@liustack/modlens 2.7.5 → 2.7.6

package/README.md

@@ -138,9 +138,12 @@ Two more subcommands: `modlens config <init|set|show>` manages providers and key
 modlens recover-paste                 # newest pasted image, path printed as JSON
 modlens recover-paste --count 3       # the three newest
 modlens recover-paste --session <id>  # exact session (skills pass ${CLAUDE_SESSION_ID})
+modlens recover-paste --harness pi    # force one harness's format
 # --transcript <path> overrides everything; --cwd <dir> sets the project directory
 ```
 
+Recovered images are written 0600 into a 0700 directory, so nobody else on a shared machine can read them. Locating a session checks the cwd recorded inside the transcript as well as the directory, because directory slugs collide (`/tmp/a.b` and `/tmp/a-b` produce the same one) and without that check you can be handed a neighbouring project's images.
+
 ## Providers and config
 
 ModLens ships five vision providers. `antigravity-cli` stays the default: zero keys, pure free quota.

package/README.zh-CN.md

@@ -138,9 +138,12 @@ modlens -i <图片路径或 URL> [选项]
 modlens recover-paste                 # 捞最新一张，路径以 JSON 打印
 modlens recover-paste --count 3       # 捞最近三张
 modlens recover-paste --session <id>  # 精确会话（skill 会传 ${CLAUDE_SESSION_ID}）
+modlens recover-paste --harness pi    # 强制按某家宿主的格式解析
 # --transcript <path> 优先级最高，--cwd <dir> 指定项目目录
 ```
 
+恢复出来的图片写成 0600、放进 0700 目录，共享机器上别人读不到。定位会话时除了目录，还会核对会话记录里写着的真实工作目录，因为目录 slug 会碰撞（`/tmp/a.b` 和 `/tmp/a-b` 算出同一个），不核对就可能把隔壁项目的图交给你。
+
 ## Provider 与配置
 
 ModLens 内置五个视觉 provider，默认还是 `antigravity-cli`：零 key，纯免费额度。

package/dist/main.js

@@ -800,14 +800,9 @@ function setConfigValue(dottedKey, value, configPath = CONFIG_PATH) {
   }
 }
 const CONFIG_TEMPLATE = {
-  provider: "antigravity-cli",
-  providers: {
-    "antigravity-cli": { model: "gemini-3.6-flash-low" },
-    "gemini-api": { apiKey: "", model: "gemini-3.6-flash" },
-    openai: { baseUrl: "", apiKey: "", model: "" },
-    anthropic: { apiKey: "", model: "claude-haiku-4-5-20251001" },
-    "claude-cli": { model: "haiku" }
-  }
+  // Empty means the built-in default provider.
+  provider: "",
+  providers: {}
 };
 function initConfigFile(configPath = CONFIG_PATH, force = false) {
   if (!force && fs.existsSync(configPath)) {
@@ -845,6 +840,7 @@ function maskKey(key) {
 const DEFAULT_TIMEOUT_MS = 18e4;
 const KILL_GRACE_MS = 3e4;
 const DRAIN_GRACE_MS = 500;
+const SIGKILL_GRACE_MS = 2e3;
 async function analyzeImage(options) {
   const resolvedInput = resolveInput(options.input);
   if (resolvedInput.kind === "local") {
@@ -937,6 +933,12 @@ function runCommand(providerName, invocation, timeoutMs, describeFailure) {
     const timer = setTimeout(() => {
       timedOut = true;
       child.kill("SIGTERM");
+      settle(null);
+      setTimeout(() => {
+        if (!child.killed) {
+          child.kill("SIGKILL");
+        }
+      }, SIGKILL_GRACE_MS).unref();
     }, timeoutMs);
     const settle = (code) => {
       if (settled) {
@@ -945,6 +947,8 @@ function runCommand(providerName, invocation, timeoutMs, describeFailure) {
       settled = true;
       clearTimeout(timer);
       clearTimeout(drainTimer);
+      stdout += outDecoder.decode();
+      stderr += errDecoder.decode();
       child.stdout?.destroy();
       child.stderr?.destroy();
       child.unref();
@@ -1474,7 +1478,7 @@ function recoverPastedImages(options = {}) {
   return result;
 }
 const program = new Command();
-program.name("modlens").description("Plug-in vision for text-only LLMs: image in, structured JSON evidence out").version("2.7.5");
+program.name("modlens").description("Plug-in vision for text-only LLMs: image in, structured JSON evidence out").version("2.7.6");
 program.command("analyze", { isDefault: true }).description("Analyze an image into structured JSON evidence (default command)").requiredOption("-i, --input <path|url>", "Input image path or https URL").option("-o, --output <path>", "Write result JSON to a file").option("-m, --model <name>", "Provider model name").option("-p, --provider <name>", `Vision provider (${listProviders().join(", ")})`).option("--prompt <text>", "Extra focus for this image").option("--timeout <ms>", "Provider timeout in milliseconds", "180000").option("--provider-bin <path>", "Provider binary path (default: agy)").option("--workdir <path>", "Working directory for the provider").action(async (options) => {
   try {
     const timeoutMs = Number.parseInt(options.timeout, 10);
@@ -1543,9 +1547,13 @@ config.command("init").description(`Create a starter config at ${CONFIG_PATH}`).
   try {
     initConfigFile(CONFIG_PATH, Boolean(options.force));
     process.stdout.write(
-      `Created ${CONFIG_PATH}
-Fill in the apiKey fields you need, or use: modlens config set <provider>.apiKey <key>
-`
+      [
+        `Created ${CONFIG_PATH}`,
+        "Everything is optional. Two things you can set:",
+        "  modlens config set provider <name>                      which provider analyzes images",
+        "  modlens config set <provider>.<apiKey|baseUrl|model> <value>   provider credentials",
+        ""
+      ].join("\n")
     );
   } catch (error) {
     process.stderr.write(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@liustack/modlens",
-  "version": "2.7.5",
+  "version": "2.7.6",
   "description": "Plug-in vision for text-only LLMs, powered by the free Antigravity CLI",
   "type": "module",
   "bin": {

package/skills/modlens/SKILL.md

@@ -73,6 +73,7 @@ Harnesses rarely hand you a clean path. First identify which harness you are in,
 - The output is JSON with real file paths, ordered oldest to newest, so the LAST path is the user's most recent paste. Analyze that one first. Entries carry `filename` (the original attachment name) when the harness stored one; if the user's message or an error mentions a filename, match on it.
 - Run every command yourself: `recover-paste`, then `modlens -i <path>` on the recovered file, then answer from the JSON. Never ask the user to run modlens or to relay paths.
 - The output's `detected` field names the harness scope that was applied. If it is absent, detection failed and every store was scanned by newest-image timestamp: before describing anything, check that `harness` and `filename` match what you expect, force the scope with `--harness <claude-code|pi|opencode>` if they do not, and when in doubt ask the user for the file instead of describing the wrong image.
+- Recovery is scoped to this project: the harness's own record of its working directory is checked, not just the directory name, so images from a neighbouring project are never handed over. Recovered files are private to the user (0600).
 - If recovery fails (session storage is each harness's internals and may change), ask the user to drag the image file into the terminal or type its path.
 
 **Any other harness, or nothing matches** (no path tag and `recover-paste` reports no transcripts): do not guess. Ask the user for the image file path, or suggest dragging the file into the terminal.