dsh-plugin-notify-sounds 1.8.4 → 1.8.6

package/README.md

@@ -13,10 +13,10 @@ English | [中文](README.zh.md)
 
 Walk away from the window without missing anything: an OS notification in the background (**click it to jump back**), and a "Waiting for you" / "Finished" mark on the taskbar title. Once you have seen it, the plugin goes quiet — it will not nag you like an alarm clock.
 
-**Install**: DSH → Settings → Plugins → Add plugin, paste the line below and press **Install**:
+**Install**: DSH → **Plugins** in the left sidebar → Add plugin, paste the line below (keep the version — a release younger than 24 hours is resolved back to the previous one by pnpm's `minimumReleaseAge`) and press **Install**:
 
 ```
-dsh-plugin-notify-sounds
+dsh-plugin-notify-sounds@1.8.6
 ```
 
 ---
@@ -36,7 +36,7 @@ Every visual detail of the settings section comes from DSH's own design system:
 | **Only what you care about** | Sub-agents (background tasks) are completely silent by default — only your own conversation is announced |
 | **Quiet when it should be** | Quiet hours (e.g. 22:00–08:00, wrapping past midnight), notify-only-when-hidden, and a master switch |
 | **Your sound, your way** | Nine built-in sounds, custom ringtone upload, volume — each feature with its own toggle |
-| **Update checks** | Check npm for a new version and install it in one click: verified against the published digest before anything is replaced, restored on failure with advice you can act on; restart DSH to load it |
+| **Update checks** | Checks npm for a newer version and points at the route that installs it — the **Plugins** panel in the sidebar (uninstall, then add again), the marketplace, or `dsh plugin add` on a web profile; the row also flags an install the profile's lockfile does not match |
 
 ## 💡 Why
 
@@ -54,7 +54,7 @@ Or upload your own ringtone (mp3/wav/ogg, ≤512KB, validated and volume-normali
 
 Settings → **Sounds** (between General and Models). Every feature has its own toggle, styled exactly like DSH's own preference pages:
 
-master switch and volume · per-trigger sounds with preview · sub-agent alerts · system notifications · window title alert · repeat interval · quiet hours · hidden-only mode · custom ringtone upload · update checks and one-click update
+master switch and volume · per-trigger sounds with preview · sub-agent alerts · system notifications · window title alert · repeat interval · quiet hours · hidden-only mode · custom ringtone upload · update checks (installs go through the package manager)
 
 Everything applies immediately — no restart needed.
 
@@ -62,14 +62,15 @@ Everything applies immediately — no restart needed.
 
 ### 🖱️ Simplest: two clicks inside DSH (recommended)
 
-1. In DSH open **Settings → Plugins** and press **Add plugin**;
-2. Paste the package name into the box (this plugin is published on [npm](https://www.npmjs.com/package/dsh-plugin-notify-sounds)):
+1. In DSH open the **Plugins** panel in the left sidebar and press **Add plugin**;
+2. Paste the package name **with a version** (this plugin is published on [npm](https://www.npmjs.com/package/dsh-plugin-notify-sounds)):
 
    ```
-   dsh-plugin-notify-sounds
+   dsh-plugin-notify-sounds@1.8.6
    ```
 
-   (the GitHub repository address `https://github.com/BillCx330/dsh-plugin-notify-sounds` or a local directory path work too)
+   Do not drop the version: pnpm's `minimumReleaseAge` policy keeps a release younger than 24 hours out of automatic resolution, so the bare name resolves to the previous one. The current version is on [npm](https://www.npmjs.com/package/dsh-plugin-notify-sounds?activeTab=versions) and in [Releases](https://github.com/BillCx330/dsh-plugin-notify-sounds/releases).
+   (The GitHub repository address `https://github.com/BillCx330/dsh-plugin-notify-sounds` or a local directory path work too, but neither pins a version.)
 3. Press **Install**, then **restart DSH** once.
 
 The "install source" dropdown above the box picks the download mirror (mainland China mirror by default; leave it alone unless downloads are slow). DSH warns that a plugin runs with your permissions — this one only reads session state and plays sounds locally; its single request goes to **your own DSH** to raise the window when you click a notification, and nothing is sent anywhere else.
@@ -78,7 +79,7 @@ The "install source" dropdown above the box picks the download mirror (mainland
 
 **Upgrades are installed by the package manager**, so the profile's lockfile moves with the files — a DSH plugin cannot install its own update durably (the manager refuses a package that is already declared, and its remove-then-install step unloads the very code that would finish the install). The plugin therefore only *checks*, and tells you where to install:
 
-- **Inside DSH (recommended)**: Settings → Plugins → remove this plugin → **Add plugin** → paste `dsh-plugin-notify-sounds` → Install → restart DSH.
+- **Inside DSH (recommended, and the only path verified on the Desktop)**: **Plugins** in the left sidebar → uninstall this plugin under *Installed plugins* → **Add plugin** → paste `dsh-plugin-notify-sounds@<version>` → Install → restart DSH. (Keep the version: pnpm's `minimumReleaseAge` policy keeps a freshly published version out of automatic resolution for its first 24 hours, so the bare name can resolve to the previous release.)
 - **With the marketplace plugin** ([dshmarket](https://www.npmjs.com/package/dshmarket)): update it in one click there.
 - **On a `web` profile**: `dsh plugin --profile <your profile> add dsh-plugin-notify-sounds@<version>`.
 
@@ -92,10 +93,12 @@ The update row also warns when the running version is not what the profile's loc
 dsh plugin --profile <your profile> add github:BillCx330/dsh-plugin-notify-sounds
 ```
 
+(A Git install follows the repository's default branch and pins no version; use `package@version` above when the install has to be reproducible.)
+
 **Release archive** — download the `.tgz` from [Releases](https://github.com/BillCx330/dsh-plugin-notify-sounds/releases) and install it by its **path on disk**:
 
 ```sh
-dsh plugin --profile <your profile> add ./dsh-plugin-notify-sounds-1.8.4.tgz
+dsh plugin --profile <your profile> add ./dsh-plugin-notify-sounds-1.8.6.tgz
 ```
 
 (`dsh plugin add` hands its argument straight to the package manager, so it takes a local file path — a download URL will not work.)
@@ -113,9 +116,9 @@ The command line writes `dsh.profile.bundles` and installs the dependency for yo
 ## ⚠️ Known limitations
 
 - **Hand-edited config**: preferences live in the profile's `cordis.patch.yml`; values must match the schema (volume 0–100, a preset id, `HH:MM` times) or the plugin declines to load — just fix the value. The settings UI only ever writes valid values.
-- **Upgrades are installed by the package manager, not by the plugin**: 1.8.0 removed the self-installer (writing files in place never updated the profile's lockfile, so the next plugin install silently restored the old version). The update row still checks npm and reports a newer version, then points at the route that installs — Settings → Plugins (remove, then add again), the marketplace, or `dsh plugin add` on a web profile.
+- **Upgrades are installed by the package manager, not by the plugin**: 1.8.0 removed the self-installer (writing files in place never updated the profile's lockfile, so the next plugin install silently restored the old version). The update row still checks npm and reports a newer version, then points at the route that installs — the **Plugins** panel in the sidebar (uninstall, then add again), the marketplace, or `dsh plugin add` on a web profile.
 - **Versions up to 1.7.0** reach 1.8.0 through their own updater (1.8.0 keeps the same seven filenames), but that arrival is not registered with pnpm: reinstall once through the package manager as above and every later upgrade stays in place. Versions up to 1.6.9 cannot install a release that adds a file — their fixed whitelist refuses it safely; the same one-time reinstall fixes that too.
-- **Multiple windows** fire independently: the same event may chime once per window; turn on notify-only-when-hidden to avoid it.
+- **Multiple windows** elect one page to speak (since 1.7.0): sounds, system notifications and repeat reminders therefore fire once for the whole GUI, not once per window. Title marks stay per-window, because each window has its own title. If the speaking page closes or crashes, another takes over within seconds.
 - **Click-to-return** is fully implemented and tested on Windows; macOS / Linux fall back to the system deep link and are unverified.
 - **The window is found by its title** — deliberately without inspecting other processes (that trips security software). If DSH ever changes its title format, click-to-return silently stops working; sounds and notifications are unaffected.
 - **The nav glyph** depends on the settings panel's DOM structure and silently falls back to the official gear after a DSH redesign — cosmetic only.
@@ -139,6 +142,8 @@ For anyone hacking on the code (exact details live in the source comments):
 
 ## 📜 Changelog
 
+- **v1.8.6** (2026-10-23) **A full audit, paid off — no new features.** Fixed: with goal-only alerting on, turning the switch **off** while the watcher waited still produced the chime it was holding at the end of the goal (the watcher now re-reads the preference); the update check cached a FAILURE for the full day, so one network blip left the row reading "check failed" until tomorrow (failures are now cached for a minute, and the row no longer blames the network — it says neither source returned a usable answer); a `pnpm-lock.yaml` key carrying a peer suffix (`pkg@1.8.4(@scope/peer@3.18.4)`) was read as a version, which flagged a perfectly good install as unregistered and told the user to reinstall it; an unreadable current version rendered as "This version ? · Up to date", which is now its own message; the repeat-interval control displayed a hand-edited 7 as "5 min" while reminders fired every seven (display and timer now share one snap); identical quiet-hours bounds were silently treated as "no quiet" and the description now says so; the client's time parser accepted `9:05` while the Host schema rejected it (both are strict now); a custom-sound read failure was reported as "could not decode"; and one refused notification construction left the row permanently "unsupported" (a successful one now clears it). **Update guidance**: on the Desktop the plugin manager is a **sidebar panel named Plugins**, not "Settings → Plugins" — 1.8.5 got that wrong; every install command now pins the version (it rendered as `@v1.8.5`, and the display prefix does not belong in a command a package manager parses), and the copy explains that a release younger than pnpm's `minimumReleaseAge` window resolves back to the previous one. **Cleanup**: removed the 527-line unreachable self-installer from 1.8.0 (the Host file drops from 1553 to 1023 lines, along with 10 imports that existed only for it), the update notice that could never render, eight dead dictionary keys, and the tests that pinned the dead code; all three route paths are now cross-checked between the halves (`/notify-sounds/goal` was missing, and it is the one that has already drifted once). The README's "multiple windows fire independently" claim contradicted the speaking-page election shipped in 1.7.0 and is corrected.
+- **v1.8.5** (2026-10-20) **The wording catches up with the mechanism.** The update row still said a newer version could be installed "in one click" — it cannot since 1.8.0: the row only checks and points at the package manager. The row now says exactly that, and its in-app guidance carries the version (`dsh-plugin-notify-sounds@{version}`) so a fresh release is not silently resolved to the previous one by pnpm's `minimumReleaseAge` policy. The README feature table, settings summary and install step no longer promise one-click installs; historical changelog entries are left untouched.
 - **v1.8.4** (2026-10-20) **A click always finds the window.** A trace of a real click showed the native raise giving up with "no window found" while the window existed: a hidden or repainting window can transiently answer with an empty title, and the search had nothing else to match on. The window search now also matches the process that owns the window (the Desktop shell is this Host's parent), and the foreground request is retried three times before the deep-link fallback is paid for.
 - **v1.8.3** (2026-10-20) **Click-to-return works when the window is closed to the tray.** The Win32 raise searched only *visible* windows, so a DSH window hidden to the tray was never found and the click fell back to the slow deep-link route — which reads as "clicked the notification, nothing happened". The search now also remembers an invisible window whose title matches, and the raise shows it (`SW_SHOW`) before restoring and focusing it; the deep link stays as the last resort.
 - **v1.8.2** (2026-10-20) **Actually fixes goal-mode alerting.** The 1.8.1 host route read `stateOf(session, "goal")` but took `current.phase`, while the projection value nests the goal: `current.goal.phase`. Every read therefore came back empty and every round chimed. The route now reads the nested field (with a fallback for a flattened shape), and a Host-side debug trace confirmed `current.goal.phase` is `active` on intermediate rounds and `complete` on the final one.

package/README.zh.md

@@ -13,10 +13,10 @@
 
 人不在窗口前也不怕：后台弹系统通知（**点击即回到窗口**），任务栏标题亮出「待处理 / 已完成」；你回来看过一眼之后，它就闭嘴——不会像闹钟一样反复催你。
 
-**安装**：DSH → 设置 → 插件 → 添加插件，粘贴下面这行，点「安装」：
+**安装**：DSH → 左侧栏「插件」→ 添加插件，粘贴下面这行（**带上版本号**，否则发布不满 24 小时的版本会被 pnpm 的 `minimumReleaseAge` 解析回上一版），点「安装」：
 
 ```
-dsh-plugin-notify-sounds
+dsh-plugin-notify-sounds@1.8.6
 ```
 
 ---
@@ -36,7 +36,7 @@ dsh-plugin-notify-sounds
 | **只提醒你关心的** | 子智能体（后台任务）默认完全静默，只提醒主对话，可开关 |
 | **该安静时安静** | 静音时段（如 22:00–08:00，可跨午夜）、仅页面不可见时提示、总开关一键全静音 |
 | **声音随你** | 九种内置音效、自定义铃声上传、音量调节，每项独立开关 |
-| **检测更新** | 设置里检查 npm 新版本并一键更新：下载后校验完整性才替换，失败自动还原并给出可照做的处理建议；更新后重启 DSH 生效 |
+| **检测更新** | 设置里检查 npm 新版本，并指向真正负责安装的入口——**左侧栏「插件」**（卸载后再装）、市场，或 web profile 上的 `dsh plugin add`；若当前安装未被 lockfile 记录，会在行内提示 |
 
 ## 💡 为什么需要它
 
@@ -54,7 +54,7 @@ DSH 的状态提示只有视觉——状态点、侧栏标记。你一切到别
 
 设置 → **提示音**（位于「通用设置」与「模型」之间），每项功能都有独立开关，界面与 DSH 原生设置完全一致：
 
-总开关与音量 · 三种触发各自的音效（含试听）· 子智能体提醒 · 系统通知 · 窗口标题提醒 · 重复提醒间隔 · 静音时段 · 仅后台提示 · 自定义铃声上传 · 自动检查更新与一键更新
+总开关与音量 · 三种触发各自的音效（含试听）· 子智能体提醒 · 系统通知 · 窗口标题提醒 · 重复提醒间隔 · 静音时段 · 仅后台提示 · 自定义铃声上传 · 自动检查更新（安装走包管理器）
 
 改动即时生效，无需重启。
 
@@ -62,14 +62,15 @@ DSH 的状态提示只有视觉——状态点、侧栏标记。你一切到别
 
 ### 🖱️ 最简单：在 DSH 里点两下（推荐）
 
-1. 打开 DSH → **设置 → 插件**，点**添加插件**；
-2. 在输入框粘贴包名（本插件已发布在 [npm](https://www.npmjs.com/package/dsh-plugin-notify-sounds)）：
+1. 打开 DSH → **左侧栏「插件」**，点**添加插件**；
+2. 在输入框粘贴包名**和版本号**（本插件已发布在 [npm](https://www.npmjs.com/package/dsh-plugin-notify-sounds)）：
 
    ```
-   dsh-plugin-notify-sounds
+   dsh-plugin-notify-sounds@1.8.6
    ```
 
-   （填 GitHub 仓库地址 `https://github.com/BillCx330/dsh-plugin-notify-sounds` 或本地目录路径也可以）
+   版本号不要省：pnpm 的 `minimumReleaseAge` 策略会把刚发布不到 24 小时的版本挡在外面，只写包名会解析回上一个版本。想看最新版本号可到 [npm](https://www.npmjs.com/package/dsh-plugin-notify-sounds?activeTab=versions) 或 [Releases](https://github.com/BillCx330/dsh-plugin-notify-sounds/releases) 查。
+   （填 GitHub 仓库地址 `https://github.com/BillCx330/dsh-plugin-notify-sounds` 或本地目录路径也可以，但那样不带版本锁定）
 3. 点**安装**，装完**重启 DSH** 一次。
 
 输入框上方的「安装源」是下载源，默认中国大陆镜像源，国内一般不用改。DSH 会提示「插件以你的权限运行」——本插件只读会话状态、在本地发声；唯一的请求是点击系统通知时发给**本机 DSH** 的唤窗请求，不向外部发送任何数据。
@@ -78,7 +79,7 @@ DSH 的状态提示只有视觉——状态点、侧栏标记。你一切到别
 
 **升级由包管理器安装**，这样 profile 的 lockfile 会跟着一起更新——DSH 插件无法自己持久地更新自己（管理器拒绝已声明的包，而它的「先移除再安装」会先卸载掉正要完成安装的代码）。所以插件只负责**检查**，并告诉你从哪里装：
 
-- **在 DSH 里（推荐）**：设置 → 插件 → 卸载本插件 → **添加插件** → 粘贴 `dsh-plugin-notify-sounds` → 安装 → 重启 DSH。
+- **在 DSH 里（推荐，也是唯一实测过的路径）**：**左侧栏「插件」** → 在「已安装插件」里卸载本插件 → **添加插件** → 粘贴 `dsh-plugin-notify-sounds@<版本>` → 安装 → 重启 DSH。（务必带版本号：pnpm 的 `minimumReleaseAge` 会让刚发布不到 24 小时的版本不参与自动解析，只写包名会装回上一个版本。）
 - **装了市场插件**（[dshmarket](https://www.npmjs.com/package/dshmarket)）：在市场里一键更新。
 - **`web` profile**：`dsh plugin --profile <你的 profile> add dsh-plugin-notify-sounds@<版本>`。
 
@@ -92,10 +93,12 @@ DSH 的状态提示只有视觉——状态点、侧栏标记。你一切到别
 dsh plugin --profile <你的 profile> add github:BillCx330/dsh-plugin-notify-sounds
 ```
 
+（Git 安装跟仓库默认分支走，不带版本锁定；要可复现的安装请用上面的 `包名@版本号`。）
+
 **Release 压缩包** —— 从 [Releases](https://github.com/BillCx330/dsh-plugin-notify-sounds/releases) 下载 `.tgz`，用它**在磁盘上的路径**安装：
 
 ```sh
-dsh plugin --profile <你的 profile> add ./dsh-plugin-notify-sounds-1.8.4.tgz
+dsh plugin --profile <你的 profile> add ./dsh-plugin-notify-sounds-1.8.6.tgz
 ```
 
 （`dsh plugin add` 把参数原样交给包管理器，所以要给本地文件路径，不能填下载地址。）
@@ -113,9 +116,9 @@ dsh plugin --profile <你的 profile> add ./dsh-plugin-notify-sounds
 ## ⚠️ 已知边界
 
 - **手改配置**：偏好写在 profile 的 `cordis.patch.yml`，值必须符合 schema（音量 0–100、音效为预设之一、时间 `HH:MM`）；写错会让插件不加载，改回即可。设置界面只会写入合法值。
-- **升级由包管理器安装，不再由插件自己完成**：1.8.0 移除了自安装器（原地写文件从不会更新 profile 的 lockfile，于是下一次插件安装会静默把旧版本装回来）。更新行仍会检查 npm、报告新版，然后指向真正负责安装的入口——设置 → 插件（卸载后再装）、市场，或 web profile 上的 `dsh plugin add`。
+- **升级由包管理器安装，不再由插件自己完成**：1.8.0 移除了自安装器（原地写文件从不会更新 profile 的 lockfile，于是下一次插件安装会静默把旧版本装回来）。更新行仍会检查 npm、报告新版，然后指向真正负责安装的入口——**左侧栏「插件」**（卸载后再装）、市场，或 web profile 上的 `dsh plugin add`。
 - **1.7.0 及更早版本**可以通过它们自带的自更新到达 1.8.0（1.8.0 保持同样的七个文件名），但这次到达不会被 pnpm 登记：按上面的方式用包管理器重装一次，此后所有升级都会留下。1.6.9 及更早无法安装「新增了文件」的版本——固定白名单会安全拒绝；同样的一次性重装即可解决。
-- **多窗口**：各窗口独立触发，同一事件可能各响一次；打开「仅在页面不可见时提示」即可避免。
+- **多窗口**：提示音、系统通知和重复提醒由同一个 GUI 的所有页面选出一个「发声页」来发（1.7.0 起），所以同一个事件只响一次；窗口标题标记仍是每个窗口各自一份，因为它们各自有标题。发声页关闭或崩溃后几秒内由其他页面接管。
 - **点击通知回到窗口**：Windows 完整实现并实测；macOS / Linux 走系统深链，未验证。
 - **唤窗按窗口标题定位主窗口**：刻意不读取其他进程信息（那会触发杀软主动防御）。若将来 DSH 改变标题格式，唤窗会静默失效——提示音与通知本身不受影响。
 - **导航小图标**：依赖设置面板的 DOM 结构，若DSH 改版后自动回落为官方齿轮，仅影响外观。
@@ -138,6 +141,8 @@ dsh plugin --profile <你的 profile> add ./dsh-plugin-notify-sounds
 
 ## 📜 更新记录
 
+- **v1.8.6**（2026-10-23）**把一次全量审计翻出来的问题收干净，没有新功能。** 修复：目标模式下，若用户在等到目标结束之前关掉「只在最终轮提醒」，目标结束后仍会补响一次——等待器现在会复查这个开关；更新检查把「失败」也缓存满 24 小时，一次网络抖动就让整行显示一整天「检查失败」，现在失败只缓存 1 分钟，并且不再断言原因是网络，而是如实说两个源都没给出可用答复；`pnpm-lock.yaml` 里带 peer 后缀的键（`pkg@1.8.4(@scope/peer@3.18.4)`）会被当成版本号，让正常的安装被误报「未被包管理器登记」并劝用户重装；当前版本读不出来时，界面会显示「当前版本 ? · 已是最新」，现在单独说明无法读取；「重复提醒间隔」把手改的 7 分钟显示成 5 分钟、实际按 7 分钟响，现在显示与计时共用同一次吸附；静音时段起止相同被当作「不静音」，描述已写明；客户端的时间解析接受 `9:05` 而宿主 schema 拒绝，现在两边一样严；自定义音效读取文件失败时误报「无法解码」，现在分开说；系统通知构造失败一次后整页永久显示「不支持」，现在成功一次即恢复。**更新指引**：桌面端的插件管理器是**左侧栏「插件」**（不是「设置 → 插件」），1.8.5 写错了，已改正；安装命令一律带版本号（此前渲染成 `@v1.8.5`，多了一个 `v`，复制进包管理器未必能解析），并说明发布不满 24 小时的版本会被 pnpm 的 `minimumReleaseAge` 挡掉。**清理**：移除 1.8.0 留下的 527 行不可达自安装器（宿主文件从 1553 行降到 1023 行，连同 10 个只服务于它的导入）、永远返回 null 的更新通知组件、8 个死字典键，以及只测死代码的测试；三条路由的拼写现在都在跨半契约测试里对齐（`/notify-sounds/goal` 此前漏了，而它正是漂移过一次的那条）。README 里「多窗口各自响一次」的说法与 1.7.0 起的发声页选举矛盾，已改正。
+- **v1.8.5**（2026-10-20）**文案跟上机制。** 更新行此前仍写着「发现新版可一键安装」——从 1.8.0 起已不支持：这一行只负责检查，并指向包管理器。现在行内如实说明，且引导里带上版本号（`dsh-plugin-notify-sounds@{version}`），避免刚发布的版本被 pnpm 的 `minimumReleaseAge` 策略静默解析成上一个版本。README 的功能表、设置摘要与安装步骤不再承诺一键安装；历史更新记录保持原样。
 - **v1.8.4**（2026-10-20）**点击通知一定能找到窗口。** 真实点击的日志显示：窗口明明存在，原生唤窗却报 "no window found"——隐藏或正在重绘的窗口可能瞬时返回空标题，而当时的搜索只认标题。现在窗口搜索同时按「拥有窗口的进程」匹配（桌面壳是本宿主进程的父进程），前台请求连续重试三次之后才走深链兜底。
 - **v1.8.3**（2026-10-20）**窗口关到托盘时，点击通知也能回到 DSH 了。** 原先的 Win32 唤窗只搜**可见**窗口，关到托盘的 DSH 窗口永远找不到，只能退到很慢的深链兜底——表现就是「点了通知没反应」。现在会记住标题匹配的不可见窗口，并在置前之前先 `SW_SHOW` 让它显示出来；深链仍作为最后兜底。
 - **v1.8.2**（2026-10-20）**真正修好目标模式的提醒。** 1.8.1 的宿主路由读了 `stateOf(session, "goal")`，却取 `current.phase`，而投影值把 goal 嵌在里面：`current.goal.phase`。于是每次读取都为空、每轮照响。现在改为读嵌套字段（并保留扁平形状的兜底），宿主侧调试记录已确认：中间轮 `current.goal.phase` 是 `active`，最后一轮是 `complete`。