Omahub
← All plugins
A

MS To Do

by anishkn

Microsoft To Do tasks in your bar — quick-add with times and recurrence, keyboard-driven review, and desktop reminders so nothing slips

GitHub

Security review

No obvious issues detected

Deterministic scan — not a security guarantee

None
Risk level
None
Analyzed commit
fef0939
Scanned
1 month ago

No potentially dangerous behavior detected in the analyzed commit.

Automated analysis only — not a security guarantee.

AI advisory review

No obvious issues detected

Language-model assessment · ~deepseek/deepseek-v4-flash-latest — advisory only

None
AI risk level
None
Recommendation
install
Model
~deepseek/deepseek-v4-flash-latest
Analyzed commit
fef0939
Reviewed
1 month ago

The plugin is a well-structured Microsoft To Do client using the standard device-code OAuth flow, with bounded file reads, symlink protection, and URL allowlisting. No malicious, obfuscated, or destructive code was found in the sampled files, and the deterministic scan reported no issues.

How this check works

This review combines the deterministic scan (the rule-based results above) with an independent look at the plugin's code by a language model. The model reads a trimmed sample of the repository's files, the manifest, and the README, then gives a plain-language risk level and a recommendation: install (no notable danger), review (look closer first), or avoid (clearly dangerous).

It runs on the same analyzed commit as the deterministic scan and is strictly advisory — it is not a security guarantee and never blocks a plugin by itself. A human moderator still reviews plugins before they are listed.

AI advisory only — automated analysis, not a security guarantee.

Install
$ omarchy plugin add https://github.com/anishkn04/ms-todo-plugin --enable
Productivity #bar #quickshell

MS To Do for Omarchy

Microsoft To Do tasks in your bar: quick-add with times and recurrence, keyboard-driven review, desktop reminders so nothing slips, and a focus timer (pomodoro) with local daily stats. Your phone keeps using Microsoft's own To Do app — its notifications are excellent and free, and this widget mirrors the same list on the desktop.

[!NOTE] This project is fully AI generated.

Install

omarchy plugin add https://github.com/anishkn04/ms-todo-plugin.git --enable

A dimmed setup slot appears on the bar. Click it to sign in.

Dependencies

  • libnotify (notify-send) — desktop reminders and focus-timer toasts.
  • wl-clipboard (wl-copy) — the sign-in card's copy-code button.

Both ship with Omarchy. The CLI itself is stdlib-only Python — nothing to install.

Sign in

Click the bar slot and hit Sign in with Microsoft. The panel shows a device code, opens microsoft.com/link in your browser, and polls until you approve. Copy/open/cancel are one click each; the session survives restarts via a refresh token. If it ever expires (~90 days of not using the shell), the panel offers Sign in again.

Prefer a terminal? The CLI drives the same flow:

~/.config/omarchy/plugins/anishkn.mstodo/bin/omarchy-mstodo login

(Add alias mstodo=... to your shell if you'll use it often.)

Tokens live in ~/.local/state/omarchy/mstodo/auth.json with 0600 permissions; the task cache sits next to it. The plugin ships its own registered public client id (a client id identifies the app — it is not a secret). If your account type rejects it, register a free app of your own (5 minutes) and set OMARCHY_MSTODO_CLIENT_ID=<id> for the first login — the id is then stored with your tokens:

  1. portal.azure.com → App registrations → New registration
  2. Supported account types: personal Microsoft accounts only
  3. Redirect URI: leave empty; then Authentication → Allow public client flows → Yes
  4. Copy the Application (client) ID

Choosing a list

By default your default Tasks list is used. Point at any list by display name:

// ~/.config/omarchy/shell.json
"plugins": [ { "id": "anishkn.mstodo", "listName": "Errands" } ]

Sync cadence, undo window, reminder lead time, rows per section, and all focus-timer lengths are editable from Omarchy's plugin settings UI.

Configuration via CLI

# Show all settings (current values from shell.json + manifest defaults)
omarchy-mstodo settings

# Show a single setting
omarchy-mstodo settings persistentReminders

# Toggle persistent notifications (default: on = critical urgency, never expires, bypasses DND)
omarchy-mstodo settings persistentReminders false   # off = normal toasts (8–30s)
omarchy-mstodo settings persistentReminders true    # on = critical, never expires

# Sync interval
omarchy-mstodo settings syncInterval "15 minutes"

# Reminder lead time
omarchy-mstodo settings notifyLeadMinutes "5 minutes before"

# Focus timer lengths
omarchy-mstodo settings focusMinutes 30
omarchy-mstodo settings shortBreakMinutes 10
omarchy-mstodo settings longBreakMinutes 20
omarchy-mstodo settings longBreakInterval 6

# Boolean toggles (accept true/false, on/off, yes/no, 1/0)
omarchy-mstodo settings autoChain on
omarchy-mstodo settings pomoNotifications off

# Equivalent native command (no plugin dependency)
omarchy bar set anishkn.mstodo persistentReminders false

All settings are validated against the manifest schema before writing — enums must match exactly, integers respect min/max/step, booleans accept common forms. The shell hot-reloads on change.

Quick-add grammar

Type into the panel's input; a live preview shows what will be created.

Pay electricity @tomorrow 18:30 repeat daily !high
└─ title       └─ date     └─ time └─ recurrence    └─ priority
Part Values Result
date @today @tomorrow @mon..@sun @DD @DD.MM due date (weekday resolves forward, DD rolls to next month)
time HH:MM due time and reminder
repeat daily weekdays weekly monthly yearly every N days/weeks/months/years after-completion recurring task; completing it spawns the next occurrence server-side
until until DD.MM (right after repeat …) bounds the recurrence — no instances after that date
priority !low !normal !high importance

No tokens = plain task with no date. Parse errors never block submission — anything unrecognized stays in the title.

Panel

Five zones, top to bottom: header (sync + help buttons), quick-add, the open list grouped into Overdue / Today, the FOCUS timer, and a footer "Open MS To Do in browser" link. Later work stays out of the way — it lives in any To Do app, the web app, or omarchy-mstodo list.

  • Click a row to select it; double-click to edit it in the input (same grammar); click the circle to complete.
  • Completions and deletions are held for an undo window before hitting the API.
  • Shortcuts are listed behind the ? button — there is no footer repeating them.

Focus timer

A local pomodoro in the FOCUS block: press play to start a focus block; when it ends you get a toast and (optionally) the break starts on its own — short break, or a long one every N blocks. Finished focus blocks count into daily stats (~/.local/state/omarchy/mstodo/pomo.json), reset at midnight; discarded blocks don't count. While a timer runs, the bar slot shows the countdown instead of the next task.

All lengths are plugin settings (bar settings UI or shell.json): focus 25m, short break 5m, long break 15m, long break every 4 blocks by default, plus auto-start next phase and notifications toggles.

Bar views

Left click always opens the panel. Right click cycles what the slot shows: the next commitment (11:30 Work / Program #1), how much is left today (overdue + due today, prefixed with the task glyph so it never reads as a workspace number), or just the plugin icon. The choice persists in your shell.json; omarchy-mstodo cycle-mode cycles it from scripts too. A running focus countdown outranks every view, and the setup hint before sign-in never hides.

Keyboard

Key Action
a focus add box
e edit selected (double-click works too)
space / enter complete
s snooze to tomorrow 09:00
h push one hour
d / delete remove
u cancel last held action
p start / pause / resume focus
x discard the current focus block
g / G first / last row
r force sync
tab switch to next bar panel
esc close (backs out of help/undo first)

IPC

omarchy-shell anishkn.mstodo sync        # also: open close toggle show hide
omarchy-shell anishkn.mstodo focus       # start/pause/resume the timer
omarchy-shell anishkn.mstodo focusStop   # discard the current block

Terminal

omarchy-mstodo list                # grouped: Overdue / Today / Later (full view)
omarchy-mstodo list today          # scopes: overdue|today|upcoming|all|done
omarchy-mstodo list -a             # include completed
omarchy-mstodo list --json         # machine-readable
omarchy-mstodo complete IaQAAAA    # short id suffix from `list` (unique)
omarchy-mstodo add "pay rent @tomorrow 09:00 !high"

MS To Do stores due dates date-only (the server truncates the time), so the wall-clock time lives on the reminder; both the panel and list display the reminder's time whenever it falls on the due date.

Reminders

  • Phone: MS To Do app notifications (reliable, free).
  • Desktop: the service's minute clock watches the cache and fires a notify-send toast when a task's reminder time arrives — even with the panel closed. A lead time of 5/15 minutes is configurable. Reminders that were already stale before the session started never re-nag after a reboot; each fired reminder is recorded once in notified.json.
  • Persistence: with Persistent notifications on (the default), task reminders and focus toasts stay on screen until dismissed — they survive shell restarts too. Omarchy's daemon implements this via critical urgency, which also bypasses Do Not Disturb; turn the setting off to get regular expiring toasts instead.

Sync model

  • Opening the panel always syncs; background ticks use --max-age so two monitors don't double-fetch.
  • All writes go through one CLI process, serialized by the service's action queue.
  • Graph rate limits (429) and network failures surface as a red line in the panel footer, never as crashes.

Remove

omarchy plugin remove anishkn.mstodo

Tokens and cached data live outside the repo in ~/.local/state/omarchy/mstodo/; delete that directory as well if you want a fully clean exit (it also logs you out of this device).

Development

The CLI is stdlib-only Python (no pip installs). Layout:

~/.config/omarchy/plugins/anishkn.mstodo/
├── manifest.json      plugin metadata + settings schema
├── BarWidget.qml      bar slot: next task line / remaining count / icon (right-click cycles)
├── Panel.qml          popout: quick-add, Overdue/Today list, sign-in card,
│                      undo window, help overlay (?), FOCUS timer block
├── Service.qml        mounted once: cache reader, sync timer, action queue,
│                      sign-in polling, reminder clock, focus countdown + stats
├── Model.js           cache shaping, quick-add preview + sectioning helpers
├── bin/omarchy-mstodo Python CLI — OAuth device flow + Microsoft Graph
└── tests/             unit tests for the grammar, payloads, and auth steps

python3 tests/test_mstodo.py
omarchy plugin validate ~/.config/omarchy/plugins/anishkn.mstodo
qmllint -I "$OMARCHY_PATH/shell" BarWidget.qml Panel.qml Service.qml

Saved changes under ~/.config/omarchy/plugins/ hot-reload; force discovery with omarchy-shell shell rescanPlugins.

Credits

With thanks to omarchy-ticktick by @SotoAugusto — this plugin started as a study of its architecture: the Python CLI behind the shell (long-lived credentials in a 0600 file, serialized writes, cache-on-disk for QML) and the service state model are adapted from there, with the Microsoft Graph side built on top. If MS To Do isn't your thing, go check out TickTick.

License

MIT