dsh-vision-router 2.2.3 → 2.2.5

package/README.md

@@ -38,6 +38,9 @@
 
 <p align="center">💬 <strong>QQ community group: 1105463028</strong></p>
 
+> [!CAUTION]
+> **Data leaves your machine by default.** When a cloud vision model is used, Vision Router sends the image (or a derived crop), the vision prompt and related request metadata to that provider. A fresh install has an anonymous OVHcloud vision fallback enabled, so "free" and "no key" do **not** mean offline. Do not use the cloud chain for confidential, regulated or classified material. See [Data flow and strict local-only use](#data-flow-and-strict-local-only-use).
+
 > [!WARNING]
 > 📌 **Announcement (v2.2.1)**
 >
@@ -49,6 +52,7 @@
 
 ## Contents
 
+- [Data flow and strict local-only use](#data-flow-and-strict-local-only-use)
 - [Why this exists](#why-this-exists)
 - [How it compares](#how-it-compares)
 - [Design lineage](#design-lineage)
@@ -62,6 +66,21 @@
 - [Install and lifecycle](#install-and-lifecycle)
 - [Troubleshooting](#troubleshooting)
 
+## Data flow and strict local-only use
+
+Vision Router does not operate fully offline in its default configuration. The exact boundary depends on the operation and the selected models:
+
+| Operation | Where data goes |
+|---|---|
+| Local pixel tools such as crop, pixel diff, palette, SVG trace, cutout, materialize and HTML screenshot | Processed on the DSH machine; these operations do not call a vision model. |
+| `vision_ocr` with Tesseract | Processed on the DSH machine. With the default `auto` engine, an unavailable or empty local OCR result may fall back to a vision model. |
+| Image-turn routing and vision-model tools such as describe, detect, ground or vision OCR | The image or derived crop, prompt and relevant context are sent to the selected vision provider. |
+| Built-in free fallback | Sent anonymously (no API key) to OVHcloud AI Endpoints at `oai.endpoints.kepler.ai.cloud.ovh.net`; the service still receives the request payload and network metadata such as the source IP. |
+| User-configured cloud model / HTTP provider | Sent to that provider's configured endpoint under its own retention and privacy terms. |
+| Local Ollama / LM Studio | Image pixels are sent to the configured local endpoint. The resulting text still returns to the current chat model, which may itself be remote. |
+
+To stop **Vision Router itself** from sending image data to remote vision endpoints, enable **Settings → Vision Router → General → Local-only vision**. This is a runtime policy, not a destructive rewrite: saved cloud rows and `freeFallback` stay configured but cannot execute while the switch is on. Only loopback visual endpoints (`localhost`, `127.0.0.0/8`, `::1`) are eligible, including Ollama, LM Studio, and custom local HTTP backends. For a **strict local-only workflow**, also use a local chat model because vision result text still returns to the current chat model. Test the final network boundary in your own environment; Vision Router cannot make a remote chat model, proxy or Host integration local.
+
 ## Why this exists
 
 Most DSH vision plugins bridge images to DeepSeek as *text descriptions* — lossy, one-shot, and blind to pixels. This plugin keeps the **Host-canonical image pixels on the vision model's side** and DeepSeek on the reasoning side, and makes looking at an image an **ordinary tool call**:
@@ -356,7 +375,8 @@ Everything is optional; defaults work out of the box. Prefer **Settings → Visi
 | `tool` / `progressiveTools` / `autoActivateOnImage` | `true` / `false` / `true` | vision tools on / progressive mounting (off by default for a stable tool schema) / image-turn auto-mount when progressive mode is enabled; `progressiveTools` is boot-time config |
 | `rewriteImages` | `true` | rewrite image blocks in the model input (cached description or tool-hint marker); the UI log keeps images |
 | `desktopScreenshot` | `false` | privacy opt-in for the model-callable `vision_screenshot` desktop-capture tool; checked live before every capture |
-| `freeFallback` | `true` | append the anonymous OVH models after explicit local/custom HTTP backends; turning this off never disables an explicitly configured local backend |
+| `localOnlyVision` | `false` | runtime privacy policy: when enabled, only loopback vision endpoints may execute; cloud/DSH providers and the built-in OVH fallback stay saved but are fail-closed |
+| `freeFallback` | `true` | append the anonymous OVH models after explicit local/custom HTTP backends; ignored while `localOnlyVision` is enabled |
 | `localOllama` | `{ enabled: false, baseURL: 'http://127.0.0.1:11434/v1', model: 'qwen2.5vl', format: 'openai', maxTokens: 4096, reasoningEffort: 'none' }` | local vision backend; OpenAI mode disables supported model reasoning by default so the output budget is spent on answer text |
 | `localLmStudio` | `{ enabled: false, baseURL: 'http://localhost:1234/v1', model: '', format: 'openai', maxTokens: 4096, reasoningEffort: 'none' }` | local LM Studio backend after Ollama; LM Studio 0.4+ can use `format: 'lmstudio'` for documented native reasoning control |
 | `visionTurnBudgetMs` | `0` | whole-turn vision wall-clock budget; `0` means unlimited. Concrete provider calls/tools still keep their own hard deadlines |
@@ -406,11 +426,11 @@ ollama pull qwen2.5vl
 
 **3. What happens**
 
-- When enabled, `local-ollama` heads the HTTP vision chain. For a strict local-only setup, remove cloud vision rows/custom HTTP endpoints and turn off `freeFallback`.
+- When enabled, `local-ollama` heads the HTTP vision chain. To hard-block remote visual egress without deleting saved cloud settings, enable **General → Local-only vision**; only loopback visual endpoints remain executable while the policy is on.
 - The selected loopback Ollama model is prewarmed through Ollama's native API and kept resident for 30 minutes. If it is cold when Ollama is the primary image backend, loading completes before the normal vision-task budget starts; a short `/api/ps` probe keeps a dead service on the fast fallback path. Remote Ollama URLs are never auto-warmed.
 - **LM Studio works the same way** — enable `localLmStudio` with its OpenAI-compatible endpoint (default `http://localhost:1234/v1`) and enter the exact model identifier shown in Developer or `/v1/models`. It sits after `local-ollama` and before custom/cloud HTTP backends.
 - Local backends keep **OpenAI** as the compatibility default and can also use **Anthropic**. LM Studio additionally offers **LM Studio native** mode (`format: 'lmstudio'`, LM Studio 0.4+) at `/api/v1/chat`; use it when you need documented reasoning control (`reasoningEffort: 'none'` maps to `reasoning: off`). `maxTokens` is configurable and defaults to 4096.
-- If a local backend is down or the call times out, its entry is skipped automatically and the chain falls through to the cloud backends — no call breaks.
+- If a local backend is down or the call times out, its entry is skipped automatically. Normally the chain can continue to cloud backends; with **Local-only vision** enabled, remote fallbacks remain blocked and the visual call fails closed instead.
 - `vision_screenshot` is disabled by default. After the separate Desktop screenshot opt-in, `identify=true` uses the same Ollama → LM Studio fallback.
 
 ## Requirements

package/README.zh.md

@@ -38,6 +38,9 @@
 
 <p align="center">💬 <strong>QQ 用户交流群：1105463028</strong></p>
 
+> [!CAUTION]
+> **默认配置会让数据出网。** 使用云端视觉模型时，Vision Router 会将图片（或由它裁剪出的局部）、识图提示词及相关请求元数据发送给对应供应商。新安装默认开启 OVHcloud 匿名视觉兜底，因此“免费”和“免 Key”不等于离线。涉密、涉案、内部或其他受限材料请勿使用云端链路。详见[数据流向与严格纯本地配置](#数据流向与严格纯本地配置)。
+
 > [!WARNING]
 > 📌 **公告（v2.2.1）**
 >
@@ -49,6 +52,7 @@
 
 ## 目录
 
+- [数据流向与严格纯本地配置](#数据流向与严格纯本地配置)
 - [为什么做这个](#为什么做这个)
 - [对比同类插件](#对比同类插件)
 - [设计来源](#设计来源)
@@ -62,6 +66,21 @@
 - [安装与生命周期](#安装与生命周期)
 - [故障排查](#故障排查)
 
+## 数据流向与严格纯本地配置
+
+Vision Router 在默认配置下不是完全离线工具。具体边界取决于操作和当前选择的模型：
+
+| 操作 | 数据去向 |
+|---|---|
+| 裁剪、像素对比、取色、SVG 矢量化、抠图、文件实体化、HTML 截图等本地像素工具 | 在 DSH 所在机器处理，这些操作不调用视觉模型。 |
+| 使用 Tesseract 的 `vision_ocr` | 在 DSH 所在机器处理。默认 `auto` 引擎在本地 OCR 不可用或结果为空时，可能回退到视觉模型。 |
+| 图片轮路由及 describe、detect、ground、视觉 OCR 等模型工具 | 图片或局部裁剪、提示词和相关上下文会发送给当前视觉供应商。 |
+| 内置免费兜底 | 以匿名方式（无 API Key）发往 OVHcloud AI Endpoints `oai.endpoints.kepler.ai.cloud.ovh.net`；服务仍会收到请求内容和源 IP 等网络元数据。 |
+| 用户配置的云模型 / HTTP 供应商 | 发送到对应配置端点，并受该供应商的保留与隐私条款约束。 |
+| 本地 Ollama / LM Studio | 图像像素发送到配置的本地端点；识图结果文本仍会回到当前聊天模型，而聊天模型自身可能仍在云端。 |
+
+若要阻止 **Vision Router 本身**把图片发送给远程视觉端点，请开启 **设置 → Vision Router → 常规 → 仅本地视觉**。这是运行时策略，不会破坏性修改配置：已保存的云端识图行和 `freeFallback` 会保留，但开关开启期间无法执行；只有回环地址（`localhost`、`127.0.0.0/8`、`::1`）上的视觉端点可以运行，包括 Ollama、LM Studio 和自定义本机 HTTP 后端。若要求**整个工作流严格纯本地**，还必须同时使用本地聊天模型，因为识图结果文本仍会交给当前聊天模型。请在自己的环境中验证最终网络边界；Vision Router 无法把远程聊天模型、代理或 Host 集成变成本地服务。
+
 ## 为什么做这个
 
 大多数 DSH 视觉插件把图片“翻译”成一段文字描述再喂给 DeepSeek——有损、一次性、看不见像素。本插件把**Host 规范化后的图像像素留在视觉模型侧**、把推理留在 DeepSeek 侧，并把“看图”变成一次**普通的工具调用**：
@@ -354,7 +373,8 @@ Web profile 现在提供一级 **设置 → Vision Router** 页面。常规页
 | `tool` / `progressiveTools` / `autoActivateOnImage` | `true` / `false` / `true` | 视觉工具总开关 / 渐进式挂载（默认关闭以稳定工具 schema）/ 渐进模式下图片轮自动挂载；`progressiveTools` 为启动期配置 |
 | `rewriteImages` | `true` | 模型输入层改写图片块（缓存描述或工具提示标记）；界面日志保留图片 |
 | `desktopScreenshot` | `false` | 模型可调用的 `vision_screenshot` 桌面截屏隐私开关；每次截屏前实时检查 |
-| `freeFallback` | `true` | 在显式本地/自定义 HTTP 后端之后追加匿名 OVH 模型；关闭它不会停用用户明确配置的本地后端 |
+| `localOnlyVision` | `false` | 运行时隐私策略：开启后只有回环地址上的视觉端点可执行；云端/DSH Provider 与内置 OVH 兜底保留配置但 fail closed |
+| `freeFallback` | `true` | 在显式本地/自定义 HTTP 后端之后追加匿名 OVH 模型；`localOnlyVision` 开启期间不会执行 |
 | `localOllama` | `{ enabled: false, baseURL: 'http://127.0.0.1:11434/v1', model: 'qwen2.5vl', format: 'openai', maxTokens: 4096, reasoningEffort: 'none' }` | 本地视觉后端；OpenAI 模式默认关闭受支持模型的推理，把输出预算留给正文 |
 | `localLmStudio` | `{ enabled: false, baseURL: 'http://localhost:1234/v1', model: '', format: 'openai', maxTokens: 4096, reasoningEffort: 'none' }` | Ollama 之后的本地 LM Studio 后端；LM Studio 0.4+ 可选 `format: 'lmstudio'` 使用官方原生推理控制 |
 | `visionTurnBudgetMs` | `0` | 整轮视觉总墙钟预算；`0` = 不设整轮上限。具体 provider调用/工具仍有自己的硬超时 |
@@ -404,11 +424,11 @@ ollama pull qwen2.5vl
 
 **3. 行为说明**
 
-- 开启后 `local-ollama` 排在 HTTP 视觉链前部。若要严格纯本地，请移除云视觉行/自定义 HTTP 端点，并关闭 `freeFallback`。
+- 开启后 `local-ollama` 排在 HTTP 视觉链前部。若要在不删除已保存云端配置的情况下硬阻止远程视觉出网，请开启 **常规 → 仅本地视觉**；策略开启期间只有回环地址上的视觉端点可执行。
 - 选中的本机 loopback Ollama 模型会通过原生 API 预热并保持 30 分钟驻留。如果模型在 Ollama 作为首个图片后端时已经冷却，加载会在正常视觉任务预算开始之前完成；短 `/api/ps` 探测保证服务未运行/挂死时仍快速进入 fallback。远程 Ollama URL 不会自动预热。
 - **LM Studio 同理**——开启 `localLmStudio`，填 OpenAI 兼容端点（默认 `http://localhost:1234/v1`），并使用 Developer 页或 `/v1/models` 返回的真实模型标识。它排在 `local-ollama` 之后、自定义/云 HTTP 后端之前。
 - 本地后端继续以 **OpenAI** 为兼容默认，也可选 **Anthropic**。LM Studio 额外提供 **LM Studio 原生**模式（`format: 'lmstudio'`，需 LM Studio 0.4+），走 `/api/v1/chat`；需要稳定关闭推理时推荐该模式，因为官方 API 明确支持 `reasoning: off`。`maxTokens` 可配置，默认 4096。
-- 任一本地后端未运行或调用超时时自动跳过，继续降级到云链。
+- 任一本地后端未运行或调用超时时自动跳过。正常模式下可继续降级到云链；开启 **仅本地视觉** 后，所有远程兜底继续保持阻断，视觉调用会 fail closed。
 - `vision_screenshot` 默认关闭。单独开启「桌面截屏」隐私开关后，`identify=true` 使用同样的 Ollama → LM Studio 降级顺序。
 
 ## 环境要求

package/docs/releases/v2.2.4.md

@@ -0,0 +1,22 @@
+# v2.2.4
+
+DSH Vision Router 2.2.4 is a Desktop and Session-recovery hotfix for the DSH 0.1.7 line.
+
+## Highlights
+
+- Fixes the official DSH `0.1.7-rc.2` Desktop startup failure where Vision Router could remain at `Loading plugins…` / `pending (waiting for service: settingsScope)`. The 0.1.7 Settings compatibility prelude now travels through DSH's structured `webserver/index-inject` boot table used by Electron/static carriers, while the served-Web `tapIndex()` path remains as a compatibility fallback and is deduplicated.
+- Adds an exact `0.1.7-rc.2` Desktop Host bootstrap regression on `windows-latest`, so the Electron/Desktop injection carrier is validated directly instead of inferred from `dsh web` browser coverage.
+- Fixes a Session event-feed recovery edge case where one transient activation-time SessionQuery read failure could permanently suppress future backfill attempts. Failed snapshots are now retried, concurrent reads remain coalesced, and a successful snapshot remains one-shot cached.
+- Keeps the public minimum supported DSH Host at `0.1.0-rc.8`; no settings migration is required.
+
+## Validation
+
+- Exact DSH source: `0.1.7-rc.2` at `477b4f420553e8a52c2fbccc464d7561b239c443`.
+- Exact Windows Desktop Host bootstrap passes with one Vision Router structured compatibility injection.
+- Real `dsh web` + Chromium passes bundle recompose, Desktop structured bootstrap, cold Vision toggle, mixed attachment lifecycle, and Settings mount/save/reload/readback.
+- Node 22/24, architecture/data-boundary/adversarial/fuzz, dependency review, and HOL plugin security gates pass.
+- Session regression covers fail → retry → success → cached behavior; the full local suite passed `1488/1489` tests with one intentional skip, plus `8/8` Host image-delivery tests.
+
+## Upgrade
+
+Users on DSH `0.1.7-rc.2` Desktop should upgrade to 2.2.4. This release contains the Desktop boot fix that is not present in 2.2.3. No settings migration is required.

package/docs/releases/v2.2.5.md

@@ -0,0 +1,22 @@
+# v2.2.5
+
+DSH Vision Router 2.2.5 is a privacy and Desktop multi-plugin isolation update for the DSH 0.1.7 line.
+
+## Highlights
+
+- Adds **Local-only vision / 仅本地视觉**. When enabled from the local Settings page, Vision Router permits only loopback visual endpoints (`localhost`, `127.0.0.0/8`, `::1`) and fails closed against configured cloud/DSH vision providers and the built-in anonymous OVHcloud fallback. Saved cloud configuration is preserved, and disabling the policy restores the previous chain. This policy covers Vision Router visual egress only; a remote chat model can still receive the resulting text.
+- Fixes the remaining `dsh-vision-router@2.2.4` Windows Desktop multi-plugin startup hang reported in #551. The local/auth route boundary no longer leaves a replacement `webServer.register` on Cordis's shared WebServer service for the DVR fiber lifetime. DVR now shadows only its own injected child-context WebServer view, so unrelated plugins keep the original registrar while DVR-owned routes retain the same Host-auth/local capability checks.
+- Strengthens the exact DSH `0.1.7-rc.2` Windows Desktop gate: it now exercises launch-token → cookie authentication, authenticated index and `/api` requests, DVR RPC, Node 22/24, and six deterministic Node 24 multi-plugin load orders with a foreign WebServer registrar observer.
+- Keeps the public minimum supported DSH Host at `0.1.0-rc.8`; no settings migration is required.
+
+## Validation
+
+- Exact DSH `0.1.7-rc.2@477b4f420553e8a52c2fbccc464d7561b239c443` Windows Desktop Host passes on Node `22.19.0` and `24.21.0`.
+- The Node 24 multi-plugin adversary passes all six DVR / foreign-RPC / connection-waterfall load orders; the foreign WebServer observer sees no leaked own `register` override.
+- Real Host + Chromium passes bundle recompose, Desktop structured bootstrap, cold Vision toggle, mixed attachment lifecycle, and Settings mount/save/reload/readback.
+- CI, DSH Contract, adversarial compatibility, HOL plugin security, dependency review, and native multimodal cold-resume gates pass on the regression PR.
+- Local release-prep suite: `1498` passed, `1` intentional skip, `0` failed; the separate backend runtime-policy suite passed `9/9`.
+
+## Upgrade
+
+Users on DSH `0.1.7-rc.2` Desktop, especially those who still see `Loading plugins…` with Vision Router 2.2.4 in multi-plugin profiles, should upgrade to 2.2.5. The reporter's original issue remains open until a post-release field retest confirms the fix on the affected machine.

package/index.js

@@ -258,6 +258,12 @@ export const Config = z.object({
   // trusted-host transport fence. Only a loopback/local settings page may
   // change this permission; the remote bridge rejects writes to the field.
   allowRemoteSettings: z.boolean().default(false),
+  // Privacy policy switch: when enabled, Vision Router executes image-model
+  // requests only against loopback visual endpoints (Ollama, LM Studio, or
+  // custom local HTTP). Saved cloud
+  // rows remain intact but inactive, so disabling the policy restores the
+  // previous routing chain without destructive settings rewrites.
+  localOnlyVision: z.boolean().default(false),
   freeFallback: z.boolean().default(true),
   // 云端免费优先：开启后，云端后端先尝试内置 OVH 免费模型（免注册、免
   // API Key），付费 httpProviders 仅在免费模型全部失败后作为兜底，尽量把
@@ -421,6 +427,8 @@ import {
   DEFAULT_HTTP_PROVIDERS,
   httpProviderFallbackWeight,
   weightedFallbackBudget,
+  localOnlyVisionEnabled,
+  isLoopbackVisionBaseURL,
   localOllamaProvidersOf,
   localLmStudioProvidersOf,
   localProvidersOf,
@@ -518,6 +526,8 @@ export {
   DEFAULT_HTTP_PROVIDERS,
   httpProviderFallbackWeight,
   weightedFallbackBudget,
+  localOnlyVisionEnabled,
+  isLoopbackVisionBaseURL,
   localOllamaProvidersOf,
   localLmStudioProvidersOf,
   localProvidersOf,
@@ -2003,6 +2013,13 @@ export function apply(ctx, config = {}, runtime = {}) {
       add(HTTP_ROUTE, `${provider.name}/${provider.model}`)
     }
 
+    // Local-only vision is an execution policy, not a destructive settings
+    // rewrite. Saved native/cloud rows stay visible for later restoration, but
+    // they cannot participate in tool auto-discovery while the policy is on.
+    if (localOnlyVisionEnabled(current())) {
+      return applyVisionExecutionOrder(out, currentVisionExecutionOrder())
+    }
+
     const capabilities = await collectVisionBackendCapabilities()
     for (const [provider, models] of Object.entries(capabilities)) {
       if (provider === HTTP_ROUTE || ownRoutes().has(provider)) continue
@@ -2975,6 +2992,10 @@ export function apply(ctx, config = {}, runtime = {}) {
           )
 
         for (const pair of usablePairs) {
+          if (localOnlyVisionEnabled(current()) && !isLocalBackendPair(pair)) {
+            errors.push(`${pair.provider}/${pair.model}: skipped (local-only vision policy)`)
+            continue
+          }
           const candidateWeight = primaryWeight
           const weightAtStart = Math.max(candidateWeight, remainingWeight)
           remainingWeight = Math.max(0, remainingWeight - candidateWeight)
@@ -3106,6 +3127,10 @@ ctx.logger?.info(
         // final fallbacks: they bypass the harness llm service entirely, so the
         // anonymous free endpoint works without any credential.
         for (const provider of httpFallbacks) {
+          if (localOnlyVisionEnabled(current()) && !isLoopbackVisionBaseURL(provider?.baseURL)) {
+            errors.push(`http:${provider?.name}/${provider?.model}: skipped (local-only vision policy)`)
+            continue
+          }
           const candidateWeight = httpProviderFallbackWeight(provider)
           const weightAtStart = Math.max(candidateWeight, remainingWeight)
           remainingWeight = Math.max(0, remainingWeight - candidateWeight)
@@ -3611,6 +3636,10 @@ ctx.logger?.info(
         errors.push(`${backendKey}: ${message}`)
       }
       for (const pair of usablePairs) {
+        if (localOnlyVisionEnabled(current()) && !isLocalBackendPair(pair)) {
+          errors.push(`${pair.provider}/${pair.model}: skipped (local-only vision policy)`)
+          continue
+        }
         const candidateWeight = primaryWeight
         const weightAtStart = Math.max(candidateWeight, remainingWeight)
         remainingWeight = Math.max(0, remainingWeight - candidateWeight)
@@ -3671,6 +3700,10 @@ ctx.logger?.info(
       }
       const httpContent = toOpenAIContent([block], () => imageBytes)
       for (const provider of httpFallbacks) {
+        if (localOnlyVisionEnabled(current()) && !isLoopbackVisionBaseURL(provider?.baseURL)) {
+          errors.push(`http:${provider?.name}/${provider?.model}: skipped (local-only vision policy)`)
+          continue
+        }
         const candidateWeight = httpProviderFallbackWeight(provider)
         const weightAtStart = Math.max(candidateWeight, remainingWeight)
         remainingWeight = Math.max(0, remainingWeight - candidateWeight)

package/lib/client.js

@@ -215,6 +215,7 @@ window.__ModuleLoader__.load({
       toggleRewriteImages: '保护纯文字模型',
       toggleDownscale: '图片自动压缩',
       toggleCache: '识图答案缓存',
+      toggleLocalOnlyVision: '仅本地视觉',
       toggleFreeFallback: '内置免费兜底',
       toggleFreeCloudFirst: '云端免费优先',
       toggleDesktopScreenshot: '桌面截图识图',
@@ -229,6 +230,7 @@ window.__ModuleLoader__.load({
       hintRewriteImages: '避免把无法读取的原始图片直接发送给纯文字模型。推荐保持开启。',
       hintDownscale: '超过像素预算的图片先缩放再送视觉模型，降低延迟与成本；默认开启。',
       hintCache: '缓存识图答案（按图片内容 + 问题）；默认开启。',
+      hintLocalOnlyVision: '开启后仅允许回环地址上的本地视觉后端；云端/DSH Provider 与 OVH 免费兜底会被运行时硬阻止。主聊天模型是否联网不受此开关控制。',
       hintFreeFallback: '当你选择的识图模型都不可用时，自动尝试内置 OVH 免费模型。免注册、免 API Key。',
       hintFreeCloudFirst:
         '默认关闭。开启后，云端后端先尝试内置 OVH 免费模型（免注册、免 API Key），' +
@@ -501,6 +503,7 @@ window.__ModuleLoader__.load({
       toggleRewriteImages: 'Protect text-only models',
       toggleDownscale: 'Auto downscale',
       toggleCache: 'Vision answer cache',
+      toggleLocalOnlyVision: 'Local-only vision',
       toggleFreeFallback: 'Built-in free fallback',
       toggleFreeCloudFirst: 'Free cloud first',
       toggleDesktopScreenshot: 'Desktop screenshot vision',
@@ -516,6 +519,7 @@ window.__ModuleLoader__.load({
       hintRewriteImages: 'Prevents raw image content from being sent to a text-only model that cannot read it. Recommended on.',
       hintDownscale: 'Images beyond the pixel budget are resized before the vision call, cutting latency and cost; on by default.',
       hintCache: 'Caches vision answers (keyed by image content + question); on by default.',
+      hintLocalOnlyVision: 'When enabled, only visual backends on loopback addresses may run. Cloud/DSH providers and the OVH free fallback are blocked at runtime. This does not control whether the main chat model is remote.',
       hintFreeFallback: 'If your selected vision models fail, automatically try the built-in OVH free models. No signup or API key required.',
       hintFreeCloudFirst:
         'Off by default. When enabled, cloud backends try the built-in OVH free models first (no signup, no API key), ' +
@@ -718,7 +722,7 @@ window.__ModuleLoader__.load({
     const COST_TOGGLE_KEYS = ['freeCloudFirst']
     const DEVELOPER_TOGGLE_KEYS = ['stealth']
     const LOCAL_TOGGLE_KEYS = ['instantDescribe']
-    const PRIVACY_TOGGLE_KEYS = ['desktopScreenshot']
+    const PRIVACY_TOGGLE_KEYS = ['localOnlyVision', 'desktopScreenshot']
     const ADVANCED_TOGGLE_KEYS = [...PERFORMANCE_TOGGLE_KEYS, ...COMPATIBILITY_TOGGLE_KEYS, ...COST_TOGGLE_KEYS, ...DEVELOPER_TOGGLE_KEYS]
     const ALL_TOGGLE_KEYS = [...TOGGLE_KEYS, ...ADVANCED_TOGGLE_KEYS, ...LOCAL_TOGGLE_KEYS, ...PRIVACY_TOGGLE_KEYS]
     const NUMBER_KEYS = ['timeoutMs', 'visionTaskTimeoutMs', 'ocrTimeoutMs', 'downscaleMaxPixels', 'cacheTtlSeconds', 'cacheMaxEntries']
@@ -2405,6 +2409,7 @@ window.__ModuleLoader__.load({
       rewriteImages: 'toggleRewriteImages',
       downscale: 'toggleDownscale',
       cache: 'toggleCache',
+      localOnlyVision: 'toggleLocalOnlyVision',
       freeFallback: 'toggleFreeFallback',
       freeCloudFirst: 'toggleFreeCloudFirst',
       desktopScreenshot: 'toggleDesktopScreenshot',
@@ -2434,6 +2439,7 @@ window.__ModuleLoader__.load({
       rewriteImages: 'hintRewriteImages',
       downscale: 'hintDownscale',
       cache: 'hintCache',
+      localOnlyVision: 'hintLocalOnlyVision',
       freeFallback: 'hintFreeFallback',
       freeCloudFirst: 'hintFreeCloudFirst',
       desktopScreenshot: 'hintDesktopScreenshot',

package/lib/core-primitives.js

@@ -205,8 +205,35 @@ export function eventHasImage(event) {
   return false
 }
 
+export function localOnlyVisionEnabled(config = {}) {
+  return !!config && config.localOnlyVision === true
+}
+
+export function isLoopbackVisionBaseURL(value) {
+  try {
+    const url = new URL(String(value ?? ''))
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') return false
+    const host = String(url.hostname ?? '').toLowerCase().replace(/^\[|\]$/g, '')
+    if (host === 'localhost' || host === '::1') return true
+    const parts = host.split('.')
+    return parts.length === 4 && parts[0] === '127' && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255)
+  } catch {
+    return false
+  }
+}
+
 /** Flatten the single-provider shorthand and the multi-provider form into one ordered chain. */
 export function providersOf(config = {}) {
+  const localOnly = localOnlyVisionEnabled(config)
+  const localHttpModels = localOnly
+    ? new Set([
+        ...localProvidersOf(config),
+        ...httpProvidersOf(config, false),
+      ].map((provider) => `${provider.name}/${provider.model}`))
+    : undefined
+  const allowed = (pair) =>
+    !localOnly ||
+    (pair && pair.provider === 'vision-http' && localHttpModels.has(pair.model))
   const list = []
   if (Array.isArray(config.providers)) {
     for (const entry of config.providers) {
@@ -219,7 +246,7 @@ export function providersOf(config = {}) {
       }
     }
   }
-  if (list.length > 0) return list
+  if (list.length > 0) return list.filter(allowed)
   const provider =
     typeof config.provider === 'string' && config.provider !== '' ? config.provider : 'vision-http'
   const models = []
@@ -228,7 +255,7 @@ export function providersOf(config = {}) {
     if (typeof fallback === 'string' && fallback !== '') models.push(fallback)
   }
   if (models.length === 0) models.push('ovh/Qwen3.5-397B-A17B')
-  return models.map((model) => ({ provider, model }))
+  return models.map((model) => ({ provider, model })).filter(allowed)
 }
 
 const FAILURE_ADVICE = {
@@ -1852,6 +1879,7 @@ export function localOllamaProvidersOf(config) {
     typeof local.baseURL === 'string' && local.baseURL !== '' ? local.baseURL : 'http://127.0.0.1:11434/v1'
   const model =
     typeof local.model === 'string' && local.model !== '' ? local.model : 'qwen2.5vl'
+  if (localOnlyVisionEnabled(config) && !isLoopbackVisionBaseURL(baseURL)) return []
   return [
     {
       name: 'local-ollama',
@@ -1888,6 +1916,7 @@ export function localLmStudioProvidersOf(config) {
   // 不注册一个注定 model_not_found 的后端；设置页会阻止启用后留空保存。
   const model = typeof local.model === 'string' ? local.model.trim() : ''
   if (model === '') return []
+  if (localOnlyVisionEnabled(config) && !isLoopbackVisionBaseURL(baseURL)) return []
   return [
     {
       name: 'local-lmstudio',
@@ -2100,6 +2129,9 @@ export function httpProvidersOf(config, allowDefault = true) {
         (p) => p && typeof p.baseURL === 'string' && typeof p.model === 'string',
       )
     : []
+  if (localOnlyVisionEnabled(config)) {
+    return configured.filter((provider) => isLoopbackVisionBaseURL(provider.baseURL))
+  }
   if (!allowDefault) return configured
   if (configured.length === 0) return DEFAULT_HTTP_PROVIDERS
   const seen = new Set(configured.map((p) => `${p.name}/${p.model}`))
@@ -2126,6 +2158,7 @@ export function httpProvidersOf(config, allowDefault = true) {
  */
 export function orderedHttpProviders(config = {}, freeFirst = false) {
   const providers = httpProvidersOf(config, config.freeFallback !== false)
+  if (localOnlyVisionEnabled(config)) return providers
   if (!freeFirst) return providers
   const identity = (p) =>
     `${String(p.baseURL ?? '').replace(/\/$/, '')}\u0000${p.model}\u0000${p.apiKeyEnv ?? ''}`

package/lib/remote-settings-bridge.js

@@ -41,6 +41,7 @@ export const REMOTE_SETTINGS_READABLE_FIELDS = Object.freeze([
   'visionTurnBudgetMs',
   'ocrTimeoutMs',
   'ocrEngine',
+  'localOnlyVision',
   'freeFallback',
   'freeCloudFirst',
   'autoWrapProviders',
@@ -48,7 +49,12 @@ export const REMOTE_SETTINGS_READABLE_FIELDS = Object.freeze([
   'onboardingSeen',
 ])
 
-export const REMOTE_SETTINGS_MUTABLE_FIELDS = REMOTE_SETTINGS_READABLE_FIELDS
+// Privacy-critical local-only policy is visible remotely for truthful status,
+// but only a loopback/local Settings page may disable it. This prevents an
+// already-authorized remote Settings session from re-enabling visual egress.
+export const REMOTE_SETTINGS_MUTABLE_FIELDS = Object.freeze(
+  REMOTE_SETTINGS_READABLE_FIELDS.filter((field) => field !== 'localOnlyVision'),
+)
 
 const readable = new Set(REMOTE_SETTINGS_READABLE_FIELDS)
 const mutable = new Set(REMOTE_SETTINGS_MUTABLE_FIELDS)

package/lib/replay-delegation.js

@@ -94,6 +94,7 @@ function effectiveVisionConfig(ctx, fallbackConfig) {
 export function configuredVisionAdapterModels(config = {}) {
   config = normalizeRuntimeVisionConfig(config)
   const allowed = new Map()
+  if (config.localOnlyVision === true) return allowed
   const add = (provider, model) => {
     if (!isNonEmptyString(provider) || provider === VISION_HTTP_ROUTE || !isNonEmptyString(model)) return
     let models = allowed.get(provider)

package/lib/runtime-composition.js

@@ -103,9 +103,9 @@ export function applyVisionRuntimeComposition(ctx, config = {}, core) {
 
   // DSH's browser WebServer can intentionally bind 0.0.0.0 and carries no
   // authentication layer of its own. Same-origin headers are only a CSRF
-  // signal, so install a transport-level loopback fence before ANY plugin-owned
-  // route is registered. The wrapper patches only webServer.register and hands
-  // every injection callback the original child context identity unchanged.
+  // signal, so install the route boundary before DVR-owned routes register. The
+  // wrapper keeps the original injected child context identity, but shadows its
+  // webServer view privately so unrelated plugins never observe DVR's registrar.
   const localMutationCtx = installLocalMutationRouteBoundary(ctx)
 
   // Normalize DSH 0.1.1's prepareCall contract at the deepest private LLM

package/lib/session-vision-index.js

@@ -366,17 +366,17 @@ export function createSessionVisionIndex({
         result = await readSessionLog(session)
       } catch (error) {
         warnRepairReadFailure(session, surfaceNodes(session)?.[0] ?? 0, error)
-        return
+        return false
       }
       if (result?.supported === true) {
         if (!Array.isArray(result.events)) {
           warnRepairReadFailure(session, surfaceNodes(session)?.[0] ?? 0, new Error('Session log reader returned no event log'))
-          return
+          return false
         }
         events = result.events
       } else if (result?.supported !== false) {
         warnRepairReadFailure(session, surfaceNodes(session)?.[0] ?? 0, new Error('Session log reader returned an invalid capability result'))
-        return
+        return false
       }
     }
 
@@ -385,15 +385,16 @@ export function createSessionVisionIndex({
     // snapshot, then return to the O(new events) feed path. Older partial Hosts
     // without SessionQuery retain the Session-local compatibility snapshot.
     if (events === undefined) events = legacySessionEvents(session)
-    if (!Array.isArray(events)) return
+    if (!Array.isArray(events)) return true
 
     const nodes = surfaceNodes(session)
-    if (!nodes || nodes.length === 0) return
+    if (!nodes || nodes.length === 0) return true
     for (const seq of nodes) {
       const event = events[seq]
       if (!event || typeof event !== 'object' || (event.seq !== undefined && event.seq !== seq)) continue
       recordSessionEvent(session, event)
     }
+    return true
   }
 
   const ensureSurfaceEventFeedBackfill = async (session) => {
@@ -403,7 +404,15 @@ export function createSessionVisionIndex({
       task = backfillSurfaceEventFeed(session)
       surfaceFeedBackfills.set(session, task)
     }
-    await task
+    try {
+      const complete = await task
+      if (complete === false && surfaceFeedBackfills.get(session) === task) {
+        surfaceFeedBackfills.delete(session)
+      }
+    } catch (error) {
+      if (surfaceFeedBackfills.get(session) === task) surfaceFeedBackfills.delete(session)
+      throw error
+    }
   }
 
   const consumePendingRepairEvents = (pendingBySession, session) => {

package/lib/settings-client-017-compat.js

@@ -2,6 +2,7 @@ import { htmlHasScriptMarker } from './html-script-marker.js'
 import { LOCAL_SETTINGS_PATH } from './dsh-settings-017-compat.js'
 
 const SETTINGS_017_MARK = 'data-vision-router-settings-017-compat'
+const SETTINGS_017_STRUCTURED_MARK = `/* ${SETTINGS_017_MARK}:structured */`
 
 export const SETTINGS_017_CLIENT_PRELUDE = String.raw`(function(){
   'use strict';
@@ -311,7 +312,9 @@ export const SETTINGS_017_CLIENT_PRELUDE = String.raw`(function(){
 })();`
 
 export function injectSettings017ClientPrelude(html) {
-  if (typeof html !== 'string' || htmlHasScriptMarker(html, SETTINGS_017_MARK)) return html
+  if (typeof html !== 'string'
+    || htmlHasScriptMarker(html, SETTINGS_017_MARK)
+    || html.includes(SETTINGS_017_STRUCTURED_MARK)) return html
   const safe = SETTINGS_017_CLIENT_PRELUDE.replace(/<\/script/gi, '<\\/script')
   const script = `<script ${SETTINGS_017_MARK}>${safe}</script>`
   const closeHead = html.indexOf('</head>')
@@ -321,8 +324,27 @@ export function injectSettings017ClientPrelude(html) {
 export function installSettings017ClientCompatibility(ctx) {
   if (!ctx || typeof ctx.inject !== 'function') return
   // ConfigEditor is the generation fence: old supported Hosts keep their native
-  // settingsScope activation contract and never see this client shim.
+  // settingsScope activation contract and never see this client shim. DSH 0.1.7
+  // Desktop serves dsh-app:// from static assets and receives Host bootstrap
+  // state only through the structured index-injection table; raw tapIndex()
+  // transforms are HTTP-only and would leave the Desktop client parked on the
+  // retired settingsScope dependency.
   ctx.inject(['configEditor', 'webServer'], (webCtx) => {
+    if (typeof webCtx.on === 'function') {
+      webCtx.on('webserver/index-inject', (table) => {
+        if (!Array.isArray(table)) return
+        table.push({
+          kind: 'script',
+          placement: 'head',
+          text: `${SETTINGS_017_STRUCTURED_MARK}\n${SETTINGS_017_CLIENT_PRELUDE}`,
+        })
+      })
+    }
+
+    // Keep the served-HTML carrier too. On 0.1.7 the structured row renders
+    // first and the marker makes this a no-op; on a transitional Host that
+    // has ConfigEditor but never emits index-inject, tapIndex remains the
+    // compatibility fallback instead of silently losing the prelude.
     webCtx.effect(
       () => webCtx.webServer.tapIndex(injectSettings017ClientPrelude),
       'vision-router: DSH 0.1.7 settings client compatibility',

package/lib/settings-ia-client-prelude.js

@@ -137,7 +137,7 @@ export const SETTINGS_IA_CLIENT_PRELUDE = String.raw`(function(){
       function userHas(key){return hasOwn(user,key);}
 
       var numberMeta={timeoutMs:[1000,600000],visionTaskTimeoutMs:[1000,180000],ocrTimeoutMs:[1000,120000],downscaleMaxPixels:[1000,100000000],cacheTtlSeconds:[0,31536000],cacheMaxEntries:[1,100000],visionDepthMaxCalls:[0,100],visionTurnBudgetMs:[0,600000]};
-      var boolKeys=new Set(['freeFallback','tool','structuredVisionBootstrap','desktopScreenshot','downscale','cache','freeCloudFirst','autoWrapProviders','allowRemoteSettings','rewriteImages','routing','reverseRouting','progressiveTools','stealth']);
+      var boolKeys=new Set(['localOnlyVision','freeFallback','tool','structuredVisionBootstrap','desktopScreenshot','downscale','cache','freeCloudFirst','autoWrapProviders','allowRemoteSettings','rewriteImages','routing','reverseRouting','progressiveTools','stealth']);
       function numberRun(key,raw){if(raw===''||raw===null||raw===undefined)return undefined;var n=Number(raw),meta=numberMeta[key];if(!meta||!Number.isFinite(n)||!Number.isInteger(n)||n<meta[0]||n>meta[1])return undefined;if(key==='visionTurnBudgetMs'&&n!==0&&n<10000)return undefined;return {value:n};}
       function draftRun(key,raw){
         if(boolKeys.has(key)){var next=bool(raw);return {value:key==='allowRemoteSettings'&&snapshot.mode==='host'?(next?'true':'false'):next};}
@@ -180,7 +180,7 @@ export const SETTINGS_IA_CLIENT_PRELUDE = String.raw`(function(){
       function modelOptions(provider,current,allowAll){var group=groupById.get(provider),models=arr(group&&group.models),listed=new Set(models.map(function(model){return model&&model.id;}).filter(Boolean)),nodes=[h('option',{value:'',key:'__empty'},allowAll?tx('全部模型','All models'):(provider?tx('选择模型…','Choose model…'):tx('先选供应商','Choose provider first')))];if(current&&!listed.has(current))nodes.push(h('option',{value:current,key:'__stale-'+current},current+' '+tx('（已保存）','(saved)')));models.forEach(function(model){if(model&&typeof model.id==='string'&&model.id)nodes.push(h('option',{value:model.id,key:model.id},modelName(group,model.id)));});return nodes;}
       function modelRow(row,index,rows,setRows,allowAll){var ready=groups.length>0;function update(next){var copy=rows.map(function(item){return Object.assign({},item);});copy[index]=next;setRows(copy);setSaveState({status:'idle'});}function providerChanged(provider){var next=Object.assign({},row,{provider:provider,model:''});if(!allowAll)next.fallbacks=[];update(next);}function remove(){var copy=rows.filter(function(_,i){return i!==index;});setRows(copy.length?copy:[{provider:'',model:'',fallbacks:[]}]);setSaveState({status:'idle'});}return h('div',{className:'vr-chain-row',key:index},ready?h('select',{className:'vr-input vr-select',value:row.provider||'',disabled:!writable||saving,onChange:function(event){providerChanged(event.target.value);}},providerOptions(row.provider||'')):h('input',{className:'vr-input',placeholder:'provider',value:row.provider||'',disabled:!writable||saving,onChange:function(event){providerChanged(event.target.value);}}),ready?h('select',{className:'vr-input vr-select',value:row.model||'',disabled:!writable||saving||!row.provider,onChange:function(event){update(Object.assign({},row,{model:event.target.value}));}},modelOptions(row.provider||'',row.model||'',allowAll)):h('input',{className:'vr-input',placeholder:allowAll?tx('model（留空=全部）','model (empty = all)'):'model',value:row.model||'',disabled:!writable||saving,onChange:function(event){update(Object.assign({},row,{model:event.target.value}));}}),h('button',{type:'button',className:'vr-reset',disabled:!writable||saving,onClick:remove},tx('移除','Remove')));}
 
-      function generalPage(){var rows=chainRows(),configured=rows.filter(function(row){return row&&row.provider&&row.model;}),fallback=toggleValue('freeFallback',true),status=configured.length?tx('识图已就绪','Vision ready'):fallback?tx('已可使用内置免费识图','Built-in free vision is ready'):tx('暂无可用识图模型','No vision model configured'),ordered=configured.map(function(row){return row.model;});if(fallback)ordered.push(tx('内置免费兜底','Built-in free fallback'));var stale=catalog.status==='ready'?configured.filter(function(row){var group=groupById.get(row.provider);return !group||!arr(group.models).some(function(model){return model&&model.id===row.model;});}):[];return h(React.Fragment,null,title(tx('常规','General'),tx('这里只设置“谁负责看图”。聊天模型仍在聊天页选择。','This page only decides who reads images; the chat model is still chosen in chat.')),card([h('div',{className:'vr-ia-status',key:'status'},h('strong',null,(configured.length||fallback?'● ':'⚠ ')+status),h('p',{className:'vr-hint'},tx('需要看图时，在聊天框旁点击「👁 识图」。','Use “👁 Vision” beside the chat box when an image needs inspection.')),ordered.length?h('p',{className:'vr-ia-chain-summary'},ordered.join(' → ')):null,stale.length?h('p',{className:'vr-failed'},tx('有已保存的识图模型当前不在可调用目录中；请到“诊断”重新检测。','A saved vision model is not currently in the callable catalog; re-detect it in Diagnostics.')):null)]),card([h('div',{className:'vr-field',id:'vr-vision-backend-chain','data-vr-guide-target':'vision-backend',key:'chain'},fieldHead('providers',tx('识图模型','Vision models')),h('p',{className:'vr-hint'},tx('从上到下依次尝试；前一个失败时自动切换到下一个。','Models are tried from top to bottom and fall through automatically on failure.')),rows.map(function(row,index){return modelRow(row,index,rows,setChainDraft,false);}),h('button',{type:'button',className:'vr-btn',disabled:!writable||saving,onClick:function(){setChainDraft(rows.concat([{provider:'',model:'',fallbacks:[]}]))}},tx('+ 添加备用识图模型','+ Add fallback vision model'))),toggle('freeFallback',tx('内置免费兜底','Built-in free fallback'),tx('前面的模型都失败后自动尝试，无需 API Key。','Tried after your models fail; no API key required.'))]));}
+      function generalPage(){var rows=chainRows(),configured=rows.filter(function(row){return row&&row.provider&&row.model;}),localOnly=toggleValue('localOnlyVision',false),fallback=!localOnly&&toggleValue('freeFallback',true),status=localOnly?tx('仅本地视觉策略已启用','Local-only vision policy enabled'):configured.length?tx('识图已就绪','Vision ready'):fallback?tx('已可使用内置免费识图','Built-in free vision is ready'):tx('暂无可用识图模型','No vision model configured'),ordered=configured.map(function(row){return row.model;});if(fallback)ordered.push(tx('内置免费兜底','Built-in free fallback'));var stale=catalog.status==='ready'?configured.filter(function(row){var group=groupById.get(row.provider);return !group||!arr(group.models).some(function(model){return model&&model.id===row.model;});}):[];return h(React.Fragment,null,title(tx('常规','General'),tx('这里只设置“谁负责看图”。聊天模型仍在聊天页选择。','This page only decides who reads images; the chat model is still chosen in chat.')),card([toggle('localOnlyVision',tx('仅本地视觉','Local-only vision'),tx('开启后，Vision Router 只允许回环地址上的本地视觉后端（Ollama、LM Studio 或本机自定义 HTTP）；所有云端/DSH Provider 和 OVH 免费兜底都会在运行时被硬阻止。已保存的云端配置不会删除，关闭后可恢复。主聊天模型是否联网不受此开关控制。此隐私开关只能在运行 DSH 的本机页面修改。','When enabled, Vision Router only allows visual backends on loopback addresses (Ollama, LM Studio, or custom local HTTP). Cloud/DSH providers and the OVH free fallback are blocked at runtime. Saved cloud settings are preserved for later restoration. This does not control whether the main chat model is remote. This privacy control can only be changed from the local DSH settings page.'),!local),h('div',{className:'vr-ia-status',key:'status'},h('strong',null,(localOnly?'🔒 ':configured.length||fallback?'● ':'⚠ ')+status),h('p',{className:'vr-hint'},tx('需要看图时，在聊天框旁点击「👁 识图」。','Use “👁 Vision” beside the chat box when an image needs inspection.')),h('p',{className:localOnly?'vr-hint':'vr-failed',key:'egress'},localOnly?tx('当前仅本地视觉策略正在生效：云端识图行和 OVH 免费兜底会保留配置但不会执行；只有回环地址上的本地视觉端点可接收图片。注意：当前聊天模型仍可能是云端模型。','Local-only vision is active: cloud vision rows and the OVH fallback remain saved but cannot execute; only visual endpoints on loopback addresses may receive images. The current chat model may still be remote.'):tx('数据流向：使用云端识图模型（包括默认 OVHcloud 匿名兜底）时，图片/裁剪、提示词和相关上下文会离开本机；免费或免 Key 不等于离线。若要阻止 Vision Router 将图片发送到远程视觉端点，请开启上方“仅本地视觉”。','Data flow: cloud vision models, including the default anonymous OVHcloud fallback, receive images/crops, prompts and related context; free or keyless does not mean offline. Enable Local-only vision above to prevent Vision Router from sending image data to remote visual endpoints.')),ordered.length?h('p',{className:'vr-ia-chain-summary'},ordered.join(' → ')):null,stale.length?h('p',{className:'vr-failed'},tx('有已保存的识图模型当前不在可调用目录中；请到“诊断”重新检测。','A saved vision model is not currently in the callable catalog; re-detect it in Diagnostics.')):null)]),card([h('div',{className:'vr-field',id:'vr-vision-backend-chain','data-vr-guide-target':'vision-backend',key:'chain'},fieldHead('providers',tx('识图模型','Vision models')),h('p',{className:'vr-hint'},tx('从上到下依次尝试；前一个失败时自动切换到下一个。','Models are tried from top to bottom and fall through automatically on failure.')),rows.map(function(row,index){return modelRow(row,index,rows,setChainDraft,false);}),h('button',{type:'button',className:'vr-btn',disabled:!writable||saving,onClick:function(){setChainDraft(rows.concat([{provider:'',model:'',fallbacks:[]}]))}},tx('+ 添加备用识图模型','+ Add fallback vision model'))),toggle('freeFallback',tx('内置免费兜底','Built-in free fallback'),localOnly?tx('仅本地视觉开启时，OVH 免费兜底由运行时强制禁用；这里保留原设置，关闭仅本地视觉后可恢复。','The OVH fallback is runtime-blocked while Local-only vision is enabled. Its saved value is preserved and becomes active again when Local-only vision is turned off.'):tx('这是远程 OVHcloud 服务；前面的模型都失败后会上传图片并自动尝试，无需 API Key。','This is a remote OVHcloud service. After earlier models fail, it uploads the image and tries automatically; no API key is required.'),localOnly)]));}
       function strategyPage(){
         var structured=toggleValue('structuredVisionBootstrap',false);
         var rawDepth=String(value('visionDepth','standard')||'standard');
@@ -255,7 +255,7 @@ export const SETTINGS_IA_CLIENT_PRELUDE = String.raw`(function(){
         );
       }
       function localProviderCard(key,label,defaults,which){var current=Object.assign({},defaults,obj(value(key,{}))),opened=which==='ollama'?open.ollama:open.lmstudio;function update(patch){setValue(key,Object.assign({},current,patch));}function sample(name,min,max){return h('div',{className:'vr-field'},h('span',{className:'vr-label'},name),h('input',{className:'vr-input',type:'number',step:'0.1',min:min,max:max,value:current[name]===undefined?'':current[name],disabled:!writable||saving,onChange:function(event){var patch={};patch[name]=event.target.value===''?undefined:Number(event.target.value);update(patch);}}));}return card([h('div',{className:'vr-ia-backend-head',key:'head'},h('div',null,h('div',{className:'vr-ia-field-head'},h('strong',null,label),override(key)),h('p',{className:'vr-hint'},current.enabled?tx('已启用','Enabled'):tx('未启用','Disabled'))),h('input',{type:'checkbox',checked:current.enabled===true,disabled:!writable||saving,onChange:function(event){update({enabled:event.target.checked});}})),h('div',{className:'vr-field',key:'model'},h('span',{className:'vr-label'},tx('模型','Model')),h('input',{className:'vr-input',value:String(current.model||''),disabled:!writable||saving,onChange:function(event){update({model:event.target.value});}}),key==='localLmStudio'&&invalidKeys.includes(key)?h('p',{className:'vr-failed'},tx('启用 LM Studio 时必须填写真实模型标识。','A real model id is required when LM Studio is enabled.')):null),h('div',{className:'vr-field',key:'url'},h('span',{className:'vr-label'},tx('服务地址','Service URL')),h('input',{className:'vr-input',value:String(current.baseURL||''),disabled:!writable||saving,onChange:function(event){update({baseURL:event.target.value});}})),h('button',{type:'button',className:'vr-btn',onClick:function(){setOpen(Object.assign({},open,which==='ollama'?{ollama:!opened}:{lmstudio:!opened}));}},opened?tx('收起高级连接设置','Hide advanced connection settings'):tx('高级连接设置','Advanced connection settings')),opened?h('div',{className:'vr-ia-subgrid',key:'advanced'},h('div',{className:'vr-field'},h('span',{className:'vr-label'},tx('请求协议','Request protocol')),h('select',{className:'vr-input',value:current.format==='anthropic'?'anthropic':current.format==='lmstudio'?'lmstudio':'openai',disabled:!writable||saving,onChange:function(event){update({format:event.target.value});}},h('option',{value:'openai'},'OpenAI'),h('option',{value:'anthropic'},'Anthropic'),which==='lmstudio'?h('option',{value:'lmstudio'},tx('LM Studio 原生','LM Studio native')):null)),h('div',{className:'vr-field'},h('span',{className:'vr-label'},tx('最大输出 token','Max output tokens')),h('input',{className:'vr-input',type:'number',step:'256',min:'256',max:'32768',value:String(current.maxTokens||4096),disabled:!writable||saving,onChange:function(event){update({maxTokens:Number(event.target.value)});}})),h('div',{className:'vr-field'},h('span',{className:'vr-label'},tx('推理强度','Reasoning effort')),h('select',{className:'vr-input',value:String(current.reasoningEffort||defaults.reasoningEffort||'provider_default'),disabled:!writable||saving||(which==='lmstudio'?current.format!=='lmstudio':current.format==='anthropic'),onChange:function(event){update({reasoningEffort:event.target.value});}},h('option',{value:'provider_default'},tx('服务端默认','Provider default')),h('option',{value:'none'},tx('关闭推理','Disable reasoning')),h('option',{value:'low'},'low'),h('option',{value:'medium'},'medium'),h('option',{value:'high'},'high'),h('option',{value:'max'},'max'))),sample('temperature',0,2),sample('top_p',0,1)):null]);}
-      function localPageContent(){if(!local)return h(React.Fragment,null,title(tx('本地与设备','Local & device')),card([h('p',{className:'vr-hint',key:'remote'},tx('本地视觉后端和桌面截图只能在运行 DSH 的机器上配置。','Local vision backends and desktop capture can only be configured on the DSH machine.'))]));return h(React.Fragment,null,title(tx('本地与设备','Local & device'),tx('本地运行视觉模型可减少 API 费用和图片上传。','Run vision locally to reduce API cost and image uploads.')),localProviderCard('localOllama','Ollama',{enabled:false,baseURL:'http://127.0.0.1:11434/v1',model:'qwen2.5vl',format:'openai',maxTokens:4096,reasoningEffort:'none'},'ollama'),localProviderCard('localLmStudio','LM Studio',{enabled:false,baseURL:'http://localhost:1234/v1',model:'',format:'openai',maxTokens:4096,reasoningEffort:'none'},'lmstudio'),card([toggle('desktopScreenshot',tx('允许 Agent 读取桌面截图','Allow the agent to capture the desktop'),tx('这是独立的隐私权限；macOS 上保存为开启后会立即触发屏幕录制权限检查。','This is a separate privacy permission; on macOS saving it enabled immediately triggers the screen-recording permission check.'))]));}
+      function localPageContent(){if(!local)return h(React.Fragment,null,title(tx('本地与设备','Local & device')),card([h('p',{className:'vr-hint',key:'remote'},tx('本地视觉后端和桌面截图只能在运行 DSH 的机器上配置。','Local vision backends and desktop capture can only be configured on the DSH machine.'))]));return h(React.Fragment,null,title(tx('本地与设备','Local & device'),tx('本地视觉可让图像像素留在本机；但若云端识图行或免费兜底仍开启，失败时仍可能出网，识图结果也会交给当前聊天模型。','Local vision can keep image pixels on this machine. Cloud vision rows or the free fallback may still send them off-device after a failure, and vision result text is still passed to the current chat model.')),localProviderCard('localOllama','Ollama',{enabled:false,baseURL:'http://127.0.0.1:11434/v1',model:'qwen2.5vl',format:'openai',maxTokens:4096,reasoningEffort:'none'},'ollama'),localProviderCard('localLmStudio','LM Studio',{enabled:false,baseURL:'http://localhost:1234/v1',model:'',format:'openai',maxTokens:4096,reasoningEffort:'none'},'lmstudio'),card([toggle('desktopScreenshot',tx('允许 Agent 读取桌面截图','Allow the agent to capture the desktop'),tx('这是独立的隐私权限；macOS 上保存为开启后会立即触发屏幕录制权限检查。','This is a separate privacy permission; on macOS saving it enabled immediately triggers the screen-recording permission check.'))]));}
       function wrappersEditor(){var rows=wrapperRows();return h('div',{className:'vr-field'},fieldHead('wrappedProviders',tx('哪些聊天模型可以开启识图','Which chat models can use Vision mode')),h('p',{className:'vr-hint'},tx('通常无需修改；模型留空表示整个 Provider。','Usually leave this alone; an empty model means the whole provider.')),rows.map(function(row,index){return modelRow(row,index,rows,setWrapperDraft,true);}),h('button',{type:'button',className:'vr-btn',disabled:!writable||saving,onClick:function(){setWrapperDraft(rows.concat([{provider:'',model:''}]))}},tx('+ 添加范围','+ Add scope')));}
       function textProviderEditor(){var current=Object.assign({provider:'',model:''},obj(value('textProvider',{}))),ready=groups.length>0;return h('div',{className:'vr-field'},fieldHead('textProvider',tx('文字回退模型','Text fallback model')),h('div',{className:'vr-chain-row'},ready?h('select',{className:'vr-input',value:current.provider||'',disabled:!writable||saving,onChange:function(event){setValue('textProvider',{provider:event.target.value,model:''});}},providerOptions(current.provider||'')):h('input',{className:'vr-input',value:current.provider||'',disabled:!writable||saving,onChange:function(event){setValue('textProvider',{provider:event.target.value,model:current.model||''});}}),ready?h('select',{className:'vr-input',value:current.model||'',disabled:!writable||saving||!current.provider,onChange:function(event){setValue('textProvider',{provider:current.provider||'',model:event.target.value});}},modelOptions(current.provider||'',current.model||'',false)):h('input',{className:'vr-input',value:current.model||'',disabled:!writable||saving,onChange:function(event){setValue('textProvider',{provider:current.provider||'',model:event.target.value});}})),invalidKeys.includes('textProvider')?h('p',{className:'vr-failed'},tx('Provider 和 model 必须同时填写，或同时留空恢复默认。','Provider and model must both be filled, or both left empty to restore the default.')):null);}
       function advancedPage(){var routing=toggleValue('routing',false),turnBudget=Number(value('visionTurnBudgetMs',0))||0,customBudget=turnBudget>0;return h(React.Fragment,null,title(tx('高级','Advanced'),tx('这些默认值对大多数用户已经合适。','Defaults are suitable for most users.')),card([h('h4',{className:'vr-ia-subtitle',key:'p'},tx('性能与稳定性','Performance & stability')),toggle('downscale',tx('自动缩放','Auto downscale')),numberField('downscaleMaxPixels',tx('图片像素上限','Image pixel limit'),null,1000,100000000),toggle('cache',tx('识图缓存','Vision answer cache')),numberField('cacheTtlSeconds',tx('缓存有效期（秒）','Cache TTL (seconds)'),null,0,31536000),numberField('cacheMaxEntries',tx('最大缓存数量','Maximum cached answers'),null,1,100000),h('h4',{className:'vr-ia-subtitle',key:'t'},tx('超时','Timeouts')),numberField('timeoutMs',tx('单次模型请求','Single model request'),tx('毫秒。','Milliseconds.'),1000,600000),numberField('visionTaskTimeoutMs',tx('单个视觉任务','Single visual task'),tx('包含该任务内部的重试和备用模型；不是每个后端各自一份。','Includes retries and fallbacks inside the task; it is not a fresh budget per backend.'),1000,180000),numberField('ocrTimeoutMs',tx('OCR 任务','OCR task'),null,1000,120000),h('div',{className:'vr-field',key:'ocr-engine'},fieldHead('ocrEngine',tx('OCR 默认引擎','Default OCR engine')),h('select',{className:'vr-input',value:String(value('ocrEngine','auto')||'auto'),disabled:!writable||saving,onChange:function(event){setValue('ocrEngine',event.target.value);}},h('option',{value:'auto'},tx('自动（Tesseract → 视觉模型）','Auto (Tesseract → vision)')),h('option',{value:'tesseract'},tx('仅 Tesseract','Tesseract only')),h('option',{value:'vision'},tx('仅视觉模型','Vision model only'))),h('p',{className:'vr-hint'},tx('vision_ocr 未显式指定 engine 时使用；单次调用的 engine=tesseract/vision 始终优先。','Used when vision_ocr does not explicitly choose an engine; per-call engine=tesseract/vision always wins.'))),h('div',{className:'vr-field',key:'budget'},fieldHead('visionTurnBudgetMs',tx('整轮视觉工具上限','Whole-turn vision-tool limit')),h('select',{className:'vr-input',value:customBudget?'custom':'unlimited',disabled:!writable||saving,onChange:function(event){setValue('visionTurnBudgetMs',event.target.value==='unlimited'?0:(turnBudget>0?turnBudget:180000));}},h('option',{value:'unlimited'},tx('不限制（推荐）','Unlimited (recommended)')),h('option',{value:'custom'},tx('自定义','Custom'))),customBudget?numberField('visionTurnBudgetMs',tx('上限（毫秒）','Limit (ms)'),null,10000,600000):null)]),card([h('h4',{className:'vr-ia-subtitle',key:'cost'},tx('模型顺序与成本','Model order & cost')),toggle('freeCloudFirst',tx('免费云模型优先','Try free cloud models first'))]),card([h('h4',{className:'vr-ia-subtitle',key:'scope'},tx('识图模式范围','Vision mode scope')),toggle('autoWrapProviders',tx('自动允许已启用模型使用识图','Automatically allow enabled models to use Vision mode')),wrappersEditor()]),local?card([h('h4',{className:'vr-ia-subtitle',key:'network'},tx('网络与远程','Network & remote')),h('p',{className:'vr-hint',key:'network-authority'},tx('默认沿用 DSH/Host 的网络出口；只有需要让视觉请求走不同出口时才填写下方覆盖。','By default Vision Router follows the DSH/Host network path. Use the override below only when vision requests need a different egress route.')),toggle('allowRemoteSettings',tx('允许可信 Host 远程修改设置','Allow trusted-host remote settings'),tx('默认关闭；trustedHosts 不是身份认证。','Off by default; trustedHosts is not authentication.')),textField('proxy',tx('视觉专用代理覆盖','Vision-only proxy override'),tx('留空即沿用 DSH/Host；支持 http(s)://、socks5://，并兼容旧 socks5h://。','Leave empty to follow DSH/Host; supports http(s):// and socks5://, with legacy socks5h:// compatibility.')),textareaArray('proxyHosts',tx('视觉代理覆盖域名','Vision proxy override hosts'),tx('仅在上方覆盖非空时生效；每行一个，其余请求继续沿用 DSH/Host。','Used only when the override above is non-empty; one host per line. All other requests keep the DSH/Host path.'))]):null,card([h('h4',{className:'vr-ia-subtitle',key:'compat'},tx('兼容模式','Compatibility')),toggle('rewriteImages',tx('保护纯文本模型','Protect text-only models')),toggle('routing',tx('整轮视觉路由（旧工作流）','Whole-turn vision routing (legacy workflow)')),routing?toggle('reverseRouting',tx('纯文字消息继续使用聊天模型','Keep text-only messages on the chat model')):null,routing?textProviderEditor():null]),card([h('button',{type:'button',className:'vr-btn',key:'dev',onClick:function(){setOpen(Object.assign({},open,{developer:!open.developer}));}},open.developer?tx('隐藏开发者设置','Hide developer settings'):tx('显示开发者设置','Show developer settings')),open.developer?h('div',{className:'vr-ia-dev',key:'body'},toggle('progressiveTools',tx('渐进式工具暴露','Progressive tool exposure')),h('p',{className:'vr-hint',key:'progressive-restart'},tx('保存后需重启 DSH 才生效。','Restart DSH after saving for this change to take effect.')),local?toggle('stealth','Stealth'):null,local?textField('wrapperRoute',tx('包装路由名','Wrapper route name')):null,local?textField('chainRoute',tx('视觉链路由名','Vision chain route name')):null,textareaArray('extraVisionModels',tx('额外视觉能力标记','Extra vision capability labels'),tx('只有诊断发现模型未声明图片能力时才需要。','Needed only when diagnostics show missing image-capability metadata.'))):null]));}

package/lib/settings-native-card-layout.js

@@ -80,7 +80,7 @@ export function transformSettingsIaToNativeCards(source = SETTINGS_IA_CLIENT_PRE
     "      var valid=validChain(chainRows())&&validWrapperRows(wrapperRows())&&validGuidance(guidanceRows())&&invalidKeys.length===0;",
     `      var valid=validChain(chainRows())&&validWrapperRows(wrapperRows())&&validGuidance(guidanceRows())&&invalidKeys.length===0;
       var pageKeys={
-        general:new Set(['providers','freeFallback']),
+        general:new Set(['providers','localOnlyVision','freeFallback']),
         strategy:new Set(['tool','structuredVisionBootstrap','visionDepth','visionDepthMaxCalls','guidanceOverrides']),
         local:new Set(['localOllama','localLmStudio','desktopScreenshot']),
         advanced:new Set(['wrappedProviders','downscale','downscaleMaxPixels','cache','cacheTtlSeconds','cacheMaxEntries','timeoutMs','visionTaskTimeoutMs','ocrTimeoutMs','ocrEngine','visionTurnBudgetMs','freeCloudFirst','autoWrapProviders','allowRemoteSettings','proxy','proxyHosts','rewriteImages','routing','reverseRouting','textProvider','progressiveTools','stealth','wrapperRoute','chainRoute','extraVisionModels']),

package/lib/vision-backend-runtime-policy.js

@@ -195,6 +195,15 @@ async function resolvedHostInfo(llm, call) {
   return undefined
 }
 
+function localOnlyVisionCallAllowed(core, config, provider, model) {
+  if (config?.localOnlyVision !== true) return true
+  if (provider !== 'vision-http') return false
+  const allowed = []
+  try { allowed.push(...(core?.localProvidersOf?.(config) ?? [])) } catch {}
+  try { allowed.push(...(core?.httpProvidersOf?.(config) ?? [])) } catch {}
+  return allowed.some((entry) => `${entry?.name}/${entry?.model}` === model)
+}
+
 function failureStream(message, code = 'VISION_IMAGE_DELIVERY_UNAVAILABLE') {
   return {
     async *[Symbol.asyncIterator]() {
@@ -302,6 +311,21 @@ function llmWithRuntimePolicy(ctx, llm, options) {
           : 'configured'
         return {
           async *[Symbol.asyncIterator]() {
+            if (!localOnlyVisionCallAllowed(core, config, provider, model)) {
+              safeLog(
+                logger,
+                'info',
+                'vision-router: local-only policy blocks visual backend [%s/%s] source=%s',
+                provider,
+                model,
+                source,
+              )
+              yield* failureStream(
+                `vision backend ${provider}/${model} is blocked by the local-only vision policy`,
+                'VISION_LOCAL_ONLY_POLICY',
+              )
+              return
+            }
             const info = await resolvedHostInfo(target, call)
             const delivery = hostImageDeliveryFromInfo(info)
             const capability = typeof core?.decideVisionBackendCapability === 'function'

package/lib/vision-routing-evidence.js

@@ -14,6 +14,7 @@ function addCandidate(out, seen, candidate) {
 
 /** Configured provider/model pairs in exactly the order legacy execution sees them. */
 export function configuredVisionPairs(config) {
+  if (config?.localOnlyVision === true) return []
   const rows = Array.isArray(config?.providers) ? config.providers : []
   const source = rows.length > 0
     ? rows

package/lib/web-capability-boundary.js

@@ -1,5 +1,4 @@
 const wrappedContexts = new WeakMap()
-const patchedWebServers = new WeakMap()
 
 const VISION_ROUTER_WEB_PREFIX = '/_dsh/vision-router/'
 
@@ -274,37 +273,59 @@ function guardedRoute(route, getConnection) {
 }
 
 /**
- * Patch one WebServer service instance without replacing its injected Cordis
- * child context. DSH rc.6/rc.7 use that exact child identity for effect
- * ownership, so the service method is the narrow safe interception point.
+ * Scope DVR's WebServer registrar to one injected child context without ever
+ * mutating the shared WebServer implementation. Cordis service reads return a
+ * caller-scoped proxy, so shadowing `childCtx.webServer` preserves the original
+ * child identity/effect ownership while keeping unrelated plugin contexts on the
+ * untouched service. Async injection callbacks keep only this private shadow
+ * until they settle; they never hold a process-global registrar override.
  */
-function retainWebServerBoundary(webServer, getConnection) {
-  if (!webServer || (typeof webServer !== 'object' && typeof webServer !== 'function')) return () => {}
-  if (typeof webServer.register !== 'function') return () => {}
+function runWithWebServerBoundary(childCtx, getConnection, callback) {
+  if (!childCtx || (typeof childCtx !== 'object' && typeof childCtx !== 'function')) return callback()
 
-  let state = patchedWebServers.get(webServer)
-  if (!state) {
-    const originalRegister = webServer.register
-    let active = true
-    const guardedRegister = function registerWithLocalMutationBoundary(route) {
-      return originalRegister.call(this, active ? guardedRoute(route, getConnection) : route)
-    }
-    webServer.register = guardedRegister
-    state = { count: 0, originalRegister, guardedRegister, deactivate: () => { active = false } }
-    patchedWebServers.set(webServer, state)
+  let webServer
+  try { webServer = childCtx.webServer } catch { return callback() }
+  if (!webServer || (typeof webServer !== 'object' && typeof webServer !== 'function')) return callback()
+  if (typeof webServer.register !== 'function') return callback()
+
+  const ownWebServer = Object.getOwnPropertyDescriptor(childCtx, 'webServer')
+  if (ownWebServer && (!('value' in ownWebServer) || (ownWebServer.configurable === false && ownWebServer.writable !== true))) {
+    throw new TypeError('vision-router: cannot scope the injected webServer service safely')
   }
-  state.count += 1
 
-  let released = false
-  return () => {
-    if (released) return
-    released = true
-    state.count = Math.max(0, state.count - 1)
-    if (state.count !== 0) return
-    state.deactivate()
-    if (webServer.register === state.guardedRegister) webServer.register = state.originalRegister
-    patchedWebServers.delete(webServer)
+  const originalRegister = webServer.register
+  const guardedRegister = function registerWithLocalMutationBoundary(route) {
+    return originalRegister.call(webServer, guardedRoute(route, getConnection))
   }
+  const scopedWebServer = new Proxy(webServer, {
+    get(target, property, receiver) {
+      if (property === 'register') return guardedRegister
+      return Reflect.get(target, property, receiver)
+    },
+  })
+
+  Object.defineProperty(childCtx, 'webServer', ownWebServer
+    ? { ...ownWebServer, value: scopedWebServer }
+    : { value: scopedWebServer, configurable: true, enumerable: false, writable: true })
+
+  const restore = () => {
+    if (Object.getOwnPropertyDescriptor(childCtx, 'webServer')?.value !== scopedWebServer) return
+    if (ownWebServer) Object.defineProperty(childCtx, 'webServer', ownWebServer)
+    else delete childCtx.webServer
+  }
+
+  let result
+  try {
+    result = callback()
+  } catch (error) {
+    restore()
+    throw error
+  }
+  if (result && typeof result.then === 'function') {
+    return Promise.resolve(result).finally(restore)
+  }
+  restore()
+  return result
 }
 
 /**
@@ -339,25 +360,13 @@ export function installLocalMutationRouteBoundary(ctx) {
               } catch {}
               return childCtx?.connection ?? target?.connection
             }
-            const release = retainWebServerBoundary(childCtx?.webServer, getConnection)
-            let owned = false
-            try {
-              if (typeof childCtx?.effect === 'function') {
-                childCtx.effect(() => release, 'vision-router: local mutation transport boundary')
-                owned = true
-              }
-            } catch {
-              /* fall back to the parent lifetime below */
-            }
-            if (!owned) {
-              try {
-                target.effect?.(() => release, 'vision-router: local mutation transport boundary fallback')
-              } catch {
-                /* service replacement still drops its registered routes */
-              }
-            }
-            // Preserve the ORIGINAL child context identity for rc.6 ownership.
-            return callback(childCtx)
+            // Preserve the ORIGINAL child context identity for rc.6 ownership,
+            // but never leave our registrar wrapper visible to other plugins.
+            return runWithWebServerBoundary(
+              childCtx,
+              getConnection,
+              () => callback(childCtx),
+            )
           }, ...rest)
         }
       }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-vision-router",
-  "version": "2.2.3",
-  "description": "Eyes for text-only DeepSeek Harness agents: built-in free vision chain (no key) + pixel-level vision tools (Q&A, grounding, crop, pixel diff, colors, OCR, SVG trace, cutout, screenshots). One-command install, no Python, image turns work like ordinary tool-calling turns.",
+  "version": "2.2.5",
+  "description": "Eyes for text-only DeepSeek Harness agents: built-in free vision chain + pixel-level tools. Remote vision providers, including the default free fallback, receive image content unless strict local-only use is configured.",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -70,7 +70,7 @@
     "sharp": "^0.35.4"
   },
   "scripts": {
-    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/release-registry-identity.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/long-ocr-empty-retry.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-event-feed.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && node --test tests/vision-backend-runtime-policy.test.js",
+    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/release-registry-identity.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/local-only-vision.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/long-ocr-empty-retry.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-event-feed.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && node --test tests/vision-backend-runtime-policy.test.js",
     "test:core": "node --test tests/core.test.js tests/degraded-local-evidence.test.js tests/runtime-e2e.test.js tests/structured-bootstrap.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-execution-policy.test.js tests/vision-backend-runtime-policy.test.js",
     "test:routing": "node --test tests/issue-374-delegated-call-config.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/vision-routing-product.test.js tests/vision-capability-router.test.js tests/vision-capability-probe.test.js tests/vision-capability-shadow-health.test.js tests/vision-runtime-performance.test.js tests/vision-background-benchmark.test.js tests/vision-image-input-verdict.test.js",
     "test:session": "node --test tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/replay-delegation.test.js tests/legacy-session-repair.test.js tests/session-repair-v2.test.js tests/issue-276-session-image-ownership.test.js",
@@ -104,4 +104,4 @@
     },
     "bundle": { "patch": "./cordis.patch.yml" }
   }
-}
+}