@mokuyoaxis/dsh-iris 0.2.0 → 0.2.1

package/lib/core-maintenance.js

@@ -0,0 +1,213 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { inspectCoreArtifact, refreshCoreArtifactInventory } from './core-artifacts.js';
+import { inspectCoreTask, listCoreTasks } from './core-tasks.js';
+import { atomicWritePrivate } from './private-storage.js';
+
+const TASK = /^task_[a-f0-9]{24}$/;
+const ARTIFACT = /^artifact_[a-f0-9]{24}$/;
+const TRANSACTION = /^delete_[a-f0-9]{24}$/;
+const MANAGED = /^(?:task-store\/v0\/tasks\/task_[a-f0-9]{24}\.json|artifact-store\/v0\/(?:records|manifests)\/artifact_[a-f0-9]{24}\.json|artifact-store\/v0\/objects\/artifact_[a-f0-9]{24}\.(?:png|jpg|webp|gif|mp4|webm|wav|mp3|ogg|flac|txt|json)|provider-staging\/v0\/download-[1-9][0-9]*-[a-f0-9]{16}\.part)$/;
+const fail = (code, message) => { throw Object.assign(new Error(message), { code }); };
+function fileDigest(file) {
+  const hash = crypto.createHash('sha256'), chunk = Buffer.allocUnsafe(1024 * 1024), fd = fs.openSync(file, 'r');
+  try { let size; while ((size = fs.readSync(fd, chunk, 0, chunk.length, null))) hash.update(chunk.subarray(0, size)); }
+  finally { fs.closeSync(fd); }
+  return hash.digest('hex');
+}
+
+function directory(root, relative, create = false) {
+  let current = root;
+  for (const segment of relative.split('/')) {
+    current = path.join(current, segment);
+    if (create && !fs.existsSync(current)) fs.mkdirSync(current, { mode: 0o700 });
+    const stat = fs.lstatSync(current);
+    if (!stat.isDirectory() || stat.isSymbolicLink()) fail('IRIS_CORE_MAINTENANCE_UNSAFE', 'Core 管理目录不安全');
+  }
+  return current;
+}
+
+function managedFile(root, relative) {
+  if (!MANAGED.test(relative)) fail('IRIS_CORE_MAINTENANCE_UNSAFE', '不是可管理的 Core 文件');
+  directory(root, path.posix.dirname(relative));
+  const file = path.join(root, relative);
+  const stat = fs.lstatSync(file);
+  if (!stat.isFile() || stat.isSymbolicLink()) fail('IRIS_CORE_MAINTENANCE_UNSAFE', 'Core 文件不是普通文件');
+  return { path: relative, size: stat.size, digest: fileDigest(file) };
+}
+
+function names(root, relative) {
+  if (!fs.existsSync(path.join(root, relative))) return [];
+  return fs.readdirSync(directory(root, relative));
+}
+
+function inventory(root) {
+  const tasks = [];
+  for (let offset = 0; ; offset += 200) {
+    const page = listCoreTasks(root, { offset, limit: 200 }); tasks.push(...page.tasks);
+    if (offset + 200 >= page.total) break;
+  }
+  const artifacts = names(root, 'artifact-store/v0/records').filter(name => ARTIFACT.test(name.slice(0, -5)) && name.endsWith('.json'))
+    .map(name => inspectCoreArtifact(root, name.slice(0, -5)));
+  return { tasks, artifacts };
+}
+
+function ids(value, pattern, label) {
+  if (value === undefined) return [];
+  if (!Array.isArray(value) || value.length > 200 || !value.every(id => typeof id === 'string' && pattern.test(id)) || new Set(value).size !== value.length) fail('IRIS_COMMAND_INPUT_INVALID', label + ' 必须是不重复的 Core ID 数组，最多 200 条');
+  return value;
+}
+
+export function planCoreDeletion(root, input) {
+  const taskIds = ids(input.task_ids, TASK, 'task_ids'), artifactIds = ids(input.artifact_ids, ARTIFACT, 'artifact_ids');
+  if (!taskIds.length && !artifactIds.length) fail('IRIS_COMMAND_INPUT_INVALID', '请明确指定 Task 或 Artifact ID');
+  const existing = inventory(root), selectedTasks = new Set(taskIds), selectedArtifacts = new Set(artifactIds);
+  const blockers = [], files = [];
+  for (const id of taskIds) {
+    const task = inspectCoreTask(root, id);
+    if (task.phase !== 'terminal' || task.acceptance === 'unknown' || task.outcome === 'unknown') blockers.push({ id, reason: 'task_not_settled' });
+    files.push(managedFile(root, 'task-store/v0/tasks/' + id + '.json'));
+  }
+  for (const id of artifactIds) {
+    inspectCoreArtifact(root, id);
+    const recordPath = 'artifact-store/v0/records/' + id + '.json';
+    const recordFile = managedFile(root, recordPath);
+    const record = JSON.parse(fs.readFileSync(path.join(root, recordPath)));
+    const manifestPath = 'artifact-store/v0/manifests/' + id + '.json';
+    const manifest = record.schemaVersion === 1 ? JSON.parse(fs.readFileSync(path.join(root, manifestPath))) : record;
+    files.push(recordFile);
+    if (record.schemaVersion === 1) files.push(managedFile(root, manifestPath));
+    files.push(managedFile(root, 'artifact-store/v0/objects/' + manifest.object));
+  }
+  for (const task of existing.tasks) {
+    if (selectedTasks.has(task.id)) continue;
+    for (const id of task.artifactIds) if (selectedArtifacts.has(id)) blockers.push({ id, referencedBy: task.id, reason: 'task_artifact_reference' });
+    if (selectedArtifacts.has(task.sourceArtifactId)) blockers.push({ id: task.sourceArtifactId, referencedBy: task.id, reason: 'task_input_reference' });
+    if (selectedTasks.has(task.retriedFrom)) blockers.push({ id: task.retriedFrom, referencedBy: task.id, reason: 'retry_reference' });
+  }
+  for (const artifact of existing.artifacts) {
+    if (selectedArtifacts.has(artifact.id)) continue;
+    if (selectedTasks.has(artifact.metadata.taskId)) blockers.push({ id: artifact.metadata.taskId, referencedBy: artifact.id, reason: 'artifact_task_reference' });
+    for (const edge of artifact.relations) if (selectedArtifacts.has(edge.artifactId)) blockers.push({ id: edge.artifactId, referencedBy: artifact.id, reason: 'artifact_relation' });
+  }
+  // 未提交 Manifest 也可能仍引用目标；未知或损坏的条目保留并阻止误判。
+  const committed = new Set(existing.artifacts.map(artifact => artifact.id));
+  for (const name of names(root, 'artifact-store/v0/manifests')) {
+    if (!/^artifact_[a-f0-9]{24}\.json$/.test(name) || committed.has(name.slice(0, -5))) continue;
+    const relative = 'artifact-store/v0/manifests/' + name; managedFile(root, relative);
+    const manifest = JSON.parse(fs.readFileSync(path.join(root, relative)));
+    for (const edge of manifest.relations || []) if (selectedArtifacts.has(edge.artifactId)) blockers.push({ id: edge.artifactId, referencedBy: name.slice(0, -5), reason: 'uncommitted_relation' });
+  }
+  return { operation: 'delete', task_ids: taskIds, artifact_ids: artifactIds, allowed: !blockers.length, blockers,
+    entries: files, bytes: files.reduce((sum, entry) => sum + entry.size, 0) };
+}
+
+export function planCoreCleanup(root, { older_than_ms = 3600000 } = {}) {
+  if (!Number.isSafeInteger(older_than_ms) || older_than_ms < 60000) fail('IRIS_COMMAND_INPUT_INVALID', 'older_than_ms 至少为 60000');
+  const existing = inventory(root);
+  const referenced = new Set(existing.artifacts.map(artifact => artifact.id));
+  for (const artifact of existing.artifacts) for (const edge of artifact.relations) referenced.add(edge.artifactId);
+  for (const task of existing.tasks) for (const id of task.artifactIds) referenced.add(id);
+  for (const task of existing.tasks) if (task.sourceArtifactId) referenced.add(task.sourceArtifactId);
+  for (const name of names(root, 'artifact-store/v0/manifests')) {
+    if (/^artifact_[a-f0-9]{24}\.json$/.test(name)) {
+      referenced.add(name.slice(0, -5));
+      const relative = 'artifact-store/v0/manifests/' + name; managedFile(root, relative);
+      const manifest = JSON.parse(fs.readFileSync(path.join(root, relative)));
+      for (const edge of manifest.relations || []) referenced.add(edge.artifactId);
+    }
+  }
+  const candidates = [];
+  for (const relativeDirectory of ['provider-staging/v0', 'artifact-store/v0/objects']) {
+    for (const name of names(root, relativeDirectory)) {
+      const relative = relativeDirectory + '/' + name;
+      if (!MANAGED.test(relative)) continue;
+      const stat = fs.lstatSync(path.join(root, relative));
+      if (!stat.isFile() || stat.isSymbolicLink() || Date.now() - stat.mtimeMs < older_than_ms) continue;
+      if (relativeDirectory === 'provider-staging/v0') {
+        const pid = Number(name.split('-')[1]);
+        try { process.kill(pid, 0); continue; } catch (error) { if (error.code !== 'ESRCH') continue; }
+      } else if (referenced.has(name.slice(0, name.lastIndexOf('.')))) continue;
+      candidates.push(managedFile(root, relative));
+    }
+  }
+  return { operation: 'cleanup', candidates, bytes: candidates.reduce((sum, entry) => sum + entry.size, 0) };
+}
+
+const transactionDirectory = (root, id, create = false) => {
+  if (!TRANSACTION.test(id)) fail('IRIS_COMMAND_INPUT_INVALID', '隔离事务 ID 无效');
+  return directory(root, 'maintenance/v0/quarantine/' + id, create);
+};
+const refresh = root => { if (fs.existsSync(path.join(root, 'artifact-store/v0'))) refreshCoreArtifactInventory(root); };
+
+/** 写前清单 + rename；失败时补偿，保留事务用于检查/恢复，绝不永久 unlink 媒体。 */
+export function quarantineCoreFiles(root, plan) {
+  if (!plan.allowed || !plan.entries.length) fail('IRIS_CORE_DELETE_BLOCKED', '删除计划为空或仍被引用，不能执行');
+  const id = 'delete_' + crypto.randomBytes(12).toString('hex'), base = transactionDirectory(root, id, true);
+  const journal = { schemaVersion: 0, id, state: 'prepared', createdAt: new Date().toISOString(), operation: plan.operation, entries: plan.entries };
+  const journalFile = path.join(base, 'transaction.json');
+  atomicWritePrivate(journalFile, JSON.stringify(journal, null, 2) + '\n');
+  const moved = [];
+  try {
+    for (const entry of journal.entries) {
+      const actual = managedFile(root, entry.path);
+      if (actual.digest !== entry.digest || actual.size !== entry.size) fail('IRIS_CORE_MAINTENANCE_CHANGED', '预览后文件发生变化');
+      directory(base, path.posix.dirname(entry.path), true);
+      fs.renameSync(path.join(root, entry.path), path.join(base, entry.path)); moved.push(entry);
+    }
+    refresh(root);
+    journal.state = 'committed'; atomicWritePrivate(journalFile, JSON.stringify(journal, null, 2) + '\n');
+    return { transactionId: id, state: journal.state, files: moved.length, bytes: moved.reduce((sum, entry) => sum + entry.size, 0), recoverable: true };
+  } catch (error) {
+    try {
+      for (const entry of [...moved].reverse()) fs.renameSync(path.join(base, entry.path), path.join(root, entry.path));
+      refresh(root); journal.state = 'rolled-back';
+    } catch (_) { journal.state = 'interrupted'; }
+    atomicWritePrivate(journalFile, JSON.stringify(journal, null, 2) + '\n');
+    throw Object.assign(new Error('Core 隔离操作未完成，已保留恢复清单：' + id + '（' + journal.state + '）'), { code: 'IRIS_CORE_MAINTENANCE_FAILED', transactionId: id, state: journal.state, cause: error });
+  }
+}
+
+export function inspectCoreTransactions(root) {
+  return names(root, 'maintenance/v0/quarantine').filter(id => TRANSACTION.test(id)).map(id => {
+    const base = transactionDirectory(root, id);
+    const file = path.join(base, 'transaction.json'), stat = fs.lstatSync(file);
+    if (!stat.isFile() || stat.isSymbolicLink()) fail('IRIS_CORE_MAINTENANCE_UNSAFE', '隔离清单不是普通文件');
+    const journal = JSON.parse(fs.readFileSync(file));
+    return { transactionId: id, state: journal.state, operation: journal.operation, createdAt: journal.createdAt, files: journal.entries.length };
+  });
+}
+
+export function restoreCoreTransaction(root, id) {
+  const base = transactionDirectory(root, id), journalFile = path.join(base, 'transaction.json');
+  const stat = fs.lstatSync(journalFile);
+  if (!stat.isFile() || stat.isSymbolicLink()) fail('IRIS_CORE_MAINTENANCE_UNSAFE', '隔离清单不安全');
+  const journal = JSON.parse(fs.readFileSync(journalFile));
+  if (journal.schemaVersion !== 0 || journal.id !== id || !Array.isArray(journal.entries)
+      || !['prepared', 'committed', 'interrupted'].includes(journal.state)) fail('IRIS_CORE_RESTORE_INVALID', '事务不处于可恢复状态');
+  const restoring = [];
+  for (const entry of journal.entries) {
+    if (!MANAGED.test(entry.path)) fail('IRIS_CORE_MAINTENANCE_UNSAFE', '隔离清单包含不支持的路径');
+    if (fs.existsSync(path.join(base, entry.path))) {
+      const actual = managedFile(base, entry.path);
+      if (actual.digest !== entry.digest || actual.size !== entry.size) fail('IRIS_CORE_MAINTENANCE_CHANGED', '隔离文件哈希或大小改变');
+      if (fs.existsSync(path.join(root, entry.path))) fail('IRIS_CORE_RESTORE_CONFLICT', '恢复目标已存在，不覆盖已有数据');
+      directory(root, path.posix.dirname(entry.path)); restoring.push(entry);
+    } else {
+      const actual = managedFile(root, entry.path);
+      if (actual.digest !== entry.digest) fail('IRIS_CORE_MAINTENANCE_CHANGED', '事务原位置文件改变');
+    }
+  }
+  const moved = [];
+  try {
+    for (const entry of restoring) { fs.renameSync(path.join(base, entry.path), path.join(root, entry.path)); moved.push(entry); }
+    refresh(root);
+    journal.state = 'restored'; atomicWritePrivate(journalFile, JSON.stringify(journal, null, 2) + '\n');
+    return { transactionId: id, state: 'restored', files: moved.length };
+  } catch (_) {
+    for (const entry of [...moved].reverse()) fs.renameSync(path.join(root, entry.path), path.join(base, entry.path));
+    refresh(root);
+    fail('IRIS_CORE_RESTORE_FAILED', '恢复失败，文件已回到隔离目录');
+  }
+}

package/lib/core-tasks.js

@@ -11,6 +11,7 @@ import { deriveLegacyStatus, semanticViolations } from './task-semantics.js';
 const STORE_DIR = 'task-store';
 const STORE_VERSION = 'v0';
 const TASK_ID = /^task_[a-f0-9]{24}$/;
+const ARTIFACT_ID = /^artifact_[a-f0-9]{24}$/;
 const ATTEMPT_ID = /^attempt_[a-f0-9]{24}$/;
 const PROVIDER_BINDING = /^sha256:[a-f0-9]{64}$/;
 const CAPABILITIES = new Set(['image', 'video', 'tts', 'transcribe']);
@@ -106,7 +107,8 @@ function validateRecord(record, expectedId) {
       || !Number.isSafeInteger(record.revision) || record.revision < 1
       || typeof record.createdAt !== 'string' || typeof record.updatedAt !== 'string'
       || (record.providerBinding !== undefined && !PROVIDER_BINDING.test(record.providerBinding))
-      || (record.retriedFrom !== undefined && !TASK_ID.test(record.retriedFrom))) {
+      || (record.retriedFrom !== undefined && !TASK_ID.test(record.retriedFrom))
+      || (record.sourceArtifactId !== undefined && (record.capability !== 'image' || !ARTIFACT_ID.test(record.sourceArtifactId)))) {
     fail('IRIS_TASK_INVALID', 'Task 记录结构无效');
   }
   if (record.attempts.some((attempt, index) => !attempt || !ATTEMPT_ID.test(attempt.id)
@@ -170,6 +172,8 @@ export function createCoreTask(dataRoot, input = {}) {
   if (!CAPABILITIES.has(capability)) fail('IRIS_TASK_INPUT_INVALID', 'Task capability 无效');
   const retriedFrom = input.retriedFrom === undefined ? undefined : String(input.retriedFrom);
   if (retriedFrom !== undefined && !TASK_ID.test(retriedFrom)) fail('IRIS_TASK_INPUT_INVALID', 'retriedFrom 必须是合法 Task ID');
+  const sourceArtifactId = input.sourceArtifactId;
+  if (sourceArtifactId !== undefined && (capability !== 'image' || !ARTIFACT_ID.test(sourceArtifactId))) fail('IRIS_TASK_INPUT_INVALID', '改图 sourceArtifactId 必须是合法 Artifact ID');
   const now = new Date().toISOString();
   return writeRecord(dataRoot, {
     schemaVersion: 0,
@@ -189,7 +193,8 @@ export function createCoreTask(dataRoot, input = {}) {
     createdAt: now,
     updatedAt: now,
     // D4 retry as new task：显式单向关系（新任务指向旧任务），绝不复制 Prompt。
-    ...(retriedFrom !== undefined ? { retriedFrom } : {})
+    ...(retriedFrom !== undefined ? { retriedFrom } : {}),
+    ...(sourceArtifactId !== undefined ? { sourceArtifactId } : {})
   });
 }
 
@@ -202,7 +207,7 @@ export function inspectCoreTask(dataRoot, id) {
  * skipInvalid 只服务用户侧只读投影：单条损坏记录跳过并计入 dropped，
  * 其余记录照常返回；默认严格模式不变，损坏记录仍使整体读取失败。
  */
-export function listCoreTasks(dataRoot, { offset = 0, limit = 50, skipInvalid = false } = {}) {
+export function listCoreTasks(dataRoot, { offset = 0, limit = 50, skipInvalid = false, status, capability, provider_id, model_ref, outcome, delivery_state } = {}) {
   const start = Math.max(0, Math.trunc(Number(offset) || 0));
   const size = Math.max(1, Math.min(200, Math.trunc(Number(limit) || 50)));
   const directory = taskDirectory(dataRoot);
@@ -236,9 +241,11 @@ export function listCoreTasks(dataRoot, { offset = 0, limit = 50, skipInvalid =
     }
   }
   records.sort((a, b) => String(b.updatedAt).localeCompare(String(a.updatedAt)));
+  const matches = records.filter(record => Object.entries({ status, capability, providerId: provider_id, modelRef: model_ref, outcome, deliveryState: delivery_state })
+    .every(([field, value]) => value === undefined || record[field] === value));
   return Object.freeze({
-    schemaVersion: 0, total: records.length, offset: start, limit: size, dropped,
-    tasks: Object.freeze(records.slice(start, start + size).map(publicTask))
+    schemaVersion: 0, total: matches.length, offset: start, limit: size, dropped,
+    tasks: Object.freeze(matches.slice(start, start + size).map(publicTask))
   });
 }
 

package/lib/core-user-projection.js

@@ -150,6 +150,7 @@ export function projectCoreTaskUserRow(record, artifacts = []) {
     updatedAt: String(record && record.updatedAt || ''),
     revision: Number.isSafeInteger(record && record.revision) ? record.revision : 0,
     artifactIds: Object.freeze(artifactIds),
+    ...(record && record.sourceArtifactId ? { sourceArtifactId: record.sourceArtifactId } : {}),
     mediaReady,
     observable: coreTaskObservable(record),
     redeliverable: coreTaskRedeliverable(record),

package/lib/dsh-core-adapter.js

@@ -2,16 +2,19 @@
 
 import fs from 'node:fs';
 import path from 'node:path';
-import { allProviders, irisHome } from './config.js';
+import { allProviders, irisHome, recordRateLimit } from './config.js';
 import { createCommandService } from './command-service.js';
-import { createCoreArtifact, inspectCoreArtifact, listCoreArtifacts, readCoreArtifactBytes } from './core-artifacts.js';
+import { createCoreArtifact, inspectCoreArtifact, listCoreArtifacts, listCoreArtifactMetadata, readCoreArtifactBytes } from './core-artifacts.js';
 import { createCoreRuntime } from './core-runtime.js';
+import { readSummaryFrames } from './summary-input.js';
+import { readVisionArtifact } from './vision-input.js';
 import { inspectCoreTask, listCoreTasks, recoverCoreTask } from './core-tasks.js';
 import { applyCoreAttentionAction, attentionDispositionOf, readCoreAttentionPrefs } from './core-attention.js';
 import { projectCoreTaskUserRow } from './core-user-projection.js';
 import { requireHostPort } from './host-contract.js';
 import { createProviderTaskRunner } from './provider-task-runner.js';
-import { createConfiguredProviderAdapter } from './provider-adapters.js';
+import { createConfiguredProviderAdapter as createProviderAdapter } from './provider-adapters.js';
+import { parseModelRef } from './models.js';
 import { imageCandidatesFromCatalog, providerForTaskFromCatalog, providerTaskBinding, transcribeCandidatesFromCatalog, ttsCandidatesFromCatalog, videoCandidatesFromCatalog } from './provider-catalog.js';
 
 let writerTail = Promise.resolve();
@@ -20,6 +23,10 @@ const DEFAULT_POLL_INTERVAL_MS = 2500;
 const DEFAULT_MAX_WATCH_MS = 20 * 60 * 1000;
 const POLL_ERROR_TOLERANCE = 5;
 
+function createConfiguredProviderAdapter(provider, options = {}) {
+  return createProviderAdapter(provider, { ...options, onRateLimit: recordRateLimit });
+}
+
 export class DshCoreAdapterError extends Error {
   constructor(code, message) {
     super(message);
@@ -99,6 +106,16 @@ export async function cropForDsh(input = {}) {
   }, input.signal);
 }
 
+/** Browser 只提供截图字节；DSH/CLI 共用 HTML Command 和 Artifact 提交。 */
+export function htmlForDsh(input = {}) {
+  return withWriter(async runtime => {
+    const commands = createCommandService(runtime, { browser: input.browser });
+    const result = await commands.execute('media.html', { html: input.html, width: input.width,
+      height: input.height, full_page: input.fullPage });
+    return runtime.run('inspect', ({ dataRoot }) => readCoreArtifactBytes(dataRoot, result.artifact.id));
+  }, input.signal);
+}
+
 /** DSH 只把图片来源转换为 Command 输入，差异算法与 Artifact 提交由 Core 执行。 */
 export function diffForDsh(input = {}) {
   return withWriter(async (runtime, commands) => {
@@ -142,12 +159,23 @@ export function framesForDsh(input = {}) {
   }, input.signal);
 }
 
+/** 已有抽帧 Artifact 直接进入共享摘要；reader 不取得写者租约。 */
+export function summaryFramesForDsh(input = {}) {
+  return withReader(runtime => readSummaryFrames(runtime, input.frameArtifactIds, input.signal), input.signal);
+}
+
+/** 共享单图读取器用于 look/locate/OCR，Host 不解释 Core 对象路径。 */
+export function visionImageForDsh(input = {}) {
+  return withReader(runtime => readVisionArtifact(runtime, input.artifactId, input.signal), input.signal);
+}
+
 /** 提交一个 Core Provider Task；Provider Adapter 由 DSH 配置边界选择后显式传入。 */
 export function submitProviderTaskForDsh(input = {}) {
   return withWriter((runtime) => createProviderTaskRunner(runtime).submit({
     capability: input.capability,
     candidates: input.candidates,
-    providerInput: input.providerInput
+    providerInput: input.providerInput,
+    sourceArtifactId: input.sourceArtifactId
   }), input.signal);
 }
 
@@ -272,7 +300,7 @@ export function retryProviderTaskForDsh(input = {}) {
         ? { text: input.text, ...(input.voice !== undefined ? { voice: input.voice } : {}) }
         : input.audio_url !== undefined
           ? { audio_url: input.audio_url }
-          : { prompt: input.prompt },
+          : { prompt: input.prompt, ...(input.sourceArtifactId !== undefined ? { source_artifact_id: input.sourceArtifactId } : {}) },
       model_ref: input.modelRef,
       confirm_billing: input.confirmBilling
     });
@@ -304,7 +332,7 @@ function observableProviderTask(task) {
 
 function configuredAdapterForTask(task) {
   const provider = providerForTaskFromCatalog({ providers: allProviders() }, task);
-  return createConfiguredProviderAdapter(provider);
+  return createConfiguredProviderAdapter(provider, { modelId: parseModelRef(task.modelRef)?.modelId });
 }
 
 function stopProviderWatch(taskId, expectedState) {
@@ -444,6 +472,30 @@ export function inspectProviderTaskForDsh(taskId, options = {}) {
     inspectCoreTask(dataRoot, taskId)), options.signal);
 }
 
+/** 作品目录与任务 snapshot 分开查询，目录不加载媒体字节、不取得 writer 租约。 */
+export function galleryArtifactsForDsh(options = {}) {
+  if (!fs.existsSync(dshCoreDataRoot())) return Promise.resolve({ artifacts: [], revision: 0, dropped: 0 });
+  return withReader((runtime) => runtime.run('inspect', ({ dataRoot }) =>
+    listCoreArtifactMetadata(dataRoot)), options.signal);
+}
+
+export function inspectWorkbenchArtifactForDsh(artifactId, options = {}) {
+  return withReader(runtime => runtime.run('inspect', ({ dataRoot }) =>
+    inspectCoreArtifact(dataRoot, artifactId)), options.signal);
+}
+
+/** 工作台管理沿用 CLI 的维护命令；预览/事务列表只读，执行使用既有串行 writer。 */
+export function maintainWorkbenchForDsh(command, input, options = {}) {
+  if (!['core.delete', 'core.transactions', 'core.restore'].includes(command)) {
+    throw new DshCoreAdapterError('IRIS_COMMAND_INPUT_INVALID', '不支持的作品管理命令');
+  }
+  if (command === 'core.transactions' && !fs.existsSync(dshCoreDataRoot())) return Promise.resolve({ transactions: [] });
+  if (command === 'core.restore' || input.confirm_delete === true) {
+    return withWriter((_runtime, commands) => commands.execute(command, input), options.signal);
+  }
+  return withReader(runtime => createCommandService(runtime).execute(command, input), options.signal);
+}
+
 /**
  * 工作台只读候选快照；数据根不存在时不创建任何目录。
  * userTasks 是用户任务区消费的五类状态安全投影（lib/core-user-projection.js），
@@ -533,8 +585,9 @@ export async function readCoreArtifactMediaForDsh(artifactId, options = {}) {
     const result = await withReader((runtime) => runtime.run('inspect', ({ dataRoot }) =>
       readCoreArtifactBytes(dataRoot, id)), options.signal);
     if (!result.artifact.mediaType.startsWith('image/') && result.artifact.mediaType !== 'video/mp4'
-        && !result.artifact.mediaType.startsWith('audio/') && result.artifact.mediaType !== 'text/plain') {
-      throw new DshCoreAdapterError('IRIS_DSH_ARTIFACT_UNSUPPORTED', '当前 DSH 媒体预览只支持图片、mp4 视频、音频与纯文本 Artifact');
+        && result.artifact.mediaType !== 'video/webm' && !result.artifact.mediaType.startsWith('audio/')
+        && result.artifact.mediaType !== 'text/plain' && result.artifact.mediaType !== 'application/json') {
+      throw new DshCoreAdapterError('IRIS_DSH_ARTIFACT_UNSUPPORTED', '当前 DSH 媒体预览不支持此 Artifact 类型');
     }
     return result;
   } catch (error) {
@@ -568,10 +621,11 @@ export async function projectCoreTaskForDsh(host, taskId, options = {}) {
     }
     let attachment;
     try {
+      const extension = item.artifact.mediaType === 'image/jpeg' ? 'jpg' : item.artifact.mediaType.slice(6);
       attachment = await attachments.saveImage({
         data: new Uint8Array(item.bytes),
         mediaType: item.artifact.mediaType,
-        name: 'iris-core-' + item.artifact.id + '.png'
+        name: 'iris-core-' + item.artifact.id + '.' + extension
       });
     } catch (_) {
       throw new DshCoreAdapterError('IRIS_DSH_PROJECTION_FAILED', 'Core 产物无法保存为 DSH attachment');