@mokuyoaxis/dsh-iris 0.1.4 → 0.2.1

package/lib/api.js

@@ -7,7 +7,7 @@
  *
  * 输出纪律（与整仓一致）：
  * - 只回标量字段（字符串/数字/布尔/受限数组），apiKey 永不明文，只给 hint；
- * - 文件路径只给相对 outputs/ 的 basename + 授权播放链接（token 随机 128bit）；
+ * - legacy 文件路径只给相对 outputs/ 的 basename + 128-bit token 链接；Core 媒体按随机 Artifact ID 读取，不宣称独立 token；
  * - tasks/providers 读的是 $DSH_HOME/iris/v1 的持久 JSON，与任务盯守共用同一存储。
  */
 import fs from 'node:fs';
@@ -17,13 +17,18 @@ import { irisHome, capabilitiesOf, onChange as onConfigChange, providerHealthSna
 import { mimeOf, mediaUrl } from './media.js';
 import * as tasks from './tasks.js';
 import * as artifacts from './artifacts.js';
+import { workbenchArtifacts } from './workbench-artifacts.js';
+import { workbenchDetail, downloadWorkbenchSelection, deleteWorkbenchArtifacts, workbenchTransactions,
+  restoreWorkbenchTransaction, workbenchError } from './workbench-management.js';
 import { runAction } from './actions.js';
 import { chmodPrivateFile, ensurePrivateDir } from './private-storage.js';
-import { inferMediaProtocol } from './provider-protocol.js';
+import { selectMediaProtocol } from './provider-protocol.js';
 import { deriveUserState } from './task-semantics.js';
 import { hostDoctor } from './doctor.js';
 import { hostRuntimeEvidence, recordHostClient } from './host-runtime.js';
+import { cancelProviderTaskForDsh, coreSnapshotForDsh, disposeCoreTaskAttention, readCoreArtifactMediaForDsh, redeliverProviderTaskForDsh, reobserveProviderTaskForDsh, retryProviderTaskForDsh } from './dsh-core-adapter.js';
 import { optimizePrompt } from './prompt-optimizer.js';
+import { PROMPT_OPTIMIZER_CAPABILITIES } from './prompt-optimizer-core.js';
 import {
   importPromptOptimizerConfig,
   loadPromptOptimizerConfig,
@@ -55,8 +60,9 @@ function providerPublic(p) {
     name: p.name || p.id,
     type: p.type || 'openai',
     baseUrl: p.baseUrl,
+    mediaBaseUrl: p.mediaBaseUrl || '',
     enabled: p.enabled !== false,
-    mediaProtocol: p.mediaProtocol || inferMediaProtocol(p.baseUrl),
+    ...selectMediaProtocol(p),
     apiKeyHint: keyHint(p.apiKey),
     capabilities: capabilitiesOf(p),
     // 迁移/推断结果是否与原始声明不同（UI 提示旧配置已推断）
@@ -329,6 +335,9 @@ export function serveApi(req, res, host) {
 
     // POST /iris/api/actions/:name —— GUI 直连触发工具执行
     if (method === 'POST') {
+      if (urlPath === '/iris/api/works/download') return handleWorkbenchPost(req, res, downloadWorkbenchSelection, true);
+      if (urlPath === '/iris/api/works/delete') return handleWorkbenchPost(req, res, deleteWorkbenchArtifacts);
+      if (urlPath === '/iris/api/works/restore') return handleWorkbenchPost(req, res, restoreWorkbenchTransaction);
       if (urlPath === '/iris/api/host-client') {
         if (!host || typeof host !== 'object') return sendJson(res, 503, { error: 'host unavailable' });
         return handleJsonPost(req, res, (body) => recordHostClient(body));
@@ -337,6 +346,13 @@ export function serveApi(req, res, host) {
       if (urlPath === '/iris/api/upload') {
         return handleUpload(req, res);
       }
+      // D4 人工 retry as new task：产生新的真实计费，请求体必须显式 confirmBilling:true
+      const coreTaskRetry = urlPath.match(/^\/iris\/api\/core\/task\/([^/]+)\/retry\/?$/);
+      if (coreTaskRetry) return handleCoreTaskRetry(coreTaskRetry[1], req, res);
+      // D1/D2/D3 人工动作：reobserve 显式单步 poll 一次；redeliver 只对 succeeded+failed
+      // 重新取回产物；cancel 只有 Provider 明确确认才写已取消。三者绝不 submit。
+      const coreTaskAction = urlPath.match(/^\/iris\/api\/core\/task\/([^/]+)\/(reobserve|redeliver|cancel|acknowledge|restore|hide|unhide)\/?$/);
+      if (coreTaskAction) return handleCoreTaskManual(coreTaskAction[2], coreTaskAction[1], req, res);
       const promptMatch = typeof host === 'object' && urlPath.match(/^\/iris\/api\/prompt-optimizer\/(optimize|import|reset|enabled)\/?$/);
       if (promptMatch) return handlePromptOptimizer(host, promptMatch[1], req, res);
       const actionMatch = typeof host === 'object' && urlPath.match(/^\/iris\/api\/actions\/([A-Za-z0-9_-]+)\/?$/);
@@ -353,12 +369,25 @@ export function serveApi(req, res, host) {
       return serveSse(res);
     }
     if (urlPath === '/iris/api/prompt-optimizer/config') {
-      return sendJson(res, 200, method === 'HEAD' ? {} : loadPromptOptimizerConfig());
+      return sendJson(res, 200, method === 'HEAD' ? {} : { ...loadPromptOptimizerConfig(), capabilities: PROMPT_OPTIMIZER_CAPABILITIES });
     }
     if (urlPath === '/iris/api/doctor') {
       if (!host || typeof host !== 'object') return sendJson(res, 503, { error: 'host unavailable' });
       return sendJson(res, 200, method === 'HEAD' ? {} : hostDoctor(host, hostRuntimeEvidence()));
     }
+    if (urlPath === '/iris/api/core/snapshot') {
+      if (method === 'HEAD') return sendJson(res, 200, {});
+      const query = new URL(req.url || '', 'http://iris.local').searchParams;
+      return serveCoreSnapshot(res, { limit: Number(query.get('limit') || 12) });
+    }
+    if (urlPath === '/iris/api/works') {
+      return serveWorkbenchArtifacts(req, method, res);
+    }
+    if (urlPath === '/iris/api/works/transactions') return serveWorkbenchRead(res, method, () => workbenchTransactions());
+    const workDetailMatch = urlPath.match(/^\/iris\/api\/works\/(core|legacy)\/([^/]+)$/);
+    if (workDetailMatch) return serveWorkbenchRead(res, method, () => workbenchDetail(workDetailMatch[1], workDetailMatch[2]));
+    const coreMediaMatch = urlPath.match(/^\/iris\/api\/core\/artifact\/(artifact_[a-f0-9]{24})\/media$/);
+    if (coreMediaMatch) return serveCoreArtifactMedia(coreMediaMatch[1], method, res);
     if (urlPath === '/iris/api/artifacts') {
       const query = new URL(req.url || '', 'http://iris.local').searchParams;
       const page = artifacts.page({ offset: Number(query.get('offset') || 0), limit: Number(query.get('limit') || 24) });
@@ -384,6 +413,63 @@ export function serveApi(req, res, host) {
   }
 }
 
+async function serveWorkbenchArtifacts(req, method, res) {
+  const params = new URL(req.url || '', 'http://iris.local').searchParams;
+  const input = Object.fromEntries(params);
+  for (const key of ['offset', 'limit']) if (input[key] !== undefined) input[key] = Number(input[key]);
+  try { return sendJson(res, 200, method === 'HEAD' ? {} : await workbenchArtifacts(input)); }
+  catch (error) { return sendJson(res, error.statusCode || 500, { error: '作品读取失败', code: error.code || 'IRIS_GALLERY_FAILED' }); }
+}
+
+async function serveWorkbenchRead(res, method, execute) {
+  try { return sendJson(res, 200, method === 'HEAD' ? {} : await execute()); }
+  catch (error) { const safe = workbenchError(error); return sendJson(res, safe.statusCode || 400, { error: safe.message, code: safe.code }); }
+}
+
+function handleWorkbenchPost(req, res, execute, download = false) {
+  return handleJsonPost(req, res, async (body, signal) => {
+    try { return await execute(body, { signal }); }
+    catch (error) { throw workbenchError(error); }
+  }, download ? (response, _status, bytes) => {
+    if (response.writableEnded || response.destroyed) return;
+    response.writeHead(200, { 'Content-Type': 'application/zip', 'Content-Length': bytes.length,
+      'Content-Disposition': 'attachment; filename="iris-works.zip"', 'Cache-Control': 'no-store',
+      'X-Content-Type-Options': 'nosniff', 'Cross-Origin-Resource-Policy': 'same-origin' });
+    response.end(bytes);
+  } : sendJson);
+}
+
+async function serveCoreArtifactMedia(artifactId, method, res) {
+  try {
+    const result = await readCoreArtifactMediaForDsh(artifactId);
+    if (res.writableEnded || res.destroyed) return;
+    res.writeHead(200, {
+      'Content-Type': result.artifact.mediaType,
+      'Content-Length': result.bytes.length,
+      'Content-Disposition': 'inline',
+      'Cache-Control': 'private, max-age=3600',
+      'X-Content-Type-Options': 'nosniff',
+      'Cross-Origin-Resource-Policy': 'same-origin',
+      'Referrer-Policy': 'no-referrer'
+    });
+    res.end(method === 'HEAD' ? undefined : result.bytes);
+  } catch (_) {
+    return sendJson(res, 404, { error: 'not found' });
+  }
+}
+
+async function serveCoreSnapshot(res, options = {}) {
+  try {
+    return sendJson(res, 200, await coreSnapshotForDsh({ limit: options.limit || 12 }));
+  } catch (error) {
+    console.error('[iris] Core 只读快照失败：', error && error.code || 'unknown');
+    return sendJson(res, 409, {
+      schemaVersion: 0, available: true, readOnly: true,
+      error: { code: String(error && error.code || 'IRIS_CORE_SNAPSHOT_FAILED') }
+    });
+  }
+}
+
 function sendJson(res, status, obj) {
   if (res.writableEnded || res.destroyed) return; // 已结束/已销毁的连接不再写（end 后二次 end 防御）
   if (!res.headersSent) res.writeHead(status, { 'Content-Type': 'application/json; charset=utf-8', 'Cache-Control': 'no-store', 'X-Content-Type-Options': 'nosniff' });
@@ -392,7 +478,7 @@ function sendJson(res, status, obj) {
 
 /** POST /iris/api/actions/:name：读取 JSON body 调 runAction 返回结果 */
 const MAX_BODY_BYTES = 1e6; // 1MB 上限（防滥用）
-function handleJsonPost(req, res, execute) {
+function handleJsonPost(req, res, execute, respond = sendJson) {
   const chunks = [];
   const controller = new AbortController();
   let completed = false;
@@ -401,7 +487,7 @@ function handleJsonPost(req, res, execute) {
   const finish = (status, body) => {
     if (completed) return;
     completed = true;
-    sendJson(res, status, body);
+    (status === 200 ? respond : sendJson)(res, status, body);
   };
   const disconnect = () => { if (!completed) controller.abort(); };
   if (typeof req.on === 'function') req.on('aborted', disconnect);
@@ -422,10 +508,13 @@ function handleJsonPost(req, res, execute) {
       const raw = Buffer.concat(chunks).toString('utf8');
       const body = raw ? JSON.parse(raw) : {};
       const result = await execute(body, controller.signal);
+      if (controller.signal.aborted) return finish(499, { error: 'request canceled' });
       finish(200, result);
     } catch (err) {
-      finish(controller.signal.aborted ? 499 : 400, {
-        error: controller.signal.aborted ? 'request canceled' : String((err && err.message) || err)
+      finish(controller.signal.aborted ? 499 : (Number(err && err.statusCode) || 400), {
+        error: controller.signal.aborted ? 'request canceled' : String((err && err.message) || err),
+        ...(err && err.code ? { code: String(err.code) } : {}),
+        ...(err && /^delete_[a-f0-9]{24}$/.test(err.transactionId) ? { transactionId: err.transactionId } : {})
       });
     }
   });
@@ -436,15 +525,115 @@ function handleAction(host, name, req, res) {
   return handleJsonPost(req, res, (args, signal) => runAction(host, name, args, { signal }));
 }
 
+/**
+ * POST /iris/api/core/task/:id/(reobserve|redeliver) —— D1/D2 人工动作。
+ * 成功返回 200 + 任务最新五类用户投影行；坏 ID/未知/不满足动作门映射为稳定 4xx。
+ * 任何拒绝都在 Provider 调用与 Task 写入之前发生；错误体不含绝对路径、Key、
+ * 供应商身份或 binding。请求体不接受参数（Task ID 只在 URL 里），客户端断开
+ * 经 AbortSignal 传入在途操作，与 GUI actions 同一约定。
+ */
+const CORE_TASK_MANUAL_ACTIONS = Object.freeze({
+  reobserve: { command: 'task.reobserve', run: reobserveProviderTaskForDsh },
+  redeliver: { command: 'task.redeliver', run: redeliverProviderTaskForDsh },
+  cancel: { command: 'task.cancel', run: cancelProviderTaskForDsh },
+  // 注意力处置是 Host 偏好（不写 Core 事实）：acknowledge/restore/hide/unhide。
+  acknowledge: { command: 'attention.acknowledge', run: (input) => disposeCoreTaskAttention({ ...input, action: 'acknowledge' }) },
+  restore: { command: 'attention.restore', run: (input) => disposeCoreTaskAttention({ ...input, action: 'restore' }) },
+  hide: { command: 'attention.hide', run: (input) => disposeCoreTaskAttention({ ...input, action: 'hide' }) },
+  unhide: { command: 'attention.unhide', run: (input) => disposeCoreTaskAttention({ ...input, action: 'unhide' }) }
+});
+
+/**
+ * POST /iris/api/core/task/:id/retry —— D4 人工重试为新任务。
+ * body 必须携带 { prompt, confirmBilling: true, modelRef? }：Core 记录不持久化
+ * Prompt，只能由调用方重新提供；缺显式计费确认在读取旧 Task 之前拒绝。
+ * 成功返回 200 + 新任务的五类用户投影行与 retriedFrom 关系。
+ */
+function handleCoreTaskRetry(taskId, req, res) {
+  if (!/^task_[a-f0-9]{24}$/.test(taskId)) {
+    return sendJson(res, 400, { error: { code: 'IRIS_DSH_TASK_INVALID', message: 'Core Task ID 无效' } });
+  }
+  handleJsonPost(req, res, async (body, signal) => {
+    try {
+      if (!body || body.confirmBilling !== true) {
+        const error = new Error('重试会创建新任务并可能产生重复生成费用；请求体必须显式 confirmBilling:true');
+        error.code = 'IRIS_COMMAND_BILLING_CONFIRM_REQUIRED';
+        error.statusCode = 400;
+        throw error;
+      }
+      const prompt = String(body.prompt || '');
+      const result = await retryProviderTaskForDsh({
+        taskId,
+        prompt,
+        ...(body.source_artifact_id !== undefined ? { sourceArtifactId: body.source_artifact_id } : {}),
+        ...(body.text !== undefined ? { text: String(body.text) } : {}),
+        ...(body.voice !== undefined ? { voice: String(body.voice) } : {}),
+        ...(body.audio_url !== undefined ? { audio_url: String(body.audio_url) } : {}),
+        modelRef: typeof body.modelRef === 'string' && body.modelRef.trim() ? body.modelRef.trim() : undefined,
+        confirmBilling: true,
+        signal
+      });
+      return {
+        ok: true,
+        contractVersion: 0,
+        command: 'task.retry',
+        retriedFrom: result.retriedFrom,
+        task: result.row
+      };
+    } catch (error) {
+      const code = String(error && error.code || '');
+      error.statusCode = Number(error.statusCode)
+        || (code === 'IRIS_TASK_NOT_FOUND' ? 404
+          : (code === 'IRIS_TASK_NOT_RETRYABLE' || code.startsWith('IRIS_PROVIDER_')) ? 409
+          : 400);
+      throw error;
+    }
+  });
+}
+
+function handleCoreTaskManual(action, taskId, req, res) {
+  if (!/^task_[a-f0-9]{24}$/.test(taskId)) {
+    return sendJson(res, 400, { error: { code: 'IRIS_DSH_TASK_INVALID', message: 'Core Task ID 无效' } });
+  }
+  const entry = CORE_TASK_MANUAL_ACTIONS[action];
+  if (!entry) return sendJson(res, 404, { error: 'not found' });
+  const controller = new AbortController();
+  let completed = false;
+  const finish = (status, body) => {
+    if (completed) return;
+    completed = true;
+    sendJson(res, status, body);
+  };
+  const disconnect = () => { if (!completed) controller.abort(); };
+  if (typeof req.on === 'function') req.on('aborted', disconnect);
+  if (typeof res.on === 'function') res.on('close', disconnect);
+  if (typeof req.resume === 'function') req.resume(); // 无 body 入参；避免小请求体滞留
+  entry.run({ taskId, signal: controller.signal })
+    .then((result) => finish(200, {
+      ok: true,
+      contractVersion: 0,
+      command: entry.command,
+      task: result.row
+    }))
+    .catch((error) => {
+      const code = String(error && error.code || 'IRIS_CORE_MANUAL_ACTION_FAILED');
+      const status = controller.signal.aborted ? 499
+        : code === 'IRIS_TASK_NOT_FOUND' ? 404
+        : (code === 'IRIS_TASK_ID_INVALID' || code === 'IRIS_DSH_TASK_INVALID') ? 400
+        : 409;
+      finish(status, { error: { code, message: String((error && error.message) || '无法执行 Core Task 动作') } });
+    });
+}
+
 function handlePromptOptimizer(host, operation, req, res) {
   return handleJsonPost(req, res, async (body, signal) => {
     if (operation === 'optimize') return optimizePrompt(host, body, { signal });
     if (operation === 'import') {
       const imported = body && body.config !== undefined ? body.config : body;
-      return { ok: true, ...importPromptOptimizerConfig(imported) };
+      return { ok: true, ...importPromptOptimizerConfig(imported), capabilities: PROMPT_OPTIMIZER_CAPABILITIES };
     }
-    if (operation === 'reset') return { ok: true, ...resetPromptOptimizerConfig() };
-    if (operation === 'enabled') return { ok: true, ...setPromptOptimizerEnabled(body && body.enabled) };
+    if (operation === 'reset') return { ok: true, ...resetPromptOptimizerConfig(), capabilities: PROMPT_OPTIMIZER_CAPABILITIES };
+    if (operation === 'enabled') return { ok: true, ...setPromptOptimizerEnabled(body && body.enabled), capabilities: PROMPT_OPTIMIZER_CAPABILITIES };
     throw new Error('unknown prompt optimizer operation');
   });
 }

package/lib/chromium-browser.js

@@ -0,0 +1,117 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import http from 'node:http';
+import crypto from 'node:crypto';
+import { spawn } from 'node:child_process';
+
+// 与 DSH render 的页面权限一致：只渲染内联样式和内嵌图片，不执行脚本或加载网络资源。
+const CSP = "sandbox; default-src 'none'; img-src data: blob:; style-src 'unsafe-inline'; font-src data:; connect-src 'none'; form-action 'none'; base-uri 'none'; frame-src 'none'";
+const failure = (code, message) => Object.assign(new Error(message), { code });
+
+export function createChromiumBrowser({ executable, noSandbox = false, timeoutMs = 30000 } = {}) {
+  if (!executable || !path.isAbsolute(executable)) {
+    throw failure('IRIS_BROWSER_REQUIRED', '请通过 --browser-executable 或 IRIS_BROWSER_EXECUTABLE 提供 Chromium 的绝对路径');
+  }
+  if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 120000) {
+    throw failure('IRIS_BROWSER_INPUT_INVALID', '浏览器超时必须是 1–120000 毫秒');
+  }
+  return Object.freeze({ async renderHtml({ html, width, height, fullPage, signal }) {
+    const operation = AbortSignal.any([...(signal ? [signal] : []), AbortSignal.timeout(timeoutMs)]);
+    operation.throwIfAborted();
+    const profile = fs.mkdtempSync(path.join(os.tmpdir(), 'iris-browser-'));
+    const route = '/' + crypto.randomBytes(16).toString('hex');
+    const server = http.createServer((req, res) => {
+      if (req.url !== route || !['GET', 'HEAD'].includes(req.method)) { res.writeHead(404); res.end(); return; }
+      res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8', 'Content-Security-Policy': CSP,
+        'Referrer-Policy': 'no-referrer', 'X-Content-Type-Options': 'nosniff', 'Cache-Control': 'no-store' });
+      res.end(req.method === 'HEAD' ? '' : html);
+    });
+    let child;
+    let closed;
+    let nextId = 0;
+    let incoming = Buffer.alloc(0);
+    const pending = new Map();
+    const events = new Map();
+    const rejectPending = error => {
+      for (const request of pending.values()) request.reject(error);
+      pending.clear();
+      for (const event of events.values()) event.reject(error);
+      events.clear();
+    };
+    const kill = () => {
+      if (!child?.pid) return;
+      try { process.kill(-child.pid, 'SIGKILL'); } catch (_) { /* 已结束 */ }
+    };
+    const onAbort = () => { rejectPending(operation.reason); kill(); };
+    operation.addEventListener('abort', onAbort, { once: true });
+    const send = (method, params = {}, sessionId) => {
+      operation.throwIfAborted();
+      return new Promise((resolve, reject) => {
+        const id = ++nextId;
+        pending.set(id, { resolve, reject });
+        child.stdio[3].write(JSON.stringify({ id, method, params, ...(sessionId ? { sessionId } : {}) }) + '\0', error => {
+          if (error) { pending.delete(id); reject(failure('IRIS_BROWSER_FAILED', '浏览器通信失败')); }
+        });
+      });
+    };
+    try {
+      await new Promise((resolve, reject) => { server.once('error', reject); server.listen(0, '127.0.0.1', resolve); });
+      operation.throwIfAborted();
+      const args = ['--headless=new', '--hide-scrollbars', '--remote-debugging-pipe', '--disable-gpu', '--disable-dev-shm-usage', '--disable-background-networking',
+        '--no-first-run', '--no-default-browser-check', '--disable-extensions', '--disable-sync',
+        '--user-data-dir=' + profile, ...(noSandbox ? ['--no-sandbox'] : [])];
+      child = spawn(executable, args, { detached: true, stdio: ['ignore', 'ignore', 'ignore', 'pipe', 'pipe'] });
+      closed = new Promise(resolve => {
+        child.once('error', () => { rejectPending(failure('IRIS_BROWSER_FAILED', '无法启动 Chromium')); resolve(); });
+        child.once('close', () => { rejectPending(failure('IRIS_BROWSER_FAILED', 'Chromium 提前退出；请检查可执行文件及运行环境')); resolve(); });
+      });
+      child.stdio[3].on('error', () => rejectPending(failure('IRIS_BROWSER_FAILED', '浏览器通信失败')));
+      child.stdio[4].on('data', chunk => {
+        incoming = Buffer.concat([incoming, chunk]);
+        let separator;
+        while ((separator = incoming.indexOf(0)) >= 0) {
+          const packet = incoming.subarray(0, separator); incoming = incoming.subarray(separator + 1);
+          let message;
+          try { message = JSON.parse(packet.toString()); } catch (_) { continue; }
+          if (message.id) {
+            const request = pending.get(message.id);
+            pending.delete(message.id);
+            if (request) message.error ? request.reject(failure('IRIS_BROWSER_FAILED', 'Chromium 无法完成截图操作')) : request.resolve(message.result);
+          } else {
+            const key = message.sessionId + ':' + message.method;
+            const event = events.get(key);
+            if (event) { events.delete(key); event.resolve(message.params); }
+          }
+        }
+      });
+      const { targetId } = await send('Target.createTarget', { url: 'about:blank' });
+      const { sessionId } = await send('Target.attachToTarget', { targetId, flatten: true });
+      await send('Page.enable', {}, sessionId);
+      await send('Emulation.setDeviceMetricsOverride', { width, height, deviceScaleFactor: 1, mobile: false }, sessionId);
+      const loaded = new Promise((resolve, reject) => events.set(sessionId + ':Page.loadEventFired', { resolve, reject }));
+      // 导航失败时也必须消费事件 Promise 的拒绝。
+      loaded.catch(() => {});
+      const navigation = await send('Page.navigate', { url: 'http://127.0.0.1:' + server.address().port + route }, sessionId);
+      if (navigation.errorText) throw failure('IRIS_BROWSER_FAILED', 'HTML 页面无法加载');
+      await loaded;
+      const layout = await send('Page.getLayoutMetrics', {}, sessionId);
+      const size = fullPage ? layout.cssContentSize : { width, height };
+      const captureWidth = Math.max(width, Math.ceil(size.width)), captureHeight = Math.ceil(size.height);
+      if (captureWidth > 16384 || captureHeight > 16384 || captureWidth * captureHeight > 40000000) {
+        throw failure('IRIS_BROWSER_INPUT_INVALID', '截图尺寸超过限制（边长 16384，4000 万像素）');
+      }
+      const screenshot = await send('Page.captureScreenshot', { format: 'png', captureBeyondViewport: fullPage,
+        clip: { x: 0, y: 0, width: captureWidth, height: captureHeight, scale: 1 } }, sessionId);
+      operation.throwIfAborted();
+      return { bytes: Buffer.from(screenshot.data, 'base64'), mediaType: 'image/png' };
+    } finally {
+      operation.removeEventListener('abort', onAbort);
+      kill();
+      if (closed) await closed;
+      server.closeAllConnections();
+      await new Promise(resolve => server.close(resolve));
+      fs.rmSync(profile, { recursive: true, force: true });
+    }
+  } });
+}