dsh-vision-router 2.2.0 → 2.2.2

package/lib/settings-client-rc8-lifecycle.js

@@ -31,6 +31,14 @@ export const SETTINGS_RC8_CLIENT_PRELUDE = String.raw`(function(){
     return undefined;
   }
 
+  function isLoopbackLocation(locationLike) {
+    var hostname = locationLike && typeof locationLike.hostname === 'string'
+      ? locationLike.hostname.toLowerCase().replace(/^\[|\]$/g, '')
+      : '';
+    if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '::1') return true;
+    return /^127(?:\.\d{1,3}){3}$/.test(hostname);
+  }
+
   async function writePermission(operation, value, revision) {
     if (typeof fetch !== 'function') throw new Error('Vision Router local settings transport is unavailable');
     var payload = { operation: operation };
@@ -269,6 +277,11 @@ export const SETTINGS_RC8_CLIENT_PRELUDE = String.raw`(function(){
     if (connectionCache && connectionCache.has(connection)) return connectionCache.get(connection);
     var wrapped = new Proxy(connection, {
       get: function(target, property) {
+        if (property === 'isLoopback') {
+          var locationLike;
+          try { locationLike = window && window.location; } catch (_) { locationLike = undefined; }
+          if (isLoopbackLocation(locationLike)) return true;
+        }
         if (property === 'rpc') return wrapRpc(Reflect.get(target, property, target));
         var value = Reflect.get(target, property, target);
         return typeof value === 'function' ? value.bind(target) : value;

package/lib/vision-breaker-shadow-health.js

@@ -3,7 +3,17 @@ import { createSessionTurnResolver } from './session-turn-resolver.js'
 
 function legacyTurnNumberOf(session) {
   try {
-    const events = session?.events
+    // dsh 0.1.2-alpha.4 removed the bare `session.events` array in favor of
+    // `session.snapshotEvents()`; mirror legacySessionEvents
+    // (session-vision-index.js), which prefers the snapshot when both surfaces
+    // exist — transitional Hosts keep the bare array but leave it stale, so a
+    // bare-array-first read would resolve a stale turn on them.
+    let events
+    if (typeof session?.snapshotEvents === 'function') {
+      events = session.snapshotEvents()
+    } else {
+      events = session?.events
+    }
     if (!Array.isArray(events)) return 0
     const last = events.findLast((event) => event && event.type === 'turn/start')
     return last && Number.isInteger(last.data?.turn) ? last.data.turn : 0

package/lib/web/dsh-settings-017-root-transport.js

@@ -0,0 +1,299 @@
+import {
+  DSH_017_SETTINGS_COMPAT_MARK,
+  LOCAL_SETTINGS_PATH,
+} from '../dsh-settings-017-compat.js'
+
+const BODY_LIMIT_BYTES = 256 * 1024
+const ROOT_TRANSPORT_REGISTRY_KEY = Symbol.for('dsh-vision-router.settings-017-root-local-transport')
+const SLOW_MUTATION_MS = 5_000
+const TRACE_ENV = 'DVR_SETTINGS_017_TRACE'
+
+function objectLike(value) {
+  return value !== null && typeof value === 'object'
+}
+
+function trace(stage, detail) {
+  if (process.env[TRACE_ENV] !== '1') return
+  try {
+    console.warn(`vision-router: DSH 0.1.7 settings trace ${stage}${detail === undefined ? '' : ` ${JSON.stringify(detail)}`}`)
+  } catch {}
+}
+
+function transportRegistry() {
+  let registry = globalThis[ROOT_TRANSPORT_REGISTRY_KEY]
+  if (!(registry instanceof WeakMap)) {
+    registry = new WeakMap()
+    Object.defineProperty(globalThis, ROOT_TRANSPORT_REGISTRY_KEY, {
+      value: registry,
+      configurable: true,
+    })
+  }
+  return registry
+}
+
+function rootOf(ctx) {
+  try {
+    if (objectLike(ctx?.root)) return ctx.root
+  } catch {}
+  return ctx
+}
+
+function stateFor(root) {
+  const registry = transportRegistry()
+  let state = registry.get(root)
+  if (!state) {
+    state = {
+      current: undefined,
+      routeOwner: undefined,
+      routeInstalling: false,
+      generationSequence: 0,
+      requestSequence: 0,
+    }
+    registry.set(root, state)
+  }
+  return state
+}
+
+function serviceOf(ctx, name) {
+  try {
+    const value = typeof ctx?.get === 'function' ? ctx.get(name) : undefined
+    if (value !== undefined && value !== null) return value
+  } catch {}
+  try {
+    const value = ctx?.[name]
+    return value === undefined || value === null ? undefined : value
+  } catch {
+    return undefined
+  }
+}
+
+function compatibleSettings(ctx) {
+  const settings = serviceOf(ctx, 'settings')
+  if (settings?.[DSH_017_SETTINGS_COMPAT_MARK] !== true) return undefined
+  if (typeof settings.describe !== 'function' || typeof settings.mutate !== 'function') return undefined
+  return settings
+}
+
+function namespaceDescriptor(settings) {
+  const descriptors = settings.describe({ redactSecrets: true })
+  return Array.isArray(descriptors) ? descriptors.find((entry) => entry?.ns === 'vision-router') : undefined
+}
+
+function sendJson(res, status, body) {
+  res.writeHead(status, {
+    'content-type': 'application/json; charset=utf-8',
+    'cache-control': 'no-store',
+  })
+  res.end(JSON.stringify(body))
+}
+
+async function readJson(req) {
+  let size = 0
+  const chunks = []
+  for await (const chunk of req) {
+    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)
+    size += bytes.length
+    if (size > BODY_LIMIT_BYTES) throw Object.assign(new Error('request body too large'), { statusCode: 413 })
+    chunks.push(bytes)
+  }
+  if (chunks.length === 0) return {}
+  return JSON.parse(Buffer.concat(chunks).toString('utf8'))
+}
+
+function currentSettings(state) {
+  const generation = state.current
+  if (!generation || generation.active === false) return undefined
+  try {
+    return generation.resolve()
+  } catch {
+    return undefined
+  }
+}
+
+function flattenEffectLabels(effects) {
+  const labels = []
+  const visit = (rows) => {
+    if (!Array.isArray(rows)) return
+    for (const row of rows) {
+      if (!row || typeof row !== 'object') continue
+      if (typeof row.label === 'string') labels.push(row.label)
+      visit(row.children)
+    }
+  }
+  visit(effects)
+  return labels
+}
+
+function slowMutationSnapshot(root) {
+  const loader = serviceOf(root, 'loader')
+  let entries = []
+  try { entries = typeof loader?.entries === 'function' ? [...loader.entries()] : [] } catch {}
+  return entries.flatMap((entry) => {
+    const fiber = entry?.fiber
+    if (!fiber || (entry?.options?.id !== 'vision-router' && !fiber.inertia)) return []
+    let effects = []
+    try { effects = typeof fiber.getEffects === 'function' ? flattenEffectLabels(fiber.getEffects()) : [] } catch {}
+    return [{
+      id: entry?.options?.id,
+      state: fiber.state,
+      inertia: Boolean(fiber.inertia),
+      effects,
+    }]
+  })
+}
+
+function beginSlowMutationWatch(root, requestId) {
+  return setTimeout(() => {
+    const snapshot = slowMutationSnapshot(root)
+    const message = `vision-router: DSH 0.1.7 settings mutation still reconciling after ${SLOW_MUTATION_MS}ms request=${requestId} ${JSON.stringify(snapshot)}`
+    try {
+      if (root?.logger && typeof root.logger.warn === 'function') root.logger.warn(message)
+      else console.warn(message)
+    } catch {
+      try { console.warn(message) } catch {}
+    }
+  }, SLOW_MUTATION_MS)
+}
+
+function routeFor(root, state) {
+  return {
+    kind: 'exact',
+    path: LOCAL_SETTINGS_PATH,
+    async handler(req, res) {
+      const requestId = ++state.requestSequence
+      trace('handler-enter', { requestId, method: req.method, generation: state.current?.id })
+      const settings = currentSettings(state)
+      if (!settings) {
+        trace('settings-unavailable', { requestId })
+        sendJson(res, 404, { ok: false, error: { code: 'settings-unavailable', message: 'Vision Router settings are unavailable' } })
+        return
+      }
+
+      if (req.method === 'GET') {
+        const descriptor = namespaceDescriptor(settings)
+        if (!descriptor) {
+          sendJson(res, 404, { ok: false, error: { code: 'settings-unavailable', message: 'Vision Router settings are unavailable' } })
+          return
+        }
+        sendJson(res, 200, { ok: true, value: { ...descriptor, writable: settings.writable === true } })
+        trace('response', { requestId, status: 200, revision: descriptor.revision })
+        return
+      }
+
+      if (req.method !== 'POST') {
+        res.setHeader('Allow', 'GET, POST')
+        sendJson(res, 405, { ok: false, error: { code: 'method-not-allowed', message: 'method not allowed' } })
+        return
+      }
+
+      let slowTimer
+      try {
+        trace('body-read-start', { requestId })
+        const payload = await readJson(req)
+        trace('body-read-done', { requestId, expectedRevision: payload?.expectedRevision, ops: payload?.ops?.length })
+        slowTimer = beginSlowMutationWatch(root, requestId)
+        trace('mutate-start', { requestId, generation: state.current?.id })
+        await settings.mutate('vision-router', payload?.ops, payload?.expectedRevision)
+        trace('mutate-done', { requestId, generation: state.current?.id })
+
+        // ConfigEditor.edit() reconciles the profile and can dispose the plugin
+        // generation that accepted this request. The route itself is owned by a
+        // root child fiber that depends only on WebServer, so finish the response
+        // from the newly-mounted DVR generation when present.
+        const afterSettings = currentSettings(state) ?? settings
+        const descriptor = namespaceDescriptor(afterSettings)
+        if (!descriptor) throw new Error('Vision Router settings disappeared after the write')
+        sendJson(res, 200, { ok: true, value: { ...descriptor, writable: afterSettings.writable === true } })
+        trace('response', { requestId, status: 200, revision: descriptor.revision })
+      } catch (error) {
+        const conflict = error?.code === 'SETTINGS_CONFLICT'
+        const status = error?.statusCode ?? (conflict ? 409 : 400)
+        trace('response-error', { requestId, status, code: error?.code, message: error?.message ?? String(error) })
+        sendJson(res, status, {
+          ok: false,
+          error: {
+            code: conflict ? 'settings-conflict' : 'settings-rejected',
+            message: error?.message ?? String(error),
+            ...(conflict ? { details: { expected: error.expected, actual: error.actual } } : {}),
+          },
+        })
+      } finally {
+        if (slowTimer) clearTimeout(slowTimer)
+      }
+    },
+  }
+}
+
+function ensureRootRoute(root, state) {
+  if (state.routeOwner || state.routeInstalling) return
+  if (typeof root?.inject !== 'function') {
+    throw new Error('Vision Router requires root dependency injection for the DSH 0.1.7 local settings route')
+  }
+
+  state.routeInstalling = true
+  try {
+    const owner = root.inject(['webServer'], (webCtx) => {
+      if (!webCtx?.webServer || typeof webCtx.webServer.register !== 'function' || typeof webCtx.effect !== 'function') {
+        throw new Error('Vision Router requires WebServer route registration on DSH 0.1.7')
+      }
+      trace('route-register', {})
+      webCtx.effect(
+        () => {
+          const dispose = webCtx.webServer.register(routeFor(root, state))
+          return () => {
+            trace('route-dispose', {})
+            dispose()
+          }
+        },
+        'vision-router: DSH 0.1.7 root local settings transport',
+      )
+    })
+    // `root.inject()` creates a root child fiber. It is independent from the
+    // DVR plugin fiber and therefore survives ConfigEditor reconciliation of
+    // the `vision-router` entry. Keep the owner reachable for the process life.
+    state.routeOwner = owner ?? true
+  } catch (error) {
+    state.routeOwner = undefined
+    throw error
+  } finally {
+    state.routeInstalling = false
+  }
+}
+
+/**
+ * ConfigEditor.edit() reconciles the plugin configuration and therefore disposes
+ * the DVR plugin fiber while a Settings POST is still in flight. A dedicated
+ * root child fiber owns the HTTP route and depends only on WebServer; individual
+ * DVR generations only publish a resolver for their current settings facade.
+ */
+export function installDsh017RootLocalSettingsTransport(ctx) {
+  if (!ctx || typeof ctx.inject !== 'function') return
+  const root = rootOf(ctx)
+  if (!objectLike(root)) return
+  const state = stateFor(root)
+
+  ctx.inject(['settings'], (settingsCtx) => {
+    const mounted = compatibleSettings(settingsCtx)
+    if (!mounted) return
+
+    const generation = {
+      id: ++state.generationSequence,
+      active: true,
+      resolve: () => compatibleSettings(ctx) ?? mounted,
+    }
+    state.current = generation
+    trace('generation-mount', { generation: generation.id })
+    ensureRootRoute(root, state)
+
+    if (typeof settingsCtx?.effect === 'function') {
+      settingsCtx.effect(
+        () => () => {
+          generation.active = false
+          if (state.current === generation) state.current = undefined
+          trace('generation-dispose', { generation: generation.id })
+        },
+        'vision-router: DSH 0.1.7 settings generation',
+      )
+    }
+  })
+}

package/lib/web/remote-settings-client.js

@@ -1,8 +1,208 @@
+import { htmlHasScriptMarker } from '../html-script-marker.js'
 import { installVisionRouterRemoteSettingsBridge } from '../remote-settings-bridge.js'
 import { installSettingsRc8ClientLifecycle } from '../settings-client-rc8-lifecycle.js'
 
+const SETTINGS_CONFIG_FORMS_MARK = 'data-vision-router-settings-configforms-compat'
+
+/**
+ * DSH 0.1.7 replaces the browser `settingsScope` service with `configForms`.
+ * Vision Router still supports older Hosts, so the browser bundle cannot hard
+ * depend on either service name. This prelude removes the legacy hard service
+ * edge at module-factory time and presents the old `settingsScope.bind()` face
+ * over whichever official settings service the active Host provides.
+ */
+export const SETTINGS_CONFIG_FORMS_CLIENT_PRELUDE = String.raw`(function(){
+  'use strict';
+  var TARGET = 'dsh-vision-router';
+  var FLAG = '__visionRouterSettingsConfigFormsCompat';
+  var contextCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
+  var binderCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
+  var connectionCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
+
+  function safeGet(ctx, name) {
+    if (!ctx) return undefined;
+    try {
+      if (typeof ctx.get === 'function') {
+        var value = ctx.get(name);
+        if (value !== undefined && value !== null) return value;
+      }
+    } catch (_) {}
+    try { return ctx[name]; } catch (_) { return undefined; }
+  }
+
+  function isLoopbackLocation(locationLike) {
+    var hostname = locationLike && typeof locationLike.hostname === 'string'
+      ? locationLike.hostname.toLowerCase().replace(/^\[|\]$/g, '')
+      : '';
+    if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '::1') return true;
+    return /^127(?:\.\d{1,3}){3}$/.test(hostname);
+  }
+
+  function normalizeConnection(connection) {
+    if (!connection || typeof connection !== 'object') return connection;
+    var locationLike;
+    try { locationLike = window && window.location; } catch (_) { locationLike = undefined; }
+    if (!isLoopbackLocation(locationLike) || connection.isLoopback !== false) return connection;
+    if (connectionCache && connectionCache.has(connection)) return connectionCache.get(connection);
+    var wrapped = new Proxy(connection, {
+      get: function(target, property) {
+        if (property === 'isLoopback') return true;
+        var value = Reflect.get(target, property, target);
+        return typeof value === 'function' ? value.bind(target) : value;
+      }
+    });
+    if (connectionCache) connectionCache.set(connection, wrapped);
+    return wrapped;
+  }
+
+  function legacyBinder(ctx) {
+    var binder = safeGet(ctx, 'settingsScope');
+    return binder && typeof binder.bind === 'function' ? binder : undefined;
+  }
+
+  function configFormsBinder(ctx) {
+    var forms = safeGet(ctx, 'configForms');
+    if (!forms || typeof forms.get !== 'function') return undefined;
+    if (binderCache && binderCache.has(forms)) return binderCache.get(forms);
+    var binder = {
+      bind: function(spec) {
+        var namespace = spec && spec.namespace;
+        if (typeof namespace !== 'string' || namespace.length === 0) {
+          throw new TypeError('settings namespace must be a non-empty string');
+        }
+        return forms.get(namespace);
+      }
+    };
+    if (binderCache) binderCache.set(forms, binder);
+    return binder;
+  }
+
+  function resolveBinder(ctx) {
+    return legacyBinder(ctx) || configFormsBinder(ctx);
+  }
+
+  function wrapContext(ctx) {
+    if (!ctx || typeof ctx !== 'object') return ctx;
+    if (contextCache && contextCache.has(ctx)) return contextCache.get(ctx);
+    var wrapped = new Proxy(ctx, {
+      get: function(target, property) {
+        if (property === 'settingsScope') {
+          var binder = resolveBinder(target);
+          if (!binder) {
+            throw new Error('Vision Router requires DSH settingsScope or configForms');
+          }
+          return binder;
+        }
+        if (property === 'get') {
+          var getter = Reflect.get(target, property, target);
+          if (typeof getter !== 'function') return getter;
+          return function(name) {
+            var value = getter.call(target, name);
+            return name === 'connection' ? normalizeConnection(value) : value;
+          };
+        }
+        var value = Reflect.get(target, property, target);
+        return typeof value === 'function' ? value.bind(target) : value;
+      }
+    });
+    if (contextCache) contextCache.set(ctx, wrapped);
+    return wrapped;
+  }
+
+  function rewriteInject(exports) {
+    if (!exports || !Array.isArray(exports.inject) || exports.inject.indexOf('settingsScope') === -1) return;
+    exports.inject = exports.inject.filter(function(name){ return name !== 'settingsScope'; });
+  }
+
+  function patchLiveLoader(loader) {
+    if (!loader || typeof loader.load !== 'function' || loader.load[FLAG]) return;
+    var original = loader.load;
+    function load(spec) {
+      if (spec && spec.id === TARGET && typeof spec.factory === 'function') {
+        var factory = spec.factory;
+        spec = Object.assign({}, spec, {
+          factory: function(require) {
+            var exports = factory(require);
+            rewriteInject(exports);
+            if (exports && typeof exports.apply === 'function' && !exports.apply[FLAG]) {
+              var apply = exports.apply;
+              var wrappedApply = function(ctx) {
+                var rest = Array.prototype.slice.call(arguments, 1);
+                return apply.apply(exports, [wrapContext(ctx)].concat(rest));
+              };
+              Object.defineProperty(wrappedApply, FLAG, { value: true });
+              exports.apply = wrappedApply;
+            }
+            return exports;
+          }
+        });
+      }
+      return original.call(this, spec);
+    }
+    Object.defineProperty(load, FLAG, { value: true });
+    loader.load = load;
+  }
+
+  function patchCreate(loader) {
+    if (!loader) return;
+    patchLiveLoader(loader);
+    if (typeof loader.create !== 'function' || loader.create[FLAG]) return;
+    var originalCreate = loader.create;
+    function create() {
+      var result = originalCreate.apply(this, arguments);
+      patchLiveLoader(loader);
+      return result;
+    }
+    Object.defineProperty(create, FLAG, { value: true });
+    loader.create = create;
+  }
+
+  function install() {
+    if (window.__ModuleLoader__) {
+      patchCreate(window.__ModuleLoader__);
+      return;
+    }
+    var descriptor = Object.getOwnPropertyDescriptor(window, '__ModuleLoader__');
+    if (descriptor && descriptor.configurable === false) return;
+    var previousGet = descriptor && descriptor.get;
+    var previousSet = descriptor && descriptor.set;
+    var stored = descriptor && Object.prototype.hasOwnProperty.call(descriptor, 'value') ? descriptor.value : undefined;
+    Object.defineProperty(window, '__ModuleLoader__', {
+      configurable: true,
+      enumerable: !descriptor || descriptor.enumerable !== false,
+      get: function(){ return previousGet ? previousGet.call(window) : stored; },
+      set: function(value) {
+        if (previousSet) previousSet.call(window, value); else stored = value;
+        try { patchCreate(previousGet ? previousGet.call(window) : value); } catch (_) {}
+      }
+    });
+    if (stored) patchCreate(stored);
+  }
+
+  try { install(); } catch (_) {}
+})();`
+
+export function injectSettingsConfigFormsCompatPrelude(html) {
+  if (typeof html !== 'string' || htmlHasScriptMarker(html, SETTINGS_CONFIG_FORMS_MARK)) return html
+  const safe = SETTINGS_CONFIG_FORMS_CLIENT_PRELUDE.replace(/<\/script/gi, '<\\/script')
+  const script = `<script ${SETTINGS_CONFIG_FORMS_MARK}>${safe}</script>`
+  const closeHead = html.indexOf('</head>')
+  return closeHead === -1 ? `${html}${script}` : `${html.slice(0, closeHead)}${script}${html.slice(closeHead)}`
+}
+
+export function installSettingsConfigFormsCompat(ctx) {
+  if (!ctx || typeof ctx.inject !== 'function') return
+  ctx.inject(['webServer'], (webCtx) => {
+    webCtx.effect(
+      () => webCtx.webServer.tapIndex(injectSettingsConfigFormsCompatPrelude),
+      'vision-router: settings configForms compatibility',
+    )
+  })
+}
+
 export function installVisionRemoteSettingsClient(ctx, logger) {
   installVisionRouterRemoteSettingsBridge(ctx, logger)
+  installSettingsConfigFormsCompat(ctx)
   installSettingsRc8ClientLifecycle(ctx)
   return ctx
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vision-router",
-  "version": "2.2.0",
+  "version": "2.2.2",
   "description": "Eyes for text-only DeepSeek Harness agents: built-in free vision chain (no key) + pixel-level vision tools (Q&A, grounding, crop, pixel diff, colors, OCR, SVG trace, cutout, screenshots). One-command install, no Python, image turns work like ordinary tool-calling turns.",
   "license": "MIT",
   "repository": {
@@ -70,12 +70,12 @@
     "sharp": "^0.35.4"
   },
   "scripts": {
-    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/pi-ai-bridge-wire-compat.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && node --test tests/vision-backend-runtime-policy.test.js",
+    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-event-feed.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && node --test tests/vision-backend-runtime-policy.test.js",
     "test:core": "node --test tests/core.test.js tests/degraded-local-evidence.test.js tests/runtime-e2e.test.js tests/structured-bootstrap.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-execution-policy.test.js tests/vision-backend-runtime-policy.test.js",
     "test:routing": "node --test tests/issue-374-delegated-call-config.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/vision-routing-product.test.js tests/vision-capability-router.test.js tests/vision-capability-probe.test.js tests/vision-capability-shadow-health.test.js tests/vision-runtime-performance.test.js tests/vision-background-benchmark.test.js tests/vision-image-input-verdict.test.js",
     "test:session": "node --test tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/replay-delegation.test.js tests/legacy-session-repair.test.js tests/session-repair-v2.test.js tests/issue-276-session-image-ownership.test.js",
     "test:resources": "node --test tests/artifact-path-security.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js",
-    "test:compat": "node --test tests/adapter-prepare-call-compat.test.js tests/attachment-admission-policy.test.js tests/rc6-rc7-compat.test.js tests/rc6-real-settings-persistence.test.js tests/android-attachment-compat.test.js tests/http-compat.test.js tests/pi-ai-bridge-wire-compat.test.js tests/native-image-coexistence.test.js tests/tesseract-node24-boot.test.js tests/dsh-host-capabilities.test.js",
+    "test:compat": "node --test tests/adapter-prepare-call-compat.test.js tests/attachment-admission-policy.test.js tests/rc6-rc7-compat.test.js tests/rc6-real-settings-persistence.test.js tests/android-attachment-compat.test.js tests/http-compat.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/native-image-coexistence.test.js tests/tesseract-node24-boot.test.js tests/dsh-host-capabilities.test.js",
     "test:web": "node --test tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-acceptance-regression.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/local-remote-settings-permission.test.js tests/v2-settings-ia-integration.test.js tests/logging-ui.test.js",
     "test:contract": "node --test tests/manifest-dependencies.test.js tests/bundle-defaults.test.js tests/zero-regression-gate.test.js tests/issue-289-native-nonintervention.test.js tests/issue-374-delegated-call-config.test.js tests/runtime-boundary-fixes.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/adapter-prepare-call-compat.test.js tests/rc6-rc7-compat.test.js tests/attachment-admission-policy.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js",
     "test:grounding": "node --test tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/vision-capability-grounding-proof-contract.test.js",