@ran-sh/dsh-crew 1.5.0 → 1.6.0

package/src/client/quick-panel.tsx

@@ -4,7 +4,7 @@ import { PanelHeader, PanelStyles } from './panel-chrome';
 // DSH Crew QUICK CONTROLS panel for the official 3080 surface.
 //
 // Narrow by design: only the user-facing master switch, flash/pro model
-// priority lists and vision/imagegen toggles — all other operations belong
+// priority lists — all other operations belong
 // to the native 3210 full control plane. Talks only to the quick endpoints
 // (/_dsh/dsh-crew/quick-config, /quick-status). Runtime maintenance stays on 3210.
 
@@ -17,17 +17,9 @@ type QuickConfig = {
   subagents_enabled?: boolean;
   flash_model_priority?: ModelEntry[];
   pro_model_priority?: ModelEntry[];
-  vision_enabled?: boolean;
-  imagegen_enabled?: boolean;
-  vision_provider?: string;
-  imagegen_provider?: string;
 };
 
 const RESTART_KEYS = new Set([
-  'vision_enabled',
-  'imagegen_enabled',
-  'vision_provider',
-  'imagegen_provider',
 ]);
 
 const T = {
@@ -48,10 +40,7 @@ const T = {
     flash: 'Worker / Flash',
     pro: 'Reviewer / Pro',
     addModel: '+ 添加模型',
-    multimodal: '多模态',
-    vision: '视觉',
-    imagegen: '生图',
-    provider: 'Provider',
+      provider: 'Provider',
     applyRestart: '应用并重启 Crew',
     savedNeedsRestart: '配置已保存 · 需要重启 Crew 才会生效',
     saved: '已保存',
@@ -76,9 +65,6 @@ const T = {
     flash: 'Worker / Flash',
     pro: 'Reviewer / Pro',
     addModel: '+ Add model',
-    multimodal: 'Multimodal',
-    vision: 'Vision',
-    imagegen: 'Imagegen',
     provider: 'Provider',
     applyRestart: 'Apply & restart Crew',
     savedNeedsRestart: 'Saved · restart Crew to take effect',
@@ -167,15 +153,11 @@ export function QuickPanel({ ctx }: { ctx: any }) {
     } finally { setBusy(false); }
   }, [t]);
 
-  const toggle = (key: 'subagents_enabled' | 'vision_enabled' | 'imagegen_enabled', value: boolean) => {
+  const toggle = (key: 'subagents_enabled', value: boolean) => {
     setConfig((c) => ({ ...(c ?? {}), [key]: value }));
     void patch({ [key]: value } as QuickConfig);
   };
 
-  const setProvider = (key: 'vision_provider' | 'imagegen_provider', value: string) => {
-    setConfig((c) => ({ ...(c ?? {}), [key]: value }));
-    void patch({ [key]: value } as QuickConfig);
-  };
 
   const moveModel = (listKey: 'flash_model_priority' | 'pro_model_priority', index: number, dir: -1 | 1) => {
     const list = [...((config?.[listKey] as ModelEntry[] | undefined) ?? [])];
@@ -268,23 +250,6 @@ export function QuickPanel({ ctx }: { ctx: any }) {
       </div>
       {modelList('flash_model_priority', t.flash)}
       {modelList('pro_model_priority', t.pro)}
-      <details className="crew-quick-group">
-        <summary><strong>{t.multimodal}</strong><span className="crew-quick-count">{t.vision} / {t.imagegen}</span></summary>
-        <div className="crew-quick-content">
-        <div className="crew-quick-media">
-          <label><input type="checkbox" disabled={busy} checked={config.vision_enabled === true}
-            onChange={(e) => toggle('vision_enabled', e.target.checked)} /> {t.vision}</label>
-          <input className="crew-quick-input" aria-label={`${t.vision} Provider`} placeholder={t.provider} disabled={busy} defaultValue={config.vision_provider ?? ''} key={`vision-${config.vision_provider ?? ''}`}
-            onBlur={(e) => setProvider('vision_provider', e.target.value)} />
-        </div>
-        <div className="crew-quick-media">
-          <label><input type="checkbox" disabled={busy} checked={config.imagegen_enabled === true}
-            onChange={(e) => toggle('imagegen_enabled', e.target.checked)} /> {t.imagegen}</label>
-          <input className="crew-quick-input" aria-label={`${t.imagegen} Provider`} placeholder={t.provider} disabled={busy} defaultValue={config.imagegen_provider ?? ''}
-            onBlur={(e) => setProvider('imagegen_provider', e.target.value)} />
-        </div>
-        </div>
-      </details>
       {restartPending && (
         <div className="crew-quick-row">
           <a className="crew-quick-btn primary" href={FULL} target="_blank" rel="noopener noreferrer">{t.openFull}</a>

package/src/client/surface-detection.mjs

@@ -26,7 +26,7 @@ export function classifyCrewSurface({ bridgeStatus, runtime } = {}) {
 /**
  * Surface capability model. The NATIVE 3210 Crew harness is the single full
  * control plane; the OFFICIAL 3080 surface is a narrow quick-controls panel
- * (total switch, flash/pro model priority, vision/imagegen toggles) plus a
+ * (total switch and the flash/pro model priority lists) plus a
  * deep link back to 3210. Unknown surfaces get diagnostics only — never write
  * authority. This replaces the old binary full-vs-minimal assumption.
  */

package/src/hub/entry.mjs

@@ -10,6 +10,7 @@
 import { apply as applyHub, inject, name, WorkerRegistry } from './index.mjs';
 import { getHubRuntimeIdentity } from '../runtime-identity.mjs';
 import { getProcessAdaptiveHealthStore } from '../adaptive-routing.mjs';
+import { claimReleaseInUse } from '../release-in-use.mjs';
 
 const RUNTIME_PATH = '/_dsh/dsh-crew/runtime';
 const ADAPTIVE_OBSERVER_INSTALLED = Symbol.for('@ran-sh/dsh-crew/adaptive-observer-installed');
@@ -92,6 +93,11 @@ export function installAdaptiveHealthObserver() {
 }
 
 export async function apply(ctx) {
+  // Declare this release in use before anything else. The Hub loads several
+  // modules lazily with a cache-busting query, so deleting the release under a
+  // running process would break those routes with no way to recover but a
+  // restart. Retention reads these claims and leaves a live release alone.
+  claimReleaseInUse();
   registerRuntimeEndpoint(ctx);
   installAdaptiveHealthObserver();
   return applyHub(ctx);

package/src/hub/index.mjs

@@ -12,7 +12,6 @@ import {
   normalizeGlobalConfig,
   chooseDefaultTier,
   normalizeWorkerProviderMode,
-  getMultimodalRegistrationPlan,
   canDispatchRole,
   resolveModelPolicy,
   resolveRoleTierHint,
@@ -112,10 +111,6 @@ export const QUICK_CONFIG_KEYS = Object.freeze([
   'subagents_enabled',
   'flash_model_priority',
   'pro_model_priority',
-  'vision_enabled',
-  'imagegen_enabled',
-  'vision_provider',
-  'imagegen_provider',
 ]);
 const LEGACY_TIER_MODELS = { flash: 'deepseek-v4-flash', pro: 'deepseek-v4-pro' };
 // Local copy (the hub must not import jobs.mjs, which pulls the DSH SDK into
@@ -1366,39 +1361,6 @@ export async function apply(ctx) {
     while (credentialPurgePlans.size > 32) credentialPurgePlans.delete(credentialPurgePlans.keys().next().value);
   };
 
-  // Multimodal bridge: register describe_image / generate_image for the DS
-  // model. Config is read per call so settings-page edits apply live; the
-  // capability switches (vision_enabled / imagegen_enabled) decide which tools
-  // are registered at plugin boot, so toggling them takes effect on restart.
-  try {
-    const { createMultimodalTools } = await import('../multimodal.mjs');
-    const { readGlobalConfig } = await import('../install/install.mjs');
-    const plan = getMultimodalRegistrationPlan(normalizeGlobalConfig(readGlobalConfig()));
-    for (const tool of createMultimodalTools(() => readGlobalConfig())) {
-      if (!plan.tools[tool.name]) {
-        ctx.logger?.info?.(`dsh-crew: ${tool.name} not registered (disabled by capability switch)`);
-        continue;
-      }
-      disposers.push(ctx.effect(() => ctx.tools.register(tool), `dsh-crew: ${tool.name} tool`));
-    }
-  } catch (err) {
-    ctx.logger?.warn?.(`dsh-crew: multimodal tools unavailable: ${err?.message ?? err}`);
-  }
-
-  // Vision route: image paste on the text-only DS models (admission adapter +
-  // pre-step transcription). Installed only while Crew Vision is enabled.
-  try {
-    const { installVisionRoute } = await import('../vision-route.mjs');
-    const { readGlobalConfig } = await import('../install/install.mjs');
-    if (getMultimodalRegistrationPlan(normalizeGlobalConfig(readGlobalConfig())).visionRoute) {
-      disposers.push(installVisionRoute(ctx, () => readGlobalConfig()));
-    } else {
-      ctx.logger?.info?.('dsh-crew: vision route not installed (Crew Vision disabled by capability switch)');
-    }
-  } catch (err) {
-    ctx.logger?.warn?.(`dsh-crew: vision route unavailable: ${err?.message ?? err}`);
-  }
-
   ctx.inject(['webServer'], (webCtx) => {
     const webServer = webCtx.webServer;
     const disposers = [];
@@ -2676,43 +2638,6 @@ export async function apply(ctx) {
       },
     }));
 
-    disposers.push(webServer.register({
-      kind: 'exact', path: `${ROUTE_BASE}/vision-models`,
-      handler: async (req, res) => {
-        if (!isLoopbackRequest(req)) return sendJson(res, 403, { ok: false, error: 'loopback only' });
-        try {
-          const url = new URL(req.url, 'http://localhost');
-          const provider = url.searchParams.get('provider');
-          const force = url.searchParams.get('refresh') === '1';
-          const lang = url.searchParams.get('lang');
-          adoptLang(lang);
-          const { listVisionModels } = await import('../multimodal.mjs');
-          const { readGlobalConfig } = await import('../install/install.mjs');
-          return sendJson(res, 200, { ok: true, models: await listVisionModels(provider, force, () => readGlobalConfig(), lang) });
-        } catch (err) {
-          return sendJson(res, 500, { ok: false, error: err?.message ?? String(err) });
-        }
-      },
-    }));
-
-    disposers.push(webServer.register({
-      kind: 'exact', path: `${ROUTE_BASE}/provider-test`,
-      handler: async (req, res) => {
-        if (!isLoopbackRequest(req)) return sendJson(res, 403, { ok: false, error: 'loopback only' });
-        if (req.method !== 'POST') return sendJson(res, 405, { ok: false, error: 'POST only' });
-        try {
-          // The entry comes from the panel form so unsaved edits can be probed.
-          const entry = await readBody(req);
-          adoptLang(entry?.lang);
-          const { testProvider } = await import('../multimodal.mjs');
-          const result = await testProvider(entry, entry?.lang);
-          return sendJson(res, 200, { ok: true, result });
-        } catch (err) {
-          return sendJson(res, 500, { ok: false, error: err?.message ?? String(err) });
-        }
-      },
-    }));
-
     disposers.push(webServer.register({
       kind: 'exact', path: `${ROUTE_BASE}/install/status`,
       handler: async (req, res) => {
@@ -2761,7 +2686,7 @@ export async function apply(ctx) {
     return () => { for (const d of disposers.reverse()) d(); };
   });
 
-  ctx.logger?.info?.('dsh-crew hub mounted (jobs API + installer endpoints + multimodal tools)');
+  ctx.logger?.info?.('dsh-crew hub mounted (jobs API + installer endpoints)');
   return async () => {
     for (const d of disposers.reverse()) { try { d(); } catch {} }
     await hub.dispose();

package/src/i18n.mjs

@@ -1,5 +1,5 @@
 // Server-side locale for strings that reach the user: connectivity-test
-// reports, model-list labels, error messages and the vision transcription.
+// reports, model-list labels and error messages.
 //
 // The panel owns the authoritative locale (DSH's setting may be absent, in
 // which case the browser decides), so it passes `lang` with every request and

package/src/install/install-legacy.mjs

@@ -15,6 +15,20 @@ const MARKETPLACE_NAME = 'dsh-crew';
 const PLUGIN_KEY = `dsh-crew@${MARKETPLACE_NAME}`;
 const POLICY_START = '<!-- DSH CREW MANAGED POLICY:START -->';
 const POLICY_END = '<!-- DSH CREW MANAGED POLICY:END -->';
+
+/**
+ * The directory Codex actually reads.
+ *
+ * Codex honours `CODEX_HOME` and falls back to `~/.codex`; writing only to the
+ * latter silently does nothing for anyone who set it — the registration stays
+ * frozen on whatever release was current when they set it, while every install
+ * reports success because the file it wrote really did change. Resolve the same
+ * way Codex does, and treat an empty or whitespace value as unset.
+ */
+export function codexHomeDir(home = homedir(), env = process.env) {
+  const override = typeof env?.CODEX_HOME === 'string' ? env.CODEX_HOME.trim() : '';
+  return override ? resolve(override) : join(home, '.codex');
+}
 export const CODEX_LEGACY_POLICY_HASHES = Object.freeze([
   '2d6f3839bb3df4bda90f481726281292b1a4b4585298b1cf9ec56215295b5c78',
 ]);
@@ -80,8 +94,8 @@ export function stripKnownLegacyCodexPolicy(text, { knownHashes = CODEX_LEGACY_P
   return `${keptPrefix}${match[0]}${keptSuffix}`;
 }
 
-function installGlobalCodexPolicy({ home, root }) {
-  const file = join(home, '.codex', 'AGENTS.md');
+function installGlobalCodexPolicy({ home, root, env = process.env }) {
+  const file = join(codexHomeDir(home, env), 'AGENTS.md');
   const block = managedPolicyBlock(root);
   if (!block) return { ok: false, action: 'global policy template missing' };
   mkdirSync(dirname(file), { recursive: true });
@@ -100,14 +114,14 @@ function installGlobalCodexPolicy({ home, root }) {
   return { ok: true, action: `global policy: ${file}` };
 }
 
-function globalCodexPolicyReady({ home, root = ROOT }) {
+function globalCodexPolicyReady({ home, root = ROOT, env = process.env }) {
   const block = managedPolicyBlock(root);
-  const text = readText(join(home, '.codex', 'AGENTS.md'));
+  const text = readText(join(codexHomeDir(home, env), 'AGENTS.md'));
   return !!block && typeof text === 'string' && text.includes(block);
 }
 
-function uninstallGlobalCodexPolicy({ home }) {
-  const file = join(home, '.codex', 'AGENTS.md');
+function uninstallGlobalCodexPolicy({ home, env = process.env }) {
+  const file = join(codexHomeDir(home, env), 'AGENTS.md');
   const current = readText(file);
   if (typeof current !== 'string') return null;
   const managed = new RegExp(`(?:\\r?\\n){0,2}${POLICY_START.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}[\\s\\S]*?${POLICY_END.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}(?:\\r?\\n)?`, 'm');
@@ -282,26 +296,6 @@ export const GLOBAL_CONFIG_DEFAULTS = {
   pro_model_priority: [],
   pro_model_priority_configured: false,
   pro_model_fallback: 'harness-default',
-  // ---- configurable-crew multimodal switches ----
-  // False = the Crew describe_image tool and vision route are not registered
-  // at DSH boot (takes effect after a DSH restart). Provider/model values are
-  // kept untouched so re-enabling restores the previous setup.
-  vision_enabled: false,
-  imagegen_enabled: false,
-  // Multimodal bridge: which subscription CLI lends the text-only DS model
-  // eyes (describe_image) and a brush (generate_image).
-  vision_provider: 'off', // claude-code | codex | grok | agy | <custom id> | off
-  vision_model: 'haiku', // model passed to the vision CLI; free-form
-  imagegen_provider: 'off', // codex | agy | grok | <custom id> | off
-  // User-defined providers, each either an OpenAI-compatible HTTP endpoint or a
-  // local command. Entry shape:
-  //   { id, name, type: 'api' | 'cli', models: [],
-  //     api: base_url, api_key, imagegen_model
-  //     cli: vision_command, imagegen_command }
-  // CLI commands run via bash with shell-quoted placeholders: vision
-  // {image} {question} {model} (stdout is the answer), imagegen
-  // {prompt} {output} {size} (must write the file to {output}).
-  custom_providers: [],
   // User-added model ids per provider, merged into the panel's model list.
   extra_models: {},
   // Hub-mode agent preset per tier: 'default' follows the DSH roster default.
@@ -356,8 +350,6 @@ export function mergeStoredGlobalConfig(stored) {
   // workspace-targeted jobs on Windows; an explicit user-set `minimal` value
   // is still preserved by the normal object merge above.
   if (!has('preset_flash')) merged.preset_flash = 'default';
-  if (!has('vision_enabled')) merged.vision_enabled = stored.vision_provider !== 'off';
-  if (!has('imagegen_enabled')) merged.imagegen_enabled = stored.imagegen_provider !== 'off';
   return merged;
 }
 
@@ -393,7 +385,7 @@ export function writeGlobalConfig(patch) {
 }
 
 /** What is currently installed where — drives the settings-page buttons. */
-export function installStatus({ home = homedir(), root = ROOT } = {}) {
+export function installStatus({ home = homedir(), root = ROOT, env = process.env } = {}) {
   const settings = readJson(join(home, '.claude', 'settings.json'), {});
   const enabled = settings.enabledPlugins;
   const claudeInstalled = !!(enabled && !Array.isArray(enabled) && enabled[PLUGIN_KEY]);
@@ -409,7 +401,7 @@ export function installStatus({ home = homedir(), root = ROOT } = {}) {
     permissions: claudePermissionsReady(settings),
   };
   const claudeMissing = Object.entries(claudeComponents).filter(([, present]) => !present).map(([key]) => key);
-  const codexRoot = join(home, '.codex');
+  const codexRoot = codexHomeDir(home, env);
   const configFile = join(codexRoot, 'config.toml');
   const configText = readText(configFile) ?? '';
   const workerFile = join(codexRoot, 'agents', 'ds-worker.toml');
@@ -429,7 +421,7 @@ export function installStatus({ home = homedir(), root = ROOT } = {}) {
     status_prompt: expectedStatusPrompt !== null && readText(join(codexRoot, 'prompts', 'dsh-status.md')) === expectedStatusPrompt,
     mcp: !!expectedTarget && mcpTarget === expectedTarget,
     target_alignment: !!expectedTarget && workerTarget === expectedTarget && reviewerTarget === expectedTarget && mcpTarget === expectedTarget,
-    global_policy: globalCodexPolicyReady({ home, root }),
+    global_policy: globalCodexPolicyReady({ home, root, env }),
   };
   const codexInstalled = Object.values(components).some(Boolean)
     || existsSync(join(codexRoot, 'agents', 'ds-flash.toml'))
@@ -448,24 +440,24 @@ export function installStatus({ home = homedir(), root = ROOT } = {}) {
   };
 }
 
-export function uninstallCodex({ home = homedir() } = {}) {
+export function uninstallCodex({ home = homedir(), env = process.env } = {}) {
   const actions = [];
   // Both the v0.2 roles (ds-worker / ds-reviewer) and the deprecated v0.1
   // aliases (ds-flash / ds-pro) are dsh-crew managed; uninstall removes only
   // these, never a user's own role files.
   for (const f of ['ds-flash.toml', 'ds-pro.toml', 'ds-worker.toml', 'ds-reviewer.toml']) {
-    const p = join(home, '.codex', 'agents', f);
+    const p = join(codexHomeDir(home, env), 'agents', f);
     if (existsSync(p)) { backup(p); rmSync(p); actions.push(`removed: ${p} (backup kept)`); }
   }
   for (const f of ['dsh-config.md', 'dsh-status.md']) {
-    const p = join(home, '.codex', 'prompts', f);
+    const p = join(codexHomeDir(home, env), 'prompts', f);
     if (existsSync(p)) { rmSync(p); actions.push(`removed: ${p}`); }
   }
-  const policyAction = uninstallGlobalCodexPolicy({ home });
+  const policyAction = uninstallGlobalCodexPolicy({ home, env });
   if (policyAction) actions.push(policyAction);
   // Remove only the dsh-crew entry from [mcp_servers], keeping any other
   // MCP servers the user configured.
-  const configFile = join(home, '.codex', 'config.toml');
+  const configFile = join(codexHomeDir(home, env), 'config.toml');
   if (existsSync(configFile)) {
     const before = readFileSync(configFile, 'utf8');
     const lineRe = /(^|\n)[ \t]*dsh-crew\s*=\s*\{[^\n]*\}/;
@@ -590,9 +582,9 @@ export async function installClaudeCode({ home = homedir(), statusline = false,
   return { ok: true, actions };
 }
 
-export function installCodex({ home = homedir(), scope, root = ROOT } = {}) {
+export function installCodex({ home = homedir(), scope, root = ROOT, env = process.env } = {}) {
   const actions = [];
-  const agentsDir = scope === 'project' ? join(process.cwd(), '.codex', 'agents') : join(home, '.codex', 'agents');
+  const agentsDir = scope === 'project' ? join(process.cwd(), '.codex', 'agents') : join(codexHomeDir(home, env), 'agents');
   mkdirSync(agentsDir, { recursive: true });
   const srcDir = join(root, 'codex', 'agents');
   // Windows drive paths must render with forward slashes: backslashes in a
@@ -609,7 +601,7 @@ export function installCodex({ home = homedir(), scope, root = ROOT } = {}) {
     writeFileSync(dest, rendered);
     actions.push(`role: ${dest}`);
   }
-  const promptsDir = scope === 'project' ? join(process.cwd(), '.codex', 'prompts') : join(home, '.codex', 'prompts');
+  const promptsDir = scope === 'project' ? join(process.cwd(), '.codex', 'prompts') : join(codexHomeDir(home, env), 'prompts');
   mkdirSync(promptsDir, { recursive: true });
   const promptsSrc = join(root, 'codex', 'prompts');
   for (const f of readdirSync(promptsSrc).filter((f) => f.endsWith('.md'))) {
@@ -617,9 +609,9 @@ export function installCodex({ home = homedir(), scope, root = ROOT } = {}) {
     actions.push(`prompt: ${join(promptsDir, f)}`);
   }
   if (scope !== 'project') {
-    const act = writeGlobalCodexMcpServer(home, renderedPath);
+    const act = writeGlobalCodexMcpServer(home, renderedPath, env);
     actions.push(...act);
-    const policy = installGlobalCodexPolicy({ home, root });
+    const policy = installGlobalCodexPolicy({ home, root, env });
     if (!policy.ok) return { ok: false, actions: [...actions, policy.action] };
     actions.push(policy.action);
   }
@@ -634,8 +626,8 @@ export function installCodex({ home = homedir(), scope, root = ROOT } = {}) {
  * the user already configured. Idempotent (updates in place). Never requires
  * the codex CLI.
  */
-export function writeGlobalCodexMcpServer(home, renderedPath) {
-  const configFile = join(home, '.codex', 'config.toml');
+export function writeGlobalCodexMcpServer(home, renderedPath, env = process.env) {
+  const configFile = join(codexHomeDir(home, env), 'config.toml');
   const entry = `dsh-crew = { command = "node", args = ["${renderedPath}"] }`;
   const backupFile = backup(configFile);
   const existing = existsSync(configFile) ? readFileSync(configFile, 'utf8') : '';

package/src/install/npx-lifecycle.mjs

@@ -42,6 +42,7 @@ import { homedir } from 'node:os';
 import * as realInstaller from './install.mjs';
 import { samePayloadContent, capturePayloadContent } from './payload-content.mjs';
 import { crewDshHome, crewProfileDir } from './install.mjs';
+import { liveReleaseClaims } from '../release-in-use.mjs';
 import { ensureCrewDshRuntime, ensureCrewPluginRegistration, removeCrewPluginRegistration, migrateCrewDshRuntime, installDshInto, restoreRetainedRuntime, crewDshRuntimeRoot, payloadDshVersion, TARGET_DSH_VERSION } from '../dsh-cli-runtime.mjs';
 import {
   ensureOfficialWebIntegration,
@@ -1085,9 +1086,15 @@ function gcOldReleases({ home, keep = KEEP_RELEASES, protect = null }) {
   const releasesDir = crewReleasesDir({ home });
   if (!existsSync(releasesDir)) return;
   const removed = [];
+  // A running Hub keeps executing the release it started from and re-reads
+  // several modules from disk on every request, so removing that release breaks
+  // those routes with no recovery but a restart. Protect what live processes
+  // claim, not just what the pointer names.
+  const claimed = liveReleaseClaims({ home }).map((dir) => resolve(dir));
+  const live = new Set([...(protect ? [resolve(protect)] : []), ...claimed]);
   const dirs = readdirSync(releasesDir)
     .map((name) => join(releasesDir, name))
-    .filter((dir) => (!pointer || dir !== pointer.path) && (!protect || dir !== protect));
+    .filter((dir) => (!pointer || dir !== pointer.path) && !live.has(resolve(dir)));
   const incomplete = [];
   const complete = [];
   for (const dir of dirs) {
@@ -3434,7 +3441,14 @@ export async function runNpxCli({
     else if (command === 'releases') result = await actions.releases({ args, log });
     else if (command === 'rollback') result = await actions.rollback({ version: args?.[0], args, log });
     else result = await actions[command]({ log });
-    return result?.ok === false ? 1 : 0;
+    // Surface why the command failed. Actions return a structured failure rather
+    // than throwing, so without this the CLI exits 1 having printed nothing —
+    // `dsh-crew rollback` with no version was a silent failure.
+    if (result?.ok === false) {
+      error(`dsh-crew ${command} failed: ${result.error ?? result.code ?? 'unknown error'}`);
+      return 1;
+    }
+    return 0;
   } catch (err) {
     error(`dsh-crew ${command} failed: ${err?.message ?? err}`);
     return 1;

package/src/policy-legacy.mjs

@@ -506,15 +506,6 @@ export function normalizeGlobalConfig(raw = {}) {
     else { flashState = flashState ?? 'auto'; proState = proState ?? 'auto'; }
   }
 
-  // Capability switches: an old config with provider=off must not flip the
-  // capability back on; anything else keeps the capability enabled.
-  const visionEnabled = has('vision_enabled')
-    ? normalizeEnabled(raw.vision_enabled)
-    : raw.vision_provider !== 'off';
-  const imagegenEnabled = has('imagegen_enabled')
-    ? normalizeEnabled(raw.imagegen_enabled)
-    : raw.imagegen_provider !== 'off';
-
   const normalized = {
     ...raw,
     subagents_enabled: normalizeEnabled(raw.subagents_enabled),
@@ -534,8 +525,6 @@ export function normalizeGlobalConfig(raw = {}) {
     pro_model_priority: normalizeModelPriority(raw.pro_model_priority),
     pro_model_priority_configured: raw.pro_model_priority_configured === true || normalizeModelPriority(raw.pro_model_priority).length > 0,
     pro_model_fallback: raw.pro_model_fallback === 'harness-default' ? raw.pro_model_fallback : 'harness-default',
-    vision_enabled: visionEnabled,
-    imagegen_enabled: imagegenEnabled,
   };
   // This normalized legacy view is the single input to the v0.2 canonical
   // migration, so every consumer sees the same worker/reviewer model policy
@@ -788,43 +777,4 @@ export function validateRoles(raw) {
     if (!seen.has(r)) { seen.add(r); out.push(r); }
   }
   return { roles: out, dropped };
-}
-
-// ---------- multimodal capability ----------
-
-/** Capability availability after both the switch and the provider are checked. */
-export function getCapabilities(config) {
-  const c = config;
-  const vision = {
-    enabled: normalizeBool(c.vision_enabled, true),
-    provider: c.vision_provider ?? 'off',
-    providerOff: c.vision_provider === 'off',
-    usable: normalizeBool(c.vision_enabled, true) && c.vision_provider !== 'off',
-  };
-  const imagegen = {
-    enabled: normalizeBool(c.imagegen_enabled, true),
-    provider: c.imagegen_provider ?? 'off',
-    providerOff: c.imagegen_provider === 'off',
-    usable: normalizeBool(c.imagegen_enabled, true) && c.imagegen_provider !== 'off',
-  };
-  return { vision, imagegen };
-}
-
-/**
- * Registration plan for the hub's multimodal bridge: which tools to register
- * and whether the vision route (deepseek-vision adapter + transcription
- * waterfall) should be installed. Tool names are the decision points; the
- * hub applies the plan at plugin boot, so capability switches take effect
- * after a DSH restart.
- */
-export function getMultimodalRegistrationPlan(config) {
-  const { vision, imagegen } = getCapabilities(config);
-  return {
-    tools: {
-      describe_image: vision.usable,
-      generate_image: imagegen.usable,
-    },
-    visionRoute: vision.usable,
-    requiresRestart: true,
-  };
-}
+}

package/src/provider-inventory.mjs

@@ -92,7 +92,7 @@ function modelIds(provider) {
  * Build a secret-free provider inventory from live Harness and Crew-owned
  * observations. No credential value is accepted or copied into the result.
  */
-export function buildProviderInventory({ catalog = {}, declarations = [], policy = {}, tombstones = {}, activeJobs = [], multimodalRefs = {}, additionalProviderIds = [] } = {}) {
+export function buildProviderInventory({ catalog = {}, declarations = [], policy = {}, tombstones = {}, activeJobs = [], additionalProviderIds = [] } = {}) {
   const catalogProviders = Array.isArray(catalog?.providers) ? catalog.providers : [];
   const safeDeclarations = Array.isArray(declarations) ? declarations : [];
   const ids = [];
@@ -121,7 +121,6 @@ export function buildProviderInventory({ catalog = {}, declarations = [], policy
       ? activeJobs.filter((job) => normalizeProviderId(job?.provider) === id
         && !['done', 'failed', 'cancelled'].includes(job?.status)).length
       : Number.isInteger(activeJobs?.[id]) ? Math.max(0, activeJobs[id]) : 0;
-    const multimodal = Array.isArray(multimodalRefs?.[id]) ? multimodalRefs[id].length : Number.isInteger(multimodalRefs?.[id]) ? Math.max(0, multimodalRefs[id]) : 0;
     const declarationFile = text(declaration?.file);
     const locator = text(declaration?.locator);
 
@@ -173,7 +172,6 @@ export function buildProviderInventory({ catalog = {}, declarations = [], policy
         reviewer_priority: findPriorityIndex(policy?.reviewer ?? policy?.review, 'priority', id),
         reviewer_escalation: findPriorityIndex(policy?.reviewer ?? policy?.review, 'escalation_priority', id),
         active_jobs: active,
-        multimodal_refs: multimodal,
       },
       desired_state: tombstoned ? 'absent' : 'present',
       activation: declared ? 'restart-required' : 'live',