dsh-vision-router 2.2.7 → 2.3.0

package/lib/session-vision-mode-boundary.js

@@ -134,14 +134,26 @@ function disposeHeldRestriction(held) {
   }
 }
 
-function releaseAgentToolRestriction(agent, restrictions) {
+function releaseAgentToolRestriction(agent, restrictions, activeRestrictions) {
   if (!isObject(agent)) return
   const held = restrictions.get(agent)
   if (!held) return
   disposeHeldRestriction(held)
+  activeRestrictions?.delete(held)
   restrictions.delete(agent)
 }
 
+function rememberAgentToolRestriction(agent, restrictions, activeRestrictions, held) {
+  restrictions.set(agent, held)
+  activeRestrictions?.add(held)
+}
+
+function releaseAllAgentToolRestrictions(activeRestrictions) {
+  if (!(activeRestrictions instanceof Set)) return
+  for (const held of activeRestrictions) disposeHeldRestriction(held)
+  activeRestrictions.clear()
+}
+
 function restrictionFailureLabel(error) {
   const name =
     typeof error?.name === 'string' && error.name !== ''
@@ -165,10 +177,10 @@ function warnRestrictionFailure(agent, error, deny, failed = deny) {
   } catch {}
 }
 
-function syncAgentToolRestriction(agent, enabled, restrictions, owned, registryTools) {
+function syncAgentToolRestriction(agent, enabled, restrictions, owned, registryTools, activeRestrictions) {
   if (!isObject(agent)) return
   if (enabled) {
-    releaseAgentToolRestriction(agent, restrictions)
+    releaseAgentToolRestriction(agent, restrictions, activeRestrictions)
     return
   }
 
@@ -181,19 +193,19 @@ function syncAgentToolRestriction(agent, enabled, restrictions, owned, registryT
   const deny = restrictableOwnedVisionToolNames(registryTools, owned)
   if (typeof restrict !== 'function') return
   if (deny.length === 0) {
-    releaseAgentToolRestriction(agent, restrictions)
+    releaseAgentToolRestriction(agent, restrictions, activeRestrictions)
     return
   }
 
   const held = restrictions.get(agent)
   const signature = deny.join('\u0000')
   if (held?.signature === signature) return
-  releaseAgentToolRestriction(agent, restrictions)
+  releaseAgentToolRestriction(agent, restrictions, activeRestrictions)
 
   try {
     // Current DSH can mask all inherited plugin tools in one scoped operation.
     const dispose = restrict.call(tools, { deny })
-    restrictions.set(agent, {
+    rememberAgentToolRestriction(agent, restrictions, activeRestrictions, {
       signature,
       disposers: typeof dispose === 'function' ? [dispose] : [],
     })
@@ -212,7 +224,9 @@ function syncAgentToolRestriction(agent, enabled, restrictions, owned, registryT
         failed.push(name)
       }
     }
-    if (disposers.length > 0) restrictions.set(agent, { signature, disposers })
+    if (disposers.length > 0) {
+      rememberAgentToolRestriction(agent, restrictions, activeRestrictions, { signature, disposers })
+    }
     if (failed.length > 0 || disposers.length === 0) {
       warnRestrictionFailure(agent, combinedError, deny, failed.length > 0 ? failed : deny)
     }
@@ -311,6 +325,7 @@ function wrapTools(tools, ctx, config, owned) {
 export function installSessionVisionModeBoundary(ctx, config = {}) {
   if (!isObject(ctx)) return { ctx, config }
   const restrictions = new WeakMap()
+  const activeRestrictions = new Set()
   const assemblySnapshots = new WeakMap()
   const ownedVisionTools = new Map()
   let toolsView
@@ -335,6 +350,7 @@ export function installSessionVisionModeBoundary(ctx, config = {}) {
       restrictions,
       ownedVisionTools,
       ctx?.tools,
+      activeRestrictions,
     )
   }
 
@@ -354,6 +370,7 @@ export function installSessionVisionModeBoundary(ctx, config = {}) {
         restrictions,
         ownedVisionTools,
         ctx?.tools,
+        activeRestrictions,
       )
     }
     return authority
@@ -419,13 +436,30 @@ export function installSessionVisionModeBoundary(ctx, config = {}) {
     })
     ctx.on?.('agent/disposed', ({ agent }) => {
       clearAgent(agent)
-      releaseAgentToolRestriction(agent, restrictions)
+      releaseAgentToolRestriction(agent, restrictions, activeRestrictions)
     })
   } catch {
     // Minimum Hosts may not expose every lifecycle event. Prompt assembly and
     // execution guards preserve the safety boundary without making apply fail.
   }
 
+  // tools.restrict() is invoked through the long-lived Agent scope so its
+  // disposer belongs to that scope, not to this plugin fiber. A Settings/HMR
+  // recompose can therefore retire this boundary while the Agent survives. If
+  // we do not release those masks here, the next boundary generation cannot
+  // discover or dispose the old WeakMap entries and Vision tools stay hidden
+  // even after the Session selects a Router-owned route again.
+  try {
+    if (typeof ctx.effect === 'function') {
+      ctx.effect(
+        () => () => releaseAllAgentToolRestrictions(activeRestrictions),
+        'vision-router: Session Vision restriction lifecycle',
+      )
+    }
+  } catch {
+    // Agent disposal / live enable transitions still release their own masks.
+  }
+
   const wrapped = new Proxy(ctx, {
     get(target, property) {
       if (property === 'tools') {
@@ -467,6 +501,7 @@ export function installSessionVisionModeBoundary(ctx, config = {}) {
               restrictions,
               ownedVisionTools,
               target?.tools,
+              activeRestrictions,
             )
             return runWithSessionVisionModeAuthority(
               authority,

package/lib/settings-client-loader-lifecycle.js

@@ -0,0 +1,129 @@
+import { injectClientCarrierHtml, installClientScriptCarriers } from './client-script-carrier.js'
+import {
+  LOCAL_PERMISSION_CLIENT_BOUNDARY_SOURCE,
+  LOCAL_REMOTE_SETTINGS_PERMISSION_FIELD,
+  LOCAL_REMOTE_SETTINGS_PERMISSION_PATH,
+} from './local-remote-settings-permission.js'
+import { REMOTE_SETTINGS_RISK_CLIENT_BOUNDARY_SOURCE } from './remote-settings-risk-client-boundary.js'
+
+// Keep the legacy marker value so mixed-generation/HMR pages do not install
+// a second lifecycle wrapper after the source/API rename.
+const SETTINGS_CLIENT_LOADER_LIFECYCLE_MARK = 'data-vision-router-settings-rc8-lifecycle'
+
+/**
+ * Supported Hosts can replace ModuleLoader.load() inside loader.create(). This
+ * compatibility owner only re-attaches the current local-permission and
+ * remote-risk product boundaries after that queue-to-live transition; product
+ * semantics stay in their capability owners.
+ */
+export const SETTINGS_CLIENT_LOADER_LIFECYCLE_PRELUDE = String.raw`(function(){
+  'use strict';
+  var TARGET = 'dsh-vision-router';
+  ${LOCAL_PERMISSION_CLIENT_BOUNDARY_SOURCE}
+  var localPermissionBoundary = createLocalRemoteSettingsPermissionClientBoundary({
+    endpoint: '${LOCAL_REMOTE_SETTINGS_PERMISSION_PATH}',
+    field: '${LOCAL_REMOTE_SETTINGS_PERMISSION_FIELD}',
+    fetchImpl: typeof fetch === 'function'
+      ? function(url, options) { return fetch(url, options); }
+      : undefined
+  });
+
+  ${REMOTE_SETTINGS_RISK_CLIENT_BOUNDARY_SOURCE}
+  var riskBoundary = createRemoteSettingsRiskClientBoundary({
+    confirmImpl: function(message) {
+      return typeof window.confirm === 'function' && window.confirm(message) === true;
+    },
+    alertImpl: function(message) {
+      try { if (typeof window.alert === 'function') window.alert(message); } catch (_) {}
+    },
+    locale: function() {
+      try {
+        return String((document && document.documentElement && document.documentElement.lang)
+          || (navigator && navigator.language) || '');
+      } catch (_) { return ''; }
+    },
+    location: function() {
+      try { return window && window.location; } catch (_) { return undefined; }
+    },
+    normalizeLoopback: true
+  });
+
+  function patchLiveLoader(loader) {
+    if (!loader || typeof loader.load !== 'function' || loader.load.__visionRouterSettingsRc8Lifecycle) return;
+    var original = loader.load;
+    function load(spec) {
+      if (spec && spec.id === TARGET && typeof spec.factory === 'function') {
+        var factory = spec.factory;
+        spec = Object.assign({}, spec, {
+          factory: function(require) {
+            var exports = factory(require);
+            if (exports && typeof exports.apply === 'function' && !exports.apply.__visionRouterSettingsRc8Lifecycle) {
+              var apply = exports.apply;
+              var wrappedApply = function(ctx) {
+                var rest = Array.prototype.slice.call(arguments, 1);
+                var nextCtx = riskBoundary.wrapContext(localPermissionBoundary.wrapContext(ctx));
+                return apply.apply(exports, [nextCtx].concat(rest));
+              };
+              Object.defineProperty(wrappedApply, '__visionRouterSettingsRc8Lifecycle', { value: true });
+              exports.apply = wrappedApply;
+            }
+            return exports;
+          }
+        });
+      }
+      return original.call(this, spec);
+    }
+    Object.defineProperty(load, '__visionRouterSettingsRc8Lifecycle', { value: true });
+    loader.load = load;
+  }
+
+  function patchCreate(loader) {
+    if (!loader || typeof loader.create !== 'function' || loader.create.__visionRouterSettingsRc8Lifecycle) return;
+    var originalCreate = loader.create;
+    function create() {
+      var result = originalCreate.apply(this, arguments);
+      patchLiveLoader(loader);
+      return result;
+    }
+    Object.defineProperty(create, '__visionRouterSettingsRc8Lifecycle', { value: true });
+    loader.create = create;
+    if (loader.mode === 'live') patchLiveLoader(loader);
+  }
+
+  function install() {
+    if (window.__ModuleLoader__) {
+      patchCreate(window.__ModuleLoader__);
+      return;
+    }
+    var descriptor = Object.getOwnPropertyDescriptor(window, '__ModuleLoader__');
+    if (descriptor && descriptor.configurable === false) return;
+    var previousGet = descriptor && descriptor.get;
+    var previousSet = descriptor && descriptor.set;
+    var stored = descriptor && Object.prototype.hasOwnProperty.call(descriptor, 'value') ? descriptor.value : undefined;
+    Object.defineProperty(window, '__ModuleLoader__', {
+      configurable: true,
+      enumerable: !descriptor || descriptor.enumerable !== false,
+      get: function(){ return previousGet ? previousGet.call(window) : stored; },
+      set: function(value) {
+        if (previousSet) previousSet.call(window, value); else stored = value;
+        try { patchCreate(previousGet ? previousGet.call(window) : value); } catch (_) {}
+      }
+    });
+    if (stored) patchCreate(stored);
+  }
+
+  try { install(); } catch (_) {}
+})();`
+
+export function injectSettingsClientLoaderLifecyclePrelude(html) {
+  return injectClientCarrierHtml(html, SETTINGS_CLIENT_LOADER_LIFECYCLE_MARK, SETTINGS_CLIENT_LOADER_LIFECYCLE_PRELUDE)
+}
+
+export function installSettingsClientLoaderLifecycle(ctx) {
+  installClientScriptCarriers(ctx, {
+    marker: SETTINGS_CLIENT_LOADER_LIFECYCLE_MARK,
+    prelude: SETTINGS_CLIENT_LOADER_LIFECYCLE_PRELUDE,
+    label: 'vision-router: settings client loader lifecycle',
+    injectHtml: injectSettingsClientLoaderLifecyclePrelude,
+  })
+}

package/lib/settings-factory-lifecycle.js

@@ -8,20 +8,20 @@ import {
 } from './settings-limit-client-prelude.js'
 import {
   SETTINGS_NATIVE_CARD_IA_PRELUDE,
+  SETTINGS_NATIVE_CARD_STYLE,
   injectSettingsNativeCardStyle,
 } from './settings-native-card-layout.js'
+import { appendStructuredClientCarrier, injectClientCarrierHtml } from './client-script-carrier.js'
 
 const CLIENT_MARK = 'data-vision-router-settings-factory-lifecycle'
 const IA_SCRIPT_MARK = 'data-vision-router-settings-ia'
 const LIMIT_SCRIPT_MARK = 'data-vision-router-settings-limit-hardening'
 
-function scriptMarkup(mark, source) {
-  const safe = source.replace(/<\/script/gi, '<\\/script')
-  return `<script ${mark}>${safe}</script>`
+function removeScriptMarker(source, marker) {
+  const pattern = new RegExp(`<script\\b[^>]*\\b${marker}(?:\\s|=|>|/)[^>]*>[\\s\\S]*?<\\/script\\s*>`, 'gi')
+  return source.replace(pattern, '')
 }
 
-const IA_SCRIPT = scriptMarkup(IA_SCRIPT_MARK, SETTINGS_IA_CLIENT_PRELUDE)
-const LIMIT_SCRIPT = scriptMarkup(LIMIT_SCRIPT_MARK, SETTINGS_LIMIT_CLIENT_PRELUDE)
 
 /**
  * One lifecycle owner for every decorator that shapes the Vision Router
@@ -123,19 +123,30 @@ export function injectSettingsFactoryLifecycle(html) {
   let next = injectSettingsLimitClientPrelude(html)
   next = injectSettingsIaClientPrelude(next)
   next = injectSettingsNativeCardStyle(next)
-  next = next.split(LIMIT_SCRIPT).join('')
-  next = next.split(IA_SCRIPT).join('')
-
-  const safe = SETTINGS_FACTORY_LIFECYCLE_PRELUDE.replace(/<\/script/gi, '<\\/script')
-  const script = `<script ${CLIENT_MARK}>${safe}</script>`
-  const closeHead = next.indexOf('</head>')
-  return closeHead === -1
-    ? `${next}${script}`
-    : `${next.slice(0, closeHead)}${script}${next.slice(closeHead)}`
+  next = removeScriptMarker(next, LIMIT_SCRIPT_MARK)
+  next = removeScriptMarker(next, IA_SCRIPT_MARK)
+  return injectClientCarrierHtml(next, CLIENT_MARK, SETTINGS_FACTORY_LIFECYCLE_PRELUDE)
 }
 
 export function installSettingsFactoryLifecycle(ctx) {
   ctx?.inject?.(['webServer'], (webCtx) => {
+    if (typeof webCtx.on === 'function') {
+      webCtx.on('webserver/index-inject', (table) => {
+        if (!Array.isArray(table)) return
+        const historical = [`/* ${IA_SCRIPT_MARK} */`, `/* ${LIMIT_SCRIPT_MARK} */`]
+        for (let index = table.length - 1; index >= 0; index -= 1) {
+          const row = table[index]
+          if (row?.kind === 'script' && typeof row.text === 'string' && historical.some((mark) => row.text.includes(mark))) {
+            table.splice(index, 1)
+          }
+        }
+        appendStructuredClientCarrier(table, CLIENT_MARK, SETTINGS_FACTORY_LIFECYCLE_PRELUDE)
+        const styleMark = 'data-vision-router-settings-native-cards'
+        if (!table.some((row) => row?.kind === 'style' && typeof row.text === 'string' && row.text.includes(styleMark))) {
+          table.push({ kind: 'style', placement: 'head', text: `/* ${styleMark} */\n${SETTINGS_NATIVE_CARD_STYLE}` })
+        }
+      })
+    }
     webCtx.effect(
       () => webCtx.webServer.tapIndex(injectSettingsFactoryLifecycle),
       'vision-router: converged settings client factory lifecycle',

package/lib/settings-ia-client-prelude.js

@@ -1,3 +1,4 @@
+import { injectClientCarrierHtml, injectClientStyleHtml, installClientScriptCarriers } from './client-script-carrier.js'
 const CLIENT_MARK = 'data-vision-router-settings-ia'
 
 export const SETTINGS_IA_CLIENT_PRELUDE = String.raw`(function(){
@@ -180,7 +181,7 @@ export const SETTINGS_IA_CLIENT_PRELUDE = String.raw`(function(){
       function modelOptions(provider,current,allowAll){var group=groupById.get(provider),models=arr(group&&group.models),listed=new Set(models.map(function(model){return model&&model.id;}).filter(Boolean)),nodes=[h('option',{value:'',key:'__empty'},allowAll?tx('全部模型','All models'):(provider?tx('选择模型…','Choose model…'):tx('先选供应商','Choose provider first')))];if(current&&!listed.has(current))nodes.push(h('option',{value:current,key:'__stale-'+current},current+' '+tx('（已保存）','(saved)')));models.forEach(function(model){if(model&&typeof model.id==='string'&&model.id)nodes.push(h('option',{value:model.id,key:model.id},modelName(group,model.id)));});return nodes;}
       function modelRow(row,index,rows,setRows,allowAll){var ready=groups.length>0;function update(next){var copy=rows.map(function(item){return Object.assign({},item);});copy[index]=next;setRows(copy);setSaveState({status:'idle'});}function providerChanged(provider){var next=Object.assign({},row,{provider:provider,model:''});if(!allowAll)next.fallbacks=[];update(next);}function remove(){var copy=rows.filter(function(_,i){return i!==index;});setRows(copy.length?copy:[{provider:'',model:'',fallbacks:[]}]);setSaveState({status:'idle'});}return h('div',{className:'vr-chain-row',key:index},ready?h('select',{className:'vr-input vr-select',value:row.provider||'',disabled:!writable||saving,onChange:function(event){providerChanged(event.target.value);}},providerOptions(row.provider||'')):h('input',{className:'vr-input',placeholder:'provider',value:row.provider||'',disabled:!writable||saving,onChange:function(event){providerChanged(event.target.value);}}),ready?h('select',{className:'vr-input vr-select',value:row.model||'',disabled:!writable||saving||!row.provider,onChange:function(event){update(Object.assign({},row,{model:event.target.value}));}},modelOptions(row.provider||'',row.model||'',allowAll)):h('input',{className:'vr-input',placeholder:allowAll?tx('model（留空=全部）','model (empty = all)'):'model',value:row.model||'',disabled:!writable||saving,onChange:function(event){update(Object.assign({},row,{model:event.target.value}));}}),h('button',{type:'button',className:'vr-reset',disabled:!writable||saving,onClick:remove},tx('移除','Remove')));}
 
-      function generalPage(){var rows=chainRows(),configured=rows.filter(function(row){return row&&row.provider&&row.model;}),localOnly=toggleValue('localOnlyVision',false),fallback=!localOnly&&toggleValue('freeFallback',true),status=localOnly?tx('仅本地视觉策略已启用','Local-only vision policy enabled'):configured.length?tx('识图已就绪','Vision ready'):fallback?tx('已可使用内置免费识图','Built-in free vision is ready'):tx('暂无可用识图模型','No vision model configured'),ordered=configured.map(function(row){return row.model;});if(fallback)ordered.push(tx('内置免费兜底','Built-in free fallback'));var stale=catalog.status==='ready'?configured.filter(function(row){var group=groupById.get(row.provider);return !group||!arr(group.models).some(function(model){return model&&model.id===row.model;});}):[];return h(React.Fragment,null,title(tx('常规','General'),tx('这里只设置“谁负责看图”。聊天模型仍在聊天页选择。','This page only decides who reads images; the chat model is still chosen in chat.')),card([toggle('localOnlyVision',tx('仅本地视觉','Local-only vision'),tx('开启后，Vision Router 只允许回环地址上的本地视觉后端（Ollama、LM Studio 或本机自定义 HTTP）；所有云端/DSH Provider 和 OVH 免费兜底都会在运行时被硬阻止。已保存的云端配置不会删除，关闭后可恢复。主聊天模型是否联网不受此开关控制。此隐私开关只能在运行 DSH 的本机页面修改。','When enabled, Vision Router only allows visual backends on loopback addresses (Ollama, LM Studio, or custom local HTTP). Cloud/DSH providers and the OVH free fallback are blocked at runtime. Saved cloud settings are preserved for later restoration. This does not control whether the main chat model is remote. This privacy control can only be changed from the local DSH settings page.'),!local),h('div',{className:'vr-ia-status',key:'status'},h('strong',null,(localOnly?'🔒 ':configured.length||fallback?'● ':'⚠ ')+status),h('p',{className:'vr-hint'},tx('需要看图时，在聊天框旁点击「👁 识图」。','Use “👁 Vision” beside the chat box when an image needs inspection.')),h('p',{className:localOnly?'vr-hint':'vr-failed',key:'egress'},localOnly?tx('当前仅本地视觉策略正在生效：云端识图行和 OVH 免费兜底会保留配置但不会执行；只有回环地址上的本地视觉端点可接收图片。注意：当前聊天模型仍可能是云端模型。','Local-only vision is active: cloud vision rows and the OVH fallback remain saved but cannot execute; only visual endpoints on loopback addresses may receive images. The current chat model may still be remote.'):tx('数据流向：使用云端识图模型（包括默认 OVHcloud 匿名兜底）时，图片/裁剪、提示词和相关上下文会离开本机；免费或免 Key 不等于离线。若要阻止 Vision Router 将图片发送到远程视觉端点，请开启上方“仅本地视觉”。','Data flow: cloud vision models, including the default anonymous OVHcloud fallback, receive images/crops, prompts and related context; free or keyless does not mean offline. Enable Local-only vision above to prevent Vision Router from sending image data to remote visual endpoints.')),ordered.length?h('p',{className:'vr-ia-chain-summary'},ordered.join(' → ')):null,stale.length?h('p',{className:'vr-failed'},tx('有已保存的识图模型当前不在可调用目录中；请到“诊断”重新检测。','A saved vision model is not currently in the callable catalog; re-detect it in Diagnostics.')):null)]),card([h('div',{className:'vr-field',id:'vr-vision-backend-chain','data-vr-guide-target':'vision-backend',key:'chain'},fieldHead('providers',tx('识图模型','Vision models')),h('p',{className:'vr-hint'},tx('从上到下依次尝试；前一个失败时自动切换到下一个。','Models are tried from top to bottom and fall through automatically on failure.')),rows.map(function(row,index){return modelRow(row,index,rows,setChainDraft,false);}),h('button',{type:'button',className:'vr-btn',disabled:!writable||saving,onClick:function(){setChainDraft(rows.concat([{provider:'',model:'',fallbacks:[]}]))}},tx('+ 添加备用识图模型','+ Add fallback vision model'))),toggle('freeFallback',tx('内置免费兜底','Built-in free fallback'),localOnly?tx('仅本地视觉开启时，OVH 免费兜底由运行时强制禁用；这里保留原设置，关闭仅本地视觉后可恢复。','The OVH fallback is runtime-blocked while Local-only vision is enabled. Its saved value is preserved and becomes active again when Local-only vision is turned off.'):tx('这是远程 OVHcloud 服务；前面的模型都失败后会上传图片并自动尝试，无需 API Key。','This is a remote OVHcloud service. After earlier models fail, it uploads the image and tries automatically; no API key is required.'),localOnly)]));}
+      function generalPage(){var rows=chainRows(),configured=rows.filter(function(row){return row&&row.provider&&row.model;}),localOnly=toggleValue('localOnlyVision',false),fallback=!localOnly&&toggleValue('freeFallback',true),status=localOnly?tx('仅本地视觉策略已启用','Local-only vision policy enabled'):configured.length?tx('识图已就绪','Vision ready'):fallback?tx('已可使用内置免费识图','Built-in free vision is ready'):tx('暂无可用识图模型','No vision model configured'),ordered=configured.map(function(row){return row.model;});if(fallback)ordered.push(tx('内置免费兜底','Built-in free fallback'));var stale=catalog.status==='ready'?configured.filter(function(row){var group=groupById.get(row.provider);return !group||!arr(group.models).some(function(model){return model&&model.id===row.model;});}):[];return h(React.Fragment,null,title(tx('常规','General'),tx('这里只设置“谁负责看图”。聊天模型仍在聊天页选择。','This page only decides who reads images; the chat model is still chosen in chat.')),card([toggle('localOnlyVision',tx('仅本地视觉','Local-only vision'),tx('开启后，Vision Router 只允许回环地址上的本地视觉后端（Ollama、LM Studio 或本机自定义 HTTP）；所有云端/DSH Provider 和 OVH 免费兜底都会在运行时被硬阻止。已保存的云端配置不会删除，关闭后可恢复。Vision Router 不会把图片和裁剪发送到云端视觉服务，但视觉后端返回的描述、OCR、坐标等识图结果文本仍会交给当前聊天模型；若聊天模型在云端，图片语义仍可能离开本机。严格纯本地还需同时选择本地聊天模型。此隐私开关只能在运行 DSH 的本机页面修改。','When enabled, Vision Router only allows visual backends on loopback addresses (Ollama, LM Studio, or custom local HTTP). Cloud/DSH providers and the OVH free fallback are blocked at runtime. Saved cloud settings are preserved for later restoration. Vision Router does not send image bytes or crops to cloud vision services, but derived result text—descriptions, OCR, and coordinates—is still passed to the current chat model; if that model is remote, image semantics may still leave this machine. For a strict end-to-end local workflow, select a local chat model too. This privacy control can only be changed from the local DSH settings page.'),!local),h('div',{className:'vr-ia-status',key:'status'},h('strong',null,(localOnly?'🔒 ':configured.length||fallback?'● ':'⚠ ')+status),h('p',{className:'vr-hint'},tx('需要看图时，在聊天框旁点击「👁 识图」。','Use “👁 Vision” beside the chat box when an image needs inspection.')),h('p',{className:localOnly?'vr-hint':'vr-failed',key:'egress'},localOnly?tx('当前仅本地视觉策略正在生效：云端识图行和 OVH 免费兜底会保留配置但不会执行；Vision Router 只会把图片和裁剪发往回环地址上的本地视觉端点。识图结果文本仍会交给当前聊天模型；若聊天模型在云端，图片语义仍可能离开本机。严格纯本地还需同时选择本地聊天模型。','Local-only vision is active: cloud vision rows and the OVH fallback remain saved but cannot execute; Vision Router sends image bytes and crops only to local visual endpoints on loopback addresses. Derived result text is still passed to the current chat model; if that model is remote, image semantics may still leave this machine. For a strict end-to-end local workflow, select a local chat model too.'):tx('数据流向：使用云端识图模型（包括默认 OVHcloud 匿名兜底）时，图片/裁剪、提示词和相关上下文会离开本机；免费或免 Key 不等于离线。若要阻止 Vision Router 将图片发送到远程视觉端点，请开启上方“仅本地视觉”。','Data flow: cloud vision models, including the default anonymous OVHcloud fallback, receive images/crops, prompts and related context; free or keyless does not mean offline. Enable Local-only vision above to prevent Vision Router from sending image data to remote visual endpoints.')),ordered.length?h('p',{className:'vr-ia-chain-summary'},ordered.join(' → ')):null,stale.length?h('p',{className:'vr-failed'},tx('有已保存的识图模型当前不在可调用目录中；请到“诊断”重新检测。','A saved vision model is not currently in the callable catalog; re-detect it in Diagnostics.')):null)]),card([h('div',{className:'vr-field',id:'vr-vision-backend-chain','data-vr-guide-target':'vision-backend',key:'chain'},fieldHead('providers',tx('识图模型','Vision models')),h('p',{className:'vr-hint'},tx('从上到下依次尝试；前一个失败时自动切换到下一个。','Models are tried from top to bottom and fall through automatically on failure.')),rows.map(function(row,index){return modelRow(row,index,rows,setChainDraft,false);}),h('button',{type:'button',className:'vr-btn',disabled:!writable||saving,onClick:function(){setChainDraft(rows.concat([{provider:'',model:'',fallbacks:[]}]))}},tx('+ 添加备用识图模型','+ Add fallback vision model'))),toggle('freeFallback',tx('内置免费兜底','Built-in free fallback'),localOnly?tx('仅本地视觉开启时，OVH 免费兜底由运行时强制禁用；这里保留原设置，关闭仅本地视觉后可恢复。','The OVH fallback is runtime-blocked while Local-only vision is enabled. Its saved value is preserved and becomes active again when Local-only vision is turned off.'):tx('这是远程 OVHcloud 服务；前面的模型都失败后会上传图片并自动尝试，无需 API Key。','This is a remote OVHcloud service. After earlier models fail, it uploads the image and tries automatically; no API key is required.'),localOnly)]));}
       function strategyPage(){
         var structured=toggleValue('structuredVisionBootstrap',false);
         var rawDepth=String(value('visionDepth','standard')||'standard');
@@ -261,7 +262,7 @@ export const SETTINGS_IA_CLIENT_PRELUDE = String.raw`(function(){
       function advancedPage(){var routing=toggleValue('routing',false),turnBudget=Number(value('visionTurnBudgetMs',0))||0,customBudget=turnBudget>0;return h(React.Fragment,null,title(tx('高级','Advanced'),tx('这些默认值对大多数用户已经合适。','Defaults are suitable for most users.')),card([h('h4',{className:'vr-ia-subtitle',key:'p'},tx('性能与稳定性','Performance & stability')),toggle('downscale',tx('自动缩放','Auto downscale')),numberField('downscaleMaxPixels',tx('图片像素上限','Image pixel limit'),null,1000,100000000),toggle('cache',tx('识图缓存','Vision answer cache')),numberField('cacheTtlSeconds',tx('缓存有效期（秒）','Cache TTL (seconds)'),null,0,31536000),numberField('cacheMaxEntries',tx('最大缓存数量','Maximum cached answers'),null,1,100000),h('h4',{className:'vr-ia-subtitle',key:'t'},tx('超时','Timeouts')),numberField('timeoutMs',tx('单次模型请求','Single model request'),tx('毫秒。','Milliseconds.'),1000,600000),numberField('visionTaskTimeoutMs',tx('单个视觉任务','Single visual task'),tx('包含该任务内部的重试和备用模型；不是每个后端各自一份。','Includes retries and fallbacks inside the task; it is not a fresh budget per backend.'),1000,180000),numberField('ocrTimeoutMs',tx('OCR 任务','OCR task'),null,1000,120000),h('div',{className:'vr-field',key:'ocr-engine'},fieldHead('ocrEngine',tx('OCR 默认引擎','Default OCR engine')),h('select',{className:'vr-input',value:String(value('ocrEngine','auto')||'auto'),disabled:!writable||saving,onChange:function(event){setValue('ocrEngine',event.target.value);}},h('option',{value:'auto'},tx('自动（Tesseract → 视觉模型）','Auto (Tesseract → vision)')),h('option',{value:'tesseract'},tx('仅 Tesseract','Tesseract only')),h('option',{value:'vision'},tx('仅视觉模型','Vision model only'))),h('p',{className:'vr-hint'},tx('vision_ocr 未显式指定 engine 时使用；单次调用的 engine=tesseract/vision 始终优先。','Used when vision_ocr does not explicitly choose an engine; per-call engine=tesseract/vision always wins.'))),h('div',{className:'vr-field',key:'budget'},fieldHead('visionTurnBudgetMs',tx('整轮视觉工具上限','Whole-turn vision-tool limit')),h('select',{className:'vr-input',value:customBudget?'custom':'unlimited',disabled:!writable||saving,onChange:function(event){setValue('visionTurnBudgetMs',event.target.value==='unlimited'?0:(turnBudget>0?turnBudget:180000));}},h('option',{value:'unlimited'},tx('不限制（推荐）','Unlimited (recommended)')),h('option',{value:'custom'},tx('自定义','Custom'))),customBudget?numberField('visionTurnBudgetMs',tx('上限（毫秒）','Limit (ms)'),null,10000,600000):null)]),card([h('h4',{className:'vr-ia-subtitle',key:'cost'},tx('模型顺序与成本','Model order & cost')),toggle('freeCloudFirst',tx('免费云模型优先','Try free cloud models first'))]),card([h('h4',{className:'vr-ia-subtitle',key:'scope'},tx('识图模式范围','Vision mode scope')),toggle('autoWrapProviders',tx('自动允许已启用模型使用识图','Automatically allow enabled models to use Vision mode')),wrappersEditor()]),local?card([h('h4',{className:'vr-ia-subtitle',key:'network'},tx('网络与远程','Network & remote')),h('p',{className:'vr-hint',key:'network-authority'},tx('默认沿用 DSH/Host 的网络出口；只有需要让视觉请求走不同出口时才填写下方覆盖。','By default Vision Router follows the DSH/Host network path. Use the override below only when vision requests need a different egress route.')),toggle('allowRemoteSettings',tx('允许可信 Host 远程修改设置','Allow trusted-host remote settings'),tx('默认关闭；trustedHosts 不是身份认证。','Off by default; trustedHosts is not authentication.')),textField('proxy',tx('视觉专用代理覆盖','Vision-only proxy override'),tx('留空即沿用 DSH/Host；支持 http(s)://、socks5://，并兼容旧 socks5h://。','Leave empty to follow DSH/Host; supports http(s):// and socks5://, with legacy socks5h:// compatibility.')),textareaArray('proxyHosts',tx('视觉代理覆盖域名','Vision proxy override hosts'),tx('仅在上方覆盖非空时生效；每行一个，其余请求继续沿用 DSH/Host。','Used only when the override above is non-empty; one host per line. All other requests keep the DSH/Host path.'))]):null,card([h('h4',{className:'vr-ia-subtitle',key:'compat'},tx('兼容模式','Compatibility')),toggle('rewriteImages',tx('保护纯文本模型','Protect text-only models')),toggle('routing',tx('整轮视觉路由（旧工作流）','Whole-turn vision routing (legacy workflow)')),routing?toggle('reverseRouting',tx('纯文字消息继续使用聊天模型','Keep text-only messages on the chat model')):null,routing?textProviderEditor():null]),card([h('button',{type:'button',className:'vr-btn',key:'dev',onClick:function(){setOpen(Object.assign({},open,{developer:!open.developer}));}},open.developer?tx('隐藏开发者设置','Hide developer settings'):tx('显示开发者设置','Show developer settings')),open.developer?h('div',{className:'vr-ia-dev',key:'body'},toggle('progressiveTools',tx('渐进式工具暴露','Progressive tool exposure')),h('p',{className:'vr-hint',key:'progressive-restart'},tx('保存后需重启 DSH 才生效。','Restart DSH after saving for this change to take effect.')),local?toggle('stealth','Stealth'):null,local?textField('wrapperRoute',tx('包装路由名','Wrapper route name')):null,local?textField('chainRoute',tx('视觉链路由名','Vision chain route name')):null,textareaArray('extraVisionModels',tx('额外视觉能力标记','Extra vision capability labels'),tx('只有诊断发现模型未声明图片能力时才需要。','Needed only when diagnostics show missing image-capability metadata.'))):null]));}
       function diagnosticValue(label,valueText){return h('div',{className:'vr-ia-diag-row',key:label},h('span',null,label),h('strong',null,valueText));}
       function updatePanel(){if(!local)return null;var result=updateState.result,auto=result&&result.autoUpdate,current=result&&result.currentVersion?result.currentVersion:tx('检测中','Checking'),latest=result&&result.latestVersion?result.latestVersion:'—',available=result&&result.ok===true&&result.updateAvailable===true,profile=auto&&auto.profile?auto.profile:'web',manualVersion=result&&result.latestVersion?result.latestVersion:'<version>',spec='dsh-vision-router@'+manualVersion,pnpm='pnpm dsh plugin --profile '+profile+' add '+spec,npx='npx @deepseek-ai/dsh plugin --profile '+profile+' add '+spec;return card([h('h4',{className:'vr-ia-subtitle',key:'title'},tx('版本更新','Updates')),h('p',{className:'vr-hint',key:'status'},updateState.status==='running'?tx('正在检查更新…','Checking for updates…'):result&&result.ok===false?tx('更新检查失败：','Update check failed: ')+String(result.error||'unknown'):available?tx('发现新版本：v','Update available: v')+latest+tx('（当前 v',' (current v')+current+')':result&&result.ok===true?tx('已是最新版本 v','Up to date: v')+current:tx('尚未检查','Not checked yet')),h('div',{className:'vr-ia-actions',key:'actions'},h('button',{type:'button',className:'vr-btn',disabled:updateState.status==='running',onClick:function(){void runUpdateCheck(true);}},tx('检查更新','Check for updates')),available&&auto&&auto.supported===true&&auto.token?h('button',{type:'button',className:'vr-btn vr-btn-save',disabled:selfUpdateState.status==='running',onClick:function(){void runSelfUpdate();}},selfUpdateState.status==='running'?tx('更新中…','Updating…'):tx('一键更新','Update now')):null),selfUpdateState.status==='done'&&selfUpdateState.result?h('p',{className:'vr-hint',key:'updated'},tx('更新完成，请重启 DSH。','Update complete. Restart DSH.')):selfUpdateState.error?h('p',{className:'vr-failed',key:'uerr'},String(selfUpdateState.error)):null,available&&(!auto||auto.supported!==true)?h('div',{className:'vr-ia-manual',key:'manual'},h('p',{className:'vr-hint'},tx('当前安装方式不支持安全的一键更新，请使用与你当前 DSH 安装方式一致的命令：','This install method cannot be safely auto-updated. Use the command matching your DSH installation:')),h('code',{className:'vr-ia-code'},pnpm),h('code',{className:'vr-ia-code'},npx)):null]);}
-      function diagnosticsPage(){var providerCount=groups.length,modelCount=groups.reduce(function(total,group){return total+arr(group&&group.models).length;},0),configured=chainRows().filter(function(row){return row&&row.provider&&row.model;}).length,ollama=obj(value('localOllama',{})),lm=obj(value('localLmStudio',{})),testText=!local?tx('仅本机可见','Local only'):testState.status==='running'?tx('检测中','Checking'):testState.status==='done'&&testState.result&&testState.result.ok===true?tx('连接正常','Connected'):testState.status==='done'?tx('连接失败','Failed'):tx('未检测','Not checked'),capsText=caps.status==='ready'?tx('正常','Ready'):caps.status==='loading'?tx('检测中','Checking'):caps.status==='error'?tx('不可用','Unavailable'):tx('未检测','Not checked');var rows=[[tx('设置协议','Settings contract'),String(value('settingsContractRevision','—'))],[tx('模型目录','Model catalog'),catalog.status==='ready'?tx('正常','Ready'):catalog.status==='loading'?tx('检测中','Checking'):tx('不可用','Unavailable')],[tx('图片能力元数据','Image capability metadata'),capsText],[tx('可选 Provider','Selectable providers'),String(providerCount)],[tx('可选模型','Selectable models'),String(modelCount)],[tx('已配置识图模型','Configured vision models'),String(configured)],[tx('内置免费兜底','Built-in free fallback'),toggleValue('freeFallback',true)?(caps.builtinFallback.length?tx('已启用，','Enabled, ')+caps.builtinFallback.length+tx(' 个模型',' models'):tx('已启用','Enabled')):tx('已关闭','Disabled')],[tx('后端连接','Backend connection'),testText],[tx('Ollama','Ollama'),local?(ollama.enabled===true?tx('已启用','Enabled'):tx('未启用','Disabled')):tx('仅本机可见','Local only')],[tx('LM Studio','LM Studio'),local?(lm.enabled===true?tx('已启用','Enabled'):tx('未启用','Disabled')):tx('仅本机可见','Local only')],[tx('桌面截图','Desktop capture'),local?(toggleValue('desktopScreenshot',false)?tx('已启用','Enabled'):tx('未启用','Disabled')):tx('仅本机可见','Local only')],[tx('网络出口','Network egress'),local?(String(value('proxy','')).trim()?tx('视觉专用覆盖','Vision-only override'):tx('DSH/Host（默认）','DSH/Host (default)')):tx('仅本机可见','Local only')],[tx('远程设置','Remote settings'),local?(toggleValue('allowRemoteSettings',false)?tx('已启用','Enabled'):tx('未启用','Disabled')):tx('当前为远程安全视图','Remote safe view')]];function reportText(){return ['Vision Router diagnostics'].concat(rows.map(function(row){return row[0]+': '+row[1];}),['doctor: dsh-vision-router doctor']).join('\n');}async function copyReport(){try{if(typeof navigator!=='undefined'&&navigator.clipboard&&typeof navigator.clipboard.writeText==='function')await navigator.clipboard.writeText(reportText());setActionState({status:'copied'});}catch(error){setActionState({status:'error',error:error&&error.message?error.message:String(error)});}}return h(React.Fragment,null,title(tx('诊断','Diagnostics'),tx('状态页不会修改你的模型/路由设置；连接测试和更新操作会明确由按钮触发。','The status page does not change model or routing settings; connection tests and updates are explicit actions.')),card(rows.map(function(row){return diagnosticValue(row[0],row[1]);})),card([h('div',{className:'vr-ia-actions',key:'actions'},local?h('button',{type:'button',className:'vr-btn',disabled:testState.status==='running',onClick:function(){void runTestConnection();}},tx('测试连接','Test connection')):null,h('button',{type:'button',className:'vr-btn',onClick:function(){invalidateCatalog();}},tx('重新检测模型','Re-detect models')),local?h('button',{type:'button',className:'vr-btn',onClick:function(){void openLogs();}},tx('打开日志文件夹','Open logs folder')):null,h('button',{type:'button',className:'vr-btn',onClick:function(){void copyReport();}},tx('复制诊断信息','Copy diagnostics'))),h('p',{className:'vr-hint',key:'doctor'},tx('需要完整 DSH 版本、安装、Profile、运行时路由和会话诊断时执行：dsh-vision-router doctor','For the full DSH version, installation, profile, runtime-route, and session report, run: dsh-vision-router doctor')),testState.status==='done'&&testState.result&&testState.result.ok!==true?h('p',{className:'vr-failed',key:'testerr'},String(testState.result.error||tx('连接测试失败','Connection test failed'))):null,actionState.status==='error'?h('p',{className:'vr-failed',key:'aerr'},String(actionState.error||'unknown')):null]),updatePanel());}
+      function diagnosticsPage(){var providerCount=groups.length,modelCount=groups.reduce(function(total,group){return total+arr(group&&group.models).length;},0),configured=chainRows().filter(function(row){return row&&row.provider&&row.model;}).length,ollama=obj(value('localOllama',{})),lm=obj(value('localLmStudio',{})),testText=!local?tx('仅本机可见','Local only'):testState.status==='running'?tx('检测中','Checking'):testState.status==='done'&&testState.result&&testState.result.ok===true?tx('连接正常','Connected'):testState.status==='done'?tx('连接失败','Failed'):tx('未检测','Not checked'),capsText=caps.status==='ready'?tx('正常','Ready'):caps.status==='loading'?tx('检测中','Checking'):caps.status==='error'?tx('不可用','Unavailable'):tx('未检测','Not checked');var rows=[[tx('设置协议','Settings contract'),String(value('settingsContractRevision','—'))],[tx('模型目录','Model catalog'),catalog.status==='ready'?tx('正常','Ready'):catalog.status==='loading'?tx('检测中','Checking'):tx('不可用','Unavailable')],[tx('图片能力元数据','Image capability metadata'),capsText],[tx('可选 Provider','Selectable providers'),String(providerCount)],[tx('可选模型','Selectable models'),String(modelCount)],[tx('已配置识图模型','Configured vision models'),String(configured)],[tx('内置免费兜底','Built-in free fallback'),toggleValue('freeFallback',true)?(caps.builtinFallback.length?tx('已启用，','Enabled, ')+caps.builtinFallback.length+tx(' 个模型',' models'):tx('已启用','Enabled')):tx('已关闭','Disabled')],[tx('后端连接','Backend connection'),testText],[tx('Ollama','Ollama'),local?(ollama.enabled===true?tx('已启用','Enabled'):tx('未启用','Disabled')):tx('仅本机可见','Local only')],[tx('LM Studio','LM Studio'),local?(lm.enabled===true?tx('已启用','Enabled'):tx('未启用','Disabled')):tx('仅本机可见','Local only')],[tx('桌面截图','Desktop capture'),local?(toggleValue('desktopScreenshot',false)?tx('已启用','Enabled'):tx('未启用','Disabled')):tx('仅本机可见','Local only')],[tx('网络出口','Network egress'),local?(String(value('proxy','')).trim()?tx('视觉专用覆盖','Vision-only override'):tx('DSH/Host（默认）','DSH/Host (default)')):tx('仅本机可见','Local only')],[tx('识图结果去向','Vision result destination'),tx('当前聊天模型（可能为云端）','Current chat model (may be remote)')],[tx('远程设置','Remote settings'),local?(toggleValue('allowRemoteSettings',false)?tx('已启用','Enabled'):tx('未启用','Disabled')):tx('当前为远程安全视图','Remote safe view')]];function reportText(){return ['Vision Router diagnostics'].concat(rows.map(function(row){return row[0]+': '+row[1];}),['doctor: dsh-vision-router doctor']).join('\n');}async function copyReport(){try{if(typeof navigator!=='undefined'&&navigator.clipboard&&typeof navigator.clipboard.writeText==='function')await navigator.clipboard.writeText(reportText());setActionState({status:'copied'});}catch(error){setActionState({status:'error',error:error&&error.message?error.message:String(error)});}}return h(React.Fragment,null,title(tx('诊断','Diagnostics'),tx('状态页不会修改你的模型/路由设置；连接测试和更新操作会明确由按钮触发。','The status page does not change model or routing settings; connection tests and updates are explicit actions.')),card(rows.map(function(row){return diagnosticValue(row[0],row[1]);})),card([h('div',{className:'vr-ia-actions',key:'actions'},local?h('button',{type:'button',className:'vr-btn',disabled:testState.status==='running',onClick:function(){void runTestConnection();}},tx('测试连接','Test connection')):null,h('button',{type:'button',className:'vr-btn',onClick:function(){invalidateCatalog();}},tx('重新检测模型','Re-detect models')),local?h('button',{type:'button',className:'vr-btn',onClick:function(){void openLogs();}},tx('打开日志文件夹','Open logs folder')):null,h('button',{type:'button',className:'vr-btn',onClick:function(){void copyReport();}},tx('复制诊断信息','Copy diagnostics'))),h('p',{className:'vr-hint',key:'doctor'},tx('需要完整 DSH 版本、安装、Profile、运行时路由和会话诊断时执行：dsh-vision-router doctor','For the full DSH version, installation, profile, runtime-route, and session report, run: dsh-vision-router doctor')),testState.status==='done'&&testState.result&&testState.result.ok!==true?h('p',{className:'vr-failed',key:'testerr'},String(testState.result.error||tx('连接测试失败','Connection test failed'))):null,actionState.status==='error'?h('p',{className:'vr-failed',key:'aerr'},String(actionState.error||'unknown')):null]),updatePanel());}
 
       var pages=[['general',tx('常规','General')],['strategy',tx('识图策略','Vision strategy')],['local',tx('本地与设备','Local & device')],['advanced',tx('高级','Advanced')],['diagnostics',tx('诊断','Diagnostics')]];
       var content=page==='strategy'?strategyPage():page==='local'?localPageContent():page==='advanced'?advancedPage():page==='diagnostics'?diagnosticsPage():generalPage();
@@ -282,17 +283,16 @@ const SETTINGS_IA_STYLE = String.raw`
 `
 
 export function injectSettingsIaClientPrelude(html) {
-  if (typeof html !== 'string' || html.includes(CLIENT_MARK)) return html
-  const script = `<style ${CLIENT_MARK}>${SETTINGS_IA_STYLE}</style><script ${CLIENT_MARK}>${SETTINGS_IA_CLIENT_PRELUDE.replace(/<\/script/gi, '<\\/script')}</script>`
-  const closeHead = html.indexOf('</head>')
-  return closeHead === -1 ? `${html}${script}` : `${html.slice(0, closeHead)}${script}${html.slice(closeHead)}`
+  const withStyle = injectClientStyleHtml(html, CLIENT_MARK, SETTINGS_IA_STYLE)
+  return injectClientCarrierHtml(withStyle, CLIENT_MARK, SETTINGS_IA_CLIENT_PRELUDE)
 }
 
 export function installSettingsIaClientPrelude(ctx) {
-  ctx?.inject?.(['webServer'], (webCtx) => {
-    webCtx.effect(
-      () => webCtx.webServer.tapIndex(injectSettingsIaClientPrelude),
-      'vision-router: settings information architecture client prelude',
-    )
+  installClientScriptCarriers(ctx, {
+    marker: CLIENT_MARK,
+    prelude: SETTINGS_IA_CLIENT_PRELUDE,
+    label: 'vision-router: Settings IA client prelude',
+    injectHtml: injectSettingsIaClientPrelude,
+    style: { marker: CLIENT_MARK, text: SETTINGS_IA_STYLE },
   })
 }

package/lib/settings-limit-client-prelude.js

@@ -1,3 +1,4 @@
+import { injectClientCarrierHtml, installClientScriptCarriers } from './client-script-carrier.js'
 import { SETTINGS_NUMBER_META } from './settings-number-contract.js'
 
 const CLIENT_MARK = 'data-vision-router-settings-limit-hardening'
@@ -94,17 +95,14 @@ export const SETTINGS_LIMIT_CLIENT_PRELUDE = String.raw`(function(){
 })();`
 
 export function injectSettingsLimitClientPrelude(html) {
-  if (typeof html !== 'string' || html.includes(CLIENT_MARK)) return html
-  const script = `<script ${CLIENT_MARK}>${SETTINGS_LIMIT_CLIENT_PRELUDE.replace(/<\/script/gi, '<\\/script')}</script>`
-  const closeHead = html.indexOf('</head>')
-  return closeHead === -1 ? `${html}${script}` : `${html.slice(0, closeHead)}${script}${html.slice(closeHead)}`
+  return injectClientCarrierHtml(html, CLIENT_MARK, SETTINGS_LIMIT_CLIENT_PRELUDE)
 }
 
 export function installSettingsLimitClientPrelude(ctx) {
-  ctx?.inject?.(['webServer'], (webCtx) => {
-    webCtx.effect(
-      () => webCtx.webServer.tapIndex(injectSettingsLimitClientPrelude),
-      'vision-router: settings numeric contract and limit diagnostics prelude',
-    )
+  installClientScriptCarriers(ctx, {
+    marker: CLIENT_MARK,
+    prelude: SETTINGS_LIMIT_CLIENT_PRELUDE,
+    label: 'vision-router: settings numeric limits',
+    injectHtml: injectSettingsLimitClientPrelude,
   })
 }

package/lib/sharp-runtime.js

@@ -10,7 +10,6 @@ import { Worker } from 'node:worker_threads'
 import { createRequire } from 'node:module'
 import { pathToFileURL } from 'node:url'
 import { promisify } from 'node:util'
-import { appendPromptToImageOnlyMessage, fetchWithOpenAICompatibility } from './http-compat.js'
 import {
   directSessionAffinityHeaders,
   isOfficialOpenCodeGoUrl,
@@ -19,12 +18,6 @@ import {
   sessionIdentityOf,
 } from './session-affinity.js'
 import { runWithVisionSessionAffinity, streamWithVisionSessionAffinity } from './session-affinity-runtime.js'
-import {
-  routingCorrectionFor,
-  toAnthropicMessages,
-  callAnthropicCompatible,
-  anthropicMediaType,
-} from './catalog-corrections.js'
 import { createCachedUpdateChecker } from './update-check.js'
 import { probeLocalBackends } from './local-connection-probe.js'
 import { detectDshSelfUpdatePlan, runDshPluginUpdate } from './self-update.js'

package/lib/strict-live-model-client-prelude.js

@@ -1,3 +1,4 @@
+import { injectClientCarrierHtml, installClientScriptCarriers } from './client-script-carrier.js'
 import { LIVE_MODEL_CLIENT_PRELUDE } from './live-model-client-prelude.js'
 
 const CLIENT_PRELUDE_MARK = 'data-vision-router-live-models'
@@ -120,18 +121,14 @@ function replaceMergeCatalog(source) {
 export const STRICT_LIVE_MODEL_CLIENT_PRELUDE = replaceMergeCatalog(LIVE_MODEL_CLIENT_PRELUDE)
 
 export function injectStrictLiveModelClientPrelude(html) {
-  if (typeof html !== 'string' || html.includes(CLIENT_PRELUDE_MARK)) return html
-  const script = `<script ${CLIENT_PRELUDE_MARK}>${STRICT_LIVE_MODEL_CLIENT_PRELUDE.replace(/<\/script/gi, '<\\/script')}</script>`
-  const closeHead = html.indexOf('</head>')
-  if (closeHead !== -1) return `${html.slice(0, closeHead)}${script}${html.slice(closeHead)}`
-  return `${html}${script}`
+  return injectClientCarrierHtml(html, CLIENT_PRELUDE_MARK, STRICT_LIVE_MODEL_CLIENT_PRELUDE)
 }
 
 export function installStrictLiveModelClientPrelude(ctx) {
-  ctx?.inject?.(['webServer'], (webCtx) => {
-    webCtx.effect(
-      () => webCtx.webServer.tapIndex(injectStrictLiveModelClientPrelude),
-      'vision-router: strict live model client prelude',
-    )
+  installClientScriptCarriers(ctx, {
+    marker: CLIENT_PRELUDE_MARK,
+    prelude: STRICT_LIVE_MODEL_CLIENT_PRELUDE,
+    label: 'vision-router: strict live model client prelude',
+    injectHtml: injectStrictLiveModelClientPrelude,
   })
 }

package/lib/structured-flow-hardening.js

@@ -4,6 +4,7 @@ import {
 } from './turn-budget-context.js'
 import { runWithDepthConfig } from './depth-guidance.js'
 import { runtimeLanguageFor } from './runtime-i18n.js'
+import { visionRouterMessageSource } from './session-message-source-compat.js'
 
 const STRUCTURED_EVIDENCE_TOOLS = new Set([
   'vision_describe',
@@ -440,7 +441,7 @@ function appendGuardMessage(decision, payload, state, config) {
               ? '已达到本轮设置的深挖次数上限。不要再调用视觉工具；请基于已经获得的证据作答，并明确仍存在的不确定性。'
               : '连续多次后续视觉调用都没有产出可用证据。不要继续重复调用视觉工具；请基于已经获得的证据作答，并明确仍存在的不确定性。',
       }],
-      source: { kind: 'plugin', plugin: 'dsh-vision-router' },
+      source: visionRouterMessageSource(payload?.agent?.session),
     }
     return appendSyntheticGuardOnce(decision, baseMessages, state, message, true)
   }
@@ -461,7 +462,7 @@ function appendGuardMessage(decision, payload, state, config) {
         ? 'The structured bootstrap is complete, but no usable task-directed visual evidence has been produced yet. Call at least one vision tool that can add or verify evidence, then answer after it succeeds.'
         : '结构化预识别已经完成，但目前还没有产出可用的任务定向视觉证据。请至少调用一个能新增或验证证据的视觉工具，成功后再作答。',
     }],
-    source: { kind: 'plugin', plugin: 'dsh-vision-router' },
+    source: visionRouterMessageSource(payload?.agent?.session),
   }
   return appendSyntheticGuardOnce(decision, baseMessages, state, message)
 }

package/lib/v2-settings-ia-integration.js

@@ -1,4 +1,4 @@
-import { htmlHasScriptMarker } from './html-script-marker.js'
+import { appendStructuredClientCarrier, injectClientCarrierHtml } from './client-script-carrier.js'
 
 const V2_SETTINGS_IA_MARK = 'data-vision-router-v2-settings-ia'
 
@@ -241,16 +241,31 @@ export const V2_SETTINGS_IA_CLIENT = String.raw`(function(){
 })();`
 
 export function injectV2SettingsIaIntegration(html) {
-  if (typeof html !== 'string' || htmlHasScriptMarker(html, V2_SETTINGS_IA_MARK)) return html
-  const client = V2_SETTINGS_IA_CLIENT.replace(/<\/script/gi, '<\\/script')
-  const nodes = `<style>${V2_SETTINGS_IA_STYLE}</style><script ${V2_SETTINGS_IA_MARK}>${client}</script>`
-  const closeHead = html.indexOf('</head>')
-  return closeHead === -1 ? `${html}${nodes}` : `${html.slice(0, closeHead)}${nodes}${html.slice(closeHead)}`
+  if (typeof html !== 'string') return html
+  const styleMark = 'data-vision-router-v2-settings-ia-style'
+  let next = html
+  if (!next.includes(styleMark)) {
+    const style = `<style ${styleMark}>${V2_SETTINGS_IA_STYLE}</style>`
+    const closeHead = next.indexOf('</head>')
+    next = closeHead === -1 ? `${next}${style}` : `${next.slice(0, closeHead)}${style}${next.slice(closeHead)}`
+  }
+  return injectClientCarrierHtml(next, V2_SETTINGS_IA_MARK, V2_SETTINGS_IA_CLIENT)
 }
 
 export function installV2SettingsIaIntegration(ctx) {
   if (!ctx || typeof ctx.inject !== 'function') return
   ctx.inject(['webServer'], (webCtx) => {
+    if (typeof webCtx.on === 'function') {
+      webCtx.on('webserver/index-inject', (table) => {
+        if (!Array.isArray(table)) return
+        appendStructuredClientCarrier(table, V2_SETTINGS_IA_MARK, V2_SETTINGS_IA_CLIENT)
+        const styleMark = 'data-vision-router-v2-settings-ia-style'
+        if (!table.some((row) => row?.kind === 'style' && typeof row.text === 'string' && row.text.includes(styleMark))) {
+          table.push({ kind: 'style', placement: 'head', text: `/* ${styleMark} */
+${V2_SETTINGS_IA_STYLE}` })
+        }
+      })
+    }
     webCtx.effect(
       () => webCtx.webServer.tapIndex(injectV2SettingsIaIntegration),
       'vision-router: integrate v2 routing controls into settings IA',

package/lib/vision-backend-runtime-policy.js

@@ -215,7 +215,7 @@ function failureStream(message, code = 'VISION_IMAGE_DELIVERY_UNAVAILABLE') {
   }
 }
 
-function directStream(ctx, core, plan, call, logger, source) {
+function directStream(ctx, core, plan, call, logger, source, providerTransport) {
   return {
     async *[Symbol.asyncIterator]() {
       const started = Date.now()
@@ -252,6 +252,7 @@ function directStream(ctx, core, plan, call, logger, source) {
             maxTokens: call.maxTokens ?? 4096,
             signal: call.signal,
             sessionId: call.sessionId,
+            providerTransport,
             resolveCredential: async (ref) => ref === keyRef ? apiKey : undefined,
           },
         )
@@ -349,7 +350,7 @@ function llmWithRuntimePolicy(ctx, llm, options) {
                 )
                 return
               }
-              yield* directStream(ctx, core, plan, call, logger, source)
+              yield* directStream(ctx, core, plan, call, logger, source, options.providerTransport)
               return
             }