dsh-vision-router 2.1.6 → 2.2.0

package/lib/web-capability-boundary.js

@@ -3,20 +3,85 @@ const patchedWebServers = new WeakMap()
 
 const VISION_ROUTER_WEB_PREFIX = '/_dsh/vision-router/'
 
-const LOCAL_MUTATION_ROUTES = new Map([
-  ['/_dsh/vision-router/self-update', new Set(['POST'])],
-  ['/_dsh/vision-router/logs', new Set(['POST'])],
-  ['/_dsh/vision-router/request-screenshot-permission', new Set(['POST'])],
-  ['/_dsh/vision-router/settings-save-diagnostics', new Set(['POST'])],
+export const WEB_ROUTE_REMOTE_CAPABILITY = Object.freeze({
+  ALLOW_REMOTE: 'allow-remote',
+  REDACT_REMOTE: 'redact-remote',
+  LOCAL_ONLY: 'local-only',
+})
+
+// One declaration owns every browser-facing capability exception. Route method
+// is part of the key because the same path may be a redacted GET and a local-
+// only POST. `legacyMutation` preserves the historical helper semantics for
+// callers that use isLocalMutationRoute(); local-only GET capabilities such as
+// test-connection are intentionally not reclassified as mutations.
+const ROUTE_CAPABILITY_POLICIES = new Map([
+  ['/_dsh/vision-router/self-update', new Map([
+    ['POST', { remote: WEB_ROUTE_REMOTE_CAPABILITY.LOCAL_ONLY, legacyMutation: true }],
+  ])],
+  ['/_dsh/vision-router/logs', new Map([
+    ['GET', { remote: WEB_ROUTE_REMOTE_CAPABILITY.REDACT_REMOTE }],
+    ['POST', { remote: WEB_ROUTE_REMOTE_CAPABILITY.LOCAL_ONLY, legacyMutation: true }],
+  ])],
+  ['/_dsh/vision-router/request-screenshot-permission', new Map([
+    ['POST', { remote: WEB_ROUTE_REMOTE_CAPABILITY.LOCAL_ONLY, legacyMutation: true }],
+  ])],
+  ['/_dsh/vision-router/settings-save-diagnostics', new Map([
+    ['POST', { remote: WEB_ROUTE_REMOTE_CAPABILITY.LOCAL_ONLY, legacyMutation: true }],
+  ])],
   // Model-invoking capability measurements spend user/provider quota and may
   // resolve stored credentials, so they inherit the local transport boundary.
-  ['/_dsh/vision-router/capability-benchmark', new Set(['POST', 'DELETE'])],
-])
-const SENSITIVE_READ_ROUTES = new Map([
-  ['/_dsh/vision-router/update-check', new Set(['GET'])],
-  ['/_dsh/vision-router/logs', new Set(['GET'])],
+  ['/_dsh/vision-router/capability-benchmark', new Map([
+    ['GET', { remote: WEB_ROUTE_REMOTE_CAPABILITY.ALLOW_REMOTE }],
+    ['POST', { remote: WEB_ROUTE_REMOTE_CAPABILITY.LOCAL_ONLY, legacyMutation: true }],
+    ['DELETE', { remote: WEB_ROUTE_REMOTE_CAPABILITY.LOCAL_ONLY, legacyMutation: true }],
+  ])],
+  ['/_dsh/vision-router/capability-runtime', new Map([
+    ['GET', { remote: WEB_ROUTE_REMOTE_CAPABILITY.ALLOW_REMOTE }],
+    ['POST', { remote: WEB_ROUTE_REMOTE_CAPABILITY.LOCAL_ONLY, legacyMutation: true }],
+  ])],
+  ['/_dsh/vision-router/host-capabilities', new Map([
+    ['GET', { remote: WEB_ROUTE_REMOTE_CAPABILITY.ALLOW_REMOTE }],
+  ])],
+  // Remote settings may consume already-discovered model ids, but a remote GET
+  // must never gain the Host-side network refresh capability. The handler
+  // independently suppresses scheduling unless the transport is local.
+  ['/_dsh/vision-router/live-models', new Map([
+    ['GET', { remote: WEB_ROUTE_REMOTE_CAPABILITY.ALLOW_REMOTE }],
+  ])],
+  ['/_dsh/vision-router/model-capabilities', new Map([
+    ['GET', { remote: WEB_ROUTE_REMOTE_CAPABILITY.ALLOW_REMOTE }],
+  ])],
+  ['/_dsh/vision-router/remote-settings-permission', new Map([
+    ['POST', { remote: WEB_ROUTE_REMOTE_CAPABILITY.LOCAL_ONLY, legacyMutation: true }],
+  ])],
+  ['/_dsh/vision-router/route-ownership', new Map([
+    ['GET', { remote: WEB_ROUTE_REMOTE_CAPABILITY.ALLOW_REMOTE }],
+  ])],
+  // A connectivity probe is a GET, but it drives the Host to contact configured
+  // local/private model endpoints and returns endpoint health metadata. Treat
+  // the capability side effect as local-only rather than as an ordinary read.
+  ['/_dsh/vision-router/test-connection', new Map([
+    ['GET', { remote: WEB_ROUTE_REMOTE_CAPABILITY.LOCAL_ONLY }],
+  ])],
+  ['/_dsh/vision-router/update-check', new Map([
+    ['GET', { remote: WEB_ROUTE_REMOTE_CAPABILITY.REDACT_REMOTE }],
+  ])],
 ])
 
+// DVR-owned browser routes are closed-world capabilities: a new route is local-only
+// until its exact method is reviewed and declared above. This makes omission fail closed.
+const DEFAULT_ROUTE_POLICY = Object.freeze({ remote: WEB_ROUTE_REMOTE_CAPABILITY.LOCAL_ONLY })
+
+function routeCapabilityPolicy(path, method) {
+  const methods = ROUTE_CAPABILITY_POLICIES.get(String(path ?? ''))
+  return methods?.get(String(method ?? '').toUpperCase()) ?? DEFAULT_ROUTE_POLICY
+}
+
+/** Public classification seam for tests/doctor without exposing policy maps. */
+export function webRouteRemoteCapability(path, method) {
+  return routeCapabilityPolicy(path, method).remote
+}
+
 function cleanAddress(value) {
   let text = String(value ?? '').trim().toLowerCase()
   if (text.startsWith('[') && text.endsWith(']')) text = text.slice(1, -1)
@@ -76,11 +141,10 @@ export function isLocalUiRequest(req) {
 }
 
 export function isLocalMutationRoute(path, method) {
-  const methods = LOCAL_MUTATION_ROUTES.get(String(path ?? ''))
-  return methods?.has(String(method ?? '').toUpperCase()) === true
+  return routeCapabilityPolicy(path, method).legacyMutation === true
 }
 
-function rejectRemoteMutation(res) {
+function rejectRemoteLocalCapability(res) {
   res.writeHead(403, {
     'content-type': 'application/json; charset=utf-8',
     'cache-control': 'no-store',
@@ -180,11 +244,9 @@ function runWithRemoteReadRedaction(path, handler, req, res) {
 function guardedRoute(route, getConnection) {
   if (!route || typeof route !== 'object' || typeof route.handler !== 'function') return route
   const pluginOwned = typeof route.path === 'string' && route.path.startsWith(VISION_ROUTER_WEB_PREFIX)
-  const mutationMethods = LOCAL_MUTATION_ROUTES.get(route.path)
-  const sensitiveReadMethods = SENSITIVE_READ_ROUTES.get(route.path)
-  if (!pluginOwned && (!mutationMethods || mutationMethods.size === 0) && (!sensitiveReadMethods || sensitiveReadMethods.size === 0)) {
-    return route
-  }
+  const capabilityMethods = ROUTE_CAPABILITY_POLICIES.get(route.path)
+  if (!pluginOwned && (!capabilityMethods || capabilityMethods.size === 0)) return route
+
   const originalHandler = route.handler
   return {
     ...route,
@@ -198,11 +260,12 @@ function guardedRoute(route, getConnection) {
       }
       const method = String(req?.method ?? '').toUpperCase()
       const localUi = isLocalUiRequest(req)
-      if (mutationMethods?.has(method) && !localUi) {
-        rejectRemoteMutation(res)
+      const remoteCapability = routeCapabilityPolicy(route.path, method).remote
+      if (remoteCapability === WEB_ROUTE_REMOTE_CAPABILITY.LOCAL_ONLY && !localUi) {
+        rejectRemoteLocalCapability(res)
         return undefined
       }
-      if (sensitiveReadMethods?.has(method) && !localUi) {
+      if (remoteCapability === WEB_ROUTE_REMOTE_CAPABILITY.REDACT_REMOTE && !localUi) {
         return runWithRemoteReadRedaction(route.path, originalHandler, req, res)
       }
       return originalHandler(req, res)
@@ -250,7 +313,7 @@ function retainWebServerBoundary(webServer, getConnection) {
  * floor. DSH 0.1.2-alpha.1 adds `connection.requestRejection(req)` specifically
  * so another Web route can inherit the Host/Origin + signed-browser-session
  * boundary. Feature-detect that seam and apply it to every DVR-owned named
- * route before the plugin's narrower local-mutation/read-redaction policy.
+ * route before the plugin's narrower local-capability/read-redaction policy.
  */
 export function installLocalMutationRouteBoundary(ctx) {
   if (!ctx || (typeof ctx !== 'object' && typeof ctx !== 'function')) return ctx

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vision-router",
-  "version": "2.1.6",
+  "version": "2.2.0",
   "description": "Eyes for text-only DeepSeek Harness agents: built-in free vision chain (no key) + pixel-level vision tools (Q&A, grounding, crop, pixel diff, colors, OCR, SVG trace, cutout, screenshots). One-command install, no Python, image turns work like ordinary tool-calling turns.",
   "license": "MIT",
   "repository": {
@@ -54,8 +54,8 @@
     "undici": "^7.29.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-anonymous-user-id": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2",
-    "@deepseek-ai/dsh-llm-deepseek": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2",
+    "@deepseek-ai/dsh-anonymous-user-id": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1",
+    "@deepseek-ai/dsh-llm-deepseek": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1",
     "sharp": ">=0.35.3 <1"
   },
   "peerDependenciesMeta": {
@@ -66,20 +66,27 @@
   "devDependencies": {
     "@deepseek-ai/dsh-anonymous-user-id": "^0.1.0-rc.6",
     "@deepseek-ai/dsh-llm-deepseek": "^0.1.0-rc.6",
+    "fast-check": "4.10.0",
     "sharp": "^0.35.4"
   },
   "scripts": {
-    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/pi-ai-bridge-wire-compat.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/runtime-i18n.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && node --test tests/vision-backend-runtime-policy.test.js",
-    "test:core": "node --test tests/core.test.js tests/runtime-e2e.test.js tests/structured-bootstrap.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-execution-policy.test.js tests/vision-backend-runtime-policy.test.js",
+    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/pi-ai-bridge-wire-compat.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && node --test tests/vision-backend-runtime-policy.test.js",
+    "test:core": "node --test tests/core.test.js tests/degraded-local-evidence.test.js tests/runtime-e2e.test.js tests/structured-bootstrap.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-execution-policy.test.js tests/vision-backend-runtime-policy.test.js",
     "test:routing": "node --test tests/issue-374-delegated-call-config.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/vision-routing-product.test.js tests/vision-capability-router.test.js tests/vision-capability-probe.test.js tests/vision-capability-shadow-health.test.js tests/vision-runtime-performance.test.js tests/vision-background-benchmark.test.js tests/vision-image-input-verdict.test.js",
     "test:session": "node --test tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/replay-delegation.test.js tests/legacy-session-repair.test.js tests/session-repair-v2.test.js tests/issue-276-session-image-ownership.test.js",
     "test:resources": "node --test tests/artifact-path-security.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js",
     "test:compat": "node --test tests/adapter-prepare-call-compat.test.js tests/attachment-admission-policy.test.js tests/rc6-rc7-compat.test.js tests/rc6-real-settings-persistence.test.js tests/android-attachment-compat.test.js tests/http-compat.test.js tests/pi-ai-bridge-wire-compat.test.js tests/native-image-coexistence.test.js tests/tesseract-node24-boot.test.js tests/dsh-host-capabilities.test.js",
     "test:web": "node --test tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-acceptance-regression.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/local-remote-settings-permission.test.js tests/v2-settings-ia-integration.test.js tests/logging-ui.test.js",
-    "test:contract": "node --test tests/manifest-dependencies.test.js tests/bundle-defaults.test.js tests/zero-regression-gate.test.js tests/issue-289-native-nonintervention.test.js tests/issue-374-delegated-call-config.test.js tests/runtime-boundary-fixes.test.js tests/runtime-i18n.test.js tests/adapter-prepare-call-compat.test.js tests/rc6-rc7-compat.test.js tests/attachment-admission-policy.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js",
+    "test:contract": "node --test tests/manifest-dependencies.test.js tests/bundle-defaults.test.js tests/zero-regression-gate.test.js tests/issue-289-native-nonintervention.test.js tests/issue-374-delegated-call-config.test.js tests/runtime-boundary-fixes.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/adapter-prepare-call-compat.test.js tests/rc6-rc7-compat.test.js tests/attachment-admission-policy.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js",
     "test:grounding": "node --test tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/vision-capability-grounding-proof-contract.test.js",
     "test:stress": "node scripts/image-resource-stress.mjs && node --test tests/large-image-resource-integration.test.js tests/resource-retention-lifecycle.test.js",
-    "test:adversarial-fuzz": "node scripts/security-adversarial-fuzz.mjs"
+    "test:adversarial-fuzz": "node scripts/security-adversarial-fuzz.mjs",
+    "test:property-fuzz": "node --test tests/security-property-fuzz.test.js",
+    "test:quality": "node --test tests/vision-quality-round2-baseline.test.js",
+    "quality:round2:render": "node quality/vision-round2/render-fixtures.mjs",
+    "quality:round2:template": "node quality/vision-round2/make-run-template.mjs",
+    "quality:round2:run": "node quality/vision-round2/run-host-api.mjs",
+    "quality:round2:report": "node quality/vision-round2/report-results.mjs"
   },
   "pnpm": {
     "onlyBuiltDependencies": ["sharp"]