@mokuyoaxis/dsh-iris 0.2.0 → 0.2.2

package/lib/adapters.js

@@ -3,14 +3,18 @@
  * Iris 媒体生成后端 —— 多协议适配器。
  * - dashscope：阿里云百炼（图像/视频异步任务 + qwen-tts 同步）
  * - openai-images：OpenAI Images 兼容协议（generations）
+ * - openai-chat-images：网关 Chat Completions 生图扩展（非流式）
+ * - openai-responses-images：Responses image_generation 工具及网关图片消息（同步）
  * 所有函数只收显式 key；错误统一 throw Error(人话)。
  */
 import fs from 'node:fs';
 import path from 'node:path';
 import { Readable } from 'node:stream';
 import { pipeline } from 'node:stream/promises';
-import { dashscopeApiBase, isDashScopeBaseUrl } from './provider-protocol.js';
+import { dashscopeApiBase, imageSizeViolation, isDashScopeBaseUrl, normalizeImageSize } from './provider-protocol.js';
 import { chmodPrivateFile, ensurePrivateDir, privateSibling } from './private-storage.js';
+import { isFreeQuotaExhausted, retryAfterDelay } from './provider-health.js';
+import { ProviderContractError } from './provider-contract.js';
 
 /**
  * 网络调用超时档位（2026-09-03 健康检查）：挂死的连接绝不能冻住盯守 tick——
@@ -53,26 +57,31 @@ async function readJson(res) {
  * message 保持人话（向后兼容 String(err.message)）。
  */
 export class ProviderError extends Error {
-  constructor({ category, status, message, rootCause }) {
+  constructor({ category, status, message, rootCause, providerCode, retryAfterMs }) {
     super(message);
     this.name = 'ProviderError';
     this.category = category;
     this.status = status;
     this.rootCause = rootCause;
+    this.providerCode = providerCode;
+    this.retryAfterMs = retryAfterMs;
   }
 }
 
-function classifyHttpError(status, body, fallback) {
-  const msg = (body && (body.message || (body.output && body.output.message))) || (body && body.code) || `HTTP ${status}`;
-  const code = String((body && body.code) || '');
+function classifyHttpError(status, body, fallback, headers) {
+  const msg = body?.message || body?.output?.message || body?.error?.message || body?.code || `HTTP ${status}`;
+  const code = String(body?.code || body?.error?.code || '');
   let category = 'unknown';
   let text;
-  if (status === 401 || status === 403) {
+  if (isFreeQuotaExhausted({ status, code, message: msg })) {
+    category = 'quota';
+    text = `免费额度耗尽：${msg}`;
+  } else if (status === 401 || status === 403) {
     category = 'auth';
     text = `鉴权失败：${msg}`;
   } else if (status === 429) {
-    category = /quota|insufficient|balance|limit|额度/i.test(msg + ' ' + code) ? 'quota' : 'rate_limit';
-    text = `限流或额度不足：${msg}`;
+    category = code === 'BudgetLimitExceeded' ? 'quota' : 'rate_limit';
+    text = `${category === 'quota' ? '预算额度耗尽' : '请求限流'}：${msg}`;
   } else if (/InvalidParameter|NotFound\.Model|unsupported/i.test(code)) {
     category = 'invalid_parameter';
     text = `模型或参数不受支持：${msg}`;
@@ -82,22 +91,71 @@ function classifyHttpError(status, body, fallback) {
   } else {
     text = `${fallback}：${msg}`;
   }
-  return new ProviderError({ category, status, message: text, rootCause: msg });
+  return new ProviderError({ category, status, message: text, rootCause: msg, providerCode: code,
+    ...(status === 429 ? { retryAfterMs: retryAfterDelay(headers?.get('retry-after')) } : {}) });
 }
 
-/** 包装 fetch 层的网络异常（无 HTTP 状态） */
-export function networkError(err) {
+/** 包装 fetch 层的网络异常（无 HTTP 状态）。hint 补一句可执行的排查方向。 */
+export function networkError(err, hint) {
+  const code = String(err?.cause?.code || err?.code || '');
   const e = new ProviderError({
     category: 'network',
     status: 0,
-    message: '网络错误：' + String((err && err.message) || err),
-    rootCause: err
+    message: '网络错误：' + String((err && err.message) || err) + (hint ? '（' + hint + '）' : ''),
+    rootCause: err,
+    ...(/^[A-Z][A-Z0-9_]{1,63}$/.test(code) ? { providerCode: code } : {})
   });
   return e;
 }
 
-function providerError(status, body, fallback) {
-  return classifyHttpError(status, body, fallback);
+/** 超时/取消必须保持原分类：轮询 errStreak 容错与 submitGuard 都依赖 network 与 timeout 的区分。 */
+function isAbortLike(err) {
+  return err?.name === 'AbortError' || err?.name === 'TimeoutError' || err?.code === 'ABORT_ERR';
+}
+
+function transportFetchError(err, response) {
+  if (isAbortLike(err)) return err;
+  const code = String(err?.cause?.code || err?.code || '');
+  const detail = {
+    ENOTFOUND: 'DNS 未找到目标主机',
+    EAI_AGAIN: 'DNS 解析暂时失败',
+    ECONNREFUSED: '目标连接被拒绝',
+    UND_ERR_CONNECT_TIMEOUT: '连接建立超时',
+    UND_ERR_HEADERS_TIMEOUT: '等待响应头超时',
+    UND_ERR_BODY_TIMEOUT: '响应正文读取超时',
+    ETIMEDOUT: '网络操作超时',
+    ECONNRESET: '连接被重置',
+    UND_ERR_SOCKET: '底层连接中断',
+    CERT_HAS_EXPIRED: 'TLS 证书已过期',
+    DEPTH_ZERO_SELF_SIGNED_CERT: 'TLS 证书不受信任',
+    UNABLE_TO_VERIFY_LEAF_SIGNATURE: 'TLS 证书链验证失败'
+  }[code];
+  const phase = response
+    ? `已收到 HTTP ${response.status} 响应头，读取响应正文失败`
+    : '请求传输失败，尚未收到响应头';
+  const error = networkError(err, phase + (detail ? '；' + detail : '') +
+    (code && /^[A-Z][A-Z0-9_]{1,63}$/.test(code) ? '；' + code : '') + '；受理结果未知，禁止自动重提');
+  if (['UND_ERR_CONNECT_TIMEOUT', 'UND_ERR_HEADERS_TIMEOUT', 'UND_ERR_BODY_TIMEOUT', 'ETIMEDOUT'].includes(code)) {
+    error.category = 'timeout';
+  }
+  error.stage = response ? 'response' : 'submit';
+  error.acceptance = 'unknown';
+  return error;
+}
+
+/** 只包装网络读取；HTTP 业务错误和图片协议校验由调用方处理。 */
+async function fetchImageJson(url, options) {
+  let response;
+  try {
+    response = await fetch(url, options);
+    return { res: response, body: await readJson(response) };
+  } catch (err) {
+    throw transportFetchError(err, response);
+  }
+}
+
+function providerError(status, body, fallback, headers) {
+  return classifyHttpError(status, body, fallback, headers);
 }
 
 /* ---------------- DashScope：图像（旧异步 / 新版多模态） ---------------- */
@@ -115,21 +173,35 @@ export function dashscopeImageMode(model) {
   return 'legacy-async';
 }
 
+/**
+ * 尺寸在进入请求体前统一「归一 + 校验」：
+ * 协议差异（分隔符、数值边界）全部来自 provider-protocol.js，本地违规明确标记为未受理。
+ * 归一的意义是跨协议可用 —— 例如把 `1024x1536` 送给 DashScope 多模态（服务端要求 `*`），
+ * 或把 `1024*1536` 送给 OpenAI 兼容端点（服务端要求 `x`），都不再需要调用方自己记格式。
+ */
+export function applyImageSize({ protocol, mode, size }) {
+  const violation = imageSizeViolation({ protocol, mode, size });
+  if (violation) throw new ProviderContractError(violation, {
+    stage: 'validate', category: 'invalid_request', acceptance: 'not_accepted'
+  });
+  return normalizeImageSize({ protocol, mode, size });
+}
+
 /** 新版多模态同步协议：响应中直接返回图片 URL。 */
 export async function generateImageMultimodal({ key, baseUrl, model, prompt, size, n = 1, timeoutMs = T_SYNC_GEN, signal }) {
   const apiBase = dashscopeApiBase(baseUrl);
-  const res = await fetch(`${apiBase}/services/aigc/multimodal-generation/generation`, {
+  const requestSize = applyImageSize({ protocol: 'dashscope', mode: 'multimodal-sync', size });
+  const { res, body } = await fetchImageJson(`${apiBase}/services/aigc/multimodal-generation/generation`, {
     method: 'POST',
     headers: authHeaders(key),
     signal: timeoutSignal(timeoutMs, signal),
     body: JSON.stringify({
       model,
       input: { messages: [{ role: 'user', content: [{ text: prompt }] }] },
-      parameters: { ...(size ? { size } : {}), n: Number(n) || 1 }
+      parameters: { ...(requestSize ? { size: requestSize } : {}), n: Number(n) || 1 }
     })
   });
-  const body = await readJson(res);
-  if (!res.ok) throw providerError(res.status, body, '生成失败');
+  if (!res.ok) throw providerError(res.status, body, '生成失败', res.headers);
   const urls = [];
   for (const choice of (body && body.output && body.output.choices) || []) {
     for (const item of (choice && choice.message && choice.message.content) || []) {
@@ -150,14 +222,14 @@ export async function startImageGeneration(opts) {
 }
 export async function submitImage({ key, baseUrl, model, prompt, size, n = 1, timeoutMs = T_SUBMIT, signal }) {
   const apiBase = dashscopeApiBase(baseUrl);
-  const res = await fetch(`${apiBase}/services/aigc/text2image/image-synthesis`, {
+  const requestSize = applyImageSize({ protocol: 'dashscope', mode: 'legacy-async', size });
+  const { res, body } = await fetchImageJson(`${apiBase}/services/aigc/text2image/image-synthesis`, {
     method: 'POST',
     headers: { ...authHeaders(key), 'X-DashScope-Async': 'enable' },
     signal: timeoutSignal(timeoutMs, signal),
-    body: JSON.stringify({ model, input: { prompt }, parameters: { ...(size ? { size } : {}), n: Number(n) || 1 } })
+    body: JSON.stringify({ model, input: { prompt }, parameters: { ...(requestSize ? { size: requestSize } : {}), n: Number(n) || 1 } })
   });
-  const body = await readJson(res);
-  if (!res.ok) throw providerError(res.status, body, '提交失败');
+  if (!res.ok) throw providerError(res.status, body, '提交失败', res.headers);
   const taskId = body && body.output && body.output.task_id;
   if (!taskId) throw new Error('提交成功但未返回 task_id');
   return taskId;
@@ -199,7 +271,7 @@ export async function submitVideo({ key, baseUrl, model, prompt, imgDataUrl, siz
     body: JSON.stringify({ model, input, parameters })
   });
   const body = await readJson(res);
-  if (!res.ok) throw providerError(res.status, body, '提交失败');
+  if (!res.ok) throw providerError(res.status, body, '提交失败', res.headers);
   const taskId = body && body.output && body.output.task_id;
   if (!taskId) throw new Error('提交成功但未返回 task_id');
   return taskId;
@@ -218,7 +290,7 @@ export async function uploadTempFile({ key, baseUrl, model, filePath, timeoutMs
   u.searchParams.set('model', model);
   const pres = await fetch(u, { headers: authHeaders(key), signal: timeoutSignal(timeoutMs, signal) });
   const pbody = await readJson(pres);
-  if (!pres.ok || !pbody || !pbody.data) throw providerError(pres.status, pbody, '获取上传凭证失败');
+  if (!pres.ok || !pbody || !pbody.data) throw providerError(pres.status, pbody, '获取上传凭证失败', pres.headers);
   const pol = pbody.data;
   const name = path.basename(filePath);
   const keyPath = `${pol.upload_dir}/${Date.now()}-${name}`;
@@ -246,7 +318,7 @@ export async function pollTask({ key, baseUrl, remoteTaskId, timeoutMs = T_POLL,
     signal: timeoutSignal(timeoutMs, signal)
   });
   const body = await readJson(res);
-  if (!res.ok) throw providerError(res.status, body, '查询任务失败');
+  if (!res.ok) throw providerError(res.status, body, '查询任务失败', res.headers);
   const out = (body && body.output) || {};
   const status = out.task_status || 'UNKNOWN';
   const urls = [];
@@ -291,7 +363,7 @@ export async function synthesizeTts({ key, baseUrl, model = 'qwen-tts-latest', t
     body: JSON.stringify({ model, input: { text, voice } })
   });
   const body = await readJson(res);
-  if (!res.ok) throw providerError(res.status, body, '合成失败');
+  if (!res.ok) throw providerError(res.status, body, '合成失败', res.headers);
   const audio = body && body.output && body.output.audio;
   const url = audio && (audio.url || audio.audio_url);
   const b64 = audio && typeof audio.data === 'string' ? audio.data : null;
@@ -302,24 +374,124 @@ export async function synthesizeTts({ key, baseUrl, model = 'qwen-tts-latest', t
 /* ---------------- OpenAI Images 兼容（同步 base64/url） ---------------- */
 export async function openAiGenerateImage({ key, baseUrl, model, prompt, size = '1024x1024', n = 1, timeoutMs = T_SYNC_GEN, signal }) {
   const base = String(baseUrl || '').replace(/\/+$/, '');
-  const res = await fetch(`${base}/images/generations`, {
+  const requestSize = applyImageSize({ protocol: 'openai-images', size });
+  const { res, body } = await fetchImageJson(`${base}/images/generations`, {
     method: 'POST',
     headers: authHeaders(key),
     signal: timeoutSignal(timeoutMs, signal),
-    body: JSON.stringify({ model, prompt, size, n: Number(n) || 1 })
+    body: JSON.stringify({ model, prompt, size: requestSize, n: Number(n) || 1 })
   });
-  const body = await readJson(res);
-  if (!res.ok) throw providerError(res.status, body, '生成失败');
+  if (!res.ok) throw providerError(res.status, body, '生成失败', res.headers);
   const items = (body && Array.isArray(body.data) && body.data) || [];
   const out = [];
   for (const it of items) {
     if (it && typeof it.b64_json === 'string') out.push({ b64: it.b64_json });
     else if (it && typeof it.url === 'string') out.push({ url: it.url });
   }
-  if (!out.length) throw new Error('生成完成但未返回图片数据');
+  if (!out.length) throw imageResponseError('生成响应未返回图片数据');
   return out;
 }
 
+function imageResponseError(message) {
+  return new ProviderContractError(message, {
+    stage: 'response', category: 'protocol', acceptance: 'unknown'
+  });
+}
+
+function imageBase64Item(value, mediaType, label) {
+  const b64 = typeof value === 'string' ? value.replace(/\s/g, '') : '';
+  const bytes = Buffer.from(b64, 'base64');
+  if (!bytes.length || bytes.toString('base64').replace(/=+$/, '') !== b64.replace(/=+$/, '')) {
+    throw imageResponseError(label + '响应包含无效的图片 base64');
+  }
+  return { b64: bytes.toString('base64'), ...(mediaType ? { mediaType } : {}) };
+}
+
+/** 网关扩展：图片 Markdown/data URL、image_url 内容块或 message.images。 */
+function chatImageItems(body, label = '聊天生图') {
+  const items = [], seen = new Set();
+  function add(source) {
+    if (typeof source !== 'string') return;
+    const value = source.trim();
+    if (seen.has(value)) return;
+    const data = /^data:(image\/[a-z0-9.+-]+);base64,([\s\S]+)$/i.exec(value);
+    if (data) {
+      items.push(imageBase64Item(data[2], data[1].toLowerCase(), label));
+    } else if (/^https?:\/\//i.test(value)) {
+      items.push({ url: value });
+    } else return;
+    seen.add(value);
+  }
+  function text(content) {
+    for (const match of content.matchAll(/!\[[^\]]*\]\(([^)]+)\)/g)) add(match[1]);
+    for (const match of content.matchAll(/data:image\/[a-z0-9.+-]+;base64,[^\s)"<>]+/gi)) add(match[0]);
+  }
+  function part(item) {
+    if (item?.type === 'text' && typeof item.text === 'string') text(item.text);
+    else if (item?.image_url) add(typeof item.image_url === 'string' ? item.image_url : item.image_url.url);
+  }
+  for (const choice of Array.isArray(body?.choices) ? body.choices : []) {
+    const message = choice?.message;
+    if (typeof message?.content === 'string') text(message.content);
+    else if (Array.isArray(message?.content)) message.content.forEach(part);
+    if (Array.isArray(message?.images)) message.images.forEach(part);
+  }
+  if (!items.length) throw imageResponseError(label + '响应未返回图片；受理结果未知，禁止自动重提');
+  return items;
+}
+
+export async function openAiChatGenerateImage({ key, baseUrl, model, prompt, image, size, n = 1, timeoutMs = T_SYNC_GEN, signal }) {
+  if (typeof size === 'string' && size.trim()) {
+    throw new ProviderContractError('聊天生图协议不支持 size 参数；请在提示词中描述所需尺寸', {
+      stage: 'validate', category: 'invalid_request', acceptance: 'not_accepted'
+    });
+  }
+  const base = String(baseUrl || '').replace(/\/+$/, '');
+  const content = image ? [
+    { type: 'text', text: prompt },
+    { type: 'image_url', image_url: { url: 'data:' + image.mediaType + ';base64,' + Buffer.from(image.bytes).toString('base64') } }
+  ] : prompt;
+  const { res, body } = await fetchImageJson(`${base}/chat/completions`, {
+    method: 'POST', headers: authHeaders(key), signal: timeoutSignal(timeoutMs, signal),
+    body: JSON.stringify({ model, stream: false, messages: [{ role: 'user', content }],
+      ...(Number(n) > 1 ? { n: Number(n) } : {}) })
+  });
+  if (!res.ok) throw providerError(res.status, body, '聊天生图失败', res.headers);
+  return chatImageItems(body);
+}
+
+/** 同步 Responses 生图：主模型由 model 指定，图片工具模型沿用服务端默认。 */
+export async function openAiResponsesGenerateImage({ key, baseUrl, model, prompt, size, n = 1, timeoutMs = T_SYNC_GEN, signal }) {
+  if (Number(n) !== 1) {
+    throw new ProviderContractError('Responses 生图当前只支持 n=1', {
+      stage: 'validate', category: 'invalid_request', acceptance: 'not_accepted'
+    });
+  }
+  const base = String(baseUrl || '').replace(/\/+$/, '');
+  const requestSize = applyImageSize({ protocol: 'openai-responses-images', size });
+  const { res, body } = await fetchImageJson(`${base}/responses`, {
+    method: 'POST', headers: authHeaders(key), signal: timeoutSignal(timeoutMs, signal),
+    body: JSON.stringify({ model, input: prompt, stream: false, store: false, background: false,
+      tools: [{ type: 'image_generation', action: 'generate', ...(requestSize ? { size: requestSize } : {}) }],
+      tool_choice: { type: 'image_generation' } })
+  });
+  if (!res.ok) throw providerError(res.status, body, 'Responses 生图失败', res.headers);
+  if (body?.status !== 'completed') throw imageResponseError('Responses 生图未返回同步完成结果；禁止自动重提');
+  const output = Array.isArray(body.output) ? body.output : [];
+  const images = output.filter(item => item?.type === 'image_generation_call');
+  if (images.length) return images.map(item => {
+    if (item.status !== 'completed') throw imageResponseError('Responses 图片工具未完成；禁止自动重提');
+    return imageBase64Item(item.result, undefined, 'Responses 生图');
+  });
+  // 实测网关将图片作为 output_text 返回；这不证明执行了官方图片工具。
+  const messages = output.filter(item => item?.type === 'message');
+  if (messages.some(item => item.status !== 'completed')) throw imageResponseError('Responses 图片消息未完成；禁止自动重提');
+  return chatImageItems({ choices: messages.map(item => ({ message: {
+    content: (Array.isArray(item.content) ? item.content : []).map(part => part?.type === 'output_text'
+      ? { type: 'text', text: part.text } : part)
+  } })) }, 'Responses 生图');
+}
+
 /* ---------------- 模型发现（OpenAI GET /models + DashScope GET /api/v1/models） ---------------- */
 /**
  * 拉取供应商模型目录。DashScope 官方端点分页读取并保留 capabilities；
@@ -342,7 +514,7 @@ export async function listModels({ key, baseUrl, timeoutMs = T_SUBMIT, signal })
     }
     const res = await fetch(url, { headers: authHeaders(key), signal: timeoutSignal(timeoutMs, signal) });
     const body = await readJson(res);
-    if (!res.ok) throw providerError(res.status, body, '模型发现失败');
+    if (!res.ok) throw providerError(res.status, body, '模型发现失败', res.headers);
     const output = body && body.output;
     const items = (output && Array.isArray(output.models) && output.models)
       || (body && Array.isArray(body.data) && body.data)
@@ -358,11 +530,14 @@ export async function listModels({ key, baseUrl, timeoutMs = T_SUBMIT, signal })
         ? item.inference_metadata.request_modality.map((value) => String(value).toLowerCase()) : [];
       const responseModalities = Array.isArray(item?.inference_metadata?.response_modality)
         ? item.inference_metadata.response_modality.map((value) => String(value).toLowerCase()) : [];
-      if (responseModalities.includes('image')) capabilities.push('IG');
-      if (responseModalities.includes('video')) capabilities.push('VG');
-      if (requestModalities.includes('audio') && responseModalities.includes('text')) capabilities.push('ASR');
-      if (requestModalities.includes('text') && responseModalities.includes('audio')) capabilities.push('TTS');
-      if (requestModalities.includes('image') && responseModalities.includes('text')) capabilities.push('VU');
+      // 明确能力代码（含空数组/未知新能力）优先，不能被通用模态推断追加用途。
+      if (!Array.isArray(item?.capabilities)) {
+        if (responseModalities.includes('image')) capabilities.push('IG');
+        if (responseModalities.includes('video')) capabilities.push('VG');
+        if (requestModalities.includes('audio') && responseModalities.includes('text')) capabilities.push('ASR');
+        if (requestModalities.includes('text') && responseModalities.includes('audio')) capabilities.push('TTS');
+        if (requestModalities.includes('image') && responseModalities.includes('text')) capabilities.push('VU');
+      }
       const normalizedCapabilities = [...new Set(capabilities)];
       found.set(id, normalizedCapabilities.length ? { id, capabilities: normalizedCapabilities } : id);
     }
@@ -411,7 +586,7 @@ export async function visionStream({ key, baseUrl, model = 'qwen-vl-plus', promp
     const text = await res.text().catch(() => '');
     let body = null;
     try { body = JSON.parse(text); } catch (_) { /* keep null */ }
-    throw providerError(res.status, body, '视觉理解失败');
+    throw providerError(res.status, body, '视觉理解失败', res.headers);
   }
   let full = '';
   const decoder = new TextDecoder();
@@ -488,7 +663,7 @@ export async function submitTranscription({ key, baseUrl, model = 'qwen-audio-3.
     body: JSON.stringify({ model, input })
   });
   const body = await readJson(res);
-  if (!res.ok) throw providerError(res.status, body, '提交转写失败');
+  if (!res.ok) throw providerError(res.status, body, '提交转写失败', res.headers);
   const taskId = body && body.output && body.output.task_id;
   if (!taskId) throw new Error('提交成功但未返回 task_id');
   return taskId;
@@ -520,7 +695,7 @@ export async function pollTranscriptionTask({ key, baseUrl, remoteTaskId, timeou
     signal: timeoutSignal(timeoutMs, signal)
   });
   const body = await readJson(res);
-  if (!res.ok) throw providerError(res.status, body, '查询转写任务失败');
+  if (!res.ok) throw providerError(res.status, body, '查询转写任务失败', res.headers);
   const out = (body && body.output) || {};
   const status = out.task_status || 'UNKNOWN';
   let text = '';

package/lib/api.js

@@ -17,6 +17,9 @@ import { irisHome, capabilitiesOf, onChange as onConfigChange, providerHealthSna
 import { mimeOf, mediaUrl } from './media.js';
 import * as tasks from './tasks.js';
 import * as artifacts from './artifacts.js';
+import { workbenchArtifacts } from './workbench-artifacts.js';
+import { workbenchDetail, downloadWorkbenchSelection, deleteWorkbenchArtifacts, workbenchTransactions,
+  restoreWorkbenchTransaction, workbenchError } from './workbench-management.js';
 import { runAction } from './actions.js';
 import { chmodPrivateFile, ensurePrivateDir } from './private-storage.js';
 import { selectMediaProtocol } from './provider-protocol.js';
@@ -25,6 +28,7 @@ import { hostDoctor } from './doctor.js';
 import { hostRuntimeEvidence, recordHostClient } from './host-runtime.js';
 import { cancelProviderTaskForDsh, coreSnapshotForDsh, disposeCoreTaskAttention, readCoreArtifactMediaForDsh, redeliverProviderTaskForDsh, reobserveProviderTaskForDsh, retryProviderTaskForDsh } from './dsh-core-adapter.js';
 import { optimizePrompt } from './prompt-optimizer.js';
+import { PROMPT_OPTIMIZER_CAPABILITIES } from './prompt-optimizer-core.js';
 import {
   importPromptOptimizerConfig,
   loadPromptOptimizerConfig,
@@ -331,6 +335,9 @@ export function serveApi(req, res, host) {
 
     // POST /iris/api/actions/:name —— GUI 直连触发工具执行
     if (method === 'POST') {
+      if (urlPath === '/iris/api/works/download') return handleWorkbenchPost(req, res, downloadWorkbenchSelection, true);
+      if (urlPath === '/iris/api/works/delete') return handleWorkbenchPost(req, res, deleteWorkbenchArtifacts);
+      if (urlPath === '/iris/api/works/restore') return handleWorkbenchPost(req, res, restoreWorkbenchTransaction);
       if (urlPath === '/iris/api/host-client') {
         if (!host || typeof host !== 'object') return sendJson(res, 503, { error: 'host unavailable' });
         return handleJsonPost(req, res, (body) => recordHostClient(body));
@@ -362,7 +369,7 @@ export function serveApi(req, res, host) {
       return serveSse(res);
     }
     if (urlPath === '/iris/api/prompt-optimizer/config') {
-      return sendJson(res, 200, method === 'HEAD' ? {} : loadPromptOptimizerConfig());
+      return sendJson(res, 200, method === 'HEAD' ? {} : { ...loadPromptOptimizerConfig(), capabilities: PROMPT_OPTIMIZER_CAPABILITIES });
     }
     if (urlPath === '/iris/api/doctor') {
       if (!host || typeof host !== 'object') return sendJson(res, 503, { error: 'host unavailable' });
@@ -373,6 +380,12 @@ export function serveApi(req, res, host) {
       const query = new URL(req.url || '', 'http://iris.local').searchParams;
       return serveCoreSnapshot(res, { limit: Number(query.get('limit') || 12) });
     }
+    if (urlPath === '/iris/api/works') {
+      return serveWorkbenchArtifacts(req, method, res);
+    }
+    if (urlPath === '/iris/api/works/transactions') return serveWorkbenchRead(res, method, () => workbenchTransactions());
+    const workDetailMatch = urlPath.match(/^\/iris\/api\/works\/(core|legacy)\/([^/]+)$/);
+    if (workDetailMatch) return serveWorkbenchRead(res, method, () => workbenchDetail(workDetailMatch[1], workDetailMatch[2]));
     const coreMediaMatch = urlPath.match(/^\/iris\/api\/core\/artifact\/(artifact_[a-f0-9]{24})\/media$/);
     if (coreMediaMatch) return serveCoreArtifactMedia(coreMediaMatch[1], method, res);
     if (urlPath === '/iris/api/artifacts') {
@@ -400,6 +413,32 @@ export function serveApi(req, res, host) {
   }
 }
 
+async function serveWorkbenchArtifacts(req, method, res) {
+  const params = new URL(req.url || '', 'http://iris.local').searchParams;
+  const input = Object.fromEntries(params);
+  for (const key of ['offset', 'limit']) if (input[key] !== undefined) input[key] = Number(input[key]);
+  try { return sendJson(res, 200, method === 'HEAD' ? {} : await workbenchArtifacts(input)); }
+  catch (error) { return sendJson(res, error.statusCode || 500, { error: '作品读取失败', code: error.code || 'IRIS_GALLERY_FAILED' }); }
+}
+
+async function serveWorkbenchRead(res, method, execute) {
+  try { return sendJson(res, 200, method === 'HEAD' ? {} : await execute()); }
+  catch (error) { const safe = workbenchError(error); return sendJson(res, safe.statusCode || 400, { error: safe.message, code: safe.code }); }
+}
+
+function handleWorkbenchPost(req, res, execute, download = false) {
+  return handleJsonPost(req, res, async (body, signal) => {
+    try { return await execute(body, { signal }); }
+    catch (error) { throw workbenchError(error); }
+  }, download ? (response, _status, bytes) => {
+    if (response.writableEnded || response.destroyed) return;
+    response.writeHead(200, { 'Content-Type': 'application/zip', 'Content-Length': bytes.length,
+      'Content-Disposition': 'attachment; filename="iris-works.zip"', 'Cache-Control': 'no-store',
+      'X-Content-Type-Options': 'nosniff', 'Cross-Origin-Resource-Policy': 'same-origin' });
+    response.end(bytes);
+  } : sendJson);
+}
+
 async function serveCoreArtifactMedia(artifactId, method, res) {
   try {
     const result = await readCoreArtifactMediaForDsh(artifactId);
@@ -439,7 +478,7 @@ function sendJson(res, status, obj) {
 
 /** POST /iris/api/actions/:name：读取 JSON body 调 runAction 返回结果 */
 const MAX_BODY_BYTES = 1e6; // 1MB 上限（防滥用）
-function handleJsonPost(req, res, execute) {
+function handleJsonPost(req, res, execute, respond = sendJson) {
   const chunks = [];
   const controller = new AbortController();
   let completed = false;
@@ -448,7 +487,7 @@ function handleJsonPost(req, res, execute) {
   const finish = (status, body) => {
     if (completed) return;
     completed = true;
-    sendJson(res, status, body);
+    (status === 200 ? respond : sendJson)(res, status, body);
   };
   const disconnect = () => { if (!completed) controller.abort(); };
   if (typeof req.on === 'function') req.on('aborted', disconnect);
@@ -469,11 +508,13 @@ function handleJsonPost(req, res, execute) {
       const raw = Buffer.concat(chunks).toString('utf8');
       const body = raw ? JSON.parse(raw) : {};
       const result = await execute(body, controller.signal);
+      if (controller.signal.aborted) return finish(499, { error: 'request canceled' });
       finish(200, result);
     } catch (err) {
       finish(controller.signal.aborted ? 499 : (Number(err && err.statusCode) || 400), {
         error: controller.signal.aborted ? 'request canceled' : String((err && err.message) || err),
-        ...(err && err.code ? { code: String(err.code) } : {})
+        ...(err && err.code ? { code: String(err.code) } : {}),
+        ...(err && /^delete_[a-f0-9]{24}$/.test(err.transactionId) ? { transactionId: err.transactionId } : {})
       });
     }
   });
@@ -524,6 +565,7 @@ function handleCoreTaskRetry(taskId, req, res) {
       const result = await retryProviderTaskForDsh({
         taskId,
         prompt,
+        ...(body.source_artifact_id !== undefined ? { sourceArtifactId: body.source_artifact_id } : {}),
         ...(body.text !== undefined ? { text: String(body.text) } : {}),
         ...(body.voice !== undefined ? { voice: String(body.voice) } : {}),
         ...(body.audio_url !== undefined ? { audio_url: String(body.audio_url) } : {}),
@@ -588,10 +630,10 @@ function handlePromptOptimizer(host, operation, req, res) {
     if (operation === 'optimize') return optimizePrompt(host, body, { signal });
     if (operation === 'import') {
       const imported = body && body.config !== undefined ? body.config : body;
-      return { ok: true, ...importPromptOptimizerConfig(imported) };
+      return { ok: true, ...importPromptOptimizerConfig(imported), capabilities: PROMPT_OPTIMIZER_CAPABILITIES };
     }
-    if (operation === 'reset') return { ok: true, ...resetPromptOptimizerConfig() };
-    if (operation === 'enabled') return { ok: true, ...setPromptOptimizerEnabled(body && body.enabled) };
+    if (operation === 'reset') return { ok: true, ...resetPromptOptimizerConfig(), capabilities: PROMPT_OPTIMIZER_CAPABILITIES };
+    if (operation === 'enabled') return { ok: true, ...setPromptOptimizerEnabled(body && body.enabled), capabilities: PROMPT_OPTIMIZER_CAPABILITIES };
     throw new Error('unknown prompt optimizer operation');
   });
 }

package/lib/capability.js

@@ -6,7 +6,7 @@
  * - 能力常量：image-gen / video-gen / tts / transcribe / vision
  * - 严格选择：不具备某能力的 Provider 不得被兜底选中
  * - 有序 failover：同一能力按 providers.json 声明顺序返回，调用方按序尝试
- * - 旧配置迁移：老 provider（无 capabilities 数组）按模型字段推断能力
+ * - 能力只来自明确标签或旧模型字段绑定，不按供应商端点赋能
  *
  * 本模块是纯函数，不读写磁盘；只吃 provider 记录、吐能力判断。
  */
@@ -30,36 +30,43 @@ const INFER_FIELD = {
   [CAPABILITIES.VISION]: 'visionModel'
 };
 
+/** 模型级明确标签优先；旧能力字段只为同名模型提供明确绑定。 */
+export function configuredModelCapabilities(provider, model) {
+  if (Array.isArray(model?.capabilities)) {
+    return [...new Set(model.capabilities.filter(isKnownCapability))];
+  }
+  const id = typeof model === 'string' ? model.trim() : String(model?.id || '').trim();
+  if (!id) return [];
+  const bound = Object.entries(INFER_FIELD)
+    .filter(([, field]) => typeof provider?.[field] === 'string' && provider[field].trim() === id)
+    .map(([capability]) => capability);
+  return Array.isArray(provider?.capabilities) ? bound.filter((capability) => provider.capabilities.includes(capability)) : bound;
+}
+
 export function isKnownCapability(capability) {
   return KNOWN.has(capability);
 }
 
 /**
  * 一个 provider 的能力列表（去重、只留已知能力）。
- * 迁移规则（旧配置）：
- *   ① capabilities 显式声明 → 权威（严格使用，不额外推断）；
- *   ② 否则按模型字段推断（imageModel→image-gen 等）；
- *   ③ 仍为空且是 DashScope 端点 → 全部媒体能力
- *      （百炼单一 API 服务 t2i/t2v/tts/compatible-vision，裸账号常见于迁移期）。
+ * 显式模型池优先，包括空池；其次是账号明确标签（含空数组），
+ * 最后兼容旧能力字段绑定。账号地址和模型名称都不证明能力。
  * @param {object} p provider 记录
  * @returns {string[]}
  */
 export function capabilitiesOf(p) {
-  const declared = Array.isArray(p && p.capabilities) ? p.capabilities : [];
-  if (declared.some((c) => isKnownCapability(c))) {
-    return [...new Set(declared)].filter(isKnownCapability);
+  if (Array.isArray(p?.models)) {
+    return [...new Set(p.models.flatMap((model) => configuredModelCapabilities(p, model)))];
+  }
+  if (Array.isArray(p?.capabilities)) {
+    return [...new Set(p.capabilities.filter(isKnownCapability))];
   }
   // 旧配置迁移：按模型字段推断（有该能力模型才认为具备该能力）
   const inferred = [];
   for (const [cap, field] of Object.entries(INFER_FIELD)) {
-    if (p && p[field]) inferred.push(cap);
-  }
-  if (inferred.length) return inferred;
-  // 裸 DashScope 账号兜底迁移
-  if (p && /dashscope/i.test(String(p.baseUrl || ''))) {
-    return Object.values(CAPABILITIES);
+    if (typeof p?.[field] === 'string' && p[field].trim()) inferred.push(cap);
   }
-  return [];
+  return inferred;
 }
 
 /**