dsh-vision-router 1.7.0 → 1.7.1

package/README.md

@@ -16,7 +16,7 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v1.7.0"><img src="https://img.shields.io/badge/release-v1.7.0-5B4CF0?style=flat-square" alt="Release v1.7.0" /></a>
+  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v1.7.1"><img src="https://img.shields.io/badge/release-v1.7.1-5B4CF0?style=flat-square" alt="Release v1.7.1" /></a>
   <a href="tests"><img src="https://img.shields.io/badge/verified-657%20tests-2EA44F?style=flat-square" alt="Verified: 657 tests" /></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-2EA44F?style=flat-square" alt="License: MIT" /></a>
   <a href="package.json"><img src="https://img.shields.io/badge/Node.js-%3E%3D22-339933?style=flat-square&amp;logo=nodedotjs&amp;logoColor=white" alt="Node.js >=22" /></a>
@@ -29,9 +29,9 @@
 <p align="center">💬 <strong>QQ community group: 1105463028</strong></p>
 
 > [!WARNING]
-> 📌 **Announcement (v1.7.0)**
+> 📌 **Announcement (v1.7.1)**
 >
-> **v1.7.0:** Live model discovery, stronger settings, session recovery, and Ollama cold-start fixes.
+> **v1.7.1:** Remote settings can now be enabled after an explicit risk confirmation.
 
 <p align="center">
   <img src="assets/vision-demo.gif" width="640" alt="Demo: paste an image, the agent locates the send button with vision_ground / vision_crop / vision_pixel_diff and answers with coordinates" />

package/README.zh.md

@@ -16,7 +16,7 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v1.7.0"><img src="https://img.shields.io/badge/release-v1.7.0-5B4CF0?style=flat-square" alt="Release v1.7.0" /></a>
+  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v1.7.1"><img src="https://img.shields.io/badge/release-v1.7.1-5B4CF0?style=flat-square" alt="Release v1.7.1" /></a>
   <a href="tests"><img src="https://img.shields.io/badge/verified-657%20tests-2EA44F?style=flat-square" alt="Verified: 657 tests" /></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-2EA44F?style=flat-square" alt="License: MIT" /></a>
   <a href="package.json"><img src="https://img.shields.io/badge/Node.js-%3E%3D22-339933?style=flat-square&amp;logo=nodedotjs&amp;logoColor=white" alt="Node.js >=22" /></a>
@@ -29,9 +29,9 @@
 <p align="center">💬 <strong>QQ 用户交流群：1105463028</strong></p>
 
 > [!WARNING]
-> 📌 **公告（v1.7.0）**
+> 📌 **公告（v1.7.1）**
 >
-> **v1.7.0：模型发现、设置、会话恢复与 Ollama 冷启动全面升级。**
+> **v1.7.1：远程设置现可在风险确认后开启。**
 
 <p align="center">
   <img src="assets/vision-demo.gif" width="640" alt="演示：粘贴图片，Agent 用 vision_ground / vision_crop / vision_pixel_diff 定位发送按钮并给出坐标" />
@@ -178,7 +178,7 @@ opencode-go + 自动识图       ← 发图片时选这个
 | Intern AI（上海AI实验室） | `internvl-latest` · `internvl3.5-latest` | 30 RPM，**9000 万 token/月** | ✅ | chat.intern-ai.org.cn |
 | Groq | `meta-llama/llama-4-scout-17b-16e-instruct`（原生多模态，最多 5 张图） | 30 RPM / 14,400 次/天，免卡 | ❌ 需代理 | console.groq.com |
 | Google AI Studio | `gemini-2.5-flash` · `gemini-2.5-flash-lite` | 10–30 RPM / 500–1,500 次/天 | ❌ 需代理 | aistudio.google.com |
-| NVIDIA NIM | `meta/llama-3.2-11b-vision-instruct` · `nvidia/nemotron-nano-12b-v2-vl` | 40 RPM，免卡 | ⚠️ | build.nvidia.com |
+| NVIDIA NIM | `meta-llama/llama-3.2-11b-vision-instruct` · `nvidia/nemotron-nano-12b-v2-vl` | 40 RPM，免卡 | ⚠️ | build.nvidia.com |
 | OpenCode Zen | `mimo-v2.5-free`（视觉 + 代码） | 30 RPM / 500 次/天 | ⚠️ | opencode.ai/zen |
 | OpenRouter | `google/gemma-4-26b-a4b-it:free` · `google/gemma-4-31b-it:free` | 未充值账户 50 次/天 | ❌ 需代理 | openrouter.ai |
 

package/docs/remote-settings.md

@@ -2,6 +2,8 @@
 
 Vision Router uses a dedicated DSH Connection RPC channel at `/vision-router-settings/*` because the global DSH settings/credentials plane is intentionally loopback-only.
 
-Remote editing is off by default. Enable it only from the loopback Vision Router settings page. DSH `trustedHosts` protects the browser carrier against Host/Origin/DNS-rebinding attacks; it is **not user authentication**. Vision Router therefore exposes only an explicit allow-list of low-risk preferences remotely. Network/proxy settings, credential-bearing HTTP providers, local Ollama/LM Studio endpoints, artifact paths, desktop capture, stealth/route ownership and the remote permission itself remain loopback-only.
+Remote editing is off by default. When a Vision Router settings page is opened through a DSH trusted host while the permission is still disabled, the page shows an explicit risk confirmation. Cancelling leaves remote editing disabled and writes nothing. Confirming enables only `allowRemoteSettings`, then reloads the scoped Vision Router settings immediately. The same permission can still be enabled or revoked from the loopback settings page.
+
+DSH `trustedHosts` protects the browser carrier against Host/Origin/DNS-rebinding attacks; it is **not user authentication**. Enable remote editing only when you trust the clients that can reach the DSH instance. Ordinary remote mutations remain restricted to the explicit Vision Router allow-list. Credential-bearing HTTP providers, local Ollama/LM Studio configuration, artifact paths and every other field not present in that allow-list stay unavailable remotely. `allowRemoteSettings` itself is not added to the ordinary mutation allow-list: it can be enabled only through the explicit risk-confirmation flow (or from the loopback settings page).
 
 If DSH is behind Nginx, Caddy or another reverse proxy, forward `/vision-router-settings/*` to the same DSH origin in addition to the normal DSH routes. The UI detects a 404 on this channel and shows this requirement directly.

package/lib/remote-settings-bridge.js

@@ -1,9 +1,11 @@
 import { installLocalRemoteSettingsPermissionBridge } from './local-remote-settings-permission.js'
+import { installRemoteSettingsRiskConfirmationBridge } from './remote-settings-risk-confirmation.js'
 
 const SETTINGS_NS = 'vision-router'
 
 export const REMOTE_SETTINGS_CHANNEL = '/vision-router-settings'
 export const REMOTE_SETTINGS_PERMISSION = 'allowRemoteSettings'
+export const REMOTE_SETTINGS_AUTHORIZE_ENDPOINT = 'authorize'
 
 // Remote DSH pages are deliberately less privileged than the loopback settings UI.
 // This is a capability allow-list, not a blacklist: a future Config field is local-only
@@ -117,6 +119,51 @@ function conflictResult(error) {
   }
 }
 
+export async function authorizeRemoteSettingsAfterRiskConfirmation(settings, payload, logger) {
+  if (!payload || typeof payload !== 'object' || Array.isArray(payload) || payload.acceptedRisk !== true) {
+    return badRequest('acceptedRisk must be true')
+  }
+
+  let descriptor
+  try {
+    descriptor = namespaceDescriptor(settings)
+  } catch (error) {
+    logger?.warn?.('vision-router: remote settings authorization describe failed: %s', error?.message ?? String(error))
+    return settingsRejected('Vision Router settings could not be read')
+  }
+  if (!descriptor) return settingsRejected('Vision Router settings namespace is unavailable')
+  if (settings.writable !== true) return settingsRejected('Vision Router settings provider is read-only')
+
+  const value = descriptor.value
+  if (value && typeof value === 'object' && value[REMOTE_SETTINGS_PERMISSION] === true) {
+    return { ok: true, value: accessSnapshot(settings) }
+  }
+  if (!Number.isInteger(descriptor.revision) || descriptor.revision < 0) {
+    return settingsRejected('Vision Router settings revision is unavailable')
+  }
+
+  try {
+    await settings.mutate(
+      SETTINGS_NS,
+      [{ op: 'set', path: [REMOTE_SETTINGS_PERMISSION], value: true }],
+      descriptor.revision,
+    )
+  } catch (error) {
+    const conflict = conflictResult(error)
+    if (conflict) return conflict
+    logger?.warn?.('vision-router: remote settings authorization rejected: %s', error?.message ?? String(error))
+    return settingsRejected(error?.message ?? 'Vision Router remote settings authorization was rejected')
+  }
+
+  try {
+    const access = accessSnapshot(settings)
+    if (access.enabled !== true) return settingsRejected('Vision Router remote settings authorization did not persist')
+    return { ok: true, value: access }
+  } catch {
+    return settingsRejected('Vision Router remote settings were enabled but could not be read back')
+  }
+}
+
 export function createVisionRouterRemoteSettingsHandler(settings, logger) {
   return async (endpoint, payload) => {
     if (endpoint === 'describe') {
@@ -126,6 +173,9 @@ export function createVisionRouterRemoteSettingsHandler(settings, logger) {
         return settingsRejected('Vision Router settings could not be read')
       }
     }
+    if (endpoint === REMOTE_SETTINGS_AUTHORIZE_ENDPOINT) {
+      return authorizeRemoteSettingsAfterRiskConfirmation(settings, payload, logger)
+    }
     if (endpoint !== 'mutate') return badRequest('unknown Vision Router remote settings endpoint ' + JSON.stringify(endpoint))
 
     let descriptor
@@ -163,5 +213,6 @@ export function installVisionRouterRemoteSettingsBridge(ctx, logger) {
       'vision-router: opt-in remote settings channel',
     )
   })
+  installRemoteSettingsRiskConfirmationBridge(ctx)
   installLocalRemoteSettingsPermissionBridge(ctx, logger)
 }

package/lib/remote-settings-risk-confirmation.js

@@ -0,0 +1,195 @@
+const RISK_PRELUDE_MARK = 'data-vision-router-remote-settings-risk-confirmation'
+
+export const REMOTE_SETTINGS_RISK_CLIENT_PRELUDE = String.raw`(function(){
+  'use strict';
+  var CHANNEL = '/vision-router-settings';
+  var AUTHORIZE_ENDPOINT = 'authorize';
+  var connectionCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
+  var rpcCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
+  var contextCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
+  var authorizationPromise;
+
+  function chineseLocale() {
+    var lang = '';
+    try {
+      lang = String((document && document.documentElement && document.documentElement.lang) || (navigator && navigator.language) || '').toLowerCase();
+    } catch (_) {}
+    return lang === '' || lang.indexOf('zh') === 0;
+  }
+
+  function riskMessage() {
+    return chineseLocale()
+      ? '启用远程设置？\n\n当前页面通过远程地址访问 DSH。启用后，能够访问此 trusted host 的客户端可以修改 Vision Router 已开放的设置。\n\nDSH trustedHosts 不是身份认证，请仅在你信任当前网络和访问者时继续。API Key、HTTP Provider 凭据、本地 Ollama / LM Studio、产物路径等未列入远程白名单的敏感配置仍不会开放。\n\n确定要允许远程修改设置吗？'
+      : 'Enable remote settings?\n\nThis page is accessing DSH through a remote address. After enabling this, clients that can reach this trusted host can change the Vision Router settings exposed by the remote allow-list.\n\nDSH trustedHosts is not authentication. Continue only if you trust the current network and its users. Sensitive settings outside the remote allow-list, including API keys, HTTP-provider credentials, local Ollama / LM Studio, and artifact paths, remain unavailable remotely.\n\nAllow remote settings?';
+  }
+
+  function isPermissionDisabledDescribe(channel, endpoint, result) {
+    return channel === CHANNEL
+      && endpoint === 'describe'
+      && result && result.ok === true
+      && result.value && result.value.enabled !== true
+      && result.value.reason === 'permission-disabled';
+  }
+
+  async function authorizeAndRefresh(target, call) {
+    if (authorizationPromise) return authorizationPromise;
+    authorizationPromise = (async function(){
+      if (typeof window.confirm !== 'function' || window.confirm(riskMessage()) !== true) return undefined;
+      var authorized = await call.call(target, CHANNEL, AUTHORIZE_ENDPOINT, { acceptedRisk: true });
+      if (!authorized || authorized.ok !== true) {
+        var message = authorized && authorized.error && authorized.error.message
+          ? authorized.error.message
+          : 'Vision Router could not enable remote settings.';
+        try { if (typeof window.alert === 'function') window.alert(message); } catch (_) {}
+        return undefined;
+      }
+      return call.call(target, CHANNEL, 'describe', {});
+    })();
+    try { return await authorizationPromise; }
+    finally { authorizationPromise = undefined; }
+  }
+
+  function wrapRpc(rpc) {
+    if (!rpc || (typeof rpc !== 'object' && typeof rpc !== 'function')) return rpc;
+    if (rpcCache && rpcCache.has(rpc)) return rpcCache.get(rpc);
+    var wrapped = new Proxy(rpc, {
+      get: function(target, property) {
+        if (property === 'call') {
+          var call = Reflect.get(target, property, target);
+          if (typeof call !== 'function') return call;
+          return async function(channel, endpoint) {
+            var result = await call.apply(target, arguments);
+            if (!isPermissionDisabledDescribe(channel, endpoint, result)) return result;
+            var refreshed = await authorizeAndRefresh(target, call);
+            return refreshed || result;
+          };
+        }
+        var value = Reflect.get(target, property, target);
+        return typeof value === 'function' ? value.bind(target) : value;
+      }
+    });
+    if (rpcCache) rpcCache.set(rpc, wrapped);
+    return wrapped;
+  }
+
+  function wrapConnection(connection) {
+    if (!connection || (typeof connection !== 'object' && typeof connection !== 'function')) return connection;
+    if (connectionCache && connectionCache.has(connection)) return connectionCache.get(connection);
+    var wrapped = new Proxy(connection, {
+      get: function(target, property) {
+        if (property === 'rpc') return wrapRpc(Reflect.get(target, property, target));
+        var value = Reflect.get(target, property, target);
+        return typeof value === 'function' ? value.bind(target) : value;
+      }
+    });
+    if (connectionCache) connectionCache.set(connection, wrapped);
+    return wrapped;
+  }
+
+  function wrapContext(ctx) {
+    if (!ctx || typeof ctx !== 'object') return ctx;
+    if (contextCache && contextCache.has(ctx)) return contextCache.get(ctx);
+    var wrapped = new Proxy(ctx, {
+      get: function(target, property) {
+        if (property === 'get') {
+          var get = Reflect.get(target, property, target);
+          if (typeof get !== 'function') return get;
+          return function(name) {
+            var value = get.apply(target, arguments);
+            return name === 'connection' ? wrapConnection(value) : value;
+          };
+        }
+        var value = Reflect.get(target, property, target);
+        return typeof value === 'function' ? value.bind(target) : value;
+      }
+    });
+    if (contextCache) contextCache.set(ctx, wrapped);
+    return wrapped;
+  }
+
+  function patchLoader(loader) {
+    if (!loader || typeof loader.load !== 'function' || loader.load.__visionRouterRemoteRiskConfirmation) return;
+    var original = loader.load;
+    function load(spec) {
+      if (spec && spec.id === 'dsh-vision-router' && typeof spec.factory === 'function') {
+        var factory = spec.factory;
+        spec = Object.assign({}, spec, {
+          factory: function(require) {
+            var exports = factory(require);
+            if (exports && typeof exports.apply === 'function' && !exports.apply.__visionRouterRemoteRiskConfirmation) {
+              var apply = exports.apply;
+              var wrappedApply = function(ctx) {
+                var rest = Array.prototype.slice.call(arguments, 1);
+                return apply.apply(exports, [wrapContext(ctx)].concat(rest));
+              };
+              Object.defineProperty(wrappedApply, '__visionRouterRemoteRiskConfirmation', { value: true });
+              exports.apply = wrappedApply;
+            }
+            return exports;
+          }
+        });
+      }
+      return original.call(loader, spec);
+    }
+    Object.defineProperty(load, '__visionRouterRemoteRiskConfirmation', { value: true });
+    loader.load = load;
+  }
+
+  function install() {
+    if (window.__ModuleLoader__) {
+      patchLoader(window.__ModuleLoader__);
+      return;
+    }
+    var descriptor = Object.getOwnPropertyDescriptor(window, '__ModuleLoader__');
+    if (descriptor && descriptor.configurable === false) return;
+    if (descriptor && typeof descriptor.set === 'function') {
+      var previousGet = descriptor.get;
+      var previousSet = descriptor.set;
+      Object.defineProperty(window, '__ModuleLoader__', {
+        configurable: true,
+        enumerable: descriptor.enumerable !== false,
+        get: function(){ return previousGet ? previousGet.call(window) : undefined; },
+        set: function(value) {
+          previousSet.call(window, value);
+          try { patchLoader(window.__ModuleLoader__ || value); } catch (_) {}
+        }
+      });
+      return;
+    }
+    var stored;
+    Object.defineProperty(window, '__ModuleLoader__', {
+      configurable: true,
+      enumerable: true,
+      get: function(){ return stored; },
+      set: function(value) {
+        stored = value;
+        patchLoader(value);
+        Object.defineProperty(window, '__ModuleLoader__', {
+          configurable: true,
+          enumerable: true,
+          writable: true,
+          value: stored
+        });
+      }
+    });
+  }
+
+  try { install(); } catch (_) {}
+})();`
+
+export function injectRemoteSettingsRiskConfirmationPrelude(html) {
+  if (typeof html !== 'string' || html.includes(RISK_PRELUDE_MARK)) return html
+  const script = `<script ${RISK_PRELUDE_MARK}>${REMOTE_SETTINGS_RISK_CLIENT_PRELUDE.replace(/<\/script/gi, '<\\/script')}</script>`
+  const endHead = html.indexOf('</head>')
+  return endHead === -1 ? `${html}${script}` : `${html.slice(0, endHead)}${script}${html.slice(endHead)}`
+}
+
+export function installRemoteSettingsRiskConfirmationBridge(ctx) {
+  if (!ctx || typeof ctx.inject !== 'function') return
+  ctx.inject(['webServer'], (webCtx) => {
+    webCtx.effect(
+      () => webCtx.webServer.tapIndex(injectRemoteSettingsRiskConfirmationPrelude),
+      'vision-router: remote settings risk confirmation client shim',
+    )
+  })
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vision-router",
-  "version": "1.7.0",
+  "version": "1.7.1",
   "description": "Eyes for text-only DeepSeek Harness agents: built-in free vision chain (no key) + pixel-level vision tools (Q&A, grounding, crop, pixel diff, colors, OCR, SVG trace, cutout, screenshots). One-command install, no Python, image turns work like ordinary tool-calling turns.",
   "license": "MIT",
   "repository": {
@@ -75,7 +75,7 @@
     "sharp": "^0.35.3"
   },
   "scripts": {
-    "test": "node --test tests/core.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/provider-directory-fallback.test.js tests/settings-section-order.test.js tests/vision-resilience.test.js tests/client.test.js tests/remote-settings-bridge.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/update-check.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/replay-delegation.test.js tests/adversarial-hardening.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/local-ollama.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/image-resource-governor.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js"
+    "test": "node --test tests/core.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/provider-directory-fallback.test.js tests/settings-section-order.test.js tests/vision-resilience.test.js tests/client.test.js tests/remote-settings-bridge.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/update-check.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/replay-delegation.test.js tests/adversarial-hardening.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/local-ollama.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/image-resource-governor.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js"
   },
   "pnpm": {
     "onlyBuiltDependencies": [