dsh-modellix 0.2.0 → 0.3.0

package/lib/index.d.ts

@@ -7,7 +7,6 @@ import { z as z$1 } from "zod";
 import { ToolDefinition } from "@deepseek-ai/dsh-tools";
 import { Context } from "@deepseek-ai/cordis";
 import { Agent } from "@deepseek-ai/dsh-agent";
-import { ImageMediaType } from "@deepseek-ai/dsh-attachment";
 
 //#region src/core/config.d.ts
 declare const CURRENT_CONFIG_SCHEMA_VERSION: 1;
@@ -530,7 +529,7 @@ declare function extractAllowedSubmitUrl(document: Readonly<Record<string, unkno
 interface PreparedMediaUpload {
   readonly bytes: Uint8Array;
   readonly filename: string;
-  readonly mimeType: ImageMediaType;
+  readonly mimeType: string;
 }
 interface MediaUploadRecord {
   readonly fileId: string;
@@ -555,11 +554,14 @@ declare class MediaUploadClient {
 declare function prepareMediaUploadFromSession(agent: Agent | undefined, attachmentId: string, signal?: AbortSignal): Promise<PreparedMediaUpload>;
 declare function prepareMediaUploadFromPath(cwd: string | undefined, inputPath: string): Promise<PreparedMediaUpload>;
 //#endregion
-//#region src/design/schema-ir.d.ts
+//#region src/shared/json-value.d.ts
+/** Lossless JSON values shared across Harness versions. */
 type JsonPrimitive = null | boolean | number | string;
-type JsonValue = JsonPrimitive | readonly JsonValue[] | {
-  readonly [key: string]: JsonValue;
+type JsonValue = JsonPrimitive | JsonValue[] | {
+  [key: string]: JsonValue;
 };
+//#endregion
+//#region src/design/schema-ir.d.ts
 type UiFieldKind = "string" | "number" | "integer" | "boolean" | "object" | "array" | "media" | "unknown";
 type UiMediaKind = "image" | "video" | "audio";
 interface UiConstraints {
@@ -718,6 +720,7 @@ interface ReadPredictionInput {
   readonly apiKey: string;
   readonly maxAttempts?: number;
   readonly signal?: AbortSignal;
+  readonly waitSeconds?: number;
 }
 declare class PredictionClient {
   #private;
@@ -726,6 +729,10 @@ declare class PredictionClient {
   submit(input: SubmitPredictionInput): Promise<PredictionTask>;
   /** GET retries only transient read failures and is capped at five attempts. */
   readTask(input: ReadPredictionInput): Promise<PredictionTask>;
+  /** Wait for one bounded server observation; does not submit or sleep between snapshots. */
+  waitTask(input: Omit<ReadPredictionInput, "waitSeconds"> & {
+    readonly timeoutSeconds?: number;
+  }): Promise<PredictionTask>;
 }
 declare function validateSubmitEndpoint(endpoint: string, modelSlug: string): URL;
 declare function parsePredictionTask(payload: unknown, expectedTaskId?: string): PredictionTask | null;
@@ -894,6 +901,7 @@ interface CredentialSnapshot {
   readonly credentialEpoch: number;
 }
 interface DesignHostControllerOptions {
+  readonly serializeObservation?: (operation: () => Promise<void>) => Promise<void>;
   readonly storage: StoragePort;
   readonly resolveCredential: () => Promise<CredentialSnapshot | undefined>;
   readonly isCredentialEpochCurrent: (credentialEpoch: number) => boolean;
@@ -985,6 +993,7 @@ declare class DesignHostController {
   constructor(options: DesignHostControllerOptions);
   handle(endpoint: string, payload: unknown, signal?: AbortSignal): Promise<DesignSnapshotWire>;
   pollRunning(signal?: AbortSignal): Promise<boolean>;
+  invalidateWaits(): void;
   private read;
   private refresh;
   private selectModel;
@@ -1100,6 +1109,7 @@ declare class ModellixRuntime {
   private enqueueDesignWrite;
   private rememberDesignModel;
   private syncDesignTools;
+  private syncWebTools;
   private scheduleDesignPoll;
 }
 //#endregion
@@ -1445,5 +1455,5 @@ interface Config {}
 declare const Config: z<Config>;
 declare function apply(ctx: Context): Promise<void>;
 //#endregion
-export { AUTHENTICATED_CATALOG_URL, ApprovedHttpRequest, AvailableDesignResult, BeginLlmMaterializationInput, BeginOnboardingSaveInput, CURRENT_CONFIG_SCHEMA_VERSION, CacheEntry, CachePort, ClockPort, Config, CredentialBroker, CredentialBrokerOptions, CredentialDescriptor, CredentialEpochConflictError, CredentialMutationCoordinator, CredentialMutationResult, CredentialSource, CredentialState, CredentialValidationError, CredentialVerification, DEFAULT_DESIGN_WAL_KEY, DEFAULT_RESULT_TTL_MS, DEFAULT_WEB_RESPONSE_BYTES, DEFAULT_WEB_SEARCH_MAX_RESULTS, DESIGN_PLANNER_ENDPOINT, DESIGN_PLANNER_MODEL, DesignConfig, DesignError, DesignErrorCode, DesignHostController, DesignHostControllerOptions, DesignLogEvent, DesignLogLevel, DesignMediaCategory, DesignModelSummary, DesignPlannerClient, DesignPlannerClientOptions, DesignPlannerRequest, DesignPlannerResult, DesignPollDiagnosticCode, DesignSchemaIR, DesignSnapshotWire, DesignTaskRecord, DesignTaskRepository, DesignTaskRepositoryOptions, DesignTaskState, DesignToolController, DesignWalEvent, EMPTY_LLM_ROUTE_LEDGER, ExactParameterPatch, FetchPort, HarnessCredentialInfo, HarnessCredentialPort, HeaderRecord, HeaderValue, HttpMethod, HttpPolicyError, HttpRequestPolicyInput, HttpResponseBoundaryError, HttpRetryFailure, InvalidCredentialEpoch, JsonPrimitive, JsonValue, LlmCatalogCache, LlmCatalogCacheOptions, LlmCatalogClient, LlmCatalogClientOptions, LlmCatalogRequestError, LlmConfig, LlmCredentialSnapshot, LlmInterruptedMaterializationEvidence, LlmInterruptedMaterializationResult, LlmMaterializationConflictError, LlmMaterializationReceipt, LlmMaterializationRecovery, LlmMaterializationRollbackError, LlmOwnedEntry, LlmOwnershipConfig, LlmPreparedMaterialization, LlmRegistryBackreadError, LlmRegistryReader, LlmRegistryVerificationOptions, LlmRouteConflictError, LlmRouteLedger, LlmRouteOwnership, LlmRouteOwnershipConfig, LlmRouteOwnershipEntry, LlmSettingsMaterializer, LlmSettingsPort, LoggerPort, MAX_WEB_QUERY_CHARS, MAX_WEB_SEARCH_RESULTS, MAX_WEB_URL_CHARS, MODELLIX_CREDENTIAL_REF, MODELLIX_LLM_BASE_URL, MODELLIX_LLM_MODELS_URL, MODELLIX_LLM_PROVENANCE_FIELD, MODELLIX_LLM_PROVIDER_ID, MODELLIX_MEDIA_GENERATE_TOOL, MODELLIX_MEDIA_GET_RESULT_TOOL, MODELLIX_MEDIA_LIST_TOOL, MODELLIX_MEDIA_PREPARE_TOOL, MODELLIX_MEDIA_SCHEMA_TOOL, MODELLIX_MEDIA_UPLOAD_FILE_TOOL, MODELLIX_ORIGINS, MODELLIX_SETTINGS_NAMESPACE, MODELLIX_WEB_FETCH_ENDPOINT, MODELLIX_WEB_FETCH_TOOL, MODELLIX_WEB_PROVIDER_ID, MODELLIX_WEB_SEARCH_ENDPOINT, MODELLIX_WEB_SEARCH_TOOL, MediaUploadClient, MediaUploadInput, MediaUploadRecord, ModelCatalogClient, ModelCatalogClientOptions, ModelCatalogPage, ModelCatalogQuery, ModelSchemaClient, ModelSchemaClientOptions, ModelSchemaDocument, ModellixDesignDomain, ModellixErrorCode, ModellixErrorContext, ModellixErrorContract, ModellixFailure, ModellixLlmCatalog, ModellixLlmModel, ModellixOriginName, ModellixPiAiRoute, ModellixRuntime, ModellixRuntimeState, ModellixService, ModellixWebContractError, ModellixWebCredentialSnapshot, ModellixWebFetchFailedError, ModellixWebFetchProvider, ModellixWebProviderError, ModellixWebProviderOptions, ModellixWebProviders, ModellixWebRegistry, ModellixWebSearchProvider, NaturalLanguagePlan, OnboardingConfig, OnboardingRecoveryAction, OnboardingRecoveryDecision, OnboardingSaveConflictError, OnboardingSavePhase, OnboardingSaveRecovery, OnboardingStatus, PUBLIC_PORTAL_CATALOG_URL, ParsedFetchFailure, ParsedFetchResponse, ParsedFetchSuccess, ParsedSearchResponse, PersistedLlmRouteOwnership, PiAiModelEntry, PluginConfig, PluginSettingsController, PluginSettingsSchema, PluginSettingsSnapshot, PredictionClient, PredictionClientOptions, PredictionResource, PredictionTask, PredictionTaskStatus, PreparedMediaUpload, REDACTED, ReadPredictionInput, RedactedValue, RequestDeadline, RetentionPolicy, RetryDelayInput, RetryOptions, RetrySuccess, RouteMaterializationPlan, RouteRemovalPlan, SchemaDiagnostic, SchemaParserLimits, ServiceId, ServiceToggles, ServicesConfig, SettingsNamespaceDescriptor, SettingsScopeLike, SettingsServiceLike, SleepPort, StaleLlmCatalogError, StoragePort, SubmitPredictionInput, UiConstraints, UiField, UiFieldKind, UiMediaKind, UiVariant, UnauthorizedTransition, UnsupportedConfigVersionError, VerificationTransition, WebConfig, abandonLlmMaterialization, advanceCredentialEpoch, apply, applyCredentialDescriptor, applyExactPatch, applyNaturalLanguage, applyRuntimeUnauthorized, applyVerificationResult, approveHttpRequest, approveRedirect, beginLlmMaterialization, beginOnboardingSave, buildFetchRequest, buildInvocationBody, buildSearchRequest, completeLlmMaterialization, completeOnboardingSave, computeRetryDelay, createCredentialState, createDefaultConfig, createModellixDesignToolDefinitions, createModellixWebProviders, createModellixWebToolDefinitions, deferOnboarding, deriveModellixSessionId, deriveModellixUserId, executeWithRetry, extractAllowedSubmitUrl, getServiceToggles, inject, isAllowedModellixOrigin, isCredentialInvalidError, isPublicHostname, isRetryableError, isRetryableReadFailure, isValidModellixIdentity, markOnboardingCredentialSaved, materializeDefaults, migrateConfig, missingCredentialDescriptor, modellixDesignDomainSpec, name, normalizeCredentialDescriptor, openDesignStorage, parseCatalogPage, parseDesignSchema, parseFetchResponse, parsePredictionTask, parseResources, parseRetryAfter, parseSearchResponse, planLlmRouteMaterialization, planLlmRouteRemoval, prepareMediaUploadFromPath, prepareMediaUploadFromSession, preserveStoredCredentialAfterCandidateFailure, preserveVerificationAfterTransientFailure, readBoundedResponseJson, readBoundedResponseText, reconcileLlmRouteLedgerAfterInterruption, reconcileOnboardingSave, redactForLog, redactHeaders, redactUrl, registerModellixDesignTools, registerModellixWebProviderInstances, registerModellixWebProviders, registerModellixWebTools, replayDesignWal, requestDeadline, retryAfterFromFailure, selectAvailableResults, setServiceToggles, systemClock, systemSleep, toModellixError, validatePublicHttpUrl, validateSubmitEndpoint, verifyLlmRegistryBackread };
+export { AUTHENTICATED_CATALOG_URL, ApprovedHttpRequest, AvailableDesignResult, BeginLlmMaterializationInput, BeginOnboardingSaveInput, CURRENT_CONFIG_SCHEMA_VERSION, CacheEntry, CachePort, ClockPort, Config, CredentialBroker, CredentialBrokerOptions, CredentialDescriptor, CredentialEpochConflictError, CredentialMutationCoordinator, CredentialMutationResult, CredentialSource, CredentialState, CredentialValidationError, CredentialVerification, DEFAULT_DESIGN_WAL_KEY, DEFAULT_RESULT_TTL_MS, DEFAULT_WEB_RESPONSE_BYTES, DEFAULT_WEB_SEARCH_MAX_RESULTS, DESIGN_PLANNER_ENDPOINT, DESIGN_PLANNER_MODEL, DesignConfig, DesignError, DesignErrorCode, DesignHostController, DesignHostControllerOptions, DesignLogEvent, DesignLogLevel, DesignMediaCategory, DesignModelSummary, DesignPlannerClient, DesignPlannerClientOptions, DesignPlannerRequest, DesignPlannerResult, DesignPollDiagnosticCode, DesignSchemaIR, DesignSnapshotWire, DesignTaskRecord, DesignTaskRepository, DesignTaskRepositoryOptions, DesignTaskState, DesignToolController, DesignWalEvent, EMPTY_LLM_ROUTE_LEDGER, ExactParameterPatch, FetchPort, HarnessCredentialInfo, HarnessCredentialPort, HeaderRecord, HeaderValue, HttpMethod, HttpPolicyError, HttpRequestPolicyInput, HttpResponseBoundaryError, HttpRetryFailure, InvalidCredentialEpoch, type JsonPrimitive, type JsonValue, LlmCatalogCache, LlmCatalogCacheOptions, LlmCatalogClient, LlmCatalogClientOptions, LlmCatalogRequestError, LlmConfig, LlmCredentialSnapshot, LlmInterruptedMaterializationEvidence, LlmInterruptedMaterializationResult, LlmMaterializationConflictError, LlmMaterializationReceipt, LlmMaterializationRecovery, LlmMaterializationRollbackError, LlmOwnedEntry, LlmOwnershipConfig, LlmPreparedMaterialization, LlmRegistryBackreadError, LlmRegistryReader, LlmRegistryVerificationOptions, LlmRouteConflictError, LlmRouteLedger, LlmRouteOwnership, LlmRouteOwnershipConfig, LlmRouteOwnershipEntry, LlmSettingsMaterializer, LlmSettingsPort, LoggerPort, MAX_WEB_QUERY_CHARS, MAX_WEB_SEARCH_RESULTS, MAX_WEB_URL_CHARS, MODELLIX_CREDENTIAL_REF, MODELLIX_LLM_BASE_URL, MODELLIX_LLM_MODELS_URL, MODELLIX_LLM_PROVENANCE_FIELD, MODELLIX_LLM_PROVIDER_ID, MODELLIX_MEDIA_GENERATE_TOOL, MODELLIX_MEDIA_GET_RESULT_TOOL, MODELLIX_MEDIA_LIST_TOOL, MODELLIX_MEDIA_PREPARE_TOOL, MODELLIX_MEDIA_SCHEMA_TOOL, MODELLIX_MEDIA_UPLOAD_FILE_TOOL, MODELLIX_ORIGINS, MODELLIX_SETTINGS_NAMESPACE, MODELLIX_WEB_FETCH_ENDPOINT, MODELLIX_WEB_FETCH_TOOL, MODELLIX_WEB_PROVIDER_ID, MODELLIX_WEB_SEARCH_ENDPOINT, MODELLIX_WEB_SEARCH_TOOL, MediaUploadClient, MediaUploadInput, MediaUploadRecord, ModelCatalogClient, ModelCatalogClientOptions, ModelCatalogPage, ModelCatalogQuery, ModelSchemaClient, ModelSchemaClientOptions, ModelSchemaDocument, ModellixDesignDomain, ModellixErrorCode, ModellixErrorContext, ModellixErrorContract, ModellixFailure, ModellixLlmCatalog, ModellixLlmModel, ModellixOriginName, ModellixPiAiRoute, ModellixRuntime, ModellixRuntimeState, ModellixService, ModellixWebContractError, ModellixWebCredentialSnapshot, ModellixWebFetchFailedError, ModellixWebFetchProvider, ModellixWebProviderError, ModellixWebProviderOptions, ModellixWebProviders, ModellixWebRegistry, ModellixWebSearchProvider, NaturalLanguagePlan, OnboardingConfig, OnboardingRecoveryAction, OnboardingRecoveryDecision, OnboardingSaveConflictError, OnboardingSavePhase, OnboardingSaveRecovery, OnboardingStatus, PUBLIC_PORTAL_CATALOG_URL, ParsedFetchFailure, ParsedFetchResponse, ParsedFetchSuccess, ParsedSearchResponse, PersistedLlmRouteOwnership, PiAiModelEntry, PluginConfig, PluginSettingsController, PluginSettingsSchema, PluginSettingsSnapshot, PredictionClient, PredictionClientOptions, PredictionResource, PredictionTask, PredictionTaskStatus, PreparedMediaUpload, REDACTED, ReadPredictionInput, RedactedValue, RequestDeadline, RetentionPolicy, RetryDelayInput, RetryOptions, RetrySuccess, RouteMaterializationPlan, RouteRemovalPlan, SchemaDiagnostic, SchemaParserLimits, ServiceId, ServiceToggles, ServicesConfig, SettingsNamespaceDescriptor, SettingsScopeLike, SettingsServiceLike, SleepPort, StaleLlmCatalogError, StoragePort, SubmitPredictionInput, UiConstraints, UiField, UiFieldKind, UiMediaKind, UiVariant, UnauthorizedTransition, UnsupportedConfigVersionError, VerificationTransition, WebConfig, abandonLlmMaterialization, advanceCredentialEpoch, apply, applyCredentialDescriptor, applyExactPatch, applyNaturalLanguage, applyRuntimeUnauthorized, applyVerificationResult, approveHttpRequest, approveRedirect, beginLlmMaterialization, beginOnboardingSave, buildFetchRequest, buildInvocationBody, buildSearchRequest, completeLlmMaterialization, completeOnboardingSave, computeRetryDelay, createCredentialState, createDefaultConfig, createModellixDesignToolDefinitions, createModellixWebProviders, createModellixWebToolDefinitions, deferOnboarding, deriveModellixSessionId, deriveModellixUserId, executeWithRetry, extractAllowedSubmitUrl, getServiceToggles, inject, isAllowedModellixOrigin, isCredentialInvalidError, isPublicHostname, isRetryableError, isRetryableReadFailure, isValidModellixIdentity, markOnboardingCredentialSaved, materializeDefaults, migrateConfig, missingCredentialDescriptor, modellixDesignDomainSpec, name, normalizeCredentialDescriptor, openDesignStorage, parseCatalogPage, parseDesignSchema, parseFetchResponse, parsePredictionTask, parseResources, parseRetryAfter, parseSearchResponse, planLlmRouteMaterialization, planLlmRouteRemoval, prepareMediaUploadFromPath, prepareMediaUploadFromSession, preserveStoredCredentialAfterCandidateFailure, preserveVerificationAfterTransientFailure, readBoundedResponseJson, readBoundedResponseText, reconcileLlmRouteLedgerAfterInterruption, reconcileOnboardingSave, redactForLog, redactHeaders, redactUrl, registerModellixDesignTools, registerModellixWebProviderInstances, registerModellixWebProviders, registerModellixWebTools, replayDesignWal, requestDeadline, retryAfterFromFailure, selectAvailableResults, setServiceToggles, systemClock, systemSleep, toModellixError, validatePublicHttpUrl, validateSubmitEndpoint, verifyLlmRegistryBackread };
 //# sourceMappingURL=index.d.ts.map

package/lib/index.js

@@ -2,9 +2,9 @@ import z from "@deepseek-ai/schemastery";
 import { createHash, randomUUID } from "node:crypto";
 import { getOrCreateAnonymousUserId } from "@deepseek-ai/dsh-anonymous-user-id";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
-import { SettingsConflictError, settingsNamespace } from "@deepseek-ai/dsh-settings";
+import { SettingsConflictError } from "@deepseek-ai/dsh-settings";
 import { lstat, open, realpath } from "node:fs/promises";
-import { basename, isAbsolute, relative, resolve } from "node:path";
+import { basename, extname, isAbsolute, relative, resolve } from "node:path";
 import { WebError } from "@deepseek-ai/dsh-web";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { defineDomain } from "@deepseek-ai/dsh-storage-domain";
@@ -1547,6 +1547,10 @@ var MediaUploadClient = class {
 			throw new DesignError("SUBMIT_UNKNOWN", "The media upload outcome is unknown; do not retry automatically", { status: response.status });
 		}
 		if (!response.ok) {
+			if (response.status === 429) {
+				response.body?.cancel().catch(() => void 0);
+				throw new DesignError("SUBMIT_REJECTED", "Upload quota exceeded. List existing files and explicitly delete only unneeded files before trying again; no automatic cleanup was performed", { status: 429 });
+			}
 			const ambiguous = response.status === 408 || response.status === 409 || response.status === 425 || response.status === 429 || response.status >= 500;
 			response.body?.cancel().catch(() => void 0);
 			throw new DesignError(ambiguous ? "SUBMIT_UNKNOWN" : "SUBMIT_REJECTED", ambiguous ? "The media upload outcome is unknown; do not retry automatically" : `The media upload was rejected with HTTP ${String(response.status)}`, { status: response.status });
@@ -1591,12 +1595,19 @@ async function prepareMediaUploadFromPath(cwd, inputPath) {
 	try {
 		const opened = await handle.stat();
 		if (!opened.isFile() || opened.size !== before.size || opened.dev !== before.dev || opened.ino !== before.ino) throw new DesignError("INVALID_ARGUMENT", "Media file changed while it was being opened");
-		bytes = await handle.readFile();
+		const bounded = Buffer.alloc(before.size + 1);
+		let offset = 0;
+		while (offset < bounded.length) {
+			const { bytesRead } = await handle.read(bounded, offset, bounded.length - offset, null);
+			if (bytesRead === 0) break;
+			offset += bytesRead;
+		}
+		bytes = bounded.subarray(0, offset);
 	} finally {
 		await handle.close();
 	}
 	if (bytes.byteLength !== before.size) throw new DesignError("INVALID_ARGUMENT", "Media file changed while it was being read");
-	const mimeType = detectImageMimeType(bytes);
+	const mimeType = detectMediaMimeType(bytes, resolved);
 	return {
 		bytes,
 		filename: safeFilename(basename(resolved), mimeType),
@@ -1611,7 +1622,74 @@ function within(root, candidate) {
 	const suffix = relative(root, candidate);
 	return suffix === "" || !suffix.startsWith("..") && !isAbsolute(suffix);
 }
-function detectImageMimeType(bytes) {
+const MEDIA_EXTENSIONS = {
+	jpg: "image/jpeg",
+	jpeg: "image/jpeg",
+	png: "image/png",
+	webp: "image/webp",
+	gif: "image/gif",
+	bmp: "image/bmp",
+	tif: "image/tiff",
+	tiff: "image/tiff",
+	heic: "image/heic",
+	heif: "image/heif",
+	mp4: "video/mp4",
+	m4v: "video/x-m4v",
+	webm: "video/webm",
+	mov: "video/quicktime",
+	mkv: "video/x-matroska",
+	avi: "video/x-msvideo",
+	mp3: "audio/mpeg",
+	wav: "audio/wav",
+	m4a: "audio/mp4",
+	aac: "audio/aac",
+	ogg: "audio/ogg",
+	flac: "audio/flac",
+	opus: "audio/opus",
+	weba: "audio/webm"
+};
+function detectMediaMimeType(bytes, filename) {
+	const extension = extname(filename).slice(1).toLowerCase();
+	const expected = MEDIA_EXTENSIONS[extension];
+	if (expected === void 0) throw new DesignError("INVALID_ARGUMENT", "Unsupported media file extension");
+	const head = Buffer.from(bytes.subarray(0, 16)).toString("latin1");
+	const riffType = head.startsWith("RIFF") ? head.slice(8, 12) : "";
+	const iso = bytes.length >= 12 && head.slice(4, 8) === "ftyp";
+	const ebml = head.startsWith("Eߣ");
+	const audioFrame = bytes.length >= 2 && bytes[0] === 255 && ((bytes[1] ?? 0) & 224) === 224;
+	const tiff = [
+		73,
+		73,
+		42,
+		0
+	].every((byte, index) => bytes[index] === byte) || [
+		77,
+		77,
+		0,
+		42
+	].every((byte, index) => bytes[index] === byte);
+	if ({
+		gif: /^GIF8[79]a/u.test(head),
+		bmp: head.startsWith("BM"),
+		tif: tiff,
+		tiff,
+		heic: iso && /^(?:heic|heix|hevc|hevx|mif1)$/u.test(head.slice(8, 12)),
+		heif: iso && /^(?:heic|heix|hevc|hevx|mif1|msf1)$/u.test(head.slice(8, 12)),
+		mp4: iso,
+		m4v: iso,
+		m4a: iso,
+		mov: iso || head.slice(4, 8) === "moov",
+		avi: riffType === "AVI ",
+		wav: riffType === "WAVE",
+		webm: ebml,
+		mkv: ebml,
+		weba: ebml,
+		mp3: head.startsWith("ID3") || audioFrame,
+		aac: audioFrame,
+		ogg: head.startsWith("OggS"),
+		opus: head.startsWith("OggS"),
+		flac: head.startsWith("fLaC")
+	}[extension] === true) return expected;
 	if (bytes.length >= 8 && bytes.slice(0, 8).every((value, index) => value === [
 		137,
 		80,
@@ -1621,14 +1699,18 @@ function detectImageMimeType(bytes) {
 		10,
 		26,
 		10
-	][index])) return "image/png";
-	if (bytes.length >= 3 && bytes[0] === 255 && bytes[1] === 216 && bytes[2] === 255) return "image/jpeg";
+	][index]) && expected === "image/png") return expected;
+	if (bytes.length >= 3 && bytes[0] === 255 && bytes[1] === 216 && bytes[2] === 255) {
+		if (expected === "image/jpeg") return expected;
+	}
 	const ascii = (start, end) => new TextDecoder("ascii").decode(bytes.slice(start, end));
-	if (bytes.length >= 12 && ascii(0, 4) === "RIFF" && ascii(8, 12) === "WEBP") return "image/webp";
-	throw new DesignError("INVALID_ARGUMENT", "Unsupported media type; use PNG, JPEG, or WebP");
+	if (bytes.length >= 12 && ascii(0, 4) === "RIFF" && ascii(8, 12) === "WEBP") {
+		if (expected === "image/webp") return expected;
+	}
+	throw new DesignError("INVALID_ARGUMENT", "Unsupported media type or content does not match its extension");
 }
 function safeFilename(value, mimeType) {
-	const extension = mimeType === "image/png" ? ".png" : mimeType === "image/webp" ? ".webp" : ".jpg";
+	const extension = `.${Object.entries(MEDIA_EXTENSIONS).find(([, type]) => type === mimeType)?.[0] ?? "bin"}`;
 	const headerSafe = value.normalize("NFC").replaceAll(/["\\/]/gu, "_");
 	const cleaned = Array.from(headerSafe, (character) => {
 		const codePoint = character.codePointAt(0) ?? 0;
@@ -2510,10 +2592,18 @@ var PredictionClient = class {
 		const apiKey = validateApiKey(input.apiKey);
 		const maxAttempts = boundedAttempts(input.maxAttempts ?? 3);
 		const url = new URL(`/api/v1/tasks/${encodeURIComponent(taskId)}`, PREDICTION_ORIGIN);
+		if (input.waitSeconds !== void 0) {
+			if (!Number.isSafeInteger(input.waitSeconds) || input.waitSeconds < 1 || input.waitSeconds > 45) throw new DesignError("INVALID_ARGUMENT", "Wait duration must be an integer from 1 to 45 seconds");
+			url.searchParams.set("wait", "true");
+			url.searchParams.set("timeout", String(input.waitSeconds));
+		}
+		const totalTimeout = input.waitSeconds === void 0 ? this.#requestTimeoutMs : input.waitSeconds * 1e3 + 5e3;
+		const overall = input.waitSeconds === void 0 ? void 0 : requestDeadline(input.signal, totalTimeout);
 		let lastFailure = null;
 		for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {
 			input.signal?.throwIfAborted();
-			const deadline = requestDeadline(input.signal, this.#requestTimeoutMs);
+			overall?.signal.throwIfAborted();
+			const deadline = overall ?? requestDeadline(input.signal, this.#requestTimeoutMs);
 			try {
 				const response = await this.#fetch(url, {
 					method: "GET",
@@ -2531,7 +2621,7 @@ var PredictionClient = class {
 						retryAfterMs: failure.retryAfterMs
 					});
 					lastFailure = failure;
-					await this.#waitBeforeRetry(attempt, failure.retryAfterMs, input.signal);
+					await this.#waitBeforeRetry(attempt, failure.retryAfterMs, overall?.signal ?? input.signal);
 					continue;
 				}
 				let payload;
@@ -2543,6 +2633,10 @@ var PredictionClient = class {
 				}
 				const task = parsePredictionTask(payload, taskId);
 				if (task === null) throw new DesignError("UNEXPECTED_RESPONSE", "Task status response does not contain a valid task");
+				if (input.waitSeconds !== void 0 && (task.status === "queued" || task.status === "running")) {
+					const wait = asRecord$3(asRecord$3(asRecord$3(payload)?.data)?.wait);
+					if (typeof wait?.timed_out !== "boolean" || typeof wait.elapsed_ms !== "number") throw new DesignError("UNEXPECTED_RESPONSE", "The task API does not support server-side wait; keep the task ID and do not resubmit");
+				}
 				this.#log({
 					level: "info",
 					event: "design.task.read",
@@ -2555,22 +2649,30 @@ var PredictionClient = class {
 			} catch (caught) {
 				if (input.signal?.aborted === true) throw caught;
 				if (deadline.timedOut()) {
-					if (attempt === maxAttempts) throw new DesignError("TASK_READ_FAILED", "Task status request timed out within the retry bound", {
+					if (attempt === maxAttempts || input.waitSeconds !== void 0) throw new DesignError("TASK_READ_FAILED", "Task status request timed out within the retry bound", {
 						cause: caught,
 						status: 408
 					});
 					lastFailure = caught;
-					await this.#waitBeforeRetry(attempt, null, input.signal);
+					await this.#waitBeforeRetry(attempt, null, overall?.signal ?? input.signal);
 					continue;
 				}
 				if (caught instanceof DesignError) throw caught;
 				if (isAbortError$1(caught) || attempt === maxAttempts) throw new DesignError("TASK_READ_FAILED", "Task status could not be read within the retry bound", { cause: caught });
 				lastFailure = caught;
-				await this.#waitBeforeRetry(attempt, null, input.signal);
+				await this.#waitBeforeRetry(attempt, null, overall?.signal ?? input.signal);
 			}
 		}
 		throw new DesignError("TASK_READ_FAILED", "Task status could not be read within the retry bound", { cause: lastFailure });
 	}
+	/** Wait for one bounded server observation; does not submit or sleep between snapshots. */
+	async waitTask(input) {
+		return this.readTask({
+			...input,
+			waitSeconds: input.timeoutSeconds ?? 30,
+			maxAttempts: input.maxAttempts ?? 1
+		});
+	}
 	async #waitBeforeRetry(attempt, retryAfter, signal) {
 		const delay = Math.min(MAX_INLINE_RETRY_DELAY_MS, Math.max(retryAfter ?? 0, 250 * 2 ** (attempt - 1)));
 		this.#log({
@@ -5480,6 +5582,11 @@ var DesignHostController = class {
 	#catalogNotice = null;
 	#catalogCredentialEpoch = null;
 	#pollCursor = 0;
+	#pollInFlight;
+	#pollAbort;
+	#pollEpoch;
+	#observationTail = Promise.resolve();
+	#serializeObservation;
 	constructor(options) {
 		this.#repository = new DesignTaskRepository({ storage: options.storage });
 		this.#resolveCredential = options.resolveCredential;
@@ -5490,6 +5597,11 @@ var DesignHostController = class {
 		this.#rememberModel = options.rememberModel;
 		this.#fetch = options.fetch ?? globalThis.fetch;
 		this.#now = options.now ?? Date.now;
+		this.#serializeObservation = options.serializeObservation ?? ((operation) => {
+			const run = this.#observationTail.then(operation);
+			this.#observationTail = run.catch(() => void 0);
+			return run;
+		});
 	}
 	async handle(endpoint, payload, signal) {
 		signal?.throwIfAborted();
@@ -5509,32 +5621,59 @@ var DesignHostController = class {
 		if (!this.#isEnabled()) return false;
 		const credential = await this.#resolveCredential();
 		if (credential === void 0) return false;
+		if (this.#pollEpoch !== credential.credentialEpoch) this.invalidateWaits();
+		if (this.#pollInFlight !== void 0) return this.#pollInFlight;
+		const abort = new AbortController();
+		this.#pollAbort = abort;
+		this.#pollEpoch = credential.credentialEpoch;
+		const combined = signal === void 0 ? abort.signal : AbortSignal.any([signal, abort.signal]);
+		const run = this.#waitRunning(credential, combined);
+		this.#pollInFlight = run;
+		try {
+			return await run;
+		} finally {
+			if (this.#pollInFlight === run) {
+				this.#pollInFlight = void 0;
+				this.#pollAbort = void 0;
+			}
+		}
+	}
+	invalidateWaits() {
+		this.#pollAbort?.abort();
+		this.#pollAbort = void 0;
+		this.#pollInFlight = void 0;
+		this.#pollEpoch = void 0;
+	}
+	async #waitRunning(credential, signal) {
 		const eligible = (await this.#repository.listTasks()).filter((task) => task.taskId !== null && task.credentialEpoch === credential.credentialEpoch && !task.pollBlocked && (task.state === "queued" || task.state === "running" || task.state === "unknown")).filter((task) => task.nextPollAt <= this.#now()).sort((left, right) => left.createdAt - right.createdAt || String(left.taskId).localeCompare(String(right.taskId)));
 		const start = eligible.length === 0 ? 0 : this.#pollCursor % eligible.length;
 		const batch = circularSlice(eligible, start, 5);
 		this.#pollCursor = eligible.length === 0 ? 0 : (start + batch.length) % eligible.length;
-		for (const record of batch) {
-			if (!this.#isCredentialEpochCurrent(credential.credentialEpoch)) break;
+		await Promise.all(batch.map(async (record) => {
+			if (!this.#isCredentialEpochCurrent(credential.credentialEpoch)) return;
 			try {
-				const task = await new PredictionClient({ fetch: this.#fetch }).readTask({
+				const task = await new PredictionClient({ fetch: this.#fetch }).waitTask({
 					taskId: record.taskId,
 					apiKey: credential.value,
 					maxAttempts: 1,
 					...signal === void 0 ? {} : { signal }
 				});
-				await this.#repository.recordTaskObserved(task);
+				await this.#serializeObservation(async () => {
+					if (!signal.aborted && this.#isCredentialEpochCurrent(credential.credentialEpoch)) await this.#repository.recordTaskObserved(task);
+				});
 			} catch (error) {
 				if (signal?.aborted === true) throw error;
 				const failure = classifyPollFailure(error, record.pollAttempt + 1, this.#now());
-				await this.#repository.recordPollFailure(record.taskId, failure);
+				await this.#serializeObservation(async () => {
+					if (!signal.aborted && this.#isCredentialEpochCurrent(credential.credentialEpoch)) await this.#repository.recordPollFailure(record.taskId, failure);
+				});
 				await this.#markUnauthorized(error, credential.credentialEpoch);
 			}
-		}
+		}));
 		return (await this.#repository.listTasks()).some((task) => task.credentialEpoch === credential.credentialEpoch && !task.pollBlocked && (task.state === "queued" || task.state === "running" || task.state === "unknown"));
 	}
 	async read(input, signal) {
 		const session = this.#session(input.sessionId);
-		if (this.#isEnabled()) await this.pollRunning(signal);
 		const models = await this.#loadModelsSafely(signal);
 		if (session.selectedModelId === null && models.length > 0) {
 			const modelId = chooseDefaultModel(models, this.#getLastModel());
@@ -6215,13 +6354,14 @@ function stableJson(value) {
 //#region src/host/agent-routing-context.ts
 function createModellixRoutingMessage(state) {
 	const sections = [];
+	const nonMediaWebRouting = state.webEnabled ? "use the Modellix Web tools for those questions" : "leave those questions to the Harness-native web_search or web_fetch tools when available";
 	if (state.webEnabled) sections.push({
 		name: "Web routing",
 		text: "Use modellix_web_search automatically for current, changing, external, or source-verification questions. Use modellix_web_fetch automatically when the user supplies a public URL or a Modellix search result needs full-page reading. Prefer these explicit Modellix tools over the native web_search and web_fetch tools, and never call both tool families for the same operation. Do not wait for the user to name a tool, do not browse when the user explicitly says not to, and never automatically repeat a failed or unknown Modellix Web request."
 	});
 	if (state.mediaEnabled) sections.push({
 		name: "Media routing",
-		text: "Use Modellix media tools automatically only when the user intends to create, edit, transform, animate, upload, or inspect generated image, video, or audio work. Do not use media tools for documentation, pricing, general model-capability, or public API-reference questions; use the Modellix Web tools for those questions unless the user explicitly requests a live Modellix Design model Schema. For media work, use modellix_media_list then modellix_media_schema when a compatible model is not already known. Treat every returned field description and allowed value as authoritative; do not guess, translate, or replace a published parameter format, and omit optional fields when the user did not request them. A request that refers to the previous/current work, conversation attachments, or prior Modellix result URLs, asks to change or animate it, or asks to preserve its composition, subject, identity, or structure is not a new text-to-media request: select an image-edit/image-to-image, image-to-video, or video-to-video model as appropriate, inspect its schema, and place the latest relevant Modellix result URL in the declared media input field. Never replace that source-dependent operation with text-to-image or text-to-video. Reuse usable URLs and upload local inputs with modellix_media_upload_file. After submitting, inspect the task at most once in the same turn. Hard response rule: while a task is nonterminal, ordinary assistant text may say only that the submission was accepted and that the result card and Modellix Design own the current status. It must not say that the task is queued, running, generating, processing, pending, or any equivalent current-state wording, because ordinary assistant text is immutable and becomes stale. Never launch a replacement or parallel generation while a matching task is active unless the user explicitly requests another result, and never repeat an unknown generation or upload outcome."
+		text: `Use Modellix media tools automatically only when the user intends to create, edit, transform, animate, upload, or inspect generated image, video, or audio work. Do not use media tools for documentation, pricing, general model-capability, or public API-reference questions; ${nonMediaWebRouting} unless the user explicitly requests a live Modellix Design model Schema. For media work, use modellix_media_list then modellix_media_schema when a compatible model is not already known. Treat every returned field description and allowed value as authoritative; do not guess, translate, or replace a published parameter format, and omit optional fields when the user did not request them. A request that refers to the previous/current work, conversation attachments, or prior Modellix result URLs, asks to change or animate it, or asks to preserve its composition, subject, identity, or structure is not a new text-to-media request: select an image-edit/image-to-image, image-to-video, or video-to-video model as appropriate, inspect its schema, and place the latest relevant Modellix result URL in the declared media input field. Never replace that source-dependent operation with text-to-image or text-to-video. Reuse usable URLs and upload local inputs with modellix_media_upload_file. After submitting, inspect the task at most once in the same turn. Hard response rule: while a task is nonterminal, ordinary assistant text may say only that the submission was accepted and that the result card and Modellix Design own the current status. It must not say that the task is queued, running, generating, processing, pending, or any equivalent current-state wording, because ordinary assistant text is immutable and becomes stale. Never launch a replacement or parallel generation while a matching task is active unless the user explicitly requests another result, and never repeat an unknown generation or upload outcome.`
 	});
 	if (sections.length === 0) return null;
 	return createUserMessage({
@@ -6562,7 +6702,7 @@ function createSchemaTool(controller) {
 function createUploadFileTool(client, resolveCredential) {
 	return defineTool({
 		name: MODELLIX_MEDIA_UPLOAD_FILE_TOOL,
-		description: "Upload one image from the current conversation or session workspace to Modellix and return a temporary URL for media model inputs. Supply exactly one of attachment_id or path. Reuse returned URLs and never retry an unknown upload outcome automatically.",
+		description: "Upload an image attachment from this conversation or a supported image, video, or audio file inside the session workspace. Maximum 16 MiB (16777216 bytes). Supply exactly one of attachment_id or path. Reuse returned URLs and never retry an unknown upload outcome automatically. On quota errors, explicitly select unneeded files for deletion; never clean up automatically.",
 		parameters: {
 			attachment_id: {
 				type: "string",
@@ -6570,7 +6710,7 @@ function createUploadFileTool(client, resolveCredential) {
 			},
 			path: {
 				type: "string",
-				description: "Image path inside the current session workspace."
+				description: "Image, video, or audio path inside the current session workspace."
 			}
 		},
 		output: {
@@ -7859,7 +7999,7 @@ var PluginSettingsController = class {
 //#endregion
 //#region src/host/runtime.ts
 const RPC_CHANNEL = "/modellix";
-const LLM_SETTINGS_NAMESPACE = settingsNamespace("llm-pi-ai");
+const LLM_SETTINGS_NAMESPACE = "llm-pi-ai";
 const LLM_OWNERSHIP_ROLLBACK_FAILED = "MODELLIX_LLM_OWNERSHIP_ROLLBACK_FAILED";
 const LLM_MATERIALIZATION_RECOVERED = "MODELLIX_LLM_MATERIALIZATION_RECOVERED";
 const LLM_MATERIALIZATION_RECOVERY_FAILED = "MODELLIX_LLM_MATERIALIZATION_RECOVERY_FAILED";
@@ -7899,6 +8039,7 @@ var ModellixRuntime = class ModellixRuntime {
 	#credentialRecoveryRequestId = null;
 	#designPollTimer;
 	#disposeDesignTools;
+	#disposeWebTools;
 	#closing = false;
 	#lifecycleAbort = new AbortController();
 	static async create(ctx) {
@@ -7953,6 +8094,7 @@ var ModellixRuntime = class ModellixRuntime {
 			mutate: (operations, expectedRevision) => this.#ctx.settings.mutate(LLM_SETTINGS_NAMESPACE, operations, expectedRevision)
 		});
 		this.#design = new DesignHostController({
+			serializeObservation: (operation) => this.enqueueDesignWrite(operation),
 			storage: designStorage,
 			resolveCredential: () => this.resolveUsableCredential(),
 			isCredentialEpochCurrent: (epoch) => epoch === this.#credential.credentialEpoch,
@@ -7972,11 +8114,13 @@ var ModellixRuntime = class ModellixRuntime {
 		this.#ctx.effect(() => this.#settings.watch((next, previous) => {
 			if (this.#closing) return void 0;
 			this.#config = next;
+			if (next.credentialEpoch !== previous.credentialEpoch || !next.services.design.enabled) this.#design.invalidateWaits();
 			this.#catalog.invalidate();
 			if (next.services.design.enabled !== previous.services.design.enabled) {
 				this.syncDesignTools(next.services.design.enabled);
 				if (next.services.design.enabled) this.scheduleDesignPoll(0);
 			}
+			if (next.services.web.enabled !== previous.services.web.enabled) this.syncWebTools(next.services.web.enabled);
 			if (next.services.llm.enabled !== previous.services.llm.enabled || next.credentialEpoch !== previous.credentialEpoch) return this.enqueueWrite(() => this.reconcileLiveSettings());
 		}), "dsh-modellix: live settings snapshot");
 		this.#ctx.on("credentials/reference-updated", (updated) => {
@@ -8008,36 +8152,12 @@ var ModellixRuntime = class ModellixRuntime {
 			});
 		});
 		this.#ctx.effect(() => {
-			const providers = createModellixWebProviders({
-				isEnabled: () => this.#config.services.web.enabled,
-				hasCredential: () => this.credentialIsUsable(),
-				resolveCredential: async () => {
-					const hit = await this.resolveUsableCredential();
-					if (hit === void 0) this.requestCredentialRecovery();
-					return hit === void 0 ? null : {
-						apiKey: hit.value,
-						credentialEpoch: hit.credentialEpoch
-					};
-				},
-				getUserId: () => this.#userId,
-				isCredentialEpochCurrent: (epoch) => epoch === this.#config.credentialEpoch,
-				onCredentialRejected: async (epoch) => {
-					if (epoch !== this.#config.credentialEpoch) return;
-					this.markCredentialRejected(epoch);
-				}
-			});
-			const disposeProviders = registerModellixWebProviderInstances(this.#ctx.web, providers);
-			try {
-				const disposeTools = registerModellixWebTools(this.#ctx, providers);
-				return () => {
-					disposeTools();
-					disposeProviders();
-				};
-			} catch (error) {
-				disposeProviders();
-				throw error;
-			}
-		}, "dsh-modellix: Web providers and explicit Modellix tools");
+			this.syncWebTools(this.#config.services.web.enabled);
+			return () => {
+				this.#disposeWebTools?.();
+				this.#disposeWebTools = void 0;
+			};
+		}, "dsh-modellix: explicit Modellix Web tools");
 		this.#ctx.on("agent/session-start", ({ agent }) => {
 			const message = createModellixRoutingMessage({
 				mediaEnabled: this.#config.services.design.enabled && this.credentialIsUsable(),
@@ -8045,12 +8165,14 @@ var ModellixRuntime = class ModellixRuntime {
 			});
 			if (message !== null) agent.inject(message);
 		});
-		this.#ctx.effect(() => this.#ctx.connection.rpc.handle(RPC_CHANNEL, (endpoint, payload, signal) => this.handleRpc(endpoint, payload, signal), { authority: "loopback" }), "dsh-modellix: loopback configuration and Design RPC");
+		const connectionRpc = this.#ctx.connection.rpc;
+		this.#ctx.effect(() => connectionRpc.handle(RPC_CHANNEL, (endpoint, payload, signal) => this.handleRpc(endpoint, payload, signal), { authority: "loopback" }), "dsh-modellix: loopback configuration and Design RPC");
 		this.#ctx.effect(() => {
 			this.scheduleDesignPoll(2e3);
 			return async () => {
 				this.#closing = true;
 				this.#lifecycleAbort.abort();
+				this.#design.invalidateWaits();
 				this.#disposeDesignTools?.();
 				this.#disposeDesignTools = void 0;
 				if (this.#designPollTimer !== void 0) clearTimeout(this.#designPollTimer);
@@ -8709,7 +8831,10 @@ var ModellixRuntime = class ModellixRuntime {
 				handle: (endpoint, payload, signal) => {
 					const operationSignal = signal === void 0 ? this.#lifecycleAbort.signal : AbortSignal.any([signal, this.#lifecycleAbort.signal]);
 					if (designEndpointRequestsCredential(endpoint) && !this.credentialIsUsable()) this.requestCredentialRecovery();
-					return this.enqueueDesignWrite(() => this.#design.handle(endpoint, payload, operationSignal));
+					return this.enqueueDesignWrite(() => this.#design.handle(endpoint, payload, operationSignal)).then((snapshot) => {
+						this.scheduleDesignPoll(0);
+						return snapshot;
+					});
 				}
 			});
 			return;
@@ -8719,11 +8844,39 @@ var ModellixRuntime = class ModellixRuntime {
 			this.#disposeDesignTools = void 0;
 		}
 	}
+	syncWebTools(enabled) {
+		if (enabled && this.#disposeWebTools === void 0) {
+			const providers = createModellixWebProviders({
+				isEnabled: () => this.#config.services.web.enabled,
+				hasCredential: () => this.credentialIsUsable(),
+				resolveCredential: async () => {
+					const hit = await this.resolveUsableCredential();
+					if (hit === void 0) this.requestCredentialRecovery();
+					return hit === void 0 ? null : {
+						apiKey: hit.value,
+						credentialEpoch: hit.credentialEpoch
+					};
+				},
+				getUserId: () => this.#userId,
+				isCredentialEpochCurrent: (epoch) => epoch === this.#config.credentialEpoch,
+				onCredentialRejected: async (epoch) => {
+					if (epoch !== this.#config.credentialEpoch) return;
+					this.markCredentialRejected(epoch);
+				}
+			});
+			this.#disposeWebTools = registerModellixWebTools(this.#ctx, providers);
+			return;
+		}
+		if (!enabled && this.#disposeWebTools !== void 0) {
+			this.#disposeWebTools();
+			this.#disposeWebTools = void 0;
+		}
+	}
 	scheduleDesignPoll(delayMs) {
 		if (this.#closing || this.#designPollTimer !== void 0) return;
 		this.#designPollTimer = setTimeout(() => {
 			this.#designPollTimer = void 0;
-			this.enqueueDesignWrite(() => this.#design.pollRunning(this.#lifecycleAbort.signal)).then((hasRunning) => {
+			this.#design.pollRunning(this.#lifecycleAbort.signal).then((hasRunning) => {
 				if (hasRunning) this.scheduleDesignPoll(5e3);
 			}).catch(() => {
 				if (!this.#closing) this.scheduleDesignPoll(15e3);