dsh-plugin-model-tuning 2.0.1

package/cordis.patch.yml

@@ -0,0 +1,24 @@
+# dsh-plugin-model-tuning v2 — 自 wiring + 显式替换宿主自带的标题生成行。
+#
+# 顺序即语义：
+#   1. 先 disable dsh-base 的 `session-title-llm` 行（@deepseek-ai/dsh-session-title-first-prompt-llm）。
+#      `ctx.sessionTitle.register()` 只允许一个 provider，第二次注册直接抛错，
+#      所以必须先摘掉原行再插入本行；反过来 boot 会失败。
+#   2. 再 insert 本包（v2 起一个包承担：模型参数页 + 标题路由 + 绘图工具/面板）。
+#
+# config 中标题预算字段与 dsh-base 的 `session-title-llm` 完全一致，因此无论
+# 设置处于默认「继承」还是被卸载回退，标题生成的提示词预算、字节上限、
+# 超时行为都不变。绘图 models/defaultModel 与标题 titleMode/titleProvider/
+# titleModel 是 volatile 字段，热更新即时生效。
+- id: session-title-llm
+  disabled: true
+
+- insert:
+    - id: model-tuning
+      name: dsh-plugin-model-tuning
+      config:
+        targetWords: 5
+        targetCjkCharacters: 10
+        maxInputBytes: 4096
+        maxOutputTokens: 64
+        timeoutMs: 60000

package/core.js

@@ -0,0 +1,218 @@
+/** Images API transport. No credentials or remote response bodies enter errors. */
+export const MAX_IMAGES = 4
+export const MAX_IMAGE_BYTES = 20 * 1024 * 1024
+const MAX_RESPONSE_BYTES = 112 * 1024 * 1024
+const PARAMS = ['size', 'quality', 'background', 'output_format', 'response_format', 'style']
+
+function fail(message) { throw new Error(message) }
+function object(value) { return value !== null && typeof value === 'object' && !Array.isArray(value) }
+
+export function httpUrl(value, label) {
+  let url
+  try { url = new URL(value) } catch { fail(`${label} 必须是完整的 HTTP(S) 地址。`) }
+  if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.hash || url.search) {
+    fail(`${label} 不得包含凭据、查询参数或片段，且必须使用 HTTP(S)。`)
+  }
+  return url
+}
+
+/** Preserve custom prefixes; accept either an API base or a full Images endpoint. */
+export function discoveryUrl(endpoint, modelsEndpoint) {
+  const generation = httpUrl(endpoint, '供应商地址')
+  if (modelsEndpoint) {
+    const listing = httpUrl(modelsEndpoint, '模型列表接口')
+    if (listing.origin !== generation.origin) fail('模型列表接口必须与生成接口同源，避免向其他供应商发送凭据。')
+    return listing.href
+  }
+  generation.pathname = generation.pathname.replace(/\/+$/, '').replace(/\/images\/generations$/, '') + '/models'
+  return generation.href
+}
+
+/** Read a supplier's catalog without saving a draft model or its typed secret. */
+export async function discoverImageModels({ request, resolveKey, signal, fetchImpl = fetch }) {
+  if (!object(request) || typeof request.endpoint !== 'string') fail('请先填写供应商地址。')
+  if (request.modelsEndpoint !== undefined && typeof request.modelsEndpoint !== 'string') fail('模型列表接口必须是地址。')
+  if (request.apiKeyEnv && (typeof request.apiKeyEnv !== 'string' || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(request.apiKeyEnv))) fail('凭据引用必须是有效的环境变量名。')
+  if (request.apiKey !== undefined && (typeof request.apiKey !== 'string' || request.apiKey.length > 16384 || /[\r\n]/.test(request.apiKey))) fail('API Key 格式无效。')
+  const url = discoveryUrl(request.endpoint, request.modelsEndpoint)
+  const controller = new AbortController()
+  const timer = setTimeout(() => controller.abort(new Error('获取模型列表超时，请检查服务地址或手动填写模型 ID。')), 20000)
+  const combined = signal ? AbortSignal.any([signal, controller.signal]) : controller.signal
+  try {
+    combined.throwIfAborted()
+    const key = request.apiKey || (request.apiKeyEnv ? await resolveKey(request.apiKeyEnv) : undefined)
+    if (request.apiKeyEnv && !key) fail(`未找到可用凭据 ${request.apiKeyEnv}。请填写 API Key 或选择已有凭据引用。`)
+    if (key && (typeof key !== 'string' || /[\r\n]/.test(key))) fail('API Key 格式无效。')
+    const response = await checkedFetch(fetchImpl, url, {
+      method: 'GET', redirect: 'error', signal: combined,
+      headers: { Accept: 'application/json', ...(key ? { Authorization: `Bearer ${key}` } : {}) },
+    })
+    let payload
+    const raw = await readBounded(response, 2 * 1024 * 1024, combined)
+    try { payload = JSON.parse(raw.toString('utf8')) } catch { fail('模型列表接口未返回有效 JSON，可在高级设置中指定列表地址或手动填写模型 ID。') }
+    if (!Array.isArray(payload?.data)) fail('模型列表应包含 data 数组；当前供应商可能不支持该接口，请手动填写模型 ID。')
+    if (payload.data.length > 10000) fail('供应商返回的模型列表过大。')
+    const models = new Map()
+    for (const item of payload.data) {
+      if (!object(item) || typeof item.id !== 'string' || !item.id.trim() || item.id.length > 256) continue
+      if (!models.has(item.id)) models.set(item.id, { id: item.id,
+        name: typeof item.name === 'string' && item.name.trim() ? item.name.slice(0, 256) : item.id })
+    }
+    if (payload.data.length && !models.size) fail('供应商列表没有有效的模型 ID。')
+    return { models: [...models.values()], truncated: payload.has_more === true }
+  } finally { clearTimeout(timer) }
+}
+
+/** Validate cross-field settings both at registration and before a paid call. */
+export function validateConfig(config) {
+  const ids = new Set()
+  for (const entry of config.models ?? []) {
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(entry.id)) fail('绘图配置 ID 只能包含字母、数字、下划线和连字符。')
+    if (ids.has(entry.id)) fail(`绘图配置 ID 重复：${entry.id}`)
+    ids.add(entry.id)
+    if (typeof entry.model !== 'string' || !entry.model.trim() || entry.model.length > 256) fail('必须填写绘图模型 ID（最长 256 字符）。')
+    if (entry.api !== 'openai-images') fail('当前只支持 openai-images 协议。')
+    httpUrl(entry.endpoint, '生成接口')
+    if (entry.modelsEndpoint) discoveryUrl(entry.endpoint, entry.modelsEndpoint)
+    if (entry.apiKeyEnv && !/^[A-Za-z_][A-Za-z0-9_]*$/.test(entry.apiKeyEnv)) fail('凭据引用必须是有效的环境变量名。')
+    if (!Number.isInteger(entry.timeoutSeconds) || entry.timeoutSeconds < 10 || entry.timeoutSeconds > 600) fail('超时必须在 10–600 秒之间。')
+    for (const field of PARAMS) {
+      if (entry[field] !== undefined && (typeof entry[field] !== 'string' || entry[field].length > 128)) fail(`无效的 ${field}。`)
+    }
+  }
+  if (config.defaultModel && !ids.has(config.defaultModel)) fail('默认绘图配置不存在。')
+}
+
+export function resolveRequest(config, args) {
+  validateConfig(config)
+  if (!object(args)) fail('绘图参数必须是对象。')
+  const id = args.model ?? config.defaultModel ?? ''
+  const entries = config.models ?? []
+  const entry = entries.find(item => item.id === id) ?? (!id && entries.length === 1 ? entries[0] : undefined)
+  if (!entry) fail('请先在「设置 → 模型调参 → 绘图」添加模型并选择默认项，或用 list_image_models 查看可选 ID。')
+  if (typeof args.prompt !== 'string' || !args.prompt.trim() || args.prompt.length > 32000) fail('提示词不能为空，且不能超过 32000 字符。')
+  const n = args.n ?? 1
+  if (!Number.isInteger(n) || n < 1 || n > MAX_IMAGES) fail(`每次只能生成 1–${MAX_IMAGES} 张图片。`)
+  const body = { model: entry.model, prompt: args.prompt, n }
+  for (const field of PARAMS) {
+    const value = args[field] ?? entry[field]
+    if (value !== undefined && value !== '') {
+      if (typeof value !== 'string' || value.length > 128) fail(`无效的 ${field}。`)
+      body[field] = value
+    }
+  }
+  // Unspecified parameters remain absent; GPT Image does not accept response_format.
+  return { entry, body }
+}
+
+async function readBounded(response, limit, signal) {
+  if (Number(response.headers.get('content-length')) > limit) {
+    await response.body?.cancel()
+    fail('接口返回内容超过大小限制。')
+  }
+  if (!response.body) fail('接口返回空内容。')
+  const reader = response.body.getReader()
+  const chunks = []
+  let size = 0
+  try {
+    while (true) {
+      signal.throwIfAborted()
+      const { done, value } = await reader.read()
+      if (done) break
+      size += value.byteLength
+      if (size > limit) fail('接口返回内容超过大小限制。')
+      chunks.push(value)
+    }
+  } finally {
+    await reader.cancel().catch(() => {}) // Cleanup cannot replace the original transport error.
+    reader.releaseLock()
+  }
+  return Buffer.concat(chunks, size)
+}
+
+async function checkedFetch(fetchImpl, url, options) {
+  let response
+  try { response = await fetchImpl(url, options) } catch (error) {
+    if (options.signal.aborted) throw options.signal.reason
+    throw new Error('绘图服务连接失败，请检查地址与网络。', { cause: error })
+  }
+  if (!response.ok) {
+    await response.body?.cancel()
+    fail(`绘图服务返回 HTTP ${response.status}。请检查接口、凭据、模型权限和参数；未自动重试。`)
+  }
+  return response
+}
+
+/** Detect the bytes, rather than trusting response headers or a configured format. */
+export function imageType(data) {
+  if (data.length >= 8 && data.subarray(0, 8).equals(Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]))) return 'image/png'
+  if (data.length >= 3 && data[0] === 255 && data[1] === 216 && data[2] === 255) return 'image/jpeg'
+  if (data.length >= 12 && data.toString('ascii', 0, 4) === 'RIFF' && data.toString('ascii', 8, 12) === 'WEBP') return 'image/webp'
+  if (['GIF87a', 'GIF89a'].includes(data.toString('ascii', 0, 6))) return 'image/gif'
+  fail('接口返回的内容不是支持的 PNG、JPEG、WebP 或 GIF 图片。')
+}
+
+async function imageBytes(item, entry, fetchImpl, signal) {
+  if (typeof item.b64_json === 'string' && item.b64_json) {
+    const encoded = item.b64_json
+    if (encoded.length > Math.ceil(MAX_IMAGE_BYTES / 3) * 4 || encoded.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(encoded)) fail('图片 Base64 无效或超过 20 MiB。')
+    const bytes = Buffer.from(encoded, 'base64')
+    if (bytes.toString('base64') !== encoded) fail('图片 Base64 编码无效。')
+    if (bytes.length > MAX_IMAGE_BYTES) fail('图片超过 20 MiB。')
+    return bytes
+  }
+  if (typeof item.url !== 'string') fail('接口没有返回 b64_json 或图片 URL。')
+  let url
+  try { url = new URL(item.url) } catch { fail('接口返回无效图片 URL。') }
+  // Any host is accepted: a gateway may host results on a CDN, and pinning an
+  // origin list here only broke that. `redirect: 'error'` below still refuses a
+  // response that tries to bounce the download somewhere else, and the scheme,
+  // credential, and fragment checks keep the fetch to a plain public URL.
+  if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password) {
+    fail('图片 URL 必须是公开的 HTTP(S) 地址。')
+  }
+  const response = await checkedFetch(fetchImpl, url, { signal, redirect: 'error' })
+  return readBounded(response, MAX_IMAGE_BYTES, signal)
+}
+
+/** One POST only: transport retries can create and bill for duplicate images. */
+export async function generateImages({ config, args, resolveKey, attachments, signal, fetchImpl = fetch }) {
+  const { entry, body } = resolveRequest(config, args)
+  const controller = new AbortController()
+  const timer = setTimeout(() => controller.abort(new Error('绘图请求超时；服务端可能仍在生成，请勿立即重复提交。')), entry.timeoutSeconds * 1000)
+  const combined = signal ? AbortSignal.any([signal, controller.signal]) : controller.signal
+  try {
+    combined.throwIfAborted()
+    const key = entry.apiKeyEnv ? await resolveKey(entry.apiKeyEnv) : undefined
+    if (entry.apiKeyEnv && (!key || /[\r\n]/.test(key))) fail(`未找到可用凭据 ${entry.apiKeyEnv}。请在设置中保存 API Key。`)
+    const response = await checkedFetch(fetchImpl, entry.endpoint, {
+      method: 'POST', redirect: 'error', signal: combined,
+      headers: { 'Content-Type': 'application/json', ...(key ? { Authorization: `Bearer ${key}` } : {}) },
+      body: JSON.stringify(body),
+    })
+    const raw = await readBounded(response, MAX_RESPONSE_BYTES, combined)
+    let payload
+    try { payload = JSON.parse(raw.toString('utf8')) } catch { fail('绘图接口未返回有效 JSON；请确认使用的是 Images API。') }
+    if (!Array.isArray(payload?.data) || payload.data.length === 0 || payload.data.length > body.n) fail('绘图响应没有图片，或返回数量超过请求数量。')
+    const inputs = []
+    for (const item of payload.data) {
+      if (!object(item)) fail('绘图响应中存在无效的图片条目。')
+      combined.throwIfAborted()
+      const data = await imageBytes(item, entry, fetchImpl, combined)
+      const mediaType = imageType(data)
+      inputs.push({ data, mediaType, name: `generated-${inputs.length + 1}.${mediaType.split('/')[1]}` })
+    }
+    combined.throwIfAborted()
+    // AttachmentStore validates the entire batch before writing any previews.
+    const previews = await attachments.saveImages(inputs)
+    const images = []
+    for (let i = 0; i < inputs.length; i++) {
+      combined.throwIfAborted()
+      const original = await attachments.saveFile({ data: inputs[i].data, name: inputs[i].name })
+      const path = attachments.fileHostPath(original)
+      images.push({ preview: previews[i], original, mediaType: inputs[i].mediaType, ...(path ? { path } : {}),
+        ...(typeof payload.data[i].revised_prompt === 'string' ? { revisedPrompt: payload.data[i].revised_prompt.slice(0, 32000) } : {}) })
+    }
+    return { model: entry.id, prompt: args.prompt, images }
+  } finally { clearTimeout(timer) }
+}

package/index.js

@@ -0,0 +1,366 @@
+/**
+ * Host half of `dsh-plugin-model-tuning` (v2: merged with the former
+ * `dsh-plugin-title-model` and `dsh-plugin-image-generation`).
+ *
+ * Three responsibilities, one entry:
+ *
+ * 1. Session-title routing (ex dsh-plugin-title-model). This plugin REPLACES
+ *    the deployment's shipped title provider row
+ *    (`@deepseek-ai/dsh-session-title-first-prompt-llm`) through the bundle
+ *    patch in `cordis.patch.yml`. It is still exactly one provider:
+ *    `ctx.sessionTitle.register()` throws on a second registration, so a
+ *    competing generator cannot coexist. Everything except the route is
+ *    delegated to the public shared policy `generateSessionTitleWithLlm` from
+ *    `@deepseek-ai/dsh-session-title-llm`, resolved from the RUNNING
+ *    deployment (see hostRequire) — never from this package's directory, which
+ *    for a linked workspace package would risk a second copy of the host's
+ *    shared module graph.
+ *
+ * 2. Image generation (ex dsh-plugin-image-generation): the `generate_image`
+ *    and `list_image_models` tools plus the `imageGeneration` Remote service
+ *    that the 直接绘图 panel drives. Transport lives in `./core.js`.
+ *
+ * 3. Nothing else: the settings surface (模型参数 / 用途 / 绘图 tabs) lives in
+ *    the browser implementation exported from `./client`.
+ *
+ * @module dsh-plugin-model-tuning
+ */
+import { randomUUID } from 'node:crypto'
+import { pathToFileURL } from 'node:url'
+import { createRequire } from 'node:module'
+import z from '@deepseek-ai/schemastery'
+import { defineTool } from '@deepseek-ai/dsh-tools'
+import { TypertRemoteService, RemoteError } from '@deepseek-ai/dsh-typert-protocol'
+import { discoverImageModels, generateImages, resolveRequest, validateConfig } from './core.js'
+
+export const name = 'dsh-plugin-model-tuning'
+
+/** Services this plugin reads. */
+export const inject = ['tools', 'attachments', 'sessionTitle', 'llm']
+
+/** Settings namespace owned by this plugin (one entry, one schema). */
+export const NS = 'model-tuning'
+
+/**
+ * Provider identity recorded with generated titles. Kept equal to the row this
+ * plugin replaces so durable logs and the folded title source stay unchanged.
+ */
+const TITLE_PROVIDER_ID = 'session-title-llm'
+
+/**
+ * Unified Config: image-generation fields (models / defaultModel) plus the
+ * title route fields (titleMode / titleProvider / titleModel), all volatile.
+ *
+ * The title budget fields mirror the `session-title-llm` config in
+ * `@deepseek-ai/dsh-base` so that removing this bundle's `config:` block
+ * cannot change title behaviour. Title fields are prefixed `title` so the
+ * pre-merge `title-model` section could be migrated mechanically; the former
+ * `image-generation` section's `models`/`defaultModel` keys are kept verbatim.
+ */
+const imageModelSchema = z.object({
+  id: z.string().required(), name: z.string(), model: z.string().required(),
+  api: z.union(['openai-images']).default('openai-images'),
+  endpoint: z.string().default('https://api.openai.com/v1/images/generations'), apiKeyEnv: z.string().role('credential-ref'),
+  modelsEndpoint: z.string(),
+  // Retained so sections written by earlier versions still parse. Results
+  // returned as URLs are downloaded from whatever host the gateway names; the
+  // scheme and redirect checks in core.js are what bound that fetch now.
+  downloadOrigins: z.array(z.string()).default([]),
+  timeoutSeconds: z.number().step(1).min(10).max(600).default(300),
+  size: z.string(), quality: z.string(), background: z.string(),
+  output_format: z.string(), response_format: z.string(), style: z.string(),
+})
+
+export const Config = z.object({
+  // ── 绘图（ex image-generation；键名原样保留，旧数据可直接搬入） ──
+  models: z.array(imageModelSchema).default([]).volatile(),
+  defaultModel: z.string().volatile(),
+  // ── 标题生成（ex title-model；title 前缀迁移自 mode/provider/model） ──
+  titleMode: z.union([z.const('inherit'), z.const('custom')]).default('inherit').volatile(),
+  titleProvider: z.string().volatile(),
+  titleModel: z.string().volatile(),
+  // ── 标题请求预算（用户可在「用途」页改；默认值与 dsh-base 的 session-title-llm 行一致） ──
+  targetWords: z.number().step(1).min(1).default(5).volatile(),
+  targetCjkCharacters: z.number().step(1).min(1).default(10).volatile(),
+  maxInputBytes: z.number().step(1).min(1).default(4096).volatile(),
+  maxOutputTokens: z.number().step(1).min(1).default(64).volatile(),
+  timeoutMs: z.number().step(1).min(1).default(60000).volatile(),
+})
+
+/** Reject a custom title mode that cannot name both halves of a route. */
+export function validateTitleModel(value) {
+  const provider = value?.titleProvider
+  const model = value?.titleModel
+  const hasProvider = provider !== undefined && provider !== null && provider !== ''
+  const hasModel = model !== undefined && model !== null && model !== ''
+  if (hasProvider !== hasModel) throw new Error('model-tuning: titleProvider 与 titleModel 必须同时填写或同时留空')
+  if (value?.titleMode === 'custom' && !hasProvider) throw new Error('model-tuning: titleMode 为 custom 时必须同时选择 provider 与 model')
+}
+
+/**
+ * Resolve the exact route recorded for one generation request.
+ * @param settings - resolved title fields (`titleMode`/`titleProvider`/`titleModel`).
+ * @param request - service-owned request carrying the session's logged route.
+ * @returns the provider/model pair to dispatch.
+ */
+export function resolveTitleRoute(settings, request) {
+  validateTitleModel(settings)
+  if (settings?.titleMode === 'custom') {
+    return { provider: settings.titleProvider, model: settings.titleModel }
+  }
+  if (request?.route === undefined) {
+    throw new Error('session-title-llm: no logged request route is available; configure provider and model together')
+  }
+  return { provider: request.route.provider, model: request.route.model }
+}
+
+/** The shared title policy module, loaded once per process. */
+const HELPER_PACKAGE = '@deepseek-ai/dsh-session-title-llm'
+
+/**
+ * Resolve the shared title policy.
+ *
+ * A plain `import '@deepseek-ai/dsh-session-title-llm'` would have to be
+ * resolvable from THIS package's directory, which for a linked workspace package
+ * means risking another installation of the host's shared module graph. The
+ * helper therefore resolves from the deployment that loads this plugin.
+ */
+function hostRequire() {
+  const anchors = [process.argv[1], process.execPath, import.meta.url]
+  for (const anchor of anchors) {
+    if (anchor === undefined) continue
+    try {
+      const require = createRequire(anchor)
+      require.resolve(HELPER_PACKAGE)
+      return require
+    } catch {
+      // Try the next anchor: a test or tool process may not sit inside the deployment.
+    }
+  }
+  return undefined
+}
+
+let helperPromise
+function loadTitleHelper() {
+  helperPromise ??= (async () => {
+    const require = hostRequire()
+    if (require === undefined) {
+      throw new Error(
+        `model-tuning: 无法从宿主解析 ${HELPER_PACKAGE}；本插件必须与提供该包的部署一起运行。`,
+      )
+    }
+    const loaded = await import(pathToFileURL(require.resolve(HELPER_PACKAGE)).href)
+    const generate = loaded.generateSessionTitleWithLlm
+    if (typeof generate !== 'function') {
+      throw new Error(`model-tuning: ${HELPER_PACKAGE} 未导出 generateSessionTitleWithLlm`)
+    }
+    return generate
+  })()
+  return helperPromise
+}
+
+/**
+ * Read the live title budget.
+ *
+ * Every field is user-editable from the 用途 tab, so each generation re-reads
+ * them instead of freezing the apply-time values. A reasoning model that only
+ * starts answering after a long think needs a larger `maxOutputTokens` here;
+ * that is the user's call, not a constant in this file.
+ * @param config - the plugin's live Config.
+ * @returns the prompt/byte/token/timeout policy for one title request.
+ */
+export function titleBudgetOf(config) {
+  const policy = {
+    targetWords: config.targetWords.get(),
+    targetCjkCharacters: config.targetCjkCharacters.get(),
+    maxInputBytes: config.maxInputBytes.get(),
+    maxOutputTokens: config.maxOutputTokens.get(),
+    timeoutMs: config.timeoutMs.get(),
+  }
+  for (const [key, value] of Object.entries(policy)) {
+    if (!Number.isInteger(value) || value < 1) throw new Error(`model-tuning: ${key} 必须是正整数`)
+  }
+  return policy
+}
+
+/**
+ * Register the settings-owned title provider.
+ * @param ctx - context exposing session-title and LLM services.
+ * @param config - the live Config (route and budget are re-read per generation).
+ */
+export async function registerTitleProvider(ctx, config) {
+  const generateSessionTitleWithLlm = await loadTitleHelper()
+  validateTitleModel({ titleMode: config.titleMode.get(), titleProvider: config.titleProvider.get(), titleModel: config.titleModel.get() })
+  titleBudgetOf(config)
+  ctx.sessionTitle.register({
+    id: TITLE_PROVIDER_ID,
+    automatic: 'first-prompt',
+    async generate(request) {
+      const route = resolveTitleRoute({
+        titleMode: config.titleMode.get(), titleProvider: config.titleProvider.get(), titleModel: config.titleModel.get(),
+      }, request)
+      const selected = request.messages.slice(0, 1)
+      return await generateSessionTitleWithLlm(ctx, titleBudgetOf(config), { ...request, route }, selected, TITLE_PROVIDER_ID)
+    },
+  })
+}
+
+// ── 绘图：工具 + Remote 服务（ex dsh-plugin-image-generation/index.js） ──
+
+const IMAGE_PARAMETERS = {
+  model: { type: 'string', description: 'Configuration ID from list_image_models, not the upstream model ID. Omit to use the configured default.' },
+  prompt: { type: 'string', required: true, description: 'Full self-contained description of the image to generate. Chat history is not sent.' },
+  n: { type: 'integer', description: 'Number of images, 1–4. Defaults to 1; the upstream model may support only 1.' },
+  size: { type: 'string', description: 'Optional model-supported size, e.g. 1024x1024.' },
+  quality: { type: 'string', description: 'Optional quality supported by this model.' },
+}
+
+export function resultText(value) {
+  return `Generated ${value.images.length} image(s) with ${value.model}. Original files are retained without resizing.\n`
+    + value.images.map((image, i) => `${i + 1}. ${image.path ?? `attachment:${image.original.attachmentId}`} (${image.original.bytes} bytes)`
+      + (image.revisedPrompt ? `\nRevised prompt: ${image.revisedPrompt}` : '')).join('\n')
+    + (value.includeImages ? '' : '\nImages were not added to model context because the selected model does not declare image input. Do not claim to have inspected their contents.')
+}
+
+/** Jobs are bounded, process-local tickets. Attachment bytes themselves are durable. */
+export class ImageGenerationService extends TypertRemoteService {
+  constructor(ctx, current) {
+    super(ctx, 'imageGeneration')
+    this.current = current
+    this.jobs = new Map()
+    this.lifetime = new AbortController()
+    ctx.effect(() => () => {
+      this.lifetime.abort(new Error('绘图插件已卸载。'))
+      this.jobs.clear()
+    })
+  }
+
+  async run(args, signal) {
+    return generateImages({
+      config: this.current(), args, attachments: this.ctx.attachments,
+      signal: signal ? AbortSignal.any([signal, this.lifetime.signal]) : this.lifetime.signal,
+      resolveKey: async ref => {
+        const credentials = this.ctx.get('credentials')
+        return credentials ? (await credentials.resolve(ref))?.value : process.env[ref]
+      },
+    })
+  }
+
+  async discover(request) {
+    try {
+      return await discoverImageModels({ request, signal: this.lifetime.signal,
+        resolveKey: async ref => {
+          const credentials = this.ctx.get('credentials')
+          return credentials ? (await credentials.resolve(ref))?.value : process.env[ref]
+        },
+      })
+    } catch (error) { throw new RemoteError('image-generation/discovery', error.message) }
+  }
+
+  start(request) {
+    try { resolveRequest(this.current(), request) } catch (error) { throw new RemoteError('image-generation/invalid', error.message) }
+    // Retain completed tickets for one hour, and cap memory even if a tab disappears.
+    for (const [id, job] of this.jobs) if (job.status !== 'running' && Date.now() - job.created > 3600000) this.jobs.delete(id)
+    if ([...this.jobs.values()].filter(job => job.status === 'running').length >= 2) throw new RemoteError('image-generation/busy', '已有两个绘图任务正在运行。')
+    if (this.jobs.size >= 32) {
+      const oldest = [...this.jobs].find(([, job]) => job.status !== 'running')
+      if (oldest) this.jobs.delete(oldest[0])
+    }
+    const id = randomUUID()
+    const controller = new AbortController()
+    const job = { status: 'running', created: Date.now(), controller }
+    this.jobs.set(id, job)
+    void this.run(request, controller.signal).then(result => {
+      job.result = result
+      job.status = 'done'
+    }, error => {
+      job.error = controller.signal.aborted ? '已停止等待；服务端可能仍在生成。' : error.message
+      job.status = 'error'
+    })
+    return { jobId: id }
+  }
+
+  status(jobId) {
+    const job = this.jobs.get(jobId)
+    if (!job) throw new RemoteError('image-generation/missing', '绘图任务已过期或宿主已重启。')
+    return { status: job.status, ...(job.result ? { result: job.result } : {}), ...(job.error ? { error: job.error } : {}) }
+  }
+
+  cancel(jobId) {
+    const job = this.jobs.get(jobId)
+    if (!job) throw new RemoteError('image-generation/missing', '绘图任务不存在。')
+    if (job.status === 'running') job.controller.abort(new Error('绘图已取消。'))
+    return { cancelled: job.status === 'running' }
+  }
+
+  async image(jobId, imageIndex, original) {
+    const image = this.jobs.get(jobId)?.result?.images[imageIndex]
+    if (!Number.isInteger(imageIndex) || !image) throw new RemoteError('image-generation/missing', '图片不存在。')
+    if (original === true) {
+      const chunks = []
+      for await (const chunk of this.ctx.attachments.readFileStream(image.original, this.lifetime.signal)) chunks.push(chunk)
+      return { data: Buffer.concat(chunks).toString('base64'), mediaType: image.mediaType, name: image.original.name }
+    }
+    const stored = await this.ctx.attachments.readImage(image.preview)
+    return { data: Buffer.from(stored.data).toString('base64'), mediaType: stored.ref.mediaType, name: image.preview.name ?? 'preview.png' }
+  }
+}
+
+Object.defineProperty(ImageGenerationService.prototype, '@deepseek-ai/dsh-typert-protocol/remote-methods', {
+  value: Object.freeze({ version: 1, methods: Object.freeze(['start', 'status', 'cancel', 'image', 'discover'].map(method =>
+    Object.freeze({ method, invocation: Object.freeze({ kind: 'direct' }) }))) }),
+})
+
+export function registerImageTools(ctx, config) {
+  const current = () => {
+    const value = { models: config.models.get(), defaultModel: config.defaultModel.get() }
+    validateConfig(value)
+    return value
+  }
+  current()
+  const service = new ImageGenerationService(ctx, current)
+  const register = definition => ctx.effect(() => ctx.tools.register(defineTool(definition)), `image-generation: ${definition.name}`)
+  register({
+    name: 'list_image_models',
+    description: 'List configured image-generation models and their supported protocol/default parameters. These models are separate from chat models.',
+    parameters: {},
+    output: { schema: { type: 'json' }, render: (_args, value) => [{ type: 'text', text: JSON.stringify(value) }] },
+    isConcurrencySafe: () => true,
+    async execute() {
+      const value = current()
+      return { defaultModel: value.defaultModel ?? '', models: value.models.map(({ id, name, model, api, size, quality }) =>
+        ({ id, name: name || id, model, api, ...(size ? { size } : {}), ...(quality ? { quality } : {}) })) }
+    },
+  })
+  register({
+    name: 'generate_image',
+    description: 'Generate images with a separately configured Images API. Call list_image_models first if needed. This sends the prompt to the image provider and may incur charges. Results include original file paths and previews when the current chat model supports images. No automatic retries; a timeout may still have generated an image remotely. This tool generates new images only; it cannot edit or read reference images.',
+    parameters: IMAGE_PARAMETERS,
+    output: {
+      schema: { type: 'json' },
+      render: (_args, value) => [{ type: 'text', text: resultText(value) },
+        ...(value.includeImages ? value.images.map(image => ({ type: 'image', attachment: image.preview })) : [])],
+    },
+    isConcurrencySafe: () => false,
+    timeoutMs: 610000,
+    async execute(args, exec) {
+      // Check capability before the paid request; never append images a text-only
+      // route would reject on the next agent step.
+      const selection = exec.agent?.session?.requestHeader()?.config
+      const llm = ctx.get('llm')
+      const info = selection && llm ? await llm.resolveModelInfo(selection.provider, selection.model, exec.signal) : undefined
+      const includeImages = info?.inputModalities?.includes('image') === true
+      return { ...await service.run(args, exec.signal), includeImages }
+    },
+  })
+}
+
+/**
+ * Register everything: title provider, image tools, and the Remote service.
+ * @param ctx - context exposing tools, attachments, sessionTitle and llm.
+ * @param config - the unified Config described above.
+ */
+export async function apply(ctx, config) {
+  await registerTitleProvider(ctx, config)
+  registerImageTools(ctx, config)
+}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "dsh-plugin-model-tuning",
+  "version": "2.0.1",
+  "license": "MIT",
+  "keywords": ["dsh-plugin", "deepseek-harness", "dsh", "model", "settings", "reasoning", "context", "session-title", "image-generation"],
+  "publishConfig": { "registry": "https://registry.npmjs.org" },
+  "repository": { "type": "git", "url": "git+https://github.com/tofu-zyc/dsh-plugin-tofu-box.git", "directory": "dsh-plugin-model-tuning" },
+  "bugs": { "url": "https://github.com/tofu-zyc/dsh-plugin-tofu-box/issues" },
+  "homepage": "https://github.com/tofu-zyc/dsh-plugin-tofu-box/tree/main/dsh-plugin-model-tuning",
+  "description": "「设置 → 模型调参」页：模型参数（推理档位/上下文/最大输出/输入模态）、「用途」页（标题生成独立路由，替换宿主标题行）、「绘图」页（绘图模型配置 + generate_image 工具 + 直接绘图面板）。v2 合并了原 dsh-plugin-title-model 与 dsh-plugin-image-generation。",
+  "type": "module",
+  "main": "index.js",
+  "exports": {
+    ".": "./index.js",
+    "./core": "./core.js",
+    "./client": "./client.js",
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-tool",
+        "@deepseek-ai/dsh-api-remotes"
+      ]
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-tools": ">=0.1.6-alpha.1",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.1.6-alpha.1",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@deepseek-ai/dsh-session-title-llm": ">=0.1.6-alpha.2"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-session-title-llm": {
+      "optional": true
+    }
+  },
+  "scripts": {
+    "test": "node --test tests/*.test.mjs"
+  },
+  "files": [
+    "client.js",
+    "index.js",
+    "core.js",
+    "cordis.patch.yml",
+    "README.md"
+  ]
+}