could not be
+  tagged. The offline rule is now one-directional (the index may not offer a version newer than
+  the tree), and staleness moved to `npm run market:fresh`, which asks the registry. AGENTS.md
+  documents the two-step order: publish, then regenerate the index and commit it.
+
 ## [0.16.2] — 2026-10-22
 
 A date-only deadline is local midnight, so a date bound stops swallowing part of its own day.

package/README.md

@@ -172,21 +172,53 @@ What each file shows, and when it is regenerated, is indexed in
 
 ## Install
 
+**Check your profile name first.** The plugin is installed into one profile, not into the
+machine; a wrong profile name still exits 0, and then nothing shows up in the sidebar after a
+restart — the most common first-run trap.
+
+```sh
+ls ~/.dsh/profiles          # Windows: dir %USERPROFILE%\.dsh\profiles
+```
+
+Replace `<profile>` below with one of the names that command prints (`web` on most hosts;
+use your desktop or `headless` profile name if that is what you run):
+
 ```sh
 # from npm
-dsh plugin --profile web add dsh-global-todo
+dsh plugin --profile <profile> add dsh-global-todo
 
 # or from a checkout, which is also the development path
-dsh plugin --profile web add /absolute/path/to/dsh-global-todo
+dsh plugin --profile <profile> add /absolute/path/to/dsh-global-todo
 ```
 
-The plugin is a Loader row, not a hot-loaded script: **restart the host** (`dsh web`)
-after installing, then refresh the page. A "待办 / Todos" entry appears in the sidebar.
+The plugin is a Loader row, not a hot-loaded script: **restart the host** (`dsh web`, or
+whatever start command you use) after installing, then refresh the page. A "待办 / Todos"
+entry appears in the sidebar.
+
+> Sidebar still empty? Check three things in order: ① which profiles `ls` actually printed and
+> whether the one you installed into is the one running; ② whether the host really restarted
+> (the Loader is read once at boot); ③ whether the page was refreshed (the client module graph
+> belongs to the release the page booted with).
 
 The npm package is the source of truth. A community catalog can lag behind it or point at an
-older release; pin the version you want (`dsh plugin --profile web add dsh-global-todo@0.13.1`)
+older release; pin the version you want (`dsh plugin --profile <profile> add dsh-global-todo@0.13.1`)
 when it matters.
 
+### Installing from DSH's Discover tab
+
+DSH's Discover tab reads a plugin market index from a URL you add yourself — dsh ships none, and
+a user-added index is the one path that installs without copying a command. This repository
+publishes one:
+
+```text
+https://lugabeeee.github.io/dsh-global-todo/market/index.json
+```
+
+It is generated from npm by `npm run market` (`docs/market/index.json`) and validated against
+dsh's own `@deepseek-ai/dsh-plugin-market-index` before it is written. `npm test` fails when its
+newest version is not the version in `package.json`, so a release that forgets to regenerate it
+is caught before it ships.
+
 **Hand-copied a directory instead?** Check it before wondering why the plugins page looks wrong:
 
 ```sh
@@ -200,7 +232,7 @@ the desktop app print `Plugin metadata … ENOENT … \locale` while the plugin
 To roll back:
 
 ```sh
-dsh plugin --profile web remove dsh-global-todo
+dsh plugin --profile <profile> remove dsh-global-todo
 ```
 
 Your list is not touched by install or uninstall: it lives outside the plugin, at

package/README.zh.md

@@ -151,16 +151,43 @@ HTML（不依赖宿主、零依赖），再以 1280×720 拍进 `docs/screenshot
 
 ## 安装
 
+**先确认 profile 名字。** 插件是装进某个 profile 的，不是装进整台机器；profile 名写错，
+命令会成功，但重启后侧栏里什么都没有——这是最常见的一次踩坑。
+
+```sh
+ls ~/.dsh/profiles          # Windows: dir %USERPROFILE%\.dsh\profiles
+```
+
+把下面命令里的 `<profile>` 换成上一步列出来的那个（本机常见是 `web`；用桌面端就填桌面端的
+profile 名，用 headless 就填 `headless`）：
+
 ```sh
 # 从 npm 装
-dsh plugin --profile web add dsh-global-todo
+dsh plugin --profile <profile> add dsh-global-todo
 
 # 或从本地检出装（也是开发路径）
-dsh plugin --profile web add /绝对路径/dsh-global-todo
+dsh plugin --profile <profile> add /绝对路径/dsh-global-todo
+```
+
+插件是宿主组合里的**一行 Loader**，不是热加载脚本：**装完要重启宿主**（`dsh web`，
+或你用的那个启动命令），再刷新页面。侧栏会出现「待办」入口。
+
+> 侧栏还是空的？按顺序查三件事：① 上面的 `ls` 里到底有哪几个 profile，你装的是不是正在跑的那个；
+> ② 宿主有没有真的重启（Loader 只在启动时读一次）；③ 页面有没有刷新（客户端模块图属于
+> 启动时那个 release）。
+
+### 从 DSH 的 Discover 标签安装
+
+DSH 的 Discover 标签读的是**你自己添加**的一个 JSON 索引（官方不带索引），这也是唯一一条
+不用手抄命令的安装路径。本仓库发布了一份：
+
+```text
+https://lugabeeee.github.io/dsh-global-todo/market/index.json
 ```
 
-插件是宿主组合里的**一行 Loader**，不是热加载脚本：**装完要重启宿主**（`dsh web`），
-再刷新页面。侧栏会出现「待办」入口。
+它由 `npm run market` 从 npm 生成（`docs/market/index.json`），写入前会用 DSH 自己的
+`@deepseek-ai/dsh-plugin-market-index` 校验一遍。**索引里的最新版本与 `package.json` 不一致时
+`npm test` 会失败** —— 发版后忘了重新生成，会在发出去之前就被拦下。
 
 **如果你是手动拷贝目录（而不是从 npm 装）**，先自检一遍，别靠猜：
 
@@ -174,12 +201,12 @@ npx dsh-global-todo-doctor "$HOME/.dsh/plugins-local/全局待办插件"
 `Plugin metadata … ENOENT … \locale`。
 
 npm 上的包才是事实来源。社区目录可能落后于 npm、或指向某个旧 release；需要确定版本时
-直接钉版本（`dsh plugin --profile web add dsh-global-todo@0.13.1`）。
+直接钉版本（`dsh plugin --profile <profile> add dsh-global-todo@0.13.1`）。
 
 回滚：
 
 ```sh
-dsh plugin --profile web remove dsh-global-todo
+dsh plugin --profile <profile> remove dsh-global-todo
 ```
 
 装卸都不会碰你的清单——它在插件之外：`$DSH_HOME/global-todo/todos.json`。

package/docs/FAQ.md

@@ -68,18 +68,18 @@ CSV 没有直接入口：先转成 JSON 或 Markdown。Markdown 解析是容错
 
 没有 Agent 参与时用不上的只有四件事：抓取、派发、Agent 的完成声明、会话回读。
 
-## 8. 哪些事它明确不做？
+## 8. 哪些功能目前还没有？
 
-| 不做 | 现状 |
+| 目前没有 | 现状 |
 |---|---|
-| 看板 / 日历视图 | 只有列表，加三种分组（对话 / 时间 / 级别）；没有拖拽看板，没有日历 |
-| 重复任务 | `dueAt` 是单个时间点，没有 recurrence 字段；同一截止只提醒一次，改了时间才会重新提醒 |
-| 子任务树 | 只有扁平的 `steps`，最多 20 条 |
-| 上传附件 | 只存引用（绝对路径或 URL），不复制字节 |
-| 多清单 / 项目 | 只有一份全局清单（ROADMAP 的 Later） |
-| 自动开工 | 明确不计划：那是任务队列，不是个人清单（ROADMAP 的 Explicitly not planned） |
-| 桌面端面板 | 只有 Web 客户端 |
-| 账号 / 多用户 | 没有；只有一个本机（或受信网络）可访问的 HTTP 面 |
+| 看板 / 日历视图 | 现在只有列表，加三种分组（对话 / 时间 / 级别）；没有拖拽看板，没有日历 |
+| 重复任务 | `dueAt` 是单个时间点，还没有 recurrence 字段；同一截止只提醒一次，改了时间才会重新提醒 |
+| 子任务树 | 现在只有扁平的 `steps`，最多 20 条 |
+| 上传附件 | 现在只存引用（绝对路径或 URL），不复制字节 |
+| 多清单 / 项目 | 现在只有一份全局清单 |
+| 自动开工 | 现在没有；它是一份个人清单，不是任务队列 |
+| 桌面端面板 | 现在只有 Web 客户端 |
+| 账号 / 多用户 | 现在没有；只有一个本机（或受信网络）可访问的 HTTP 面 |
 
 ## 9. 两个进程同时写这个文件会怎样？
 
@@ -122,7 +122,7 @@ CSV 没有直接入口：先转成 JSON 或 Markdown。Markdown 解析是容错
 ## 12. 怎么干净卸载？
 
 ```sh
-dsh plugin --profile web remove dsh-global-todo
+dsh plugin --profile <profile> remove dsh-global-todo
 ```
 
 然后重启宿主、刷新页面，侧栏入口消失。清单和设置都还在原处——这是刻意的。

package/docs/QUICKSTART.md

@@ -15,14 +15,26 @@ headless / ACP / SDK 组合里没有面板，只剩 Agent 工具。
 
 ## 1. 安装
 
+先看你实际有哪些 profile（插件是装进某一个 profile，不是装进整台机器）：
+
+```sh
+ls ~/.dsh/profiles          # Windows: dir %USERPROFILE%\.dsh\profiles
+```
+
+把打印出来的名字填进去（大多数是 `web`）：
+
 ```sh
-dsh plugin --profile web add dsh-global-todo
+dsh plugin --profile <profile> add dsh-global-todo
 ```
 
-装完**重启宿主**（`dsh web`），再**刷新页面**。插件是 Loader 里的一行，不是热加载脚本。
+装完**重启宿主**（`dsh web`，或你用的那个启动命令），再**刷新页面**。插件是 Loader 里的一行，
+不是热加载脚本。
 
 验证：侧栏出现「待办」入口。
 
+侧栏还是空的？按顺序查三件事：① 你装的是不是正在跑的那个 profile；② 宿主有没有真的重启；
+③ 页面有没有刷新。三件都对还是没有，跑 `npx dsh-global-todo-doctor <插件目录>` 自检。
+
 ## 2. 打开面板
 
 点侧栏的「待办」。这是**全局面板**：不绑定某个会话，切到别的对话、关掉再开，清单还是同一份。

package/docs/ROADMAP.md

@@ -246,10 +246,15 @@ mislead.
 | Drag to reorder | Manual order is meaningful to some people; it also needs a stable `position` field and a decision about how it interacts with due-date grouping. |
 | Multi-list / projects | A `list` field with one default list; deferred because "global single list" is the current identity. |
 
-## Explicitly not planned
-
-- **Auto-running todos.** A schedule that starts work without a person is a job queue,
-  and this is a personal list.
-- **Copying attachment bytes.** See `DESIGN.md`: references beat stale copies.
-- **A second source of truth.** Anything that mirrors this list elsewhere (a database, a
-  remote service) has to justify why the file is not enough.
+## Not there yet
+
+Things the list does not have today. Some may arrive later; none of them is a promise.
+
+- **Calendar and board views.** The panel is a list with three groupings today. There is no
+  calendar view and no drag-and-drop board.
+- **Auto-running todos.** Nothing starts work on a schedule today; the list records what a
+  person intends to do.
+- **Copying attachment bytes.** Attachments are references (absolute path or URL) today; see
+  `DESIGN.md` for why references beat stale copies.
+- **A second source of truth.** Everything reads and writes the one JSON file today; anything
+  that mirrors it elsewhere (a database, a remote service) would have to justify itself.

package/lib/index.js

@@ -37,7 +37,7 @@ import { createStore, resolveStorePath } from './store.js'
 import { createTools, normalizeToolGroups, selectTools } from './tools.js'
 
 /** Must equal `package.json`'s version; `npm run check` enforces that. */
-export const VERSION = '0.16.2'
+export const VERSION = '0.16.3'
 
 /** Plugin id. Also the Loader row id in `cordis.patch.yml`. */
 export const name = 'dsh-global-todo'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-global-todo",
-  "version": "0.16.2",
+  "version": "0.16.3",
   "icon": "./docs/icon.svg",
   "description": "Cross-session todo list for DeepSeek Harness: one JSON file a person and an agent both write to, with step plans that ship as a numbered hand-off, session read-back, and a human confirmation before an agent's \"done\" counts.",
   "type": "module",
@@ -83,7 +83,10 @@
     "prepack": "npm run verify",
     "check:render": "node tools/preview.mjs --check",
     "check:live": "node tools/live-check.mjs",
-    "check:matrix": "node scripts/matrix.mjs"
+    "check:matrix": "node scripts/matrix.mjs",
+    "market": "node tools/market.mjs",
+    "market:check": "node tools/market.mjs --check",
+    "market:fresh": "node tools/market.mjs --fresh"
   },
   "dsh": {
     "manifestVersion": 1,