@mokuyoaxis/dsh-iris 0.1.0 → 0.1.2

package/lib/actions.js

@@ -24,6 +24,8 @@ import { BrowserHtmlRenderer } from './render.js';
 import { longOcr } from './ocr.js';
 import { ffmpegAvailable, extractFrames, probeVideo } from './media-probe.js';
 import { buildContactSheet, summarizeMedia } from './summarize.js';
+import { ensurePrivateDir, writePrivateFile } from './private-storage.js';
+import { inferMediaProtocol } from './provider-protocol.js';
 
 const MEDIA_TYPES = {
   '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg',
@@ -49,8 +51,7 @@ async function describeFirstImage(ctx, ref, absPath, originalPrompt) {
 /* ---------------- IO 目录 ---------------- */
 function outputDir() {
   const dir = path.join(store.irisHome(), 'outputs');
-  fs.mkdirSync(dir, { recursive: true });
-  return dir;
+  return ensurePrivateDir(dir);
 }
 
 function throwIfAborted(signal) {
@@ -160,7 +161,7 @@ register('image', async (ctx, args, { signal }) => {
   const prompt = String(args.prompt || '').trim();
   if (!prompt) throw new Error('iris: prompt 不能为空');
   const submitted = await submitWithFailover(cap.CAPABILITIES.IMAGE, '图像', signal, args.model, async (provider) => {
-    const protocol = (provider.mediaProtocol || 'dashscope') === 'openai-images' ? 'openai-images' : 'dashscope';
+    const protocol = provider.mediaProtocol || inferMediaProtocol(provider.baseUrl);
     const model = args.model ? (models.parseModelRef(String(args.model))?.modelId || String(args.model)) : (provider.imageModel || (protocol === 'openai-images' ? 'gpt-image-1' : 'wan2.2-t2i-flash'));
     const task = tasks.create({
       cap: 'image', providerId: provider.id, providerName: provider.name,
@@ -168,7 +169,7 @@ register('image', async (ctx, args, { signal }) => {
     });
     if (protocol === 'dashscope') {
       const started = await tasks.submitGuard(task, () => adapters.startImageGeneration({
-        key: provider.apiKey, model, prompt, size: args.size, n: args.n, signal
+        key: provider.apiKey, baseUrl: provider.baseUrl, model, prompt, size: args.size, n: args.n, signal
       }));
       const remoteTaskId = started.remoteTaskId;
       if (!remoteTaskId) {
@@ -190,7 +191,7 @@ register('image', async (ctx, args, { signal }) => {
       tasks.update(task.id, { remoteTaskId });
       tasks.watch(tasks.get(task.id), {
         key: () => provider.apiKey,
-        poll: ({ key, remoteTaskId }) => adapters.pollTask({ key, remoteTaskId }),
+        poll: ({ key, remoteTaskId }) => adapters.pollTask({ key, baseUrl: provider.baseUrl, remoteTaskId }),
         intervalMs: 2500,
         onSuccess: async (t, r) => {
           const names = [];
@@ -212,7 +213,7 @@ register('image', async (ctx, args, { signal }) => {
       const written = [];
       for (let i = 0; i < outs.length; i++) {
         const p = path.join(outputDir(), `${task.id}-${i}.png`);
-        if (outs[i].b64) fs.writeFileSync(p, Buffer.from(outs[i].b64, 'base64'));
+        if (outs[i].b64) writePrivateFile(p, Buffer.from(outs[i].b64, 'base64'));
         else await adapters.downloadTo(outs[i].url, p, { signal });
         written.push(p);
       }
@@ -255,8 +256,8 @@ register('video', async (ctx, args, { signal }) => {
         const audioPath = String(args.audio_path || '').trim();
         if (!audioPath || !path.isAbsolute(audioPath)) throw new Error('iris: s2v 的 audio_path 必须是绝对路径');
         if (!fs.existsSync(audioPath)) throw new Error('iris: 音频文件不存在：' + audioPath);
-        const imageUrl = await adapters.uploadTempFile({ key: provider.apiKey, model, filePath: frame.absPath, signal });
-        const audioUrl = await adapters.uploadTempFile({ key: provider.apiKey, model, filePath: audioPath, signal });
+        const imageUrl = await adapters.uploadTempFile({ key: provider.apiKey, baseUrl: provider.baseUrl, model, filePath: frame.absPath, signal });
+        const audioUrl = await adapters.uploadTempFile({ key: provider.apiKey, baseUrl: provider.baseUrl, model, filePath: audioPath, signal });
         submitArgs = { imgDataUrl: imageUrl, audioUrl, resolution: args.resolution || '480P' };
       } else {
         submitArgs = {
@@ -266,12 +267,12 @@ register('video', async (ctx, args, { signal }) => {
           duration: args.duration ? Number(args.duration) : undefined
         };
       }
-      return adapters.submitVideo({ key: provider.apiKey, model, ...submitArgs, signal });
+      return adapters.submitVideo({ key: provider.apiKey, baseUrl: provider.baseUrl, model, ...submitArgs, signal });
     });
     tasks.update(task.id, { remoteTaskId });
     tasks.watch(tasks.get(task.id), {
       key: () => provider.apiKey,
-      poll: ({ key, remoteTaskId: id }) => adapters.pollTask({ key, remoteTaskId: id }),
+      poll: ({ key, remoteTaskId: id }) => adapters.pollTask({ key, baseUrl: provider.baseUrl, remoteTaskId: id }),
       intervalMs: 6000,
       onSuccess: async (t, r) => {
         const names = [];
@@ -302,11 +303,11 @@ register('tts', async (ctx, args, { signal }) => {
     const voice = args.voice || (provider.ttsVoice || 'Cherry');
     const task = tasks.create({ cap: 'tts', providerId: provider.id, providerName: provider.name, model, voice, prompt: text.slice(0, 500) });
     const fileName = await tasks.submitGuard(task, async () => {
-      const r = await adapters.synthesizeTts({ key: provider.apiKey, model, text, voice, signal });
+      const r = await adapters.synthesizeTts({ key: provider.apiKey, baseUrl: provider.baseUrl, model, text, voice, signal });
       const name = `iris-tts-${Date.now()}.${r.audioUrl ? adapters.extFromUrl(r.audioUrl, 'wav') : 'wav'}`;
       const p = path.join(outputDir(), name);
       if (r.audioUrl) await adapters.downloadTo(r.audioUrl, p, { signal });
-      else fs.writeFileSync(p, Buffer.from(r.audioB64, 'base64'));
+      else writePrivateFile(p, Buffer.from(r.audioB64, 'base64'));
       return name;
     });
     tasks.update(task.id, { status: 'succeeded', files: [fileName], finishedAt: new Date().toISOString() });
@@ -530,7 +531,7 @@ register('providers_list', async (ctx, args) => {
       type: p.type || 'openai',
       baseUrl: p.baseUrl,
       enabled: p.enabled !== false,
-      mediaProtocol: p.mediaProtocol || 'dashscope',
+      mediaProtocol: p.mediaProtocol || inferMediaProtocol(p.baseUrl),
       apiKeyHint: String(p.apiKey || '').length <= 8 ? '****' : String(p.apiKey).slice(0, 3) + '****' + String(p.apiKey).slice(-4),
       models: models.providerModels(p).map((m) => ({ id: m.id, capabilities: m.capabilities, verified: m.verified || null, source: m.source || 'auto' })),
       capabilities: store.capabilitiesOf(p)
@@ -599,6 +600,7 @@ register('providers_test_vision', async (ctx, args) => {
   const backends = buildVisionBackends(ctx, { providers: visionProviders });
   const backend = backends[0];
   if (!backend) return { ok: true, tested: false, text: '该供应商的 vision 配置不可用（类型非 openai）' };
+  if (args.confirm_paid !== true) throw new Error('iris: 视觉实测会发起真实供应商请求，请先明确确认');
   const r = await testVisionCapability(backend, { timeoutMs: 15000, signal: args._signal });
   return {
     ok: true,
@@ -612,7 +614,7 @@ register('providers_test_vision', async (ctx, args) => {
 
 /* ============ 模型池逐模型管理（阶段 9 P3：手动增删改 + 逐能力实测） ============ */
 
-/** 按能力实测单个模型；返回 {ok, note}。image/video 会产生真实调用（成本已在 UI 标注）。 */
+/** 按能力实测单个模型；返回 {ok, note}。真实调用仅在 UI 明确确认后执行。 */
 async function probeModel(ctx, p, modelId, capability) {
   if (capability === cap.CAPABILITIES.VISION) {
     const backend = buildVisionBackends(ctx, { providers: [p], model: modelId })[0];
@@ -621,34 +623,32 @@ async function probeModel(ctx, p, modelId, capability) {
     return { ok: r.ok, note: r.ok ? '认出红色测试图' : (r.error || '未识别出红色') };
   }
   if (capability === cap.CAPABILITIES.TRANSCRIBE) {
-    throw new Error('iris: 转写能力请用真实音频通过“音频转写”动作验证，不执行空样本探针');
+    return { skipped: true, ok: false, note: '需真实音频，请通过“音频转写”动作验证' };
   }
   if (capability === cap.CAPABILITIES.TTS) {
-    const r = await adapters.synthesizeTts({ key: p.apiKey, model: modelId, text: '你好', voice: 'Cherry' });
+    const r = await adapters.synthesizeTts({ key: p.apiKey, baseUrl: p.baseUrl, model: modelId, text: '你好', voice: 'Cherry' });
     const ok = !!(r.audioUrl || r.audioB64);
     return { ok, note: ok ? '合成返回音频' : '无音频返回' };
   }
   if (capability === cap.CAPABILITIES.IMAGE) {
-    if ((p.mediaProtocol || 'dashscope') === 'openai-images') {
+    if ((p.mediaProtocol || inferMediaProtocol(p.baseUrl)) === 'openai-images') {
       const outs = await adapters.openAiGenerateImage({ key: p.apiKey, baseUrl: p.baseUrl, model: modelId, prompt: 'red circle', size: '256x256', n: 1 });
       return { ok: outs.length > 0, note: outs.length ? '生成返回图片' : '无图片返回' };
     }
-    const started = await adapters.startImageGeneration({ key: p.apiKey, model: modelId, prompt: '红色圆形', size: '512*512', n: 1 });
+    const started = await adapters.startImageGeneration({ key: p.apiKey, baseUrl: p.baseUrl, model: modelId, prompt: '红色圆形', size: '512*512', n: 1 });
     if (!started.remoteTaskId) {
       return { ok: (started.urls || []).length > 0, note: (started.urls || []).length ? '生成成功' : '无图片返回' };
     }
     // 有界轮询到终态（图像通常 5–15s）
     for (let i = 0; i < 20; i++) {
       await new Promise((r) => setTimeout(r, 3000));
-      const st = await adapters.pollTask({ key: p.apiKey, remoteTaskId: started.remoteTaskId });
+      const st = await adapters.pollTask({ key: p.apiKey, baseUrl: p.baseUrl, remoteTaskId: started.remoteTaskId });
       if (st.done) return { ok: st.ok && (st.urls || []).length > 0, note: st.ok ? '生成成功' : (st.message || '生成失败') };
     }
     return { ok: false, note: '生成超时（>60s）' };
   }
   if (capability === cap.CAPABILITIES.VIDEO) {
-    // 视频渲染太慢太贵：只做提交受理（证明模型 id 有效 + 鉴权 + 参数），不等成片
-    const taskId = await adapters.submitVideo({ key: p.apiKey, model: modelId, prompt: 'test', size: '480*832' });
-    return { ok: !!taskId, note: taskId ? '提交受理（未等成片）' : '无 task_id' };
+    return { skipped: true, ok: false, note: '视频提交即可能计费，请通过“视频生成”动作验证' };
   }
   return { ok: false, note: '未知能力' };
 }
@@ -688,12 +688,18 @@ register('providers_test_model', async (ctx, args) => {
   const modelId = String(args.model_id || '').trim();
   const capability = String(args.capability || '').trim();
   if (!modelId || !cap.isKnownCapability(capability)) throw new Error('iris: 需 model_id 与合法 capability');
+  if (![cap.CAPABILITIES.VIDEO, cap.CAPABILITIES.TRANSCRIBE].includes(capability) && args.confirm_paid !== true) {
+    throw new Error('iris: 模型实测会发起真实供应商请求，请先明确确认');
+  }
   let result;
   try {
     result = await probeModel(ctx, p, modelId, capability);
   } catch (err) {
     result = { ok: false, note: String(err.message || err) };
   }
+  if (result.skipped) {
+    return { ok: true, skipped: true, passed: false, text: `[iris] ${modelId} · ${capability} 已跳过：${result.note}` };
+  }
   store.setModelVerified(p.id, modelId, capability, result);
   return {
     ok: true,
@@ -832,8 +838,8 @@ register('attachment_export', async (ctx, args) => {
   } catch (_) { /* ignore */ }
   if (!ref) throw new Error('iris: 该 attachment 不在本会话中、也不是 iris 产物：' + id);
   const stored = await att.readImage({ attachmentId: ref.attachmentId, mediaType: ref.mediaType }, null);
-  fs.mkdirSync(uploads, { recursive: true });
-  fs.writeFileSync(cached, Buffer.from(stored.data), { mode: 0o600 });
+  ensurePrivateDir(uploads);
+  writePrivateFile(cached, Buffer.from(stored.data));
   return { ok: true, path: cached, name: ref.name || path.basename(cached) };
 });
 
@@ -850,14 +856,14 @@ register('transcribe', async (ctx, args, { signal }) => {
       model, prompt: 'audio transcribe: ' + path.basename(audioPath)
     });
     const remoteTaskId = await tasks.submitGuard(task, async () => {
-      const audioUrl = await adapters.uploadTempFile({ key: provider.apiKey, model, filePath: audioPath, signal });
-      return adapters.submitTranscription({ key: provider.apiKey, model, audioUrl, signal });
+      const audioUrl = await adapters.uploadTempFile({ key: provider.apiKey, baseUrl: provider.baseUrl, model, filePath: audioPath, signal });
+      return adapters.submitTranscription({ key: provider.apiKey, baseUrl: provider.baseUrl, model, audioUrl, signal });
     });
     tasks.update(task.id, { remoteTaskId });
     tasks.watch(tasks.get(task.id), {
       key: () => provider.apiKey,
       poll: async ({ key, remoteTaskId: id }) => {
-        const r = await adapters.pollTranscriptionTask({ key, remoteTaskId: id });
+        const r = await adapters.pollTranscriptionTask({ key, baseUrl: provider.baseUrl, remoteTaskId: id });
         return { done: r.done, ok: r.ok, urls: r.text ? [r.text] : [], message: r.message };
       },
       intervalMs: 2500,

package/lib/adapters.js

@@ -7,8 +7,10 @@
  */
 import fs from 'node:fs';
 import path from 'node:path';
-
-const DASHSCOPE = 'https://dashscope.aliyuncs.com/api/v1';
+import { Readable } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { dashscopeApiBase } from './provider-protocol.js';
+import { chmodPrivateFile, ensurePrivateDir, privateSibling } from './private-storage.js';
 
 /**
  * 网络调用超时档位（2026-09-03 健康检查）：挂死的连接绝不能冻住盯守 tick——
@@ -111,8 +113,9 @@ export function dashscopeImageMode(model) {
 }
 
 /** 新版多模态同步协议：响应中直接返回图片 URL。 */
-export async function generateImageMultimodal({ key, model, prompt, size, n = 1, timeoutMs = T_SYNC_GEN, signal }) {
-  const res = await fetch(`${DASHSCOPE}/services/aigc/multimodal-generation/generation`, {
+export async function generateImageMultimodal({ key, baseUrl, model, prompt, size, n = 1, timeoutMs = T_SYNC_GEN, signal }) {
+  const apiBase = dashscopeApiBase(baseUrl);
+  const res = await fetch(`${apiBase}/services/aigc/multimodal-generation/generation`, {
     method: 'POST',
     headers: authHeaders(key),
     signal: timeoutSignal(timeoutMs, signal),
@@ -142,8 +145,9 @@ export async function startImageGeneration(opts) {
   }
   return { remoteTaskId: await submitImage(opts), urls: [] };
 }
-export async function submitImage({ key, model, prompt, size, n = 1, timeoutMs = T_SUBMIT, signal }) {
-  const res = await fetch(`${DASHSCOPE}/services/aigc/text2image/image-synthesis`, {
+export async function submitImage({ key, baseUrl, model, prompt, size, n = 1, timeoutMs = T_SUBMIT, signal }) {
+  const apiBase = dashscopeApiBase(baseUrl);
+  const res = await fetch(`${apiBase}/services/aigc/text2image/image-synthesis`, {
     method: 'POST',
     headers: { ...authHeaders(key), 'X-DashScope-Async': 'enable' },
     signal: timeoutSignal(timeoutMs, signal),
@@ -165,12 +169,13 @@ export async function submitImage({ key, model, prompt, size, n = 1, timeoutMs =
  * - 其他（t2v/i2v）：POST /services/aigc/video-generation/video-synthesis，
  *   imgDataUrl 支持公网 URL 或 data:image base64。
  */
-export async function submitVideo({ key, model, prompt, imgDataUrl, size = '1280*720', duration, audioUrl, resolution, timeoutMs = T_SUBMIT, signal }) {
+export async function submitVideo({ key, baseUrl, model, prompt, imgDataUrl, size = '1280*720', duration, audioUrl, resolution, timeoutMs = T_SUBMIT, signal }) {
+  const apiBase = dashscopeApiBase(baseUrl);
   const isS2V = /s2v/i.test(model || '');
   let url, input, parameters;
   const headers = { ...authHeaders(key), 'X-DashScope-Async': 'enable' };
   if (isS2V) {
-    url = `${DASHSCOPE}/services/aigc/image2video/video-synthesis`;
+    url = `${apiBase}/services/aigc/image2video/video-synthesis`;
     input = { image_url: imgDataUrl, audio_url: audioUrl };
     parameters = {};
     if (resolution) parameters.resolution = String(resolution);
@@ -178,7 +183,7 @@ export async function submitVideo({ key, model, prompt, imgDataUrl, size = '1280
       headers['X-DashScope-OssResourceResolve'] = 'enable';
     }
   } else {
-    url = `${DASHSCOPE}/services/aigc/video-generation/video-synthesis`;
+    url = `${apiBase}/services/aigc/video-generation/video-synthesis`;
     input = { prompt };
     if (imgDataUrl) input.img_url = imgDataUrl;
     parameters = { size };
@@ -203,8 +208,9 @@ export async function submitVideo({ key, model, prompt, imgDataUrl, size = '1280
  * 返回 oss:// 形式 URL；调用模型时请求头须带 X-DashScope-OssResourceResolve: enable
  * （submitVideo 的 s2v 分支已自动处理）。
  */
-export async function uploadTempFile({ key, model, filePath, timeoutMs = T_UPLOAD, signal }) {
-  const u = new URL(`${DASHSCOPE}/uploads`);
+export async function uploadTempFile({ key, baseUrl, model, filePath, timeoutMs = T_UPLOAD, signal }) {
+  const apiBase = dashscopeApiBase(baseUrl);
+  const u = new URL(`${apiBase}/uploads`);
   u.searchParams.set('action', 'getPolicy');
   u.searchParams.set('model', model);
   const pres = await fetch(u, { headers: authHeaders(key), signal: timeoutSignal(timeoutMs, signal) });
@@ -230,8 +236,9 @@ export async function uploadTempFile({ key, model, filePath, timeoutMs = T_UPLOA
 const TERMINAL = new Set(['SUCCEEDED', 'FAILED', 'CANCELED', 'UNKNOWN']);
 
 /** @returns {{done:boolean, ok:boolean, urls:string[], message?:string}} */
-export async function pollTask({ key, remoteTaskId, timeoutMs = T_POLL }) {
-  const res = await fetch(`${DASHSCOPE}/tasks/${encodeURIComponent(remoteTaskId)}`, {
+export async function pollTask({ key, baseUrl, remoteTaskId, timeoutMs = T_POLL }) {
+  const apiBase = dashscopeApiBase(baseUrl);
+  const res = await fetch(`${apiBase}/tasks/${encodeURIComponent(remoteTaskId)}`, {
     headers: authHeaders(key),
     signal: timeoutSignal(timeoutMs)
   });
@@ -272,8 +279,9 @@ export async function pollTask({ key, remoteTaskId, timeoutMs = T_POLL }) {
 }
 
 /* ---------------- DashScope：qwen-tts（同步） ---------------- */
-export async function synthesizeTts({ key, model = 'qwen-tts-latest', text, voice = 'Cherry', timeoutMs = T_SYNC_GEN, signal }) {
-  const res = await fetch(`${DASHSCOPE}/services/aigc/multimodal-generation/generation`, {
+export async function synthesizeTts({ key, baseUrl, model = 'qwen-tts-latest', text, voice = 'Cherry', timeoutMs = T_SYNC_GEN, signal }) {
+  const apiBase = dashscopeApiBase(baseUrl);
+  const res = await fetch(`${apiBase}/services/aigc/multimodal-generation/generation`, {
     method: 'POST',
     headers: authHeaders(key),
     signal: timeoutSignal(timeoutMs, signal),
@@ -407,13 +415,19 @@ export function extFromUrl(url, fallback = 'bin') {
 export async function downloadTo(url, filePath, { timeoutMs = T_DOWNLOAD, signal } = {}) {
   const res = await fetch(url, { signal: timeoutSignal(timeoutMs, signal) });
   if (!res.ok) throw new Error(`下载结果失败：HTTP ${res.status}`);
-  const buf = Buffer.from(await res.arrayBuffer());
-  const { writeFileSync, renameSync } = await import('node:fs');
-  // 原子落盘：先写 .tmp 再 rename，失败/超时不留半截产物
-  const tmp = filePath + '.tmp';
-  writeFileSync(tmp, buf);
-  renameSync(tmp, filePath);
-  return buf.length;
+  if (!res.body) throw new Error('下载结果失败：响应没有内容');
+  ensurePrivateDir(path.dirname(filePath));
+  const tmp = privateSibling(filePath, 'download');
+  try {
+    const output = fs.createWriteStream(tmp, { flags: 'wx', mode: 0o600 });
+    await pipeline(Readable.fromWeb(res.body), output);
+    const bytes = fs.statSync(tmp).size;
+    fs.renameSync(tmp, filePath);
+    chmodPrivateFile(filePath);
+    return bytes;
+  } finally {
+    try { fs.rmSync(tmp, { force: true }); } catch (_) { /* rename 成功后已不存在 */ }
+  }
 }
 
 /* ---------------- DashScope：非实时语音识别（异步任务） ---------------- */
@@ -422,14 +436,15 @@ export async function downloadTo(url, filePath, { timeoutMs = T_DOWNLOAD, signal
  * @param {{key:string, model:string, audioUrl:string}} opts audioUrl 为 oss:// 或公网 URL
  * @returns {Promise<string>} remoteTaskId
  */
-export async function submitTranscription({ key, model = 'qwen-audio-3.0-asr-flash-filetrans', audioUrl, timeoutMs = T_SUBMIT, signal }) {
+export async function submitTranscription({ key, baseUrl, model = 'qwen-audio-3.0-asr-flash-filetrans', audioUrl, timeoutMs = T_SUBMIT, signal }) {
+  const apiBase = dashscopeApiBase(baseUrl);
   const headers = { ...authHeaders(key), 'X-DashScope-Async': 'enable' };
   if (/^oss:\/\//.test(audioUrl || '')) headers['X-DashScope-OssResourceResolve'] = 'enable';
   // Qwen3 Filetrans 使用单值 file_url；Qwen-Audio 3.0、Fun-ASR、Paraformer 使用 file_urls。
   const input = /^qwen3-asr-.*filetrans/i.test(model || '')
     ? { file_url: audioUrl }
     : { file_urls: [audioUrl] };
-  const res = await fetch(`${DASHSCOPE}/services/audio/asr/transcription`, {
+  const res = await fetch(`${apiBase}/services/audio/asr/transcription`, {
     method: 'POST',
     headers,
     signal: timeoutSignal(timeoutMs, signal),
@@ -461,8 +476,9 @@ export function transcriptionText(payload) {
 }
 
 /** 轮询 ASR 任务；正式结果位于 results[].transcription_url 指向的 JSON。 */
-export async function pollTranscriptionTask({ key, remoteTaskId, timeoutMs = T_POLL }) {
-  const res = await fetch(`${DASHSCOPE}/tasks/${encodeURIComponent(remoteTaskId)}`, {
+export async function pollTranscriptionTask({ key, baseUrl, remoteTaskId, timeoutMs = T_POLL }) {
+  const apiBase = dashscopeApiBase(baseUrl);
+  const res = await fetch(`${apiBase}/tasks/${encodeURIComponent(remoteTaskId)}`, {
     headers: authHeaders(key),
     signal: timeoutSignal(timeoutMs)
   });

package/lib/api.js

@@ -16,6 +16,15 @@ import { irisHome, capabilitiesOf, onChange as onConfigChange } from './config.j
 import { mimeOf, mediaUrl } from './media.js';
 import * as tasks from './tasks.js';
 import { runAction } from './actions.js';
+import { chmodPrivateFile, ensurePrivateDir } from './private-storage.js';
+import { inferMediaProtocol } from './provider-protocol.js';
+import { optimizePrompt } from './prompt-optimizer.js';
+import {
+  importPromptOptimizerConfig,
+  loadPromptOptimizerConfig,
+  resetPromptOptimizerConfig,
+  setPromptOptimizerEnabled
+} from './prompt-optimizer-config.js';
 
 function readJsonSafe(file) {
   try {
@@ -42,7 +51,7 @@ function providerPublic(p) {
     type: p.type || 'openai',
     baseUrl: p.baseUrl,
     enabled: p.enabled !== false,
-    mediaProtocol: p.mediaProtocol || 'dashscope',
+    mediaProtocol: p.mediaProtocol || inferMediaProtocol(p.baseUrl),
     apiKeyHint: keyHint(p.apiKey),
     capabilities: capabilitiesOf(p),
     // 迁移/推断结果是否与原始声明不同（UI 提示旧配置已推断）
@@ -242,7 +251,7 @@ function serveSse(res) {
   res.on('error', onClose);
 }
 
-/** webServer 前缀路由 handler：GET/HEAD /iris/api/state 和 /iris/api/task/:id，POST /iris/api/actions/:name */
+/** webServer 前缀路由 handler：状态、任务、动作与提示词优化器 API。 */
 export function serveApi(req, res, ctx) {
   try {
     const method = String(req.method || 'GET').toUpperCase();
@@ -254,6 +263,8 @@ export function serveApi(req, res, ctx) {
       if (urlPath === '/iris/api/upload') {
         return handleUpload(req, res);
       }
+      const promptMatch = typeof ctx === 'object' && urlPath.match(/^\/iris\/api\/prompt-optimizer\/(optimize|import|reset|enabled)\/?$/);
+      if (promptMatch) return handlePromptOptimizer(ctx, promptMatch[1], req, res);
       const actionMatch = typeof ctx === 'object' && urlPath.match(/^\/iris\/api\/actions\/([A-Za-z0-9_-]+)\/?$/);
       if (!actionMatch) { return sendJson(res, 405, { error: 'method not allowed' }); }
       return handleAction(ctx, actionMatch[1], req, res);
@@ -267,6 +278,9 @@ export function serveApi(req, res, ctx) {
       if (method === 'HEAD') return sendJson(res, 405, { error: 'method not allowed' });
       return serveSse(res);
     }
+    if (urlPath === '/iris/api/prompt-optimizer/config') {
+      return sendJson(res, 200, method === 'HEAD' ? {} : loadPromptOptimizerConfig());
+    }
     const taskMatch = urlPath.match(/^\/iris\/api\/task\/([^/]+)$/);
     if (taskMatch) {
       return serveTaskDetail(taskMatch[1], method, res);
@@ -295,10 +309,12 @@ function sendJson(res, status, obj) {
 
 /** POST /iris/api/actions/:name：读取 JSON body 调 runAction 返回结果 */
 const MAX_BODY_BYTES = 1e6; // 1MB 上限（防滥用）
-function handleAction(ctx, name, req, res) {
+function handleJsonPost(req, res, execute) {
   const chunks = [];
   const controller = new AbortController();
   let completed = false;
+  let totalBytes = 0;
+  let overflow = false;
   const finish = (status, body) => {
     if (completed) return;
     completed = true;
@@ -307,32 +323,49 @@ function handleAction(ctx, name, req, res) {
   const disconnect = () => { if (!completed) controller.abort(); };
   if (typeof req.on === 'function') req.on('aborted', disconnect);
   if (typeof res.on === 'function') res.on('close', disconnect);
-  let totalBytes = 0; // 注意：必须按字节计——body 数组的 length 是块数不是字节数（旧代码的坑）
-  let overflow = false;
-  req.on('data', (c) => {
+  req.on('data', (chunk) => {
     if (overflow) return;
-    totalBytes += c.length;
+    totalBytes += chunk.length;
     if (totalBytes > MAX_BODY_BYTES) {
       overflow = true;
-      chunks.length = 0; // 丢弃已收块，不再占内存
+      chunks.length = 0;
       return;
     }
-    chunks.push(c);
+    chunks.push(chunk);
   });
   req.on('end', async () => {
     if (overflow) return finish(413, { error: 'request body too large (limit 1MB)' });
     try {
       const raw = Buffer.concat(chunks).toString('utf8');
-      const args = raw ? JSON.parse(raw) : {};
-      const result = await runAction(ctx, name, args, { signal: controller.signal });
+      const body = raw ? JSON.parse(raw) : {};
+      const result = await execute(body, controller.signal);
       finish(200, result);
     } catch (err) {
-      finish(controller.signal.aborted ? 499 : 400, { error: controller.signal.aborted ? 'request canceled' : String((err && err.message) || err) });
+      finish(controller.signal.aborted ? 499 : 400, {
+        error: controller.signal.aborted ? 'request canceled' : String((err && err.message) || err)
+      });
     }
   });
   req.on('error', () => finish(400, { error: 'bad request' }));
 }
 
+function handleAction(ctx, name, req, res) {
+  return handleJsonPost(req, res, (args, signal) => runAction(ctx, name, args, { signal }));
+}
+
+function handlePromptOptimizer(ctx, operation, req, res) {
+  return handleJsonPost(req, res, async (body, signal) => {
+    if (operation === 'optimize') return optimizePrompt(ctx, body, { signal });
+    if (operation === 'import') {
+      const imported = body && body.config !== undefined ? body.config : body;
+      return { ok: true, ...importPromptOptimizerConfig(imported) };
+    }
+    if (operation === 'reset') return { ok: true, ...resetPromptOptimizerConfig() };
+    if (operation === 'enabled') return { ok: true, ...setPromptOptimizerEnabled(body && body.enabled) };
+    throw new Error('unknown prompt optimizer operation');
+  });
+}
+
 /* ---------- 文件选择器 L2：本地文件上传（阶段 10） ---------- */
 export const MAX_UPLOAD_BYTES = 64 * 1024 * 1024;
 export const UPLOAD_TTL_MS = 7 * 24 * 60 * 60 * 1000;
@@ -370,18 +403,28 @@ function safeName(name) {
 function handleUpload(req, res) {
   const q = new URL(req.url || '', 'http://x').searchParams;
   const name = safeName(q.get('name') || 'upload');
-  fs.mkdirSync(uploadsDir(), { recursive: true });
+  ensurePrivateDir(uploadsDir());
   purgeStaleUploads();
 
   const stem = Date.now().toString(36) + '-' + Math.random().toString(36).slice(2, 8);
   const abs = path.join(uploadsDir(), stem + '-' + name);
   const tmp = abs + '.part';
-  const out = fs.createWriteStream(tmp, { mode: 0o600, flags: 'wx' });
+  // 惰性建流：空上传全程不落盘。createWriteStream 的 open 是异步的，
+  // 若在 open 完成前 destroy，文件仍会被创建，同步 rmSync 删不到，留下孤儿 .part。
+  let out = null;
   let totalBytes = 0;
   let settled = false;
 
   const discard = () => {
-    try { out.destroy(); } catch (_) { /* ignore */ }
+    const stream = out;
+    out = null;
+    if (stream) {
+      // 兜底：等 fd 真正关闭（close 事件）后再删一次，覆盖 open 晚于 destroy 的竞态。
+      stream.once('close', () => {
+        try { fs.rmSync(tmp, { force: true }); } catch (_) { /* ignore */ }
+      });
+      try { stream.destroy(); } catch (_) { /* ignore */ }
+    }
     try { fs.rmSync(tmp, { force: true }); } catch (_) { /* ignore */ }
   };
   const finish = (status, body) => {
@@ -391,7 +434,14 @@ function handleUpload(req, res) {
     sendJson(res, status, body);
   };
 
-  out.on('error', (err) => finish(500, { error: 'upload failed: ' + String(err && err.message) }));
+  const ensureStream = () => {
+    if (!out) {
+      out = fs.createWriteStream(tmp, { mode: 0o600, flags: 'wx' });
+      out.on('error', (err) => finish(500, { error: 'upload failed: ' + String(err && err.message) }));
+    }
+    return out;
+  };
+
   req.on('data', (chunk) => {
     if (settled) return;
     totalBytes += chunk.length;
@@ -400,18 +450,21 @@ function handleUpload(req, res) {
       if (typeof req.resume === 'function') req.resume();
       return;
     }
-    if (!out.write(chunk) && typeof req.pause === 'function') {
+    const stream = ensureStream();
+    if (!stream.write(chunk) && typeof req.pause === 'function') {
       req.pause();
-      out.once('drain', () => { if (!settled && typeof req.resume === 'function') req.resume(); });
+      stream.once('drain', () => { if (!settled && typeof req.resume === 'function') req.resume(); });
     }
   });
   req.on('end', () => {
     if (settled) return;
     if (!totalBytes) return finish(400, { error: 'empty upload' });
-    out.end(() => {
+    const stream = out;
+    stream.end(() => {
       if (settled) return;
       try {
         fs.renameSync(tmp, abs);
+        chmodPrivateFile(abs);
         finish(200, { ok: true, path: abs, name, expiresInMs: UPLOAD_TTL_MS });
       } catch (err) {
         finish(500, { error: 'upload failed: ' + String(err && err.message) });
@@ -464,4 +517,4 @@ function serveTaskDetail(taskId, method, res) {
     'X-Content-Type-Options': 'nosniff'
   });
   res.end(method === 'HEAD' ? undefined : body);
-}
+}

package/lib/bundled-skills.js

@@ -0,0 +1,62 @@
+'use strict';
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const SKILL_NAMES = ['iris-verify-ui', 'iris-compose-media'];
+const SKILL_ROOT = fileURLToPath(new URL('../.dsh/skills/', import.meta.url));
+
+function parseScalar(value, file) {
+  const trimmed = value.trim();
+  if (trimmed.startsWith('"')) {
+    try {
+      return JSON.parse(trimmed);
+    } catch (error) {
+      throw new Error(`随包 Skill frontmatter 字符串无效：${file}: ${error.message}`);
+    }
+  }
+  if (trimmed.startsWith("'") && trimmed.endsWith("'")) {
+    return trimmed.slice(1, -1).replaceAll("''", "'");
+  }
+  return trimmed;
+}
+
+/** 读取由 Iris 自己发布的固定 Skill；不把此解析器当作通用 YAML 解析器。 */
+export function loadBundledSkills() {
+  return SKILL_NAMES.map((expectedName) => {
+    const directory = path.join(SKILL_ROOT, expectedName);
+    const file = path.join(directory, 'SKILL.md');
+    const source = fs.readFileSync(file, 'utf8');
+    const frontmatter = source.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?/);
+    if (!frontmatter) throw new Error(`随包 Skill 缺少 frontmatter：${file}`);
+
+    const nameLine = frontmatter[1].match(/^name:\s*(.+)$/m);
+    const descriptionLine = frontmatter[1].match(/^description:\s*(.+)$/m);
+    const name = nameLine ? parseScalar(nameLine[1], file) : '';
+    const description = descriptionLine ? parseScalar(descriptionLine[1], file) : '';
+    if (name !== expectedName) throw new Error(`随包 Skill 名称不匹配：${file}`);
+    if (!description) throw new Error(`随包 Skill 缺少 description：${file}`);
+
+    return Object.freeze({
+      name,
+      description,
+      content: source.slice(frontmatter[0].length).replace(/^\r?\n/, ''),
+      source: 'bundled',
+      provider: 'iris-bundled',
+      path: file,
+      resourceBase: Object.freeze({ kind: 'directory', path: directory })
+    });
+  });
+}
+
+/** 注册为宿主级 runtime Skill；DSH 项目目录中的同名 Skill 仍按原生优先级胜出。 */
+export function registerBundledSkills(ctx) {
+  const registry = ctx && (ctx.skills || (typeof ctx.get === 'function' && ctx.get('skills')));
+  if (!registry || typeof registry.register !== 'function') {
+    throw new Error('DSH Skill registry 不可用');
+  }
+  const skills = loadBundledSkills();
+  for (const skill of skills) registry.register(skill);
+  return skills.map((skill) => skill.name);
+}

package/lib/capability.js

@@ -2,7 +2,7 @@
 /**
  * Iris Provider 能力系统（阶段 1）。
  *
- * 目标（对齐 PLAN 阶段 1 与 RESEARCH 的 "test it, don't guess it"）：
+ * 目标（“实际验证，不只猜测”）：
  * - 能力常量：image-gen / video-gen / tts / transcribe / vision
  * - 严格选择：不具备某能力的 Provider 不得被兜底选中
  * - 有序 failover：同一能力按 providers.json 声明顺序返回，调用方按序尝试