dsh-vision-router 2.2.8 → 3.0.0

package/lib/android-attachment-compat.js

@@ -1,244 +0,0 @@
-import { createHash } from 'node:crypto'
-
-const wrappedContexts = new WeakMap()
-const MIB = 1024 * 1024
-
-export const DEFAULT_ANDROID_TRANSIENT_LIMITS = Object.freeze({
-  maxEntries: 64,
-  maxBytes: 128 * MIB,
-  maxSingleBytes: 64 * MIB,
-})
-
-function nonEmptyString(value) {
-  return typeof value === 'string' && value.length > 0
-}
-
-function positiveInteger(value, fallback) {
-  const n = Number(value)
-  return Number.isFinite(n) && n > 0 ? Math.floor(n) : fallback
-}
-
-export function isAndroidTermuxRuntime(options = {}) {
-  const platform = options.platform ?? process.platform
-  const env = options.env ?? process.env
-  if (platform === 'android') return true
-  if (nonEmptyString(env?.TERMUX_VERSION)) return true
-  const prefix = nonEmptyString(env?.PREFIX) ? env.PREFIX : ''
-  return prefix.includes('/com.termux/') || prefix.includes('\\com.termux\\')
-}
-
-export function isPermissionBoundaryError(error) {
-  let current = error
-  const seen = new Set()
-  for (let depth = 0; current && depth < 8; depth += 1) {
-    if ((typeof current === 'object' || typeof current === 'function') && seen.has(current)) break
-    if (typeof current === 'object' || typeof current === 'function') seen.add(current)
-    const code = current && typeof current === 'object' ? current.code : undefined
-    if (code === 'EACCES' || code === 'EPERM') return true
-    current = current && typeof current === 'object' ? current.cause : undefined
-  }
-  return false
-}
-
-function displayName(value) {
-  if (!nonEmptyString(value)) return undefined
-  const leaf = value.slice(Math.max(value.lastIndexOf('/'), value.lastIndexOf('\\')) + 1)
-  const clean = leaf.replace(/[\u0000-\u001f\u007f]/g, '').trim().slice(0, 255)
-  return clean === '' ? undefined : clean
-}
-
-async function probeImage(data, injectedProbe) {
-  if (typeof injectedProbe === 'function') return injectedProbe(data)
-  const mod = await import('sharp')
-  const sharp = mod.default ?? mod
-  const metadata = await sharp(data, { failOn: 'none' }).metadata()
-  const width = Number(metadata.width ?? 0)
-  const height = Number(metadata.height ?? 0)
-  if (!Number.isInteger(width) || width <= 0 || !Number.isInteger(height) || height <= 0) {
-    throw new Error('vision-router: Android attachment fallback could not read image dimensions')
-  }
-  return { width, height }
-}
-
-function transientTooLargeError(bytes, limit) {
-  const error = new Error(
-    `vision-router: Android attachment fallback refuses to keep a ${bytes}-byte image in process memory (limit ${limit} bytes)`,
-  )
-  error.code = 'ANDROID_TRANSIENT_ATTACHMENT_TOO_LARGE'
-  return error
-}
-
-async function transientStoredImage(input, injectedProbe, maxSingleBytes) {
-  const data = input?.data
-  if (!(data instanceof Uint8Array) || data.byteLength === 0) {
-    throw new Error('vision-router: Android attachment fallback received empty image bytes')
-  }
-  // Enforce the byte boundary BEFORE probing with sharp. Metadata decode can
-  // itself allocate native memory, so rejecting after probeImage() would still
-  // allow a single pathological input to cross the mobile memory boundary.
-  if (data.byteLength > maxSingleBytes) {
-    throw transientTooLargeError(data.byteLength, maxSingleBytes)
-  }
-  const mediaType = input?.mediaType
-  if (!nonEmptyString(mediaType)) {
-    throw new Error('vision-router: Android attachment fallback received no media type')
-  }
-  const { width, height } = await probeImage(data, injectedProbe)
-  const sha256 = createHash('sha256').update(data).digest('hex')
-  const name = displayName(input?.name)
-  const ref = {
-    attachmentId: `sha256:${sha256}`,
-    mediaType,
-    bytes: data.byteLength,
-    width,
-    height,
-    ...(name !== undefined ? { name } : {}),
-  }
-  return { ref, data }
-}
-
-/** Byte-weighted LRU for the Android process-local durability fallback. */
-export function createTransientAttachmentCache(options = {}) {
-  const maxEntries = positiveInteger(options.maxEntries, DEFAULT_ANDROID_TRANSIENT_LIMITS.maxEntries)
-  const maxBytes = positiveInteger(options.maxBytes, DEFAULT_ANDROID_TRANSIENT_LIMITS.maxBytes)
-  const map = new Map()
-  let bytes = 0
-
-  const remove = (id) => {
-    const old = map.get(id)
-    if (old === undefined) return false
-    bytes = Math.max(0, bytes - Number(old.data?.byteLength ?? 0))
-    return map.delete(id)
-  }
-
-  const trim = () => {
-    while (map.size > maxEntries || bytes > maxBytes) {
-      const oldest = map.keys().next().value
-      if (oldest === undefined) break
-      remove(oldest)
-    }
-  }
-
-  return {
-    get(id) {
-      const stored = map.get(id)
-      if (stored === undefined) return undefined
-      // Refresh recency so an actively used image survives pressure from newer
-      // one-shot attachments.
-      map.delete(id)
-      map.set(id, stored)
-      return stored
-    },
-    set(stored) {
-      const id = String(stored?.ref?.attachmentId ?? '')
-      const weight = Number(stored?.data?.byteLength ?? 0)
-      if (id === '' || !Number.isFinite(weight) || weight <= 0 || weight > maxBytes) return false
-      remove(id)
-      map.set(id, stored)
-      bytes += weight
-      trim()
-      return map.has(id)
-    },
-    stats() {
-      return { entries: map.size, bytes, maxEntries, maxBytes }
-    },
-  }
-}
-
-/**
- * Android/Termux compatibility shim for deepseek-harness attachment-local.
- *
- * Current DSH attachment-local proves directory durability by fsyncing every
- * ancestor from DSH_HOME to the filesystem root. Android SELinux lets Termux
- * access its own /data/data/com.termux subtree but intentionally denies opening
- * /data/data itself, so saveImage() is wrapped as ATTACHMENT_WRITE_FAILED even
- * though the image bytes are otherwise readable.
- *
- * Keep the host service authoritative. Only when an Android runtime reaches an
- * EACCES/EPERM boundary do Vision Router's own calls fall back to a byte- and
- * count-bounded, process-local content-addressed attachment. The paired
- * readImage() wrapper makes the direct vision-http path and plugin-side bridge
- * code consume those bytes normally. Once upstream accepts the save, this path
- * is never used.
- */
-export function installAndroidAttachmentCompat(ctx, logger, options = {}) {
-  if (!ctx || typeof ctx !== 'object' || !isAndroidTermuxRuntime(options.runtime)) return ctx
-  const cached = wrappedContexts.get(ctx)
-  if (cached) return cached
-
-  let attachments
-  try {
-    attachments = typeof ctx.get === 'function' ? ctx.get('attachments') : undefined
-  } catch {
-    return ctx
-  }
-  if (!attachments || typeof attachments.saveImage !== 'function' || typeof attachments.readImage !== 'function') {
-    return ctx
-  }
-
-  const maxTransientBytes = positiveInteger(
-    options.maxTransientBytes,
-    DEFAULT_ANDROID_TRANSIENT_LIMITS.maxBytes,
-  )
-  const maxTransientAttachments = positiveInteger(
-    options.maxTransientAttachments,
-    DEFAULT_ANDROID_TRANSIENT_LIMITS.maxEntries,
-  )
-  const maxTransientSingleBytes = Math.min(
-    maxTransientBytes,
-    positiveInteger(options.maxTransientSingleBytes, DEFAULT_ANDROID_TRANSIENT_LIMITS.maxSingleBytes),
-  )
-  const transient = createTransientAttachmentCache({
-    maxEntries: maxTransientAttachments,
-    maxBytes: maxTransientBytes,
-  })
-
-  const wrappedAttachments = new Proxy(attachments, {
-    get(target, property) {
-      if (property === 'saveImage') {
-        return async (input) => {
-          try {
-            return await target.saveImage(input)
-          } catch (error) {
-            if (!isPermissionBoundaryError(error)) throw error
-            const stored = await transientStoredImage(input, options.probeImage, maxTransientSingleBytes)
-            if (!transient.set(stored)) {
-              throw transientTooLargeError(stored.data.byteLength, maxTransientBytes)
-            }
-            try {
-              logger?.warn?.(
-                'vision-router: Android/Termux attachment save hit an inaccessible ancestor; using a bounded process-local image ref until DSH attachment-local is fixed upstream',
-              )
-            } catch {
-              /* diagnostics must never block the fallback */
-            }
-            return stored.ref
-          }
-        }
-      }
-      if (property === 'readImage') {
-        return async (ref, signal) => {
-          signal?.throwIfAborted?.()
-          const id = String(ref?.attachmentId ?? '')
-          const stored = transient.get(id)
-          if (stored !== undefined) return stored
-          return target.readImage(ref, signal)
-        }
-      }
-      const value = Reflect.get(target, property, target)
-      return typeof value === 'function' ? value.bind(target) : value
-    },
-  })
-
-  const wrapped = new Proxy(ctx, {
-    get(target, property) {
-      if (property === 'get') {
-        return (name) => (name === 'attachments' ? wrappedAttachments : target.get(name))
-      }
-      const value = Reflect.get(target, property, target)
-      return typeof value === 'function' ? value.bind(target) : value
-    },
-  })
-  wrappedContexts.set(ctx, wrapped)
-  return wrapped
-}

package/lib/settings-client-rc8-lifecycle.js

@@ -1,397 +0,0 @@
-import { injectClientCarrierHtml, installClientScriptCarriers } from './client-script-carrier.js'
-
-const SETTINGS_RC8_MARK = 'data-vision-router-settings-rc8-lifecycle'
-
-/**
- * rc.8 replaces ModuleLoader.load() inside loader.create(). The original local
- * permission and remote-risk shims predate that lifecycle and are intentionally
- * left untouched for rc.6/rc.7. This narrow safety net activates only when a
- * create() transition exists, then re-installs both settings context wrappers
- * on the new live loader.
- */
-export const SETTINGS_RC8_CLIENT_PRELUDE = String.raw`(function(){
-  'use strict';
-  var TARGET = 'dsh-vision-router';
-  var FIELD = 'allowRemoteSettings';
-  var ENDPOINT = '/_dsh/vision-router/remote-settings-permission';
-  var CHANNEL = '/vision-router-settings';
-  var AUTHORIZE_ENDPOINT = 'authorize';
-  var scopeCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
-  var binderCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
-  var localContextCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
-  var connectionCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
-  var rpcCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
-  var riskContextCache = typeof WeakMap === 'function' ? new WeakMap() : undefined;
-  var authorizationPromise;
-
-  function normalizePermissionValue(value) {
-    if (typeof value === 'boolean') return value;
-    if (value === 'true') return true;
-    if (value === 'false') return false;
-    return undefined;
-  }
-
-  function isLoopbackLocation(locationLike) {
-    var hostname = locationLike && typeof locationLike.hostname === 'string'
-      ? locationLike.hostname.toLowerCase().replace(/^\[|\]$/g, '')
-      : '';
-    var protocol = locationLike && typeof locationLike.protocol === 'string'
-      ? locationLike.protocol.toLowerCase()
-      : '';
-    if (protocol === 'dsh-app:' && hostname === 'app') return true;
-    if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '::1') return true;
-    return /^127(?:\.\d{1,3}){3}$/.test(hostname);
-  }
-
-  async function writePermission(operation, value, revision) {
-    if (typeof fetch !== 'function') throw new Error('Vision Router local settings transport is unavailable');
-    var payload = { operation: operation };
-    if (operation === 'set') payload.value = value;
-    if (Number.isInteger(revision) && revision >= 0) payload.expectedRevision = revision;
-    var response = await fetch(ENDPOINT, {
-      method: 'POST',
-      headers: { 'content-type': 'application/json', accept: 'application/json' },
-      body: JSON.stringify(payload)
-    });
-    var body;
-    try { body = await response.json(); } catch (_) { body = undefined; }
-    if (!response.ok || !body || body.ok !== true) {
-      var message = body && body.error && body.error.message ? body.error.message : ('HTTP ' + response.status);
-      var error = new Error(message);
-      if (body && body.error && body.error.code) error.code = body.error.code;
-      throw error;
-    }
-    return body.value;
-  }
-
-  function wrapScope(scope) {
-    if (!scope || (typeof scope !== 'object' && typeof scope !== 'function')) return scope;
-    if (scopeCache && scopeCache.has(scope)) return scopeCache.get(scope);
-    var overlay;
-    var cachedRawSnapshot;
-    var cachedOverlayKey;
-    var cachedClientSnapshot;
-
-    function overlayKey() {
-      if (!overlay) return 'none';
-      return (overlay.present ? '1' : '0') + ':' + String(overlay.value) + ':' + String(overlay.revision);
-    }
-
-    function rawSnapshot() {
-      try { return typeof scope.getSnapshot === 'function' ? scope.getSnapshot() : undefined; } catch (_) { return undefined; }
-    }
-
-    function snapshotWithOverlay(snapshot) {
-      if (!overlay || !snapshot || typeof snapshot !== 'object') return snapshot;
-      var user = snapshot.user && typeof snapshot.user === 'object' && !Array.isArray(snapshot.user) ? snapshot.user : {};
-      var present = Object.prototype.hasOwnProperty.call(user, FIELD);
-      var matches = overlay.present ? present && user[FIELD] === overlay.value : !present;
-      if (matches && (!Number.isInteger(overlay.revision) || !Number.isInteger(snapshot.revision) || snapshot.revision >= overlay.revision)) {
-        overlay = undefined;
-        return snapshot;
-      }
-      var nextUser = Object.assign({}, user);
-      if (overlay.present) nextUser[FIELD] = overlay.value;
-      else delete nextUser[FIELD];
-      var nextValue = snapshot.value && typeof snapshot.value === 'object' && !Array.isArray(snapshot.value)
-        ? Object.assign({}, snapshot.value)
-        : snapshot.value;
-      if (nextValue && typeof nextValue === 'object') nextValue[FIELD] = overlay.present ? overlay.value : false;
-      return Object.assign({}, snapshot, {
-        user: nextUser,
-        value: nextValue,
-        revision: Number.isInteger(overlay.revision) ? overlay.revision : snapshot.revision
-      });
-    }
-
-    function snapshotForClient(snapshot) {
-      var keyBefore = overlayKey();
-      if (snapshot === cachedRawSnapshot && keyBefore === cachedOverlayKey) return cachedClientSnapshot;
-      var effective = snapshotWithOverlay(snapshot);
-      var keyAfter = overlayKey();
-      if (snapshot === cachedRawSnapshot && keyAfter === cachedOverlayKey) return cachedClientSnapshot;
-      if (!effective || typeof effective !== 'object' || effective.mode !== 'host') {
-        cachedRawSnapshot = snapshot;
-        cachedOverlayKey = keyAfter;
-        cachedClientSnapshot = effective;
-        return effective;
-      }
-      var next = effective;
-      var value = effective.value;
-      if (value && typeof value === 'object' && !Array.isArray(value)
-          && Object.prototype.hasOwnProperty.call(value, FIELD)
-          && typeof value[FIELD] === 'boolean') {
-        value = Object.assign({}, value, { [FIELD]: value[FIELD] ? 'true' : '' });
-        next = Object.assign({}, next, { value: value });
-      }
-      var user = effective.user;
-      if (user && typeof user === 'object' && !Array.isArray(user)
-          && Object.prototype.hasOwnProperty.call(user, FIELD)
-          && typeof user[FIELD] === 'boolean') {
-        user = Object.assign({}, user, { [FIELD]: user[FIELD] ? 'true' : 'false' });
-        next = Object.assign({}, next, { user: user });
-      }
-      cachedRawSnapshot = snapshot;
-      cachedOverlayKey = keyAfter;
-      cachedClientSnapshot = next;
-      return next;
-    }
-
-    var wrapped = new Proxy(scope, {
-      get: function(target, property) {
-        if (property === 'getSnapshot') return function(){ return snapshotForClient(rawSnapshot()); };
-        if (property === 'set') {
-          var set = Reflect.get(target, property, target);
-          return async function(field, value) {
-            var snapshot = rawSnapshot();
-            if (field === FIELD && snapshot && snapshot.mode === 'host') {
-              var normalized = normalizePermissionValue(value);
-              if (normalized === undefined) throw new TypeError('allowRemoteSettings must be boolean');
-              var result = await writePermission('set', normalized, snapshot.revision);
-              overlay = { present: true, value: normalized, revision: result && result.revision };
-              cachedRawSnapshot = undefined;
-              if (typeof target.load === 'function') await target.load();
-              return;
-            }
-            return typeof set === 'function' ? set.apply(target, arguments) : undefined;
-          };
-        }
-        if (property === 'unset') {
-          var unset = Reflect.get(target, property, target);
-          return async function(field) {
-            var snapshot = rawSnapshot();
-            if (field === FIELD && snapshot && snapshot.mode === 'host') {
-              var result = await writePermission('unset', undefined, snapshot.revision);
-              overlay = { present: false, revision: result && result.revision };
-              cachedRawSnapshot = undefined;
-              if (typeof target.load === 'function') await target.load();
-              return;
-            }
-            return typeof unset === 'function' ? unset.apply(target, arguments) : undefined;
-          };
-        }
-        var value = Reflect.get(target, property, target);
-        return typeof value === 'function' ? value.bind(target) : value;
-      }
-    });
-    if (scopeCache) scopeCache.set(scope, wrapped);
-    return wrapped;
-  }
-
-  function wrapBinder(binder) {
-    if (!binder || (typeof binder !== 'object' && typeof binder !== 'function')) return binder;
-    if (binderCache && binderCache.has(binder)) return binderCache.get(binder);
-    var wrapped = new Proxy(binder, {
-      get: function(target, property) {
-        if (property === 'bind') {
-          var bind = Reflect.get(target, property, target);
-          if (typeof bind !== 'function') return bind;
-          return function(spec) {
-            var scope = bind.apply(target, arguments);
-            return spec && spec.namespace === 'vision-router' ? wrapScope(scope) : scope;
-          };
-        }
-        var value = Reflect.get(target, property, target);
-        return typeof value === 'function' ? value.bind(target) : value;
-      }
-    });
-    if (binderCache) binderCache.set(binder, wrapped);
-    return wrapped;
-  }
-
-  function wrapLocalContext(ctx) {
-    if (!ctx || typeof ctx !== 'object') return ctx;
-    if (localContextCache && localContextCache.has(ctx)) return localContextCache.get(ctx);
-    var wrapped = new Proxy(ctx, {
-      get: function(target, property) {
-        if (property === 'settingsScope') return wrapBinder(Reflect.get(target, property, target));
-        var value = Reflect.get(target, property, target);
-        return typeof value === 'function' ? value.bind(target) : value;
-      }
-    });
-    if (localContextCache) localContextCache.set(ctx, wrapped);
-    return wrapped;
-  }
-
-  function chineseLocale() {
-    var lang = '';
-    try {
-      lang = String((document && document.documentElement && document.documentElement.lang) || (navigator && navigator.language) || '').toLowerCase();
-    } catch (_) {}
-    return lang === '' || lang.indexOf('zh') === 0;
-  }
-
-  function riskMessage() {
-    return chineseLocale()
-      ? '启用远程设置？\n\n当前页面通过远程地址访问 DSH。启用后，能够访问此 trusted host 的客户端可以修改 Vision Router 已开放的设置。\n\nDSH trustedHosts 不是身份认证，请仅在你信任当前网络和访问者时继续。API Key、HTTP Provider 凭据、本地 Ollama / LM Studio、产物路径等未列入远程白名单的敏感配置仍不会开放。\n\n确定要允许远程修改设置吗？'
-      : 'Enable remote settings?\n\nThis page is accessing DSH through a remote address. After enabling this, clients that can reach this trusted host can change the Vision Router settings exposed by the remote allow-list.\n\nDSH trustedHosts is not authentication. Continue only if you trust the current network and its users. Sensitive settings outside the remote allow-list, including API keys, HTTP-provider credentials, local Ollama / LM Studio, and artifact paths, remain unavailable remotely.\n\nAllow remote settings?';
-  }
-
-  function isPermissionDisabledDescribe(channel, endpoint, result) {
-    return channel === CHANNEL
-      && endpoint === 'describe'
-      && result && result.ok === true
-      && result.value && result.value.enabled !== true
-      && result.value.reason === 'permission-disabled';
-  }
-
-  async function authorizeAndRefresh(target, call) {
-    if (authorizationPromise) return authorizationPromise;
-    authorizationPromise = (async function(){
-      if (typeof window.confirm !== 'function' || window.confirm(riskMessage()) !== true) return undefined;
-      var authorized = await call.call(target, CHANNEL, AUTHORIZE_ENDPOINT, { acceptedRisk: true });
-      if (!authorized || authorized.ok !== true) {
-        var message = authorized && authorized.error && authorized.error.message
-          ? authorized.error.message
-          : 'Vision Router could not enable remote settings.';
-        try { if (typeof window.alert === 'function') window.alert(message); } catch (_) {}
-        return undefined;
-      }
-      return call.call(target, CHANNEL, 'describe', {});
-    })();
-    try { return await authorizationPromise; }
-    finally { authorizationPromise = undefined; }
-  }
-
-  function wrapRpc(rpc) {
-    if (!rpc || (typeof rpc !== 'object' && typeof rpc !== 'function')) return rpc;
-    if (rpcCache && rpcCache.has(rpc)) return rpcCache.get(rpc);
-    var wrapped = new Proxy(rpc, {
-      get: function(target, property) {
-        if (property === 'call') {
-          var call = Reflect.get(target, property, target);
-          if (typeof call !== 'function') return call;
-          return async function(channel, endpoint) {
-            var result = await call.apply(target, arguments);
-            if (!isPermissionDisabledDescribe(channel, endpoint, result)) return result;
-            var refreshed = await authorizeAndRefresh(target, call);
-            return refreshed || result;
-          };
-        }
-        var value = Reflect.get(target, property, target);
-        return typeof value === 'function' ? value.bind(target) : value;
-      }
-    });
-    if (rpcCache) rpcCache.set(rpc, wrapped);
-    return wrapped;
-  }
-
-  function wrapConnection(connection) {
-    if (!connection || (typeof connection !== 'object' && typeof connection !== 'function')) return connection;
-    if (connectionCache && connectionCache.has(connection)) return connectionCache.get(connection);
-    var wrapped = new Proxy(connection, {
-      get: function(target, property) {
-        if (property === 'isLoopback') {
-          var locationLike;
-          try { locationLike = window && window.location; } catch (_) { locationLike = undefined; }
-          if (isLoopbackLocation(locationLike)) return true;
-        }
-        if (property === 'rpc') return wrapRpc(Reflect.get(target, property, target));
-        var value = Reflect.get(target, property, target);
-        return typeof value === 'function' ? value.bind(target) : value;
-      }
-    });
-    if (connectionCache) connectionCache.set(connection, wrapped);
-    return wrapped;
-  }
-
-  function wrapRiskContext(ctx) {
-    if (!ctx || typeof ctx !== 'object') return ctx;
-    if (riskContextCache && riskContextCache.has(ctx)) return riskContextCache.get(ctx);
-    var wrapped = new Proxy(ctx, {
-      get: function(target, property) {
-        if (property === 'get') {
-          var get = Reflect.get(target, property, target);
-          if (typeof get !== 'function') return get;
-          return function(name) {
-            var value = get.apply(target, arguments);
-            return name === 'connection' ? wrapConnection(value) : value;
-          };
-        }
-        var value = Reflect.get(target, property, target);
-        return typeof value === 'function' ? value.bind(target) : value;
-      }
-    });
-    if (riskContextCache) riskContextCache.set(ctx, wrapped);
-    return wrapped;
-  }
-
-  function patchLiveLoader(loader) {
-    if (!loader || typeof loader.load !== 'function' || loader.load.__visionRouterSettingsRc8Lifecycle) return;
-    var original = loader.load;
-    function load(spec) {
-      if (spec && spec.id === TARGET && typeof spec.factory === 'function') {
-        var factory = spec.factory;
-        spec = Object.assign({}, spec, {
-          factory: function(require) {
-            var exports = factory(require);
-            if (exports && typeof exports.apply === 'function' && !exports.apply.__visionRouterSettingsRc8Lifecycle) {
-              var apply = exports.apply;
-              var wrappedApply = function(ctx) {
-                var rest = Array.prototype.slice.call(arguments, 1);
-                var nextCtx = wrapRiskContext(wrapLocalContext(ctx));
-                return apply.apply(exports, [nextCtx].concat(rest));
-              };
-              Object.defineProperty(wrappedApply, '__visionRouterSettingsRc8Lifecycle', { value: true });
-              exports.apply = wrappedApply;
-            }
-            return exports;
-          }
-        });
-      }
-      return original.call(this, spec);
-    }
-    Object.defineProperty(load, '__visionRouterSettingsRc8Lifecycle', { value: true });
-    loader.load = load;
-  }
-
-  function patchCreate(loader) {
-    if (!loader || typeof loader.create !== 'function' || loader.create.__visionRouterSettingsRc8Lifecycle) return;
-    var originalCreate = loader.create;
-    function create() {
-      var result = originalCreate.apply(this, arguments);
-      patchLiveLoader(loader);
-      return result;
-    }
-    Object.defineProperty(create, '__visionRouterSettingsRc8Lifecycle', { value: true });
-    loader.create = create;
-    if (loader.mode === 'live') patchLiveLoader(loader);
-  }
-
-  function install() {
-    if (window.__ModuleLoader__) {
-      patchCreate(window.__ModuleLoader__);
-      return;
-    }
-    var descriptor = Object.getOwnPropertyDescriptor(window, '__ModuleLoader__');
-    if (descriptor && descriptor.configurable === false) return;
-    var previousGet = descriptor && descriptor.get;
-    var previousSet = descriptor && descriptor.set;
-    var stored = descriptor && Object.prototype.hasOwnProperty.call(descriptor, 'value') ? descriptor.value : undefined;
-    Object.defineProperty(window, '__ModuleLoader__', {
-      configurable: true,
-      enumerable: !descriptor || descriptor.enumerable !== false,
-      get: function(){ return previousGet ? previousGet.call(window) : stored; },
-      set: function(value) {
-        if (previousSet) previousSet.call(window, value); else stored = value;
-        try { patchCreate(previousGet ? previousGet.call(window) : value); } catch (_) {}
-      }
-    });
-    if (stored) patchCreate(stored);
-  }
-
-  try { install(); } catch (_) {}
-})();`
-
-export function injectSettingsRc8ClientPrelude(html) {
-  return injectClientCarrierHtml(html, SETTINGS_RC8_MARK, SETTINGS_RC8_CLIENT_PRELUDE)
-}
-
-export function installSettingsRc8ClientLifecycle(ctx) {
-  installClientScriptCarriers(ctx, {
-    marker: SETTINGS_RC8_MARK,
-    prelude: SETTINGS_RC8_CLIENT_PRELUDE,
-    label: 'vision-router: rc8 settings client lifecycle',
-    injectHtml: injectSettingsRc8ClientPrelude,
-  })
-}