dsh-vision-router 2.2.0 → 2.2.2

package/README.md

@@ -17,7 +17,7 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v2.2.0"><img src="https://img.shields.io/badge/release-v2.2.0-5B4CF0?style=flat-square" alt="Release v2.2.0" /></a>
+  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v2.2.1"><img src="https://img.shields.io/badge/release-v2.2.1-5B4CF0?style=flat-square" alt="Release v2.2.1" /></a>
   <a href="tests"><img src="https://img.shields.io/badge/verified-Node%2022%20%2B%2024-2EA44F?style=flat-square" alt="Verified: Node 22 + 24" /></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-2EA44F?style=flat-square" alt="License: MIT" /></a>
   <a href="package.json"><img src="https://img.shields.io/badge/Node.js-%3E%3D22-339933?style=flat-square&amp;logo=nodedotjs&amp;logoColor=white" alt="Node.js >=22" /></a>
@@ -39,9 +39,9 @@
 <p align="center">💬 <strong>QQ community group: 1105463028</strong></p>
 
 > [!WARNING]
-> 📌 **Announcement (v2.2.0)**
+> 📌 **Announcement (v2.2.1)**
 >
-> **v2.2.0:** Lands Vision Quality Round 2 with adaptive local OCR, bounded degraded-evidence work, stable artifact handoff, successful-evidence convergence, and stronger DSH/session compatibility — without raising the rc.8 Host floor. [What’s new →](docs/releases/v2.2.0.md)
+> **v2.2.1:** Stability hotfix for large-session repair, accessor-based fetch composition, non-divisible pixel-diff bounds, and local Ollama answer-budget preservation — without raising the rc.8 Host floor. [What’s new →](docs/releases/v2.2.1.md)
 
 <p align="center">
   <img src="assets/vision-demo.gif" width="640" alt="Demo: paste an image, the agent locates the send button with vision_ground / vision_crop / vision_pixel_diff and answers with coordinates" />

package/README.zh.md

@@ -17,7 +17,7 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v2.2.0"><img src="https://img.shields.io/badge/release-v2.2.0-5B4CF0?style=flat-square" alt="Release v2.2.0" /></a>
+  <a href="https://github.com/ysr666/dsh-vision-router/releases/tag/v2.2.1"><img src="https://img.shields.io/badge/release-v2.2.1-5B4CF0?style=flat-square" alt="Release v2.2.1" /></a>
   <a href="tests"><img src="https://img.shields.io/badge/verified-Node%2022%20%2B%2024-2EA44F?style=flat-square" alt="已验证 Node 22 + 24" /></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-2EA44F?style=flat-square" alt="MIT 许可证" /></a>
   <a href="package.json"><img src="https://img.shields.io/badge/Node.js-%3E%3D22-339933?style=flat-square&amp;logo=nodedotjs&amp;logoColor=white" alt="Node.js >=22" /></a>
@@ -39,9 +39,9 @@
 <p align="center">💬 <strong>QQ 用户交流群：1105463028</strong></p>
 
 > [!WARNING]
-> 📌 **公告（v2.2.0）**
+> 📌 **公告（v2.2.1）**
 >
-> **v2.2.0：Vision Quality Round 2 正式落地——自适应本地OCR、失败证据有界收敛、稳定artifact handoff、成功证据停止重复调用，并进一步收敛DSH/Session兼容；公开最低Host仍保持 `0.1.0-rc.8`。** [查看完整更新 →](docs/releases/v2.2.0.md)
+> **v2.2.1：稳定性热修——修复大型 Session repair 卡死、accessor fetch 组合、非整除 pixel diff 边界与本地 Ollama 推理占满答案预算；公开最低 Host 仍保持 `0.1.0-rc.8`。** [查看完整更新 →](docs/releases/v2.2.1.md)
 
 <p align="center">
   <img src="assets/vision-demo.gif" width="640" alt="演示：粘贴图片，Agent 用 vision_ground / vision_crop / vision_pixel_diff 定位发送按钮并给出坐标" />

package/docs/releases/v2.2.1.md

@@ -0,0 +1,22 @@
+# v2.2.1
+
+DSH Vision Router 2.2.1 is a focused stability and compatibility hotfix for the 2.2.0 line.
+
+## Highlights
+
+- Fixes the large-session repair regressions in #524 and #532. On supported DSH Hosts, production tool-result and guard-stop repair now consumes bounded post-commit `session/event` entries and performs zero live Session-history reads: no `sessionQuery.readEvent()`, no `observeSession.events` materialization, and no new `eventAt()` / `snapshotEvents()` dependency. This removes the original full-clone amplification and the later `Unable to deserialize cloned data` / Windows Node 24 native-crash path.
+- Fixes global `fetch` compatibility composition with accessor-based Host/plugin pipelines (#519), preventing wrapper cycles while preserving live Host middleware authority.
+- Fixes `vision_pixel_diff` worst-region bounds on non-divisible image/grid dimensions (#520).
+- Fixes the confirmed Ollama portion of #526 by disabling hidden reasoning for generated local Ollama vision providers on the OpenAI-compatible Chat Completions path, preserving the bounded token budget for visible answer text.
+- Completes the release-channel canary fixture so stable/latest and preview/alpha validate the same Session publication family before Host contract smoke.
+
+## Compatibility
+
+- Node 22 and Node 24 remain supported.
+- Windows, macOS, and Linux remain gated.
+- The public minimum DSH Host remains `0.1.0-rc.8`.
+- Existing 2.2.0 settings require no migration.
+
+## Known follow-ups
+
+- #526 remains open for the LM Studio reasoning/budget path; 2.2.1 does not send Ollama-specific `reasoning_effort` to LM Studio without a documented LM Studio wire contract.

package/docs/releases/v2.2.2.md

@@ -0,0 +1,21 @@
+# v2.2.2
+
+DSH Vision Router 2.2.2 is an urgent browser compatibility hotfix for DSH 0.1.7-rc.1.
+
+## Highlights
+
+- Fixes Vision Router being left pending at Web startup on DSH 0.1.7-rc.1 with `waiting for service: settingsScope`.
+- Adapts the legacy `ctx.settingsScope.bind({ namespace })` consumer face to DSH 0.1.7's official `configForms.get(namespace)` service without hard-requiring either service generation.
+- Keeps the real legacy `settingsScope` path preferred on older supported Hosts, so the fix does not raise the existing Host floor.
+- Preserves the existing local settings permission and remote-risk wrappers over both settings backends.
+- Adds loader-level regression coverage for both DSH 0.1.7 `configForms` and legacy `settingsScope` Hosts.
+
+## Validation
+
+- Node 22 and Node 24 CI passed on the compatibility fix.
+- Architecture Closure, P1 Routing Parity, P3 Compatibility Convergence, DSH Contract, exact-source, browser smoke, adversarial compatibility, fuzz, dependency review, fetch composition, and native multimodal cold-resume gates passed on PR #538.
+- The public minimum DSH Host remains `0.1.0-rc.8`.
+
+## Upgrade
+
+Users affected by the DSH 0.1.7 startup failure should upgrade Vision Router to 2.2.2. No settings migration is required.

package/lib/client.js

@@ -865,6 +865,57 @@ window.__ModuleLoader__.load({
           : stored && settingsValueEqual(item.key, user[item.key], item.run.value)
         return { ok, stored }
       }
+      const finalize = () => {
+        const landed = failures.length === 0
+        const nextDrafts = landedFields.length === 0 ? drafts : { ...drafts }
+        for (const field of landedFields) delete nextDrafts[field]
+        return {
+          landed,
+          failed: !landed,
+          landedFields,
+          nextDrafts,
+          failures,
+        }
+      }
+      const mismatchFailure = (item, check) => ({
+        field: item.key,
+        operation: item.run.clear ? 'unset' : 'set',
+        reason: 'readback-mismatch',
+        detail: item.run.clear
+          ? 'field remained present in the user layer'
+          : check.stored
+            ? 'stored user-layer value differs from the requested value'
+            : 'field is absent from the user layer',
+      })
+      const batchWrite = scope && typeof scope.__visionRouterWritePlan === 'function'
+        ? scope.__visionRouterWritePlan.bind(scope)
+        : undefined
+      // DSH 0.1.7's local compatibility transport is ConfigEditor-backed.
+      // ConfigEditor reloads the plugin after a successful edit, so serial POSTs
+      // from one Save can cross generations and strand the second mutation.
+      // Its private scope seam commits the entire UI plan in one atomic edit.
+      if (plan.length > 1 && batchWrite) {
+        try {
+          await batchWrite(plan)
+        } catch (error) {
+          for (const item of plan) {
+            failures.push({
+              field: item.key,
+              operation: item.run.clear ? 'unset' : 'set',
+              reason: error && error.code === 'settings-conflict' ? 'settings-conflict' : 'write-error',
+              detail: settingsSaveErrorMessage(error),
+            })
+          }
+          return finalize()
+        }
+        for (const item of plan) {
+          const check = inspectReadback(item)
+          if (check.error) failures.push(check.error)
+          else if (check.ok) landedFields.push(item.key)
+          else failures.push(mismatchFailure(item, check))
+        }
+        return finalize()
+      }
       const writeItem = async (item) => {
         if (item.run.clear) await scope.unset(item.key)
         else await scope.set(item.key, item.run.value)
@@ -913,16 +964,7 @@ window.__ModuleLoader__.load({
             }
           }
 
-          terminalFailure = {
-            field: item.key,
-            operation,
-            reason: 'readback-mismatch',
-            detail: item.run.clear
-              ? 'field remained present in the user layer'
-              : check.stored
-                ? 'stored user-layer value differs from the requested value'
-                : 'field is absent from the user layer',
-          }
+          terminalFailure = mismatchFailure(item, check)
         }
         if (success) landedFields.push(item.key)
         else failures.push(terminalFailure ?? {
@@ -932,16 +974,7 @@ window.__ModuleLoader__.load({
           detail: 'write did not become visible in the user layer',
         })
       }
-      const landed = failures.length === 0
-      const nextDrafts = landedFields.length === 0 ? drafts : { ...drafts }
-      for (const field of landedFields) delete nextDrafts[field]
-      return {
-        landed,
-        failed: !landed,
-        landedFields,
-        nextDrafts,
-        failures,
-      }
+      return finalize()
     }
 
     const REMOTE_SETTINGS_CHANNEL = '/vision-router-settings'
@@ -1124,16 +1157,23 @@ window.__ModuleLoader__.load({
     }
 
     function shouldUseRemoteSettings(getConnection, locationLike) {
+      // Browser page authority is the security boundary. DSH 0.1.7 can report
+      // Connection.isLoopback=false even for a real 127.0.0.1 page, so letting
+      // that hint win would incorrectly force the local Settings page onto the
+      // trusted-host RPC path. Conversely, a non-loopback browser URL must not
+      // become local merely because a stale Connection says true.
+      const location = locationLike ?? (typeof window !== 'undefined' ? window.location : undefined)
+      const hostname = typeof location?.hostname === 'string' ? location.hostname.toLowerCase().replace(/^\[|\]$/g, '') : ''
+      if (hostname !== '') {
+        if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '::1') return false
+        if (/^127(?:\.\d{1,3}){3}$/.test(hostname)) return false
+        return true
+      }
       try {
         const connection = typeof getConnection === 'function' ? getConnection() : undefined
         if (connection && typeof connection.isLoopback === 'boolean') return connection.isLoopback === false
-      } catch { /* fall through to page authority */ }
-      const location = locationLike ?? (typeof window !== 'undefined' ? window.location : undefined)
-      const hostname = typeof location?.hostname === 'string' ? location.hostname.toLowerCase().replace(/^\[|\]$/g, '') : ''
-      if (hostname === '') return false
-      if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '::1') return false
-      if (/^127(?:\.\d{1,3}){3}$/.test(hostname)) return false
-      return true
+      } catch { /* no page authority and no usable Connection: stay local-safe */ }
+      return false
     }
 
     function reportSettingsSaveFailures(failures) {

package/lib/core-primitives.js

@@ -1858,6 +1858,10 @@ export function localOllamaProvidersOf(config) {
       model,
       apiKeyEnv: '',
       maxTokens: 2048,
+      // Ollama's OpenAI-compatible Chat Completions endpoint supports
+      // reasoning_effort='none'. Vision extraction should spend the bounded
+      // completion budget on observable answer text rather than hidden thought.
+      reasoningEffort: 'none',
       // 仅显式选择 anthropic 格式时携带（默认 openai 路径保持字节不变）。
       ...(local.format === 'anthropic' ? { format: 'anthropic' } : {}),
       // 建议值透传：温度/top_p 只在显式配置时携带（callOpenAICompatible
@@ -1978,6 +1982,9 @@ export async function callLocalBackend(provider, messages, options = {}) {
     ...(typeof options.resolveCredential === 'function'
       ? { resolveCredential: options.resolveCredential }
       : {}),
+    ...(typeof provider.reasoningEffort === 'string'
+      ? { reasoningEffort: provider.reasoningEffort }
+      : {}),
     ...sampling,
   })
 }
@@ -2121,6 +2128,7 @@ export async function callOpenAICompatible(provider, messages, options = {}) {
     if (resolvedApiKey === '') throw new Error(`http provider "${provider.name}": ${apiKeyEnv} is not set`)
     headers.authorization = `Bearer ${resolvedApiKey}`
   }
+  const reasoningEffort = options.reasoningEffort ?? provider.reasoningEffort
   const body = {
     model: provider.model,
     messages,
@@ -2130,6 +2138,9 @@ export async function callOpenAICompatible(provider, messages, options = {}) {
     // never pass them, so the wire body stays byte-identical for main paths.
     ...(typeof options.temperature === 'number' ? { temperature: options.temperature } : {}),
     ...(typeof options.top_p === 'number' ? { top_p: options.top_p } : {}),
+    ...(['none', 'low', 'medium', 'high', 'max'].includes(reasoningEffort)
+      ? { reasoning_effort: reasoningEffort }
+      : {}),
   }
   const url = `${provider.baseURL.replace(/\/$/, '')}/chat/completions`
   const request = () =>

package/lib/dsh-contract-compat.js

@@ -192,17 +192,40 @@ export function createSessionEventTailReader(ctx) {
 
 
 /**
- * Build the narrow asynchronous Session-log reader used only for cold
- * canonical attachment recovery after the bounded cache evicts a ref.
- * Supported Hosts own replay validation through `sessionQuery.readSession()`;
- * callers receive detached events and never touch synchronous Session history.
+ * Build the asynchronous Session-log reader used by cold attachment recovery
+ * and batched surface repair. Prefer SessionQuery's observation lease when it
+ * exists: one exact live cut materializes at most one immutable event snapshot,
+ * rather than cloning the whole live corpus once per requested event (#524).
+ * Hosts without that capability retain the released readSession() contract.
  */
 export function createSessionLogReader(ctx) {
   return async function readSessionLog(session) {
     const sessionId = session?.id
     if (sessionId === undefined || sessionId === null) return { supported: false }
     const query = sessionQueryOf(ctx)
-    if (!query || typeof query.readSession !== 'function') return { supported: false }
+    if (!query) return { supported: false }
+
+    if (typeof query.observeSession === 'function') {
+      let observation
+      try {
+        observation = await query.observeSession(sessionId, { projectionMode: 'none' })
+        if (!observation || !Array.isArray(observation.events)) {
+          throw new Error('sessionQuery.observeSession returned no event log')
+        }
+        const observedId = observation.header?.id
+        if (observedId !== undefined && observedId !== sessionId) {
+          throw new Error(
+            `sessionQuery.observeSession returned session ${String(observedId)} for requested ${String(sessionId)}`,
+          )
+        }
+        return { supported: true, events: observation.events }
+      } finally {
+        const dispose = observation?.[Symbol.dispose]
+        if (typeof dispose === 'function') dispose.call(observation)
+      }
+    }
+
+    if (typeof query.readSession !== 'function') return { supported: false }
     const snapshot = await query.readSession(sessionId)
     if (!snapshot || !Array.isArray(snapshot.events)) {
       throw new Error('sessionQuery.readSession returned no event log')