dsh-vision-router 2.2.8 → 3.0.0

package/lib/vision-tool-runtime-boundary.js

@@ -17,6 +17,9 @@ const toolRuntime = new AsyncLocalStorage()
 const wrappedContexts = new WeakMap()
 const runtimeStates = new WeakMap()
 const wrappedFileSystems = new WeakMap()
+// Settings proxies are cached per underlying service/scope and per runtime
+// state. Re-creating them on every `ctx.settings` read would re-run scope
+// activation and register a second lifecycle effect for the same generation.
 const wrappedSettings = new WeakMap()
 const wrappedScopes = new WeakMap()
 const wrappedLlms = new WeakMap()
@@ -104,7 +107,7 @@ function createRuntimeState(initialConfig = {}) {
   const cache = new LiveDescribeCache()
   const endpoints = new HttpEndpointRevisionTracker()
   const transparentReasoning = new Map()
-  let config = {
+  const fallbackConfig = {
     cache: true,
     cacheMaxEntries: 200,
     cacheTtlSeconds: 3600,
@@ -115,8 +118,13 @@ function createRuntimeState(initialConfig = {}) {
       ? initialConfig
       : {}),
   }
+  let config = fallbackConfig
   let signature = stableRuntimeConfigSignature(config)
   let revision = 0
+  let activeSettingsGeneration
+  // scope -> { runtimeState, token, ownsLifecycle }: the generation registry
+  // that makes repeated activation idempotent per runtime.
+  const wiredScopes = new WeakMap()
 
   const noteConfig = (value) => {
     if (!value || typeof value !== 'object' || Array.isArray(value)) return config
@@ -135,6 +143,59 @@ function createRuntimeState(initialConfig = {}) {
     return config
   }
 
+  const activateSettingsScope = (scope, ownerCtx, runtimeState) => {
+    if (!scope || (typeof scope !== 'object' && typeof scope !== 'function')) return undefined
+    // Registering the same scope twice (repeated `ctx.settings` reads, a
+    // generation that re-registers its namespace) must not stack lifecycle
+    // owners or mint a competing generation: reuse the existing one.
+    const known = wiredScopes.get(scope)
+    if (known && known.runtimeState === runtimeState) {
+      if (activeSettingsGeneration?.token !== known.token) {
+        activeSettingsGeneration = { token: known.token, scope, ownsLifecycle: known.ownsLifecycle }
+      }
+      return known.token
+    }
+    const token = {}
+    // Lifecycle ownership is an optimisation, not a precondition: a context
+    // without `effect()` (harness contexts, non-Cordis embeddings) still needs
+    // live settings to reach the runtime, but the generation must then be the
+    // most recently registered scope so a stale scope cannot outrank it.
+    let ownsLifecycle = false
+    try {
+      if (typeof ownerCtx?.effect === 'function') {
+        ownerCtx.effect(
+          () => () => {
+            if (activeSettingsGeneration?.token !== token) return
+            activeSettingsGeneration = undefined
+            noteConfig(fallbackConfig)
+          },
+          'vision-router: tool runtime settings lifecycle',
+        )
+        ownsLifecycle = true
+      }
+    } catch {
+      ownsLifecycle = false
+    }
+    wiredScopes.set(scope, { runtimeState, token, ownsLifecycle })
+    activeSettingsGeneration = { token, scope, ownsLifecycle }
+    try {
+      if (typeof scope.get === 'function') noteConfig(scope.get())
+    } catch {
+      // Boot config remains authoritative until the scope becomes readable.
+    }
+    return token
+  }
+
+  const noteSettingsConfig = (token, value) => {
+    // Only the active generation may write config. An unowned generation is
+    // still "the active one" while it is the latest registration, so a
+    // lifecycle-less context keeps its watch path exactly as before the token
+    // existed, while a retired generation can no longer resurrect stale config.
+    if (token === undefined || activeSettingsGeneration?.token !== token) return false
+    noteConfig(value)
+    return true
+  }
+
   const rememberTransparentReasoning = (key, value) => {
     if (transparentReasoning.size >= MAX_TRANSPARENT_REASONING_MEMORY && !transparentReasoning.has(key)) {
       const oldest = transparentReasoning.keys().next().value
@@ -156,6 +217,8 @@ function createRuntimeState(initialConfig = {}) {
     cache,
     endpoints,
     noteConfig,
+    activateSettingsScope,
+    noteSettingsConfig,
     config: () => config,
     revision: () => revision,
     rememberTransparentReasoning,
@@ -242,9 +305,12 @@ function wrapFileSystem(fs) {
   return wrapped
 }
 
-function projectLiveSettings(value, runtimeState) {
+function projectLiveSettings(value, runtimeState, settingsToken) {
   if (!value || typeof value !== 'object' || Array.isArray(value)) return value
-  runtimeState.noteConfig(value)
+  if (settingsToken !== undefined && runtimeState.noteSettingsConfig(settingsToken, value) !== true) {
+    return value
+  }
+  if (settingsToken === undefined) runtimeState.noteConfig(value)
   const toolState = toolRuntime.getStore()
   const httpProviders = runtimeState.endpoints.project(value.httpProviders)
   const suppressCoreCache = toolState?.disableCoreCache === true && value.cache !== false
@@ -256,21 +322,16 @@ function projectLiveSettings(value, runtimeState) {
   }
 }
 
-function wrapSettingsScope(scope, runtimeState) {
+function wrapSettingsScope(scope, runtimeState, settingsToken) {
   if (!scope || (typeof scope !== 'object' && typeof scope !== 'function')) return scope
-  let byRuntime = wrappedScopes.get(scope)
-  if (!byRuntime) {
-    byRuntime = new WeakMap()
-    wrappedScopes.set(scope, byRuntime)
-  }
-  const cached = byRuntime.get(runtimeState)
-  if (cached) return cached
+  const cached = wrappedScopes.get(scope)
+  if (cached && cached.runtimeState === runtimeState && cached.token === settingsToken) return cached.wrapped
   const wrapped = new Proxy(scope, {
     get(target, property) {
       if (property === 'get') {
         const get = Reflect.get(target, property, target)
         if (typeof get !== 'function') return get
-        return (...args) => projectLiveSettings(get.apply(target, args), runtimeState)
+        return (...args) => projectLiveSettings(get.apply(target, args), runtimeState, settingsToken)
       }
       if (property === 'watch') {
         const watch = Reflect.get(target, property, target)
@@ -278,7 +339,7 @@ function wrapSettingsScope(scope, runtimeState) {
         return (callback, ...rest) => watch.call(target, (...args) => {
           try {
             const get = Reflect.get(target, 'get', target)
-            if (typeof get === 'function') runtimeState.noteConfig(get.call(target))
+            if (typeof get === 'function') runtimeState.noteSettingsConfig(settingsToken, get.call(target))
           } catch {
             // Diagnostics refresh is best effort.
           }
@@ -289,19 +350,14 @@ function wrapSettingsScope(scope, runtimeState) {
       return typeof value === 'function' ? value.bind(target) : value
     },
   })
-  byRuntime.set(runtimeState, wrapped)
+  wrappedScopes.set(scope, { runtimeState, token: settingsToken, wrapped })
   return wrapped
 }
 
-function wrapSettingsService(settings, runtimeState) {
+function wrapSettingsService(settings, runtimeState, ownerCtx) {
   if (!settings || (typeof settings !== 'object' && typeof settings !== 'function')) return settings
-  let byRuntime = wrappedSettings.get(settings)
-  if (!byRuntime) {
-    byRuntime = new WeakMap()
-    wrappedSettings.set(settings, byRuntime)
-  }
-  const cached = byRuntime.get(runtimeState)
-  if (cached) return cached
+  const cached = wrappedSettings.get(settings)
+  if (cached && cached.runtimeState === runtimeState) return cached.wrapped
   const wrapped = new Proxy(settings, {
     get(target, property) {
       if (property === 'register') {
@@ -310,25 +366,22 @@ function wrapSettingsService(settings, runtimeState) {
         return (namespace, ...args) => {
           const scope = register.call(target, namespace, ...args)
           if (namespace !== 'vision-router') return scope
-          try {
-            if (typeof scope?.get === 'function') runtimeState.noteConfig(scope.get())
-          } catch {
-            // Core can still run from boot config if settings are late.
-          }
-          return wrapSettingsScope(scope, runtimeState)
+          const settingsToken = runtimeState.activateSettingsScope(scope, ownerCtx, runtimeState)
+          if (settingsToken === undefined) return scope
+          return wrapSettingsScope(scope, runtimeState, settingsToken)
         }
       }
       const value = Reflect.get(target, property, target)
       return typeof value === 'function' ? value.bind(target) : value
     },
   })
-  byRuntime.set(runtimeState, wrapped)
+  wrappedSettings.set(settings, { runtimeState, wrapped })
   return wrapped
 }
 
 function wrapSettingsContext(ctx, runtimeState) {
   if (!ctx || (typeof ctx !== 'object' && typeof ctx !== 'function') || !ctx.settings) return ctx
-  const settings = wrapSettingsService(ctx.settings, runtimeState)
+  const settings = wrapSettingsService(ctx.settings, runtimeState, ctx)
   return new Proxy(ctx, {
     get(target, property) {
       if (property === 'settings') return settings
@@ -540,7 +593,11 @@ function wrapLlm(llm, runtimeState) {
             : state?.callConfigAuthority === 'transparent'
               ? projectTransparentCallConfig(options, state, runtimeState)
               : options
-          return stream.call(target, projected)
+          const signal = combineSignals(projected?.signal, state?.signal)
+          const call = signal === undefined || signal === projected?.signal
+            ? projected
+            : { ...(projected ?? {}), signal }
+          return stream.call(target, call)
         }
       }
       if (property === 'registerAdapter') {
@@ -712,6 +769,22 @@ export function installVisionToolRuntimeBoundary(ctx, initialConfig = {}) {
   })
   wrappedContexts.set(ctx, wrapped)
   runtimeStates.set(wrapped, runtimeState)
+  let lifecycleOwned = false
+  try {
+    if (typeof ctx.effect === 'function') {
+      ctx.effect(
+        () => () => {
+          if (wrappedContexts.get(ctx) === wrapped) wrappedContexts.delete(ctx)
+        },
+        'vision-router: vision tool runtime context lifecycle',
+      )
+      lifecycleOwned = true
+    }
+  } catch {
+    // Keep the current returned view usable as a one-shot boundary.
+  }
+  // runtimeState captures this generation's config/cache/endpoint revision.
+  if (!lifecycleOwned && wrappedContexts.get(ctx) === wrapped) wrappedContexts.delete(ctx)
   return wrapped
 }
 

package/lib/web/dsh-settings-017-root-transport.js

@@ -55,12 +55,10 @@ function stateFor(root) {
 }
 
 function serviceOf(ctx, name) {
+  if (!ctx || (typeof ctx !== 'object' && typeof ctx !== 'function')) return undefined
+  if (typeof ctx.get !== 'function') return undefined
   try {
-    const value = typeof ctx?.get === 'function' ? ctx.get(name) : undefined
-    if (value !== undefined && value !== null) return value
-  } catch {}
-  try {
-    const value = ctx?.[name]
+    const value = ctx.get(name)
     return value === undefined || value === null ? undefined : value
   } catch {
     return undefined
@@ -283,17 +281,34 @@ export function installDsh017RootLocalSettingsTransport(ctx) {
     }
     state.current = generation
     trace('generation-mount', { generation: generation.id })
-    ensureRootRoute(root, state)
 
-    if (typeof settingsCtx?.effect === 'function') {
+    let generationDisposed = false
+    const disposeGeneration = () => {
+      if (generationDisposed) return
+      generationDisposed = true
+      generation.active = false
+      if (state.current === generation) state.current = undefined
+      trace('generation-dispose', { generation: generation.id })
+    }
+
+    try {
+      if (typeof settingsCtx?.effect !== 'function') {
+        throw new Error('Vision Router requires lifecycle ownership for the DSH 0.1.7 settings generation')
+      }
       settingsCtx.effect(
-        () => () => {
-          generation.active = false
-          if (state.current === generation) state.current = undefined
-          trace('generation-dispose', { generation: generation.id })
-        },
+        () => disposeGeneration,
         'vision-router: DSH 0.1.7 settings generation',
       )
+    } catch (error) {
+      disposeGeneration()
+      throw error
+    }
+
+    try {
+      ensureRootRoute(root, state)
+    } catch (error) {
+      disposeGeneration()
+      throw error
     }
   })
 }

package/lib/web/remote-settings-client.js

@@ -1,6 +1,6 @@
 import { injectClientCarrierHtml, installClientScriptCarriers } from '../client-script-carrier.js'
 import { installVisionRouterRemoteSettingsBridge } from '../remote-settings-bridge.js'
-import { installSettingsRc8ClientLifecycle } from '../settings-client-rc8-lifecycle.js'
+import { installSettingsClientLoaderLifecycle } from '../settings-client-loader-lifecycle.js'
 
 const SETTINGS_CONFIG_FORMS_MARK = 'data-vision-router-settings-configforms-compat'
 
@@ -20,14 +20,11 @@ export const SETTINGS_CONFIG_FORMS_CLIENT_PRELUDE = String.raw`(function(){
   var connectionCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
 
   function safeGet(ctx, name) {
-    if (!ctx) return undefined;
+    if (!ctx || typeof ctx.get !== 'function') return undefined;
     try {
-      if (typeof ctx.get === 'function') {
-        var value = ctx.get(name);
-        if (value !== undefined && value !== null) return value;
-      }
-    } catch (_) {}
-    try { return ctx[name]; } catch (_) { return undefined; }
+      var value = ctx.get(name);
+      return value === undefined || value === null ? undefined : value;
+    } catch (_) { return undefined; }
   }
 
   function isLoopbackLocation(locationLike) {
@@ -202,6 +199,6 @@ export function installSettingsConfigFormsCompat(ctx) {
 export function installVisionRemoteSettingsClient(ctx, logger) {
   installVisionRouterRemoteSettingsBridge(ctx, logger)
   installSettingsConfigFormsCompat(ctx)
-  installSettingsRc8ClientLifecycle(ctx)
+  installSettingsClientLoaderLifecycle(ctx)
   return ctx
 }

package/lib/web-capability-boundary.js

@@ -352,13 +352,23 @@ export function installLocalMutationRouteBoundary(ctx) {
           }
           return inject.call(target, dependencies, (childCtx) => {
             const getConnection = () => {
-              try {
-                if (typeof childCtx?.get === 'function') return childCtx.get('connection')
-              } catch {}
-              try {
-                if (typeof target?.get === 'function') return target.get('connection')
-              } catch {}
-              return childCtx?.connection ?? target?.connection
+              if (typeof childCtx?.get === 'function') {
+                try {
+                  const connection = childCtx.get('connection')
+                  if (connection !== undefined && connection !== null) return connection
+                } catch {}
+              }
+              if (typeof target?.get === 'function') {
+                try {
+                  const connection = target.get('connection')
+                  return connection === undefined || connection === null ? undefined : connection
+                } catch {
+                  return undefined
+                }
+              }
+              // Non-Cordis harness compatibility only. Supported DSH Hosts have
+              // Context#get from the 0.1.5 floor onward.
+              try { return childCtx?.connection ?? target?.connection } catch { return undefined }
             }
             // Preserve the ORIGINAL child context identity for rc.6 ownership,
             // but never leave our registrar wrapper visible to other plugins.

package/lib/wrapper-directory.js

@@ -165,39 +165,30 @@ export function installWrapperDirectoryAlias(ctx, baseConfig = {}, logger = ctx
     }
   }
 
-  sync()
-  // DSH's registerConfigurableProviders ties its internal cleanup to the
-  // shared LLM service context, not to this plugin's fiber: without an
-  // explicit plugin-scoped disposer the directory entry survives a plugin
-  // reload, and the reloaded instance then mistakes the stale row for an
-  // external owner and never takes the route back. Dispose through this
-  // plugin's own lifecycle so reloads re-publish cleanly.
+  // DSH registerConfigurableProviders() has been caller-fiber-owned since the
+  // supported 0.1.5 floor. This effect owns only DVR's local generation state;
+  // do not double-own or double-dispose the Host registration handle.
   if (typeof ctx.effect === 'function') {
     try {
       ctx.effect(
         () => () => {
           disposed = true
-          if (handle) {
-            const current = handle
-            handle = undefined
-            ownedProvider = undefined
-            heldKey = undefined
-            try {
-              current()
-            } catch (error) {
-              warn(
-                'vision-router: failed to dispose Models-directory alias:',
-                error && error.message ? error.message : String(error),
-              )
-            }
-          }
+          handle = undefined
+          ownedProvider = undefined
+          heldKey = undefined
         },
-        'vision-router: models-directory alias lifecycle',
+        'vision-router: models-directory alias local state',
       )
     } catch {
-      /* lifecycle wiring must not break alias sync */
+      disposed = true
+      return sync
     }
   }
+
+  // Establish the generation owner before publishing a directory alias or
+  // subscribing to events that could later republish it.
+  sync()
+  if (disposed) return sync
   if (typeof ctx.on === 'function') {
     ctx.on('llm/adapters-updated', sync)
     ctx.on('settings/updated', (ns) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vision-router",
-  "version": "2.2.8",
+  "version": "3.0.0",
   "description": "Eyes for text-only DeepSeek Harness agents: built-in free vision chain + pixel-level tools. Remote vision providers, including the default free fallback, receive image content unless strict local-only use is configured.",
   "license": "MIT",
   "repository": {
@@ -14,7 +14,10 @@
     "dsh-vision-router": "./lib/doctor-cli-p0.js"
   },
   "exports": {
-    ".": "./lib/public-entry.js",
+    ".": {
+      "types": "./lib/public-entry.d.ts",
+      "default": "./lib/public-entry.js"
+    },
     "./client": "./lib/client.js",
     "./package.json": "./package.json",
     "./cordis.patch.yml": "./cordis.patch.yml"
@@ -51,33 +54,49 @@
     "@deepseek-ai/schemastery": ">=3.18.0",
     "potrace": "^2.1.8",
     "puppeteer-core": "^25.6.0",
-    "undici": "^7.29.0"
+    "undici": "^7.29.0",
+    "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-anonymous-user-id": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.7-rc.2 || >=0.2.0-rc.1 <0.3.0-0",
-    "@deepseek-ai/dsh-llm-deepseek": "^0.1.0-rc.8 || ^0.1.1-rc.1 || ^0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.5-rc.3 || 0.1.6-alpha.1 || 0.1.7-rc.2 || >=0.2.0-rc.1 <0.3.0-0",
-    "sharp": ">=0.35.3 <1"
+    "@deepseek-ai/dsh-anonymous-user-id": ">=0.1.5-rc.1 <0.2.0-0 || >=0.2.0-rc.2 <0.3.0-0",
+    "@deepseek-ai/dsh-llm-deepseek": ">=0.1.5-rc.1 <0.2.0-0 || >=0.2.0-rc.2 <0.3.0-0",
+    "sharp": ">=0.35.3 <1",
+    "@deepseek-ai/dsh-storage-domain": ">=0.1.5-rc.1 <0.2.0-0 || >=0.2.0-rc.2 <0.3.0-0"
   },
   "peerDependenciesMeta": {
-    "@deepseek-ai/dsh-anonymous-user-id": { "optional": true },
-    "@deepseek-ai/dsh-llm-deepseek": { "optional": true },
-    "sharp": { "optional": true }
+    "@deepseek-ai/dsh-anonymous-user-id": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm-deepseek": {
+      "optional": true
+    },
+    "sharp": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-storage-domain": {
+      "optional": true
+    }
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-anonymous-user-id": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm-deepseek": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-anonymous-user-id": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek": "0.2.0-rc.2",
     "fast-check": "4.10.0",
-    "sharp": "^0.35.4"
+    "sharp": "^0.35.4",
+    "typescript": "6.0.3",
+    "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
+    "@types/node": "22.20.0",
+    "@deepseek-ai/dsh-storage-domain": "0.2.0-rc.2"
   },
   "scripts": {
-    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/cache-atomic-write-concurrency.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/rc6-real-settings-persistence.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/release-registry-identity.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/local-only-vision.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/android-attachment-compat.test.js tests/free-cloud-first.test.js tests/rc6-rc7-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/long-ocr-empty-retry.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-event-feed.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && node --test tests/vision-backend-runtime-policy.test.js",
+    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/cache-atomic-write-concurrency.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/release-registry-identity.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/activation-shim-contract.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/architecture-2.3-gate.test.js tests/esm-cycle-audit.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/local-only-vision.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/vision-diagnostics-routes.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/free-cloud-first.test.js tests/dsh-host-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/issue-606-session-source-ownership.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/provider-probe-proxy-scope.test.js tests/lifecycle-invariants.test.js tests/vision-tool-settings-generation.test.js tests/release-package-content-identity.test.js tests/release-state-machine.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/long-ocr-empty-retry.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-event-feed.test.js tests/session-vision-policy.test.js tests/session-vision-policy-domain.test.js tests/session-vision-delegation.test.js tests/session-vision-delegation-boundary.test.js tests/subagent-vision-inheritance-characterization.test.js tests/subagent-vision-runtime-integration.test.js tests/subagent-vision-cold-resume.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && pnpm test:regression-closure && node --test tests/vision-backend-runtime-policy.test.js",
     "test:core": "node --test tests/core.test.js tests/degraded-local-evidence.test.js tests/runtime-e2e.test.js tests/structured-bootstrap.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-execution-policy.test.js tests/vision-backend-runtime-policy.test.js",
     "test:routing": "node --test tests/issue-374-delegated-call-config.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/vision-routing-product.test.js tests/vision-capability-router.test.js tests/vision-capability-probe.test.js tests/vision-capability-shadow-health.test.js tests/vision-runtime-performance.test.js tests/vision-background-benchmark.test.js tests/vision-image-input-verdict.test.js",
-    "test:session": "node --test tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/replay-delegation.test.js tests/legacy-session-repair.test.js tests/session-repair-v2.test.js tests/issue-276-session-image-ownership.test.js",
+    "test:session": "node --test tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-policy.test.js tests/session-vision-delegation.test.js tests/session-vision-delegation-boundary.test.js tests/subagent-vision-inheritance-characterization.test.js tests/subagent-vision-runtime-integration.test.js tests/subagent-vision-cold-resume.test.js tests/session-vision-policy-domain.test.js tests/replay-delegation.test.js tests/legacy-session-repair.test.js tests/session-repair-v2.test.js tests/issue-276-session-image-ownership.test.js",
     "test:resources": "node --test tests/artifact-path-security.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js",
-    "test:compat": "node --test tests/adapter-prepare-call-compat.test.js tests/attachment-admission-policy.test.js tests/rc6-rc7-compat.test.js tests/rc6-real-settings-persistence.test.js tests/android-attachment-compat.test.js tests/http-compat.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/native-image-coexistence.test.js tests/tesseract-node24-boot.test.js tests/dsh-host-capabilities.test.js",
+    "test:compat": "node --test tests/adapter-prepare-call-compat.test.js tests/attachment-admission-policy.test.js tests/dsh-host-compat.test.js tests/http-compat.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/native-image-coexistence.test.js tests/tesseract-node24-boot.test.js tests/dsh-host-capabilities.test.js",
     "test:web": "node --test tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-acceptance-regression.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/local-remote-settings-permission.test.js tests/v2-settings-ia-integration.test.js tests/logging-ui.test.js",
-    "test:contract": "node --test tests/manifest-dependencies.test.js tests/bundle-defaults.test.js tests/zero-regression-gate.test.js tests/issue-289-native-nonintervention.test.js tests/issue-374-delegated-call-config.test.js tests/runtime-boundary-fixes.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/adapter-prepare-call-compat.test.js tests/rc6-rc7-compat.test.js tests/attachment-admission-policy.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js",
+    "test:contract": "node --test tests/manifest-dependencies.test.js tests/bundle-defaults.test.js tests/zero-regression-gate.test.js tests/issue-289-native-nonintervention.test.js tests/issue-374-delegated-call-config.test.js tests/runtime-boundary-fixes.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/adapter-prepare-call-compat.test.js tests/dsh-host-compat.test.js tests/attachment-admission-policy.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js",
     "test:grounding": "node --test tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/vision-capability-grounding-proof-contract.test.js",
     "test:stress": "node scripts/image-resource-stress.mjs && node --test tests/large-image-resource-integration.test.js tests/resource-retention-lifecycle.test.js",
     "test:adversarial-fuzz": "node scripts/security-adversarial-fuzz.mjs",
@@ -86,7 +105,22 @@
     "quality:round2:render": "node quality/vision-round2/render-fixtures.mjs",
     "quality:round2:template": "node quality/vision-round2/make-run-template.mjs",
     "quality:round2:run": "node quality/vision-round2/run-host-api.mjs",
-    "quality:round2:report": "node quality/vision-round2/report-results.mjs"
+    "quality:round2:report": "node quality/vision-round2/report-results.mjs",
+    "client:sync": "node scripts/sync-client-embedded-modules.mjs && pnpm build",
+    "client:check": "node scripts/sync-client-embedded-modules.mjs --check && pnpm build:check",
+    "build": "node scripts/build-source-artifacts.mjs",
+    "build:check": "node scripts/build-source-artifacts.mjs --check",
+    "pretest": "pnpm build",
+    "build:reproducible": "node scripts/verify-build-reproducibility.mjs",
+    "typecheck:host": "tsc -p tsconfig.host.json",
+    "typecheck:client": "tsc -p tsconfig.client.json",
+    "typecheck:declaration": "tsc -p tsconfig.declaration.json",
+    "typecheck": "pnpm typecheck:host && pnpm typecheck:client && pnpm typecheck:declaration",
+    "prepare": "pnpm build",
+    "prepack": "pnpm build",
+    "lint": "node scripts/lint-source-ownership.mjs && node scripts/lint-lifecycle-invariants.mjs",
+    "source:artifact:check": "node scripts/verify-source-artifact-map.mjs",
+    "test:regression-closure": "node --test tests/auto-wrap-model-removal.test.js tests/guard-stop-surface-shadow.test.js tests/release-package-content-identity.test.js tests/settings-card-race-safety.test.js tests/settings-guide-replay-safety.test.js tests/settings-ia-targeted-adversarial.test.js tests/v2-release-acceptance-regressions.test.js tests/vision-turn-budget-client-prelude.test.js tests/wrapper-scope-client-prelude.test.js"
   },
   "dsh": {
     "client": {
@@ -94,11 +128,13 @@
       "inject": [
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-primitives",
-        "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-client-connection",
         "@deepseek-ai/dsh-api-remotes"
       ]
     },
-    "bundle": { "patch": "./cordis.patch.yml" }
-  }
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "types": "lib/public-entry.d.ts"
 }