dsh-global-todo 0.4.2 → 0.4.3

package/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.3] — 2026-10-19
+
+The list is meant to live in a synced folder; a change from another machine should not be
+something you find out about a day later.
+
+- **A file changed elsewhere is counted and reported.** The store keeps an `mtimeMs:size`
+  fingerprint of the file as this process last read or wrote it; a read that disagrees with it
+  increments `externalChanges` (once per change, not once per poll) and records
+  `lastExternalAt`, both surfaced through `/health.store`. The panel turns a new count into a
+  one-line notice. Reads still trust a file that parses — this process cannot merge two writers'
+  intent — but the person can see that it happened.
 ## [0.4.2] — 2026-10-19
 
 Noise is the failure mode that matters for a list other people are asked to trust.

package/docs/DESIGN.md

@@ -57,6 +57,16 @@ $DSH_HOME/global-todo/todos.json     ← { version: 1, todos: [ … ] }
   version, and a future migration step would run before the first write, keeping the old
   file as a backup.
 
+## A shared file changes without asking
+
+The list is deliberately portable — a notes repo, a synced folder, a NAS — so another machine
+writing the same file is a normal event. It must not be a silent one either: the store keeps a
+`mtimeMs:size` fingerprint of the file as it last read or wrote it, and a read that disagrees
+means somebody else changed it. That is counted once per change (not once per poll, which would
+be noise) and exported through `describe()` as `externalChanges` / `lastExternalAt`; the panel
+turns a new count into a one-line notice. `store.read` still trusts a file that parses, because
+**this process** has no way to merge two writers' intent — but the person can now see that it
+happened instead of discovering it a day later.
 ## Attachments: references, not uploads
 
 An attachment is either an address (`http`/`https`) or an absolute path. Rules:

package/docs/ROADMAP.md

@@ -106,6 +106,10 @@ is archived, and `global_todo_update` finally accepts `status`.
 `findDuplicate` (`lib/capture.js`): normalized title against live rows, a close paraphrase inside
 72 hours, and the same errand finished in the last 7 days. The decision is pure, the reason lands
 in `skipped[]`, and archived/cancelled rows deliberately do not block a new one.
+**A change made elsewhere is visible** — the store fingerprints the file on every read/write and
+counts a disagreement once (`externalChanges`, `lastExternalAt` in `lib/store.js`; surfaced by
+`/health.store`). The panel shows a one-line notice instead of letting a synced folder change the
+list silently.
 ### Partly landed
 
 - **Batch and multi-select** — the selection mode, its per-row markers and the batch

package/lib/client.js

@@ -50,7 +50,7 @@ window.__ModuleLoader__.load({
      * different mechanisms (restart vs. hot reload), so "which one am I looking
      * at" needs an answer that the bundle itself carries.
      */
-    const UI_REV = 'ui25'
+    const UI_REV = 'ui26'
     /** Last language resolved for the shell; module-level so a fetch failure can be worded too. */
     let activeLang = 'zh'
 
@@ -134,6 +134,7 @@ window.__ModuleLoader__.load({
       'autoCollect.reason.turn': '轮次没有干净结束（{kind}）',
       'notice.autoCollectOn': '已开启自动获取：一次人为发言最多自动问一次',
       'notice.autoCollectOff': '已关闭自动获取',
+      'notice.externalChange': '清单在别处被改过，已载入最新内容',
       'action.exempt': '豁免',
       'action.exemptOn': '已豁免',
       'action.exemptHint': '这个工作区里的对话永不自动获取（再点一下取消）',
@@ -344,6 +345,7 @@ window.__ModuleLoader__.load({
       'autoCollect.reason.turn': 'the turn did not end cleanly ({kind})',
       'notice.autoCollectOn': 'Auto-collect on: at most one question per message from you',
       'notice.autoCollectOff': 'Auto-collect off',
+      'notice.externalChange': 'The list changed somewhere else; the latest content is loaded',
       'action.exempt': 'Exempt',
       'action.exemptOn': 'Exempted',
       'action.exemptHint': 'Never auto-collect in this workspace (click again to undo)',
@@ -2125,6 +2127,9 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
           : []
       const conversations = [...pinnedEntry, ...labelled]
       const mounted = useRef(true)
+      // The store counts file changes made outside this process (another machine, a sync
+      // client). A new count means the panel's view was stale a moment ago; say so once.
+      const externalRef = useRef(null)
       const titleRef = useRef(null)
       const searchRef = useRef(null)
       const undoTimer = useRef(null)
@@ -2165,11 +2170,18 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
       const refreshHealth = useCallback(async () => {
         try {
           const data = await call('health')
-          if (mounted.current) setState((current) => ({ ...current, health: data }))
+          if (!mounted.current) return
+          const external = Number(data?.store?.externalChanges) || 0
+          if (externalRef.current !== null && external > externalRef.current) {
+            setNotice({ text: translate(lang, 'notice.externalChange'), sessionId: '' })
+            setTimeout(() => setNotice(null), 8000)
+          }
+          externalRef.current = external
+          setState((current) => ({ ...current, health: data }))
         } catch {
           /* the health mirror is not worth an error banner */
         }
-      }, [])
+      }, [lang])
 
       useEffect(() => {
         mounted.current = true

package/lib/index.js

@@ -35,7 +35,7 @@ import { createStore, resolveStorePath } from './store.js'
 import { createTools } from './tools.js'
 
 /** Must equal `package.json`'s version; `npm run check` enforces that. */
-export const VERSION = '0.4.2'
+export const VERSION = '0.4.3'
 
 /** Plugin id. Also the Loader row id in `cordis.patch.yml`. */
 export const name = 'dsh-global-todo'

package/lib/store.js

@@ -19,7 +19,7 @@
  * @module dsh-global-todo/store
  */
 
-import { open, mkdir, readFile, rename, writeFile } from 'node:fs/promises'
+import { open, mkdir, readFile, rename, stat, writeFile } from 'node:fs/promises'
 import { homedir } from 'node:os'
 import path from 'node:path'
 
@@ -79,6 +79,46 @@ export function createStore(options) {
   /** Serializes every mutation; also lets `update` await the writes before it. */
   let chain = Promise.resolve()
 
+  /**
+   * Fingerprint of the file as this process last read or wrote it.
+   *
+   * The file is meant to be portable — a synced folder, a NAS — so another machine changing it
+   * is a normal event, not an error. It must not be silent either: a read that sees a different
+   * `mtimeMs:size` than the last one this process established is reported through `describe()`
+   * so the panel can say the list changed elsewhere. One increment per external change, not per
+   * poll, which is why `known` is updated as the change is noticed.
+   */
+  let known = null
+  let externalChanges = 0
+  let lastExternalAt = null
+
+  /** @param {{ mtimeMs: number, size: number } | null} info */
+  function remember(info) {
+    if (info === null) {
+      known = null
+      return
+    }
+    known = `${info.mtimeMs}:${info.size}`
+  }
+
+  /** Note a read that disagrees with what this process last saw. */
+  function observe(info) {
+    if (info === null) {
+      if (known !== null) {
+        externalChanges += 1
+        lastExternalAt = now()
+      }
+      known = null
+      return
+    }
+    const fingerprint = `${info.mtimeMs}:${info.size}`
+    if (known !== null && known !== fingerprint) {
+      externalChanges += 1
+      lastExternalAt = now()
+    }
+    known = fingerprint
+  }
+
   /**
    * Read the document. A missing file is an empty list; an unparseable file is
    * an error, never a silent reset — overwriting a mangled-but-recoverable file
@@ -91,9 +131,15 @@ export function createStore(options) {
     try {
       text = await readFile(file, 'utf8')
     } catch (error) {
-      if (error?.code === 'ENOENT') return { version: SCHEMA_VERSION, todos: [] }
+      if (error?.code === 'ENOENT') {
+        // The file this process knew about is gone: somebody else removed or moved it.
+        observe(null)
+        return { version: SCHEMA_VERSION, todos: [] }
+      }
       throw new TodoError('store-unwritable', `读不到待办文件 ${file}：${error?.message ?? error}`)
     }
+    // Compare before parsing: a corrupt write from elsewhere is still a change worth naming.
+    observe(await stat(file).catch(() => null))
     if (text.trim() === '') return { version: SCHEMA_VERSION, todos: [] }
 
     let parsed
@@ -147,6 +193,8 @@ export function createStore(options) {
     } catch {
       /* ignore */
     }
+    // This write is the new baseline, so the next read does not report our own change.
+    remember(await stat(file).catch(() => null))
   }
 
   /**
@@ -206,7 +254,18 @@ export function createStore(options) {
         logger?.warn?.(`dsh-global-todo: 无法统计 ${file}：${error?.message ?? error}`)
       }
     }
-    return { kind: 'json', file, exists, bytes, todos, schemaVersion: SCHEMA_VERSION }
+    return {
+      kind: 'json',
+      file,
+      exists,
+      bytes,
+      todos,
+      schemaVersion: SCHEMA_VERSION,
+      // How many times the file changed under this process (another machine, a sync client).
+      // In memory: it describes this process, and a restart is entitled to forget it.
+      externalChanges,
+      lastExternalAt,
+    }
   }
 
   return { kind: 'json', file, read, write, update, all, describe }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-global-todo",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "icon": "./docs/icon.svg",
   "description": "Global, cross-session todos for DeepSeek Harness: one list owned by the human and the agent together, with creation time, attached documents and links, and one-click hand-off to an agent session. 全局待办：跨会话一份清单，记录加入时间，可挂文档与地址，可一键交给 Agent 继续干。",
   "type": "module",