dsh-vision-router 2.2.8 → 3.0.0

package/lib/public-config.js

@@ -0,0 +1,36 @@
+import z from '@deepseek-ai/schemastery';
+// Increment whenever the browser-visible settings contract gains a field whose
+// absence changes write semantics. The resolved schema also publishes this as
+// a read-only-by-convention handshake for browser/Host compatibility checks.
+export const SETTINGS_CONTRACT_REVISION = 7;
+/**
+ * Compose DVR's public product settings onto the mature Core schema.
+ *
+ * Schemastery object schemas expose set() as the supported replacement seam.
+ * Mutating the supplied object is deliberate: Core later registers this exact
+ * Config identity with Settings, so a cloned/public-only schema would let the
+ * exported contract and runtime validation drift apart.
+ */
+export function composePublicVisionConfig(coreConfig) {
+    if (!coreConfig || typeof coreConfig.set !== 'function') {
+        throw new TypeError('Vision Router public config requires a Schemastery object schema');
+    }
+    coreConfig.set('progressiveTools', z.boolean().default(false));
+    // Keep provider/task/turn timeout layers coherent. The whole-turn budget is
+    // an optional safety cap: 0 remains unlimited for long-running agent turns.
+    coreConfig.set('visionTaskTimeoutMs', z.number().step(1000).min(1000).max(180000).default(120000));
+    coreConfig.set('visionTurnBudgetMs', z.number().step(1000).min(0).max(600000).default(0));
+    // Both visible settings entry points edit the same Host-owned namespace.
+    coreConfig.set('visionDepth', z.union(['fast', 'standard', 'deep', 'custom']).default('standard'));
+    coreConfig.set('visionDepthMaxCalls', z.number().step(1).min(0).max(100).default(0));
+    // Product semantics: ordered remains the safe default. Auto execution and
+    // background measurement each require explicit live user authority.
+    coreConfig.set('routingMode', z.union(['ordered', 'auto']).default('ordered'));
+    coreConfig.set('routingPreference', z.union(['balanced', 'quality', 'speed', 'local']).default('balanced'));
+    coreConfig.set('backgroundBenchmarking', z.union(['local-free', 'all', 'off']).default('off'));
+    // Remote Settings remains an explicit opt-in product permission. The remote
+    // risk dialog is a reminder/acknowledgement, not a server-side auth proof.
+    coreConfig.set('allowRemoteSettings', z.boolean().default(false));
+    coreConfig.set('settingsContractRevision', z.number().step(1).min(1).max(SETTINGS_CONTRACT_REVISION).default(SETTINGS_CONTRACT_REVISION));
+    return coreConfig;
+}

package/lib/public-entry.d.ts

@@ -0,0 +1,148 @@
+import '@deepseek-ai/schemastery'
+
+export const name: 'vision-router'
+export const inject: readonly ['tools', 'llm']
+export const SETTINGS_CONTRACT_REVISION: 7
+
+export const Config: Schemastery<
+  Record<string, unknown>,
+  Record<string, unknown>
+>
+
+/**
+ * Minimum Cordis shape the plugin requires at the package root.
+ *
+ * Every supported DSH Host line mounts a Cordis lifecycle context, so this is a
+ * precondition rather than an optional capability: cords are installed through
+ * `ctx.effect()`, and a generation that cannot own its cleanup is refused
+ * instead of publishing routes, wrappers or global mutations without an owner.
+ */
+export interface CordisLifecycleContext {
+  readonly effect: (...args: any[]) => unknown
+}
+
+/**
+ * Install the plugin on a Cordis plugin context.
+ *
+ * @param ctx Host plugin context. Must expose `effect()`, otherwise a
+ *   `TypeError` is thrown before anything is published.
+ * @throws {TypeError} when `ctx.effect` is not callable.
+ */
+export function apply(
+  ctx: CordisLifecycleContext,
+  config?: Record<string, unknown>,
+): unknown
+
+export interface LegacySessionSurfaceReplacementIntent {
+  readonly surfaceOp: Readonly<{
+    op: 'replace'
+    start: number
+    end: number
+  }>
+  readonly sourceEventSeqs: readonly [number]
+}
+
+export interface CurrentSessionSurfaceReplacementIntent {
+  readonly surfaceOp: Readonly<{
+    op: 'replace'
+    startSeq: number
+    endSeq: number
+  }>
+  readonly sourceEventSeqs: readonly [number]
+}
+
+export type SessionSurfaceReplacementIntent =
+  | LegacySessionSurfaceReplacementIntent
+  | CurrentSessionSurfaceReplacementIntent
+
+/**
+ * Build the Host-owned Session surface replacement intent for one exact node.
+ *
+ * @param seq Non-negative safe integer sequence number. `-0`, fractional,
+ *   `NaN` and `Infinity` are rejected.
+ * @throws {TypeError} when `seq` is not a non-negative safe integer.
+ */
+export function sessionSurfaceReplacementIntent(
+  session: unknown,
+  seq: number,
+): SessionSurfaceReplacementIntent | undefined
+
+export interface VisionAttachmentAdmissionLogger {
+  info?: (message: string, ...args: unknown[]) => unknown
+  warn?: (message: string, ...args: unknown[]) => unknown
+}
+
+export interface VisionAttachmentAdmissionOptions {
+  readonly maxImageDimension?: number
+  readonly normalizedImageMaxPixels?: number
+  readonly normalizedImageMaxDimension?: number
+  readonly normalizedImageMaxBytes?: number
+}
+
+export interface VisionAttachmentAdmissionResult {
+  readonly changed: boolean
+  readonly reason: string
+  readonly limits?: Readonly<Record<string, unknown>>
+  readonly normalizationPolicy?: Readonly<Record<string, unknown>>
+}
+
+export function hasBatchAttachmentContract(ctx: unknown): boolean
+
+export function hostOwnsOfficialDeepSeekProvider(ctx: unknown): boolean
+
+export function ensureVisionAttachmentAdmissionPolicy(
+  ctx: unknown,
+  logger?: VisionAttachmentAdmissionLogger,
+  options?: VisionAttachmentAdmissionOptions,
+): VisionAttachmentAdmissionResult
+
+export function installVisionAttachmentAdmissionPolicy(
+  ctx: unknown,
+  logger?: VisionAttachmentAdmissionLogger,
+  options?: VisionAttachmentAdmissionOptions,
+): VisionAttachmentAdmissionResult
+
+/**
+ * Service reads this helper performs on the given context.
+ *
+ * `llm` is read through the non-owning `get()` probe when the context provides
+ * one; a context without it must not throw on an unresolved `llm` property.
+ */
+export interface HostOwnershipContext {
+  readonly get?: (name: string) => unknown
+  readonly llm?: unknown
+}
+
+export function protectHostProviderOwnership<Context extends HostOwnershipContext>(
+  ctx: Context,
+): Context
+
+export interface HostSettingsCompatibilityOptions {
+  readonly namespace: string
+  readonly Config: unknown
+  readonly installSettingsSection?: (
+    ctx: unknown,
+    namespace: unknown,
+    Config: unknown,
+    entryConfig: Record<string, unknown>,
+    hooks: unknown,
+  ) => unknown
+}
+
+/** Context shape required to register and own the compatibility settings section. */
+export interface HostSettingsCompatibilityContext {
+  readonly inject?: (...args: any[]) => unknown
+}
+
+/**
+ * Present DVR's settings face on Hosts whose Settings service predates the
+ * current contract.
+ *
+ * @throws {TypeError} when `ctx.inject` is not callable, before any settings
+ *   section or watcher is registered.
+ */
+export function installHostSettingsCompatibility<Context extends HostSettingsCompatibilityContext>(
+  ctx: Context,
+  entryConfig: Record<string, unknown>,
+  options: HostSettingsCompatibilityOptions,
+): Context

package/lib/public-entry.js

@@ -2,10 +2,7 @@ import './abort-signal-compat.js'
 import * as base from '../entry.js'
 import { createVisionToggleRootHardening } from './vision-toggle-root-hardening.js'
 import { contextWithVisionRoutingTopologyRefresh } from './vision-routing-topology-refresh.js'
-import {
-  createVisionProviderTransport,
-  installVisionProviderTransport,
-} from './vision-provider-transport.js'
+import { createVisionProviderTransport } from './vision-provider-transport.js'
 import { installLegacyGlobalProxyBoundary } from './legacy-global-proxy-boundary.js'
 import { installDsh017SettingsCompatibility } from './dsh-settings-017-compat.js'
 import { installDsh017RootLocalSettingsTransport } from './web/dsh-settings-017-root-transport.js'
@@ -37,6 +34,16 @@ function liveVisionConfig(ctx, fallback) {
  * settings therefore leave DSH/Host as the sole network authority.
  */
 export function apply(ctx, config = {}) {
+  // Cordis effect() is a required plugin-fiber primitive across the entire
+  // supported DSH window, not an optional capability. Refuse malformed/partial
+  // Hosts before any DVR route, wrapper, transport, watcher or global mutation
+  // can be published without a lifecycle owner.
+  let effect
+  try { effect = ctx?.effect } catch (error) { throw error }
+  if (typeof effect !== 'function') {
+    throw new TypeError('vision-router requires a Cordis lifecycle context with effect()')
+  }
+
   // DSH 0.1.7 replaces SettingsProvider.register() with profile-owned
   // ConfigEditor writes for ordinary fields. Feature-detect that exact contract
   // and present DVR's mature settings face without changing older Hosts.
@@ -59,25 +66,26 @@ export function apply(ctx, config = {}) {
     ctx: hardening.ctx,
     config: () => liveVisionConfig(hardening.ctx, config),
   })
-  const releaseTransportRegistry = installVisionProviderTransport(transport)
   let transportReleased = false
+  let transportReleasePromise
   const releaseTransport = () => {
-    if (transportReleased) return
+    if (transportReleasePromise) return transportReleasePromise
+    if (transportReleased) return Promise.resolve()
     transportReleased = true
-    releaseTransportRegistry()
-    void transport.dispose()
+    transportReleasePromise = Promise.resolve().then(() => transport.dispose())
+    return transportReleasePromise
   }
   try {
-    runtimeCtx?.effect?.(
+    runtimeCtx.effect(
       () => releaseTransport,
       'vision-router: provider transport',
     )
-    const result = base.apply(runtimeCtx, hardening.config)
+    const result = base.apply(runtimeCtx, hardening.config, { providerTransport: transport })
     installLegacyGlobalProxyBoundary(runtimeCtx, hardening.config)
     hardening.installClientBoundary()
     return result
   } catch (error) {
-    releaseTransport()
+    void releaseTransport().catch(() => {})
     throw error
   }
 }

package/lib/remote-settings-bridge.js

@@ -138,6 +138,17 @@ function conflictResult(error) {
   }
 }
 
+/**
+ * PRODUCT CONTRACT (2.3+): remote-settings enablement is reminder-only.
+ *
+ * `acceptedRisk === true` is an acknowledgement bit for the UX flow, not an
+ * authentication/authorization credential, proof of local presence, challenge
+ * response, one-time secret, or administrator approval. Do not strengthen this
+ * endpoint into a second security gate unless the product policy is explicitly
+ * changed. The real capability boundary is the narrow remote mutable-field
+ * allow-list plus the fields that remain local-only. The historical RPC/function
+ * name uses "authorize"; do not infer security-auth semantics from that name.
+ */
 export async function authorizeRemoteSettingsAfterRiskConfirmation(settings, payload, logger) {
   if (!payload || typeof payload !== 'object' || Array.isArray(payload) || payload.acceptedRisk !== true) {
     return badRequest('acceptedRisk must be true')

package/lib/remote-settings-risk-client-boundary.js

@@ -0,0 +1,155 @@
+/**
+ * Current-product remote Settings risk behavior shared by every browser
+ * attachment lifecycle. Host loader/version compatibility stays outside this owner.
+ *
+ * PRODUCT CONTRACT (2.3+): acceptedRisk is reminder/friction only. It is not
+ * authentication, authorization, local-presence proof, or a credential.
+ */
+export function createRemoteSettingsRiskClientBoundary(options = {}) {
+  var confirmImpl = options.confirmImpl
+  var alertImpl = options.alertImpl
+  var locale = options.locale
+  var location = options.location
+  var normalizeLoopback = options.normalizeLoopback === true
+  var connectionCache = typeof WeakMap === 'function' ? new WeakMap() : undefined
+  var rpcCache = typeof WeakMap === 'function' ? new WeakMap() : undefined
+  var contextCache = typeof WeakMap === 'function' ? new WeakMap() : undefined
+  var authorizationByRpc = typeof WeakMap === 'function' ? new WeakMap() : undefined
+  var CHANNEL = '/vision-router-settings'
+  var AUTHORIZE_ENDPOINT = 'authorize'
+
+  function localeValue() {
+    try {
+      var value = typeof locale === 'function' ? locale() : locale
+      return String(value || '').toLowerCase()
+    } catch (_) {
+      return ''
+    }
+  }
+
+  function chineseLocale() {
+    var lang = localeValue()
+    return lang === '' || lang.indexOf('zh') === 0
+  }
+
+  function riskMessage() {
+    return chineseLocale()
+      ? '启用远程设置？\n\n当前页面通过远程地址访问 DSH。启用后，能够访问此 trusted host 的客户端可以修改 Vision Router 已开放的设置。\n\nDSH trustedHosts 不是身份认证，请仅在你信任当前网络和访问者时继续。API Key、HTTP Provider 凭据、本地 Ollama / LM Studio、产物路径等未列入远程白名单的敏感配置仍不会开放。\n\n确定要允许远程修改设置吗？'
+      : 'Enable remote settings?\n\nThis page is accessing DSH through a remote address. After enabling this, clients that can reach this trusted host can change the Vision Router settings exposed by the remote allow-list.\n\nDSH trustedHosts is not authentication. Continue only if you trust the current network and its users. Sensitive settings outside the remote allow-list, including API keys, HTTP-provider credentials, local Ollama / LM Studio, and artifact paths, remain unavailable remotely.\n\nAllow remote settings?'
+  }
+
+  function isLoopbackLocation(locationLike) {
+    var hostname = locationLike && typeof locationLike.hostname === 'string'
+      ? locationLike.hostname.toLowerCase().replace(/^\[|\]$/g, '')
+      : ''
+    var protocol = locationLike && typeof locationLike.protocol === 'string'
+      ? locationLike.protocol.toLowerCase()
+      : ''
+    if (protocol === 'dsh-app:' && hostname === 'app') return true
+    if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '::1') return true
+    return /^127(?:\.\d{1,3}){3}$/.test(hostname)
+  }
+
+  function currentLocation() {
+    try { return typeof location === 'function' ? location() : location }
+    catch (_) { return undefined }
+  }
+
+  function isPermissionDisabledDescribe(channel, endpoint, result) {
+    return channel === CHANNEL
+      && endpoint === 'describe'
+      && result && result.ok === true
+      && result.value && result.value.enabled !== true
+      && result.value.reason === 'permission-disabled'
+  }
+
+  async function authorizeAndRefresh(target, call) {
+    var existing = authorizationByRpc && authorizationByRpc.get(target)
+    if (existing) return existing
+    var pending = (async function() {
+      if (typeof confirmImpl !== 'function' || confirmImpl(riskMessage()) !== true) return undefined
+      var authorized = await call.call(target, CHANNEL, AUTHORIZE_ENDPOINT, { acceptedRisk: true })
+      if (!authorized || authorized.ok !== true) {
+        var message = authorized && authorized.error && authorized.error.message
+          ? authorized.error.message
+          : 'Vision Router could not enable remote settings.'
+        try { if (typeof alertImpl === 'function') alertImpl(message) } catch (_) {}
+        return undefined
+      }
+      return call.call(target, CHANNEL, 'describe', {})
+    })()
+    if (authorizationByRpc) authorizationByRpc.set(target, pending)
+    try { return await pending }
+    finally {
+      if (authorizationByRpc && authorizationByRpc.get(target) === pending) {
+        authorizationByRpc.delete(target)
+      }
+    }
+  }
+
+  function wrapRpc(rpc) {
+    if (!rpc || (typeof rpc !== 'object' && typeof rpc !== 'function')) return rpc
+    if (rpcCache && rpcCache.has(rpc)) return rpcCache.get(rpc)
+    var wrapped = new Proxy(rpc, {
+      get: function(target, property) {
+        if (property === 'call') {
+          var call = Reflect.get(target, property, target)
+          if (typeof call !== 'function') return call
+          return async function(channel, endpoint) {
+            var result = await call.apply(target, arguments)
+            if (!isPermissionDisabledDescribe(channel, endpoint, result)) return result
+            var refreshed = await authorizeAndRefresh(target, call)
+            return refreshed || result
+          }
+        }
+        var value = Reflect.get(target, property, target)
+        return typeof value === 'function' ? value.bind(target) : value
+      }
+    })
+    if (rpcCache) rpcCache.set(rpc, wrapped)
+    return wrapped
+  }
+
+  function wrapConnection(connection) {
+    if (!connection || (typeof connection !== 'object' && typeof connection !== 'function')) return connection
+    if (connectionCache && connectionCache.has(connection)) return connectionCache.get(connection)
+    var wrapped = new Proxy(connection, {
+      get: function(target, property) {
+        if (property === 'isLoopback' && normalizeLoopback && isLoopbackLocation(currentLocation())) return true
+        if (property === 'rpc') return wrapRpc(Reflect.get(target, property, target))
+        var value = Reflect.get(target, property, target)
+        return typeof value === 'function' ? value.bind(target) : value
+      }
+    })
+    if (connectionCache) connectionCache.set(connection, wrapped)
+    return wrapped
+  }
+
+  function wrapContext(ctx) {
+    if (!ctx || typeof ctx !== 'object') return ctx
+    if (contextCache && contextCache.has(ctx)) return contextCache.get(ctx)
+    var wrapped = new Proxy(ctx, {
+      get: function(target, property) {
+        if (property === 'get') {
+          var get = Reflect.get(target, property, target)
+          if (typeof get !== 'function') return get
+          return function(name) {
+            var value = get.apply(target, arguments)
+            return name === 'connection' ? wrapConnection(value) : value
+          }
+        }
+        var value = Reflect.get(target, property, target)
+        return typeof value === 'function' ? value.bind(target) : value
+      }
+    })
+    if (contextCache) contextCache.set(ctx, wrapped)
+    return wrapped
+  }
+
+  return { wrapContext: wrapContext }
+}
+
+export const REMOTE_SETTINGS_RISK_CLIENT_BOUNDARY_SOURCE =
+  'var createRemoteSettingsRiskClientBoundary = (' +
+  createRemoteSettingsRiskClientBoundary.toString() +
+  ');'

package/lib/remote-settings-risk-confirmation.js

@@ -1,113 +1,25 @@
 import { htmlHasScriptMarker } from './html-script-marker.js'
+import { REMOTE_SETTINGS_RISK_CLIENT_BOUNDARY_SOURCE } from './remote-settings-risk-client-boundary.js'
 
 const RISK_PRELUDE_MARK = 'data-vision-router-remote-settings-risk-confirmation'
 
 export const REMOTE_SETTINGS_RISK_CLIENT_PRELUDE = String.raw`(function(){
   'use strict';
-  var CHANNEL = '/vision-router-settings';
-  var AUTHORIZE_ENDPOINT = 'authorize';
-  var connectionCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
-  var rpcCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
-  var contextCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
-  var authorizationPromise;
-
-  function chineseLocale() {
-    var lang = '';
-    try {
-      lang = String((document && document.documentElement && document.documentElement.lang) || (navigator && navigator.language) || '').toLowerCase();
-    } catch (_) {}
-    return lang === '' || lang.indexOf('zh') === 0;
-  }
-
-  function riskMessage() {
-    return chineseLocale()
-      ? '启用远程设置？\n\n当前页面通过远程地址访问 DSH。启用后，能够访问此 trusted host 的客户端可以修改 Vision Router 已开放的设置。\n\nDSH trustedHosts 不是身份认证，请仅在你信任当前网络和访问者时继续。API Key、HTTP Provider 凭据、本地 Ollama / LM Studio、产物路径等未列入远程白名单的敏感配置仍不会开放。\n\n确定要允许远程修改设置吗？'
-      : 'Enable remote settings?\n\nThis page is accessing DSH through a remote address. After enabling this, clients that can reach this trusted host can change the Vision Router settings exposed by the remote allow-list.\n\nDSH trustedHosts is not authentication. Continue only if you trust the current network and its users. Sensitive settings outside the remote allow-list, including API keys, HTTP-provider credentials, local Ollama / LM Studio, and artifact paths, remain unavailable remotely.\n\nAllow remote settings?';
-  }
-
-  function isPermissionDisabledDescribe(channel, endpoint, result) {
-    return channel === CHANNEL
-      && endpoint === 'describe'
-      && result && result.ok === true
-      && result.value && result.value.enabled !== true
-      && result.value.reason === 'permission-disabled';
-  }
-
-  async function authorizeAndRefresh(target, call) {
-    if (authorizationPromise) return authorizationPromise;
-    authorizationPromise = (async function(){
-      if (typeof window.confirm !== 'function' || window.confirm(riskMessage()) !== true) return undefined;
-      var authorized = await call.call(target, CHANNEL, AUTHORIZE_ENDPOINT, { acceptedRisk: true });
-      if (!authorized || authorized.ok !== true) {
-        var message = authorized && authorized.error && authorized.error.message
-          ? authorized.error.message
-          : 'Vision Router could not enable remote settings.';
-        try { if (typeof window.alert === 'function') window.alert(message); } catch (_) {}
-        return undefined;
-      }
-      return call.call(target, CHANNEL, 'describe', {});
-    })();
-    try { return await authorizationPromise; }
-    finally { authorizationPromise = undefined; }
-  }
-
-  function wrapRpc(rpc) {
-    if (!rpc || (typeof rpc !== 'object' && typeof rpc !== 'function')) return rpc;
-    if (rpcCache && rpcCache.has(rpc)) return rpcCache.get(rpc);
-    var wrapped = new Proxy(rpc, {
-      get: function(target, property) {
-        if (property === 'call') {
-          var call = Reflect.get(target, property, target);
-          if (typeof call !== 'function') return call;
-          return async function(channel, endpoint) {
-            var result = await call.apply(target, arguments);
-            if (!isPermissionDisabledDescribe(channel, endpoint, result)) return result;
-            var refreshed = await authorizeAndRefresh(target, call);
-            return refreshed || result;
-          };
-        }
-        var value = Reflect.get(target, property, target);
-        return typeof value === 'function' ? value.bind(target) : value;
-      }
-    });
-    if (rpcCache) rpcCache.set(rpc, wrapped);
-    return wrapped;
-  }
-
-  function wrapConnection(connection) {
-    if (!connection || (typeof connection !== 'object' && typeof connection !== 'function')) return connection;
-    if (connectionCache && connectionCache.has(connection)) return connectionCache.get(connection);
-    var wrapped = new Proxy(connection, {
-      get: function(target, property) {
-        if (property === 'rpc') return wrapRpc(Reflect.get(target, property, target));
-        var value = Reflect.get(target, property, target);
-        return typeof value === 'function' ? value.bind(target) : value;
-      }
-    });
-    if (connectionCache) connectionCache.set(connection, wrapped);
-    return wrapped;
-  }
-
-  function wrapContext(ctx) {
-    if (!ctx || typeof ctx !== 'object') return ctx;
-    if (contextCache && contextCache.has(ctx)) return contextCache.get(ctx);
-    var wrapped = new Proxy(ctx, {
-      get: function(target, property) {
-        if (property === 'get') {
-          var get = Reflect.get(target, property, target);
-          if (typeof get !== 'function') return get;
-          return function(name) {
-            var value = get.apply(target, arguments);
-            return name === 'connection' ? wrapConnection(value) : value;
-          };
-        }
-        var value = Reflect.get(target, property, target);
-        return typeof value === 'function' ? value.bind(target) : value;
-      }
-    });
-    if (contextCache) contextCache.set(ctx, wrapped);
-    return wrapped;
-  }
+  ${REMOTE_SETTINGS_RISK_CLIENT_BOUNDARY_SOURCE}
+  var riskBoundary = createRemoteSettingsRiskClientBoundary({
+    confirmImpl: function(message) {
+      return typeof window.confirm === 'function' && window.confirm(message) === true;
+    },
+    alertImpl: function(message) {
+      try { if (typeof window.alert === 'function') window.alert(message); } catch (_) {}
+    },
+    locale: function() {
+      try {
+        return String((document && document.documentElement && document.documentElement.lang)
+          || (navigator && navigator.language) || '');
+      } catch (_) { return ''; }
+    }
+  });
 
   function patchLoader(loader) {
     if (!loader || typeof loader.load !== 'function' || loader.load.__visionRouterRemoteRiskConfirmation) return;
@@ -122,7 +34,7 @@ export const REMOTE_SETTINGS_RISK_CLIENT_PRELUDE = String.raw`(function(){
               var apply = exports.apply;
               var wrappedApply = function(ctx) {
                 var rest = Array.prototype.slice.call(arguments, 1);
-                return apply.apply(exports, [wrapContext(ctx)].concat(rest));
+                return apply.apply(exports, [riskBoundary.wrapContext(ctx)].concat(rest));
               };
               Object.defineProperty(wrappedApply, '__visionRouterRemoteRiskConfirmation', { value: true });
               exports.apply = wrappedApply;

package/lib/replay-delegation.js

@@ -548,15 +548,20 @@ export function contextWithDelegatedReplay(ctx, options = {}) {
     },
   })
   wrappedContexts.set(ctx, wrapped)
+  let lifecycleOwned = false
   try {
-    ctx.effect?.(
-      () => () => {
-        if (wrappedContexts.get(ctx) === wrapped) wrappedContexts.delete(ctx)
-      },
-      'vision-router: delegated replay context lifecycle',
-    )
+    if (typeof ctx.effect === 'function') {
+      ctx.effect(
+        () => () => {
+          if (wrappedContexts.get(ctx) === wrapped) wrappedContexts.delete(ctx)
+        },
+        'vision-router: delegated replay context lifecycle',
+      )
+      lifecycleOwned = true
+    }
   } catch {
-    /* lifecycle hardening must not block plugin apply */
+    // The current caller may still use this private view.
   }
+  if (!lifecycleOwned && wrappedContexts.get(ctx) === wrapped) wrappedContexts.delete(ctx)
   return wrapped
 }

package/lib/replay-envelope-v2-compat.js

@@ -88,15 +88,20 @@ export function contextWithReplayEnvelopeV2Compat(ctx) {
     },
   })
   wrappedContexts.set(ctx, wrapped)
+  let lifecycleOwned = false
   try {
-    ctx.effect?.(
-      () => () => {
-        if (wrappedContexts.get(ctx) === wrapped) wrappedContexts.delete(ctx)
-      },
-      'vision-router: rc7 replay envelope compatibility lifecycle',
-    )
+    if (typeof ctx.effect === 'function') {
+      ctx.effect(
+        () => () => {
+          if (wrappedContexts.get(ctx) === wrapped) wrappedContexts.delete(ctx)
+        },
+        'vision-router: rc7 replay envelope compatibility lifecycle',
+      )
+      lifecycleOwned = true
+    }
   } catch {
-    /* lifecycle hardening must not block plugin apply */
+    // The current caller can still use this one-shot compatibility view.
   }
+  if (!lifecycleOwned && wrappedContexts.get(ctx) === wrapped) wrappedContexts.delete(ctx)
   return wrapped
 }