dsh-vision-router 3.0.3 → 3.0.4

package/lib/vision-exact-check-client.js

@@ -80,6 +80,9 @@ export const VISION_EXACT_CHECK_CLIENT = String.raw`(function(){
       VISION_CHECK_BACKEND_STALE:[text('当前模型暂时无法直接调用，请确认供应商/模型仍可用后重试','This model is not currently callable; verify the provider/model and retry')],
       VISION_CHECK_TIMEOUT:[text('测试超时，已自动结束','Test timed out and was stopped')],
       VISION_CHECK_UNSUPPORTED_IMAGE:[text('实测仅文本 · 图片请求被模型拒绝','Measured text-only · the model rejected image input')],
+      VISION_IMAGE_DELIVERY_UNAVAILABLE:[text('Host未声明图片输入，请在DSH模型设置中启用Image再测','Host declares text-only input; enable Image in DSH Models settings and retest')],
+      VISION_CHECK_STALE_CONFIG:[text('测试期间模型配置已变化，请重新测试','Model input settings changed during the test; retest required')],
+      VISION_LOCAL_ONLY_POLICY:[text('本地识图模式下不允许测试非本地后端','Local-only vision policy blocks testing nonlocal backends')],
       VISION_CHECK_INFRASTRUCTURE:[text('识图测试组件暂不可用','Vision check infrastructure is unavailable')],
       CAPABILITY_BENCHMARK_INFRASTRUCTURE:[text('识图测试组件暂不可用','Vision check infrastructure is unavailable')],
       CAPABILITY_BENCHMARK_VISUAL_PROOF_FAILED:[text('模型没有正确读出测试图','The model did not correctly inspect the test image')]
@@ -91,9 +94,16 @@ export const VISION_EXACT_CHECK_CLIENT = String.raw`(function(){
   }
   function reset(control){
     if(!control)return;
+    delete control.dataset.lastResult;
     setStatus(control,text('快速自检 · 1次请求 · 只验证当前模型能否识图 · 不写入Auto能力分数','Quick check · 1 request · verifies image input only · does not write Auto capability scores'));
     setButton(control,text('测试识图','Test vision'),false);
   }
+  function makeRemoteNotice(row){
+    var note=document.createElement('div');note.setAttribute(CONTROL_ATTR,'remote');
+    note.style.cssText='flex:1 0 100%;font-size:12px;opacity:.7;margin-top:4px';
+    note.textContent=text('识图自检仅可在DSH本机界面执行；远程页面不发送测试请求。','Vision testing is local-only. Open the DSH UI on the Host to run the image check.');
+    row.appendChild(note);return note;
+  }
   function makeControl(row){
     if(!row||!row.style)return undefined;
     row.style.flexWrap='wrap';
@@ -131,15 +141,15 @@ export const VISION_EXACT_CHECK_CLIENT = String.raw`(function(){
       if(!currentRun(control,token,key))return;
       if(!response.ok||!body||body.ok!==true){
         var raw=String(body&&(body.error||body.code)||('HTTP '+response.status));
-        setStatus(control,'✗ '+selection.provider+'/'+selection.model+' · '+failureMessage(body,response.status),raw);notifyChanged();return;
+        setStatus(control,'✗ '+selection.provider+'/'+selection.model+' · '+failureMessage(body,response.status),raw);control.dataset.lastResult=String(Date.now());notifyChanged();return;
       }
       var via=transport(body.transport),latency=seconds(body.latencyMs),output=short(body.output,72);
       var suffix=(via?' · '+via:'')+(latency?' · '+latency:'')+(output?' · '+output:'');
-      setStatus(control,'✓ '+selection.provider+'/'+selection.model+text(' · 图片识别正常',' · image verified')+suffix);notifyChanged();
+      setStatus(control,'✓ '+selection.provider+'/'+selection.model+text(' · 图片识别正常',' · image verified')+suffix+' · '+new Date().toLocaleTimeString());control.dataset.lastResult=String(Date.now());notifyChanged();
     }catch(error){
       if(!currentRun(control,token,key))return;
       var message=error&&error.name==='AbortError'?text('测试超时，已自动结束','Test timed out and was stopped'):text('测试失败','Vision check failed');
-      setStatus(control,'✗ '+selection.provider+'/'+selection.model+' · '+message,String(error&&error.message||error));
+      setStatus(control,'✗ '+selection.provider+'/'+selection.model+' · '+message,String(error&&error.message||error));control.dataset.lastResult=String(Date.now());
     }finally{
       if(timer!==undefined)clearTimeout(timer);
       if(ticker!==undefined)clearInterval(ticker);
@@ -148,12 +158,13 @@ export const VISION_EXACT_CHECK_CLIENT = String.raw`(function(){
     }
   }
   function scan(){
-    if(!localPage())return;
+    var local=localPage();
     var rows=[];try{rows=Array.prototype.slice.call(document.querySelectorAll(ROW_SELECTOR));}catch(_){rows=[];}
     rows.forEach(function(row){
       var selection=rowSelection(row),control=row.querySelector('['+CONTROL_ATTR+']');
       if(!complete(selection)){if(control){abortActive(control);if(control.remove)control.remove();}return;}
-      if(!control)control=makeControl(row);
+      if(!control)control=local?makeControl(row):makeRemoteNotice(row);
+      if(!local)return;
       var key=selectionKey(selection);
       if(control&&control.dataset.selection!==key){abortActive(control);control.dataset.selection=key;reset(control);}
     });
@@ -167,8 +178,15 @@ export const VISION_EXACT_CHECK_CLIENT = String.raw`(function(){
     }catch(_){}
     return false;
   }
-  function start(){
+  function invalidatePreviousResults(){
     if(!localPage())return;
+    var controls=document.querySelectorAll('['+CONTROL_ATTR+'][data-last-result]');
+    controls.forEach(function(control){abortActive(control);reset(control);
+      setStatus(control,text('配置可能已变化，请重新测试','Configuration may have changed; retest required'));
+    });
+  }
+  function start(){
+    window.addEventListener('focus',invalidatePreviousResults);
     document.addEventListener('change',function(event){var row=event&&event.target&&event.target.closest?event.target.closest(ROW_SELECTOR):undefined;if(row)schedule();},true);
     if(typeof MutationObserver==='function'&&document.documentElement){
       var observer=new MutationObserver(function(records){

package/lib/vision-image-input-verdict.js

@@ -5,7 +5,7 @@ import process from 'node:process'
 import { resolveDshHome } from './doctor.js'
 import { CAPABILITY_BENCHMARK_SUITE_REVISION } from './vision-capability-benchmark.js'
 
-const CACHE_VERSION = 1
+const CACHE_VERSION = 2
 const MAX_ENTRIES = 128
 
 function cleanText(value, max = 256) {
@@ -14,7 +14,7 @@ function cleanText(value, max = 256) {
 
 function cleanVerdict(value) {
   if (!value || typeof value !== 'object' || Array.isArray(value)) return undefined
-  if (value.state !== 'unsupported') return undefined
+  if (value.state !== 'unsupported' || value.hostMode !== 'native-image') return undefined
   if (Number(value.suiteRevision) !== CAPABILITY_BENCHMARK_SUITE_REVISION) return undefined
   const fingerprint = cleanText(value.fingerprint, 64)
   if (!/^ep2_[0-9a-f]{32}$/.test(fingerprint)) return undefined
@@ -29,6 +29,7 @@ function cleanVerdict(value) {
     provider,
     model,
     state: 'unsupported',
+    hostMode: 'native-image',
     reason: 'provider-rejected-image',
     measuredAt,
     suiteRevision: CAPABILITY_BENCHMARK_SUITE_REVISION,
@@ -103,7 +104,7 @@ export function createImageInputVerdictStore(options = {}) {
       await ready
       return records.get(String(fingerprint ?? ''))
     },
-    async markUnsupported({ fingerprint, key, provider, model, measuredAt = Date.now() } = {}) {
+    async markUnsupported({ fingerprint, key, provider, model, hostMode, measuredAt = Date.now() } = {}) {
       await ready
       const clean = cleanVerdict({
         fingerprint,
@@ -111,6 +112,7 @@ export function createImageInputVerdictStore(options = {}) {
         provider,
         model,
         state: 'unsupported',
+        hostMode,
         measuredAt,
         suiteRevision: CAPABILITY_BENCHMARK_SUITE_REVISION,
       })

package/lib/vision-toggle-root-hardening.js

@@ -345,7 +345,15 @@ const CLIENT_PRELUDE = String.raw`(function(){
 })();`
 
 function replaceAll(source, before, after) {
-  return source.includes(before) ? source.split(before).join(after) : source
+  let result = source.includes(before) ? source.split(before).join(after) : source
+  // Windows git checkouts can put CRLF inside injected client-source template
+  // literals. Match only the same owned seam with CRLF; do not normalize or
+  // rewrite the surrounding HTML or any unrelated plugin's source.
+  if (before.includes('\n')) {
+    const windowsBefore = before.replaceAll('\n', '\r\n')
+    if (result.includes(windowsBefore)) result = result.split(windowsBefore).join(after)
+  }
+  return result
 }
 
 export function hardenVisionClientSource(source) {
@@ -403,7 +411,7 @@ export function hardenVisionClientSource(source) {
   next = replaceAll(
     next,
     `          var message = latest && typeof latest.error === 'string' && latest.error !== ''\n            ? latest.error\n            : t('failedUnknown');`,
-    `          var recovered = recovery && typeof recovery.getSnapshot === 'function' ? recovery.getSnapshot() : recoveryError;\n          var message = latest && typeof latest.error === 'string' && latest.error !== ''\n            ? latest.error\n            : recovered && recovered.message ? recovered.message : t('failedUnknown');`,
+    `          var recoveryStore = typeof recovery === 'undefined' ? null : recovery;\n          if (!recoveryStore && typeof window !== 'undefined') {\n            var hardening = window.__dshVisionRouterRootHardening;\n            if (hardening && typeof hardening.recoveryFor === 'function') recoveryStore = hardening.recoveryFor(directory);\n          }\n          var recovered = recoveryStore && typeof recoveryStore.getSnapshot === 'function' ? recoveryStore.getSnapshot() : null;\n          var message = latest && typeof latest.error === 'string' && latest.error !== ''\n            ? latest.error\n            : recovered && recovered.message ? recovered.message : t('failedUnknown');`,
   )
 
   next = replaceAll(
@@ -431,10 +439,19 @@ export function hardenVisionClientSource(source) {
   )
 
   next = replaceAll(next, `function wrapStore(store, settings) {`, `function wrapStore(store, settings, recovery) {`)
+  // A synthetic recovery snapshot must retain referential identity until
+  // its Host source snapshot or recovery error actually changes. Otherwise
+  // React's useSyncExternalStore sees a new snapshot on every read and can
+  // enter a maximum-update-depth loop after a failed select + catalog refresh.
+  next = replaceAll(
+    next,
+    `    var lastProjected;\n    function getSnapshot() {`,
+    `    var lastProjected;\n    var lastRecoverySource;\n    var lastRecoveryError;\n    var lastRecoveryRaw;\n    function getSnapshot() {`,
+  )
   next = replaceAll(
     next,
     `      var raw = typeof store.getSnapshot === 'function' ? store.getSnapshot() : undefined;\n      var config = currentVisionConfig(settings);`,
-    `      var raw = typeof store.getSnapshot === 'function' ? store.getSnapshot() : undefined;\n      var recovered = recovery && typeof recovery.getSnapshot === 'function' ? recovery.getSnapshot() : null;\n      if (recovered && raw && (raw.status === 'selecting' || raw.status === 'loading')) {\n        raw = Object.assign({}, raw, { status: 'error', error: recovered.message || String(recovered) });\n      }\n      var config = currentVisionConfig(settings);`,
+    `      var raw = typeof store.getSnapshot === 'function' ? store.getSnapshot() : undefined;\n      var recovered = recovery && typeof recovery.getSnapshot === 'function' ? recovery.getSnapshot() : null;\n      if (recovered && raw && (raw.status === 'selecting' || raw.status === 'loading')) {\n        if (raw !== lastRecoverySource || recovered !== lastRecoveryError) {\n          lastRecoverySource = raw;\n          lastRecoveryError = recovered;\n          lastRecoveryRaw = Object.assign({}, raw, { status: 'error', error: recovered.message || String(recovered) });\n        }\n        raw = lastRecoveryRaw;\n      }\n      var config = currentVisionConfig(settings);`,
   )
   next = replaceAll(
     next,

package/lib/web-capability-boundary.js

@@ -126,17 +126,42 @@ function isLocalHostName(value) {
   return host === 'localhost' || host.endsWith('.localhost') || isLoopbackAddress(host)
 }
 
+// Forwarding metadata can only *deny* a local-machine capability. Never
+// interpret X-Forwarded-For or similar caller-controlled headers as proof
+// that a request really originated at the local browser.
+const PROXY_PROVENANCE_HEADERS = new Set([
+  'forwarded',
+  'x-forwarded-for',
+  'x-forwarded-host',
+  'x-forwarded-proto',
+  'x-real-ip',
+  'x-client-ip',
+  'true-client-ip',
+  'cf-connecting-ip',
+  'via',
+])
+
+function hasProxyProvenance(req) {
+  const headers = req?.headers
+  return !!headers && typeof headers === 'object' &&
+    Object.keys(headers).some((name) => PROXY_PROVENANCE_HEADERS.has(name.toLowerCase()))
+}
+
 /**
  * Browser-facing local capability check. A real network request needs BOTH a
- * loopback TCP peer and a loopback/localhost Host header. This prevents the
- * common reverse-proxy shape (proxy -> 127.0.0.1, external Host preserved)
- * from silently acquiring local-machine capabilities. Internal direct handler
- * calls have no transport and remain compatible for tests/host composition.
+ * loopback TCP peer and a loopback/localhost Host header, with no forwarding
+ * metadata. This protects supported proxy deployments preserving external Host
+ * and fails closed when a proxy rewrites Host but keeps standard hop markers.
+ * A proxy that erases every originating fact is indistinguishable from a
+ * genuine loopback browser request; these headers are not an attestation.
+ * Internal direct handler calls have no socket and remain supported.
  */
 export function isLocalUiRequest(req) {
   const transport = req?.socket ?? req?.connection
   if (!transport) return true
-  return isLoopbackAddress(transport.remoteAddress) && isLocalHostName(requestHostName(req))
+  return isLoopbackAddress(transport.remoteAddress) &&
+    isLocalHostName(requestHostName(req)) &&
+    !hasProxyProvenance(req)
 }
 
 export function isLocalMutationRoute(path, method) {
@@ -204,40 +229,148 @@ function redactRemoteBody(path, body) {
   return body
 }
 
-/** Intercept one JSON end() so local capability material is never issued remotely. */
+// Remote metadata is small. Never buffer an unbounded response from a future
+// handler revision: local-only diagnostics should not turn into remote memory DoS.
+const MAX_REMOTE_REDACTION_BYTES = 1024 * 1024
+
+/**
+ * A remote response requiring redaction must be completely validated *before*
+ * emitting headers or bytes. Unlike intercepting end() alone, this also covers
+ * write()+end(), malformed JSON, oversize bodies and async stream completion.
+ * No handler may transmit its raw token, path or other local fields while the
+ * remote body remains unvalidated.
+ */
 function runWithRemoteReadRedaction(path, handler, req, res) {
   const originalEnd = res?.end
-  if (typeof originalEnd !== 'function') return handler(req, res)
-  let active = true
-  res.end = function redactedEnd(chunk, ...args) {
-    if (!active) return originalEnd.call(this, chunk, ...args)
-    let next = chunk
+  const originalWrite = res?.write
+  const originalWriteHead = res?.writeHead
+  const originalFlushHeaders = res?.flushHeaders
+  if (typeof originalEnd !== 'function' || typeof originalWriteHead !== 'function') {
+    throw new TypeError('vision-router: remote redaction requires a buffered HTTP response')
+  }
+
+  const chunks = []
+  let bytes = 0
+  let done = false
+  let head
+  const restore = () => {
+    if (res.end === redactedEnd) res.end = originalEnd
+    if (res.write === redactedWrite) {
+      if (originalWrite === undefined) delete res.write
+      else res.write = originalWrite
+    }
+    if (res.writeHead === redactedWriteHead) res.writeHead = originalWriteHead
+    if (res.flushHeaders === redactedFlushHeaders) {
+      if (originalFlushHeaders === undefined) delete res.flushHeaders
+      else res.flushHeaders = originalFlushHeaders
+    }
+  }
+  const stripStagedHeaders = () => {
+    // Route handlers own the pre-redaction response. Even header values may
+    // contain future local-only tokens, paths or Set-Cookie material.
+    // Never forward any unreviewed staged header to a remote client.
     try {
-      if (typeof chunk === 'string' || Buffer.isBuffer(chunk) || chunk instanceof Uint8Array) {
-        const parsed = JSON.parse(Buffer.isBuffer(chunk) || chunk instanceof Uint8Array ? Buffer.from(chunk).toString('utf8') : chunk)
-        next = JSON.stringify(redactRemoteBody(path, parsed))
-        try { this.removeHeader?.('content-length') } catch { /* best effort */ }
-      }
-    } catch {
-      // If a future handler stops returning JSON, do not corrupt its response.
+      for (const key of res.getHeaderNames?.() ?? []) res.removeHeader?.(key)
+    } catch { /* a test double may not expose the header table */ }
+    for (const key of ['content-length', 'content-encoding', 'transfer-encoding']) {
+      try { res.removeHeader?.(key) } catch {}
     }
-    return originalEnd.call(this, next, ...args)
   }
-  const redactedEndReference = res.end
-  const restore = () => {
-    active = false
-    if (res.end === redactedEndReference) res.end = originalEnd
+  const safeHeaders = () => ({
+    'content-type': 'application/json; charset=utf-8',
+    'cache-control': 'no-store',
+  })
+  const complete = (body, rejected = false, callback) => {
+    if (done) return res
+    done = true
+    // On rejection, deliberately retain the buffered wrappers after sending
+    // the safe error. A drifting async handler may continue calling write()
+    // or end(); restoring the raw methods here would expose those later bytes.
+    // The response is already ended and these wrappers swallow late writes.
+    if (!rejected) restore()
+    stripStagedHeaders()
+    if (rejected) {
+      // An invalid or oversized response is an internal gateway failure. Do
+      // not repeat the untrusted data or send previously staged headers.
+      originalWriteHead.call(res, 502, safeHeaders())
+      return originalEnd.call(res, JSON.stringify({
+        ok: false,
+        error: 'remote response could not be safely redacted',
+      }), callback)
+    }
+    if (head) {
+      originalWriteHead.call(res, head.status, safeHeaders())
+    } else {
+      originalWriteHead.call(res, Number.isInteger(res.statusCode) ? res.statusCode : 200, safeHeaders())
+    }
+    return originalEnd.call(res, body, callback)
   }
-  let result
+  const append = (chunk, encoding) => {
+    if (chunk === undefined || chunk === null) return true
+    let value
+    try {
+      if (Buffer.isBuffer(chunk)) value = chunk
+      else if (typeof chunk === 'string') value = Buffer.from(chunk, typeof encoding === 'string' ? encoding : 'utf8')
+      else if (chunk instanceof Uint8Array) value = Buffer.from(chunk)
+      else return false
+    } catch { return false }
+    if (value.length > MAX_REMOTE_REDACTION_BYTES - bytes) return false
+    bytes += value.length
+    chunks.push(value)
+    return true
+  }
+  const failed = () => complete(undefined, true)
+  function redactedWriteHead(status, maybeMessage, maybeHeaders) {
+    if (done) return this
+    const message = typeof maybeMessage === 'string' ? maybeMessage : undefined
+    const headers = message === undefined ? maybeMessage : maybeHeaders
+    if (head || !Number.isInteger(status) || status < 100 || status > 599 ||
+      (headers !== undefined && (!headers || typeof headers !== 'object' || Array.isArray(headers)))) {
+      failed()
+      return this
+    }
+    head = { status, message, headers }
+    return this
+  }
+  function redactedFlushHeaders() {
+    // Deferring the header is essential: once sent, an invalid JSON body
+    // cannot be replaced by a safe 502.
+  }
+  function redactedWrite(chunk, encoding, callback) {
+    const completeWrite = typeof encoding === 'function' ? encoding : callback
+    if (!done && !append(chunk, encoding)) failed()
+    if (typeof completeWrite === 'function') queueMicrotask(completeWrite)
+    return !done
+  }
+  function redactedEnd(chunk, encoding, callback) {
+    if (done) return res
+    const completeEnd = typeof encoding === 'function' ? encoding : callback
+    if (!append(chunk, encoding)) return failed()
+    try {
+      const body = JSON.parse(Buffer.concat(chunks, bytes).toString('utf8'))
+      if (!body || typeof body !== 'object' || Array.isArray(body)) return failed()
+      const redacted = JSON.stringify(redactRemoteBody(path, body))
+      if (Buffer.byteLength(redacted, 'utf8') > MAX_REMOTE_REDACTION_BYTES) return failed()
+      return complete(redacted, false, completeEnd)
+    } catch {
+      return failed()
+    }
+  }
+
+  res.writeHead = redactedWriteHead
+  res.write = redactedWrite
+  res.end = redactedEnd
+  res.flushHeaders = redactedFlushHeaders
   try {
-    result = handler(req, res)
-  } catch (error) {
-    restore()
-    throw error
+    const result = handler(req, res)
+    if (result && typeof result.then === 'function') {
+      return Promise.resolve(result).catch(() => { if (!done) failed() })
+    }
+    return result
+  } catch {
+    if (!done) failed()
+    return undefined
   }
-  if (result && typeof result.then === 'function') return result.finally(restore)
-  restore()
-  return result
 }
 
 function guardedRoute(route, getConnection) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-vision-router",
-  "version": "3.0.3",
+  "version": "3.0.4",
   "description": "Eyes for text-only DeepSeek Harness agents: built-in free vision chain + pixel-level tools. Remote vision providers, including the default free fallback, receive image content unless strict local-only use is configured.",
   "license": "MIT",
   "repository": {
@@ -35,7 +35,8 @@
     "presets"
   ],
   "engines": {
-    "node": "^22.19.0 || >=24.0.0"
+    "node": "^22.19.0 || >=24.0.0",
+    "dsh": ">=0.1.5-rc.1 <0.2.0-0 || >=0.2.0-rc.2 <0.3.0-0"
   },
   "packageManager": "pnpm@11.20.0",
   "keywords": [
@@ -89,13 +90,13 @@
     "@deepseek-ai/dsh-storage-domain": "0.2.0-rc.2"
   },
   "scripts": {
-    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/cache-atomic-write-concurrency.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/release-registry-identity.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/activation-shim-contract.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/provider-transport-threading.test.js tests/architecture-2.3-gate.test.js tests/host-settings-seam.test.js tests/drift-canary-settings-seam.test.js tests/esm-cycle-audit.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/local-only-vision.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/vision-diagnostics-routes.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/free-cloud-first.test.js tests/dsh-host-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/issue-606-session-source-ownership.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/provider-probe-proxy-scope.test.js tests/lifecycle-invariants.test.js tests/vision-tool-settings-generation.test.js tests/release-package-content-identity.test.js tests/release-state-machine.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/long-ocr-empty-retry.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-event-feed.test.js tests/session-vision-policy.test.js tests/session-vision-policy-domain.test.js tests/session-vision-delegation.test.js tests/session-vision-delegation-boundary.test.js tests/subagent-vision-inheritance-characterization.test.js tests/subagent-vision-runtime-integration.test.js tests/subagent-vision-cold-resume.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && pnpm test:regression-closure && node --test tests/vision-backend-runtime-policy.test.js tests/vision-router-adversarial-review-fixes.test.js tests/web-panel-delegation.test.js",
+    "test": "node --test tests/index-modularization.test.js tests/adapter-prepare-call-compat.test.js tests/core.test.js tests/issue-374-delegated-call-config.test.js tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/capability-advisory.test.js tests/vision-execution-policy.test.js tests/vision-backend-diagnostics.test.js tests/live-model-discovery.test.js tests/cache-atomic-write-concurrency.test.js tests/live-model-credential-resolution.test.js tests/vision-model-registry.test.js tests/live-model-client-stability.test.js tests/providers-persistence.test.js tests/provider-directory-fallback.test.js tests/model-catalog-policy.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-fj.test.js tests/settings-ia-acceptance-regression.test.js tests/settings-migration.test.js tests/settings-section-order.test.js tests/attachment-admission-policy.test.js tests/vision-resilience.test.js tests/degraded-local-evidence.test.js tests/vision-resilience-lifecycle.test.js tests/vision-breaker-readonly.test.js tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/dev-staged-build.test.js tests/dev-web-reload.test.js tests/client.test.js tests/issue-307-regression.test.js tests/issue-284-vision-mode-toggle.test.js tests/issue-284-vision-mode-hardening.test.js tests/issue-284-attachment-id-hint.test.js tests/issue-284-model-visibility.test.js tests/issue-284-vision-selection-effort.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/remote-settings-risk-confirmation.test.js tests/local-remote-settings-permission.test.js tests/artifact-path-security.test.js tests/http-compat.test.js tests/catalog-corrections.test.js tests/release-registry-identity.test.js tests/update-check.test.js tests/update-check-signal-lifecycle.test.js tests/self-update.test.js tests/doctor.test.js tests/doctor-cli.test.js tests/legacy-session-repair.test.js tests/profile-pnpm-diagnostics.test.js tests/doctor-v2.test.js tests/doctor-cli-v2.test.js tests/doctor-runtime.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/session-repair-v2.test.js tests/activation-shim-contract.test.js tests/bundle-defaults.test.js tests/file-logger.test.js tests/official-deepseek-catalog.test.js tests/replay-delegation.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/adversarial-hardening.test.js tests/vision-adversarial-hardening-v2.test.js tests/vision-capability-benchmark-visual-proof.test.js tests/wrapper-directory.test.js tests/logging-ui.test.js tests/manifest-dependencies.test.js tests/provider-transport-threading.test.js tests/architecture-2.3-gate.test.js tests/host-settings-seam.test.js tests/drift-canary-settings-seam.test.js tests/esm-cycle-audit.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js tests/vision-model-guidance-contract.test.js tests/local-ollama.test.js tests/local-only-vision.test.js tests/ollama-cold-start.test.js tests/ollama-cold-start-loaded.test.js tests/zero-regression-gate.test.js tests/runtime-e2e.test.js tests/local-vision-stabilizer.test.js tests/local-connection-probe.test.js tests/vision-diagnostics-routes.test.js tests/repetition-guard.test.js tests/guide-scroll-gate.test.js tests/settings-scroll-jank-regression.test.js tests/free-cloud-first.test.js tests/dsh-host-compat.test.js tests/native-image-coexistence.test.js tests/issue-276-session-image-ownership.test.js tests/issue-276-entry-policy-bridge.test.js tests/issue-276-policy-hardening.test.js tests/issue-289-native-nonintervention.test.js tests/issue-512-tool-restriction.test.js tests/issue-606-session-source-ownership.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/provider-probe-proxy-scope.test.js tests/lifecycle-invariants.test.js tests/vision-tool-settings-generation.test.js tests/release-package-content-identity.test.js tests/release-state-machine.test.js tests/mixed-router.test.js tests/depth-tier.test.js tests/depth-quota-behavior.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-budget-activation.test.js tests/runtime-boundary-fixes.test.js tests/security-resource-boundaries.test.js tests/security-property-fuzz.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/long-ocr-empty-retry.test.js tests/tesseract-adaptive-ocr.test.js tests/tesseract-node24-boot.test.js tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-event-feed.test.js tests/session-vision-policy.test.js tests/session-vision-policy-domain.test.js tests/session-vision-delegation.test.js tests/session-vision-delegation-boundary.test.js tests/subagent-vision-inheritance-characterization.test.js tests/subagent-vision-runtime-integration.test.js tests/subagent-vision-cold-resume.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/structured-guard-idempotency.test.js tests/vision-routing-product.test.js tests/vision-runtime-performance.test.js tests/vision-routing-settings-prelude.test.js tests/v2-settings-ia-integration.test.js tests/vision-capability-router.test.js tests/vision-capability-reference.test.js tests/vision-capability-benchmark.test.js tests/vision-capability-grounding-proof-contract.test.js tests/vision-capability-probe.test.js tests/vision-capability-axis-freshness.test.js tests/vision-capability-shadow-health.test.js tests/vision-capability-benchmark-service.test.js tests/vision-capability-preflight-hardening.test.js tests/vision-capability-benchmark-contract.test.js tests/vision-capability-benchmark-client.test.js tests/vision-capability-benchmark-client-productization.test.js tests/vision-capability-adapter-route.test.js tests/vision-background-benchmark.test.js tests/vision-background-lifecycle.test.js tests/vision-background-benchmark-productization.test.js tests/vision-capability-benchmark-budget.test.js tests/vision-image-input-verdict.test.js tests/vision-capability-failure-classification.test.js tests/vision-capability-gate-client.test.js tests/v2-product-review-fixes.test.js tests/qa-top5-reliability.test.js tests/qa-screenshot-runtime.test.js tests/qa-runtime-identity.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js tests/qa-reliability-tail.test.js tests/qa-endpoint-route-alias.test.js tests/settings-native-card-semantics.test.js tests/settings-native-card-lazy-data.test.js tests/settings-invalid-staged-dirty.test.js tests/vision-toggle-root-hardening.test.js && pnpm test:regression-closure && node --test tests/vision-backend-runtime-policy.test.js tests/vision-router-adversarial-review-fixes.test.js tests/web-panel-delegation.test.js",
     "test:core": "node --test tests/core.test.js tests/degraded-local-evidence.test.js tests/runtime-e2e.test.js tests/structured-bootstrap.test.js tests/structured-flow-hardening.test.js tests/structured-flow-adversarial.test.js tests/vision-execution-policy.test.js tests/vision-backend-runtime-policy.test.js",
     "test:routing": "node --test tests/issue-374-delegated-call-config.test.js tests/twin-image-capability-fallback.test.js tests/twin-image-custom-wrapper.test.js tests/vision-routing-product.test.js tests/vision-capability-router.test.js tests/vision-capability-probe.test.js tests/vision-capability-shadow-health.test.js tests/vision-runtime-performance.test.js tests/vision-background-benchmark.test.js tests/vision-image-input-verdict.test.js",
     "test:session": "node --test tests/session-vision-state.test.js tests/session-vision-state-integration.test.js tests/session-vision-policy.test.js tests/session-vision-delegation.test.js tests/session-vision-delegation-boundary.test.js tests/subagent-vision-inheritance-characterization.test.js tests/subagent-vision-runtime-integration.test.js tests/subagent-vision-cold-resume.test.js tests/session-vision-policy-domain.test.js tests/replay-delegation.test.js tests/legacy-session-repair.test.js tests/session-repair-v2.test.js tests/issue-276-session-image-ownership.test.js",
     "test:resources": "node --test tests/artifact-path-security.test.js tests/image-resource-governor.test.js tests/resource-retention-lifecycle.test.js tests/pixel-diff-stream.test.js tests/large-image-resource-integration.test.js tests/qa-turn-budget-cancellation.test.js tests/qa-cancellation-publication.test.js",
     "test:compat": "node --test tests/adapter-prepare-call-compat.test.js tests/attachment-admission-policy.test.js tests/dsh-host-compat.test.js tests/http-compat.test.js tests/pi-ai-bridge-wire-compat.test.js tests/fetch-wrapper-lifecycle.test.js tests/fetch-wrapper-composition.test.js tests/native-image-coexistence.test.js tests/tesseract-node24-boot.test.js tests/dsh-host-capabilities.test.js",
-    "test:web": "node --test tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-acceptance-regression.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/local-remote-settings-permission.test.js tests/v2-settings-ia-integration.test.js tests/logging-ui.test.js",
+    "test:web": "node --test tests/alpha1-browser-lifecycle-integration.test.js tests/issue-367-remote-session-inject.test.js tests/vision-mode-toggle-injection.test.js tests/client.test.js tests/client-presentation-boundary.test.js tests/clipboard-image-paste-compat.test.js tests/settings-ia-client-prelude.test.js tests/settings-ia-acceptance-regression.test.js tests/remote-settings-bridge.test.js tests/remote-settings-v2-contract.test.js tests/local-remote-settings-permission.test.js tests/v2-settings-ia-integration.test.js tests/logging-ui.test.js tests/dev-staged-build.test.js tests/dev-web-reload.test.js",
     "test:contract": "node --test tests/manifest-dependencies.test.js tests/bundle-defaults.test.js tests/zero-regression-gate.test.js tests/issue-289-native-nonintervention.test.js tests/issue-374-delegated-call-config.test.js tests/runtime-boundary-fixes.test.js tests/security-adversarial-fuzz-contract.test.js tests/runtime-i18n.test.js tests/adapter-prepare-call-compat.test.js tests/dsh-host-compat.test.js tests/attachment-admission-policy.test.js tests/dsh-host-capabilities.test.js tests/doctor-host-capabilities.test.js tests/structured-bootstrap.test.js tests/structured-bootstrap-gate.test.js",
     "test:grounding": "node --test tests/grounding-coordinate-frame.test.js tests/grounding-coordinate-runtime.test.js tests/vision-capability-grounding-proof-contract.test.js",
     "test:stress": "node scripts/image-resource-stress.mjs && node --test tests/large-image-resource-integration.test.js tests/resource-retention-lifecycle.test.js",
@@ -109,6 +110,7 @@
     "client:sync": "node scripts/sync-client-embedded-modules.mjs && pnpm build",
     "client:check": "node scripts/sync-client-embedded-modules.mjs --check && pnpm build:check",
     "build": "node scripts/build-source-artifacts.mjs",
+    "dev:web": "node scripts/dev-web-reload.mjs",
     "build:check": "node scripts/build-source-artifacts.mjs --check",
     "pretest": "pnpm build",
     "build:reproducible": "node scripts/verify-build-reproducibility.mjs",

package/presets/web-connection-ready/index.mjs

@@ -0,0 +1,48 @@
+/**
+ * Private, fail-closed bridge for the two supported DSH Web trust generations.
+ *
+ * It waits for the Host-owned authority source instead of supplying a fake
+ * webRuntime service or guessing additional trusted hosts. Its only consumer
+ * is the DVR connection row; Host Connection retains all authentication and
+ * route ownership.
+ */
+export const name = 'vision-router-web-connection-ready'
+export const inject = ['webStartup', 'webServer']
+export const SERVICE = 'visionRouterWebConnectionReady'
+
+/** Return a detached, immutable copy of the Host-approved authority list. */
+export function validatedTrustedHosts(value) {
+  if (!Array.isArray(value) || value.some((entry) => typeof entry !== 'string')) {
+    throw new Error('Vision Router Web compatibility: Host trust list is invalid')
+  }
+  return Object.freeze([...value])
+}
+
+export function classifyHostWebGeneration(webServer) {
+  const protocol = webServer?.protocol
+  if (protocol === 'http:' || protocol === 'https:') return 'startup'
+  if (protocol === undefined) return 'legacy-runtime'
+  throw new Error('Vision Router Web compatibility: unknown Host Web protocol')
+}
+
+export function apply(ctx) {
+  const generation = classifyHostWebGeneration(ctx.webServer)
+  if (generation === 'startup') {
+    // 0.2.1-alpha.2+: Web Startup owns invocation trust; Web Runtime no
+    // longer provides a webRuntime service. Do not resurrect that service.
+    ctx.provide(SERVICE, Object.freeze({
+      trustedHosts: validatedTrustedHosts(ctx.webStartup.trustedHosts),
+    }))
+    return
+  }
+
+  // Older supported Hosts materialize additional bind-derived LAN addresses
+  // in their native webRuntime service. Wait for the real service rather than
+  // falling back to the earlier webStartup list (which would silently lose
+  // LAN authority and race asynchronous Web runtime activation).
+  ctx.inject(['webRuntime'], (legacyCtx) => {
+    legacyCtx.provide(SERVICE, Object.freeze({
+      trustedHosts: validatedTrustedHosts(legacyCtx.webRuntime.trustedHosts),
+    }))
+  })
+}

package/presets/web-connection-ready/package.json

@@ -0,0 +1,6 @@
+{
+  "name": "dsh-vision-router-web-connection-ready",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module"
+}