dsh-vision-router 3.0.0 → 3.0.2

package/lib/dsh-support-window.js

@@ -24,7 +24,10 @@ export function supportWindowUpgradeAdvice(capabilities = {}) {
     })
   }
 
-  if (batchAttachments === 'unknown' || maxImageDimension === 'unknown') {
+  // Capability evidence is tri-state (`true` / `false` / `'unknown'`). Only an
+  // explicit `true` proves the support floor, so a missing field, a wrong-typed
+  // value and `'unknown'` all mean "not proven" rather than "capable".
+  if (batchAttachments !== true || maxImageDimension !== true) {
     return Object.freeze({
       level: 'unknown',
       code: 'HOST_CURRENT_FLOOR_UNKNOWN',

package/lib/file-logger.js

@@ -4,6 +4,7 @@ import process from 'node:process'
 import { execFile } from 'node:child_process'
 import { format as formatArgs, promisify } from 'node:util'
 import { createRequire } from 'node:module'
+import { redactCredentialShapes } from './diagnostic-redaction.js'
 import { resolveDshHome } from './doctor.js'
 import { isLoopbackRequest } from './web-capability-boundary.js'
 
@@ -32,20 +33,19 @@ export function resolveVisionRouterLogPaths(dshHome = resolveDshHome()) {
  * Diagnostics are intended to be shareable in bug reports. Existing runtime
  * messages should not contain secrets, but redact common credential shapes as
  * defense in depth before anything reaches disk.
+ *
+ * The shape list lives in one place now: this module used to carry its own
+ * subset, which leaked `Authorization: token ghp_…`, `Cookie:` headers, bare
+ * platform tokens and `#token=` fragments that the other copy already covered.
  */
 export function sanitizeLogText(value) {
-  let text = String(value ?? '')
-  text = text.replace(/\bBearer\s+[A-Za-z0-9._~+/=-]{8,}/gi, 'Bearer [REDACTED]')
-  text = text.replace(/\bsk-(?:proj-)?[A-Za-z0-9_-]{8,}\b/g, '[REDACTED_KEY]')
-  text = text.replace(
+  // Query strings here keep the historical `key=`/`auth=` spelling; everything
+  // else (schemes, cookies, vendor keys, JWTs) comes from the shared pass.
+  const text = String(value ?? '').replace(
     /([?&](?:api[_-]?key|access[_-]?token|token|key|auth)=)[^&\s]+/gi,
     '$1[REDACTED]',
   )
-  text = text.replace(
-    /\b(authorization|api[_-]?key|access[_-]?token)\s*[:=]\s*["']?[^\s"',}]+/gi,
-    '$1=[REDACTED]',
-  )
-  return text
+  return redactCredentialShapes(text)
 }
 
 function positiveInteger(value, fallback) {

package/lib/image-offload-compat.js

@@ -15,8 +15,15 @@ export function isOffloadedImageBlock(block) {
     const value = objectRecord(block);
     return value?.type === 'image' && value.offloaded === true;
 }
-export function blocksHaveRetainedImage(content) {
-    if (!Array.isArray(content))
+/**
+ * Deepest content nesting this walker inspects, mirroring the bound
+ * `catalog-corrections.convertBlocks` already applies to the same block tree.
+ * The walker only needs message → content → nested content; an unbounded
+ * recursion would turn a pathological tree into a stack overflow.
+ */
+const MAX_CONTENT_NESTING_DEPTH = 4;
+export function blocksHaveRetainedImage(content, depth = 0) {
+    if (!Array.isArray(content) || depth > MAX_CONTENT_NESTING_DEPTH)
         return false;
     for (const block of content) {
         const value = objectRecord(block);
@@ -24,7 +31,7 @@ export function blocksHaveRetainedImage(content) {
             continue;
         if (value.type === 'image' && value.offloaded !== true)
             return true;
-        if (Array.isArray(value.content) && blocksHaveRetainedImage(value.content))
+        if (Array.isArray(value.content) && blocksHaveRetainedImage(value.content, depth + 1))
             return true;
     }
     return false;

package/lib/local-vision-stabilizer.js

@@ -4,6 +4,7 @@ import { tmpdir } from 'node:os'
 import path from 'node:path'
 import { promisify } from 'node:util'
 import { sameOriginRequest } from './adversarial-hardening.js'
+import { objectRecord } from './core-primitives.js'
 import { normalizeRuntimeVisionConfig } from './runtime-config-normalizer.js'
 import { isOffloadedImageBlock, offloadedImagePlaceholder } from './image-offload-compat.js'
 
@@ -14,12 +15,13 @@ import { isOffloadedImageBlock, offloadedImagePlaceholder } from './image-offloa
  * specific to opt-in local vision, while non-local providers continue through
  * the original adapters byte-for-byte.
  */
-export async function triggerDesktopScreenshotPermission({
-  platform = typeof process !== 'undefined' ? process.platform : '',
-  run = promisify(execFile),
-  remove = unlink,
-  tempDir = tmpdir(),
-} = {}) {
+export async function triggerDesktopScreenshotPermission(rawOptions) {
+  const {
+    platform = typeof process !== 'undefined' ? process.platform : '',
+    run = promisify(execFile),
+    remove = unlink,
+    tempDir = tmpdir(),
+  } = objectRecord(rawOptions) ?? {}
   // Windows has no Screen Recording privacy prompt equivalent and Linux
   // capture permission is compositor-specific. macOS is the platform where
   // enabling this feature must proactively cross an OS privacy boundary.
@@ -43,7 +45,7 @@ export async function triggerDesktopScreenshotPermission({
   }
 }
 
-export function installLocalVisionStabilizer(ctx, config = {}, core) {
+export function installLocalVisionStabilizer(ctx, config = {}, core, installOptions = {}) {
   config = normalizeRuntimeVisionConfig(config)
   if (!ctx || typeof ctx !== 'object') return { ctx, bootConfig: config }
 
@@ -270,6 +272,7 @@ export function installLocalVisionStabilizer(ctx, config = {}, core) {
             const text = await core.callLocalBackend(local, await localMessages(options), {
               maxTokens: local.maxTokens ?? 4096,
               signal: options.signal,
+              providerTransport: installOptions?.providerTransport,
               resolveCredential,
             })
             if (text !== '') {

package/lib/native-image-coexistence.js

@@ -1,4 +1,10 @@
 import { AsyncLocalStorage } from 'node:async_hooks'
+import {
+  VISION_ROUTER_ADAPTER_OWNER,
+  isVisionRouterOwnedAdapter,
+} from './adapter-ownership.js'
+
+export { VISION_ROUTER_ADAPTER_OWNER, isVisionRouterOwnedAdapter }
 
 /**
  * Turn-local image ownership used by the public entry composition.
@@ -21,7 +27,8 @@ export const IMAGE_OWNERSHIP = Object.freeze({
  * an enumerable symbol also survives the rare Object.assign/object-spread
  * adapter wrapper. Normal JSON/Object.keys surfaces still ignore symbols.
  */
-export const VISION_ROUTER_ADAPTER_OWNER = Symbol.for('dsh-vision-router.adapter-owner')
+// The symbol and the ownership rule are owned by ./adapter-ownership.ts and
+// re-exported here so existing importers keep working unchanged.
 
 const imageTurn = new AsyncLocalStorage()
 const markedAdapters = new WeakMap()
@@ -166,6 +173,9 @@ export function visionRouterAdapterOwner(adapter) {
   }
 }
 
+// isVisionRouterOwnedAdapter is owned by ./adapter-ownership.ts (imported and
+// re-exported at the top of this file) so every caller shares one rule.
+
 function routeList(routes) {
   const list = Array.isArray(routes) ? routes : [routes]
   return list

package/lib/proxy-routing.js

@@ -22,10 +22,25 @@ export function canonicalProxyHost(value) {
         host = host.slice(0, -1);
     if (host === '')
         return '';
+    // A `*.host` entry means "this host and its subdomains", which is exactly what the matcher
+    // already does for a bare hostname. `domainToASCII` rejects the star, so leaving it in place
+    // makes the entry equal no real hostname: the configured host silently proxies nothing.
+    if (host.startsWith('*.'))
+        host = host.slice(2);
+    if (host === '')
+        return '';
     // WHATWG URL.hostname keeps IPv6 literals bracketed. domainToASCII does not
-    // accept a bare IPv6 literal, so preserve the bracketed spelling and only
-    // case-fold it. Proxy hosts are otherwise DNS names and can be IDNA-folded.
-    if (host.startsWith('[') && host.endsWith(']'))
+    // accept an IPv6 literal at all, so case-fold it directly. The brackets are
+    // pure spelling for the same address: stripping them is what lets a configured
+    // `::1` match a URL-derived `[::1]`. A bracketed non-literal (say
+    // `[example.com]`) keeps its spelling, so nothing about DNS is widened.
+    if (host.startsWith('[') && host.endsWith(']')) {
+        const literal = host.slice(1, -1).trim();
+        if (literal === '')
+            return '';
+        return literal.includes(':') ? literal.toLowerCase() : host.toLowerCase();
+    }
+    if (host.includes(':'))
         return host.toLowerCase();
     const ascii = domainToASCII(host);
     return (ascii || host).toLowerCase();

package/lib/remote-settings-risk-client-boundary.js

@@ -4,8 +4,13 @@
  *
  * PRODUCT CONTRACT (2.3+): acceptedRisk is reminder/friction only. It is not
  * authentication, authorization, local-presence proof, or a credential.
+ *
+ * This function is serialized with `toString()` into the browser boundary source
+ * below, so its body must stay self-contained: no imported helper and no free
+ * identifier may appear inside it.
  */
-export function createRemoteSettingsRiskClientBoundary(options = {}) {
+export function createRemoteSettingsRiskClientBoundary(rawOptions) {
+  var options = rawOptions !== null && typeof rawOptions === 'object' ? rawOptions : {}
   var confirmImpl = options.confirmImpl
   var alertImpl = options.alertImpl
   var locale = options.locale

package/lib/runtime-composition.js

@@ -98,7 +98,7 @@ function legacyCoreVisionSettings(ctx, fallback) {
   return { ...current, autoActivateOnImage: false }
 }
 
-function installHostAndSecurityBoundaries(ctx, config, core) {
+function installHostAndSecurityBoundaries(ctx, config, core, providerTransport) {
   // SessionVisionIndex calls planGuardStopShadows before Core.apply. Keep that
   // one helper behind the live-locale facade; the final Core itself still gets
   // the ordinary composition identity and is localized by the scoped context.
@@ -144,6 +144,7 @@ function installHostAndSecurityBoundaries(ctx, config, core) {
     ollamaColdStartCtx,
     hardenedConfig,
     core,
+    { providerTransport },
   )
 
   const routingProduct = resolveVisionRoutingProduct(bootConfig)
@@ -260,7 +261,7 @@ function createRuntimeOwners(host, core) {
   }
 }
 
-function installRoutingAndHostProducts(host, owners, core) {
+function installRoutingAndHostProducts(host, owners, core, providerTransport) {
   const { capabilityStore, logging, runtimeConfig, runtimePerformanceStore } = host
   const { sessionVisionModeCompat } = owners
   // Final structured-flow guard sits closest to core.apply so it sees the
@@ -281,7 +282,7 @@ function installRoutingAndHostProducts(host, owners, core) {
     runtimeConfig,
     core,
     capabilityStore,
-    { logger: logging.logger },
+    { logger: logging.logger, providerTransport },
   )
   const sessionTurnResolver = createSessionTurnResolver(backgroundProfiling.ctx)
   const sessionEventTailReader = createSessionEventTailReader(backgroundProfiling.ctx)
@@ -479,9 +480,10 @@ function applyMatureCoreBridge(host, owners, routing, execution, core, runtime)
 }
 
 export function applyVisionRuntimeComposition(ctx, config = {}, core, runtime = {}) {
-  const host = installHostAndSecurityBoundaries(ctx, config, core)
+  const providerTransport = runtime?.providerTransport
+  const host = installHostAndSecurityBoundaries(ctx, config, core, providerTransport)
   const owners = createRuntimeOwners(host, core)
-  const routing = installRoutingAndHostProducts(host, owners, core)
-  const execution = installExecutionBoundaries(host, owners, routing, core, runtime?.providerTransport)
+  const routing = installRoutingAndHostProducts(host, owners, core, providerTransport)
+  const execution = installExecutionBoundaries(host, owners, routing, core, providerTransport)
   return applyMatureCoreBridge(host, owners, routing, execution, core, runtime)
 }

package/lib/session-vision-mode-authority.js

@@ -1,6 +1,6 @@
 import { AsyncLocalStorage } from 'node:async_hooks';
+import { isVisionRouterOwnedAdapter } from './adapter-ownership.js';
 import { parseSessionVisionPolicy } from './session-vision-policy.js';
-const VISION_ROUTER_ADAPTER_OWNER = Symbol.for('dsh-vision-router.adapter-owner');
 const VISION_ROUTER_OWNERSHIP = 'vision-router-owned';
 const DEFAULT_WRAPPER_ROUTE = 'deepseek-vision';
 const DEFAULT_CHAIN_ROUTE = 'vision-chain';
@@ -139,12 +139,7 @@ function currentAdapter(ctx, provider) {
 function adapterOwnedByVisionRouter(adapter) {
     if (!isWeakKey(adapter))
         return false;
-    try {
-        return objectRecord(adapter)?.[VISION_ROUTER_ADAPTER_OWNER] !== undefined;
-    }
-    catch {
-        return false;
-    }
+    return isVisionRouterOwnedAdapter(adapter);
 }
 function sameRoute(left, right) {
     const rightRoute = routeFrom(right);

package/lib/session-vision-policy.js

@@ -12,12 +12,15 @@ export function parseSessionVisionPolicy(value) {
     if (value === null || typeof value !== 'object' || Array.isArray(value))
         return undefined;
     const record = value;
-    if (record.revision !== SESSION_VISION_POLICY_REVISION)
+    // Own keys only: a policy row is persisted JSON, so a value inherited from a
+    // prototype is evidence of a malformed row rather than of a policy.
+    if (!Object.hasOwn(record, 'revision') || record.revision !== SESSION_VISION_POLICY_REVISION)
         return undefined;
-    if (typeof record.enabled !== 'boolean')
+    if (!Object.hasOwn(record, 'enabled') || typeof record.enabled !== 'boolean')
         return undefined;
-    if (record.source !== 'user' && record.source !== 'delegation')
+    if (!Object.hasOwn(record, 'source') || (record.source !== 'user' && record.source !== 'delegation')) {
         return undefined;
+    }
     if (record.source === 'user') {
         if (record.inheritedFrom !== undefined)
             return undefined;
@@ -27,7 +30,9 @@ export function parseSessionVisionPolicy(value) {
             source: 'user',
         });
     }
-    const inheritedFrom = nonEmptyString(record.inheritedFrom);
+    const inheritedFrom = Object.hasOwn(record, 'inheritedFrom')
+        ? nonEmptyString(record.inheritedFrom)
+        : undefined;
     if (inheritedFrom === undefined)
         return undefined;
     return Object.freeze({

package/lib/settings-client-017-compat.js

@@ -197,13 +197,17 @@ export const SETTINGS_017_CLIENT_PRELUDE = String.raw`(function(){
       get: function(target, property) {
         if (property === 'settingsScope') {
           var original = safeGet(target, 'settingsScope');
-          if (original && typeof original.bind === 'function') return original;
           // DSH 0.1.7 configForms only mirrors Config fields declared volatile.
           // DVR must keep its public Config ordinary for the older supported Host
           // window, so its namespace intentionally uses the local-only ConfigEditor
-          // bridge while other namespaces may still delegate to native configForms.
+          // bridge. Even when a Host exposes a legacy-shaped settingsScope, its
+          // vision-router view may be empty; keep it only as the delegate for
+          // every other namespace instead of letting it bypass the local bridge.
           var official = configFormsBinder(target);
-          return syntheticBinder(ctx, official);
+          return syntheticBinder(
+            ctx,
+            original && typeof original.bind === 'function' ? original : official
+          );
         }
         if (property === 'get') {
           var getter = Reflect.get(target, property, target);

package/lib/settings-number-contract.js

@@ -10,7 +10,9 @@ export const SETTINGS_NUMBER_META = Object.freeze({
 })
 
 export function parseSettingsNumber(key, raw, { allowClear = false } = {}) {
-  const meta = SETTINGS_NUMBER_META[key]
+  // Own keys only: a bare lookup would resolve inherited names such as
+  // `__proto__` or `constructor` to prototype machinery instead of "unknown key".
+  const meta = Object.hasOwn(SETTINGS_NUMBER_META, key) ? SETTINGS_NUMBER_META[key] : undefined
   if (!meta) return undefined
   if (raw === '' || raw === null || raw === undefined) return allowClear ? { clear: true } : undefined
   const value = Number(raw)

package/lib/vision-background-benchmark.js

@@ -758,7 +758,7 @@ export function createBackgroundCapabilityProfiler({
       }, interval)
       try { policyTimer?.unref?.() } catch {}
 
-      const runner = runAxisBenchmark ?? ((args) => runAxis({ ...args, options: invokerOptions }))
+      const runner = runAxisBenchmark ?? runAxis
       await runner({
         ctx,
         config: current,
@@ -768,6 +768,7 @@ export function createBackgroundCapabilityProfiler({
         axis: work.axis,
         signal: controller.signal,
         logger,
+        options: invokerOptions,
         onProgress(progress = {}) {
           if (!runningWork || runningWork.candidate.key !== work.candidate.key || runningWork.axis !== work.axis) return
           const completed = Math.max(0, Number(progress.completed) || 0)
@@ -999,6 +1000,16 @@ export function installBackgroundCapabilityProfiling(ctx, config, core, store, o
   const logger = options.logger ?? ctx?.logger
   const imageVerdictStore = options.imageVerdictStore ?? createImageInputVerdictStore({ logger })
   const backgroundStopStore = options.backgroundStopStore ?? createBackgroundBenchmarkStopStore({ logger })
+  // Provider transport is one explicit runtime capability shared by automatic
+  // profiling and the user-triggered exact check. Top-level ownership wins so
+  // a stale nested test/customization bag cannot silently bypass live proxy
+  // policy after composition or HMR changes.
+  const invokerOptions = {
+    ...(options.invokerOptions ?? {}),
+    ...(options.providerTransport === undefined
+      ? {}
+      : { providerTransport: options.providerTransport }),
+  }
   const profiler = createBackgroundCapabilityProfiler({
     ctx,
     config,
@@ -1006,6 +1017,7 @@ export function installBackgroundCapabilityProfiling(ctx, config, core, store, o
     store,
     logger,
     ...options,
+    invokerOptions,
     imageVerdictStore,
     backgroundStopStore,
   })
@@ -1120,7 +1132,7 @@ export function installBackgroundCapabilityProfiling(ctx, config, core, store, o
               provider: body.provider,
               model: body.model,
               signal: AbortSignal.timeout(VISION_CHECK_TIMEOUT_MS),
-              invokerOptions: options.invokerOptions ?? {},
+              invokerOptions,
             })
             await profiler.recordImageSupported(body.provider, body.model)
             sendJson(res, 200, result)

package/lib/vision-background-stop-store-core.js

@@ -105,8 +105,20 @@ async function load(file, fsOps, at) {
             return new Map();
         }
         const records = retainedStopMap(stops, at);
-        if (version === 2)
-            await save(file, records, fsOps, at);
+        // Rewrite whenever loading changed the persisted set: v2 stored raw entries
+        // that this version must drop, and any later retention rule (category,
+        // expiry, fingerprint shape) has to reach the file the same way instead of
+        // leaving a stale record that only the runtime filter happens to hide.
+        if (version === 2 || records.size !== stops.length) {
+            try {
+                await save(file, records, fsOps, at);
+            }
+            catch {
+                // This rewrite is opportunistic: a read-only or full disk must not discard the records
+                // the load could still read (the catch below returns an empty map). The store's own
+                // persist() retries the write and reports it through the logger.
+            }
+        }
         return records;
     }
     catch (error) {

package/lib/vision-diagnostics-routes.js

@@ -106,7 +106,15 @@ export function installVisionDiagnosticsRoutes(ctx, options = {}) {
   // inside the adapter's proxy scope) do not have. Use the fetch the boundary
   // currently owns, with the module-load capture as the fallback.
   const injectedFetch = typeof options.fetchImpl === 'function' ? options.fetchImpl : undefined
-  const resolveFetch = () => injectedFetch ?? currentLegacyGlobalProxyFetch() ?? moduleFetch
+  // Probes must describe the egress real vision turns use. That egress is the
+  // Router-owned provider transport, which also owns the proxy/proxyHosts decision;
+  // the legacy pair scope below only covers non-router-owned providers, so a
+  // vision-http direct backend would otherwise probe with ambient fetch.
+  const transport = options.transport
+  const transportFetch = typeof transport?.fetch === 'function'
+    ? (input, init) => transport.fetch(input, init, { allowProxy: true })
+    : undefined
+  const resolveFetch = () => injectedFetch ?? transportFetch ?? currentLegacyGlobalProxyFetch() ?? moduleFetch
   const connectionConfig = () => {
     try {
       const live = ctx?.get?.('settings')?.get?.('vision-router')

package/lib/vision-model-visibility-boundary-main.js

@@ -419,6 +419,7 @@ export const VISION_MODEL_VISIBILITY_PRELUDE = String.raw`(function(){
       function create() {
         var result = originalCreate.apply(this, arguments);
         patchLoader(loader);
+        if (result && result !== loader) patchLoader(result);
         return result;
       }
       try { Object.defineProperty(create, '__visionRouterModelVisibility', { value: true }); } catch (_) {}
@@ -427,31 +428,29 @@ export const VISION_MODEL_VISIBILITY_PRELUDE = String.raw`(function(){
   }
 
   function install() {
-    if (window.__ModuleLoader__) {
-      patchLoader(window.__ModuleLoader__);
-      return;
-    }
     var descriptor = Object.getOwnPropertyDescriptor(window, '__ModuleLoader__');
+    var current;
+    try { current = window.__ModuleLoader__; } catch (_) { current = undefined; }
+    if (current) patchLoader(current);
     if (descriptor && descriptor.configurable === false) return;
-    var stored;
+    var previousGet = descriptor && descriptor.get;
+    var previousSet = descriptor && descriptor.set;
+    var stored = descriptor && Object.prototype.hasOwnProperty.call(descriptor, 'value')
+      ? descriptor.value
+      : current;
     Object.defineProperty(window, '__ModuleLoader__', {
       configurable: true,
-      enumerable: true,
-      get: function(){ return stored; },
+      enumerable: !descriptor || descriptor.enumerable !== false,
+      get: function(){ return previousGet ? previousGet.call(window) : stored; },
       set: function(value) {
-        stored = value;
-        patchLoader(value);
-        Object.defineProperty(window, '__ModuleLoader__', {
-          configurable: true,
-          enumerable: true,
-          writable: true,
-          value: stored
-        });
+        if (previousSet) previousSet.call(window, value); else stored = value;
+        try { patchLoader(previousGet ? previousGet.call(window) : value); } catch (_) {}
       }
     });
+    if (stored) patchLoader(stored);
   }
 
-  install();
+  try { install(); } catch (_) {}
 })();`
 
 export function injectVisionModelVisibilityBoundary(html) {

package/lib/vision-resilience.js

@@ -109,6 +109,35 @@ export function kindForHttpStatus(status) {
   return undefined
 }
 
+/** Read one field without letting a hostile getter escape the classifier. */
+function safeFailureField(error, name) {
+  try {
+    return error === null || error === undefined ? undefined : error[name]
+  } catch {
+    return undefined
+  }
+}
+
+/** Read the human-readable text; a throwing toString() must not escape either. */
+function safeFailureText(error) {
+  try {
+    return String(safeFailureField(error, 'message') ?? error ?? '')
+  } catch {
+    return ''
+  }
+}
+
+/** Map a branded error code to a kind using own keys only (no prototype hits). */
+function kindForCode(code) {
+  let key
+  try {
+    key = code === null || code === undefined ? '' : String(code)
+  } catch {
+    key = ''
+  }
+  return Object.hasOwn(CODE_KIND_MAP, key) ? CODE_KIND_MAP[key] : undefined
+}
+
 /**
  * Classify a backend failure into the shared taxonomy plus a provider-retry
  * verdict. Deterministic failures (AUTH / INVALID_REQUEST / REGION / TOS)
@@ -117,8 +146,8 @@ export function kindForHttpStatus(status) {
  * the task deadline still has budget.
  */
 export function classifyVisionFailure(error) {
-  const message = String((error && error.message) ?? error ?? '')
-  let kind = CODE_KIND_MAP[(error && error.code) ?? ''] ?? kindForHttpStatus(error && error.status)
+  const message = safeFailureText(error)
+  let kind = kindForCode(safeFailureField(error, 'code')) ?? kindForHttpStatus(safeFailureField(error, 'status'))
   if (kind === undefined) {
     for (const [candidate, patterns] of KIND_BY_PATTERN) {
       if (patterns.some((pattern) => pattern.test(message))) {

package/lib/vision-tool-runtime-boundary.js

@@ -11,6 +11,7 @@ import {
   LiveDescribeCache,
 } from './runtime-reliability.js'
 import { projectDelegatedCallConfig } from './delegated-call-config.js'
+import { isVisionRouterOwnedAdapter } from './adapter-ownership.js'
 import { VISION_RESULT_CODES } from './vision-resilience.js'
 
 const toolRuntime = new AsyncLocalStorage()
@@ -26,7 +27,6 @@ const wrappedLlms = new WeakMap()
 const wrappedAdapters = new WeakMap()
 const wrappedDelegatingAdapters = new WeakMap()
 const wrappedTransparentAdapters = new WeakMap()
-const VISION_ROUTER_ADAPTER_OWNER = Symbol.for('dsh-vision-router.adapter-owner')
 const MAX_TRANSPARENT_REASONING_MEMORY = 512
 const VISION_FAILURE_RESULT_CODES = new Set(Object.values(VISION_RESULT_CODES))
 
@@ -434,12 +434,7 @@ function visionChainAdapter(adapter, routes) {
 }
 
 function visionRouterOwnedAdapter(adapter) {
-  if (!adapter || (typeof adapter !== 'object' && typeof adapter !== 'function')) return false
-  try {
-    return adapter[VISION_ROUTER_ADAPTER_OWNER] !== undefined
-  } catch {
-    return false
-  }
+  return isVisionRouterOwnedAdapter(adapter)
 }
 
 function explicitReasoningEffort(options) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vision-router",
-  "version": "3.0.0",
+  "version": "3.0.2",
   "description": "Eyes for text-only DeepSeek Harness agents: built-in free vision chain + pixel-level tools. Remote vision providers, including the default free fallback, receive image content unless strict local-only use is configured.",
   "license": "MIT",
   "repository": {
@@ -89,7 +89,7 @@
     "@deepseek-ai/dsh-storage-domain": "0.2.0-rc.2"
   },
   "scripts": {
-    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/cache-atomic-write-concurrency.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/release-registry-identity.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/activation-shim-contract.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/architecture-2.3-gate.test.js tests/esm-cycle-audit.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/local-only-vision.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/vision-diagnostics-routes.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/free-cloud-first.test.js tests/dsh-host-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/issue-606-session-source-ownership.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/provider-probe-proxy-scope.test.js tests/lifecycle-invariants.test.js tests/vision-tool-settings-generation.test.js tests/release-package-content-identity.test.js tests/release-state-machine.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/long-ocr-empty-retry.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-event-feed.test.js tests/session-vision-policy.test.js tests/session-vision-policy-domain.test.js tests/session-vision-delegation.test.js tests/session-vision-delegation-boundary.test.js tests/subagent-vision-inheritance-characterization.test.js tests/subagent-vision-runtime-integration.test.js tests/subagent-vision-cold-resume.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && pnpm test:regression-closure && node --test tests/vision-backend-runtime-policy.test.js",
+    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/cache-atomic-write-concurrency.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/release-registry-identity.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/activation-shim-contract.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/provider-transport-threading.test.js tests/architecture-2.3-gate.test.js tests/host-settings-seam.test.js tests/drift-canary-settings-seam.test.js tests/esm-cycle-audit.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/local-only-vision.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/vision-diagnostics-routes.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/free-cloud-first.test.js tests/dsh-host-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/issue-606-session-source-ownership.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/provider-probe-proxy-scope.test.js tests/lifecycle-invariants.test.js tests/vision-tool-settings-generation.test.js tests/release-package-content-identity.test.js tests/release-state-machine.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/long-ocr-empty-retry.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-event-feed.test.js tests/session-vision-policy.test.js tests/session-vision-policy-domain.test.js tests/session-vision-delegation.test.js tests/session-vision-delegation-boundary.test.js tests/subagent-vision-inheritance-characterization.test.js tests/subagent-vision-runtime-integration.test.js tests/subagent-vision-cold-resume.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && pnpm test:regression-closure && node --test tests/vision-backend-runtime-policy.test.js tests/vision-router-adversarial-review-fixes.test.js tests/web-panel-delegation.test.js",
     "test:core": "node --test tests/core.test.js tests/degraded-local-evidence.test.js tests/runtime-e2e.test.js tests/structured-bootstrap.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-execution-policy.test.js tests/vision-backend-runtime-policy.test.js",
     "test:routing": "node --test tests/issue-374-delegated-call-config.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/vision-routing-product.test.js tests/vision-capability-router.test.js tests/vision-capability-probe.test.js tests/vision-capability-shadow-health.test.js tests/vision-runtime-performance.test.js tests/vision-background-benchmark.test.js tests/vision-image-input-verdict.test.js",
     "test:session": "node --test tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-policy.test.js tests/session-vision-delegation.test.js tests/session-vision-delegation-boundary.test.js tests/subagent-vision-inheritance-characterization.test.js tests/subagent-vision-runtime-integration.test.js tests/subagent-vision-cold-resume.test.js tests/session-vision-policy-domain.test.js tests/replay-delegation.test.js tests/legacy-session-repair.test.js tests/session-repair-v2.test.js tests/issue-276-session-image-ownership.test.js",