dsh-vision-bridge v0.2.3

v0.2.3 — Multi-image separation robustness

What's new

• Per-attachment boundary labels. Multi-image Vision requests now interleave an explicit boundary label (Image i of N:) immediately before each native image block, improving separation robustness for visually adjacent attachments. This targets intermittent real-world failures where the Vision model merged two adjacent same-class attachments into one Evidence entry (images.length (expected N, got 1) → retry exhausted).
• Evidence policy version 3 → 4. The request the Vision model receives changes for the same attachment set, so the session-scoped Evidence cache key version is bumped.

Unchanged by design

• Strict cardinality validation (images.length === N, indexes 1..N), fail-closed behavior, and the bounded two-attempt output-contract retry (no Attempt 3) remain the final safety boundary.
• Single-image behavior, temperature-0 multi-image retries, the Stage 3B cache architecture, and the leading U+200B tolerance are unchanged.
• Distribution remains GitHub Release only — no npm publication.

Installer

• Default version and trusted release map updated to v0.2.3 (v0.2.2 and v0.2.1 remain trusted; unknown versions still fail closed).

Verification

• Deterministic suite: 292/292 pass, 0 fail/skip/todo/cancelled (installer suite 70/70).
• Packaged verification: fresh standalone installer install, same-version no-op rerun, single-image and two-image real smokes all PASS.

Assets

Asset	SHA-256
dsh-vision-bridge-0.2.3.tgz	D6D5D2A3FFECA2FD9213DA9A34A527E19321E8DB44CD0FCFCFCC168B42FE16C1
setup.mjs	7DBFF7AEB70D3589B28C78E5DECC06E1FE462B31CCCB6D24824AE9A65EF6BF24

Both .sha256 sidecars are attached for machine verification.

dsh-vision-bridge v0.2.2

v0.2.2 — Installation UX: guided standalone installer

What's new

• Guided standalone installer (setup.mjs). A single self-contained file
  (Node.js >= 22.19) that walks you through profile selection and the three
  bridge settings, then downloads, verifies, installs, configures (with
  automatic backup and rollback), and validates the plugin. No global dsh
  install is required — the installer drives a pinned, tested DSH CLI
  (@deepseek-ai/dsh@0.1.0-rc.6).
• Verified by default. Every install path is SHA-256 gated against the
  installer's trusted release map; a mismatch deletes the file and stops.
  --what-if prints the full plan (including the exact configuration that
  would be written) without downloading or writing anything.
• Safe profile editing. cordis.patch.yml is modified through a
  structured YAML editor that preserves your comments and other entries,
  writes atomically, and keeps a timestamped backup. Failures restore the
  previous configuration and keep the installed package with clear recovery
  instructions.
• Windows path robustness. Tarball paths with spaces and Unicode are
  handled safely (controlled temp directory + relative spec); no 8.3 short
  names are used.
• Idempotent and reversible. Re-running with the same version is a no-op;
  upgrades keep your configuration; downgrades are refused.
• README Quick Install in English and Chinese. Two-command Windows quick
  install; the manual installation path is retained as the audit/fallback
  path.

Notes

• The installer does not auto-discover providers/models: DSH has no stable
  boot-free catalog API, so the upstream provider, vision provider, and
  vision model IDs are entered manually (visible on your DSH Models page).
• No telemetry. No credential access. No port management.
• Bridge runtime semantics are unchanged (image handling, Evidence schema,
  retry policy, cache, U+200B tolerance).

Assets

Asset	SHA-256
dsh-vision-bridge-0.2.2.tgz	D5EB402017756FC5DC54E0E6E01DFA77216DC8B81A1EF3418F01B2962181EA7F
setup.mjs	2DEA2E9510BFBD4396077F62603A2EA3C99A4BD7209D84C4B33B5CF7D57A3413

Both .sha256 sidecars are attached for machine verification.

dsh-vision-bridge v0.2.1

v0.2.1 — Multi-image evidence robustness

Improvements

• Stronger multi-image attachment separation. The multi-image analyzer prompt now explicitly requires one images[] entry per distinct attachment and forbids merging attachments into a single entry, even when they appear adjacent or visually continuous.
• Bounded output-contract retry. Multi-image Vision analysis now uses a single shared budget of at most two attempts per work unit, retrying once when the model output fails strict JSON parsing or any multi Evidence validation check. Provider/transport/stream failures are never retried.
• Resilience to envelope noise. A bounded, leading-position-only tolerance now handles the observed leading U+200B zero-width space that the provider may emit before its JSON object. The tolerance is limited to leading U+200B characters on the multi-image path only; content inside the JSON value is never altered.

Preserved guarantees

• Maximum two multi Vision attempts per work unit; there is no third attempt.
• Strict Evidence validation remains authoritative: images.length must equal the number of input images, indexes must be exactly 1..N, and relation invariants are unchanged.
• Single-image behavior is unchanged (no retry, no forced temperature, existing prompt).
• Temperature 0 applies only to multi-image Vision attempts.
• Stage 3B Evidence cache semantics are unchanged (EVIDENCE_POLICY_VERSION is now 3, so cached Evidence from earlier policy versions is never reused).
• No heuristic Evidence repair: invalid output is discarded and never forwarded downstream.

Compatibility

• Backward-compatible at the public API level; no public exports added or removed.
• Install as before: add the plugin from this release tarball to a DSH profile.

v0.2.0

v0.2.0

Highlights

• DSH-native Vision Bridge for text-only upstream models
• Native image attachment flow (ImageBlocks pass through verbatim)
• Single-image support plus content-container multi-image batching
• Positional Image 1..N anchors preserving text/image association
• Recursive tool-result image handling
• Structured validated Evidence (single-image and multi-image with cross-image relations)
• Fail-closed Vision policy
• Session-scoped completed Evidence cache
• Zero production runtime dependencies

Compatibility

• Tested against DeepSeek Harness commit 47f943859bef60e4160492346772ded9b24f765a
• DeepSeek Harness is a developer preview; future compatibility is not guaranteed

Cache

• Session-partitioned, in-memory only, non-persistent, bounded LRU (32 work units)
• Only completed validated Evidence is cached; failures and cancellations are never cached
• No single-flight / shared Promise (shared-work concurrency is deliberately deferred)

Installation (verified path)

1. Download dsh-vision-bridge-0.2.0.tgz from this release
2. dsh plugin --profile <profile> add <path-to-dsh-vision-bridge-0.2.0.tgz>

npm and Git-source installation are not proven paths.

Security / ownership

• Credentials remain DSH-managed; the bridge owns no secret store
• The bridge never reads raw image bytes

Provenance

• Evidence schema concepts and traversal ideas adapted from @liustack/modlens v3.16.6 (MIT, (c) Leon Liu); see THIRD_PARTY_NOTICES.md

Artifact

• dsh-vision-bridge-0.2.0.tgz
• SHA-256: CD9128C9CC60E65CD81B6536EA19BA7FC20C48B66AD8CC5B33B3EDCB660B1AD8