dsh-vision-router 2.1.7 → 2.2.0

package/lib/vision-artifact-store.js

@@ -1,6 +1,7 @@
 import {
   resolveArtifactTarget,
   writeArtifactFile,
+  writePersistentArtifactFile,
 } from './artifact-io.js'
 import {
   retainArtifactRun,
@@ -46,6 +47,17 @@ export function createVisionArtifactStore({ workspace, artifactsDir, deps = {} }
     )
   }
 
+  const publishPersistent = (relativePath, data, options = {}) => {
+    const current = location()
+    return writePersistentArtifactFile(
+      current.workspace,
+      current.artifactsDir,
+      relativePath,
+      data,
+      callDeps(deps, options),
+    )
+  }
+
   return Object.freeze({
     resolve(relativePath, options = {}) {
       const current = location()
@@ -58,10 +70,11 @@ export function createVisionArtifactStore({ workspace, artifactsDir, deps = {} }
     },
 
     publish,
+    publishPersistent,
 
-    // Temporary-vs-persistent placement is authority/lifetime driven: the
-    // ambient managed artifactRunId decides whether hardened IO uses `.runs`.
-    // Keeping this method as an alias avoids inventing a second placement path.
+    // Temporary placement remains authority/lifetime driven by the ambient
+    // random managed artifactRunId. publishPersistent is the narrow handoff
+    // exception and uses one stable reserved run that retention still owns.
     publishTemporary(relativePath, data, options = {}) {
       return publish(relativePath, data, options)
     },

package/lib/vision-attachment-handle-runtime.js

@@ -29,13 +29,11 @@ function attachmentIdOf(ref) {
   return id === '' ? undefined : id
 }
 
-function sessionEvents(session) {
+function sessionMessages(session) {
   try {
-    if (session && typeof session.snapshotEvents === 'function') {
-      const events = session.snapshotEvents()
-      return Array.isArray(events) ? events : []
-    }
-    return Array.isArray(session?.events) ? session.events : []
+    if (!session || typeof session.deriveMessages !== 'function') return []
+    const messages = session.deriveMessages()
+    return Array.isArray(messages) ? messages : []
   } catch {
     return []
   }
@@ -55,18 +53,9 @@ function collectImageRefsFromMessages(messages, out) {
   for (const message of messages) collectImageRefsFromBlocks(message?.content, out)
 }
 
-function authorizedRefs(core, agent) {
+function authorizedRefs(agent) {
   const refs = []
-  const session = agent?.session
-  const events = sessionEvents(session)
-  if (typeof core?.collectEventAttachmentRefs === 'function') {
-    try {
-      const durable = core.collectEventAttachmentRefs(events)
-      if (Array.isArray(durable)) refs.push(...durable)
-    } catch {
-      // The resolver remains fail-closed; pending refs below may still suffice.
-    }
-  }
+  collectImageRefsFromMessages(sessionMessages(agent?.session), refs)
   collectImageRefsFromMessages(agent?.inbox?.nextTurn, refs)
   collectImageRefsFromMessages(agent?.inbox?.nextStep, refs)
 
@@ -99,12 +88,12 @@ function isCanonicalSha256Id(value) {
  * only when exactly one image authorized by the current Session has that
  * prefix. Zero or multiple matches fail closed.
  */
-export function resolveProjectedAttachmentHandle(handle, { core, sessionVisionIndex, agent } = {}) {
+export function resolveProjectedAttachmentHandle(handle, { sessionVisionIndex, agent } = {}) {
   const token = typeof handle === 'string' ? handle.trim() : ''
   if (!isProjectedAttachmentHandle(token)) return { kind: 'not-projected', value: handle }
 
   const session = agent?.session
-  const refs = authorizedRefs(core, agent)
+  const refs = authorizedRefs(agent)
   const wanted = token.toLowerCase()
   const matches = refs.filter((ref) => {
     const id = attachmentIdOf(ref)
@@ -124,7 +113,7 @@ export function resolveProjectedAttachmentHandle(handle, { core, sessionVisionIn
   try {
     sessionVisionIndex?.recordAttachments?.(session, [candidate])
   } catch {
-    // A durable event can still be recovered by lookupAttachment below.
+    // Authorization is still fail-closed if the bounded cache cannot be warmed.
   }
   if (!sessionVisionIndex || typeof sessionVisionIndex.lookupAttachment !== 'function') {
     return { kind: 'unknown', handle: token }
@@ -201,7 +190,6 @@ export function wrapVisionAttachmentHandleDefinition(def, options = {}) {
     ...def,
     execute(args, exec) {
       const nextArgs = canonicalizeArgs(args, {
-        core: options.core,
         sessionVisionIndex: options.sessionVisionIndex,
         agent: exec?.agent,
         toolName: def.name,

package/lib/vision-backend-runtime-policy.js

@@ -1,4 +1,5 @@
 import { AsyncLocalStorage } from 'node:async_hooks'
+import { blocksHaveRetainedImage, isOffloadedImageBlock, offloadedImagePlaceholder } from './image-offload-compat.js'
 
 const visionBackendScope = new AsyncLocalStorage()
 const wrappedContexts = new WeakMap()
@@ -127,12 +128,8 @@ async function resolveCredential(ctx, plan) {
   return undefined
 }
 
-function contentHasImage(core, messages) {
-  return (messages ?? []).some((message) => {
-    if (!Array.isArray(message?.content)) return false
-    if (typeof core?.blocksHaveImage === 'function') return core.blocksHaveImage(message.content)
-    return message.content.some((block) => block?.type === 'image')
-  })
+function contentHasImage(_core, messages) {
+  return (messages ?? []).some((message) => blocksHaveRetainedImage(message?.content))
 }
 
 async function toOpenAIMessages(ctx, messages) {
@@ -151,6 +148,10 @@ async function toOpenAIMessages(ctx, messages) {
         continue
       }
       if (block?.type === 'image' && block.attachment) {
+        if (isOffloadedImageBlock(block)) {
+          converted.push({ type: 'text', text: offloadedImagePlaceholder(block) })
+          continue
+        }
         const stored = await attachments.readImage(block.attachment)
         const mediaType = block.attachment.mediaType || stored?.mediaType || 'image/png'
         const data = Buffer.from(stored.data).toString('base64')

package/lib/vision-breaker-shadow-health.js

@@ -1,6 +1,7 @@
 import { createHash } from 'node:crypto'
+import { createSessionTurnResolver } from './session-turn-resolver.js'
 
-function turnNumberOf(session) {
+function legacyTurnNumberOf(session) {
   try {
     const events = session?.events
     if (!Array.isArray(events)) return 0
@@ -19,8 +20,15 @@ function sessionIdOf(session) {
   }
 }
 
-export function visionBreakerScopeOf(session) {
-  return `${sessionIdOf(session)}:${turnNumberOf(session)}`
+export function visionBreakerScopeOf(session, turnOf) {
+  let turn
+  try {
+    if (typeof turnOf === 'function') turn = turnOf(session)
+  } catch {
+    turn = undefined
+  }
+  if (!Number.isInteger(turn) || turn < 0) turn = legacyTurnNumberOf(session)
+  return `${sessionIdOf(session)}:${turn}`
 }
 
 function credentialFingerprintOf(value) {
@@ -76,7 +84,9 @@ function healthFromGate(gate) {
  * giving shadow code mutation authority. `capture()` is called only while
  * core.apply() constructs the breaker; `healthForCandidate()` uses peek().
  */
-export function createVisionBreakerShadowHealth(ctx) {
+export function createVisionBreakerShadowHealth(ctx, options = {}) {
+  const sessionTurnResolver = options.sessionTurnResolver ?? createSessionTurnResolver(ctx)
+  const turnOf = sessionTurnResolver.turnOf
   let breaker
   return {
     capture(value) {
@@ -88,7 +98,7 @@ export function createVisionBreakerShadowHealth(ctx) {
       const key = typeof candidate?.key === 'string' ? candidate.key : undefined
       if (!key) return undefined
       const fingerprint = await visionBreakerFingerprintForCandidate(ctx, candidate)
-      const scope = visionBreakerScopeOf(context.session)
+      const scope = visionBreakerScopeOf(context.session, turnOf)
       return healthFromGate(breaker.peek(key, fingerprint, scope))
     },
 

package/lib/vision-evidence-guidance.js

@@ -0,0 +1,39 @@
+export const VISION_SUCCESS_GUIDANCE =
+  'Vision Router trusted execution metadata: the preceding vision_describe call SUCCEEDED. ' +
+  'This metadata is not image content. If that successful evidence resolves the visual fact needed for the current task, stop making additional vision calls for that fact and continue the remaining user task from this evidence. ' +
+  'If no non-visual work remains, answer now in exactly the format the user requested; when the user asks for only one value or short phrase, do not add Markdown, explanation, or a restatement. ' +
+  'Call another vision tool only for a specific unresolved visual fact. For verbatim or exact-text tasks such as identifiers, amounts, times, version strings, or code, preserve every visible symbol, prefix, suffix, and punctuation from the most faithful evidence already collected; a later semantic summary must not overwrite a more exact transcription. Focused OCR or localization is still appropriate when character identity remains uncertain.'
+
+function isVisionFailureEnvelope(value) {
+  const text = value.trim()
+  if (!text.startsWith('{')) return false
+  try {
+    const parsed = JSON.parse(text)
+    return (
+      parsed !== null &&
+      typeof parsed === 'object' &&
+      parsed.ok === false &&
+      typeof parsed.code === 'string' &&
+      /^VISION_[A-Z0-9_]+$/u.test(parsed.code)
+    )
+  } catch {
+    return false
+  }
+}
+
+export function visionDescribeSuccessContext(exec, result) {
+  if (
+    exec?.name !== 'vision_describe' ||
+    !exec?.agent ||
+    result?.isError !== false ||
+    typeof result.value !== 'string' ||
+    result.value.trim().length === 0 ||
+    isVisionFailureEnvelope(result.value)
+  ) return undefined
+  return {
+    role: 'user',
+    id: `vision-router-evidence-success-${String(exec.callId)}`,
+    content: [{ type: 'text', text: VISION_SUCCESS_GUIDANCE }],
+    source: { kind: 'plugin', plugin: 'dsh-vision-router' },
+  }
+}

package/lib/vision-resilience.js

@@ -376,12 +376,14 @@ export function createVisionTurnMemory({
   maxScopes = 64,
   maxSessions = maxScopes,
   maxAttemptsPerScope = 64,
+  maxEvidencePerScope = 32,
 } = {}) {
   const scopes = new Map() // scope -> { failedKinds:Set, attempted: [], allFailed:false }
   const lastScopeBySession = new Map() // bounded LRU sessionId -> scope
   const scopeLimit = Math.max(1, Math.floor(Number(maxScopes) || 64))
   const sessionLimit = Math.max(1, Math.floor(Number(maxSessions) || scopeLimit))
   const attemptLimit = Math.max(1, Math.floor(Number(maxAttemptsPerScope) || 64))
+  const evidenceLimit = Math.max(1, Math.floor(Number(maxEvidencePerScope) || 32))
 
   const dropScope = (scope) => {
     scopes.delete(scope)
@@ -410,7 +412,14 @@ export function createVisionTurnMemory({
   const entry = (scope) => {
     let hit = scopes.get(scope)
     if (hit === undefined) {
-      hit = { failedKinds: new Set(), attempted: [], allFailed: false }
+      hit = {
+        failedKinds: new Set(),
+        attempted: [],
+        allFailed: false,
+        localOcr: new Map(),
+        derivedArtifacts: new Map(),
+        degradedRefinements: new Map(),
+      }
       scopes.set(scope, hit)
       pruneScopes()
     } else {
@@ -453,6 +462,69 @@ export function createVisionTurnMemory({
       return hit === undefined ? [] : [...hit.attempted]
     },
 
+    resolveSource(scope, sourceKey) {
+      const key = typeof sourceKey === 'string' ? sourceKey : ''
+      const hit = scopes.get(scope)
+      if (hit === undefined || key === '') return key
+      for (const [artifactToken, rootSource] of hit.derivedArtifacts) {
+        if (key === artifactToken || key.includes(artifactToken)) return rootSource
+      }
+      return key
+    },
+
+    recordLocalOcr(scope, sourceKey, evidence = {}) {
+      const hit = entry(scope)
+      const key = this.resolveSource(scope, sourceKey)
+      if (key === '') return
+      hit.localOcr.delete(key)
+      hit.localOcr.set(key, Object.freeze({ uncertain: evidence.uncertain === true }))
+      while (hit.localOcr.size > evidenceLimit) hit.localOcr.delete(hit.localOcr.keys().next().value)
+    },
+
+    hasLocalOcr(scope, sourceKey) {
+      const hit = scopes.get(scope)
+      if (hit === undefined) return false
+      return hit.localOcr.has(this.resolveSource(scope, sourceKey))
+    },
+
+    degradedEvidenceTokens(scope) {
+      const hit = scopes.get(scope)
+      if (hit === undefined || !hit.allFailed || hit.localOcr.size === 0) return []
+      const tokens = [...hit.localOcr.keys()]
+      for (const [artifactToken, rootSource] of hit.derivedArtifacts) {
+        if (hit.localOcr.has(rootSource)) tokens.push(artifactToken)
+      }
+      return tokens
+    },
+
+    recordDerivedArtifact(scope, sourceKey, artifactToken) {
+      const token = typeof artifactToken === 'string' ? artifactToken : ''
+      if (token === '') return
+      const hit = entry(scope)
+      const rootSource = this.resolveSource(scope, sourceKey)
+      if (rootSource === '') return
+      hit.derivedArtifacts.delete(token)
+      hit.derivedArtifacts.set(token, rootSource)
+      while (hit.derivedArtifacts.size > evidenceLimit) hit.derivedArtifacts.delete(hit.derivedArtifacts.keys().next().value)
+    },
+
+    degradedRefinementCount(scope, sourceKey) {
+      const hit = scopes.get(scope)
+      if (hit === undefined) return 0
+      return hit.degradedRefinements.get(this.resolveSource(scope, sourceKey)) ?? 0
+    },
+
+    recordDegradedRefinement(scope, sourceKey) {
+      const hit = entry(scope)
+      const key = this.resolveSource(scope, sourceKey)
+      if (key === '') return 0
+      const count = (hit.degradedRefinements.get(key) ?? 0) + 1
+      hit.degradedRefinements.delete(key)
+      hit.degradedRefinements.set(key, count)
+      while (hit.degradedRefinements.size > evidenceLimit) hit.degradedRefinements.delete(hit.degradedRefinements.keys().next().value)
+      return count
+    },
+
     stats() {
       return { scopes: scopes.size, sessions: lastScopeBySession.size }
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vision-router",
-  "version": "2.1.7",
+  "version": "2.2.0",
   "description": "Eyes for text-only DeepSeek Harness agents: built-in free vision chain (no key) + pixel-level vision tools (Q&A, grounding, crop, pixel diff, colors, OCR, SVG trace, cutout, screenshots). One-command install, no Python, image turns work like ordinary tool-calling turns.",
   "license": "MIT",
   "repository": {
@@ -54,8 +54,8 @@
     "undici": "^7.29.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-anonymous-user-id": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2",
-    "@deepseek-ai/dsh-llm-deepseek": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2",
+    "@deepseek-ai/dsh-anonymous-user-id": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1",
+    "@deepseek-ai/dsh-llm-deepseek": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1",
     "sharp": ">=0.35.3 <1"
   },
   "peerDependenciesMeta": {
@@ -70,8 +70,8 @@
     "sharp": "^0.35.4"
   },
   "scripts": {
-    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/pi-ai-bridge-wire-compat.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && node --test tests/vision-backend-runtime-policy.test.js",
-    "test:core": "node --test tests/core.test.js tests/runtime-e2e.test.js tests/structured-bootstrap.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-execution-policy.test.js tests/vision-backend-runtime-policy.test.js",
+    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/pi-ai-bridge-wire-compat.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && node --test tests/vision-backend-runtime-policy.test.js",
+    "test:core": "node --test tests/core.test.js tests/degraded-local-evidence.test.js tests/runtime-e2e.test.js tests/structured-bootstrap.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-execution-policy.test.js tests/vision-backend-runtime-policy.test.js",
     "test:routing": "node --test tests/issue-374-delegated-call-config.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/vision-routing-product.test.js tests/vision-capability-router.test.js tests/vision-capability-probe.test.js tests/vision-capability-shadow-health.test.js tests/vision-runtime-performance.test.js tests/vision-background-benchmark.test.js tests/vision-image-input-verdict.test.js",
     "test:session": "node --test tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/replay-delegation.test.js tests/legacy-session-repair.test.js tests/session-repair-v2.test.js tests/issue-276-session-image-ownership.test.js",
     "test:resources": "node --test tests/artifact-path-security.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js",
@@ -81,7 +81,12 @@
     "test:grounding": "node --test tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/vision-capability-grounding-proof-contract.test.js",
     "test:stress": "node scripts/image-resource-stress.mjs && node --test tests/large-image-resource-integration.test.js tests/resource-retention-lifecycle.test.js",
     "test:adversarial-fuzz": "node scripts/security-adversarial-fuzz.mjs",
-    "test:property-fuzz": "node --test tests/security-property-fuzz.test.js"
+    "test:property-fuzz": "node --test tests/security-property-fuzz.test.js",
+    "test:quality": "node --test tests/vision-quality-round2-baseline.test.js",
+    "quality:round2:render": "node quality/vision-round2/render-fixtures.mjs",
+    "quality:round2:template": "node quality/vision-round2/make-run-template.mjs",
+    "quality:round2:run": "node quality/vision-round2/run-host-api.mjs",
+    "quality:round2:report": "node quality/vision-round2/report-results.mjs"
   },
   "pnpm": {
     "onlyBuiltDependencies": ["sharp"]