dsh-vision-router 2.1.6 → 2.1.7

package/README.md

@@ -17,7 +17,7 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v2.1.6"><img src="https://img.shields.io/badge/release-v2.1.6-5B4CF0?style=flat-square" alt="Release v2.1.6" /></a>
+  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v2.1.7"><img src="https://img.shields.io/badge/release-v2.1.7-5B4CF0?style=flat-square" alt="Release v2.1.7" /></a>
   <a href="tests"><img src="https://img.shields.io/badge/verified-Node%2022%20%2B%2024-2EA44F?style=flat-square" alt="Verified: Node 22 + 24" /></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-2EA44F?style=flat-square" alt="License: MIT" /></a>
   <a href="package.json"><img src="https://img.shields.io/badge/Node.js-%3E%3D22-339933?style=flat-square&amp;logo=nodedotjs&amp;logoColor=white" alt="Node.js >=22" /></a>
@@ -39,9 +39,9 @@
 <p align="center">💬 <strong>QQ community group: 1105463028</strong></p>
 
 > [!WARNING]
-> 📌 **Announcement (v2.1.6)**
+> 📌 **Announcement (v2.1.7)**
 >
-> **v2.1.6:** Advances exact stable support to DSH `0.1.5-rc.2`, fixes the remote-settings `webServer` startup error, and completes Host-first proxy isolation, lifecycle, redirect-boundary, HTTP CONNECT, and SOCKS5 hardening without raising the rc.8 Host floor. [What’s new →](docs/releases/v2.1.6.md)
+> **v2.1.7:** Hardens remote/local capability boundaries, long-lived browser and persistent-cache resource ownership, DSH 0.1.5 connection/catalog compatibility, property-based fuzzing, and release provenance without raising the rc.8 Host floor. [What’s new →](docs/releases/v2.1.7.md)
 
 <p align="center">
   <img src="assets/vision-demo.gif" width="640" alt="Demo: paste an image, the agent locates the send button with vision_ground / vision_crop / vision_pixel_diff and answers with coordinates" />

package/README.zh.md

@@ -17,7 +17,7 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v2.1.6"><img src="https://img.shields.io/badge/release-v2.1.6-5B4CF0?style=flat-square" alt="Release v2.1.6" /></a>
+  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v2.1.7"><img src="https://img.shields.io/badge/release-v2.1.7-5B4CF0?style=flat-square" alt="Release v2.1.7" /></a>
   <a href="tests"><img src="https://img.shields.io/badge/verified-Node%2022%20%2B%2024-2EA44F?style=flat-square" alt="已验证 Node 22 + 24" /></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-2EA44F?style=flat-square" alt="MIT 许可证" /></a>
   <a href="package.json"><img src="https://img.shields.io/badge/Node.js-%3E%3D22-339933?style=flat-square&amp;logo=nodedotjs&amp;logoColor=white" alt="Node.js >=22" /></a>
@@ -39,9 +39,9 @@
 <p align="center">💬 <strong>QQ 用户交流群：1105463028</strong></p>
 
 > [!WARNING]
-> 📌 **公告（v2.1.6）**
+> 📌 **公告（v2.1.7）**
 >
-> **v2.1.6：正式验证 DSH `0.1.5-rc.2`，修复远程设置 `webServer` 启动报错，并完成 Host-first 代理隔离、生命周期、redirect 边界、HTTP CONNECT 与 SOCKS5 加固；公开最低 Host 仍为 rc.8。** [查看完整更新 →](docs/releases/v2.1.6.md)
+> **v2.1.7：加固远程/本机能力边界、浏览器与持久缓存的长生命周期资源所有权、DSH 0.1.5 connection/catalog 兼容、property-based fuzzing 与发布溯源；公开最低 Host 仍保持 `0.1.0-rc.8`。** [查看完整更新 →](docs/releases/v2.1.7.md)
 
 <p align="center">
   <img src="assets/vision-demo.gif" width="640" alt="演示：粘贴图片，Agent 用 vision_ground / vision_crop / vision_pixel_diff 定位发送按钮并给出坐标" />

package/cordis.patch.yml

@@ -19,6 +19,20 @@
   name: '@deepseek-ai/dsh-client-modules'
   inject: [webServer]
 
+# DSH rc.6 至 0.1.5-rc.2 的 Web bundle 里，Connection provider row 只声明
+# webRuntime，但 HostConnectionService.rpc/fetch 的 accessor 会把调用 owner
+# 追踪回这个 provider fiber；rpc.handle() 最终又通过 owner.webServer.register()
+# 挂载路由。因此仅在 DVR 的调用 child fiber 注入 webServer 仍不足以覆盖
+# Cordis Service shadow 语义（issue #478 / Desktop 2.0.9 可稳定复现）。
+#
+# 保留官方既有 webRuntime 依赖，并让 Connection provider 本身同时等待
+# webServer。这样不改 connection config / trustedHosts，不复制 RPC 协议或鉴权，
+# 也不改变非 Web surface。exact-source contract 会监控上游 row；官方一旦
+# 自己拥有 webServer，此 shim 必须随支持窗口审计退休，避免覆盖未来新增依赖。
+- id: connection
+  name: '@deepseek-ai/dsh-client-connection'
+  inject: [webRuntime, webServer]
+
 # 挂载插件行。默认保持完整视觉工具表常驻（issue #81）：虽然渐进挂载可以
 # 少发一小段工具 schema，但图片轮首次扩展工具列表会改变请求前缀，可能让
 # 长会话的 provider KV/prefix cache 整体失效。高级用户仍可在 profile /

package/docs/releases/v2.1.7.md

@@ -0,0 +1,13 @@
+# v2.1.7
+
+DSH Vision Router 2.1.7 is a security, lifecycle, compatibility, and release-integrity patch for the 2.1.x train.
+
+## Highlights
+
+- Hardens remote Settings admission and local-only capability boundaries.
+- Bounds browser presentation resources and long-lived persistent-cache state.
+- Adds property-based fuzzing and expands adversarial resource coverage.
+- Tightens current DSH 0.1.5 compatibility around connection and live model catalog ownership.
+- Hardens release provenance, exact-main verification, and GitHub Actions source policy.
+
+The public DSH support floor remains `0.1.0-rc.8`; existing 2.1.x settings remain compatible and require no migration.

package/index.js

@@ -1131,8 +1131,8 @@ export function apply(ctx, config = {}, runtime = {}) {
   // session model does not declare image input, and the DeepSeek adapter
   // hardcodes text-only. This wrapper route (`deepseek-vision` by default)
   // declares image input so the admission passes, shows up in the model
-  // picker as "DeepSeek + 自动识图", and delegates to the real text-provider
-  // adapter for anything the waterfalls did not rewrite.
+  // picker as "DeepSeek + 自动识图", and delegates only to the official
+  // DeepSeek adapter (or the hidden native route during stealth takeover).
   //
   // The adapter is built unconditionally; whether (and under which name) it
   // mounts is reconciled reactively against the resolved settings document by
@@ -1140,12 +1140,16 @@ export function apply(ctx, config = {}, runtime = {}) {
   // take effect without a restart.
   let wrapperAdapter
   {
-    const WRAPPER_MODEL_IDS = ['deepseek-v4-pro', 'deepseek-v4-flash']
     const wrapName = (name) => name ?? 'DeepSeek'
-    const textProviderRoute = () => (stealthActive ? nativeRoute : textProvider().provider)
+    // The row is explicitly branded as DeepSeek, so its metadata and network
+    // authority must come from DeepSeek as well. `textProvider` is legacy
+    // configuration and must never let an arbitrary relay masquerade behind
+    // the special wrapper. During stealth takeover old wrapper sessions keep
+    // delegating to the hidden native DeepSeek route.
+    const wrapperDelegateRoute = () => (stealthActive ? nativeRoute : 'deepseek-official')
     const delegateAdapter = () => {
       try {
-        return ctx.llm.registration(textProviderRoute()).adapter
+        return ctx.llm.registration(wrapperDelegateRoute()).adapter
       } catch {
         return undefined
       }
@@ -1156,7 +1160,7 @@ export function apply(ctx, config = {}, runtime = {}) {
       },
       providerRetryPolicy() {
         try {
-          return ctx.llm.registration(textProviderRoute()).retryPolicy
+          return ctx.llm.registration(wrapperDelegateRoute()).retryPolicy
         } catch {
           return undefined
         }
@@ -1167,12 +1171,12 @@ export function apply(ctx, config = {}, runtime = {}) {
         if (stealthActive) return []
         const entries = []
         const real = delegateAdapter()
-        if (real !== undefined) {
+        if (real !== undefined && typeof real.listModels === 'function') {
           try {
-            const listed = await real.listModels(textProviderRoute())
+            const listed = await real.listModels('deepseek-official')
             entries.push(
-              ...listed
-                .filter((model) => WRAPPER_MODEL_IDS.includes(model.id))
+              ...(Array.isArray(listed) ? listed : [])
+                .filter((model) => model && typeof model.id === 'string' && model.id !== '')
                 .map((model) => ({
                   ...model,
                   provider: wrapperRoute(),
@@ -1221,14 +1225,29 @@ export function apply(ctx, config = {}, runtime = {}) {
               inputModalities: ['text', 'image'],
             }
           } catch {
-            /* fall through to the text-provider path */
+            /* fall through to the official DeepSeek path */
           }
         }
         const real = delegateAdapter()
-        if (real === undefined) {
-          throw new Error('vision-router: the text provider adapter is not available')
+        if (real === undefined || typeof real.resolveModel !== 'function') {
+          throw new Error('vision-router: the official DeepSeek adapter is not available')
         }
-        const base = await real.resolveModel(textProviderRoute(), model)
+        // Outside stealth mode, accept only models the live official catalog
+        // actually publishes. Some adapters can resolve arbitrary ids; that is
+        // not permission to expose them under the DeepSeek product identity.
+        if (!stealthActive) {
+          if (typeof real.listModels !== 'function') {
+            throw new Error('vision-router: the official DeepSeek catalog is not available')
+          }
+          const listed = await real.listModels('deepseek-official')
+          const admitted = Array.isArray(listed) && listed.some(
+            (entry) => entry && entry.id === model,
+          )
+          if (!admitted) {
+            throw new Error(`vision-router: DeepSeek model "${model}" is not in the live official catalog`)
+          }
+        }
+        const base = await real.resolveModel(wrapperDelegateRoute(), model)
         return {
           ...base,
           provider: wrapperRoute(),
@@ -1238,7 +1257,7 @@ export function apply(ctx, config = {}, runtime = {}) {
       },
       ...createWrapperStreamBody(ctx, {
         imageMemory,
-        delegateProvider: textProviderRoute(),
+        delegateProvider: wrapperDelegateRoute,
         instantLocal: instantLocalProvider,
         instantLocalStyle,
         instantLocalTimeoutMs: timeoutMs,

package/lib/client.js

@@ -4252,40 +4252,257 @@ window.__ModuleLoader__.load({
       )
     }
 
+    const PRESENTED_IMAGE_CACHE_MAX_ENTRIES = 32
+    const PRESENTED_IMAGE_CACHE_MAX_BYTES = 64 * 1024 * 1024
+    const PRESENTED_IMAGE_CACHE_MAX_ACTIVE_LOADS = 3
+    const PRESENTED_IMAGE_CACHE_MAX_PENDING_ENTRIES = 256
+
+    function presentedImageResourceKey(sessionId, attachment) {
+      return `${String(sessionId)}:${String(attachment && attachment.attachmentId)}`
+    }
+
+    function createPresentedImageResourceCache(options = {}) {
+      const maxEntries = Number.isFinite(options.maxEntries)
+        ? Math.max(0, Math.floor(options.maxEntries))
+        : PRESENTED_IMAGE_CACHE_MAX_ENTRIES
+      const maxBytes = Number.isFinite(options.maxBytes)
+        ? Math.max(0, Math.floor(options.maxBytes))
+        : PRESENTED_IMAGE_CACHE_MAX_BYTES
+      const maxActiveLoads = Number.isFinite(options.maxActiveLoads)
+        ? Math.max(1, Math.floor(options.maxActiveLoads))
+        : PRESENTED_IMAGE_CACHE_MAX_ACTIVE_LOADS
+      const maxPendingEntries = Number.isFinite(options.maxPendingEntries)
+        ? Math.max(0, Math.floor(options.maxPendingEntries))
+        : PRESENTED_IMAGE_CACHE_MAX_PENDING_ENTRIES
+      const nativeObjectUrls =
+        typeof URL !== 'undefined' &&
+        typeof URL.createObjectURL === 'function' &&
+        typeof URL.revokeObjectURL === 'function' &&
+        typeof Blob === 'function'
+      const createObjectURL = typeof options.createObjectURL === 'function'
+        ? options.createObjectURL
+        : nativeObjectUrls
+          ? (data, mediaType) => URL.createObjectURL(new Blob([data], { type: mediaType }))
+          : undefined
+      const revokeObjectURL = typeof options.revokeObjectURL === 'function'
+        ? options.revokeObjectURL
+        : nativeObjectUrls
+          ? (url) => URL.revokeObjectURL(url)
+          : undefined
+      const encodeDataURL = typeof options.encodeDataURL === 'function'
+        ? options.encodeDataURL
+        : (data, mediaType) => {
+            let binary = ''
+            const chunk = 0x8000
+            for (let offset = 0; offset < data.length; offset += chunk) {
+              binary += String.fromCharCode(...data.subarray(offset, offset + chunk))
+            }
+            return `data:${mediaType};base64,${btoa(binary)}`
+          }
+      const useObjectUrls = typeof createObjectURL === 'function' && typeof revokeObjectURL === 'function'
+      const entries = new Map()
+      const loadQueue = []
+      let sequence = 0
+      let disposed = false
+      let activeLoads = 0
+      let pendingEntries = 0
+
+      const resourceError = (code, message) => {
+        const error = new Error(message)
+        error.code = code
+        return error
+      }
+      const touch = (entry) => { entry.lastUsed = ++sequence }
+      const dataBytes = (data) => {
+        const value = Number(data && (data.byteLength ?? data.length))
+        return Number.isFinite(value) && value > 0 ? value : 0
+      }
+      const remove = (entry, reason) => {
+        if (!entry || entries.get(entry.key) !== entry) return false
+        entries.delete(entry.key)
+        if (!entry.settled) {
+          pendingEntries = Math.max(0, pendingEntries - 1)
+          entry.cancelled = true
+          entry.cancelReason = reason ?? resourceError(
+            'VISION_PRESENT_LOAD_RELEASED',
+            'vision_present: image resource load released',
+          )
+          if (!entry.started && typeof entry.reject === 'function') entry.reject(entry.cancelReason)
+        }
+        if (entry.revocable && entry.url) {
+          try { revokeObjectURL(entry.url) } catch {}
+          entry.revocable = false
+        }
+        return true
+      }
+      const settledEntries = () => [...entries.values()].filter((entry) => entry.settled)
+      const trim = () => {
+        const settled = settledEntries()
+        let count = settled.length
+        let bytes = settled.reduce((total, entry) => total + entry.weight, 0)
+        const victims = settled.sort((left, right) => {
+          const leftOwned = left.owners.size > 0 ? 1 : 0
+          const rightOwned = right.owners.size > 0 ? 1 : 0
+          return leftOwned - rightOwned || left.lastUsed - right.lastUsed
+        })
+        for (const entry of victims) {
+          if (count <= maxEntries && bytes <= maxBytes) break
+          if (!remove(entry)) continue
+          count -= 1
+          bytes = Math.max(0, bytes - entry.weight)
+        }
+      }
+      const pump = () => {
+        if (disposed) return
+        while (activeLoads < maxActiveLoads && loadQueue.length > 0) {
+          const entry = loadQueue.shift()
+          if (!entry || entries.get(entry.key) !== entry || entry.started || entry.cancelled) continue
+          entry.started = true
+          activeLoads += 1
+          Promise.resolve()
+            .then(() => entry.loader())
+            .then(({ data, mediaType }) => {
+              if (disposed || entry.cancelled || entries.get(entry.key) !== entry) {
+                throw entry.cancelReason ?? resourceError(
+                  'VISION_PRESENT_CACHE_DISPOSED',
+                  'vision_present: image resource cache disposed',
+                )
+              }
+              const rawBytes = dataBytes(data)
+              if (useObjectUrls) {
+                entry.url = createObjectURL(data, mediaType)
+                entry.revocable = true
+                entry.weight = rawBytes
+              } else {
+                entry.url = encodeDataURL(data, mediaType)
+                entry.weight = entry.url.length * 2
+              }
+              entry.settled = true
+              pendingEntries = Math.max(0, pendingEntries - 1)
+              entry.loader = undefined
+              touch(entry)
+              trim()
+              activeLoads = Math.max(0, activeLoads - 1)
+              pump()
+              entry.resolve(entry.url)
+            })
+            .catch((error) => {
+              const retained = entries.get(entry.key) === entry
+              if (retained) remove(entry, error)
+              activeLoads = Math.max(0, activeLoads - 1)
+              pump()
+              entry.reject(error)
+            })
+        }
+      }
+
+      const load = (keyValue, loader, ownerToken) => {
+        if (disposed) {
+          return Promise.reject(resourceError(
+            'VISION_PRESENT_CACHE_DISPOSED',
+            'vision_present: image resource cache disposed',
+          ))
+        }
+        const key = String(keyValue)
+        const cached = entries.get(key)
+        if (cached) {
+          if (ownerToken !== undefined) cached.owners.add(ownerToken)
+          touch(cached)
+          return cached.promise
+        }
+        if (pendingEntries >= maxPendingEntries) {
+          return Promise.reject(resourceError(
+            'VISION_PRESENT_CACHE_BUSY',
+            'vision_present: too many image resources are waiting to load; retry when earlier images finish',
+          ))
+        }
+        let resolvePending
+        let rejectPending
+        const pending = new Promise((resolve, reject) => {
+          resolvePending = resolve
+          rejectPending = reject
+        })
+        const entry = {
+          key,
+          owners: new Set(ownerToken === undefined ? [] : [ownerToken]),
+          promise: pending,
+          resolve: resolvePending,
+          reject: rejectPending,
+          loader,
+          url: undefined,
+          revocable: false,
+          settled: false,
+          started: false,
+          cancelled: false,
+          cancelReason: undefined,
+          weight: 0,
+          lastUsed: 0,
+        }
+        touch(entry)
+        entries.set(key, entry)
+        pendingEntries += 1
+        loadQueue.push(entry)
+        pump()
+        return pending
+      }
+      const release = (keyValue, ownerToken, releaseOptions = {}) => {
+        const key = String(keyValue)
+        const entry = entries.get(key)
+        if (!entry) return false
+        if (ownerToken !== undefined) entry.owners.delete(ownerToken)
+        touch(entry)
+        if (releaseOptions.purge === true && entry.owners.size === 0) {
+          return remove(entry)
+        }
+        trim()
+        return true
+      }
+      const dispose = () => {
+        if (disposed) return
+        disposed = true
+        const reason = resourceError(
+          'VISION_PRESENT_CACHE_DISPOSED',
+          'vision_present: image resource cache disposed',
+        )
+        for (const entry of [...entries.values()]) remove(entry, reason)
+        loadQueue.length = 0
+        entries.clear()
+      }
+      const stats = () => {
+        const settled = settledEntries()
+        const queuedLoads = [...entries.values()].filter((entry) => !entry.settled && !entry.started).length
+        return {
+          entries: entries.size,
+          settledEntries: settled.length,
+          pendingEntries,
+          activeLoads,
+          queuedLoads,
+          residentBytes: settled.reduce((total, entry) => total + entry.weight, 0),
+          ownedEntries: settled.filter((entry) => entry.owners.size > 0).length,
+          disposed,
+        }
+      }
+
+      return { load, release, dispose, stats }
+    }
+
     function apply(ctx) {
       const localScope = ctx.settingsScope.bind({ namespace: 'vision-router' })
-      const presentedImageUrls = new Map()
-      const createdImageUrls = new Set()
-      const loadPresentedImage = (sessionId, attachment) => {
-        const key = `${String(sessionId)}:${String(attachment.attachmentId)}`
-        const cached = presentedImageUrls.get(key)
-        if (cached !== undefined) return cached
-        const pending = (async () => {
+      const presentedImageResources = createPresentedImageResourceCache()
+      const loadPresentedImage = (sessionId, attachment, ownerToken) => {
+        const key = presentedImageResourceKey(sessionId, attachment)
+        return presentedImageResources.load(key, async () => {
           const binding = ctx.sessions.binding(sessionId)
           if (binding === undefined) throw new Error(`vision_present: unknown session ${String(sessionId)}`)
           const result = await binding.session.readAttachment(attachment.attachmentId)
           if (!result.ok) {
             throw new Error(`vision_present: ${result.error.code}: ${result.error.message}`)
           }
-          const ref = result.value.attachment
-          const data = result.value.data
-          if (typeof URL.createObjectURL === 'function') {
-            const url = URL.createObjectURL(new Blob([data], { type: ref.mediaType }))
-            createdImageUrls.add(url)
-            return url
-          }
-          let binary = ''
-          const chunk = 0x8000
-          for (let offset = 0; offset < data.length; offset += chunk) {
-            binary += String.fromCharCode(...data.subarray(offset, offset + chunk))
+          return {
+            data: result.value.data,
+            mediaType: result.value.attachment.mediaType,
           }
-          return `data:${ref.mediaType};base64,${btoa(binary)}`
-        })().catch((error) => {
-          presentedImageUrls.delete(key)
-          throw error
-        })
-        presentedImageUrls.set(key, pending)
-        return pending
+        }, ownerToken)
       }
       // Follow the app language: register our dictionaries and re-read them
       // whenever the user switches the locale in Settings → General.
@@ -4297,6 +4514,27 @@ window.__ModuleLoader__.load({
         const images = content
           .filter((item) => item && item.type === 'image' && item.attachment)
           .map((item) => ({ attachment: item.attachment }))
+        const imageKeys = images.map(({ attachment }) => presentedImageResourceKey(sessionId, attachment))
+        const imageKeySignature = JSON.stringify(imageKeys)
+        const imageOwnerToken = React.useRef({}).current
+        const ownedImageKeys = React.useRef(new Set())
+        React.useEffect(() => {
+          const current = new Set(imageKeys)
+          for (const key of ownedImageKeys.current) {
+            if (current.has(key)) continue
+            presentedImageResources.release(key, imageOwnerToken, { purge: true })
+            ownedImageKeys.current.delete(key)
+          }
+        }, [imageKeySignature])
+        React.useEffect(() => () => {
+          for (const key of ownedImageKeys.current) presentedImageResources.release(key, imageOwnerToken, { purge: true })
+          ownedImageKeys.current.clear()
+        }, [])
+        const loadOwnedPresentedImage = (attachment) => {
+          const key = presentedImageResourceKey(sessionId, attachment)
+          ownedImageKeys.current.add(key)
+          return loadPresentedImage(sessionId, attachment, imageOwnerToken)
+        }
         if (images.length === 0) {
           return React.createElement(
             'div',
@@ -4331,16 +4569,12 @@ window.__ModuleLoader__.load({
             images,
             align: 'start',
             labels,
-            load: (attachment) => loadPresentedImage(sessionId, attachment),
+            load: loadOwnedPresentedImage,
           }),
         )
       }
       ctx.effect(
-        () => () => {
-          for (const url of createdImageUrls) URL.revokeObjectURL(url)
-          createdImageUrls.clear()
-          presentedImageUrls.clear()
-        },
+        () => () => presentedImageResources.dispose(),
         'vision-router: presented image URL cache',
       )
       // Lazily reach the client `connection` service for the model catalog.
@@ -4449,6 +4683,12 @@ window.__ModuleLoader__.load({
     exports.createRemoteSettingsScope = createRemoteSettingsScope
     exports.shouldUseRemoteSettings = shouldUseRemoteSettings
     exports.installSettingsPersistence = installSettingsPersistence
+    exports.PRESENTED_IMAGE_CACHE_MAX_ENTRIES = PRESENTED_IMAGE_CACHE_MAX_ENTRIES
+    exports.PRESENTED_IMAGE_CACHE_MAX_BYTES = PRESENTED_IMAGE_CACHE_MAX_BYTES
+    exports.PRESENTED_IMAGE_CACHE_MAX_ACTIVE_LOADS = PRESENTED_IMAGE_CACHE_MAX_ACTIVE_LOADS
+    exports.PRESENTED_IMAGE_CACHE_MAX_PENDING_ENTRIES = PRESENTED_IMAGE_CACHE_MAX_PENDING_ENTRIES
+    exports.presentedImageResourceKey = presentedImageResourceKey
+    exports.createPresentedImageResourceCache = createPresentedImageResourceCache
     exports.GUIDE_STATE = GUIDE_STATE
     exports.GUIDE_EVENT = GUIDE_EVENT
     exports.guideTransition = guideTransition

package/lib/core-primitives.js

@@ -2502,11 +2502,16 @@ export function createWrapperStreamBody(ctx, { imageMemory, delegateProvider, pr
         })
         return result.changed ? { ...message, content: result.content } : message
       })
+      // Provider authority can be live (for example the main DeepSeek wrapper
+      // switches to its hidden native route only after a delayed takeover).
+      // Resolve it once per model call so metadata, reasoning memory and the
+      // actual network dispatch all use one coherent delegate identity.
+      const currentDelegateProvider = liveValue(delegateProvider)
       // Remember per delegate+model rather than per delegate alone: the
       // stream boundary carries no session id, so provider+model is the
       // narrowest scope available and keeps two concurrent sessions on the
       // same twin from sharing one memory slot.
-      const effortKey = `${delegateProvider}\u0000${options.model ?? ''}`
+      const effortKey = `${currentDelegateProvider}\u0000${options.model ?? ''}`
       let effort = typeof options.reasoningEffort === 'string' && options.reasoningEffort !== ''
         ? options.reasoningEffort
         : undefined
@@ -2517,7 +2522,7 @@ export function createWrapperStreamBody(ctx, { imageMemory, delegateProvider, pr
       }
       yield* ctx.llm.stream({
         ...(effort === undefined ? options : { ...options, reasoningEffort: effort }),
-        provider: delegateProvider,
+        provider: currentDelegateProvider,
         messages: rewritten,
       })
     },