dsh-global-todo 0.13.2 → 0.15.0

package/CHANGELOG.md

@@ -1,3 +1,40 @@
+## [0.15.0] — 2026-10-22
+
+Image attachments: a reference that renders, not a copy that goes stale.
+
+- **`kind: "image"` is a third attachment kind** beside `url` and `file`. The path stays an
+  absolute reference — the list still never stores bytes — but it must have a renderable
+  extension (png / jpg / jpeg / webp / gif / avif; SVG is excluded because it can carry script
+  when served inline). A bare path is never guessed into an image: the caller states it.
+- **`GET /asset?id=&index=` serves the bytes**, reading the path out of the store rather than from
+  the request, so there is no traversal surface. Capped at 8 MB with `nosniff`, and only for
+  `image` links — a document link asked through this route is a 400, a missing index a 404.
+- **The panel shows a thumbnail on the row and a preview in the detail**, both lazy, and the
+  existing "file is gone" marker still applies: a dead image renders as a bad chip, not a broken
+  frame.
+- Tool schemas accept `kind: "image"` wherever an attachment does, so an agent can attach a
+  screenshot of what it built.
+
+## [0.14.0] — 2026-10-22
+
+Choose how much surface a deployment pays for.
+
+- **`config.toolGroups`: `all` (10 tools, default), `core` (6 — the list itself) or `none`.**
+  The ten tool schemas cost about **2k tokens per turn**; a deployment that only wants the panel
+  should not pay for a collaboration surface it never asks an agent to use. An unrecognised value
+  is reported and treated as `all`, so a typo cannot silently remove tools.
+- **The guidance section follows the tools.** With `core`/`none` the model is no longer told to
+  call `global_todo_capture`, which would be a call that cannot exist; `none` injects no guidance
+  at all.
+- **`/health` reports `modules`** (`toolGroups`, `registered`, `capture`), and the panel hides the
+  "collect from this conversation" entries when the capture tool is off instead of offering a
+  button that 404s. An older host with no `modules` field is assumed fully on.
+- **Deferred, on purpose**: splitting the package into several Loader rows (one row per module),
+  which the harness does support — `dsh.bundle.patch` may list files and a row may name a package
+  subpath. It buys Plugins-page cards for a user base of three stars; the config key buys the same
+  context saving today. `modules` in `/health` is the protocol that split would need, so it is in
+  place before anyone needs it.
+
 ## [0.13.2] — 2026-10-22
 
 Four gaps the Windows sweep found in the new weight/settings surface (#5).

package/README.md

@@ -211,7 +211,10 @@ Your list is not touched by install or uninstall: it lives outside the plugin, a
 ### The panel
 
 - **Add** — type a title and press Enter. "More fields" reveals the description, the
-  attachment box (one document path or URL per line), tags, priority and a due time.
+  attachment box (one document path or URL per line), tags, priority and a due time. An
+  attachment may also be `{ kind: "image", value: "/abs/shot.png" }` — the row then shows a
+  thumbnail and the detail a preview, with the bytes read on demand (png/jpg/jpeg/webp/gif/avif,
+  ≤8 MB) and never copied into the list.
 - **Filters** — all / open / doing / done / overdue, plus a text search across titles,
   descriptions, tags and attachments. The count chips in the header are filters too.
 - **Grouped by urgency** — overdue / today / next up / later / no due date / done, each
@@ -390,6 +393,7 @@ fence when that service is present, and by a strict loopback check otherwise.
 | POST | `/api/global-todo/review` | `{ id, decision: confirm\|reject }` — answer an agent's completion |
 | GET | `/api/global-todo/report?days=7` | what the agents finished in the window, and the files it touched |
 | GET | `/api/global-todo/session?id=` | what a bound conversation last said (`tail`, `alive`, `dir`) |
+| GET | `/api/global-todo/asset?id=&index=` | the bytes of an **image** attachment (path read from the store, never from the request; ≤8 MB, png/jpg/jpeg/webp/gif/avif) |
 | POST | `/api/global-todo/link` | `{ id, add?: [...], remove?: [value \| index] }` |
 | POST | `/api/global-todo/dispatch` | `{ id, mode?: auto\|bound\|new\|current, sessionId?, dir? }` |
 | POST | `/api/global-todo/assign` | `{ ids, items?, target?, dir? }` — hand several todos over in one call; an id that matches nothing comes back instead of being sent elsewhere |
@@ -434,6 +438,7 @@ topic feeds we have not verified, is [docs/DISTRIBUTION.md](docs/DISTRIBUTION.md
     storePath: /home/me/notes/global-todos.json   # a synced or versioned folder
     dispatchDir: /home/me/projects/thing          # default cwd for a new session
     requireExistingFiles: true                    # refuse a document that is not there yet
+    toolGroups: all                               # all (10 tools) | core (6: the list itself) | none
 ```
 
 The file is the artifact: plain JSON, one record per todo, written through a temp file and
@@ -473,8 +478,11 @@ and [docs/ROADMAP.md](docs/ROADMAP.md) for what could come next.
 npm run check     # parse every file, assert the shipping shape, and — when a DSH
                   # profile is present — validate every tool schema against the
                   # Host's own validator
-npm test          # 257 unit, contract and bundle tests, zero dependencies
-npm run verify    # both
+npm test              # unit, contract and bundle tests, zero dependencies
+npm run verify        # static checks + tests
+npm run check:contracts  # the cross-field matrix a reviewer re-tests by hand:
+                      # one invalid value, one answer, whichever field it lands on
+npm run check:windows    # the same idea on a real filesystem (Windows in CI)
 npm run check:matrix  # the running dsh against engines.dsh, then the manifest,
                       # bundle and tool-schema contracts (no preview writes)
 ```

package/README.zh.md

@@ -188,6 +188,7 @@ dsh plugin --profile web remove dsh-global-todo
 
 ### 面板
 
+- **图片附件**：附件也可以写成 `{ "kind": "image", "value": "/绝对路径/shot.png" }`，行上显示缩略图、详情里显示预览；字节按需读取（png/jpg/jpeg/webp/gif/avif，≤8MB），**不复制进清单**。
 - **添加**：写一句标题回车即存。「更多字段」展开描述、附件框（一行一个文档绝对路径或网址）、
   标签、优先级、截止时间。
 - **筛选**：全部 / 未完成 / 进行中 / 已完成 / 逾期，外加跨标题、描述、标签、附件的文本搜索；
@@ -293,6 +294,7 @@ dsh plugin --profile web remove dsh-global-todo
 | POST | `/api/global-todo/review` | `{ id, decision: confirm\|reject }` —— 回答 Agent 的完成声明 |
 | GET | `/api/global-todo/report?days=7` | 这段时间里 Agent 完成了什么、触及了哪些文件 |
 | GET | `/api/global-todo/session?id=` | 绑定的会话最后说了什么（`tail` / `alive` / `dir`） |
+| GET | `/api/global-todo/asset?id=&index=` | 读**图片附件**的字节（路径只从待办记录里取，不接受请求传路径；≤8MB，png/jpg/jpeg/webp/gif/avif） |
 | POST | `/api/global-todo/link` | `{ id, add?: [...], remove?: [值 或 下标] }` |
 | POST | `/api/global-todo/dispatch` | `{ id, mode?: auto\|bound\|new\|current, sessionId?, dir? }` |
 | POST | `/api/global-todo/assign` | `{ ids, items?, target?, dir? }`——一次把多条交给 Agent；配不上的 id 原样报回，不擅自送到别处 |
@@ -317,6 +319,7 @@ dsh plugin --profile web remove dsh-global-todo
     storePath: /home/me/notes/global-todos.json   # 放进同步盘或版本库
     dispatchDir: /home/me/projects/thing          # 新会话的默认工作目录
     requireExistingFiles: true                    # 文件还不存在就先不让挂
+    toolGroups: all                               # all（10 个工具）| core（6 个：只操作清单）| none
 ```
 
 **文件本身就是产物**：纯 JSON、一条记录一个待办，写入走「临时文件 + rename」，

package/cordis.patch.yml

@@ -24,6 +24,13 @@
         # Inject the short usage guidance into every turn. `false` leaves the tools
         # available but stops asking the model to record things on its own.
         guidance: true
+        # Which Agent tools this deployment registers. The ten schemas cost roughly
+        # 2k tokens per turn, so a deployment that only wants the panel can shed them:
+        #   all   10 tools (default)
+        #   core  6 tools: add / list / get / update / note / done
+        #   none  no tools; the guidance section is skipped too
+        # An unrecognised value is reported and treated as `all`.
+        toolGroups: all
         # Starting point for the panel's built-in folder browser when the shell has
         # no native picker. Empty = home directory, then the Host's cwd.
         browseRoot: ''

package/docs/ROADMAP.md

@@ -148,14 +148,13 @@ reminder) photographed into `docs/screenshots/` by `npm run screenshots`, and
 `npm run check:render` asserting each state's marker.
 ### Partly landed
 
-- **Session read-back** — `sessionAlive` is on every listed todo (`sessionAlive` in
-  `lib/dispatch.js`, surfaced by `GET /list`). Reading what that session last said, and
-  linking to it, is not: `lib/completion.js` reads `assistant/message` only to close a todo
-  this plugin dispatched, and stores one summary in its completion record.
-- **What the agents produced** — the per-todo record with a summary and the changed files landed
-  (`completeTodo()` in `lib/model.js`, 「完成记录」 in `lib/client.js`, the 已完成 filter and
-  group). The cross-todo "what did the sessions finish this week, and what did they touch" view
-  did not.
+- ~~**Session read-back**~~ — landed: `GET /session?id=` returns `alive`, `dir` and the last
+  assistant `tail` (`lib/routes.js`, `sessionTails` in `lib/index.js`), and the detail panel shows
+  that line (`lib/client.js`). It stays cheap and failure-tolerant: a conversation this process
+  has not seen speak answers `null`, which is the normal case for an old hand-off.
+- ~~**What the agents produced**~~ — landed: `GET /report?days=7` aggregates completion records
+  into finished items, conversations, touched files and the review backlog (`lib/report.js`), and
+  the panel shows it from `⋯ → 本周报告`.
 - **Attachment health** — a dead file link is flagged on read, but there is no 「重新挂载」 next
   to it (`relink` does not exist anywhere in `lib/`), and `annotateLinks()` has no unit test:
   today the render assertion in `tools/preview.mjs` is the only coverage.
@@ -177,17 +176,12 @@ plan. `normalizeSteps()` in `lib/model.js`, `dispatchPrompt()` in `lib/service.j
 What is left of the original idea: making a step addressable on its own (a tool that ticks step 3
 without resending the array) — not worth a tenth tool today.
 
-### 2. Session read-back — makes hand-off stop being fire-and-forget
+### 2. ~~Session read-back~~ — landed in 0.12
 
-`sessionAlive` says a bound conversation still exists. Next: one line of its latest
-assistant message plus a link to open it.
-
-- Today: `lib/completion.js` reads `assistant/message` only to close a todo this plugin
-  dispatched; nothing exposes it to the panel.
-- Effort: medium, and it must stay cheap and failure-tolerant: a missing or huge message is
-  a normal case, not an error.
-- Why second: the panel currently cannot answer "did the thing I handed over get anywhere",
-  which is the question people actually ask.
+`GET /session?id=` answers `alive`, `dir` and the last assistant `tail`, and the detail panel
+shows that line instead of a bare "still alive" flag. `lib/completion.js` keeps the tail it
+already reads for its own closing logic; a conversation this process has not seen speak answers
+`null`, which is a normal case rather than an error.
 
 ### 3. ~~Markdown import and export~~ — landed in 0.10.0
 

package/lib/client.js

@@ -40,6 +40,11 @@ window.__ModuleLoader__.load({
     const LOCALE_NS = 'global-todo'
     /** Route prefix, relative to the document base. */
     const API = 'api/global-todo'
+    /**
+     * Where an image attachment's bytes come from. The route reads the path out of the
+     * store, so this URL carries an id and an index — never a filesystem path.
+     */
+    const assetUrl = (id, index) => `${API}/asset?id=${encodeURIComponent(id)}&index=${index}`
     const POLL_MS = 20000
     /** How long a deleted todo can be brought back. */
     const UNDO_MS = 8000
@@ -1329,6 +1334,11 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
 .gt-attach .gt-chip { max-width: 280px; color: var(--dsw-alias-label-secondary); }
 .gt-attach a.gt-chip:hover { color: var(--dsw-alias-label-primary); border-color: var(--dsw-alias-border-l2); }
 .gt-attach-title { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.gt-chip-img { padding: 2px 8px 2px 3px; }
+.gt-thumb { width: 16px; height: 16px; object-fit: cover; border-radius: 999px; display: block; }
+.gt-shot-wrap { display: inline-flex; }
+.gt-shot { width: 84px; height: 56px; object-fit: cover; border-radius: 6px;
+  border: 1px solid var(--dsw-alias-border-l1); background: var(--dsw-alias-bg-layer-2); }
 .gt-menu { position: absolute; top: 40px; right: 10px; z-index: 3; min-width: 184px; display: flex;
   flex-direction: column; padding: 5px; background: var(--dsw-alias-bg-overlay);
   border: 1px solid var(--dsw-alias-border-l2); border-radius: 10px; }
@@ -1935,7 +1945,21 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
                   'div',
                   { className: 'gt-attach' },
                   todo.links.slice(0, MAX_LINK_CHIPS).map((link, index) =>
-                    link.kind === 'url'
+                    link.kind === 'image' && link.missing !== true
+                      ? h(
+                          'a',
+                          {
+                            key: `${index}:${link.value}`,
+                            className: 'gt-chip gt-chip-img',
+                            href: assetUrl(todo.id, index),
+                            target: '_blank',
+                            rel: 'noreferrer noopener',
+                            title: link.value,
+                          },
+                          h('img', { className: 'gt-thumb', src: assetUrl(todo.id, index), alt: link.title, loading: 'lazy' }),
+                          h('span', { className: 'gt-attach-title' }, link.title),
+                        )
+                      : link.kind === 'url'
                       ? h(
                           'a',
                           {
@@ -2376,6 +2400,19 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
                         h(
                           'li',
                           { className: 'gt-link', key: `${link.kind}:${link.value}` },
+                          link.kind === 'image' && link.missing !== true
+                            ? h(
+                                'a',
+                                {
+                                  className: 'gt-shot-wrap',
+                                  href: assetUrl(todo.id, index),
+                                  target: '_blank',
+                                  rel: 'noreferrer noopener',
+                                  title: link.value,
+                                },
+                                h('img', { className: 'gt-shot', src: assetUrl(todo.id, index), alt: link.title, loading: 'lazy' }),
+                              )
+                            : null,
                           h(
                             'span',
                             { className: 'gt-link-main' },
@@ -3089,6 +3126,9 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
 
       // The two toggles belong with the other "how this panel behaves" controls, not in
       // the title row.
+      // Absent modules (an older host) means everything is on; a switched-off capture tool
+      // means the group action would ask for a tool that cannot exist.
+      const captureOn = state.health?.modules?.capture !== false
       const settingsOn = state.health?.settings?.autoCollect === true
       // The Host already knows why it stayed quiet; the switch's tooltip is the cheapest
       // place to show it, and "nothing ever happens" stops being a mystery.
@@ -4789,7 +4829,7 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
                             )
                           : null,
                         [
-                          group.sessionId === undefined
+                          group.sessionId === undefined || !captureOn
                             ? null
                             : {
                                 key: 'capture',
@@ -4810,7 +4850,7 @@ button.gt-chip[data-on="1"] { color: var(--dsw-alias-label-primary); border-colo
                           : h(Menu, {
                               label: t('group.actions'),
                               items: [
-                                group.sessionId === undefined
+                                group.sessionId === undefined || !captureOn
                                   ? null
                                   : {
                                       key: 'capture',

package/lib/index.js

@@ -34,10 +34,10 @@ import { LIMITS } from './model.js'
 import { ROUTE_BASE, createRoutes } from './routes.js'
 import { createService } from './service.js'
 import { createStore, resolveStorePath } from './store.js'
-import { createTools } from './tools.js'
+import { createTools, normalizeToolGroups, selectTools } from './tools.js'
 
 /** Must equal `package.json`'s version; `npm run check` enforces that. */
-export const VERSION = '0.13.2'
+export const VERSION = '0.15.0'
 
 /** Plugin id. Also the Loader row id in `cordis.patch.yml`. */
 export const name = 'dsh-global-todo'
@@ -49,6 +49,15 @@ export const DEFAULTS = Object.freeze({
   activityLimit: LIMITS.activity,
   requireExistingFiles: true,
   guidance: true,
+  /**
+   * Which agent tools this deployment registers: `all` (10), `core` (6, the list
+   * itself) or `none`.
+   *
+   * The schemas cost about 2k tokens per turn; a deployment that only wants the
+   * panel should not pay for the collaboration surface. An unrecognised value is
+   * reported and treated as `all`, because a typo must not silently remove tools.
+   */
+  toolGroups: 'all',
   // Starting point for the built-in folder browser when the shell has no picker.
   // Documented here because a patch override replaces `config` wholesale and has
   // to restate every key it wants to keep.
@@ -65,6 +74,24 @@ export const DEFAULTS = Object.freeze({
  *
  * Kept short on purpose: it is injected on every turn.
  */
+/**
+ * The guidance section for a tool-group mode: no tools, no instructions.
+ *
+ * Telling the model to use `global_todo_capture` when that tool was switched off
+ * is worse than saying nothing — it produces a call that cannot exist.
+ *
+ * @param {string} mode
+ * @returns {string} an empty string when nothing is registered
+ */
+export function guidanceFor(mode) {
+  const wanted = normalizeToolGroups(mode)
+  if (wanted === 'none') return ''
+  if (wanted === 'all') return GUIDANCE
+  return GUIDANCE.split('\n')
+    .filter((line) => !line.includes('global_todo_capture') && !line.includes('抓一下待办'))
+    .join('\n')
+}
+
 const GUIDANCE = [
   '【全局待办】一份跨会话、跨工作区、人和你共用的待办清单（`global_todo_*` 工具）。它和内置 `todo_write` 不是一回事：那个是你这个会话的计划，这份属于用户、跨会话保留。',
   '',
@@ -503,8 +530,15 @@ export function apply(ctx, config) {
     toolCtx.effect(() => {
       try {
         const definitions = createTools(service, { metrics, settings })
-        const disposers = definitions.map((definition) => toolCtx.tools.register(definition))
-        toolState.registered = definitions.map((definition) => definition.name)
+        const mode = normalizeToolGroups(resolved.toolGroups)
+        if (resolved.toolGroups !== mode) {
+          // A typo in `config.toolGroups` must be visible, not silently `all`.
+          logger?.warn?.(`dsh-global-todo: 未知的 toolGroups=${String(resolved.toolGroups)}，按 all 处理`)
+        }
+        const selected = selectTools(definitions, mode)
+        const disposers = selected.map((definition) => toolCtx.tools.register(definition))
+        toolState.registered = selected.map((definition) => definition.name)
+        toolState.mode = mode
         toolState.error = null
         toolCtx.logger?.info?.(`dsh-global-todo: 注册了 ${definitions.length} 个 Agent 工具`)
         return () => {
@@ -555,6 +589,13 @@ export function apply(ctx, config) {
         autoCollect: autoCollectState,
         reminders: reminderState,
         version: VERSION,
+        // What this deployment actually exposes, for the panel to hide absent entries and
+        // for a check to tell "switched off" apart from "failed to register".
+        modulesInfo: () => ({
+          toolGroups: normalizeToolGroups(resolved.toolGroups),
+          registered: toolState.registered.slice(),
+          capture: toolState.registered.includes('global_todo_capture'),
+        }),
         // What is on disk, which after an upgrade is not what this process is running.
         // The panel talks to a tree that changed under it; /health is where that is visible.
         diskVersion,
@@ -573,13 +614,14 @@ export function apply(ctx, config) {
     }, 'dsh-global-todo: web routes')
   })
 
-  if (resolved.guidance !== false) {
+  const guidanceText = guidanceFor(resolved.toolGroups)
+  if (resolved.guidance !== false && guidanceText !== '') {
     ctx.inject(['systemPrompt'], (promptCtx) => {
       try {
         const dispose = promptCtx.systemPrompt.section({
           name: 'dsh-global-todo:guidance',
           order: 3040,
-          text: GUIDANCE,
+          text: guidanceText,
         })
         return () => {
           try {

package/lib/links.js

@@ -17,8 +17,28 @@
 
 import { TodoError } from './errors.js'
 
-/** Accepted attachment kinds. */
-export const LINK_KINDS = Object.freeze(['url', 'file'])
+/**
+ * Accepted attachment kinds.
+ *
+ * `image` is a reference like `file` — the bytes stay where they are — but it is
+ * declared rather than inferred, because the panel renders it and a guess would
+ * turn a random document into a broken thumbnail. The list still never copies
+ * bytes; `GET /asset` reads the referenced file on demand.
+ */
+export const LINK_KINDS = Object.freeze(['url', 'file', 'image'])
+
+/** Extensions the panel can actually render. SVG is excluded: served inline from the same
+ * origin it can carry script. */
+export const IMAGE_EXTENSIONS = Object.freeze(['.png', '.jpg', '.jpeg', '.webp', '.gif', '.avif'])
+
+/**
+ * @param {string} value
+ * @returns {boolean} whether the path looks like a renderable image
+ */
+export function isImagePath(value) {
+  const lower = String(value ?? '').toLowerCase()
+  return IMAGE_EXTENSIONS.some((extension) => lower.endsWith(extension))
+}
 
 const MAX_URL = 2048
 const MAX_PATH = 4096
@@ -27,6 +47,8 @@ const MAX_TITLE = 200
 /**
  * Guess the kind of a bare string attachment.
  *
+ * `image` is never inferred: it is a rendering decision the caller states.
+ *
  * @param {string} value
  * @returns {'url' | 'file'}
  */
@@ -91,6 +113,9 @@ export function normalizeLink(input, options = {}) {
   if (!isAbsolutePath(value)) {
     throw new TodoError('invalid-link', `文档请给绝对路径（相对路径会在不同会话下指向不同文件）：${value}`)
   }
+  if (kind === 'image' && !isImagePath(value)) {
+    throw new TodoError('invalid-link', `图片附件需要图片扩展名（${IMAGE_EXTENSIONS.join(' / ')}）：${value}`)
+  }
   if (options.requireExistingFiles === true && typeof options.exists === 'function' && !options.exists(value)) {
     throw new TodoError('invalid-link', `找不到这个文件：${value}`)
   }
@@ -113,7 +138,7 @@ export function isAbsolutePath(value) {
  * @returns {string}
  */
 export function defaultLinkTitle(kind, value) {
-  if (kind === 'file') {
+  if (kind === 'file' || kind === 'image') {
     const parts = value.split(/[\\/]/).filter(Boolean)
     return parts.length === 0 ? value : parts[parts.length - 1]
   }

package/lib/routes.js

@@ -21,7 +21,7 @@
  */
 
 import { createHash, timingSafeEqual } from 'node:crypto'
-import { readdir, stat } from 'node:fs/promises'
+import { readFile, readdir, stat } from 'node:fs/promises'
 import { homedir } from 'node:os'
 import path from 'node:path'
 
@@ -81,6 +81,21 @@ export function isLoopbackRequest(request) {
  * @param {number} status
  * @param {unknown} body
  */
+/** Cap for an inline image; a screenshot is a few hundred KB, a 4K render is not. */
+const MAX_ASSET_BYTES = 8 * 1024 * 1024
+
+/**
+ * @param {string} file
+ * @returns {string} the content type for a served image extension
+ */
+function mimeForImage(file) {
+  const lower = String(file).toLowerCase()
+  if (lower.endsWith('.png')) return 'image/png'
+  if (lower.endsWith('.webp')) return 'image/webp'
+  if (lower.endsWith('.gif')) return 'image/gif'
+  if (lower.endsWith('.avif')) return 'image/avif'
+  return 'image/jpeg'
+}
 function sendJson(response, status, body) {
   const payload = JSON.stringify(body)
   response.statusCode = status
@@ -403,6 +418,38 @@ export function createRoutes(deps) {
      * Derived, never stored: completion records already hold the facts, and a cached
      * aggregate would be a second truth to keep honest.
      */
+
+    /**
+     * Serve the bytes of an image attachment.
+     *
+     * The path comes from the store, never from the request: the caller names a todo and
+     * a link index, so there is no traversal surface here. The list still stores only a
+     * reference; this route reads the file when the panel needs a thumbnail.
+     */
+    exact('GET', `${ROUTE_BASE}/asset`, async (request, response) => {
+      const query = params(request)
+      const id = (query.get('id') ?? '').trim()
+      const index = Number.parseInt(query.get('index') ?? '', 10)
+      if (id === '' || !Number.isInteger(index) || index < 0) {
+        throw new TodoError('invalid-body', 'asset 需要 id 与 index')
+      }
+      const todo = await service.get(id)
+      const link = (todo.links ?? [])[index]
+      if (link === undefined) throw new TodoError('not-found', '这条待办没有这个附件')
+      if (link.kind !== 'image') throw new TodoError('invalid-link', '只有图片附件可以这样读取')
+      const info = await stat(link.value).catch(() => null)
+      if (info === null || info.isFile() !== true) throw new TodoError('not-found', '图片不在了')
+      if (info.size > MAX_ASSET_BYTES) {
+        throw new TodoError('payload-too-large', `图片超过 ${Math.round(MAX_ASSET_BYTES / 1024 / 1024)}MB`)
+      }
+      const bytes = await readFile(link.value)
+      response.statusCode = 200
+      response.setHeader('content-type', mimeForImage(link.value))
+      response.setHeader('cache-control', 'no-store')
+      response.setHeader('x-content-type-options', 'nosniff')
+      response.end(bytes)
+    }),
+
     exact('GET', `${ROUTE_BASE}/report`, async (request) => {
       const days = Number.parseInt(params(request).get('days') ?? '', 10)
       const todos = await service.listAll()
@@ -438,6 +485,10 @@ export function createRoutes(deps) {
         // Tool registration is the surface that fails quietly, so it is reported
         // rather than assumed.
         tools: deps.tools ?? { registered: [], error: null },
+        // Which optional surfaces this deployment has. The panel hides entries it cannot
+        // call, and a check can tell "switched off" (mode/registered) from "failed"
+        // (tools.error above). Absent on an older host → assume everything is on.
+        modules: deps.modulesInfo?.() ?? { toolGroups: 'all', registered: [], capture: true },
         // Automatic completion is the other surface that can fail quietly: if the
         // session watcher did not attach, the only symptom would be todos that
         // never finish themselves.

package/lib/tools.js

@@ -52,14 +52,14 @@ const STEPS_SHAPE = {
 const LINKS_INPUT = {
   type: 'array',
   description:
-    '相关文档与地址。字符串写法按内容自动判别：http(s):// 开头算地址，其余必须是以 / 或盘符开头的绝对路径（文档原地引用，不复制内容）。也可给对象 { kind: "url"|"file", value, title }。',
+    '相关文档与地址。字符串写法按内容自动判别：http(s):// 开头算地址，其余必须是以 / 或盘符开头的绝对路径（文档原地引用，不复制内容）。也可给对象 { kind: "url"|"file"|"image", value, title }；kind:"image" 用于截图，必须是图片路径（png/jpg/jpeg/webp/gif/avif），面板会显示缩略图。',
   items: {
     oneOf: [
       { type: 'string' },
       {
         type: 'object',
         properties: {
-          kind: { type: 'string', enum: ['url', 'file'] },
+          kind: { type: 'string', enum: ['url', 'file', 'image'] },
           value: { type: 'string' },
           title: { type: 'string' },
         },
@@ -136,7 +136,7 @@ const TODO_SHAPE = {  type: 'object',
       items: {
         type: 'object',
         properties: {
-          kind: { type: 'string', enum: ['url', 'file'] },
+          kind: { type: 'string', enum: ['url', 'file', 'image'] },
           value: { type: 'string' },
           title: { type: 'string' },
         },
@@ -325,6 +325,40 @@ function originOf(exec) {
  * @param {{ now?: () => number, metrics?: object }} [options]
  * @returns {object[]} definitions for `ctx.tools.register`
  */
+/**
+ * Which tools a deployment gets. `core` is the list itself; `all` adds the
+ * collaboration surface (batch capture, attachments, delete, reopen).
+ *
+ * The ten tool schemas are about 2k tokens per turn, which is real money for a
+ * deployment that only wants a todo list and never asks an agent to touch it.
+ * A config value is enough to shed that; splitting the package into several
+ * Loader rows is the heavier option, deferred until adoption asks for it.
+ */
+export const TOOL_GROUPS = Object.freeze({
+  core: Object.freeze(['global_todo_add', 'global_todo_list', 'global_todo_get', 'global_todo_update', 'global_todo_note', 'global_todo_done']),
+  advanced: Object.freeze(['global_todo_capture', 'global_todo_link', 'global_todo_remove', 'global_todo_reopen']),
+})
+
+/**
+ * @param {string} value
+ * @returns {'all' | 'core' | 'none'} one of the supported modes
+ */
+export function normalizeToolGroups(value) {
+  return value === 'core' || value === 'none' || value === 'all' ? value : 'all'
+}
+
+/**
+ * @param {{ name: string }[]} definitions
+ * @param {'all' | 'core' | 'none'} mode
+ * @returns {{ name: string }[]} the subset this mode registers
+ */
+export function selectTools(definitions, mode) {
+  const wanted = normalizeToolGroups(mode)
+  if (wanted === 'none') return []
+  if (wanted === 'all') return definitions
+  return definitions.filter((definition) => TOOL_GROUPS.core.includes(definition.name))
+}
+
 export function createTools(service, options = {}) {
   const now = options.now ?? (() => Date.now())
   // Read lazily: the settings object is created before the tools and its value can change
@@ -781,7 +815,7 @@ export function createTools(service, options = {}) {
             items: {
               type: 'object',
               properties: {
-                kind: { type: 'string', enum: ['url', 'file'] },
+                kind: { type: 'string', enum: ['url', 'file', 'image'] },
                 value: { type: 'string' },
                 title: { type: 'string' },
               },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-global-todo",
-  "version": "0.13.2",
+  "version": "0.15.0",
   "icon": "./docs/icon.svg",
   "description": "Cross-session todo list for DeepSeek Harness: one JSON file a person and an agent both write to, with step plans that ship as a numbered hand-off, session read-back, and a human confirmation before an agent's \"done\" counts.",
   "type": "module",
@@ -73,6 +73,7 @@
     "check": "node scripts/check.mjs",
     "doctor": "node tools/doctor.mjs",
     "check:windows": "node tools/windows-check.mjs",
+    "check:contracts": "node tools/contracts-check.mjs",
     "notify": "node tools/notify.mjs",
     "test": "node --test \"test/**/*.test.mjs\"",
     "verify": "npm run check && npm run check:render && npm test",