@mengruo/dsh-vision-toolkit 0.0.1

package/lib/types/artifact-access.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Capability-gated HTTP delivery for managed Vision Toolkit artifacts.
+ * Signed tokens are durable across process restarts, expose no secret, and
+ * are accepted only for the exact artifact facts projected into a tool result.
+ * @module dsh-vision-toolkit/artifact-access
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { JsonValue } from '@deepseek-ai/dsh-tools';
+import type { ArtifactDescriptor, ArtifactKind } from './artifacts.ts';
+/** Prefix owned by the plugin's artifact capability route. */
+export declare const ARTIFACT_ROUTE_PREFIX = "/_dsh/vision-toolkit/artifacts";
+/** Presentation metadata key reserved by the browser half of this package. */
+export declare const PRESENTATION_META_KEY = "$dshVisionToolkit";
+interface ArtifactTokenPayload {
+    v: 1;
+    path: string;
+    filename: string;
+    mimeType: string;
+    kind: ArtifactKind;
+    bytes: number;
+}
+/** Browser-only access grant paired to one model-visible artifact descriptor. */
+export interface ArtifactAccessGrant {
+    path: string;
+    previewUrl: string;
+    downloadUrl: string;
+}
+/**
+ * Load or atomically create the per-DSH-home signing key.
+ * @param root - state root override used by tests; defaults to the plugin cache.
+ * @returns the 32-byte signing key.
+ */
+export declare function prepareArtifactAccessKey(root?: string): Promise<Buffer>;
+/** Signed-capability encoder and safe Artifact route handler. */
+export declare class ArtifactAccessController {
+    private readonly key;
+    private routeCount;
+    constructor(key: Buffer);
+    /** Whether at least one HTTP carrier currently owns the route. */
+    get routeAvailable(): boolean;
+    /** Mark one route attachment; the returned disposer removes that attachment. */
+    attachRoute(): () => void;
+    /**
+     * Purely enrich a canonical tool-result value with browser access grants.
+     * @param value - schema-validated tool result.
+     * @returns the unchanged value when no route/artifact exists, otherwise a detached metadata envelope.
+     */
+    presentationMeta(value: JsonValue): JsonValue;
+    /** Mint a deterministic, tamper-evident capability for one descriptor. */
+    sign(artifact: ArtifactDescriptor): string;
+    /** Verify and decode one capability without touching the filesystem. */
+    verify(token: string): ArtifactTokenPayload | undefined;
+    /**
+     * Serve one GET/HEAD capability request with MIME, CSP, and symlink checks.
+     * @param req - Node HTTP request matched under {@link ARTIFACT_ROUTE_PREFIX}.
+     * @param res - response owned by this handler.
+     */
+    handle(req: IncomingMessage, res: ServerResponse): Promise<void>;
+}
+export {};
+//# sourceMappingURL=artifact-access.d.ts.map

package/lib/types/artifact-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-access.d.ts","sourceRoot":"","sources":["../../src/artifact-access.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAItE,8DAA8D;AAC9D,eAAO,MAAM,qBAAqB,mCAAmC,CAAA;AAErE,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,sBAAsB,CAAA;AAExD,UAAU,oBAAoB;IAC5B,CAAC,EAAE,CAAC,CAAA;IACJ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;CACpB;AAkGD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,SAA2B,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB/F;AAmFD,iEAAiE;AACjE,qBAAa,wBAAwB;IAGvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAFhC,OAAO,CAAC,UAAU,CAAI;gBAEO,GAAG,EAAE,MAAM;IAIxC,kEAAkE;IAClE,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED,gFAAgF;IAChF,WAAW,IAAI,MAAM,IAAI;IAUzB;;;;OAIG;IACH,gBAAgB,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS;IAc7C,0EAA0E;IAC1E,IAAI,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM;IAa1C,wEAAwE;IACxE,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAkBvD;;;;OAIG;IACG,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;CA+DvE"}

package/lib/types/artifacts.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Stable file-delivery descriptors owned by the plugin. DSH Core currently
+ * has no reusable Artifact service, so every file-producing tool returns this
+ * lossless contract and keeps the file inside the plugin-managed artifact
+ * directory for Web, Headless, and later tool calls alike.
+ * @module dsh-vision-toolkit/artifacts
+ */
+import { type PathPolicy } from './paths.ts';
+/** Artifact payload family used by clients to select a safe renderer. */
+export type ArtifactKind = 'image' | 'svg' | 'markdown' | 'json';
+/** Intended default client action for one artifact. */
+export type ArtifactPreviewIntent = 'image' | 'svg' | 'text' | 'download';
+/** Stable descriptor returned by every file-producing Vision Toolkit tool. */
+export interface ArtifactDescriptor {
+    path: string;
+    filename: string;
+    mimeType: string;
+    kind: ArtifactKind;
+    description: string;
+    sourceTool: string;
+    previewIntent: ArtifactPreviewIntent;
+    bytes: number;
+}
+/** Metadata needed to describe an already committed managed artifact. */
+export interface ArtifactDescription {
+    mimeType: string;
+    kind: ArtifactKind;
+    description: string;
+    sourceTool: string;
+    previewIntent: ArtifactPreviewIntent;
+}
+/**
+ * Validate and describe one committed regular file under the active artifact
+ * root. Symbolic links are rejected even when their targets remain in-bounds,
+ * so a later preview/download can never be redirected after delivery.
+ * @param path - final managed artifact path.
+ * @param policy - active workspace path policy.
+ * @param description - stable type and presentation facts.
+ * @returns a complete descriptor with the committed byte size.
+ */
+export declare function describeArtifact(path: string, policy: PathPolicy, description: ArtifactDescription): Promise<ArtifactDescriptor>;
+//# sourceMappingURL=artifacts.d.ts.map

package/lib/types/artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../src/artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AAEtD,yEAAyE;AACzE,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,KAAK,GAAG,UAAU,GAAG,MAAM,CAAA;AAEhE,uDAAuD;AACvD,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAAA;AAEzE,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,YAAY,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,qBAAqB,CAAA;IACpC,KAAK,EAAE,MAAM,CAAA;CACd;AAED,yEAAyE;AACzE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,YAAY,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,qBAAqB,CAAA;CACrC;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,EAClB,WAAW,EAAE,mBAAmB,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CA+B7B"}

package/lib/types/client/display-config.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Browser-side display-mode flags for transparent variant routing. The paste
+ * integration uses a short-lived cache so it does not hammer the same-origin
+ * route on every paste. The model selector itself decides purely from DOM
+ * display names and does not read this route.
+ * @module dsh-vision-toolkit/display-config
+ */
+export declare const DISPLAY_CONFIG_ROUTE = "/_dsh/vision-toolkit/display-config";
+/**
+ * Resolve the current transparent-routing flag, failing closed to non-hidden
+ * (explicit sibling entries) when the route is unreachable or the payload is
+ * malformed.
+ * @returns the display-mode flags observed from the host.
+ */
+export declare function readDisplayConfig(): Promise<{
+    hidden: boolean;
+}>;
+/**
+ * Drop the cached flag and invalidate in-flight responses (test seams,
+ * Settings saves, and connection-reset handling). An older request that
+ * resolves afterwards must not repopulate the cache with a stale flag.
+ */
+export declare function resetDisplayConfigCache(): void;
+//# sourceMappingURL=display-config.d.ts.map

package/lib/types/client/display-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"display-config.d.ts","sourceRoot":"","sources":["../../../src/client/display-config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,oBAAoB,wCAAwC,CAAA;AAYzE;;;;;GAKG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAyBtE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAG9C"}

package/lib/types/client/index.d.ts

@@ -0,0 +1,350 @@
+/**
+ * DSH Vision Toolkit browser plugin: dedicated Tool cards plus the Settings,
+ * health, connection-test, and safe Artifact preview experience.
+ */
+import type { ClientContext, ToolCallBlock } from '@deepseek-ai/dsh-client-runtime/client';
+declare const en: {
+    readonly nav: "Vision";
+    readonly settingsTitle: "Vision Toolkit";
+    readonly settingsIntro: "Configure the pinned visual engineering runtime, its external vision endpoint, and local safety limits.";
+    readonly externalNotice: "Remote tools send the selected image bytes to the configured external vision API. Local crop, trace, pixel diff, palette, foreground extraction, and HTML rendering do not upload images.";
+    readonly provider: "Vision service";
+    readonly providerHint: "Choose the API protocol, then provide the service address, model, and API key used by online vision features.";
+    readonly aihubmixTutorial: "Need an AIHubMix key for free Gemini 3.7 Flash vision? Follow the signup guide →";
+    readonly baseUrl: "Base URL";
+    readonly apiKey: "API key";
+    readonly apiKeyPlaceholderMissing: "Paste the API key";
+    readonly apiKeyPlaceholderConfigured: "Saved; leave blank to keep it";
+    readonly apiKeyHint: "The key is stored in DSH Credentials and is never shown again after saving.";
+    readonly apiKeyLocked: "The current key comes from a read-only source and cannot be replaced here.";
+    readonly apiKeyBlank: "The API key cannot contain only spaces.";
+    readonly apiKeyInvalid: "Paste only the key, without a variable name, quotes, spaces, or line breaks.";
+    readonly credential: "Credential name";
+    readonly credentialHint: "The built-in free provider needs no user key. For a custom provider, this is the DSH credential reference used to store its key.";
+    readonly model: "Model";
+    readonly protocol: "API protocol";
+    readonly anthropicThinking: "Anthropic thinking";
+    readonly anthropicThinkingHint: "omit has the broadest compatibility. Use disabled or adaptive only when the selected model documents that mode; restore omit first after HTTP 400.";
+    readonly userAgent: "User-Agent";
+    readonly language: "Output language";
+    readonly limits: "Limits";
+    readonly timeout: "Request timeout (ms)";
+    readonly maxBytes: "Maximum image bytes";
+    readonly maxPixels: "Maximum image pixels";
+    readonly concurrency: "Concurrent calls per session";
+    readonly runtime: "Runtime";
+    readonly runtimeMode: "Runtime mode";
+    readonly toolkitPath: "Pinned checkout path";
+    readonly python: "Python override";
+    readonly allowedDirs: "Additional allowed directories";
+    readonly allowedDirsHint: "One path per line. The session workspace is always allowed.";
+    readonly save: "Save and apply";
+    readonly saving: "Validating runtime…";
+    readonly reload: "Reload";
+    readonly saved: "Settings validated and applied.";
+    readonly readOnly: "Service settings are read-only. A writable API key can still be saved.";
+    readonly configured: "Configured";
+    readonly missing: "Missing";
+    readonly source: "Source";
+    readonly sourceHint: "{source}: {value}";
+    readonly sourceEnv: "Environment variable";
+    readonly sourceFile: "Credential file";
+    readonly health: "Health";
+    readonly runHealth: "Run health check";
+    readonly testConnection: "Test API connection";
+    readonly testModel: "Test vision model";
+    readonly testing: "Checking…";
+    readonly testingModel: "Testing model…";
+    readonly connectionHint: "The API connection test only queries GET /models. The vision model test sends the bundled diagnostic image and verifies one real multimodal request.";
+    readonly saveBeforeTesting: "Save service changes before testing the connection.";
+    readonly advanced: "Advanced settings";
+    readonly advancedHint: "Credential name, provider compatibility, output language, resource limits, runtime source, Python, and additional readable directories.";
+    readonly imageInput: "Image input";
+    readonly hiddenVariants: "Transparent variant routing";
+    readonly hiddenVariantsLabel: "Keep the original model names and enable images automatically";
+    readonly hiddenVariantsHint: "Text-only models keep one model-selector entry with the original name while the session runs on the image-capable variant. Pasted images, image history, and the built-in read_image tool keep working; disable to restore the explicit (Vision Toolkit) entries.";
+    readonly pluginVersion: "Plugin";
+    readonly upstreamVersion: "Upstream";
+    readonly activeGeneration: "Runtime generation";
+    readonly activeGenerationValue: "Generation {generation}";
+    readonly updates: "Plugin updates";
+    readonly updatesHint: "Check npm for a newer release, install it into this DSH profile, and restart DSH Web automatically.";
+    readonly manualUpdate: "Manual update";
+    readonly manualUpdateHint: "Run this command in your terminal to install the latest release into this DSH profile.";
+    readonly copy: "Copy";
+    readonly copied: "Copied";
+    readonly checkUpdate: "Check for updates";
+    readonly checkingUpdate: "Checking for updates…";
+    readonly updateAvailable: "Update available";
+    readonly updateAvailableDetail: "Version {version} is available. It will restart DSH Web automatically when safe; otherwise you will be asked to restart it manually.";
+    readonly upToDate: "Up to date";
+    readonly upToDateDetail: "Version {version} is the latest release.";
+    readonly updateNow: "Install update";
+    readonly updatingPlugin: "Installing update…";
+    readonly updateConfirm: "Install Vision Toolkit {version} now? DSH Web will restart automatically when supported; otherwise a manual restart will be required.";
+    readonly restarting: "Version {version} was installed. Waiting for DSH Web to restart…";
+    readonly manualRestartRequired: "Version {version} was installed. Restart DSH Web through your usual command or process manager to activate it.";
+    readonly updateProfile: "Profile";
+    readonly updateInstalled: "Installed";
+    readonly updateLatest: "Latest";
+    readonly updateUnsupported: "In-app updates are unavailable for this installation.";
+    readonly updateReasonProfileNotFound: "The running plugin could not be matched to a DSH profile installation.";
+    readonly updateReasonNotDependency: "The plugin is not a direct dependency of this DSH profile.";
+    readonly updateReasonLocalSource: "This profile uses a local, workspace, URL, or git installation; update that source manually so local work is not overwritten.";
+    readonly updateReasonReadOnly: "The profile package manifest is read-only.";
+    readonly updateReasonPnpm: "pnpm is unavailable in the DSH execution environment.";
+    readonly updateReasonPlatform: "Automatic restart is unavailable on this operating system.";
+    readonly updateReasonRestartUnmanaged: "Detached self-restart is disabled. Use a supported process manager, or explicitly opt in with DSH_VISION_TOOLKIT_ALLOW_DETACHED_RESTART=1 for an unsupervised Web process.";
+    readonly updateReasonRestartAddress: "Automatic restart is unavailable when DSH Web uses an unknown or dynamically allocated port. Start it with a fixed --port value.";
+    readonly updateSaveFirst: "Save or discard the current Settings and API key changes before updating the plugin.";
+    readonly restartTimedOut: "DSH Web did not return with the target plugin version. Check the restart log and restart the Web profile through its original process manager.";
+    readonly restartRolledBack: "The new plugin did not become ready, so the previous version was restored. Check the restart log before trying again.";
+    readonly pluginKind: "DSH native plugin";
+    readonly runtimeUnavailable: "Runtime unavailable";
+    readonly runtimeCandidateRejected: "Last runtime candidate was rejected; the active generation remains available.";
+    readonly runtimeReady: "Ready";
+    readonly runtimeManaged: "Managed";
+    readonly runtimeExternal: "External checkout";
+    readonly retry: "Retry";
+    readonly open: "Open file";
+    readonly download: "Download";
+    readonly previewUnavailable: "HTTP preview is unavailable in this host; use Open file.";
+    readonly running: "Running…";
+    readonly failed: "Failed";
+    readonly matches: "matches";
+    readonly elements: "elements";
+    readonly dimensions: "Dimensions";
+    readonly coordinates: "Coordinates";
+    readonly artifact: "Artifact";
+    readonly artifacts: "Artifacts";
+    readonly difference: "Overall difference";
+    readonly worstRegions: "Worst regions";
+    readonly colors: "Dominant colors";
+    readonly noResult: "Structured result unavailable; inspect the raw Tool result.";
+    readonly healthy: "Healthy";
+    readonly degraded: "Needs attention";
+    readonly notTested: "Not tested";
+    readonly groundTitle: "Ground";
+    readonly detectTitle: "Detect";
+    readonly traceTitle: "Trace SVG";
+    readonly pixelDiffTitle: "Pixel Diff";
+    readonly cropTitle: "Crop";
+    readonly longOcrTitle: "Long OCR";
+    readonly extractForegroundTitle: "Extract Foreground";
+    readonly htmlScreenshotTitle: "HTML Screenshot";
+    readonly artifactTitle: "Vision Artifact";
+    readonly dominantColorsTitle: "Dominant Colors";
+    readonly artifactGroundPreview: "Grounding bounding-box preview";
+    readonly artifactDetectPreview: "Detected-element bounding-box preview";
+    readonly artifactCrop: "Cropped image region";
+    readonly artifactTrace: "Traced vector geometry";
+    readonly artifactDiffHeatmap: "Pixel-difference heatmap";
+    readonly artifactDiffReport: "Structured pixel-difference report";
+    readonly artifactLongManifest: "Long-screenshot split and merge manifest";
+    readonly artifactLongTranscript: "Merged long-screenshot OCR transcript";
+    readonly artifactLongAudit: "Long-screenshot OCR boundary audit";
+    readonly artifactLongChunk: "Long-screenshot OCR chunk {index}";
+    readonly artifactOcrSidecar: "OCR sidecar for chunk {index}";
+    readonly artifactForeground: "Extracted transparent foreground";
+    readonly artifactHtmlScreenshot: "Headless browser screenshot of local HTML";
+    readonly label: "Label";
+    readonly paths: "paths";
+    readonly healthPython: "Python";
+    readonly healthDependencies: "Dependencies";
+    readonly healthChrome: "Browser";
+    readonly healthCredential: "Credential";
+    readonly healthArtifactDirectory: "Artifact directory";
+    readonly healthTempDirectory: "Temporary directory";
+    readonly healthService: "Vision service";
+    readonly healthModel: "Vision model";
+    readonly statusOk: "OK";
+    readonly statusWarning: "Warning";
+    readonly statusError: "Error";
+    readonly statusNotTested: "Not tested";
+    readonly positiveInteger: "{field} must be a positive integer.";
+    readonly healthPythonDetail: "{version} via {path}";
+    readonly healthChromeMissing: "Chrome, Chromium, or Edge was not found; HTML Screenshot is unavailable.";
+    readonly healthChromeProbeFailed: "Could not check whether a supported browser is available.";
+    readonly healthCredentialMissing: "Credential {credential} is not configured.";
+    readonly healthCredentialReady: "Credential {credential} is available.";
+    readonly healthCredentialFailed: "Could not read credential {credential}.";
+    readonly healthDirectoryWritable: "{directory} is writable: {path}";
+    readonly healthDirectoryNotWritable: "{directory} is not writable: {path}";
+    readonly healthArtifactDirectoryFailed: "Could not prepare the artifact directory.";
+    readonly healthConnectionNotTested: "API connection not tested. Use Test API connection to query /models.";
+    readonly healthConnectionCredentialMissing: "Connection test skipped because the credential is unavailable.";
+    readonly healthServiceResponded: "Service responded at {endpoint} (HTTP {status}).";
+    readonly healthServiceRejectedCredential: "Service rejected the configured credential (HTTP {status}).";
+    readonly healthServiceForbidden: "Service is reachable, but GET /models is restricted (HTTP {status}). This is often an account or model-list permission limit, not an invalid key; you can ignore this warning when the vision-model test reports success.";
+    readonly healthServiceNoModels: "Service is reachable but does not support GET /models (HTTP {status}).";
+    readonly healthServiceRateLimited: "Service is reachable, but the connection test was rate-limited (HTTP 429).";
+    readonly healthServiceHttpFailed: "Connection test failed with HTTP {status}.";
+    readonly healthServiceUnreachable: "Could not reach {endpoint}.";
+    readonly healthModelNotTested: "Vision model not tested. Run Test vision model to make one real multimodal request.";
+    readonly healthModelCredentialMissing: "Vision model test skipped because the credential is unavailable.";
+    readonly healthModelReady: "Model {model} completed a real multimodal request.";
+    readonly healthModelFailed: "Real multimodal request failed: {detail}";
+    readonly modelTestVerifiedTag: "Verified";
+    readonly modelTestNotRunTag: "Not tested";
+    readonly modelTestFailedTag: "Test failed";
+};
+type LocaleKey = keyof typeof en;
+interface ToolCallOwnerProps {
+    callId: string;
+    toolName: string;
+    block: ToolCallBlock;
+    cwd?: string | undefined;
+    openFile: (path: string) => void;
+    inspect?: (() => void) | undefined;
+}
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+    interface SlotMap {
+        /** Keyed atomic Tool call view, dispatched by wire Tool name. */
+        'tool.call.toolview': {
+            kind: 'keyed';
+            scope: 'session';
+            owner: ToolCallOwnerProps;
+        };
+    }
+    interface LocaleNamespaceMap {
+        /** DSH Vision Toolkit Tool cards and Settings copy. */
+        'vision-toolkit': LocaleKey;
+    }
+}
+interface HealthCheck {
+    status: 'ok' | 'warning' | 'error' | 'not_tested';
+    detail: string;
+}
+interface HealthResult {
+    pluginVersion: string;
+    checks: Record<string, HealthCheck>;
+    healthy: boolean;
+    connectionTested: boolean;
+    modelTested: boolean;
+}
+interface SettingsValue {
+    provider?: {
+        baseUrl?: string;
+        credential?: string;
+        model?: string;
+        protocol?: 'openai' | 'anthropic';
+        anthropicThinking?: 'omit' | 'disabled' | 'adaptive';
+        userAgent?: string;
+    };
+    language?: 'zh' | 'en';
+    timeoutMs?: number;
+    maxImageBytes?: number;
+    maxImagePixels?: number;
+    concurrency?: number;
+    runtime?: {
+        mode?: 'managed' | 'external';
+        agentVisionToolkitPath?: string;
+        python?: string;
+    };
+    allowedDirs?: string[];
+    imageInputVariants?: {
+        enabled?: boolean;
+        providers?: string[];
+        autoSwitch?: boolean;
+        hidden?: boolean;
+    };
+}
+type PluginUpdateUnavailableReason = 'profile-not-found' | 'not-direct-dependency' | 'unsupported-install-source' | 'profile-read-only' | 'pnpm-unavailable' | 'unsupported-platform' | 'restart-unmanaged' | 'restart-address-unavailable';
+interface PluginUpdateCapability {
+    supported: boolean;
+    checkSupported?: boolean;
+    profile?: string;
+    dependencySpec?: string;
+    reason?: PluginUpdateUnavailableReason;
+}
+interface PluginUpdateCheck extends PluginUpdateCapability {
+    currentVersion: string;
+    latestVersion?: string;
+    updateAvailable: boolean;
+    checkedAt: string;
+}
+type PluginUpdateResult = {
+    fromVersion: string;
+    toVersion: string;
+    profile: string;
+    restarting: true;
+    retryAfterMs: number;
+    manualRestartRequired?: false;
+} | {
+    fromVersion: string;
+    toVersion: string;
+    profile: string;
+    restarting: false;
+    manualRestartRequired: true;
+    retryAfterMs?: undefined;
+};
+interface SettingsSnapshot {
+    schemaVersion: 1;
+    writable: boolean;
+    settings: {
+        value: SettingsValue;
+        revision: number;
+        applies: 'live';
+    };
+    credential: {
+        ref: string;
+        configured: boolean;
+        source?: string;
+        writable: boolean;
+    };
+    runtime: {
+        ready: boolean;
+        generation: number;
+        activeConfig?: SettingsValue;
+        upstream?: {
+            source: 'managed' | 'external';
+            path: string;
+            runtimeHome: string;
+            python: string;
+            pythonVersion: string;
+        };
+        lastError?: string;
+    };
+    release: {
+        pluginVersion: string;
+        upstreamRepository: string;
+        upstreamVersion: string;
+        upstreamCommit: string;
+        update: PluginUpdateCapability;
+    };
+    artifactRouteAvailable: boolean;
+}
+/** Decode canonical presentation metadata with a JSON-text fallback. */
+export declare function decodeVisionResult(block: ToolCallBlock): Record<string, unknown> | undefined;
+interface SettingsState {
+    status: 'idle' | 'loading' | 'ready' | 'error';
+    snapshot?: SettingsSnapshot | undefined;
+    health?: HealthResult | undefined;
+    update?: PluginUpdateCheck | undefined;
+    restart?: PluginUpdateResult | undefined;
+    action?: 'save' | 'health' | 'connection' | 'model' | 'check-update' | 'apply-update' | undefined;
+    message?: string | undefined;
+    error?: string | undefined;
+}
+/** Small external store shared by the Settings route and pushed invalidations. */
+export declare class VisionSettingsController {
+    private state;
+    private listeners;
+    private generation;
+    subscribe: (listener: () => void) => (() => void);
+    snapshot: () => SettingsState;
+    private set;
+    load(): Promise<void>;
+    refreshIfLoaded(): void;
+    save(value: SettingsValue, expectedRevision: number, credentialValue: string | undefined, writeSettings: boolean): Promise<boolean>;
+    runHealth(mode: 'health' | 'connection' | 'model'): Promise<void>;
+    checkUpdate(): Promise<void>;
+    applyUpdate(expectedVersion: string): Promise<void>;
+    reportRestartTimeout(message: string): void;
+}
+/** Required client services. The pasted-image codec attaches to either trigger-service generation after load. */
+export declare const inject: string[];
+/** Register dedicated Tool views and the Vision Settings section. */
+export declare function apply(ctx: ClientContext): void;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/lib/types/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.tsx"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAA;AAwB1F,QAAA,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwLE,CAAA;AAEV,KAAK,SAAS,GAAG,MAAM,OAAO,EAAE,CAAA;AA8LhC,UAAU,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,aAAa,CAAA;IACpB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,OAAO,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAA;CACnC;AAED,OAAO,QAAQ,kCAAkC,CAAC;IAChD,UAAU,OAAO;QACf,iEAAiE;QACjE,oBAAoB,EAAE;YAAE,IAAI,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,SAAS,CAAC;YAAC,KAAK,EAAE,kBAAkB,CAAA;SAAE,CAAA;KACrF;IAED,UAAU,kBAAkB;QAC1B,uDAAuD;QACvD,gBAAgB,EAAE,SAAS,CAAA;KAC5B;CACF;AAqBD,UAAU,WAAW;IACnB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,CAAA;IACjD,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,YAAY;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACnC,OAAO,EAAE,OAAO,CAAA;IAChB,gBAAgB,EAAE,OAAO,CAAA;IACzB,WAAW,EAAE,OAAO,CAAA;CACrB;AAED,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,QAAQ,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAA;QACjC,iBAAiB,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,CAAA;QACpD,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;IACD,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC;QAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7F,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,kBAAkB,CAAC,EAAE;QACnB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;QACpB,UAAU,CAAC,EAAE,OAAO,CAAA;QACpB,MAAM,CAAC,EAAE,OAAO,CAAA;KACjB,CAAA;CACF;AAED,KAAK,6BAA6B,GAC9B,mBAAmB,GACnB,uBAAuB,GACvB,4BAA4B,GAC5B,mBAAmB,GACnB,kBAAkB,GAClB,sBAAsB,GACtB,mBAAmB,GACnB,6BAA6B,CAAA;AAEjC,UAAU,sBAAsB;IAC9B,SAAS,EAAE,OAAO,CAAA;IAClB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,MAAM,CAAC,EAAE,6BAA6B,CAAA;CACvC;AAED,UAAU,iBAAkB,SAAQ,sBAAsB;IACxD,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,EAAE,OAAO,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,KAAK,kBAAkB,GAAG;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,IAAI,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,qBAAqB,CAAC,EAAE,KAAK,CAAA;CAC9B,GAAG;IACF,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,KAAK,CAAA;IACjB,qBAAqB,EAAE,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,SAAS,CAAA;CACzB,CAAA;AAED,UAAU,gBAAgB;IACxB,aAAa,EAAE,CAAC,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE;QAAE,KAAK,EAAE,aAAa,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACrE,UAAU,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAA;IACpF,OAAO,EAAE;QACP,KAAK,EAAE,OAAO,CAAA;QACd,UAAU,EAAE,MAAM,CAAA;QAClB,YAAY,CAAC,EAAE,aAAa,CAAA;QAC5B,QAAQ,CAAC,EAAE;YACT,MAAM,EAAE,SAAS,GAAG,UAAU,CAAA;YAC9B,IAAI,EAAE,MAAM,CAAA;YACZ,WAAW,EAAE,MAAM,CAAA;YACnB,MAAM,EAAE,MAAM,CAAA;YACd,aAAa,EAAE,MAAM,CAAA;SACtB,CAAA;QACD,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;IACD,OAAO,EAAE;QACP,aAAa,EAAE,MAAM,CAAA;QACrB,kBAAkB,EAAE,MAAM,CAAA;QAC1B,eAAe,EAAE,MAAM,CAAA;QACvB,cAAc,EAAE,MAAM,CAAA;QACtB,MAAM,EAAE,sBAAsB,CAAA;KAC/B,CAAA;IACD,sBAAsB,EAAE,OAAO,CAAA;CAChC;AAiBD,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAW5F;AAgUD,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAA;IAC9C,QAAQ,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAA;IACvC,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;IACjC,MAAM,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAA;IACtC,OAAO,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;IACxC,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,cAAc,GAAG,cAAc,GAAG,SAAS,CAAA;IACjG,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3B;AAED,kFAAkF;AAClF,qBAAa,wBAAwB;IACnC,OAAO,CAAC,KAAK,CAAoC;IACjD,OAAO,CAAC,SAAS,CAAwB;IACzC,OAAO,CAAC,UAAU,CAAI;IAEtB,SAAS,GAAI,UAAU,MAAM,IAAI,KAAG,CAAC,MAAM,IAAI,CAAC,CAG/C;IAED,QAAQ,QAAO,aAAa,CAAc;IAE1C,OAAO,CAAC,GAAG;IAKL,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB3B,eAAe,IAAI,IAAI;IAKjB,IAAI,CACR,KAAK,EAAE,aAAa,EACpB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,aAAa,EAAE,OAAO,GACrB,OAAO,CAAC,OAAO,CAAC;IAuDb,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBjE,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAc5B,WAAW,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBzD,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAG5C;AAubD,iHAAiH;AACjH,eAAO,MAAM,MAAM,UAA4D,CAAA;AAE/E,qEAAqE;AACrE,wBAAgB,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAkE9C"}

package/lib/types/client/model-variants-hider.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Transparent routing for the host model selector: when `imageInputVariants.hidden`
+ * is enabled, variant routes keep the upstream provider/model display names and
+ * the browser hides the upstream text-only entries that have a variant twin.
+ * Users then see one entry per model — the original name — while the session
+ * actually runs on the image-capable variant, so pasted images, history with
+ * images, and the built-in `read_image` tool all keep working on text-only
+ * models without exposing `(Vision Toolkit)` routes.
+ *
+ * The host selector renders one `[role=group]` per provider whose group title
+ * id is `:<react-radix>:-<providerId>`, and one `[role=menuitemradio]` per
+ * model. We key groups by that provider id (variant routes carry the
+ * `vision-toolkit-` prefix) and hide every upstream entry whose display name
+ * matches a variant twin, collapsing fully-hidden upstream groups.
+ *
+ * The hiding decision is purely DOM-local: transparent mode is exactly the
+ * case where a variant twin keeps the upstream display name, while explicit
+ * mode appends `(Vision Toolkit)` and therefore never matches. No display-config
+ * round-trip is needed before the selector can be tidied, so the first paint
+ * of an opened menu already shows the merged list instead of flashing the
+ * duplicate upstream group.
+ * @module dsh-vision-toolkit/model-variants-hider
+ */
+/**
+ * Hide upstream text-only entries that have a variant twin. Group keys come
+ * from `aria-labelledby` ids so provider identity is reliable even when the
+ * variant provider name equals the upstream name (transparent mode).
+ */
+export declare function tidyModelSelector(): void;
+/**
+ * Install the transparent-routing integrator. It watches the document for
+ * model-selector renderings and re-tidies them whenever the host re-renders.
+ * Tidy runs in a microtask (before the browser paints) and is coalesced across
+ * the render batch, so opening the selector never shows the upstream twins.
+ * @returns the disposer that stops observation and restores hidden entries.
+ */
+export declare function installModelVariantsHider(): () => void;
+/** Test seam: expose whether the integrator is currently installed. */
+export declare function isModelVariantsHiderActive(): boolean;
+//# sourceMappingURL=model-variants-hider.d.ts.map

package/lib/types/client/model-variants-hider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-variants-hider.d.ts","sourceRoot":"","sources":["../../../src/client/model-variants-hider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAuCH;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CA+CxC;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,IAAI,CA+BtD;AAED,uEAAuE;AACvE,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD"}