dsh-vision-router 2.2.5 → 2.2.7

package/README.md

@@ -42,9 +42,9 @@
 > **Data leaves your machine by default.** When a cloud vision model is used, Vision Router sends the image (or a derived crop), the vision prompt and related request metadata to that provider. A fresh install has an anonymous OVHcloud vision fallback enabled, so "free" and "no key" do **not** mean offline. Do not use the cloud chain for confidential, regulated or classified material. See [Data flow and strict local-only use](#data-flow-and-strict-local-only-use).
 
 > [!WARNING]
-> 📌 **Announcement (v2.2.1)**
+> 📌 **Announcement (v2.2.5)**
 >
-> **v2.2.1:** Stability hotfix for large-session repair, accessor-based fetch composition, non-divisible pixel-diff bounds, and local Ollama answer-budget preservation — without raising the rc.8 Host floor. [What’s new →](docs/releases/v2.2.1.md)
+> **v2.2.5:** Adds fail-closed **Local-only vision** and fixes the remaining DSH `0.1.7-rc.2` Windows Desktop multi-plugin `Loading plugins…` hang by isolating Vision Router’s WebServer registrar from other plugins. The public Host floor remains `0.1.0-rc.8`. [What’s new →](docs/releases/v2.2.5.md)
 
 <p align="center">
   <img src="assets/vision-demo.gif" width="640" alt="Demo: paste an image, the agent locates the send button with vision_ground / vision_crop / vision_pixel_diff and answers with coordinates" />
@@ -436,7 +436,7 @@ ollama pull qwen2.5vl
 ## Requirements
 
 - DeepSeek Harness Web profile. Normal installs can use `npx @deepseek-ai/dsh ...`; source checkouts use `pnpm dsh ...`. A bare `dsh ...` command only works when the CLI is already on your shell `PATH`.
-- **DSH Host support policy:** DVR 2.2.x keeps DSH `0.1.0-rc.8` as the public minimum and currently supports the released stable channel through `0.1.5-rc.3`. Exact `0.1.7-rc.2` (`next`) coverage is **verification evidence only**, not a preview support promise; scheduled `latest`/`alpha` canaries monitor drift without changing the support policy. DVR 2.0.x was the final train with public support for rc.6/rc.7. See [DSH Host support window](docs/architecture/dsh-support-window.md).
+- **DSH Host support policy:** DVR 2.2.x keeps DSH `0.1.0-rc.8` as the public minimum and currently supports the released stable channel through `0.1.5-rc.3`. The DSH `0.2.x` train is peer-admitted from the verified `0.2.0-rc.1` boundary (`>=0.2.0-rc.1 <0.3.0-0`); exact `0.2.0-rc.1` (`next`) source, real Host, Windows Desktop, multi-plugin, Settings, mixed-attachment, bundle-recompose, and Host-Sharp gates are preview verification evidence, not a support-floor increase. The final stable `0.2.0` tag and signed Desktop artifact will still be revalidated when published. DVR 2.0.x was the final train with public support for rc.6/rc.7. See [DSH Host support window](docs/architecture/dsh-support-window.md).
 - Node ≥ 22 (host side).
 - No API key for the default free chain; a credential reference (`apiKeyEnv`) only for paid `httpProviders`.
 - Chrome / Chromium / Edge is needed only for `vision_html_screenshot`; every other tool works without a browser.

package/README.zh.md

@@ -42,9 +42,9 @@
 > **默认配置会让数据出网。** 使用云端视觉模型时，Vision Router 会将图片（或由它裁剪出的局部）、识图提示词及相关请求元数据发送给对应供应商。新安装默认开启 OVHcloud 匿名视觉兜底，因此“免费”和“免 Key”不等于离线。涉密、涉案、内部或其他受限材料请勿使用云端链路。详见[数据流向与严格纯本地配置](#数据流向与严格纯本地配置)。
 
 > [!WARNING]
-> 📌 **公告（v2.2.1）**
+> 📌 **公告（v2.2.5）**
 >
-> **v2.2.1：稳定性热修——修复大型 Session repair 卡死、accessor fetch 组合、非整除 pixel diff 边界与本地 Ollama 推理占满答案预算；公开最低 Host 仍保持 `0.1.0-rc.8`。** [查看完整更新 →](docs/releases/v2.2.1.md)
+> **v2.2.5：新增 fail-closed 的「仅本地视觉」，并根修 DSH `0.1.7-rc.2` Windows Desktop 多插件环境下残留的 `Loading plugins…` 卡死——Vision Router 的 WebServer registrar 不再污染其他插件。公开最低 Host 仍保持 `0.1.0-rc.8`。** [查看完整更新 →](docs/releases/v2.2.5.md)
 
 <p align="center">
   <img src="assets/vision-demo.gif" width="640" alt="演示：粘贴图片，Agent 用 vision_ground / vision_crop / vision_pixel_diff 定位发送按钮并给出坐标" />
@@ -434,7 +434,7 @@ ollama pull qwen2.5vl
 ## 环境要求
 
 - DeepSeek Harness 的 Web profile。普通安装可用 `npx @deepseek-ai/dsh ...`；从源码仓库运行时用 `pnpm dsh ...`。只有 CLI 已经进入系统 `PATH` 时才能直接写 `dsh ...`。
-- **DSH Host 支持策略：** DVR 2.2.x 的公开最低 Host 仍为 DSH `0.1.0-rc.8`，当前正式发布通道已验证并支持到 `0.1.5-rc.3`。对 `0.1.7-rc.2`（`next`）的精确覆盖**只属于验证证据**，不代表对 preview 的公开支持承诺；定时 `latest`/`alpha` canary 只负责发现上游漂移，也不会自动改变支持策略。DVR 2.0.x 是最后公开支持 rc.6/rc.7 的版本线。详见 [DSH Host 支持窗口](docs/architecture/dsh-support-window.md)。
+- **DSH Host 支持策略：** DVR 2.2.x 的公开最低 Host 仍为 DSH `0.1.0-rc.8`，当前稳定通道已验证并支持到 `0.1.5-rc.3`。DSH `0.2.x` 从已验证的 `0.2.0-rc.1` 边界开始准入（`>=0.2.0-rc.1 <0.3.0-0`）；精确 `0.2.0-rc.1`（`next`）源码、真实 Host、Windows Desktop、多插件、Settings、混合附件、bundle 重组及 Host-Sharp 门禁仅作为预览验证证据，不抬高公开支持下限。上游正式发布稳定版 `0.2.0` tag 和签名 Desktop 安装包后仍会立即复验。DVR 2.0.x 是最后公开支持 rc.6/rc.7 的版本线。详见 [DSH Host 支持窗口](docs/architecture/dsh-support-window.md)。
 - Node ≥ 22（宿主侧）。
 - 默认免费链路无需 API Key；付费 `httpProviders` 只需一个凭据引用（`apiKeyEnv`）。
 - 只有 `vision_html_screenshot` 需要 Chrome / Chromium / Edge；其余工具无浏览器也能用。

package/docs/architecture/dsh-compatibility-matrix.md

@@ -11,9 +11,10 @@ The matrix is capability-based. Runtime code must feature-detect the seam it nee
 | `minimum-contract` | `0.1.0-rc.6` | Historical compatibility-retention fixture. The name is legacy; DVR 2.1.x and later 2.x public support starts at rc.8. |
 | `legacy-contract` | `0.1.0-rc.8` | Public support-floor fixture carrying batch attachments and dimension policy. |
 | `current-contract` | `0.1.5-rc.3` | Current stable Host contract baseline. Must remain green. |
-| `preview-contract` / exact preview gates | `0.1.7-rc.2` (`next`) | Required verification evidence only; not a public preview-support claim. |
+| `preview-contract` | `0.1.7-rc.2` | Retained predecessor-preview regression fixture. |
+| `DSH 0.2.0-rc.1 validation` | `0.2.0-rc.1` (`next`) | Current exact next/rc evidence; not a public preview-support claim. |
 | retained preview regression | `0.1.5-alpha.2` | Older preview regression fixture retained as an older preview regression while the 0.1.7 next line is qualified. |
-| `latest-dsh` / alpha canaries | resolved dynamically from npm dist-tags | Scheduled drift surveillance only. Never changes support policy by itself. |
+| release-channel canary | npm `latest` / `next` / `alpha` | Separately labelled stable, next/rc, and alpha/pre-release drift surveillance. Never changes support policy by itself. |
 
 Node 22 and Node 24 remain the general required runtime matrix. The Host contract jobs are additive; they do not replace the normal test matrix.
 
@@ -38,7 +39,7 @@ Node 22 and Node 24 remain the general required runtime matrix. The Host contrac
 | Public entry boot | yes | yes | yes | packed plugin public entry import in each Host contract fixture. |
 | Packaged tarball install | yes | yes | yes | each Host contract fixture packs the plugin then installs the tarball into an isolated Host package. |
 
-Preview-only evidence: the `0.1.7-rc.2` (`next`) contract fixture additionally mounts the Host-owned `@deepseek-ai/dsh-compaction-image-offload` projection and proves that one offloaded image occurrence stays offloaded across live requests, `SessionStore.fork()`, JSONL process restart, and cold resume, while a new occurrence of the same durable attachment remains a retained image. This is verification evidence for the preview contract only; it does not expand the public support window.
+Preview-only evidence: the retained `0.1.7-rc.2` contract fixture additionally mounts the Host-owned `@deepseek-ai/dsh-compaction-image-offload` projection and proves that one offloaded image occurrence stays offloaded across live requests, `SessionStore.fork()`, JSONL process restart, and cold resume. The exact `0.2.0-rc.1` gate separately proves immutable source contracts, official peer evaluation, Host proxy authority, WebServer overlay ownership, real Host + Chromium Vision/mixed-attachment/Settings/bundle lifecycles, and Windows Node 22/24 Desktop plus the Node 24 multi-plugin adversary. Both are verification evidence only; neither expands the public support window.
 
 ## Compatibility inventory and exit criteria
 

package/docs/architecture/dsh-support-window.md

@@ -17,6 +17,12 @@ DSH `0.1.5-rc.1` / `0.1.5-rc.2` remain admitted for existing installations; curr
 
 No later support-floor increase is currently announced.
 
+### DSH 0.2.x forward admission
+
+DVR 2.2.x peer-admits the DSH `0.2.x` train from the verified rc.1 boundary (`>=0.2.0-rc.1 <0.3.0-0`) without raising the `0.1.0-rc.8` minimum Host floor. Initial forward admission was backed by public pre-0.2.0 master `21638c56315ae6a2b552d6091945d3144c9af32e`. Exact release evidence has now advanced to immutable `dsh-v0.2.0-rc.1` commit `4878cdabd87d4041bdaff61d04c966883b9fd07a`, published on 2026-09-28. Required gates cover three-OS source contracts, real Host + Chromium, Settings mount/save/reload/readback, mixed attachments, bundle recomposition, Windows Node 22/24 Desktop authentication, the Node 24 multi-plugin isolation adversary, and Host-owned Sharp resolution.
+
+The final immutable upstream `0.2.0` stable tag and signed official Desktop installer remain release-time revalidation targets. The rc.1 evidence is next-channel verification, not a preview support promise and not a support-floor increase.
+
 ## Verification evidence — not support policy
 
 Compatibility evidence answers a different question: what exact upstream releases and moving channels have current CI proof? It must never be interpreted as a public support-floor change.
@@ -24,9 +30,10 @@ Compatibility evidence answers a different question: what exact upstream release
 | Evidence role | DSH source | Meaning |
 |---|---|---|
 | Exact stable evidence | `0.1.5-rc.3` | Required Host/wire and real Host + Chromium coverage for the current stable release. |
-| Exact preview evidence | `0.1.7-rc.2` (`next`) | Required preview Host/wire/lifecycle/browser evidence. This is not a preview support promise. |
+| Exact next/rc evidence | `0.2.0-rc.1` (`next`) | Required Host/wire/lifecycle/browser evidence. This is not a preview support promise. |
 | Stable drift canary | npm dist-tag `latest` | Scheduled, dynamically resolved surveillance. A failure starts compatibility investigation; it does not rewrite support policy. |
-| Preview drift canary | npm dist-tag `alpha` | Scheduled, dynamically resolved surveillance with preview-specific lifecycle coverage. A failure does not rewrite support policy. |
+| Next/rc drift canary | npm dist-tag `next` | Scheduled, dynamically resolved surveillance for the rc channel. A failure does not rewrite support policy. |
+| Alpha/pre-release drift canary | npm dist-tag `alpha` | Scheduled, dynamically resolved surveillance for the alpha channel. A failure does not rewrite support policy. |
 
 The exact evidence values may move in a patch-level maintenance PR when CI proof advances. The public minimum may move only under the support-floor protocol below.
 

package/docs/architecture/host-first-proxy-convergence.md

@@ -50,7 +50,7 @@ H1 is complete as an egress contract, not as a new production dependency. Exact
 4. The same contract runs against the exact current stable Host and exact preview evidence on Linux, macOS, and Windows through the existing source-contract matrix.
 5. Production code contains no `@deepseek-ai/dsh-http-proxy` dependency or import. `proxyRouteFor()` is used only by the exact-source test as an oracle for the Host decision.
 
-The current stable evidence advances to DSH `0.1.5-rc.3`; `0.1.5-rc.1` / `0.1.5-rc.2` remain explicitly peer-admitted, exact next-channel evidence is `0.1.7-rc.2`, and the public minimum remains `0.1.0-rc.8`.
+The current stable evidence remains DSH `0.1.5-rc.3`; `0.1.5-rc.1` / `0.1.5-rc.2` remain explicitly peer-admitted, exact next/rc evidence is `0.2.0-rc.1`, and the public minimum remains `0.1.0-rc.8`.
 
 ## H2 — Scope Host-owned override authority
 

package/docs/releases/v2.2.6.md

@@ -0,0 +1,24 @@
+# v2.2.6
+
+DSH Vision Router 2.2.6 is a DSH 0.2 compatibility and runtime-hardening update. It admits the validated DSH 0.2 release train without raising the public Host floor, reduces Settings startup amplification, adds the LM Studio native chat route, and bounds Doctor probe responses while streaming.
+
+## Highlights
+
+- **DSH 0.2 release-train compatibility:** both official DSH peers now admit `>=0.2.0-rc.1 <0.3.0-0`. This covers validated `0.2.0-rc.1` and later 0.2.x prerelease/stable versions without requiring a peer edit for every tag, while every 0.3 prerelease/stable remains excluded until a separate compatibility review.
+- **Permanent DSH `0.2.0-rc.1` gates:** exact-source Windows/macOS/Linux checks, real Host + Chromium lifecycle coverage, Windows Desktop Node 22/24 authenticated-request checks, Node 24 multi-plugin ordering, and stable/next/preview release-channel canaries are now part of CI.
+- **Settings startup amplification root fix (#577):** the DSH 0.1.7 Settings compatibility layer reuses a stable shared service/cache/listener/mutation queue behind the per-caller facade instead of multiplying full-profile recomposition work across child contexts. Exact `0.1.7-rc.2` multi-plugin measurements dropped from 59 configuration calls to roughly 8–10 in the tested profile. This addresses the second amplification mechanism found while investigating #551; the reporter's field A/B remains open and is not treated as closed by this release.
+- **LM Studio native route (#579):** native LM Studio requests use `/api/v1/chat`, and the plugin maps disabled reasoning to the native `reasoning: "off"` behavior instead of sending an OpenAI-compatible-only field.
+- **Doctor response hardening (#580):** runtime probes enforce the response ceiling while streaming and cancel oversized responses instead of buffering beyond the diagnostic boundary.
+- Keeps the public minimum supported DSH Host at `0.1.0-rc.8`; no settings migration is required.
+
+## Validation
+
+- Exact DSH `0.2.0-rc.1@4878cdabd87d4041bdaff61d04c966883b9fd07a` passes Ubuntu/macOS/Windows source contracts, official Host peer evaluation, proxy/overlay contracts, real Host + Chromium Vision/mixed-attachment/Settings lifecycles, Windows Desktop Node 22/24, and the Node 24 multi-plugin adversary.
+- The retained DSH `0.1.7-rc.2` real-Host/browser regression gates remain green.
+- A physical macOS run using the published npm runtime `@deepseek-ai/dsh@0.2.0-rc.1` passed plugin admission, authentication boundaries, Settings save/reload/readback, enabled Vision composer flow, mixed attachment paste/upload, and three consecutive Host restarts with persisted settings and no compatibility-disable/uncaught/fatal signatures.
+- Main CI, DSH Contract, Adversarial Fuzz, routing parity, dependency review, preview browser smoke, native multimodal cold-resume, and the DSH release-channel canary passed on the final compatibility head.
+- Local release-prep suite: `1507` passed, `1` intentional skip, `0` failed; the separate backend runtime-policy suite passed `9/9`.
+
+## Upgrade
+
+Users moving to DSH `0.2.0-rc.1` should upgrade to Vision Router 2.2.6 so the Host compatibility preflight accepts the plugin. Existing supported 0.1.x users can also upgrade in place. Issue #551 remains open for the reporter's original `0.1.7-rc.2` 18-plugin field A/B and is tracked independently from this release.

package/docs/releases/v2.2.7.md

@@ -0,0 +1,22 @@
+# v2.2.7
+
+DSH Vision Router 2.2.7 is a reliability, Desktop compatibility, and security hotfix. It restores the official Desktop Settings/local-capability path, repairs Electron-local Tesseract execution, hardens artifact/cache publication under symlinked workspaces and overlapping writers, and picks up the upstream Undici 7.29.1 security release without changing the public DSH support floor.
+
+## Highlights
+
+- **Official Desktop origin fix (#589):** `dsh-app://app` is now recognized consistently as the exact DSH-owned local Desktop origin across Settings, Settings IA, local diagnostics, exact-check, screenshot, and 0.1.7 compatibility surfaces. Lookalike origins remain remote, and server-side local-only boundaries are unchanged.
+- **Electron local OCR fix (#590):** the Tesseract `execFile` compatibility layer now synchronizes Node CJS/ESM builtin exports symmetrically during install, rollback, and teardown. This fixes Windows Electron cases where forced Tesseract received the literal `stdin` path or Auto OCR silently fell back to a vision model.
+- **Artifact path identity fix (#594):** artifact containment and atomic writes still use canonical real paths, while successful publication returns the caller-visible workspace path. Symlinked workspaces such as macOS `/tmp -> /private/tmp` no longer make a valid artifact appear to escape its session workspace.
+- **Collision-resistant cache publication (#594):** live-model, capability-profile, background-stop, and image-input-verdict caches now use unique atomic temporary paths. Independent writers in the same process and millisecond can no longer collide on one temp file and fail `rename()` with `ENOENT`.
+- **Undici 7.29.1 security update (#593):** the runtime picks up the upstream 7.29.1 security release, including fixes around connection-option preservation, WebSocket failure handling, shared-cache safety, decompression bounds, retry/body settlement, and response framing. This dependency hardening does not imply every upstream advisory was reachable through Vision Router itself.
+- **DSH 0.2 validation/cache hardening (#588):** canonical compatibility evidence now reflects the validated `0.2.0-rc.1` train, and DSH build-cache manifests include required `lib` outputs so incomplete archives fail closed instead of reaching runtime smoke with missing build artifacts.
+
+## Validation
+
+- PR #594 completed 75 repository checks with 0 failures, including Node 22/24, Windows/macOS/Linux, artifact-boundary 22/24, DSH minimum/current/preview contracts, exact-source, real Host + Chromium, Windows Desktop Host, routing parity, Host Sharp, hostile-input fuzz, dependency review, and CodeQL.
+- Local final hotfix validation on the Undici 7.29.1 base: main suite `1520` passed, `1` intentional skip, `0` failed; backend runtime-policy suite passed `9/9`; targeted artifact/cache/live-model/capability/background lifecycle coverage passed `43/43`.
+- The public minimum supported DSH Host remains `0.1.0-rc.8`; existing 2.2.x settings require no migration.
+
+## Upgrade
+
+2.2.6 users should upgrade to 2.2.7, especially when using the official Desktop app, local Tesseract OCR, symlinked/custom workspaces, or long-running installations that may overlap cache writes. No configuration changes are required.

package/index.js

@@ -1164,8 +1164,9 @@ export function apply(ctx, config = {}, runtime = {}) {
           // Local backends (format=anthropic etc.) go through their own
           // dispatcher; regular HTTP providers keep the plain OpenAI call.
           // Both consume the same pre-built OpenAI content blocks (image_url
-          // data URIs); callLocalBackend converts them for the Anthropic wire.
-          text = await (entry.provider.format === 'anthropic'
+          // data URIs); callLocalBackend converts them for the Anthropic and
+          // LM Studio native wires.
+          text = await ((entry.provider.format === 'anthropic' || entry.provider.format === 'lmstudio')
             ? callLocalBackend(entry.provider, openAIMessages, {
                 maxTokens: entry.provider.maxTokens ?? 4096,
                 signal: options.signal,

package/lib/artifact-io.js

@@ -106,7 +106,8 @@ async function resolveArtifactTargetForRun(workspace, artifactsDir, relativePath
   const lstatImpl = deps.lstat ?? lstat
 
   throwIfVisionAborted()
-  const workspaceReal = await realpathImpl(path.resolve(String(workspace ?? '')))
+  const workspaceLexical = path.resolve(String(workspace ?? ''))
+  const workspaceReal = await realpathImpl(workspaceLexical)
   throwIfVisionAborted()
   const relativeBase = normalizeArtifactsDir(artifactsDir)
   const requestedTarget = normalizeRelativeArtifactPath(relativePath)
@@ -114,6 +115,7 @@ async function resolveArtifactTargetForRun(workspace, artifactsDir, relativePath
     ? normalizeRelativeArtifactPath(path.join(ARTIFACT_RUNS_DIR, runId, requestedTarget))
     : requestedTarget
   const lexicalBase = path.resolve(workspaceReal, relativeBase)
+  const callerVisibleBase = path.resolve(workspaceLexical, relativeBase)
   if (!isPathInside(workspaceReal, lexicalBase)) {
     throw new Error('vision-router: artifactsDir must stay inside the session workspace')
   }
@@ -135,6 +137,7 @@ async function resolveArtifactTargetForRun(workspace, artifactsDir, relativePath
   }
 
   const lexicalTarget = path.resolve(lexicalBase, relativeTarget)
+  const callerVisibleTarget = path.resolve(callerVisibleBase, relativeTarget)
   if (!isPathInside(lexicalBase, lexicalTarget)) {
     throw new Error('vision-router: artifact target must stay inside the artifacts directory')
   }
@@ -186,7 +189,7 @@ async function resolveArtifactTargetForRun(workspace, artifactsDir, relativePath
   if (existing?.isDirectory?.()) {
     throw new Error('vision-router: artifact target is a directory')
   }
-  return { target, parentReal, artifactsBaseReal, runsBaseReal, runBaseReal, existing, runId }
+  return { target, callerVisibleTarget, parentReal, artifactsBaseReal, runsBaseReal, runBaseReal, existing, runId }
 }
 
 export function resolveArtifactTarget(workspace, artifactsDir, relativePath, deps = {}) {
@@ -246,7 +249,12 @@ async function writeArtifactFileForRun(workspace, artifactsDir, relativePath, da
       }
       scheduleArtifactRetention(resolved.artifactsBaseReal, { protectRunId: resolved.runId })
     }
-    return resolved.target
+    // Keep canonical paths for containment and atomic I/O, but return the
+    // caller-visible lexical workspace path. On macOS /tmp resolves to
+    // /private/tmp (and real deployments may use symlinked workspaces);
+    // leaking the realpath makes a valid artifact appear outside the session
+    // workspace to downstream path/address code.
+    return resolved.callerVisibleTarget
   } finally {
     if (!published) {
       try { await unlinkImpl(temp) } catch { /* best effort */ }

package/lib/client.js

@@ -1210,6 +1210,11 @@ window.__ModuleLoader__.load({
       // become local merely because a stale Connection says true.
       const location = locationLike ?? (typeof window !== 'undefined' ? window.location : undefined)
       const hostname = typeof location?.hostname === 'string' ? location.hostname.toLowerCase().replace(/^\[|\]$/g, '') : ''
+      const protocol = typeof location?.protocol === 'string' ? location.protocol.toLowerCase() : ''
+      // The official Desktop shell uses dsh-app://app instead of an HTTP
+      // loopback URL. Trust only that exact scheme/host pair: broad custom-
+      // protocol trust would let an unrelated embedded page gain local UI.
+      if (protocol === 'dsh-app:' && hostname === 'app') return false
       if (hostname !== '') {
         if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '::1') return false
         if (/^127(?:\.\d{1,3}){3}$/.test(hostname)) return false

package/lib/doctor-cli-p0.js

@@ -7,6 +7,7 @@ import {
   formatDshHostCapability,
   normalizeDshHostCapabilities,
 } from './dsh-host-capabilities.js'
+import { DOCTOR_RESPONSE_MAX_BYTES, readResponseJsonBounded } from './http-body-limit.js'
 import {
   DSH_SUPPORT_WINDOW,
   DSH_VERIFICATION_EVIDENCE,
@@ -63,7 +64,9 @@ export async function probeDoctorHostCapabilities({ baseUrl, fetchImpl = globalT
         capabilities: unknownSnapshot(),
       }
     }
-    const body = await response.json()
+    const body = await readResponseJsonBounded(response, DOCTOR_RESPONSE_MAX_BYTES, {
+      label: 'Doctor Host capability response',
+    })
     return {
       ok: true,
       source: 'live-runtime',

package/lib/doctor-runtime.js

@@ -3,6 +3,7 @@ import { existsSync, readFileSync } from 'node:fs'
 import os, { homedir } from 'node:os'
 import path from 'node:path'
 import { CURRENT_VERSION } from './update-check.js'
+import { DOCTOR_RESPONSE_MAX_BYTES, readResponseTextBounded } from './http-body-limit.js'
 
 export const DEFAULT_RUNTIME_URL = 'http://127.0.0.1:3080'
 const SAFE_RUNTIME_ROUTES = [
@@ -111,17 +112,17 @@ export async function probeRuntime({
         signal: timeoutSignal(timeoutMs),
       })
       if (response.status === 200) {
-        const text = typeof response.text === 'function' ? await response.text() : ''
-        if (Buffer.byteLength(text) <= 16 * 1024) {
-          const body = text ? JSON.parse(text) : undefined
-          const expectedDirectory = path.resolve(dshHome, 'logs', 'vision-router')
-          const actualDirectory = typeof body?.directory === 'string' ? path.resolve(body.directory) : undefined
-          const candidates = [...new Set(applicableProfiles.filter((name) => typeof name === 'string'))]
-          if (body?.local === true && actualDirectory === expectedDirectory && candidates.length === 1 && candidates[0] === requestedProfile) {
-            ownership = { requestedProfile, verified: true, profile: requestedProfile, source: 'log-home+unique-profile' }
-          } else if (body?.local === true && actualDirectory === expectedDirectory) {
-            ownership = { requestedProfile, verified: false, reason: 'profile-ambiguous', candidateProfiles: candidates }
-          }
+        const text = await readResponseTextBounded(response, DOCTOR_RESPONSE_MAX_BYTES, {
+          label: 'Doctor runtime ownership response',
+        })
+        const body = text ? JSON.parse(text) : undefined
+        const expectedDirectory = path.resolve(dshHome, 'logs', 'vision-router')
+        const actualDirectory = typeof body?.directory === 'string' ? path.resolve(body.directory) : undefined
+        const candidates = [...new Set(applicableProfiles.filter((name) => typeof name === 'string'))]
+        if (body?.local === true && actualDirectory === expectedDirectory && candidates.length === 1 && candidates[0] === requestedProfile) {
+          ownership = { requestedProfile, verified: true, profile: requestedProfile, source: 'log-home+unique-profile' }
+        } else if (body?.local === true && actualDirectory === expectedDirectory) {
+          ownership = { requestedProfile, verified: false, reason: 'profile-ambiguous', candidateProfiles: candidates }
         }
       }
     } catch {

package/lib/dsh-settings-017-compat.js

@@ -110,6 +110,18 @@ function revisionFor(editor, namespace, current, inherited) {
   return previous.revision
 }
 
+const CORDIS_ORIGINAL = Symbol.for('cordis.original')
+
+function serviceIdentity(value) {
+  if (!value || (typeof value !== 'object' && typeof value !== 'function')) return value
+  try {
+    const original = value[CORDIS_ORIGINAL]
+    return original && (typeof original === 'object' || typeof original === 'function') ? original : value
+  } catch {
+    return value
+  }
+}
+
 function serviceOf(ctx, name) {
   try {
     const value = typeof ctx?.get === 'function' ? ctx.get(name) : undefined
@@ -176,17 +188,26 @@ function applyOperations(current, inherited, ops) {
   return next
 }
 
-function createConfigEditorSettingsFacade(editor, entryConfig, namespace) {
-  const listeners = new Set()
+function createConfigEditorSettingsFacade(editor, entryConfig, namespace, sharedState) {
+  const listeners = sharedState.listeners
 
-  function state() {
+  // ConfigEditor.configuration() rebuilds the complete profile and, on 0.1.7,
+  // composes every entry through structuredClone(). Ordinary profile writes
+  // reload this plugin and therefore replace the facade; keep one immutable
+  // instance snapshot for runtime reads and refresh only at write boundaries.
+  function state(refresh = false) {
+    if (sharedState.stateLoaded && !refresh) return sharedState.cachedState
     const row = configEditorRow(editor, namespace)
-    if (!row) return undefined
+    if (!row) {
+      sharedState.cachedState = undefined
+      sharedState.stateLoaded = true
+      return sharedState.cachedState
+    }
     const current = objectLike(row.entry?.options?.config) ? row.entry.options.config : {}
     const inherited = objectLike(row.inherited) ? row.inherited : {}
     const base = mergeResolved(entryConfig, inherited)
     const value = mergeResolved(entryConfig, current)
-    return {
+    sharedState.cachedState = {
       row,
       descriptor: {
         ns: namespace,
@@ -197,17 +218,25 @@ function createConfigEditorSettingsFacade(editor, entryConfig, namespace) {
         applies: true,
       },
     }
+    sharedState.stateLoaded = true
+    return sharedState.cachedState
   }
 
   function notify(value) {
     for (const listener of [...listeners]) {
-      try { listener(value, undefined) } catch {}
+      try { listener(clone(value), undefined) } catch {}
     }
   }
 
+  function enqueueMutation(task) {
+    const running = sharedState.mutationTail.then(task, task)
+    sharedState.mutationTail = running.catch(() => {})
+    return running
+  }
+
   const scope = {
     get() {
-      return state()?.descriptor.value ?? entryConfig
+      return clone(state()?.descriptor.value ?? entryConfig)
     },
     watch(listener) {
       if (typeof listener !== 'function') return () => {}
@@ -234,23 +263,35 @@ function createConfigEditorSettingsFacade(editor, entryConfig, namespace) {
       const current = state()
       return current ? [clone(current.descriptor)] : []
     },
-    async mutate(namespaceName, operations, expectedRevision) {
-      if (namespaceName !== namespace) throw new Error(`No configurable plugin entry ${JSON.stringify(namespaceName)}`)
-      const before = state()
-      if (!before) throw new Error(`No configurable plugin entry ${JSON.stringify(namespace)}`)
-      if (!Number.isSafeInteger(expectedRevision) || expectedRevision < 0) {
-        throw admissionError('expectedRevision must be a non-negative safe integer')
-      }
-      if (expectedRevision !== before.descriptor.revision) {
-        throw settingsConflict(expectedRevision, before.descriptor.revision)
+    mutate(namespaceName, operations, expectedRevision) {
+      let ops
+      try {
+        if (namespaceName !== namespace) throw new Error(`No configurable plugin entry ${JSON.stringify(namespaceName)}`)
+        if (!Number.isSafeInteger(expectedRevision) || expectedRevision < 0) {
+          throw admissionError('expectedRevision must be a non-negative safe integer')
+        }
+        // Validate and clone caller-owned values before this write waits behind
+        // another mutation, closing a queued-request time-of-check/use gap.
+        ops = validateOperations(operations)
+      } catch (error) {
+        return Promise.reject(error)
       }
-      const ops = validateOperations(operations)
-      const entry = before.row.entry
-      await editor.edit(entry, (current, inherited) => applyOperations(current, inherited, ops))
-      const after = state()
-      if (!after) throw new Error('Vision Router configuration entry disappeared after the write')
-      notify(after.descriptor.value)
-      return clone(after.descriptor)
+      return enqueueMutation(async () => {
+        // Runtime reads use the facade snapshot. Writes deliberately cross the
+        // ConfigEditor boundary again so optimistic concurrency still observes
+        // changes that landed before a Host reload replaced this facade.
+        const before = state(true)
+        if (!before) throw new Error(`No configurable plugin entry ${JSON.stringify(namespace)}`)
+        if (expectedRevision !== before.descriptor.revision) {
+          throw settingsConflict(expectedRevision, before.descriptor.revision)
+        }
+        const entry = before.row.entry
+        await editor.edit(entry, (current, inherited) => applyOperations(current, inherited, ops))
+        const after = state(true)
+        if (!after) throw new Error('Vision Router configuration entry disappeared after the write')
+        notify(after.descriptor.value)
+        return clone(after.descriptor)
+      })
     },
   }
 }
@@ -264,6 +305,7 @@ function createConfigEditorSettingsFacade(editor, entryConfig, namespace) {
 function contextWithLazySettingsCompatibility(ctx, entryConfig, namespace) {
   const wrappers = new WeakMap()
   const facades = new WeakMap()
+  const sharedStates = new WeakMap()
   let injectedEditor
 
   try {
@@ -284,9 +326,24 @@ function contextWithLazySettingsCompatibility(ctx, entryConfig, namespace) {
         || !editor || typeof editor.edit !== 'function' || typeof editor.configuration !== 'function') {
       return settings
     }
+    const identity = serviceIdentity(editor)
+    let sharedState = sharedStates.get(identity)
+    if (!sharedState) {
+      sharedState = {
+        listeners: new Set(),
+        cachedState: undefined,
+        stateLoaded: false,
+        mutationTail: Promise.resolve(),
+      }
+      sharedStates.set(identity, sharedState)
+    }
     let facade = facades.get(editor)
     if (!facade) {
-      facade = createConfigEditorSettingsFacade(editor, entryConfig, namespace)
+      // Cordis may hand different traceable proxy views of the same service to
+      // different child contexts. Keep each facade bound to its caller-owned
+      // proxy for method ownership, but share the expensive immutable snapshot
+      // and write queue by the stable underlying service identity.
+      facade = createConfigEditorSettingsFacade(editor, entryConfig, namespace, sharedState)
       facades.set(editor, facade)
     }
     return facade

package/lib/dsh-support-window.js

@@ -6,8 +6,9 @@ export const DSH_SUPPORT_WINDOW = Object.freeze({
 
 export const DSH_VERIFICATION_EVIDENCE = Object.freeze({
   exactStable: '0.1.5-rc.3',
-  exactPreview: '0.1.7-rc.2',
+  exactPreview: '0.2.0-rc.1',
   stableCanaryDistTag: 'latest',
+  nextCanaryDistTag: 'next',
   previewCanaryDistTag: 'alpha',
 })
 
@@ -48,9 +49,10 @@ export function formatDshSupportWindowLines(capabilities = {}) {
     `  support floor: DVR ${DSH_SUPPORT_WINDOW.dvrTrain} -> DSH ${DSH_SUPPORT_WINDOW.minimum}`,
     'DSH compatibility verification evidence:',
     `  exact stable: ${DSH_VERIFICATION_EVIDENCE.exactStable}`,
-    `  exact preview (not a support claim): ${DSH_VERIFICATION_EVIDENCE.exactPreview}`,
+    `  exact next/rc (not a support claim): ${DSH_VERIFICATION_EVIDENCE.exactPreview}`,
     `  scheduled stable canary: npm dist-tag ${DSH_VERIFICATION_EVIDENCE.stableCanaryDistTag}`,
-    `  scheduled preview canary: npm dist-tag ${DSH_VERIFICATION_EVIDENCE.previewCanaryDistTag}`,
+    `  scheduled next/rc canary: npm dist-tag ${DSH_VERIFICATION_EVIDENCE.nextCanaryDistTag}`,
+    `  scheduled alpha/pre-release canary: npm dist-tag ${DSH_VERIFICATION_EVIDENCE.previewCanaryDistTag}`,
     `  upgrade advice: ${advice.level} (${advice.code}) — ${advice.message}`,
   ])
 }

package/lib/http-body-limit.js

@@ -3,6 +3,7 @@ const DEFAULT_FALLBACK_MAX_BYTES = 4 * 1024 * 1024
 export const MODEL_RESPONSE_MAX_BYTES = 4 * 1024 * 1024
 export const METADATA_RESPONSE_MAX_BYTES = 512 * 1024
 export const ERROR_RESPONSE_MAX_BYTES = 64 * 1024
+export const DOCTOR_RESPONSE_MAX_BYTES = 16 * 1024
 
 function normalizedLimit(value) {
   const number = Number(value)
@@ -34,7 +35,10 @@ export async function readResponseBytesBounded(response, maxBytes, options = {})
   const limit = normalizedLimit(maxBytes)
   const label = typeof options.label === 'string' && options.label !== '' ? options.label : 'HTTP response'
   const declared = declaredLength(response)
-  if (declared !== undefined && declared > limit) throw responseTooLarge(label, limit, declared)
+  if (declared !== undefined && declared > limit) {
+    try { await response?.body?.cancel?.('response body limit exceeded') } catch { /* best effort */ }
+    throw responseTooLarge(label, limit, declared)
+  }
 
   const body = response?.body
   if (body && typeof body.getReader === 'function') {

package/lib/live-model-discovery.js

@@ -1,4 +1,4 @@
-import { createHash } from 'node:crypto'
+import { createHash, randomUUID } from 'node:crypto'
 import { mkdir, readFile, rename, writeFile } from 'node:fs/promises'
 import path from 'node:path'
 import process from 'node:process'
@@ -151,7 +151,7 @@ async function loadCache(file, fsOps) {
 
 async function saveCache(file, providers, fsOps) {
   const directory = path.dirname(file)
-  const temporary = `${file}.${process.pid}.${Date.now()}.tmp`
+  const temporary = `${file}.${process.pid}.${Date.now()}.${randomUUID()}.tmp`
   await fsOps.mkdir(directory, { recursive: true })
   const entries = [...providers.values()]
     .filter((entry) => entry && entry.routeMismatch !== true)

package/lib/local-vision-stabilizer.js

@@ -63,15 +63,25 @@ export function installLocalVisionStabilizer(ctx, config = {}, core) {
   const positive = (value, fallback) =>
     Number.isFinite(value) && value > 0 ? Number(value) : fallback
 
-  const actualConfig = () => {
+  let resolvedConfig = config
+
+  const captureConfig = (value, scope = rawScope) => {
     try {
-      const value = rawScope && typeof rawScope.get === 'function' ? rawScope.get() : config
-      return normalizeRuntimeVisionConfig(value && typeof value === 'object' ? value : config)
+      let candidate = value
+      if ((!candidate || typeof candidate !== 'object') && scope && typeof scope.get === 'function') {
+        candidate = scope.get()
+      }
+      resolvedConfig = normalizeRuntimeVisionConfig(
+        candidate && typeof candidate === 'object' ? candidate : config,
+      )
     } catch {
-      return config
+      resolvedConfig = config
     }
+    return resolvedConfig
   }
 
+  const actualConfig = () => resolvedConfig
+
   const localTaskBudget = (value = actualConfig()) =>
     Math.max(
       1000,
@@ -344,6 +354,7 @@ export function installLocalVisionStabilizer(ctx, config = {}, core) {
           if (typeof watch !== 'function') return watch
           return (listener) =>
             watch.call(target, (...args) => {
+              if (rawScope === target) captureConfig(args[0], target)
               syncScreenshot()
               return listener(...args)
             })
@@ -369,6 +380,7 @@ export function installLocalVisionStabilizer(ctx, config = {}, core) {
           const scope = target.register(namespace, schema, fixedOptions)
           if (namespace === 'vision-router') {
             rawScope = scope
+            captureConfig(undefined, scope)
             syncScreenshot()
             // The Settings service is dynamic. Never keep its scope after the
             // owning injection fiber unloads; during the gap fall back to the
@@ -378,6 +390,7 @@ export function installLocalVisionStabilizer(ctx, config = {}, core) {
                 () => () => {
                   if (rawScope !== scope) return
                   rawScope = undefined
+                  resolvedConfig = config
                   syncScreenshot()
                 },
                 'vision-router: local settings scope lifecycle',

package/lib/settings-client-017-compat.js

@@ -28,6 +28,10 @@ export const SETTINGS_017_CLIENT_PRELUDE = String.raw`(function(){
     var hostname = locationLike && typeof locationLike.hostname === 'string'
       ? locationLike.hostname.toLowerCase().replace(/^\[|\]$/g, '')
       : '';
+    var protocol = locationLike && typeof locationLike.protocol === 'string'
+      ? locationLike.protocol.toLowerCase()
+      : '';
+    if (protocol === 'dsh-app:' && hostname === 'app') return true;
     if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '::1') return true;
     return /^127(?:\.\d{1,3}){3}$/.test(hostname);
   }

package/lib/settings-client-rc8-lifecycle.js

@@ -35,6 +35,10 @@ export const SETTINGS_RC8_CLIENT_PRELUDE = String.raw`(function(){
     var hostname = locationLike && typeof locationLike.hostname === 'string'
       ? locationLike.hostname.toLowerCase().replace(/^\[|\]$/g, '')
       : '';
+    var protocol = locationLike && typeof locationLike.protocol === 'string'
+      ? locationLike.protocol.toLowerCase()
+      : '';
+    if (protocol === 'dsh-app:' && hostname === 'app') return true;
     if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '::1') return true;
     return /^127(?:\.\d{1,3}){3}$/.test(hostname);
   }

package/lib/settings-ia-client-prelude.js

@@ -13,7 +13,7 @@ export const SETTINGS_IA_CLIENT_PRELUDE = String.raw`(function(){
   function same(a,b){try{return JSON.stringify(a)===JSON.stringify(b);}catch(_){return false;}}
   function bool(value){return value===true||value==='true';}
   function rpcValue(body){if(body&&typeof body==='object'&&body.result&&typeof body.result==='object')return body.result.ok===true?body.result.value:undefined;return body;}
-  function localPage(){try{var host=String(window.location.hostname||'').toLowerCase();return host==='localhost'||host.endsWith('.localhost')||host==='::1'||host==='[::1]'||/^127(?:\.\d{1,3}){3}$/.test(host);}catch(_){return false;}}
+  function localPage(){try{var location=window.location||{},host=String(location.hostname||'').toLowerCase(),protocol=String(location.protocol||'').toLowerCase();return(protocol==='dsh-app:'&&host==='app')||host==='localhost'||host.endsWith('.localhost')||host==='::1'||host==='[::1]'||/^127(?:\.\d{1,3}){3}$/.test(host);}catch(_){return false;}}
   function builtinRow(row){return !!row&&row.provider==='vision-http'&&typeof row.model==='string'&&row.model.indexOf('ovh/')===0;}
   function cloneRow(row,model){return {provider:String(row&&row.provider||''),model:String(model===undefined?(row&&row.model||''):model),fallbacks:[]};}
   function splitChain(value){var builtins=[],users=[];function push(row,model){var next=cloneRow(row,model);(builtinRow(next)?builtins:users).push(next);}arr(value).forEach(function(row){if(!row||typeof row!=='object')return;push(row,row.model);arr(row.fallbacks).forEach(function(fallback){if(typeof fallback==='string'&&fallback.trim())push(row,fallback.trim());});});return {builtins:builtins,users:users};}

package/lib/tesseract-exec-compat.js

@@ -187,8 +187,12 @@ function callbackForwarder(execFileImpl, patchedCustom) {
   return wrapped
 }
 
-function syncIfBuiltin(moduleObject) {
-  if (moduleObject === childProcess) syncBuiltinESMExports()
+function builtinExportSynchronizer(moduleObject, options) {
+  const builtinModule = options.builtinChildProcessModule ?? childProcess
+  const synchronize = options.syncBuiltinESMExports ?? syncBuiltinESMExports
+  return () => {
+    if (moduleObject === builtinModule) synchronize()
+  }
 }
 
 function warnInstallDegraded(ctx, reason) {
@@ -217,13 +221,26 @@ export function installVisionRouterExecFileCompat(ctx, options = {}) {
   const execFileImpl = moduleObject.execFile
   let state = installStates.get(execFileImpl)
   if (state === undefined) {
+    const synchronizeBuiltinExports = builtinExportSynchronizer(moduleObject, options)
     const originalCustom = execFileImpl[promisify.custom]
     const patchedCustom = createVisionRouterExecFilePromisifyCompat(execFileImpl, originalCustom, options)
 
     if (canReplaceCustomPromisify(execFileImpl)) {
       try {
         setCustomPromisify(execFileImpl, patchedCustom)
+        // Electron can expose distinct CJS and ESM execFile function objects.
+        // Synchronize after mutating the CJS custom hook so existing ESM named
+        // imports observe the same promisify.custom compatibility function.
+        synchronizeBuiltinExports()
       } catch (error) {
+        try {
+          if (execFileImpl[promisify.custom] === patchedCustom) {
+            restoreCustomPromisify(execFileImpl, originalCustom)
+            synchronizeBuiltinExports()
+          }
+        } catch {
+          /* best effort rollback; the CJS hook is restored before re-sync */
+        }
         patchedCustom.deactivate?.()
         warnInstallDegraded(ctx, error && error.message ? error.message : String(error))
         return () => {}
@@ -236,6 +253,7 @@ export function installVisionRouterExecFileCompat(ctx, options = {}) {
         exposedExecFile: execFileImpl,
         originalCustom,
         patchedCustom,
+        synchronizeBuiltinExports,
       }
       installStates.set(execFileImpl, state)
     } else {
@@ -243,12 +261,12 @@ export function installVisionRouterExecFileCompat(ctx, options = {}) {
       try {
         moduleObject.execFile = exposedExecFile
         if (moduleObject.execFile !== exposedExecFile) throw new Error('child_process.execFile export is not writable')
-        syncIfBuiltin(moduleObject)
+        synchronizeBuiltinExports()
       } catch (error) {
         try {
           if (moduleObject.execFile === exposedExecFile) {
             moduleObject.execFile = execFileImpl
-            syncIfBuiltin(moduleObject)
+            synchronizeBuiltinExports()
           }
         } catch {
           /* best effort rollback */
@@ -265,6 +283,7 @@ export function installVisionRouterExecFileCompat(ctx, options = {}) {
         exposedExecFile,
         originalCustom,
         patchedCustom,
+        synchronizeBuiltinExports,
       }
       installStates.set(execFileImpl, state)
       installStates.set(exposedExecFile, state)
@@ -284,7 +303,10 @@ export function installVisionRouterExecFileCompat(ctx, options = {}) {
 
     if (state.mode === 'custom-property') {
       if (stillOwnsCustom) {
-        try { restoreCustomPromisify(state.execFileImpl, state.originalCustom) } catch { /* best effort */ }
+        try {
+          restoreCustomPromisify(state.execFileImpl, state.originalCustom)
+          state.synchronizeBuiltinExports()
+        } catch { /* best effort */ }
       }
     } else if (
       state.mode === 'module-wrapper' &&
@@ -293,7 +315,7 @@ export function installVisionRouterExecFileCompat(ctx, options = {}) {
     ) {
       try {
         state.moduleObject.execFile = state.execFileImpl
-        syncIfBuiltin(state.moduleObject)
+        state.synchronizeBuiltinExports()
       } catch {
         /* a later host/plugin mutation stays authoritative */
       }

package/lib/vision-background-stop-store.js

@@ -1,3 +1,4 @@
+import { randomUUID } from 'node:crypto'
 import { mkdir, readFile, rename, writeFile } from 'node:fs/promises'
 import path from 'node:path'
 import process from 'node:process'
@@ -88,7 +89,7 @@ async function load(file, fsOps, at) {
 }
 
 async function save(file, records, fsOps, at) {
-  const temporary = `${file}.${process.pid}.${Date.now()}.tmp`
+  const temporary = `${file}.${process.pid}.${Date.now()}.${randomUUID()}.tmp`
   const stops = selectRetainedStops(records.values(), at)
   await fsOps.mkdir(path.dirname(file), { recursive: true })
   await fsOps.writeFile(temporary, JSON.stringify({ version: CACHE_VERSION, stops }), { encoding: 'utf8', mode: 0o600 })

package/lib/vision-capability-probe.js

@@ -1,3 +1,4 @@
+import { randomUUID } from 'node:crypto'
 import { mkdir, readFile, rename, writeFile } from 'node:fs/promises'
 import path from 'node:path'
 import process from 'node:process'
@@ -374,7 +375,7 @@ async function loadCache(file, fsOps, maxEntries) {
 
 async function saveCache(file, records, fsOps, maxEntries) {
   const directory = path.dirname(file)
-  const temporary = `${file}.${process.pid}.${Date.now()}.tmp`
+  const temporary = `${file}.${process.pid}.${Date.now()}.${randomUUID()}.tmp`
   const profiles = selectRetainedCapabilityProfiles(records.values(), maxEntries)
   await fsOps.mkdir(directory, { recursive: true })
   await fsOps.writeFile(temporary, JSON.stringify(cacheEnvelope(profiles)), { encoding: 'utf8', mode: 0o600 })

package/lib/vision-exact-check-client.js

@@ -19,8 +19,8 @@ export const VISION_EXACT_CHECK_CLIENT = String.raw`(function(){
   function text(cn,en){ return zh() ? cn : en; }
   function localPage(){
     try {
-      var host=String(window.location.hostname||'').toLowerCase();
-      return host==='localhost'||host.endsWith('.localhost')||host==='::1'||host==='[::1]'||/^127(?:\.\d{1,3}){3}$/.test(host);
+      var location=window.location||{},host=String(location.hostname||'').toLowerCase(),protocol=String(location.protocol||'').toLowerCase();
+      return (protocol==='dsh-app:'&&host==='app')||host==='localhost'||host.endsWith('.localhost')||host==='::1'||host==='[::1]'||/^127(?:\.\d{1,3}){3}$/.test(host);
     } catch (_) { return false; }
   }
   function rowSelection(row){

package/lib/vision-image-input-verdict.js

@@ -1,3 +1,4 @@
+import { randomUUID } from 'node:crypto'
 import { mkdir, readFile, rename, writeFile } from 'node:fs/promises'
 import path from 'node:path'
 import process from 'node:process'
@@ -69,7 +70,7 @@ async function load(file, fsOps) {
 }
 
 async function save(file, records, fsOps) {
-  const temporary = `${file}.${process.pid}.${Date.now()}.tmp`
+  const temporary = `${file}.${process.pid}.${Date.now()}.${randomUUID()}.tmp`
   const verdicts = selectRetainedVerdicts(records.values())
   await fsOps.mkdir(path.dirname(file), { recursive: true })
   await fsOps.writeFile(temporary, JSON.stringify({ version: CACHE_VERSION, verdicts }), { encoding: 'utf8', mode: 0o600 })

package/lib/web/remote-settings-client.js

@@ -34,6 +34,10 @@ export const SETTINGS_CONFIG_FORMS_CLIENT_PRELUDE = String.raw`(function(){
     var hostname = locationLike && typeof locationLike.hostname === 'string'
       ? locationLike.hostname.toLowerCase().replace(/^\[|\]$/g, '')
       : '';
+    var protocol = locationLike && typeof locationLike.protocol === 'string'
+      ? locationLike.protocol.toLowerCase()
+      : '';
+    if (protocol === 'dsh-app:' && hostname === 'app') return true;
     if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '::1') return true;
     return /^127(?:\.\d{1,3}){3}$/.test(hostname);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vision-router",
-  "version": "2.2.5",
+  "version": "2.2.7",
   "description": "Eyes for text-only DeepSeek Harness agents: built-in free vision chain + pixel-level tools. Remote vision providers, including the default free fallback, receive image content unless strict local-only use is configured.",
   "license": "MIT",
   "repository": {
@@ -54,8 +54,8 @@
     "undici": "^7.29.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-anonymous-user-id": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.7-rc.2",
-    "@deepseek-ai/dsh-llm-deepseek": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.7-rc.2",
+    "@deepseek-ai/dsh-anonymous-user-id": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.7-rc.2 || >=0.2.0-rc.1 <0.3.0-0",
+    "@deepseek-ai/dsh-llm-deepseek": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.7-rc.2 || >=0.2.0-rc.1 <0.3.0-0",
     "sharp": ">=0.35.3 <1"
   },
   "peerDependenciesMeta": {
@@ -70,7 +70,7 @@
     "sharp": "^0.35.4"
   },
   "scripts": {
-    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/release-registry-identity.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/local-only-vision.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/long-ocr-empty-retry.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-event-feed.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && node --test tests/vision-backend-runtime-policy.test.js",
+    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/cache-atomic-write-concurrency.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/release-registry-identity.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/local-only-vision.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/long-ocr-empty-retry.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-event-feed.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && node --test tests/vision-backend-runtime-policy.test.js",
     "test:core": "node --test tests/core.test.js tests/degraded-local-evidence.test.js tests/runtime-e2e.test.js tests/structured-bootstrap.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-execution-policy.test.js tests/vision-backend-runtime-policy.test.js",
     "test:routing": "node --test tests/issue-374-delegated-call-config.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/vision-routing-product.test.js tests/vision-capability-router.test.js tests/vision-capability-probe.test.js tests/vision-capability-shadow-health.test.js tests/vision-runtime-performance.test.js tests/vision-background-benchmark.test.js tests/vision-image-input-verdict.test.js",
     "test:session": "node --test tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/replay-delegation.test.js tests/legacy-session-repair.test.js tests/session-repair-v2.test.js tests/issue-276-session-image-ownership.test.js",
@@ -88,9 +88,6 @@
     "quality:round2:run": "node quality/vision-round2/run-host-api.mjs",
     "quality:round2:report": "node quality/vision-round2/report-results.mjs"
   },
-  "pnpm": {
-    "onlyBuiltDependencies": ["sharp"]
-  },
   "dsh": {
     "client": {
       "platform": "web",