@anionex/dsh-vision-toolkit 0.1.43 → 0.1.45

package/lib/types/tools.d.ts

@@ -5,8 +5,20 @@
  * model-visible semantics.
  * @module dsh-vision-toolkit/tools
  */
-import { defineTool, type JsonValue } from '@deepseek-ai/dsh-tools';
+import { defineTool } from '@deepseek-ai/dsh-tools';
 import { VisionToolkitRuntime } from './runtime.ts';
+/**
+ * A value that round-trips through JSON without loss, as the host transports it
+ * through `presentationMeta`. DSH 0.1.2 stopped exporting this type from
+ * `@deepseek-ai/dsh-tools`, and 0.1.5 keeps it in `@deepseek-ai/dsh-util-values`,
+ * a package that does not exist before 0.1.2-alpha.2, so no single specifier
+ * covers every release line this package declares. Both homes declare the
+ * identical structural union, so redeclaring it here costs nothing and lets old
+ * and new hosts compile against the same contract.
+ */
+export type JsonValue = null | boolean | number | string | JsonValue[] | {
+    [key: string]: JsonValue;
+};
 /** Canonical names shared by registration, bootstrap guidance, and tests. */
 export declare const VISION_TOOL_NAMES: {
     readonly glance: "vision_glance";

package/lib/types/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAA6C,MAAM,wBAAwB,CAAA;AAC9G,OAAO,EACL,oBAAoB,EAWrB,MAAM,cAAc,CAAA;AAerB,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB;;;;;;;;;;;CAWpB,CAAA;AAqHV,oFAAoF;AACpF,MAAM,MAAM,0BAA0B,GAAG,oBAAoB,GAAG,CAAC,MAAM,oBAAoB,CAAC,CAAA;AAE5F,kFAAkF;AAClF,MAAM,MAAM,kCAAkC,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,SAAS,CAAA;AAMhF;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,0BAA0B,EAClC,mBAAmB,GAAE,kCAAyD,EAC9E,eAAe,CAAC,EAAE,WAAW,GAC5B,UAAU,CAAC,OAAO,UAAU,CAAC,EAAE,CAmZjC"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,UAAU,EAA6C,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EACL,oBAAoB,EAWrB,MAAM,cAAc,CAAA;AAGrB;;;;;;;;GAQG;AACH,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAA;AAcrG,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB;;;;;;;;;;;CAWpB,CAAA;AAqHV,oFAAoF;AACpF,MAAM,MAAM,0BAA0B,GAAG,oBAAoB,GAAG,CAAC,MAAM,oBAAoB,CAAC,CAAA;AAE5F,kFAAkF;AAClF,MAAM,MAAM,kCAAkC,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,SAAS,CAAA;AAMhF;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,0BAA0B,EAClC,mBAAmB,GAAE,kCAAyD,EAC9E,eAAe,CAAC,EAAE,WAAW,GAC5B,UAAU,CAAC,OAAO,UAAU,CAAC,EAAE,CAmZjC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anionex/dsh-vision-toolkit",
-  "version": "0.1.43",
+  "version": "0.1.45",
   "description": "DeepSeek Harness-native integration for agent-vision-toolkit: image Q&A, OCR, grounding, UI restoration, pixel diff, Artifacts, and Web UI.",
   "keywords": [
     "deepseek",
@@ -55,6 +55,7 @@
     "runtime",
     "vendor",
     "cordis.patch.yml",
+    "CHANGELOG.md",
     "README.md",
     "README.zh.md",
     "LICENSE"
@@ -77,13 +78,15 @@
     },
     "client": {
       "inject": [
-        "@deepseek-ai/dsh-api-remotes",
-        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-api-gateway",
         "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-api-session-controller",
+        "@deepseek-ai/dsh-client-ui-settings-general",
         "@deepseek-ai/dsh-client-ui-tool",
-        "@deepseek-ai/dsh-client-ui-settings",
-        "@deepseek-ai/dsh-client-ui-input-trigger",
-        "@deepseek-ai/dsh-client-locale"
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-client-ui-input-trigger"
       ],
       "platform": "web"
     },
@@ -104,7 +107,10 @@
         "0.1.2-alpha.5": "compatible",
         "0.1.2-rc.1": "compatible",
         "0.1.3-alpha.1": "unknown",
-        "0.1.3-alpha.2": "compatible"
+        "0.1.3-alpha.2": "compatible",
+        "0.1.5-alpha.1": "compatible",
+        "0.1.5-alpha.2": "compatible",
+        "0.1.5-rc.1": "compatible"
       },
       "profiles": [
         "web",
@@ -119,26 +125,25 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-agent": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-api-remotes": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-attachment": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-runtime": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-tool": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-credentials": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-skill": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-storage-domain": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-subprocess": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-tools": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-agent": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-api-remotes": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-attachment": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-input-trigger": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-tool": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-credentials": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-session": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-settings": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-skill": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-storage-domain": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-subprocess": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
+    "@deepseek-ai/dsh-tools": ">=0.1.0-rc.8 <0.2.0 || ^0.1.1-rc.1 || ^0.1.2-alpha.1 || ^0.1.5-rc.1",
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/schemastery": "^3.18.1",
     "react": "^18.2.0"
@@ -149,10 +154,13 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-scope": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-system-prompt": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-tool-skill": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-store": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-scope": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-tool-skill": "0.1.5-rc.1",
     "@testing-library/react": "^16.3.2",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.1",

package/src/artifact-access.ts

@@ -12,10 +12,10 @@ import { chmod, lstat, mkdir, open, readFile, realpath, writeFile } from 'node:f
 import type { FileHandle } from 'node:fs/promises'
 import type { IncomingMessage, ServerResponse } from 'node:http'
 import { basename, dirname, extname, isAbsolute, join, relative, sep } from 'node:path'
-import type { JsonValue } from '@deepseek-ai/dsh-tools'
 import type { ArtifactDescriptor, ArtifactKind } from './artifacts.ts'
 import { assertSecureSharedStorageBase, assertSecureWorkspaceStorage, isWithin } from './paths.ts'
 import { visionToolkitStateRoot } from './runtime-install.ts'
+import type { JsonValue } from './tools.ts'
 
 /** Prefix owned by the plugin's artifact capability route. */
 export const ARTIFACT_ROUTE_PREFIX = '/_dsh/vision-toolkit/artifacts'

package/src/client/index.tsx

@@ -10,12 +10,24 @@ import {
   type ReactNode,
 } from 'react'
 import { Button, Input } from '@deepseek-ai/dsh-client-ui-primitives'
-import type { ClientContext, ToolCallBlock } from '@deepseek-ai/dsh-client-runtime/client'
+import type { Context as ClientContext } from '@deepseek-ai/cordis'
+/**
+ * `ToolCallBlock` is the one DSH type this bundle consumes by name. DSH 0.1.5
+ * publishes it from `@deepseek-ai/dsh-client-ui-conversation/client`; its
+ * earlier home, `@deepseek-ai/dsh-client-runtime/client`, stopped publishing
+ * after 0.1.1-rc.2 and has no member of the 0.1.5 family at all, so importing
+ * the old specifier would leave an unresolvable peer on a real host. The
+ * `paths` row in tsconfig.client.json and the peerDependency in package.json
+ * name the same package, and both must move together. A type-only import costs
+ * nothing at runtime and emits no `require()` in lib/client.js.
+ */
+import type { ToolCallBlock } from '@deepseek-ai/dsh-client-ui-conversation/client'
 import type {} from '@deepseek-ai/dsh-api-remotes/client'
+import type {} from '@deepseek-ai/dsh-client-connection/client'
 import type {} from '@deepseek-ai/dsh-credentials/types'
 import type {} from '@deepseek-ai/dsh-settings/types'
-import type {} from '@deepseek-ai/dsh-client-ui-conversation/client'
 import type {} from '@deepseek-ai/dsh-client-ui-input-trigger/client'
+import type {} from '@deepseek-ai/dsh-client-ui-renderer/client'
 import type {} from '@deepseek-ai/dsh-client-ui-settings/client'
 import type {} from '@deepseek-ai/dsh-client-locale/client'
 import type { PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots'
@@ -1572,7 +1584,12 @@ export function apply(ctx: ClientContext): void {
     const disposers = typeof legacyRemote.$on === 'function'
       ? [
         legacyRemote.$on('settings/document-updated', refreshSettings),
-        legacyRemote.$on('credentials/updated', refreshCredential),
+        // DSH forwards `credentials/reference-updated` (payload: the credential
+        // ref whose stored value committed) and never `credentials/updated`;
+        // `$on` accepts unknown names silently, so the wrong key was a dead
+        // subscription. Both the 0.1.2-alpha.1 and 0.1.5 allowlists carry this
+        // exact name, so one key covers every supported host.
+        legacyRemote.$on('credentials/reference-updated', refreshCredential),
       ]
       : [
         currentEvents.on('settings/changed', (namespace) => {

package/src/client/paste-images.tsx

@@ -1,9 +1,10 @@
 /** Clipboard-only multi-image input for DSH Web. */
 
 import { useSyncExternalStore, type ReactNode } from 'react'
-import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client'
-import type {} from '@deepseek-ai/dsh-client-ui-conversation/client'
+import type { Context as ClientContext } from '@deepseek-ai/cordis'
+import type { DraftAttachmentId } from '@deepseek-ai/dsh-client-ui-conversation/client'
 import type { InputTriggerSource } from '@deepseek-ai/dsh-client-ui-input-trigger/client'
+import type {} from '@deepseek-ai/dsh-client-ui-renderer/client'
 import type { PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots'
 import { readDisplayConfig } from './display-config.ts'
 
@@ -17,6 +18,47 @@ const MAX_BATCH_BYTES = 80 * 1024 * 1024
 /** A confirmed paste verdict older than this is unknown again, even while a refresh is in flight. */
 const VERDICT_MAX_AGE_MS = 15000
 
+/**
+ * Count the draft attachment ids in an InputState snapshot across DSH
+ * generations. DSH 0.1.5 renamed the field to `attachmentIds` and widened its
+ * meaning from image-only ids to every draft attachment id; the older
+ * `imageIds` name survives only as a compatibility fallback for hosts that
+ * still publish it, and never crashes when it is absent.
+ * @param snapshot - the `input.state.getSnapshot()` value (either generation).
+ * @returns the draft attachment count, 0 when neither field is published.
+ */
+function draftAttachmentCount(snapshot: unknown): number {
+  if (snapshot === null || typeof snapshot !== 'object') return 0
+  const row = snapshot as {
+    attachmentIds?: readonly DraftAttachmentId[]
+    imageIds?: readonly string[]
+  }
+  if (Array.isArray(row.attachmentIds)) return row.attachmentIds.length
+  return Array.isArray(row.imageIds) ? row.imageIds.length : 0
+}
+
+/**
+ * The Client Session registry face this controller reads. DSH 0.1.5 publishes
+ * it as `Context.sessions` from `@deepseek-ai/dsh-api-session-controller/client`,
+ * whose peer set spans the whole host package graph and therefore cannot be a
+ * peer of a Web-only plugin; only these two members are used, so the face is
+ * declared structurally instead of importing that package.
+ */
+interface ClientSessionRegistry {
+  /** Resolve the Session-scoped Context; undefined once the Session has closed. */
+  scope(sessionId: never): ClientContext | undefined
+  /** Live Session list projection; `current` is the focused Session id. */
+  readonly list: { getSnapshot(): { readonly current?: string | undefined } }
+}
+
+/**
+ * @param ctx - the browser plugin Context.
+ * @returns the host's Session registry through the structural face above.
+ */
+function sessionRegistry(ctx: ClientContext): ClientSessionRegistry {
+  return (ctx as unknown as { readonly sessions: ClientSessionRegistry }).sessions
+}
+
 interface PasteRecord {
   ref: string
   file: File
@@ -222,7 +264,7 @@ export class PasteImageController {
   }
 
   private inputFor(sessionId: string) {
-    const actx = this.ctx.sessions.scope(sessionId as never)
+    const actx = sessionRegistry(this.ctx).scope(sessionId as never)
     if (actx === undefined) throw new Error('Open a live session before pasting images')
     return this.ctx.conversation.input.for(actx)
   }
@@ -482,7 +524,9 @@ export class PasteImageController {
    * Auto-switch flow: switch the Session to the image-input variant, announce
    * it, then replay the paste into the composer's native intake. A failed
    * switch, or an environment that cannot replay clipboard bytes, degrades to
-   * the path takeover with the same files.
+   * the path takeover with the same files. The post-replay probe compares the
+   * draft attachment count before and after, so it observes any attachment the
+   * native intake admitted rather than images alone.
    * @param sessionId - the live Session id.
    * @param target - the composer textarea the paste landed on.
    * @param files - the captured image files.
@@ -511,10 +555,10 @@ export class PasteImageController {
     // Replaying lets the composer's own intake run (thumbnail, limits,
     // keyboard); if the environment cannot replay clipboard bytes, the
     // images still land as workspace paths.
-    const before = input.state.getSnapshot().imageIds.length
+    const attachmentsBefore = draftAttachmentCount(input.state.getSnapshot())
     const replayed = this.replayPaste(target, files, text)
-    const after = input.state.getSnapshot().imageIds.length
-    if (!replayed || after <= before) {
+    const attachmentsAfter = draftAttachmentCount(input.state.getSnapshot())
+    if (!replayed || attachmentsAfter <= attachmentsBefore) {
       this.takeoverPaste(sessionId, target, files, text)
     }
   }
@@ -558,7 +602,7 @@ export class PasteImageController {
     const target = event.target
     if (!(target instanceof HTMLTextAreaElement) || target.closest('[data-composer-card]') === null) return false
 
-    const sessionId = this.ctx.sessions.list.getSnapshot().current
+    const sessionId = sessionRegistry(this.ctx).list.getSnapshot().current
     if (sessionId === undefined) return false
     const modelLabel = currentModelLabel()
     this.refreshVerdict(sessionId, modelLabel)
@@ -735,7 +779,7 @@ export function installPasteImages(ctx: ClientContext): void {
     const listener = (event: ClipboardEvent): void => { controller.handlePaste(event) }
     // A focus-time prefetch has the verdict ready before the first paste can land.
     const onFocusIn = (): void => {
-      const sessionId = ctx.sessions.list.getSnapshot().current
+      const sessionId = sessionRegistry(ctx).list.getSnapshot().current
       if (sessionId !== undefined) controller.refreshVerdict(String(sessionId), currentModelLabel())
     }
     document.addEventListener('paste', listener, true)

package/src/exposure.ts

@@ -9,6 +9,7 @@
 import type { Agent } from '@deepseek-ai/dsh-agent'
 import type { ContentBlock } from '@deepseek-ai/dsh-llm'
 import type { Session } from '@deepseek-ai/dsh-session'
+import type { SessionEvent } from '@deepseek-ai/dsh-session/types'
 import { defineTool, type ToolDefinition } from '@deepseek-ai/dsh-tools'
 import type { Context } from '@deepseek-ai/cordis'
 import { VISION_SKILLS_CONTENT, VISION_SKILLS_NAME } from './skill.ts'
@@ -78,12 +79,49 @@ function isBundledSkillResult(value: unknown): boolean {
     && isBundledSkillContent(value.content)
 }
 
+/** Event names for one settled programmatic (PTC) Tool dispatch. */
+const PTC_DISPATCH_EVENT_TYPES: readonly string[] = ['tool/ptc-dispatch', 'tool/code-dispatch']
+
+/**
+ * Whether one PTC dispatch event records a successful load of the bundled
+ * Skill. The event is `tool/code-dispatch` through 0.1.2 and `tool/ptc-dispatch`
+ * from 0.1.5, so the name is compared outside the typed union and the payload is
+ * read structurally instead of narrowing on the installed host's literal.
+ * @param event - one durable Session event.
+ * @returns true when this dispatch ran the bundled Skill and returned its content.
+ */
+function isBundledSkillPtcDispatch(event: SessionEvent): boolean {
+  const type: string = event.type
+  if (!PTC_DISPATCH_EVENT_TYPES.includes(type)) return false
+  const data = (event as { data?: unknown }).data
+  return isRecord(data)
+    && data.name === 'skill'
+    && data.isError === false
+    && isVisionSkillArguments(data.arguments)
+    && containsBundledSkillContent(Array.isArray(data.content) ? data.content : [])
+}
+
+/**
+ * Read a Session's durable event log across both published accessors: 0.1.1 and
+ * earlier expose the `events` getter, while 0.1.2 replaced it with
+ * `snapshotEvents()` and dropped the property from the type. Probing
+ * structurally keeps every release line this package declares working at
+ * runtime and still compiles against the installed 0.1.5 typings.
+ * @param session - the Session whose durable history is inspected.
+ * @returns the event log in log order, empty when neither accessor is present.
+ */
+function sessionEvents(session: Session): readonly SessionEvent[] {
+  const adapter = session as unknown as {
+    snapshotEvents?: () => readonly SessionEvent[]
+    events?: readonly SessionEvent[]
+  }
+  return typeof adapter.snapshotEvents === 'function' ? adapter.snapshotEvents() : adapter.events ?? []
+}
+
 /** Whether durable history proves that this Session loaded the bundled Skill. */
 function hasLoadedVisionSkill(session: Session): boolean {
   const nativeCalls = new Set<string>()
-  const events = typeof (session as any).snapshotEvents === 'function'
-    ? (session as any).snapshotEvents()
-    : session.events ?? []
+  const events = sessionEvents(session)
   for (const event of events) {
     if (event.type === 'user/message') {
       const source = event.data.source
@@ -106,11 +144,7 @@ function hasLoadedVisionSkill(session: Session): boolean {
         && containsBundledSkillContent(block.content)) return true
       continue
     }
-    if (event.type === 'tool/code-dispatch'
-      && event.data.name === 'skill'
-      && event.data.isError === false
-      && isVisionSkillArguments(event.data.arguments)
-      && containsBundledSkillContent(event.data.content)) return true
+    if (isBundledSkillPtcDispatch(event)) return true
   }
   return false
 }

package/src/image-input-variants.ts

@@ -14,7 +14,7 @@ import { mkdtemp, rm, writeFile } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import { isAbsolute, join, resolve } from 'node:path'
 import type { Context } from '@deepseek-ai/cordis'
-import LlmService, { LlmAdapter, contentHasImage } from '@deepseek-ai/dsh-llm'
+import LlmService, { LlmAdapter, contentHasImage, freezeMessage } from '@deepseek-ai/dsh-llm'
 import type {
   ContentBlock,
   GenerateOptions,
@@ -23,6 +23,7 @@ import type {
   LlmProviderInfo,
   LlmResolvedModelInfo,
   Message,
+  ModelMessageSource,
   ResolvedRetryPolicy,
   StreamChunk,
 } from '@deepseek-ai/dsh-llm'
@@ -508,6 +509,80 @@ export async function convertImagesToEvidence(
   return converted
 }
 
+/**
+ * Present one delegated request's assistant history under the upstream route,
+ * restoring the adapter-private replay state the host withholds from a facade.
+ *
+ * The host hands `replayState` to a target adapter only while that exact
+ * adapter instance owns both the historical provider and the target provider.
+ * A variant route is a different instance, so history produced under the
+ * upstream route arrives stripped, and history produced under the variant
+ * route is stripped again inside the delegation (the upstream adapter does not
+ * own the variant route either). Losing that state costs provider-native
+ * fidelity — thinking signatures, native effort binding, response ids — which
+ * makes an upstream that needs reasoning continuity answer without thinking
+ * while still being asked for it, and the host reports only a state it could
+ * not use, never one it withheld.
+ *
+ * The durable transcript is the authority for what was withheld: history
+ * messages of this wrapper's own routes are matched by id, and only the request
+ * copy is re-provenanced. The Session itself is never touched, so the durable
+ * log keeps the route the user actually selected.
+ * @param upstream - upstream route the delegated request is dispatched under.
+ * @param messages - messages about to be delegated to that route.
+ * @param transcript - reads the durable Session transcript on demand, if any.
+ * @returns the messages to delegate: the input array when nothing needed repair.
+ */
+function presentUnderUpstreamRoute(
+  upstream: string,
+  messages: Message[],
+  transcript: () => readonly Message[] | undefined,
+): Message[] {
+  const variant = variantProviderId(upstream)
+  let durable: Map<string, Message> | undefined
+  let presented: Message[] | undefined
+  messages.forEach((message, index) => {
+    const source = message.source
+    if (message.role !== 'assistant' || source.kind !== 'model') return
+    if (source.provider !== upstream && source.provider !== variant) return
+    let replayState = source.replayState
+    if (replayState === undefined) {
+      durable ??= new Map(
+        (transcript() ?? [])
+          .filter(candidate => candidate.role === 'assistant')
+          .map(candidate => [String(candidate.id), candidate] as const),
+      )
+      const withheld = durable.get(String(message.id))
+      // Provenance and shape must still describe this very message: a Session
+      // that was rewritten under us (a fold, a rewind) must not have one
+      // message's state reattached to another's content.
+      if (withheld !== undefined && withheld.source.kind === 'model'
+        && withheld.source.provider === source.provider
+        && withheld.source.replayState !== undefined
+        && sameBlockShape(withheld.content, message.content)) {
+        replayState = withheld.source.replayState
+      }
+    }
+    // Nothing withheld and no re-provenancing to do: leave the message alone.
+    if (source.provider === upstream && replayState === undefined) return
+    const replayed: ModelMessageSource = {
+      kind: 'model',
+      provider: upstream,
+      model: source.model,
+      ...(replayState === undefined ? {} : { replayState }),
+    }
+    presented ??= [...messages]
+    presented[index] = freezeMessage({ ...message, source: replayed })
+  })
+  return presented ?? messages
+}
+
+/** Whether two block lists carry the same block types in the same order. */
+function sameBlockShape(left: readonly ContentBlock[], right: readonly ContentBlock[]): boolean {
+  return left.length === right.length
+    && left.every((block, index) => block.type === right[index]?.type)
+}
+
 /**
  * The adapter behind one variant route: model metadata declares image input,
  * and every stream rewrites image blocks before delegating to the upstream
@@ -539,6 +614,18 @@ export class ImageInputVariantAdapter extends LlmAdapter {
     return this.llm.providerRetryPolicy(this.upstream)
   }
 
+  /**
+   * Read the durable transcript of one Session, when the host still holds it.
+   * Only `presentUnderUpstreamRoute` consumes it, and only for messages whose
+   * replay state the host withheld from this facade route.
+   * @param sessionId - Session whose history is being delegated, if any.
+   * @returns the durable messages, or undefined without a live Session.
+   */
+  private durableTranscript(sessionId: GenerateOptions['sessionId']): readonly Message[] | undefined {
+    if (sessionId === undefined) return undefined
+    return this.ctx.sessions.get(sessionId as never)?.deriveMessages()
+  }
+
   override async listModels(provider: string): Promise<readonly LlmModelInfo[]> {
     const models = await this.llm.listModels(this.upstream)
     return models.filter(shouldWrapModel).map((model) => ({
@@ -605,9 +692,17 @@ export class ImageInputVariantAdapter extends LlmAdapter {
         .digest('hex'),
       storageDir,
     )
-    // Delegate through the host service under the upstream route: the variant
-    // is a wire-only facade, and the upstream route owns retry and replay.
-    yield* this.llm.stream({ ...options, provider: this.upstream, messages })
+    // Delegate through the host service under the upstream route, so the
+    // upstream's own middleware, retry policy, and replay handling still apply.
+    // Replay state is host-owned and route-scoped, so the history this facade
+    // route cannot receive back is restored before that delegation: the durable
+    // log keeps the user's route, only the delegated copy is re-provenanced.
+    const delegated = presentUnderUpstreamRoute(
+      this.upstream,
+      messages,
+      () => this.durableTranscript(options.sessionId),
+    )
+    yield* this.llm.stream({ ...options, provider: this.upstream, messages: delegated })
   }
 }
 

package/src/tools.ts

@@ -7,7 +7,7 @@
  */
 
 import type { ContentBlock } from '@deepseek-ai/dsh-llm'
-import { defineTool, type JsonValue, type ToolRunContext, type ValueSchemaSpec } from '@deepseek-ai/dsh-tools'
+import { defineTool, type ToolRunContext, type ValueSchemaSpec } from '@deepseek-ai/dsh-tools'
 import {
   VisionToolkitRuntime,
   type CropRequest,
@@ -23,6 +23,17 @@ import {
 } from './runtime.ts'
 import { platformTempDirectory } from './paths.ts'
 
+/**
+ * A value that round-trips through JSON without loss, as the host transports it
+ * through `presentationMeta`. DSH 0.1.2 stopped exporting this type from
+ * `@deepseek-ai/dsh-tools`, and 0.1.5 keeps it in `@deepseek-ai/dsh-util-values`,
+ * a package that does not exist before 0.1.2-alpha.2, so no single specifier
+ * covers every release line this package declares. Both homes declare the
+ * identical structural union, so redeclaring it here costs nothing and lets old
+ * and new hosts compile against the same contract.
+ */
+export type JsonValue = null | boolean | number | string | JsonValue[] | { [key: string]: JsonValue }
+
 const renderJson = (_args: unknown, value: unknown): ContentBlock[] => [{
   type: 'text',
   text: JSON.stringify(value, null, 2),