dsh-vision-router 2.2.3 → 2.2.4

package/docs/releases/v2.2.4.md

@@ -0,0 +1,22 @@
+# v2.2.4
+
+DSH Vision Router 2.2.4 is a Desktop and Session-recovery hotfix for the DSH 0.1.7 line.
+
+## Highlights
+
+- Fixes the official DSH `0.1.7-rc.2` Desktop startup failure where Vision Router could remain at `Loading plugins…` / `pending (waiting for service: settingsScope)`. The 0.1.7 Settings compatibility prelude now travels through DSH's structured `webserver/index-inject` boot table used by Electron/static carriers, while the served-Web `tapIndex()` path remains as a compatibility fallback and is deduplicated.
+- Adds an exact `0.1.7-rc.2` Desktop Host bootstrap regression on `windows-latest`, so the Electron/Desktop injection carrier is validated directly instead of inferred from `dsh web` browser coverage.
+- Fixes a Session event-feed recovery edge case where one transient activation-time SessionQuery read failure could permanently suppress future backfill attempts. Failed snapshots are now retried, concurrent reads remain coalesced, and a successful snapshot remains one-shot cached.
+- Keeps the public minimum supported DSH Host at `0.1.0-rc.8`; no settings migration is required.
+
+## Validation
+
+- Exact DSH source: `0.1.7-rc.2` at `477b4f420553e8a52c2fbccc464d7561b239c443`.
+- Exact Windows Desktop Host bootstrap passes with one Vision Router structured compatibility injection.
+- Real `dsh web` + Chromium passes bundle recompose, Desktop structured bootstrap, cold Vision toggle, mixed attachment lifecycle, and Settings mount/save/reload/readback.
+- Node 22/24, architecture/data-boundary/adversarial/fuzz, dependency review, and HOL plugin security gates pass.
+- Session regression covers fail → retry → success → cached behavior; the full local suite passed `1488/1489` tests with one intentional skip, plus `8/8` Host image-delivery tests.
+
+## Upgrade
+
+Users on DSH `0.1.7-rc.2` Desktop should upgrade to 2.2.4. This release contains the Desktop boot fix that is not present in 2.2.3. No settings migration is required.

package/lib/session-vision-index.js

@@ -366,17 +366,17 @@ export function createSessionVisionIndex({
         result = await readSessionLog(session)
       } catch (error) {
         warnRepairReadFailure(session, surfaceNodes(session)?.[0] ?? 0, error)
-        return
+        return false
       }
       if (result?.supported === true) {
         if (!Array.isArray(result.events)) {
           warnRepairReadFailure(session, surfaceNodes(session)?.[0] ?? 0, new Error('Session log reader returned no event log'))
-          return
+          return false
         }
         events = result.events
       } else if (result?.supported !== false) {
         warnRepairReadFailure(session, surfaceNodes(session)?.[0] ?? 0, new Error('Session log reader returned an invalid capability result'))
-        return
+        return false
       }
     }
 
@@ -385,15 +385,16 @@ export function createSessionVisionIndex({
     // snapshot, then return to the O(new events) feed path. Older partial Hosts
     // without SessionQuery retain the Session-local compatibility snapshot.
     if (events === undefined) events = legacySessionEvents(session)
-    if (!Array.isArray(events)) return
+    if (!Array.isArray(events)) return true
 
     const nodes = surfaceNodes(session)
-    if (!nodes || nodes.length === 0) return
+    if (!nodes || nodes.length === 0) return true
     for (const seq of nodes) {
       const event = events[seq]
       if (!event || typeof event !== 'object' || (event.seq !== undefined && event.seq !== seq)) continue
       recordSessionEvent(session, event)
     }
+    return true
   }
 
   const ensureSurfaceEventFeedBackfill = async (session) => {
@@ -403,7 +404,15 @@ export function createSessionVisionIndex({
       task = backfillSurfaceEventFeed(session)
       surfaceFeedBackfills.set(session, task)
     }
-    await task
+    try {
+      const complete = await task
+      if (complete === false && surfaceFeedBackfills.get(session) === task) {
+        surfaceFeedBackfills.delete(session)
+      }
+    } catch (error) {
+      if (surfaceFeedBackfills.get(session) === task) surfaceFeedBackfills.delete(session)
+      throw error
+    }
   }
 
   const consumePendingRepairEvents = (pendingBySession, session) => {

package/lib/settings-client-017-compat.js

@@ -2,6 +2,7 @@ import { htmlHasScriptMarker } from './html-script-marker.js'
 import { LOCAL_SETTINGS_PATH } from './dsh-settings-017-compat.js'
 
 const SETTINGS_017_MARK = 'data-vision-router-settings-017-compat'
+const SETTINGS_017_STRUCTURED_MARK = `/* ${SETTINGS_017_MARK}:structured */`
 
 export const SETTINGS_017_CLIENT_PRELUDE = String.raw`(function(){
   'use strict';
@@ -311,7 +312,9 @@ export const SETTINGS_017_CLIENT_PRELUDE = String.raw`(function(){
 })();`
 
 export function injectSettings017ClientPrelude(html) {
-  if (typeof html !== 'string' || htmlHasScriptMarker(html, SETTINGS_017_MARK)) return html
+  if (typeof html !== 'string'
+    || htmlHasScriptMarker(html, SETTINGS_017_MARK)
+    || html.includes(SETTINGS_017_STRUCTURED_MARK)) return html
   const safe = SETTINGS_017_CLIENT_PRELUDE.replace(/<\/script/gi, '<\\/script')
   const script = `<script ${SETTINGS_017_MARK}>${safe}</script>`
   const closeHead = html.indexOf('</head>')
@@ -321,8 +324,27 @@ export function injectSettings017ClientPrelude(html) {
 export function installSettings017ClientCompatibility(ctx) {
   if (!ctx || typeof ctx.inject !== 'function') return
   // ConfigEditor is the generation fence: old supported Hosts keep their native
-  // settingsScope activation contract and never see this client shim.
+  // settingsScope activation contract and never see this client shim. DSH 0.1.7
+  // Desktop serves dsh-app:// from static assets and receives Host bootstrap
+  // state only through the structured index-injection table; raw tapIndex()
+  // transforms are HTTP-only and would leave the Desktop client parked on the
+  // retired settingsScope dependency.
   ctx.inject(['configEditor', 'webServer'], (webCtx) => {
+    if (typeof webCtx.on === 'function') {
+      webCtx.on('webserver/index-inject', (table) => {
+        if (!Array.isArray(table)) return
+        table.push({
+          kind: 'script',
+          placement: 'head',
+          text: `${SETTINGS_017_STRUCTURED_MARK}\n${SETTINGS_017_CLIENT_PRELUDE}`,
+        })
+      })
+    }
+
+    // Keep the served-HTML carrier too. On 0.1.7 the structured row renders
+    // first and the marker makes this a no-op; on a transitional Host that
+    // has ConfigEditor but never emits index-inject, tapIndex remains the
+    // compatibility fallback instead of silently losing the prelude.
     webCtx.effect(
       () => webCtx.webServer.tapIndex(injectSettings017ClientPrelude),
       'vision-router: DSH 0.1.7 settings client compatibility',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vision-router",
-  "version": "2.2.3",
+  "version": "2.2.4",
   "description": "Eyes for text-only DeepSeek Harness agents: built-in free vision chain (no key) + pixel-level vision tools (Q&A, grounding, crop, pixel diff, colors, OCR, SVG trace, cutout, screenshots). One-command install, no Python, image turns work like ordinary tool-calling turns.",
   "license": "MIT",
   "repository": {