dsh-connect-agnes-token-plan 0.13.1 → 0.13.2

package/CHANGELOG.md

@@ -23,6 +23,16 @@
 
 ## [Unreleased]
 
+## [0.13.2] — 2026-10-23
+
+本版两件事：**网关新上的模型默认就能发图**，以及**余额胶囊上会多一段「· N 新模型」**。两处都只影响 AgnesCode（桌面端）这条线。
+
+### 变更：新模型默认能发图，胶囊会告诉你网关多了哪个模型
+
+- **改（识图）**：网关新上的模型不再默认被当成纯文本。旧版只认「官方文档表里写过的」那几个，表里没有的模型就不给图片入口——看不到任何提示，只能自己发现。现在没证据的模型**默认放开图片输入**，面板把它标成「可看图·未实测」；确认看不见图的模型才被收回去（记在一份否决清单里，带实测日期）。
+- **新（胶囊）**：小浣熊/AgnesCode 的余额胶囊上会多一段「· N 新模型」。它比的是插件自己记的「这台机器见过哪些模型」，所以只在网关真的新上了模型时出现。新模型名字在 tooltip 和展开卡片里，最多列三个。标记保持 7 天，不弹窗、不需要点确认；装上新版后的第一次运行会把当时的目录当作「早就见过」，不会把整张表报成新的。
+- **说明**：两处都只影响 AgnesCode 这条线，商汤 Token Plan 侧的面板与胶囊不变。
+
 ## [0.13.1] — 2026-10-22
 
 本版只改一件事：**插件卡的标题**。中文叫「Agnes 模型接入」，英文叫「Agnes Model Access」，与「商汤模型接入」「魔搭模型接入」同构。

package/README.md

@@ -2,20 +2,11 @@
 
 <p align="center"><b>把 Agnes（爱思）接进 DSH 的 Plugins 页插件卡，并在会话输入框常驻一枚用量胶囊。</b></p>
 
-<p align="center">
-  <a href="#安装">安装</a> ·
-  <a href="#它是怎么工作的">工作原理</a> ·
-  <a href="CHANGELOG.md">更新日志</a> ·
-  <a href="https://github.com/eghrhegpe/dsh-connect-agnes-token-plan/issues">问题反馈</a>
-</p>
+<p align="center"><a href="#安装">安装</a> · <a href="#它是怎么工作的">工作原理</a> · <a href="CHANGELOG.md">更新日志</a> · <a href="https://github.com/eghrhegpe/dsh-connect-agnes-token-plan/issues">问题反馈</a></p>
 
 <p align="center">
-  <a href="https://www.npmjs.com/package/dsh-connect-agnes-token-plan"><img src="https://img.shields.io/npm/v/dsh-connect-agnes-token-plan?style=flat-square&label=npm&color=cb3837" alt="npm version"></a>
-  <a href="https://www.npmjs.com/package/dsh-connect-agnes-token-plan"><img src="https://img.shields.io/npm/d18m/dsh-connect-agnes-token-plan?style=flat-square&label=downloads&color=cb3837" alt="npm downloads"></a>
-  <a href="https://github.com/eghrhegpe/dsh-connect-agnes-token-plan/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/eghrhegpe/dsh-connect-agnes-token-plan/ci.yml?branch=main&style=flat-square&label=tests" alt="test status"></a>
-  <a href="LICENSE"><img src="https://img.shields.io/github/license/eghrhegpe/dsh-connect-agnes-token-plan?style=flat-square" alt="MIT license"></a>
-  <a href="https://github.com/eghrhegpe/dsh-connect-agnes-token-plan/stargazers"><img src="https://img.shields.io/github/stars/eghrhegpe/dsh-connect-agnes-token-plan?style=flat-square" alt="GitHub stars"></a>
-  <a href="https://dshfind.com/plugins/eghrhegpe/dsh-connect-agnes-token-plan"><img src="https://dshfind.com/api/badge/eghrhegpe/dsh-connect-agnes-token-plan" alt="dshfind plugin"></a>
+  <a href="https://www.npmjs.com/package/dsh-connect-agnes-token-plan"><img src="https://img.shields.io/npm/v/dsh-connect-agnes-token-plan?style=flat-square&label=npm&color=cb3837" alt="npm version"></a> <a href="https://www.npmjs.com/package/dsh-connect-agnes-token-plan"><img src="https://img.shields.io/npm/d18m/dsh-connect-agnes-token-plan?style=flat-square&label=downloads&color=cb3837" alt="npm downloads"></a> <a href="https://github.com/eghrhegpe/dsh-connect-agnes-token-plan/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/eghrhegpe/dsh-connect-agnes-token-plan/ci.yml?branch=main&style=flat-square&label=tests" alt="test status"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/github/license/eghrhegpe/dsh-connect-agnes-token-plan?style=flat-square" alt="MIT license"></a> <a href="https://github.com/eghrhegpe/dsh-connect-agnes-token-plan/stargazers"><img src="https://img.shields.io/github/stars/eghrhegpe/dsh-connect-agnes-token-plan?style=flat-square" alt="GitHub stars"></a> <a href="https://dshfind.com/plugins/eghrhegpe/dsh-connect-agnes-token-plan"><img src="https://dshfind.com/api/badge/eghrhegpe/dsh-connect-agnes-token-plan" alt="dshfind plugin"></a>
 </p>
 
 把 Agnes 接进 DSH：**Plugins 页**的插件卡（三个 tab），外加**会话输入框右侧的一枚用量胶囊**。**DSH** 即 **DeepSeek Harness**；**Agnes**（爱思）是全模态大模型平台，本插件对接其**控制台 API** 与**推理 API**。
@@ -84,7 +75,8 @@
 
 - 读数与面板**同源**：控制台百分比优先用平台自己报的 `usage_pct`、缺失才回落 `已用 / 上限`，**不做钳制**（超额窗口就显示 >100%，那是事实）；桌面端画的是**存量**，所以**不造百分比**——网关只公布积分，没有「上限」可以当分母；
 - 两条上游**互不借用**：`agnescode` 的会话只读它自己的路由、绝不画控制台窗口，反之亦然；切到**别的 provider**（其它插件）的模型时胶囊直接消失，也不再发任何请求；
-- 读不到时**保留上一次数字并标「上次数据」**，不会清零或伪装成 0%；余额里的 `0` 是「烧完了」的读数（红色告警），`—` 才是「这次没读到」——这个区别是刻意的。
+- 读不到时**保留上一次数字并标「上次数据」**，不会清零或伪装成 0%；余额里的 `0` 是「烧完了」的读数（红色告警），`—` 才是「这次没读到」——这个区别是刻意的；
+- 网关新上了模型时，余额胶囊会多一段**「· N 新模型」**（名字在 tooltip 与展开卡里，最多三个，保留 7 天）。这里的「新」指**这台机器第一次见到它**，不是上游的上架时间——网关目录没有这个字段。装上新版后的第一次运行只把当时的目录记下来当基线，不会把整张表报成新的。
 
 ![AgnesCode 积分余额胶囊（点开读数卡）](assets/agnescode-usage-capsule.png)
 
@@ -118,12 +110,7 @@
 
 ## 运维诊断：这台机器现在挂没挂 provider？
 
-provider / 出图开关的生效值存在插件私有状态文件里（`$DSH_HOME/state/<name>/`），不在任何配置或路由上——查"到底开没开"用 doctor，它只读状态文件、不碰凭据，Host 没起也能跑：
-
-```powershell
-npm run doctor          # 人读：每个 profile 的 provider / draw / video / agnescode 开关与模型清单
-npm run doctor:json     # 机器读：JSON（可进你的巡检 / 工单脚本）
-```
+provider / 出图 / 视频 / AgnesCode 开关的生效值存在插件私有状态文件里（`$DSH_HOME/state/<name>/`），不在任何配置或路由上；`npm run doctor` 只读状态文件、不碰凭据，Host 没起也能跑（人读 / 机器读两个口径见 [docs/SETUP.md](docs/SETUP.md) §6.1）。
 
 ## 文档
 

package/client.js

@@ -264,6 +264,12 @@ var dsh_connect_agnes_token_plan_client = (function() {
 			"agnescode.models": "模型（{count}）",
 			"agnescode.fallbackRoster": "未取到实时目录，以下为内置清单，倍率截至 {asOf}。",
 			"agnescode.memberOnly": "会员",
+			"agnescode.visionAssumed": "可看图·未实测",
+			"agnescode.visionAssumedTitle": "网关没声明这个模型能否看图，插件默认放开图片入口（未实测）。真发过去模型说看不到，就把它的 id 记进否决清单。",
+			"agnescd.newModels": "新模型",
+			"agnescd.newModelsRow": "本机新见",
+			"agnescd.newModelsTitle": "本机首次见到的模型：",
+			"agnescd.newModelsSep": "、",
 			"agnescode.rateTitle": "平台公布的积分消耗倍率（0 为免费）",
 			"agnescode.registeredPill": "已注册",
 			"agnescode.rosterHint": "勾选决定哪些模型推送进 DSH 模型列表，改动即时生效。",
@@ -524,6 +530,12 @@ var dsh_connect_agnes_token_plan_client = (function() {
 			"agnescode.models": "Models ({count})",
 			"agnescode.fallbackRoster": "Live catalogue unavailable — showing the built-in list, rates as of {asOf}.",
 			"agnescode.memberOnly": "member",
+			"agnescode.visionAssumed": "vision (unverified)",
+			"agnescode.visionAssumedTitle": "The gateway did not declare whether this model sees images, so picture input is allowed by default and this is unverified. If the model answers it cannot see the image, add its id to the vision denylist.",
+			"agnescd.newModels": "new",
+			"agnescd.newModelsRow": "New here",
+			"agnescd.newModelsTitle": "First seen on this machine: ",
+			"agnescd.newModelsSep": ", ",
 			"agnescode.rateTitle": "Credit multiplier as published by the platform (0 = free)",
 			"agnescode.registeredPill": "Registered",
 			"agnescode.rosterHint": "Ticking decides which models are pushed into DSH's model list; the change takes effect immediately.",
@@ -1562,6 +1574,10 @@ var dsh_connect_agnes_token_plan_client = (function() {
 			},
 			pillReading: { fontVariantNumeric: "tabular-nums" },
 			pillStale: { color: "var(--dsw-alias-label-secondary)" },
+			pillNewTag: {
+				color: "var(--dsw-alias-label-secondary)",
+				flexShrink: 0
+			},
 			pillErrorText: { color: "var(--dsw-alias-state-error-primary)" },
 			pillTierOk: { background: "var(--dsw-alias-state-success-primary, #22c55e)" },
 			pillTierWarn: { background: "var(--dsw-alias-state-warn-primary, #f59e0b)" },
@@ -4050,7 +4066,10 @@ var dsh_connect_agnes_token_plan_client = (function() {
 			}), h("span", { style: S.spacer }), promo === null ? null : h("span", { style: S.modelPromo }, promo), rate === null ? null : h("span", {
 				style: S.modelRate,
 				title: tt("agnescode.rateTitle")
-			}, `×${rate}`), row.memberOnly === true ? h("span", { style: S.modelBadge }, tt("agnescode.memberOnly")) : null), meta === "" ? null : h("div", { style: S.modelMeta }, meta));
+			}, `×${rate}`), row?.vision === true ? h("span", {
+				style: S.modelBadge,
+				title: row?.visionSource === "assumed" ? tt("agnescode.visionAssumedTitle") : void 0
+			}, row?.visionSource === "assumed" ? tt("agnescode.visionAssumed") : tt("llm.rosterVision")) : null, row.memberOnly === true ? h("span", { style: S.modelBadge }, tt("agnescode.memberOnly")) : null), meta === "" ? null : h("div", { style: S.modelMeta }, meta));
 		})));
 	}
 	/**
@@ -4665,10 +4684,17 @@ var dsh_connect_agnes_token_plan_client = (function() {
 		const permanent = partOf(state, "permanentBalance");
 		const split = timeLimited === null || permanent === null ? null : `${tt("agnescode.balanceTimeLabel")} ${count(timeLimited)} · ${tt("agnescode.balancePermanentLabel")} ${count(permanent)}`;
 		const usageText = agnescodeUsageText(state?.usage ?? null, tt);
+		const newIds = (Array.isArray(state?.newModelIds) ? state.newModelIds : []).filter((id) => typeof id === "string" && id !== "");
+		const shownNames = newIds.map((id) => {
+			const row = state?.models?.find((model) => model.id === id);
+			return row?.name ?? row?.id ?? id;
+		}).slice(0, 3);
+		const newModelTitle = newIds.length === 0 ? null : `${tt("agnescd.newModelsTitle")}${shownNames.join(tt("agnescd.newModelsSep"))}${newIds.length > shownNames.length ? "…" : ""}`;
 		const title = [
 			tt("composer.balanceTitle"),
 			split,
 			why,
+			newModelTitle,
 			stale ? tt("composer.stale") : null
 		].filter(Boolean).join(" · ");
 		const { popoverId, open, setOpen, rootRef, cardRef, triggerRef } = usePillPopover();
@@ -4693,6 +4719,10 @@ var dsh_connect_agnes_token_plan_client = (function() {
 				key: "why",
 				style: S.pillPopMuted
 			}, why) : null,
+			newIds.length > 0 ? h("div", {
+				key: "new-models",
+				style: S.pillPopMuted
+			}, `${tt("agnescd.newModelsRow")} ${shownNames.join(tt("agnescd.newModelsSep"))}${newIds.length > shownNames.length ? "…" : ""}`) : null,
 			stale ? h("div", {
 				key: "stale",
 				style: S.pillPopMuted
@@ -4716,7 +4746,13 @@ var dsh_connect_agnes_token_plan_client = (function() {
 			popoverOpen: open,
 			popoverId,
 			buttonRef: triggerRef,
-			children: h("span", { style: S.pillReading }, pending ? "…" : balance === null ? "—" : `${count(balance)} ${tt("composer.balanceUnit")}`)
+			children: [h("span", {
+				key: "reading",
+				style: S.pillReading
+			}, pending ? "…" : balance === null ? "—" : `${count(balance)} ${tt("composer.balanceUnit")}`), newIds.length === 0 ? null : h("span", {
+				key: "new-models",
+				style: S.pillNewTag
+			}, ` · ${newIds.length} ${tt("agnescd.newModels")}`)]
 		}), open ? h("div", {
 			ref: cardRef,
 			id: popoverId,

package/docs/ADR.md

@@ -206,3 +206,24 @@
 - **受影响的文档**：`src/host/agnescode-models.ts`（`agnescodeThinkingLevelMap(id)` per-model + 模块头决策 1）、`test/agnescode.test.mjs`（新增 agnes-2.5-pro 断言块）、`docs/ROADMAP.md` §6.3.1（新增 2026-10-18 探针行）、`CHANGELOG.md`（[Unreleased]）。ADR-009 原文按考古纪律保留不改写。
 - **与既有条目的关系**：细化 ADR-009 的档位映射（该裁定以 3.0-flash 探针为基础，未覆盖 2.5-pro 的阶梯差异）；不改变 `docs/DSH-LLM-DEVELOP.md` §4 的通用裁法（Token Plan 侧 `thinkingLevelMapFor` 未动）。
 
+## ADR-018 agnescode 识图默认放行：没证据的行也收图，但面板必须说「未实测」
+
+- **日期**：2026-10-22
+- **状态**：现行（实现见 `src/host/agnescode-models.ts` 的 `AGNESCODE_VISION_DENYLIST` / `agnescodeVisionVerdict` / `agnescodeVisionSource`，`agnescodeRoster` 把 `vision` 与 `visionSource` 一起透出；面板 chip 见 `src/client/agnescode-tab.ts`；门禁见 `test/agnescode.test.mjs` 的判定阶梯段与 `test/dom-render.test.mjs` 的 chip 段）
+- **裁定**：判定阶梯四级——**实测否决集 → 行内声明 → `PROBED_VISION` 实测表 → 默认放行（`assumed`）**。前三级给面板一个朴素 chip；`assumed` 必须画成「可看图·未实测」并带 tooltip；否决项画 `vision:false`、无 chip。换言之：**默认值是「给它图片」，唯一能否掉它的是带日期实测的否决条目**。
+- **理由**：网关 `/models` 的每一行都只写 `model_type: "text"`，从不说自己能不能看图（`fetchAgnescodeCatalog` 因此钉死 `vision:false`——那是 wire 事实，不是判决）。旧逻辑把「文档表里没有」读成「不支持」，于是网关每上一次新模型，图片入口就静默消失一次：用户看不到任何提示，只能自己发现并来报。这条失效方向是不可见的（能力缺失不像错报那样会在会话里露头），而错报在当前网关是可观测的：模型收到图片后自述看不见，HTTP 仍是 200。
+- **代价与护栏**：默认放行把失效方向翻成「错报」，但没有翻成「谎报」——`visionSource` 让面板把未实测的行标出来，读者因此知道这是插件的默认，不是平台的声明。否决集是唯一维护面：发现某模型自述看不见，就把它带日期加进 `AGNESCODE_VISION_DENYLIST`。
+- **边界**：只动 agnescode 这条上游；Token Plan 侧 `identifyVisionModel`（按 `/v1/models` 的 `input_modalities` 判定）不受影响，两侧判定函数不合并。`AGNESCODE_FALLBACK_MODELS` 的 `vision` 列是手写快照，不经过本判定函数；`visionSource` 只影响面板显示，不改变 descriptor 的 `input` 数组长度约定（`vision:true` → `["text","image"]`）。
+- **复核条件**：若网关开始在 `/models` 里声明模态（`input_modalities` 或视觉标签），第二级（`declared`）就会接管绝大多数行，`assumed` 退化为稀有位——那时本条仍然成立，只是很少被用到。若哪天实测发现「未实测默认可看图」在本网关的错报代价高到不可接受（例如图片被静默吞掉且模型照常编造），把默认改回 `false` 并把本条的 `assumed` 换成一个显式的 `unknown` chip。
+
+## ADR-019 网关新增模型走胶囊的「· N 新模型」，不弹窗、不留确认态
+
+- **日期**：2026-10-22
+- **状态**：现行（实现见 `src/host/agnescode-roster-seen-store.ts` 的首次见到历史、`src/host/routes/agnescode.ts` 的 `newModelIds` 差分、`src/client/composer-usage-pill.ts` 的 AgnesCode 胶囊段；门禁见 `test/agnescode.test.mjs` 的两个新段与 `test/dom-render.test.mjs` 的胶囊三帧）
+- **裁定**：网关目录里出现本机没见过的 model id 时，**只在胶囊上多一段「· N 新模型」**（tooltip 与 popover 给名字，最多列三个），不弹窗、不阻塞、不留「已读」按钮。判定基准是插件自己写的首次见到文件 `agnescode-roster-seen.json`：**首次写入是播种（整表记为已见、一条都不报）**，之后新增的 id 记为「现在」并保持 7 天，离开目录的 id 从表里删除（重新上架算新）。
+- **理由**：DSH 的 Host 面没有通知/弹窗服务，插件的可见面只有插件卡与胶囊；而胶囊本来就是读者扫余额的地方，把「网关多了个模型」放在余额旁边是同一类信息（都关于「现在能用什么」）。播种是必须的：升级后的第一次运行会把当时整张目录写成历史，否则每个老用户都会被告知全部七个模型都是新的——那是噪音，不是提醒。
+- **为什么不是弹窗 / 已读态**：弹窗需要用户处理，而「多了个模型」不需要处理；已读态需要一个点击，等于把一个纯信息变成一次任务。7 天窗口是提醒的寿命：够长到用户会看见，够短到不会永远挂着。重上架的 id 再报一次，因为那说明这一行背后的东西换过手，值得知道。
+- **边界**：只在 `modelsSource === "live"` 时差分——回退快照表是插件自己的六行文本，拿它差分会在登录/离线那几帧凭空造出「新模型」。差分对象是**整张 live 目录**，不是用户勾选的子集：某个模型是不是网关的新闻，与这台机器勾了哪些框无关；拿子集差分还会让一个上架很久的模型在「被勾上」的那天冒充新模型。`newModelIds` 缺席（旧生产者、离线、首次播种）时胶囊什么都不画，不画空段、不留悬空分隔符。该标记只出现在 agnescode provider 被选中的胶囊上；Token Plan 侧名册没有这个字段。
+- **复核条件**：若网关开始提供「上架时间」字段，差分就应改成读那个字段，本文件降级为离线兜底；若 DSH 之后提供通知服务，这段可以迁过去，胶囊只留计数。
+
+

package/docs/DSH-PLUGIN.md

@@ -25,7 +25,7 @@ DSH 插件是一段在 **Host**（桌面版或 `dsh web`）进程内运行的代
 {
   "name": "dsh-connect-agnes-token-plan",
   "icon": "./icon.svg",                  // Plugins 页插件卡图标：Host 读此字段按 SVG/PNG/JPEG/WebP 渲染（相对路径、落在 files 内、≤256 KiB，任一不满足会让整条元数据报错）
-  "version": "0.13.1",
+  "version": "0.13.2",
   "main": "./lib/index.js",              // Host 半边入口：src/host/*.ts 经 tsdown 打成的单条 bundle
   "exports": {
     ".": "./lib/index.js",               // 源码在 src/host/，lib/ 为纯构建产物（随库提交，git/市场直装零构建）

package/docs/SETUP.md

@@ -120,3 +120,14 @@ AgnesCode tab 读的是**另一个应用**（AgnesCode 桌面端）已经登录
 信号与处置的整张表已迁到 **[TROUBLESHOOTING.md](./TROUBLESHOOTING.md)**（按面板上的**界面原文**索引：面板读不出来、登录被拒、模型目录为空、以及「看着像坏了其实是设计」的清单）。
 
 本文件只管装、配、重启；排障从那份进。`shapeWarnings`、`quota.error` 按源降级、「可看图」为空是「读不到」等接口侧含义，那份表指到 [AGNES-API.md](./AGNES-API.md) 与 [ADR.md](./ADR.md)，不在此重复。
+
+### 6.1 查这台机器的开关生效值（doctor）
+
+provider / 出图 / 视频 / AgnesCode 四个开关的生效值存在插件私有状态文件里（`$DSH_HOME/state/<name>/`），不在任何配置或路由上；`npm run doctor` 只读状态文件、不碰凭据，Host 没起也能跑：
+
+```powershell
+npm run doctor          # 人读：每个 profile 的 provider / draw / video / agnescode 开关与模型清单
+npm run doctor:json     # 机器读：JSON（可进你的巡检 / 工单脚本）
+```
+
+doctor 的只读范围与实现见 [PITFALLS.md](./PITFALLS.md) §22 与 [ROADMAP.md](./ROADMAP.md) 的落地坐标。

package/lib/agnescode-stats-store.js

@@ -2087,28 +2087,73 @@ function agnescodeRequestHeaders() {
 	return { ...AGNESCODE_BASE_HEADERS };
 }
 /**
-* Whether an AgnesCode roster row accepts image input.
-*
-* AgnesCode's own BFF `/models` rows declare no modality field — only
-* `model_type: "text"` and `supported_endpoint_types` — so the catalogue alone
-* would answer "no vision" for EVERY row (that is why `fetchAgnescodeCatalog`
-* pins `vision: false`). But AgnesCode serves the SAME Agnes model family the
-* Token Plan gateway does (`agnes-3.0-flash` / `agnes-2.5-flash` /
-* `agnes-2.5-pro` all appear in both rosters), whose official docs declare
-* image input — `PROBED_VISION` (llm-models.ts) is that evidence, and the
-* Token Plan side already probed `agnes-3.0-flash` accepting the standard
-* OpenAI `image_url` block live. Non-agnes ids (`deepseek-*` / `glm-*` /
-* `kimi-*`) have no such claim and stay text-only.
-*
-* Resolution order: the row's own `vision` (if the catalogue ever declares
-* one) wins, then `PROBED_VISION` for the Agnes family, then false.
+* Models confirmed on this gateway to CANNOT read an image, in a LIVE probe
+* with the same picture + question the allow side was measured with (a live
+* re-probe runs against this set, so the day a gateway routing change makes a
+* denied model able to see, the baseline turns and the entry comes out).
+* Membership is a dated measurement, never a design call about the model.
+*
+* STARTS EMPTY: nothing about this gateway is known to be blind. An entry is
+* added only when a user reports a model that cannot see the image (with a
+* probe that proves it), and it leaves the same way. Until a report lands
+* here, every untagged row is OFFERED image input by default and labelled
+* unverified — see the companion verdict below.
+* @type {ReadonlySet<string>}
+*/
+const AGNESCODE_VISION_DENYLIST = Object.freeze(/* @__PURE__ */ new Set([]));
+/**
+* Whether an AgnesCode roster row accepts image input, together with how the
+* verdict was reached.
+*
+* The BFF's own `/models` rows declare no modality field (only `model_type:
+* "text"`), so `fetchAgnescodeCatalog` pins `vision: false` — a raw fact about
+* what the wire said, NOT a verdict. The verdict is made here. The ladder is
+* asymmetric on purpose: a false "it can see" (an image sent to a model that
+* ignores it, HTTP 200, no error anywhere upstream) is worse than a hidden
+* capability, so the DEFAULT is to offer the entry but SAY it is unverified,
+* and only a dated live probe may deny it:
+*
+* 1. `AGNESCODE_VISION_DENYLIST` wins: a row confirmed blind in a live probe is
+*    not offered image input; `source: "denied"` tells the panel to draw no chip.
+* 2. A row carrying `vision: true` (a future BFF that starts declaring its own
+*    modality) is `declared`.
+* 3. The `PROBED_VISION` official-docs table (llm-models.ts) — the Agnes family
+*    the platform already proved — is `measured`.
+* 4. Otherwise: `assumed` (true). A model the docs table never mentioned is
+*    still offered image input — it does not vanish from the image picker —
+*    and the panel marks it unverified. Reading "absent from `PROBED_VISION`"
+*    as "text-only" is what made every newly-listed gateway model silently
+*    lose the attachment entry.
 * @param {object} row - one AgnesCode roster row (must carry `id`).
+* @returns {object} the verdict and how it was reached.
+*/
+function agnescodeVisionVerdict(row) {
+	const id = str(row?.id, "");
+	if (id !== "" && AGNESCODE_VISION_DENYLIST.has(id)) return {
+		vision: false,
+		source: "denied"
+	};
+	if (row?.vision === true) return {
+		vision: true,
+		source: "declared"
+	};
+	if (id !== "" && PROBED_VISION[id] === true) return {
+		vision: true,
+		source: "measured"
+	};
+	return {
+		vision: true,
+		source: "assumed"
+	};
+}
+/**
+* The boolean-only view of {@link agnescodeVisionVerdict}, kept for call sites
+* and tests that want the capability bit without the provenance.
+* @param {object} row - one AgnesCode roster row.
 * @returns {boolean} whether the row accepts image input.
 */
 function agnescodeVisionOf(row) {
-	if (row?.vision === true) return true;
-	const id = str(row?.id, "");
-	return PROBED_VISION[id] === true;
+	return agnescodeVisionVerdict(row).vision;
 }
 /**
 * The AgnesCode model rows the panel shows and the adapter offers.
@@ -2128,10 +2173,12 @@ function agnescodeRoster(catalog, maxTokensOverrides) {
 		const multiplier = numZeroOk(row?.multiplier);
 		const maxOutputLength = agnescodeMaxTokensFor(id, row?.maxOutputLength, maxTokensOverrides);
 		const displayLabel = str(row?.displayLabel, "");
+		const verdict = agnescodeVisionVerdict(row);
 		out.push({
 			id,
 			name: str(row?.name, id),
-			vision: agnescodeVisionOf(row),
+			vision: verdict.vision,
+			visionSource: verdict.source,
 			memberOnly: row?.memberOnly === true,
 			...multiplier === void 0 ? {} : { multiplier },
 			...displayLabel === "" ? {} : { displayLabel },

package/lib/index.js

@@ -106,7 +106,7 @@ function throttleDir() {
 * @param {() => number} now - clock source.
 * @returns {{code: string, parked: boolean, until: number|null, attempt: number}|null}
 */
-function parse(raw, now) {
+function parse$1(raw, now) {
 	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return null;
 	const body = raw;
 	const version = num(body.version, 0);
@@ -119,7 +119,7 @@ function parse(raw, now) {
 		};
 		const migrated = migrateToCurrent(body);
 		if (migrated === null) return null;
-		return parse({
+		return parse$1({
 			...migrated,
 			version: THROTTLE_VERSION
 		}, now);
@@ -158,7 +158,7 @@ function createFileThrottleStore({ dir = throttleDir(), now = Date.now } = {}) {
 	const file = join(dir, "throttle.json");
 	return {
 		async read() {
-			return parse(await readStateJson(file), now);
+			return parse$1(await readStateJson(file), now);
 		},
 		async write(state) {
 			const temporary = temporaryOf(dir, "throttle.json");
@@ -201,7 +201,7 @@ function createMemoryThrottleStore(now = Date.now) {
 	let held = null;
 	return {
 		async read() {
-			return parse(held, now);
+			return parse$1(held, now);
 		},
 		async write(state) {
 			held = {
@@ -2260,6 +2260,171 @@ function createFileAgnescodeModelsStore(options = {}) {
 	};
 }
 
+//#endregion
+//#region src/host/agnescode-roster-seen-store.ts
+/**
+* dsh-connect-agnes-token-plan — when each AgnesCode roster id was FIRST seen.
+*
+* WHY this exists (and why it is a separate file, not `agnescode-store.ts`): the
+* gateway's catalogue rows carry no "listed since" fact — the model list is the
+* only signal that "a model is new to this user", and it is knowable only by
+* diffing today's roster against a roster THIS plugin wrote down. In memory
+* would do for one process, but the composer pill has to survive a restart to
+* be worth rendering, so the history lives in a state file of its own (the same
+* discipline as `agnescode-stats-store.ts`: one concern, one file, one reader).
+*
+* Semantics, stated once because two consumers read them:
+*  - the FIRST ever write SEEDS: it stamps the whole roster one window back and
+*    announces nothing new — an upgrade must not tell every existing user the
+*    entire roster is brand new;
+*  - an id that LEAVES the roster is dropped, so a model the gateway re-lists
+*    later counts as new again (a re-listing IS a change the reader may want);
+*  - "new" is a WINDOW, not a tick: an id first seen less than
+*    {@link AGNESCODE_ROSTER_NEW_WINDOW_MS} ago stays new across polls, so the
+*    marker does not vanish between two catalogue reads;
+*  - a roster larger than {@link AGNESCODE_ROSTER_SEEN_MAX_IDS} is a shape
+*    drift: nothing is written or announced for its duration (evicting a live
+*    id would re-announce it next poll and the count would oscillate);
+*  - an unrecognised or foreign-version file reads as "no history" (PITFALLS
+*    §23), but the FIRST write over it is REFUSED, not stomped — the ADR-006
+*    discipline. A caller that cannot write degrades to "no marker", never to a
+*    wrong one.
+*
+* The marker is only fed from a LIVE roster: the static fallback table is this
+* plugin's own text, and diffing it would announce our rows as gateway news.
+*
+* @module dsh-connect-agnes-token-plan/agnescode-roster-seen-store
+*/
+/** Shape version, bumped when the persisted form changes incompatibly. */
+const AGNESCODE_ROSTER_SEEN_VERSION = 1;
+/**
+* How long a first sighting keeps reading as "new". Seven days: long enough that
+* a user who opens the panel twice a week still catches it, short enough that a
+* stale marker cannot outlive the model it announces.
+*/
+const AGNESCODE_ROSTER_NEW_WINDOW_MS = 6048e5;
+/**
+* The largest roster one file will track — a SHAPE-DRIFT guard, not a queue.
+* A roster past the cap is read as a broken/looping producer: NOTHING is
+* written or announced for its duration, and the previous map is kept as-is.
+*/
+const AGNESCODE_ROSTER_SEEN_MAX_IDS = 200;
+/** Where the record lives: the SHARED directory, `$DSH_HOME/state/<plugin>`. */
+function agnescodeRosterSeenDir() {
+	return stateDir(name);
+}
+/**
+* Read one persisted map, keeping only well-formed entries. A non-numeric stamp
+* is dropped rather than coerced (a coerced `0` would read as "seen since 1970"
+* and mark nothing new forever). Never throws.
+* @param {unknown} raw - the persisted or posted value.
+* @returns {Record<string, number>} the usable entries (possibly empty).
+*/
+function normalizeRosterSeen(raw) {
+	const source = raw !== null && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+	const seen = {};
+	for (const [id, stamp] of Object.entries(source)) {
+		if (id === "" || typeof stamp !== "number" || !Number.isFinite(stamp) || stamp <= 0) continue;
+		seen[id] = stamp;
+	}
+	return seen;
+}
+/**
+* Keep the map ONLY while the roster is a sane size: a roster past the cap is a
+* shape drift, so NOTHING is written or announced and the previous map survives.
+* @param {Record<string, number>} next - this round's map.
+* @returns {Record<string, number>|null} the map to persist, or `null` to skip.
+*/
+function bounded(next) {
+	return Object.keys(next).length <= 200 ? next : null;
+}
+/** Is the parsed payload a shape THIS build recognises (a known version)? */
+function parse(raw) {
+	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return null;
+	const body = raw;
+	if (body.version !== 1) return null;
+	return { seen: normalizeRosterSeen(body.seen) };
+}
+/**
+* The file-backed first-sighting history.
+* @param {object} [options] - `{ dir, now }` (a clock source for the tests).
+* @returns {object} the store.
+*/
+function createFileAgnescodeRosterSeenStore({ dir = agnescodeRosterSeenDir(), now = Date.now } = {}) {
+	const file = join(dir, "agnescode-roster-seen.json");
+	const readThrough = async () => {
+		const raw = await readStateJson(file);
+		return {
+			raw: raw === null ? null : raw,
+			parsed: parse(raw)
+		};
+	};
+	/** Persist one map (atomic). Refuses to stomp a foreign-version file (ADR-006). */
+	const persist = async (seen) => {
+		const { raw } = await readThrough();
+		if (raw !== null && parse(raw) === null) return;
+		const body = JSON.stringify({
+			version: 1,
+			seen,
+			updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+		const temporary = temporaryOf(dir, "agnescode-roster-seen.json");
+		await ensureStateDir(dir);
+		await writeStateFile(file, body, { temporary });
+	};
+	return {
+		/** The whole first-sighting map. */
+		async seen() {
+			const { parsed } = await readThrough();
+			return parsed?.seen ?? {};
+		},
+		/** Whether this store has ever written a recognisable history. */
+		async isSet() {
+			const { parsed } = await readThrough();
+			return parsed !== null;
+		},
+		/**
+		* Record today's roster and answer which ids still read as new.
+		* @param {string[]} ids - the FULL live roster as the gateway just listed it.
+		* @param {number} [nowMs] - the clock (tests inject it).
+		* @returns {Promise<{newIds: string[]}>} ids first seen inside the window,
+		*   oldest first; empty on the seeding write and on a roster with nothing fresh.
+		*/
+		async note(ids, nowMs = now()) {
+			const list = Array.isArray(ids) ? ids.filter((id) => typeof id === "string" && id !== "") : [];
+			const unique = [...new Set(list)];
+			if (unique.length === 0) return { newIds: [] };
+			const nowT = Number.isFinite(nowMs) ? nowMs : now();
+			const { raw, parsed } = await readThrough();
+			if (raw !== null && parsed === null) return { newIds: [] };
+			const previous = parsed?.seen ?? {};
+			const next = {};
+			const seeded = parsed === null && raw === null;
+			for (const id of unique) {
+				const first = previous[id];
+				next[id] = typeof first === "number" && first > 0 ? Math.min(first, nowT) : seeded ? nowT - AGNESCODE_ROSTER_NEW_WINDOW_MS : nowT;
+			}
+			const trimmed = bounded(next);
+			if (trimmed === null) return { newIds: [] };
+			if (seeded || Object.keys(previous).length !== Object.keys(trimmed).length || Object.keys(trimmed).some((id) => previous[id] !== trimmed[id])) await persist(trimmed);
+			return { newIds: seeded ? [] : Object.entries(trimmed).filter(([, first]) => nowT - first < AGNESCODE_ROSTER_NEW_WINDOW_MS).sort((left, right) => left[1] - right[1]).map(([id]) => id) };
+		},
+		/** Forget the history (the next `note` reseeds). */
+		async forget() {
+			const { raw } = await readThrough();
+			if (raw !== null && parse(raw) === null) return;
+			const body = JSON.stringify({
+				version: 1,
+				seen: {},
+				updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+			});
+			const temporary = temporaryOf(dir, "agnescode-roster-seen.json");
+			await ensureStateDir(dir);
+			await writeStateFile(file, body, { temporary });
+		}
+	};
+}
+
 //#endregion
 //#region src/host/switch-precedence.ts
 /**
@@ -5994,7 +6159,7 @@ function readThroughAgnescode(key, cache, inflight, produce) {
 * @returns {Function} the `off()` unregister callback.
 */
 function registerAgnescodeRoute(ctx, wiring) {
-	const { settings, agnescodeStore, agnescodeSwitch, agnescodePublisher, agnescodeModels, cache, inflight, agnescodeFetch } = wiring;
+	const { settings, agnescodeStore, agnescodeSwitch, agnescodePublisher, agnescodeModels, agnescodeRosterSeen, cache, inflight, agnescodeFetch } = wiring;
 	let lastHarvest = null;
 	let agnescodeHarvestInFlight = null;
 	let agnescodeLoginInFlight = null;
@@ -6067,6 +6232,12 @@ function registerAgnescodeRoute(ctx, wiring) {
 				const publisherState = agnescodePublisher?.state ?? null;
 				const enabledModelIds = agnescodeModels !== null && agnescodeModels !== void 0 ? await agnescodeModels.listEnabledIds().catch(() => []) : [];
 				const { usage, ...rateLimit } = await agnescodeStats.read();
+				let newModelIds;
+				if (liveRoster && agnescodeRosterSeen !== null && agnescodeRosterSeen !== void 0) {
+					const offered = roster.map((r) => r.id).filter((id) => typeof id === "string" && id !== "");
+					const noted = await agnescodeRosterSeen.note(offered);
+					if (noted.newIds.length > 0) newModelIds = noted.newIds;
+				}
 				return {
 					ok: true,
 					enabled: effectiveEnabled,
@@ -6083,6 +6254,7 @@ function registerAgnescodeRoute(ctx, wiring) {
 					models: roster,
 					modelsSource: liveRoster ? "live" : "fallback",
 					...liveRoster ? {} : { modelsAsOf: AGNESCODE_FALLBACK_ASOF },
+					...newModelIds !== void 0 ? { newModelIds } : {},
 					enabledModelIds,
 					providerRegistered: publisherState?.registered === true,
 					...publisherState?.error !== null && publisherState?.error !== void 0 ? { providerError: publisherState.error } : {},
@@ -7760,6 +7932,7 @@ function apply(ctx, config = {}, deps = {}) {
 	const agnescodeStore = createAgnescodeStore({ credentials: () => ctx.get("credentials") ?? null });
 	const agnescodeSwitch = createFileAgnescodeStore({ profile });
 	const agnescodeModels = createFileAgnescodeModelsStore({ profile });
+	const agnescodeRosterSeen = createFileAgnescodeRosterSeenStore();
 	const { publisher: agnescodePublisher, seed: agnescodeSeed } = wireAgnescodePublisher({
 		store: agnescodeStore,
 		panelSwitch: () => agnescodeSwitch.enabled().catch(() => null),
@@ -7806,6 +7979,7 @@ function apply(ctx, config = {}, deps = {}) {
 		agnescodeStore,
 		agnescodeSwitch,
 		agnescodeModels,
+		agnescodeRosterSeen,
 		agnescodePublisher,
 		agnescodeFetch: deps.agnescodeFetch ?? ((url, options) => fetch(url, options))
 	};

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-agnes-token-plan",
   "displayName": "DSH Connect Agnes Token Plan",
   "icon": "./icon.svg",
-  "version": "0.13.1",
+  "version": "0.13.2",
   "description": "One-tap connect Agnes language, image and video models into DSH (off by default), with image recognition and thinking level filled in automatically. After signing in to the Agnes console (re-login uses AGNES_PASSWORD), you can see the quota windows (5-hour requests, weekly requests, daily images, video), account-wide cumulative usage, and a usage pill beside the input box. AgnesCode desktop models can be connected too (Windows only), re-reading the desktop app login when the token expires, with rate-limit hits backing off on their own.",
   "keywords": [
     "dsh-plugin",