@lazyingart/agintiflow 0.20.214 → 0.20.215

package/docs/supervision-campaign-ledger.md

@@ -158,3 +158,31 @@ Independent verification passed the checked-in Java test script, the hidden
 event-window contract, generated-output tracking checks, clean-worktree checks,
 the focused permission/evidence regressions, and the complete AgInTiFlow npm
 suite.
+
+### Long-context memo synthesis and local visual verification
+
+`memo-full-context-pdf-014` used a normal, short writing prompt against a
+realistic interrupted chat export containing corrections, cancellations,
+deadlines, dependencies, completed work, publication boundaries, research
+ideas, and personal errands. The DeepSeek-backed writing agent read the full
+history and produced an editable two-page XeLaTeX/PDF memo instead of copying
+transport rows. Independent acceptance checked every critical commitment,
+rejected raw timestamps and internal identifiers, verified the PDF structure,
+and required a clean intentional commit.
+
+The first draft generalized a concrete Nutstore private-backup destination and
+left generated agent/perception directories unignored. The same durable session
+accepted those exact external findings, restored the actionable destination,
+added narrow generated-state ignores, rebuilt the PDF, inspected both rendered
+pages, and committed the correction as `a275878`. The hidden full-context
+checker, `qpdf`, `pdfinfo`, extracted-text review, independent page renders, and
+clean-worktree check then passed.
+
+The visual-review turn exposed a reusable provider-boundary defect: automatic
+`read_image` was blocked merely because DeepSeek was the active reasoning
+provider, even though the configured local image-perception handoff was safe
+and the perception runtime already supported it. Guardrails now allow the
+DeepSeek-to-LocalLLM handoff when local perception is enabled, continue to block
+hosted vision without explicit authorization, and block all automatic vision
+when both local and hosted routes are disabled. A focused regression covers the
+guard and the actual LocalLLM client route.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.214",
+  "version": "0.20.215",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",

package/scripts/smoke-perception-research.js

@@ -83,6 +83,36 @@ async function verifyProviderBoundary({ pngPath, store, config }) {
       config: { ...config, provider: "localllm", allowHostedImagePerception: false },
     });
     assert(!guardedImage.allowed, "guardrails allowed unapproved hosted image perception");
+    const guardedDeepSeekLocalHandoff = checkToolUse({
+      toolName: "read_image",
+      args: { path: path.relative(config.commandCwd, pngPath) },
+      snapshot: { elements: [] },
+      config: {
+        ...config,
+        provider: "deepseek",
+        allowLocalImagePerception: true,
+        allowHostedImagePerception: false,
+      },
+    });
+    assert(
+      guardedDeepSeekLocalHandoff.allowed,
+      "guardrails blocked the safe DeepSeek-to-LocalLLM image handoff"
+    );
+    const blockedDeepSeekWithoutHandoff = checkToolUse({
+      toolName: "read_image",
+      args: { path: path.relative(config.commandCwd, pngPath) },
+      snapshot: { elements: [] },
+      config: {
+        ...config,
+        provider: "deepseek",
+        allowLocalImagePerception: false,
+        allowHostedImagePerception: false,
+      },
+    });
+    assert(
+      !blockedDeepSeekWithoutHandoff.allowed,
+      "guardrails allowed auto image perception after every backend handoff was disabled"
+    );
     const guardedResearch = checkToolUse({
       toolName: "web_research",
       args: { query: "provider boundary smoke", mode: "openai" },

package/src/guardrails.js

@@ -230,11 +230,12 @@ export function checkToolUse({ toolName, args, snapshot, config }) {
       !args.dryRun &&
       ["", "auto", "default"].includes(provider) &&
       !["localllm", "openai"].includes(activeProvider) &&
+      config.allowLocalImagePerception === false &&
       config.allowHostedImagePerception !== true
     ) {
       return {
         allowed: false,
-        reason: `No automatic image-reading backend is enabled for active provider ${activeProvider}. Select localllm or explicitly enable a hosted image backend.`,
+        reason: `No automatic image-reading backend is enabled for active provider ${activeProvider}. Enable the local image-perception handoff, select localllm, or explicitly enable a hosted image backend.`,
         category: "perception-tools",
       };
     }