dsh-tool-vision 0.7.0 → 0.8.0

package/README.md

@@ -67,6 +67,7 @@ Or load it from a local path without npm:
 
 | Field | Default | Meaning |
 |---|---|---|
+| `enabled` | `true` | **Master switch (v0.8.0).** Off unregisters everything this plugin contributes — `inspect_image`, the 14 `vision_*` tools, the image bridge, the preview route and the image-capability declaration. The settings section stays mounted so the switch can turn it back on. Hot-applies; no dsh restart. |
 | `baseURL` | `https://api.openai.com/v1` | OpenAI-compatible API base URL. |
 | `apiKey` | `''` | API key (takes precedence over env). |
 | `apiKeyEnv` | `VISION_API_KEY` | Env var holding the key. |
@@ -221,6 +222,31 @@ degrade lazily with an install hint and never break other tools).
 default** — set `desktopScreenshot: true` in the tool-vision settings to
 enable desktop capture.
 
+## v0.8.0: master switch, and the save-path fix
+
+**Master switch.** `enabled`, plus a one-click button at the top of the section
+(`Disable all` / `Re-enable`). Registrations are effects on the cordis fiber
+that makes them, so the plugin now puts every tool, the image bridge, the
+preview route and the image-capability declaration in a **child fiber**: turning
+the switch off disposes it, and all 15 tools leave the model's tool list
+together. The settings section stays on the parent fiber, so the switch can turn
+the plugin back on. No dsh restart.
+
+**Save-path fix.** The form used to submit its 18 fields as **parallel**
+`scope.set()/unset()` calls. Each write carries its own revision fence, a fence
+behind the Host document is refused with `settings/conflict`, and **a refused
+write still resolves** — the scope's contract is "settle after the write and any
+recovery read", not "throw on refusal". The section therefore reported "Saved"
+while the edits silently reverted, which reads as "settings cannot be saved at
+all".
+
+Writes are now **one atomic `mutate()`**, so the whole batch shares one fence and
+one persistence decision, and the section is inspected after the write settles:
+"Saved" only when the change is really there, otherwise "Write did not take
+effect" plus a reload of the form. Hosts without `mutate()` fall back to
+**sequential** writes (each waits for its predecessor, keeping the revision chain
+intact) — never parallel.
+
 ## Limitations
 
 - A bridged image enters the conversation as a text hint (a transcript, not

package/README.zh.md

@@ -42,6 +42,7 @@ DSH 0.1.1 已为 DeepSeek 视觉模型目录加入原生图片输入。本插件
 
 | 字段 | 默认值 | 含义 |
 |---|---|---|
+| `enabled` | `true` | **总开关（v0.8.0）**。关闭后插件不注册任何东西：`inspect_image`、14 个 `vision_*` 工具、图片桥、预览路由、图片能力声明统统下线；设置栏本身保留，所以随时能再打开。热生效，无需重启 dsh |
 | `baseURL` | `https://api.openai.com/v1` | OpenAI 兼容 API 基地址 |
 | `apiKey` | `''` | API 密钥（优先于环境变量） |
 | `apiKeyEnv` | `VISION_API_KEY` | 存放密钥的环境变量名 |
@@ -156,6 +157,25 @@ DSH 0.1.1 已为 DeepSeek 视觉模型目录加入原生图片输入。本插件
 `vision_screenshot` 属于隐私敏感能力,**默认不注册**——在 tool-vision 设置中
 开启 `desktopScreenshot: true` 后才会注册桌面截屏工具。
 
+## v0.8.0：总开关，以及保存修复
+
+**总开关。** `enabled` 字段加设置栏顶部的一键按钮（`一键关闭` / `重新启用`）。
+注册本身就是绑定在「发起注册的 cordis fiber」上的副作用，所以插件把所有工具、
+图片桥、预览路由和图片能力声明都放进一个**子 fiber**：关掉开关就是销毁这个子
+fiber，15 个工具一并从模型侧消失。设置栏留在父 fiber 上，因此关掉之后还能再打开。
+无需重启 dsh。
+
+**保存修复。** 此前表单把 18 个字段作为**并行** `scope.set()/unset()` 提交。每个
+写入各自携带一个 revision 栅栏，而栅栏落后于宿主文档的写入会被 `settings/conflict`
+拒绝——**且被拒绝的写入仍然 resolve**（scope 的契约是「完成写入与恢复读取后结算」，
+不是「被拒就抛错」）。于是设置栏显示「已保存」，而编辑内容静默回退，看起来就是
+「完全存不了」。
+
+现在改为**一次原子 `mutate()`**，整批修改共用一个栅栏和一次持久化决策；写入结算后
+再回读命名空间section做校验，只有确认生效才报「已保存」，否则弹出「写入未生效」并
+重新载入表单。没有 `mutate()` 的旧宿主回退为**串行**写入（每个等前一个完成，revision
+链条依然正确），绝不并行。
+
 ## 限制
 
 - 从 `0.6.3` 起最低支持 DSH `0.1.0-rc.7`，已针对 `0.1.0-rc.7`、

package/client.js

@@ -40,6 +40,10 @@ window.__ModuleLoader__.load({
       ".__tv_btn:hover:not(:disabled){border-color:var(--dsw-alias-state-business-primary)}" +
       ".__tv_btn:disabled{opacity:.5;cursor:default}" +
       ".__tv_btnPrimary{border-color:var(--dsw-alias-state-business-primary, #3964fe);background:var(--dsw-alias-state-business-primary, #3964fe);color:#fff}" +
+      ".__tv_btnDanger{border-color:var(--dsw-alias-state-error-primary, #e5484d);color:var(--dsw-alias-state-error-primary, #e5484d)}" +
+      ".__tv_btnDanger:hover:not(:disabled){background:var(--dsw-alias-state-error-primary, #e5484d);color:#fff}" +
+      ".__tv_master{display:flex;align-items:center;justify-content:space-between;gap:10px;padding:8px 10px;margin:2px 0 6px;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;background:var(--dsw-alias-bg-layer-2)}" +
+      ".__tv_masterLabel{font-size:13px;color:var(--dsw-alias-label-primary)}" +
       ".__tv_status{font-size:12px;color:var(--dsw-alias-label-tertiary)}" +
       ".__tv_error{font-size:12px;color:var(--dsw-alias-state-error-primary)}" +
       ".__tv_unavailable{font-size:13px;color:var(--dsw-alias-label-tertiary)}";
@@ -97,7 +101,14 @@ window.__ModuleLoader__.load({
       error: "保存失败",
       unavailable: "设置命名空间不可用（服务端未注册 tool-vision 命名空间？）",
       overridden: "已覆盖",
-      loading: "加载中…"
+      loading: "加载中…",
+      fieldEnabled: "启用插件（关闭后所有视觉工具下线）",
+      masterSwitch: "总开关",
+      turnOff: "一键关闭",
+      turnOn: "重新启用",
+      enabledNotice: "已启用：视觉工具已上线",
+      disabledNotice: "已关闭：所有视觉工具已下线",
+      notApplied: "写入未生效"
     };
     var en = {
       nav: "Vision Model",
@@ -141,11 +152,19 @@ window.__ModuleLoader__.load({
       error: "Save failed",
       unavailable: "Settings namespace unavailable (tool-vision namespace not registered server-side?)",
       overridden: "overridden",
-      loading: "Loading…"
+      loading: "Loading…",
+      fieldEnabled: "Enable plugin (off takes every vision tool offline)",
+      masterSwitch: "Master switch",
+      turnOff: "Disable all",
+      turnOn: "Re-enable",
+      enabledNotice: "Enabled: vision tools are live",
+      disabledNotice: "Disabled: every vision tool is offline",
+      notApplied: "Write did not take effect"
     };
 
     // ── field spec ────────────────────────────────────────────────────────
     var FIELDS = [
+      { key: "enabled", label: "fieldEnabled", type: "checkbox" },
       { key: "baseURL", label: "fieldBaseUrl", type: "text", placeholder: "https://api.openai.com/v1" },
       { key: "apiKey", label: "fieldApiKey", type: "password", secret: true },
       { key: "apiKeyEnv", label: "fieldApiKeyEnv", type: "text" },
@@ -196,7 +215,10 @@ window.__ModuleLoader__.load({
       var [error, setError] = react.useState(null);
 
       react.useEffect(function () {
-        if (typeof scope.load === "function") scope.load();
+        // No refresh call: the scope's public seam has no load() — reads ride the
+        // shared describe mirror, which re-reads on every Host
+        // `settings/document-updated`. The guarded scope.load() that used to sit
+        // here was dead code that read like a refresh that never happened.
         var alive = true;
         var sync = function () { if (alive) setSnapshot(scope.getSnapshot()); };
         var un = typeof scope.subscribe === "function" ? scope.subscribe(sync) : null;
@@ -239,66 +261,154 @@ window.__ModuleLoader__.load({
         setError(null);
       }
 
-      function onSave() {
-        setBusy(true); setNotice(null); setError(null);
-        var writes = FIELDS.map(function (f) {
+      // One atomic mutation carrying ONE revision fence.
+      //
+      // The fields used to be issued as parallel scope.set()/unset() calls. Every
+      // write is queued and re-reads the namespace revision, but a write whose
+      // fence is behind the Host document is REFUSED with settings/conflict — and
+      // a refused write still resolves (the scope's contract is "settle after any
+      // recovery read", not "throw on refusal"). The section therefore reported
+      // "Saved" while the edits silently reverted. Batching every change into a
+      // single mutate() gives it one fence and one persistence decision.
+      function buildOps() {
+        var ops = [];
+        FIELDS.forEach(function (f) {
           var d = fieldDraft(f);
           if (f.type === "csv") {
             var arr = String(d).split(",").map(function (s) { return s.trim(); }).filter(Boolean);
             var cur = value[f.key] || [];
-            if (arr.length === cur.length && arr.every(function (x, i) { return x === cur[i]; })) return Promise.resolve();
-            return scope.set(f.key, arr);
+            if (arr.length === cur.length && arr.every(function (x, i) { return x === cur[i]; })) return;
+            ops.push({ op: "set", path: [f.key], value: arr });
+            return;
           }
           if (f.type === "checkbox") {
-            if (Boolean(d) === Boolean(value[f.key])) return Promise.resolve();
-            return Boolean(d) ? scope.set(f.key, true) : scope.unset(f.key);
+            if (Boolean(d) === Boolean(value[f.key])) return;
+            ops.push(Boolean(d) ? { op: "set", path: [f.key], value: true }
+                                : { op: "unset", path: [f.key] });
+            return;
           }
           if (f.type === "password") {
-            if (!d) return Promise.resolve(); // blank keeps the current key
-            if (d === String(value[f.key] ?? "")) return Promise.resolve();
-            return scope.set(f.key, d);
+            if (!d) return; // blank keeps the current key
+            if (d === String(value[f.key] ?? "")) return;
+            ops.push({ op: "set", path: [f.key], value: d });
+            return;
           }
-          if (String(d) === String(value[f.key] ?? "")) return Promise.resolve();
-          if (String(d).trim() === "" && !(f.key in user)) return Promise.resolve();
-          return String(d).trim() === "" ? scope.unset(f.key) : scope.set(f.key, f.type === "number" ? Number(d) : d);
+          if (String(d) === String(value[f.key] ?? "")) return;
+          if (String(d).trim() === "" && !(f.key in user)) return;
+          ops.push(String(d).trim() === ""
+            ? { op: "unset", path: [f.key] }
+            : { op: "set", path: [f.key], value: f.type === "number" ? Number(d) : d });
+        });
+        return ops;
+      }
+
+      /** Whether the namespace section now reflects every queued operation. */
+      function opsApplied(ops, snap) {
+        if (snap.status !== "ready" || snap.value === void 0) return false;
+        return ops.every(function (op) {
+          var key = op.path[0];
+          if (op.op === "unset") return !(snap.user && key in snap.user);
+          return JSON.stringify(snap.value[key]) === JSON.stringify(op.value);
+        });
+      }
+
+      /**
+       * Settle one namespace change and report what actually happened.
+       *
+       * Reads settle after the write and any recovery read, so the section is
+       * inspected afterwards instead of trusting the promise: that check is the
+       * only way to tell a committed change from a refused one. Hosts without
+       * mutate() apply the same ops in order — each waits for its predecessor, so
+       * the revision chain still holds.
+       */
+      function commit(ops) {
+        var run;
+        if (typeof scope.mutate === "function") {
+          run = scope.mutate(ops, scope.getSnapshot().revision);
+        } else {
+          run = ops.reduce(function (chain, op) {
+            return chain.then(function () {
+              return op.op === "unset" ? scope.unset(op.path[0]) : scope.set(op.path[0], op.value);
+            });
+          }, Promise.resolve());
+        }
+        return Promise.resolve(run).then(function () {
+          return opsApplied(ops, scope.getSnapshot());
+        });
+      }
+
+      function reportOutcome(ok, okMessage) {
+        setBusy(false);
+        if (ok) {
+          setNotice(okMessage || t("saved"));
+          return;
+        }
+        setError(t("error") + "：" + t("notApplied"));
+        reseedDraft();
+      }
+
+      function onSave() {
+        setBusy(true); setNotice(null); setError(null);
+        var ops = buildOps();
+        if (ops.length === 0) { setBusy(false); setNotice(t("saved")); return; }
+        commit(ops).then(function (ok) {
+          reportOutcome(ok);
+        }).catch(function (e) {
+          setBusy(false); setError(t("error") + "：" + String(e && e.message || e));
         });
-        Promise.all(writes).then(function () {
-          setBusy(false); setNotice(t("saved"));
-          if (typeof scope.load === "function") scope.load();
+      }
+
+      // One-click master switch: the same field the checkbox edits, written on its
+      // own so taking the plugin offline never depends on the rest of the form.
+      function onToggleEnabled() {
+        setBusy(true); setNotice(null); setError(null);
+        var next = value.enabled === false;
+        commit([{ op: "set", path: ["enabled"], value: next }]).then(function (ok) {
+          reportOutcome(ok, next ? t("enabledNotice") : t("disabledNotice"));
         }).catch(function (e) {
-          setBusy(false); setError(t("error") + ": " + String(e && e.message || e));
+          setBusy(false); setError(t("error") + "：" + String(e && e.message || e));
         });
       }
 
       function reseedDraft() {
-        if (typeof scope.load === "function") {
-          var p = scope.load();
-          if (p && typeof p.then === "function") {
-            p.then(function () {
-              var fresh = scope.getSnapshot();
-              if (fresh.status === "ready" && fresh.value !== void 0) setDraft(Object.assign({}, valueToDraft(fresh.value)));
-            }).catch(function () {});
-            return;
-          }
+        // The mirror folds a write's answer in before the promise settles, so the
+        // snapshot is already current; the timeout only covers a host that
+        // answers late.
+        var fresh = scope.getSnapshot();
+        if (fresh.status === "ready" && fresh.value !== void 0) {
+          setDraft(Object.assign({}, valueToDraft(fresh.value)));
+          return;
         }
         setTimeout(function () {
-          var fresh = scope.getSnapshot();
-          if (fresh.status === "ready" && fresh.value !== void 0) setDraft(Object.assign({}, valueToDraft(fresh.value)));
+          var later = scope.getSnapshot();
+          if (later.status === "ready" && later.value !== void 0) setDraft(Object.assign({}, valueToDraft(later.value)));
         }, 120);
       }
 
       function onReset() {
         setBusy(true); setNotice(null); setError(null);
-        Promise.all(FIELDS.map(function (f) { return scope.unset(f.key); })).then(function () {
-          setBusy(false); setNotice(t("saved"));
-          reseedDraft();
+        var ops = FIELDS
+          .filter(function (f) { return f.key in user; })
+          .map(function (f) { return { op: "unset", path: [f.key] }; });
+        if (ops.length === 0) { setBusy(false); setNotice(t("saved")); return; }
+        commit(ops).then(function (ok) {
+          reportOutcome(ok);
         }).catch(function (e) {
-          setBusy(false); setError(t("error") + ": " + String(e && e.message || e));
+          setBusy(false); setError(t("error") + "：" + String(e && e.message || e));
         });
       }
 
       return h("div", { className: "__tv_root" },
         h("p", { className: "__tv_hint", style: { margin: "0 0 4px" } }, t("intro")),
+        h("div", { className: "__tv_master" },
+          h("span", { className: "__tv_masterLabel" },
+            t("masterSwitch") + (value.enabled === false ? "：" + t("disabledNotice") : "")),
+          h("button", {
+            type: "button",
+            className: "__tv_btn " + (value.enabled === false ? "__tv_btnPrimary" : "__tv_btnDanger"),
+            onClick: onToggleEnabled,
+            disabled: busy || !snapshot.writable
+          }, value.enabled === false ? t("turnOn") : t("turnOff"))),
         FIELDS.map(function (f) {
           var overridden = f.key in user;
           if (f.type === "checkbox") {
@@ -500,7 +610,6 @@ window.__ModuleLoader__.load({
       var t = ctx.locale.bind(NS);
       ctx.effect(function () { return ctx.locale.register(NS, { zh: zh, en: en }); }, "dsh-tool-vision: dictionaries");
       var scope = ctx.settingsScope.bind({ namespace: "tool-vision" });
-      if (typeof scope.load === "function") scope.load();
       attachBridgePreview(ctx, scope);
       ctx.slots.inject("settings.section", function () {
         return ctx.slots.register({

package/index.js

@@ -82,6 +82,15 @@ const DEFAULT_DESCRIPTION =
 
 /** Runtime schema for the tool-vision row. */
 const Config = z.object({
+  /**
+   * Master switch, hot-applied. When off the plugin registers nothing at all —
+   * no `inspect_image`, none of the 14 `vision_*` tools, no pre-step bridge, no
+   * preview route, no llm capability wrap — while the settings section itself
+   * stays mounted so the switch can turn it back on. Turning it off is the way
+   * to stop every vision tool from reaching the model without uninstalling the
+   * package or restarting dsh.
+   */
+  enabled: z.boolean().default(true),
   /** Base URL of an OpenAI-compatible API, e.g. https://api.openai.com/v1 or https://dashscope.aliyuncs.com/compatible-mode/v1 */
   baseURL: z.string().default("https://api.openai.com/v1"),
   /** API key; takes precedence over apiKeyEnv. Rendered as a write-only secret in the Web UI. */
@@ -561,6 +570,133 @@ function apply(ctx, config) {
   let current = config;
   let sourceGetter = null;
   const getConfig = () => (sourceGetter ? sourceGetter() : current);
+
+  // ── master switch: a child fiber owns every registration ──────────────────
+  // `ctx.tools.register`, `ctx.effect` and `ctx.on` are all effects on the fiber
+  // that makes them, so confining the tool/bridge/route registrations to a child
+  // fiber makes `enabled` real: disposing that fiber unregisters all 15 tools,
+  // removes the pre-step listener and the preview route, and restores the llm
+  // capability wrap. The settings registration deliberately stays on the parent
+  // fiber — it has to outlive the switch, or the section that turns the plugin
+  // back on would vanish with it.
+  const REGISTRATION_KEYS = [
+    "enabled",
+    "bridgeTextOnly",
+    "bridgeExportDir",
+    "bridgeAutoImage",
+    "bridgePreview",
+  ];
+  let featureFiber = null;
+  let lastRegistrationKey = null;
+
+  function registrationKey(cfg) {
+    return REGISTRATION_KEYS.map((key) => String(cfg[key])).join("|");
+  }
+
+  function installFeatures() {
+    if (featureFiber !== null) return;
+    featureFiber = ctx.plugin({
+      name: "dsh-tool-vision:features",
+      apply(inner) {
+        // ── image bridge: pasted images become inspect_image hints on text-only models ──
+        if (getConfig().bridgeTextOnly) {
+          const exportDir = getConfig().bridgeExportDir || join(os.tmpdir(), "dsh-vision-bridge");
+          mkdir(exportDir, { recursive: true }).catch(() => {});
+          // Root-level listener: agent-scoped waterfalls admit untagged listeners,
+          // so one registration serves every agent (new and resumed alike) and the
+          // agent is read from the fused payload.
+          attachPreStepBridge(inner, getConfig, exportDir);
+
+          // ── automatic image admission: let pasted images through on text-only models ──
+          // The host gate refuses images unless the model declares `image` input;
+          // the bridge handles them anyway, so report image support for all models.
+          // The wrap is installed on the shared llm service instance (idempotent,
+          // restored on dispose/HMR).
+          if (getConfig().bridgeAutoImage) {
+            const unwrap = installAutoImageAdmission(inner.get("llm"), inner.logger);
+            inner.effect(() => unwrap, "dsh-tool-vision: automatic image admission");
+          }
+
+          // ── bridge image preview: same-origin thumbnails for bridged images ──
+          if (getConfig().bridgePreview) {
+            registerBridgePreviewRoute(inner, exportDir, inner.logger);
+          }
+        }
+
+        inner.tools.register(defineTool({
+          name: "inspect_image",
+          description: getConfig().description,
+          parameters: {
+            path: {
+              type: "string",
+              required: true,
+              description: "Path to the image file (absolute, or relative to the current workspace) or an http(s) URL.",
+            },
+            question: {
+              type: "string",
+              description: "Optional specific question about the image. Omit for a general detailed description.",
+            },
+            detail: {
+              type: "string",
+              enum: ["auto", "low", "high"],
+              description: "Optional image resolution hint for the vision API (auto by default).",
+            },
+          },
+          output: {
+            schema: { type: "string" },
+            render: (_args, value) => [{ type: "text", text: value }],
+          },
+          async execute(args, exec) {
+            const cfg = getConfig();
+            const cwd = exec.agent?.session?.header?.cwd ?? process.cwd();
+            const { url, note } = await toImageUrl(args.path, cwd, cfg);
+            try {
+              const answer = await callVision(cfg, url, args.question, args.detail, exec.signal, exec);
+              return note === url ? answer : `${answer}\n\n(image: ${note})`;
+            } catch (error) {
+              const raw = error && error.message ? String(error.message) : String(error);
+              if (CONTENT_FILTER_RE.test(raw)) {
+                throw new Error(
+                  "inspect_image: 图片被视觉端点的内容安全策略拒绝(检测到敏感或不安全内容)。" +
+                    "这不是网络或配置问题,请换一张图片或调整图片内容后再试。",
+                );
+              }
+              throw error;
+            }
+          },
+        }));
+
+        // ── pixel-level vision tools (ported from dsh-vision-router) ─────────────
+        // 14 vision_* tools driven by the SAME configured endpoint as inspect_image
+        // (baseURL/apiKey/model). No provider chain, no local models, no extra
+        // settings: everything comes from the existing tool-vision configuration.
+              registerVisionTools(inner, getConfig);
+      },
+    });
+  }
+
+  function uninstallFeatures() {
+    if (featureFiber === null) return;
+    const fiber = featureFiber;
+    featureFiber = null;
+    // dispose() settles asynchronously and must never take the plugin down; the
+    // next install starts a fresh fiber regardless of how this one ends.
+    Promise.resolve(fiber.dispose()).catch((error) => {
+      ctx.logger?.warn?.(`[tool-vision] feature teardown failed: ${String(error)}`);
+    });
+  }
+
+  // Re-install only when a field that gates a registration actually changed, so
+  // editing, say, `model` does not tear the tools down and back up mid-session.
+  function syncFeatures() {
+    const cfg = getConfig();
+    const key = registrationKey(cfg);
+    if (featureFiber !== null && key === lastRegistrationKey) return;
+    uninstallFeatures();
+    lastRegistrationKey = key;
+    if (cfg.enabled) installFeatures();
+  }
+
   // Compat shim: dsh-settings 0.1.2-rc.1 removed the module-level
   // `installSettingsSection` export (the provider now lives at ctx.settings).
   // Inline the same logic via ctx.inject(["settings"]) — works on both
@@ -571,82 +707,17 @@ function apply(ctx, config) {
     sctx.effect(() => () => {
       sourceGetter = null;
     });
-    scope.watch(() => {});
+    // Hot-apply: `enabled` switches the child fiber, and any field that gates a
+    // registration re-installs it, so none of them needs a dsh restart anymore.
+    scope.watch(() => syncFeatures());
+    sctx.effect(() => () => uninstallFeatures());
+    // The stored value governs from here on; the composition entry was only a
+    // placeholder until the provider answered.
+    syncFeatures();
   });
 
-  // ── image bridge: pasted images become inspect_image hints on text-only models ──
-  if (getConfig().bridgeTextOnly) {
-    const exportDir = getConfig().bridgeExportDir || join(os.tmpdir(), "dsh-vision-bridge");
-    mkdir(exportDir, { recursive: true }).catch(() => {});
-    // Root-level listener: agent-scoped waterfalls admit untagged listeners,
-    // so one registration serves every agent (new and resumed alike) and the
-    // agent is read from the fused payload.
-    attachPreStepBridge(ctx, getConfig, exportDir);
-
-    // ── automatic image admission: let pasted images through on text-only models ──
-    // The host gate refuses images unless the model declares `image` input;
-    // the bridge handles them anyway, so report image support for all models.
-    // The wrap is installed on the shared llm service instance (idempotent,
-    // restored on dispose/HMR).
-    if (getConfig().bridgeAutoImage) {
-      const unwrap = installAutoImageAdmission(ctx.get("llm"), ctx.logger);
-      ctx.effect(() => unwrap, "dsh-tool-vision: automatic image admission");
-    }
-
-    // ── bridge image preview: same-origin thumbnails for bridged images ──
-    if (getConfig().bridgePreview) {
-      registerBridgePreviewRoute(ctx, exportDir, ctx.logger);
-    }
-  }
-
-  ctx.tools.register(defineTool({
-    name: "inspect_image",
-    description: getConfig().description,
-    parameters: {
-      path: {
-        type: "string",
-        required: true,
-        description: "Path to the image file (absolute, or relative to the current workspace) or an http(s) URL.",
-      },
-      question: {
-        type: "string",
-        description: "Optional specific question about the image. Omit for a general detailed description.",
-      },
-      detail: {
-        type: "string",
-        enum: ["auto", "low", "high"],
-        description: "Optional image resolution hint for the vision API (auto by default).",
-      },
-    },
-    output: {
-      schema: { type: "string" },
-      render: (_args, value) => [{ type: "text", text: value }],
-    },
-    async execute(args, exec) {
-      const cfg = getConfig();
-      const cwd = exec.agent?.session?.header?.cwd ?? process.cwd();
-      const { url, note } = await toImageUrl(args.path, cwd, cfg);
-      try {
-        const answer = await callVision(cfg, url, args.question, args.detail, exec.signal, exec);
-        return note === url ? answer : `${answer}\n\n(image: ${note})`;
-      } catch (error) {
-        const raw = error && error.message ? String(error.message) : String(error);
-        if (CONTENT_FILTER_RE.test(raw)) {
-          throw new Error(
-            "inspect_image: 图片被视觉端点的内容安全策略拒绝(检测到敏感或不安全内容)。" +
-              "这不是网络或配置问题,请换一张图片或调整图片内容后再试。",
-          );
-        }
-        throw error;
-      }
-    },
-  }));
-
-  // ── pixel-level vision tools (ported from dsh-vision-router) ─────────────
-  // 14 vision_* tools driven by the SAME configured endpoint as inspect_image
-  // (baseURL/apiKey/model). No provider chain, no local models, no extra
-  // settings: everything comes from the existing tool-vision configuration.
-  registerVisionTools(ctx, getConfig);
+  // No settings provider: the composition entry is the whole configuration.
+  syncFeatures();
 }
 
 export {

package/package.json

@@ -1,11 +1,11 @@
 {
     "name": "dsh-tool-vision",
-    "version": "0.7.0",
+    "version": "0.8.0",
     "description": "DeepSeek Harness 外置视觉模型插件：inspect_image 把本地图片或 http(s) 图片 URL 发给任意 OpenAI 兼容端点，视觉模型看图的文字回答直接带回对话；附 Web UI 设置栏。",
     "type": "module",
     "main": "index.js",
     "scripts": {
-        "test": "node tests/preview-regex.test.mjs && node tests/preview-route.test.mjs && node tests/auto-image.test.mjs && node --test tests/vision-tools.test.js tests/vision-tools-tools.test.js && node tests/settings-scope-compat.test.mjs"
+        "test": "node tests/preview-regex.test.mjs && node tests/preview-route.test.mjs && node tests/auto-image.test.mjs && node --test tests/vision-tools.test.js tests/vision-tools-tools.test.js && node --test tests/settings-scope-compat.test.mjs tests/settings-atomic-write.test.mjs tests/switch-behaviour.test.mjs"
     },
     "exports": {
         ".": "./index.js",
@@ -59,8 +59,8 @@
     },
     "peerDependencies": {
         "react": "^18.2.0",
-        "@deepseek-ai/dsh-settings": "^0.1.0-rc.7 || ^0.1.1-rc.1 || ^0.1.2-rc.1",
-        "@deepseek-ai/dsh-tools": "^0.1.0-rc.7 || ^0.1.1-rc.1 || ^0.1.2-rc.1"
+        "@deepseek-ai/dsh-settings": "^0.1.0-rc.7 || ^0.1.1-rc.1 || ^0.1.2-rc.1 || ^0.1.5-rc.1",
+        "@deepseek-ai/dsh-tools": "^0.1.0-rc.7 || ^0.1.1-rc.1 || ^0.1.2-rc.1 || ^0.1.5-rc.1"
     },
     "optionalDependencies": {
         "potrace": "^2.1.8",