@jayyuen66/dsh-ocr-review 0.1.9 → 0.1.11

package/client.js

@@ -21,7 +21,6 @@ const UI_MESSAGES = {
 		save: "保存",
 		saving: "保存中…",
 		revert: "撤销",
-		saveFailed: "保存失败：",
 		saveRefused: "未写入（宿主拒收或跳过）：{fields}",
 		loadProvidersFailed: "加载 providers 失败：{error}（远程面未就绪？重启 dsh 后重试）",
 		remoteUnavailable: "远程服务不可用：宿主没有挂上本插件的设置通道。",
@@ -74,6 +73,7 @@ const UI_MESSAGES = {
 		mcpSaving: "保存中…",
 		mcpSaved: "MCP servers 已保存",
 		mcpLoadFailed: "读取 MCP 配置失败：",
+		mcpNotLoaded: "还没读到当前 MCP 配置，先等读取完成（失败时先修好读取）再保存",
 		chatGptTitle: "ChatGPT（OCR auth）",
 		chatGptHint: "登录态由 ocr auth 管理；本卡片只读查询状态，并在登录后把 provider 切到 chatgpt。",
 		chatGptCheck: "检查登录态",
@@ -91,7 +91,7 @@ const UI_MESSAGES = {
 		binaryUnknown: "状态未取到：刷新本页，或确认 dsh 的 web 服务已起来",
 		binaryBundled: "随本插件分发的兜底入口已就位：{path}（{channel}）",
 		binaryPath: "用 PATH 上的全局安装：{path}（{channel}）",
-		binaryNone: "未找到 ocr：PATH 与随包兜底两条路都没有可执行候选。装法与版本看下一行（由插件按核对版本给出）",
+		binaryNone: "未找到 ocr：PATH 与随包兜底两条路都没有可执行候选",
 		channelBrew: "brew formula",
 		channelNpm: "npm 全局包",
 		channelUnknown: "装法未识别",
@@ -122,7 +122,6 @@ const UI_MESSAGES = {
 		save: "Save",
 		saving: "Saving…",
 		revert: "Revert",
-		saveFailed: "save failed: ",
 		saveRefused: "not written (host refused or skipped): {fields}",
 		loadProvidersFailed: "failed to load providers: {error} (remote face not ready? restart dsh and retry)",
 		remoteUnavailable: "remote service unavailable: the host did not mount this plugin's settings channel",
@@ -175,6 +174,7 @@ const UI_MESSAGES = {
 		mcpSaving: "Saving…",
 		mcpSaved: "MCP servers saved",
 		mcpLoadFailed: "Failed to read the MCP config: ",
+		mcpNotLoaded: "The current MCP config has not loaded yet; wait for the read (or fix it) before saving",
 		chatGptTitle: "ChatGPT (OCR auth)",
 		chatGptHint: "Sign-in is managed by ocr auth; this card only reports the status and switches OCR's provider to chatgpt after you sign in.",
 		chatGptCheck: "Check sign-in",
@@ -192,7 +192,7 @@ const UI_MESSAGES = {
 		binaryUnknown: "status not reported: reload this page, or check that the dsh web server is up",
 		binaryBundled: "bundled fallback entry in place: {path} ({channel})",
 		binaryPath: "using the global install on PATH: {path} ({channel})",
-		binaryNone: "ocr not found: neither PATH nor the bundled fallback has an executable candidate. The install command and version are on the next line (this plugin states the version its contract was verified against)",
+		binaryNone: "ocr not found: neither PATH nor the bundled fallback has an executable candidate",
 		channelBrew: "brew formula",
 		channelNpm: "npm global package",
 		channelUnknown: "install method unrecognised",
@@ -201,7 +201,7 @@ const UI_MESSAGES = {
 		versionDiverged: "this machine reports {actual}, which is not the verified {expected}: comment wording and severity may drift between versions",
 		badgeDiverged: "ocr version differs",
 		detectCli: "Detect version",
-		detecting: "Detecting...",
+		detecting: "Detecting…",
 		probeVersion: "ocr version: {version}",
 		probeReason: "no version read: {reason}",
 		badgeBundled: "ocr from bundled fallback",
@@ -827,7 +827,10 @@ const SELECT_SCHEMA = zod.z.object({
 	model: zod.z.string({ error: SELECT_MESSAGE })
 }, { error: "select request must be an object" });
 const MCP_SAVE_MESSAGE = "mcp save request requires a string json";
-const MCP_SAVE_SCHEMA = zod.z.object({ json: zod.z.string({ error: MCP_SAVE_MESSAGE }) }, { error: MCP_SAVE_MESSAGE });
+const MCP_SAVE_SCHEMA = zod.z.object({
+	json: zod.z.string({ error: MCP_SAVE_MESSAGE }),
+	revision: zod.z.string().optional()
+}, { error: MCP_SAVE_MESSAGE });
 const CHAT_GPT_MESSAGE = "chatgpt request requires a string model";
 const CHAT_GPT_SCHEMA = zod.z.object({ model: zod.z.string({ error: CHAT_GPT_MESSAGE }) }, { error: CHAT_GPT_MESSAGE });
 /** 把宿主那九个方法挂到客户端远程面上的描述符（`id` 的形状照生成器：`<包>#<命名空间>/<方法>`）。
@@ -953,9 +956,10 @@ const OCR_DESCRIPTORS = [
 const isRemoteMounter = (value) => e$3(value) && typeof value["$mount"] === "function";
 /** 同上：命名空间服务（挂载之后才有，缺它说明网关没认这枚贡献）。 */
 const isOcrNamespace = (value) => e$3(value) && typeof value["providers"] === "function" && typeof value["select"] === "function" && typeof value["migrate"] === "function" && typeof value["test"] === "function" && typeof value["probe"] === "function" && typeof value["mcp"] === "function" && typeof value["saveMcp"] === "function" && typeof value["auth"] === "function" && typeof value["chatGpt"] === "function";
-/** 网关回执 → 值；载体/网关失败抛（卡片那层按「请求失败」显示）。 */
+/** 网关回执 → 值；载体/网关失败抛（卡片那层按「请求失败」显示）。
+*  机器码放 `cause`：卡片只展示 message，`REMOTE_...` 这类内部标识不是给用户看的。 */
 function unwrap(result) {
-	if (!result.ok) throw new Error(`${result.error.code}: ${result.error.message}`);
+	if (!result.ok) throw new Error(result.error.message, { cause: { code: result.error.code } });
 	return result.value;
 }
 /**
@@ -971,7 +975,7 @@ function buildOcrReader(ctx) {
 	let mounted;
 	const remoteOf = () => {
 		const remote = ctx.get?.("remote", false);
-		if (!isRemoteMounter(remote)) throw new Error("remote 未提供：当前部署没有远程读面（每次读取都会重新解析）");
+		if (!isRemoteMounter(remote)) throw new Error("remote 未提供：当前部署没有远程读面");
 		return remote;
 	};
 	const namespaceOf = async () => {
@@ -987,7 +991,10 @@ function buildOcrReader(ctx) {
 			throw error;
 		}
 		const namespace = ctx.get?.(OCR_SERVICE_KEY, false);
-		if (!isOcrNamespace(namespace)) throw new Error(`${OCR_SERVICE_KEY} 未提供：宿主网关没有挂上这枚命名空间`);
+		if (!isOcrNamespace(namespace)) {
+			mounted = void 0;
+			throw new Error(`${OCR_SERVICE_KEY} 未提供：宿主网关没有挂上这枚命名空间`);
+		}
 		return namespace;
 	};
 	return {
@@ -1012,8 +1019,11 @@ function buildOcrReader(ctx) {
 		async mcp() {
 			return unwrap(await (await namespaceOf()).mcp());
 		},
-		async saveMcp(json) {
-			return unwrap(await (await namespaceOf()).saveMcp({ json }));
+		async saveMcp(json, revision) {
+			return unwrap(await (await namespaceOf()).saveMcp(revision === void 0 ? { json } : {
+				json,
+				revision
+			}));
 		},
 		async auth() {
 			return unwrap(await (await namespaceOf()).auth());
@@ -1253,14 +1263,13 @@ function currentConfigText(t, current) {
 		keyPart: t(current.keyIsDynamic ? "dynamicKey" : "plainKeyWarning")
 	});
 }
-/** 装法枚举到文案键：查表而不是嵌套三元（本仓 lint 禁嵌套三元），查不到就是「未识别」那一档。 */
-const CHANNEL_KEYS = {
-	brew: "channelBrew",
-	npm: "channelNpm"
-};
-/** 那份 CLI 是怎么装上的，翻成人话。判不出来源（含 host 没报这一档）不猜。 */
+/** 那份 CLI 是怎么装上的，翻成人话。判不出来源（含 host 没报这一档）不猜。
+*  逐个比对已知值而不是查一张普通对象表：`channel` 来自 wire，只校验了「是字符串」，
+*  用属性查表时 `"toString"`、`"constructor"` 一类会命中原型上的成员，把函数当文案键传下去。 */
 function channelText(t, channel) {
-	return t(CHANNEL_KEYS[channel ?? ""] ?? "channelUnknown");
+	if (channel === "brew") return t("channelBrew");
+	if (channel === "npm") return t("channelNpm");
+	return t("channelUnknown");
 }
 /**
 * 外部 CLI 可得性那一行的文本。三档来源与「宿主没报」四种说法，判据全在 host 侧
@@ -1719,7 +1728,7 @@ function buildMcpAdmin(props) {
 	const textarea = (0, react.createElement)("textarea", {
 		"data-field": "mcpJson",
 		value: props.mcpJson,
-		disabled: !props.writable || props.mcpBusy || !props.available,
+		disabled: !props.writable || props.mcpBusy || !props.available || !props.mcpReady,
 		"aria-label": t("mcpTitle"),
 		className: "dsu-input dsu-textarea dsu-mono ocr-adminTextarea",
 		onChange: (event) => {
@@ -1730,7 +1739,7 @@ function buildMcpAdmin(props) {
 		type: "button",
 		className: "dsu-btn",
 		"data-field": "mcpSave",
-		disabled: !props.writable || props.mcpBusy || !props.available,
+		disabled: !props.writable || props.mcpBusy || !props.available || !props.mcpReady,
 		onClick: props.onMcpSave
 	}, props.mcpBusy ? t("mcpSaving") : t("mcpSave"));
 	const message = props.mcpMsg === null ? null : (0, react.createElement)("p", { className: "dsu-hint" }, props.mcpMsg);
@@ -1825,7 +1834,8 @@ function readerPost(reader, t) {
 		}
 	};
 }
-/** POST select：把选中的 provider/model 写进 OCR 配置，回执里按 autoVerify 决定是否带 llm test。 */
+/** POST select：把选中的 provider/model 写进 OCR 配置，回执里按 autoVerify 决定是否带 llm test。
+*  导出与 `runProbe` 同因：卡片上的动作以纯函数形态可测（回执着色与文案都在这里定）。 */
 async function runApplySelection(deps) {
 	const { t, effectiveProvider, effectiveModel } = deps;
 	if (!effectiveProvider || !effectiveModel) {
@@ -1844,10 +1854,12 @@ async function runApplySelection(deps) {
 		})).json();
 		if (i$1(selJson, "ok") === true) {
 			let testText;
+			let verified = true;
 			const llmTestRaw = i$1(selJson, "llmTest");
 			if (e$3(llmTestRaw)) {
 				const testOutput = strOf(i$1(llmTestRaw, "output")).slice(0, 400);
-				testText = i$1(llmTestRaw, "ok") === true ? t("llmTestPassed") : `${t("llmTestFailed")}${testOutput}`;
+				verified = i$1(llmTestRaw, "ok") === true;
+				testText = verified ? t("llmTestPassed") : `${t("llmTestFailed")}${testOutput}`;
 			} else testText = t("notVerified");
 			const appliedText = t("applied", {
 				provider: effectiveProvider,
@@ -1855,7 +1867,7 @@ async function runApplySelection(deps) {
 				test: testText
 			});
 			deps.setActionMsg({
-				ok: true,
+				ok: verified,
 				text: appliedText
 			});
 			deps.refresh();
@@ -1888,7 +1900,9 @@ async function runMigrateKeys(deps) {
 		const migrated = Array.isArray(migratedVal) ? migratedVal.filter((item) => typeof item === "string") : [];
 		const skipped = Array.isArray(skippedVal) ? skippedVal.filter((item) => typeof item === "string") : [];
 		const ok = i$1(json, "ok") === true;
-		const head = ok ? (migrated.length > 0 ? t("migratedPrefix") + migrated.join(", ") : t("noPlainKey")) + (skipped.length > 0 ? t("skippedPrefix") + skipped.join(", ") : "") : t("migrateFailed");
+		const migratedText = migrated.length > 0 ? t("migratedPrefix") + migrated.join(", ") : t("noPlainKey");
+		const skippedText = skipped.length > 0 ? t("skippedPrefix") + skipped.join(", ") : "";
+		const head = ok ? migratedText + skippedText : t("migrateFailed");
 		deps.setActionMsg({
 			ok,
 			text: head
@@ -2026,16 +2040,14 @@ function buildProviderPanel(deps) {
 	const { actionMsg } = deps;
 	return [buildProviderSection(deps), actionMsg ? (0, react.createElement)("p", { className: statusClass(actionMsg.ok) }, actionMsg.text) : null];
 }
-/** 管理区的状态与动作（MCP 配置 + ChatGPT 登录态/切换）；OcrCard 只负责摆位置。 */
-function useAdminPanel(reader, t) {
+/** MCP 配置编辑器的状态与动作：读、写，以及「没读成功不许写」的判据。 */
+function useMcpPanel(reader, t) {
 	const [mcpJson, setMcpJson] = (0, react.useState)("{}");
 	const [mcpBusy, setMcpBusy] = (0, react.useState)(false);
 	const [mcpMsg, setMcpMsg] = (0, react.useState)(null);
-	const [authOutput, setAuthOutput] = (0, react.useState)(null);
-	const [authBusy, setAuthBusy] = (0, react.useState)(false);
-	const [authMsg, setAuthMsg] = (0, react.useState)(null);
-	const [authModel, setAuthModel] = (0, react.useState)("");
-	const [loginCommand, setLoginCommand] = (0, react.useState)("ocr auth login --provider chatgpt");
+	const [mcpReady, setMcpReady] = (0, react.useState)(false);
+	const mcpDirtyRef = (0, react.useRef)(false);
+	const mcpRevisionRef = (0, react.useRef)(void 0);
 	const loadMcp = (0, react.useCallback)(async () => {
 		if (reader === void 0) {
 			setMcpMsg(t("adminUnavailable"));
@@ -2043,10 +2055,17 @@ function useAdminPanel(reader, t) {
 		}
 		try {
 			const reply = await reader.mcp();
-			if ("status" in reply) setMcpMsg(reply.error);
-			else setMcpJson(reply.json);
+			if ("status" in reply) {
+				setMcpMsg(reply.error);
+				setMcpReady(false);
+			} else {
+				if (!mcpDirtyRef.current) setMcpJson(reply.json);
+				mcpRevisionRef.current = reply.revision;
+				setMcpReady(true);
+			}
 		} catch (error) {
 			setMcpMsg(`${t("mcpLoadFailed")}${String(error)}`);
+			setMcpReady(false);
 		}
 	}, [reader, t]);
 	(0, react.useEffect)(() => {
@@ -2057,17 +2076,48 @@ function useAdminPanel(reader, t) {
 			setMcpMsg(t("adminUnavailable"));
 			return;
 		}
+		if (!mcpReady) {
+			setMcpMsg(t("mcpNotLoaded"));
+			return;
+		}
 		setMcpBusy(true);
 		setMcpMsg(null);
 		try {
-			const reply = await reader.saveMcp(mcpJson);
-			setMcpMsg("status" in reply ? reply.error : t("mcpSaved"));
+			const reply = await reader.saveMcp(mcpJson, mcpRevisionRef.current);
+			if ("status" in reply) setMcpMsg(reply.error);
+			else {
+				mcpDirtyRef.current = false;
+				mcpRevisionRef.current = reply.revision;
+				setMcpMsg(t("mcpSaved"));
+			}
 		} catch (error) {
 			setMcpMsg(String(error));
 		} finally {
 			setMcpBusy(false);
 		}
 	}
+	return {
+		mcpJson,
+		mcpReady,
+		mcpBusy,
+		mcpMsg,
+		onMcpChange: (value) => {
+			mcpDirtyRef.current = true;
+			setMcpJson(value);
+		},
+		onMcpSave: () => {
+			saveMcp();
+		}
+	};
+}
+/** 管理区的状态与动作（MCP 配置 + ChatGPT 登录态/切换）；OcrCard 只负责摆位置。 */
+function useAdminPanel(reader, t) {
+	const mcp = useMcpPanel(reader, t);
+	const [authOutput, setAuthOutput] = (0, react.useState)(null);
+	const [authBusy, setAuthBusy] = (0, react.useState)(false);
+	const [authMsg, setAuthMsg] = (0, react.useState)(null);
+	const [authModel, setAuthModel] = (0, react.useState)("");
+	const [loginCommand, setLoginCommand] = (0, react.useState)("ocr auth login --provider chatgpt");
 	async function checkAuth() {
 		if (reader === void 0) {
 			setAuthMsg(t("adminUnavailable"));
@@ -2107,18 +2157,12 @@ function useAdminPanel(reader, t) {
 	}
 	return {
 		available: reader !== void 0,
-		mcpJson,
-		mcpBusy,
-		mcpMsg,
+		...mcp,
 		authOutput,
 		authBusy,
 		authMsg,
 		authModel,
 		loginCommand,
-		onMcpChange: setMcpJson,
-		onMcpSave: () => {
-			saveMcp();
-		},
 		onAuthModelChange: setAuthModel,
 		onCheckAuth: () => {
 			checkAuth();
@@ -2140,10 +2184,19 @@ function OcrCard(props) {
 	const [busy, setBusy] = (0, react.useState)(null);
 	const [actionMsg, setActionMsg] = (0, react.useState)(null);
 	const [probeMsg, setProbeMsg] = (0, react.useState)(null);
-	const refresh = (0, react.useCallback)(async () => refreshProviders(props.reader, t, {
-		setData,
-		setFetchError
-	}), [props.reader, t]);
+	const refreshSeq = (0, react.useRef)(0);
+	const refresh = (0, react.useCallback)(async () => {
+		refreshSeq.current += 1;
+		const seq = refreshSeq.current;
+		return refreshProviders(props.reader, t, {
+			setData: (payload) => {
+				if (seq === refreshSeq.current) setData(payload);
+			},
+			setFetchError: (message) => {
+				if (seq === refreshSeq.current) setFetchError(message);
+			}
+		});
+	}, [props.reader, t]);
 	(0, react.useEffect)(() => {
 		refresh();
 	}, [refresh]);
@@ -2323,6 +2376,7 @@ exports.inject = inject;
 exports.isOwnSubject = isOwnSubject;
 exports.loadCliStatus = loadCliStatus;
 exports.providerOptionLabel = providerOptionLabel;
+exports.runApplySelection = runApplySelection;
 exports.runProbe = runProbe;
 exports.saveSettingsDraft = saveSettingsDraft;
     return module.exports;

package/docs/DETAIL.md

@@ -4,10 +4,10 @@ Runs the external `ocr` command line over a change set, reports the comments it
 
 ## What the card changes
 
-- **Model** — `ocrProvider` and `ocrModel` are not stored settings: they project the host's model namespace, and entries without a usable key are shown but disabled. `chatGptModel` reflects the external CLI's own login state, which this plugin reads but does not own.
-- **Review parameters** — `effort` (`auto`/`low`/`medium`/`high`) is how many review passes run: deeper review costs more time. `language` chooses Chinese or English output. `autoVerify` (on) runs `ocr llm test` after you pick a provider and model, so a wrong choice fails at pick time rather than at first review. `maxComments` (default 12; 0 means all, including comments that cannot be anchored to a line). `timeoutMinutes` (0 requests the host's ceiling; a positive value is minutes, still clamped by the host). `ocrConfigPath` — empty means `~/.opencodereview/config.json`; a non-empty value must be `<dir>/.opencodereview/config.json` and is honoured by redirecting `HOME` (POSIX only).
+- **Model** — `ocrProvider` and `ocrModel` are not stored settings: they project the host's model namespace, and entries without a usable key are shown but disabled. `chatGptModel` is a slug this plugin writes into the CLI's own config (provider `chatgpt`, with `api_key` / `api_key_cmd` removed); the credentials behind that provider come from the CLI's own login state, which the plugin only queries (`ocr auth`) and never stores.
+- **Review parameters** — `effort` (`auto`/`low`/`medium`/`high`) is how many review passes run: deeper review costs more time. `language` chooses Chinese or English output. `autoVerify` (on) runs `ocr llm test` after you pick a provider and model, so a wrong choice fails at pick time rather than at first review. `maxComments` (default 12; 0 means all, including comments that cannot be anchored to a line). `timeoutMinutes` (0 requests the host's ceiling; a positive value is minutes, still clamped by the host). `ocrConfigPath` — empty means `~/.opencodereview/config.json`; a non-empty value must be `<dir>/.opencodereview/config.json` and is honoured by redirecting `HOME`; on Windows the value passes the shape check but the redirection does not happen, and the CLI keeps its default path.
 
-Six of these are read per call, so a change applies on the next review without restarting the host.
+`effort`, `maxComments`, `timeoutMinutes` and `ocrConfigPath` are read per call, so a change applies on the next review without restarting the host. `language` and `autoVerify` are read when a provider/model selection is applied: `language` is written into the CLI config at that moment, and `autoVerify` only decides whether `ocr llm test` runs then.
 
 ## Two separate things called MCP
 
@@ -15,11 +15,11 @@ The card's MCP-servers editor writes the **external `ocr` tool's own** configura
 
 ## Restart-only values
 
-`llmTestTimeoutMs` (90000), `startupVerify` (on: the endpoint self-check runs at load), `ocrBackgroundMaxMs` (0 = no backstop window), `stdoutMaxBytes` (400000), `ocrNoAutoUpdate` (false: upstream auto-upgrade stays on unless you say otherwise) and `ocrInstallHint` (`both`/`brew`/`npm`). Set them in the `config:` block of this plugin's row in `cordis.patch.yml`.
+`llmTestTimeoutMs` (90000), `startupVerify` (on: the load-time endpoint self-check and the one CLI version measurement both run at apply — the switch gates any process spawn at load), `ocrBackgroundMaxMs` (0 = no backstop window), `stdoutMaxBytes` (400000), `ocrNoAutoUpdate` (false: upstream auto-upgrade stays on unless you say otherwise) and `ocrInstallHint` (`both`/`brew`/`npm`). Set them in the `config:` block of this plugin's row in `cordis.patch.yml`.
 
 ## What it needs from outside
 
-The `ocr` command line, expected at version **1.13.3**; the expectation is declared in code and mirrored in the package's manifest and READMEs, so a mismatch is reported rather than papered over. Install paths are `brew install open-code-review` or `npm i -g @alibaba-group/open-code-review@1.13.3`. A missing binary is reported as "command not found"; the case where a launcher exists but the binary does not says exactly that. The version probe always forces `OCR_NO_UPDATE=1` so probing cannot trigger an upgrade.
+The `ocr` command line, expected at version **1.13.4**; the expectation is declared once as `ocrCliVersion` in `package.json`, and the code constant plus both READMEs mirror that string, so a mismatch is reported (as a hint, never a hard failure) rather than papered over. Install paths are `brew install open-code-review` or `npm i -g @alibaba-group/open-code-review@1.13.4`. With no candidate on PATH at all, the pre-check reports "no ocr candidate on either path" plus an install hint; "command not found" (exit 127) is the different case where a candidate exists but the binary cannot actually be run. The version probe always forces `OCR_NO_UPDATE=1` so probing cannot trigger an upgrade.
 
 API credentials are not stored here: the plugin writes a `api_key_cmd` that calls a helper script, so the key is fetched at run time instead of landing in a config file. If that script is missing, the card warns rather than sending an unauthenticated request.
 

package/docs/DETAIL.zh.md

@@ -4,10 +4,10 @@
 
 ## 设置卡上改的是什么
 
-- **模型** — `ocrProvider` 与 `ocrModel` 不是本插件存的值：它们是宿主模型命名空间的投影，没有可用密钥的条目照样列出但禁用。`chatGptModel` 反映的是外部命令行自己的登录态，本插件读它但不拥有它。
-- **审查参数** — `effort`（`auto`/`low`/`medium`/`high`）是跑几轮审查，越深越费时。`language` 选中文或英文输出。`autoVerify`（默认开）在选完提供方与模型后跑一次 `ocr llm test`，选错当场就知道，而不是等第一次评审失败。`maxComments`（默认 12；0 表示全部，包括钉不到行上的意见）。`timeoutMinutes`（0 表示向宿主要上限；正数是分钟数，仍由宿主收口）。`ocrConfigPath`——留空就是 `~/.opencodereview/config.json`；填了就必须是 `<目录>/.opencodereview/config.json` 的形状，生效方式是重定向 `HOME`（仅 POSIX）。
+- **模型** — `ocrProvider` 与 `ocrModel` 不是本插件存的值：它们是宿主模型命名空间的投影，没有可用密钥的条目照样列出但禁用。`chatGptModel` 是本插件写进外部命令行自己配置的 model slug（provider 置为 `chatgpt`，同时删掉 `api_key` / `api_key_cmd`）；该提供方背后的凭据来自命令行自己的登录态，本插件只查询 `ocr auth`，不保存。
+- **审查参数** — `effort`（`auto`/`low`/`medium`/`high`）是跑几轮审查，越深越费时。`language` 选中文或英文输出。`autoVerify`（默认开）在选完提供方与模型后跑一次 `ocr llm test`，选错当场就知道，而不是等第一次评审失败。`maxComments`（默认 12；0 表示全部，包括钉不到行上的意见）。`timeoutMinutes`（0 表示向宿主要上限；正数是分钟数，仍由宿主收口）。`ocrConfigPath`——留空就是 `~/.opencodereview/config.json`；填了就必须是 `<目录>/.opencodereview/config.json` 的形状，生效方式是重定向 `HOME`；Windows 上值能通过形状校验但不会重定向，命令行仍读默认路径。
 
-其中六项每次调用现读，改完下一次评审生效，不需要重启宿主。
+`effort`、`maxComments`、`timeoutMinutes` 与 `ocrConfigPath` 每次调用现读，改完下一次评审生效，不需要重启宿主。`language` 与 `autoVerify` 在应用一次 provider/model 选择时读取：`language` 当场写进命令行配置，`autoVerify` 只决定那时是否跑 `ocr llm test`。
 
 ## 两处都叫 MCP，但不是同一件事
 
@@ -15,11 +15,11 @@
 
 ## 要重启的值
 
-`llmTestTimeoutMs`（90000）、`startupVerify`（默认开：装载时自检端点）、`ocrBackgroundMaxMs`（0 表示不设兜底窗口）、`stdoutMaxBytes`（400000）、`ocrNoAutoUpdate`（默认 false，即保留上游的自动升级，除非你明确关掉）、`ocrInstallHint`（`both`/`brew`/`npm`）。写在本插件注册行的 `config:` 块，改值随重启生效。
+`llmTestTimeoutMs`（90000）、`startupVerify`（默认开：装载时自检端点）、`ocrBackgroundMaxMs`（0 表示不设兜底窗口）、`stdoutMaxBytes`（400000）、`ocrNoAutoUpdate`（默认 false，即保留上游的自动升级，除非你明确关掉）、`ocrInstallHint`（`both`/`brew`/`npm`）。写在本插件于 `cordis.patch.yml` 注册行的 `config:` 块，改值随重启生效。
 
 ## 需要外部提供什么
 
-`ocr` 命令行，期望版本 **1.13.3**；这个期望写在代码里，并镜像到包清单与两份 README，所以版本不符是被报出来的，不是被掩盖的。装法是 `brew install open-code-review` 或 `npm i -g @alibaba-group/open-code-review@1.13.3`。命令行不存在时按「找不到命令」报；只有垫片没有真二进制时说的也是这一件。版本探测一律强制 `OCR_NO_UPDATE=1`，以免探测顺手触发升级。
+`ocr` 命令行，期望版本 **1.13.4**；这个期望唯一声明在 `package.json` 的 `ocrCliVersion`，代码常量与两份 README 镜像同一个字符串，版本不符只作为提示报出，从不中断评审。装法是 `brew install open-code-review` 或 `npm i -g @alibaba-group/open-code-review@1.13.4`。PATH 上一个候选都没有时，预检报「no ocr candidate on either path」并附安装提示；「command not found」（exit 127）是另一种情况：候选在，但真二进制跑不起来。版本探测一律强制 `OCR_NO_UPDATE=1`，以免探测顺手触发升级。
 
 API 凭据不存这里：本插件写的是一个 `api_key_cmd`，运行时的密钥由那支辅助脚本现取，不进配置文件。脚本缺失时卡上给出告警，而不是发一次没有鉴权的请求。