@mokuyoaxis/dsh-iris 0.2.5 → 0.2.7

package/lib/adapters.js

@@ -367,7 +367,15 @@ export async function synthesizeTts({ key, baseUrl, model = 'qwen-tts-latest', t
     body: JSON.stringify({ model, input: { text, voice } })
   });
   const body = await readJson(res);
-  if (!res.ok) throw providerError(res.status, body, '合成失败', res.headers);
+  if (!res.ok) {
+    const error = providerError(res.status, body, '合成失败', res.headers);
+    if (res.status === 404 && (/NotFound\.Model|model_not_found/i.test(error.providerCode)
+        || /model (?:not exist|can not be found|.*does not exist)/i.test(String(error.rootCause)))) {
+      error.category = 'invalid_parameter';
+      error.message = `当前语音接口找不到模型 ${model}（${new URL(apiBase).hostname}）；请核对模型 ID、所属地域及调用协议。上游：${error.rootCause}`;
+    }
+    throw error;
+  }
   const audio = body && body.output && body.output.audio;
   const url = audio && (audio.url || audio.audio_url);
   const b64 = audio && typeof audio.data === 'string' ? audio.data : null;
@@ -510,6 +518,7 @@ export async function listModels({ key, baseUrl, timeoutMs = T_SUBMIT, signal })
   const found = new Map();
   const maxPages = dashscope ? 50 : 1;
   let loaded = 0;
+  let expectedTotal = null;
   for (let page = 1; page <= maxPages; page++) {
     const url = new URL(endpoint);
     if (dashscope) {
@@ -519,14 +528,24 @@ export async function listModels({ key, baseUrl, timeoutMs = T_SUBMIT, signal })
     const res = await fetch(url, { headers: authHeaders(key), signal: timeoutSignal(timeoutMs, signal) });
     const body = await readJson(res);
     if (!res.ok) throw providerError(res.status, body, '模型发现失败', res.headers);
+    if (!body || body.success === false) throw new ProviderContractError('模型目录响应无效，已保留上次完整目录', {
+      stage: 'validate', category: 'protocol', acceptance: 'not_accepted'
+    });
     const output = body && body.output;
     const items = (output && Array.isArray(output.models) && output.models)
       || (body && Array.isArray(body.data) && body.data)
-      || (Array.isArray(body && body.models) ? body.models : []);
+      || (Array.isArray(body && body.models) ? body.models : null);
+    if (!items) throw new ProviderContractError('模型目录缺少模型数组，已保留上次完整目录', {
+      stage: 'validate', category: 'protocol', acceptance: 'not_accepted'
+    });
     loaded += items.length;
     for (const item of items) {
-      const id = String(typeof item === 'string' ? item : item?.id || item?.model || '').trim();
-      if (!id || found.has(id)) continue;
+      const rawId = typeof item === 'string' ? item : item?.id || item?.model;
+      if (typeof rawId !== 'string' || !rawId.trim()) throw new ProviderContractError('模型目录包含无效模型 ID，已保留上次完整目录', {
+        stage: 'validate', category: 'protocol', acceptance: 'not_accepted'
+      });
+      const id = rawId.trim();
+      if (found.has(id)) continue;
       const capabilities = Array.isArray(item?.capabilities)
         ? item.capabilities.filter((value) => typeof value === 'string' && value)
         : [];
@@ -538,17 +557,25 @@ export async function listModels({ key, baseUrl, timeoutMs = T_SUBMIT, signal })
       if (!Array.isArray(item?.capabilities)) {
         if (responseModalities.includes('image')) capabilities.push('IG');
         if (responseModalities.includes('video')) capabilities.push('VG');
-        if (requestModalities.includes('audio') && responseModalities.includes('text')) capabilities.push('ASR');
-        if (requestModalities.includes('text') && responseModalities.includes('audio')) capabilities.push('TTS');
+        // 音频理解不证明支持文件转写；混合视频/图像/文本输出也不证明独立TTS。
+        if (requestModalities.length === 1 && requestModalities[0] === 'text'
+            && responseModalities.length === 1 && responseModalities[0] === 'audio') capabilities.push('TTS');
         if (requestModalities.includes('image') && responseModalities.includes('text')) capabilities.push('VU');
       }
       const normalizedCapabilities = [...new Set(capabilities)];
       found.set(id, normalizedCapabilities.length ? { id, capabilities: normalizedCapabilities } : id);
     }
     if (!dashscope) break;
-    const statedTotal = Number(output?.total);
-    const total = Number.isFinite(statedTotal) && statedTotal >= 0 ? statedTotal : null;
-    if (!items.length || (total !== null && loaded >= total) || items.length < 100) break;
+    const total = output?.total === undefined ? expectedTotal : Number(output.total);
+    if (total !== null && (!Number.isSafeInteger(total) || total < 0
+        || (expectedTotal !== null && total !== expectedTotal) || loaded > total || (!items.length && loaded < total)
+        || (loaded === total && found.size !== loaded))) {
+      throw new ProviderContractError('模型目录分页不完整或总数变化，已保留上次完整目录', {
+        stage: 'validate', category: 'protocol', acceptance: 'not_accepted'
+      });
+    }
+    if (total !== null) expectedTotal = total;
+    if ((total !== null && loaded === total) || (total === null && items.length < 100)) break;
     if (page === maxPages) throw new Error('iris: 模型目录超过安全分页上限，已保留原模型池');
   }
   return [...found.values()];

package/lib/api.js

@@ -26,7 +26,6 @@ import { selectMediaProtocol } from './provider-protocol.js';
 import { deriveUserState } from './task-semantics.js';
 import { hostDoctor } from './doctor.js';
 import { hostRuntimeEvidence, recordHostClient } from './host-runtime.js';
-import { cancelProviderTaskForDsh, coreSnapshotForDsh, disposeCoreTaskAttention, readCoreArtifactMediaForDsh, redeliverProviderTaskForDsh, reobserveProviderTaskForDsh, retryProviderTaskForDsh } from './dsh-core-adapter.js';
 import { optimizePrompt } from './prompt-optimizer.js';
 import { PROMPT_OPTIMIZER_CAPABILITIES } from './prompt-optimizer-core.js';
 import {
@@ -66,7 +65,8 @@ function providerPublic(p) {
     mediaBaseUrl: p.mediaBaseUrl || '',
     enabled: p.enabled !== false,
     ...selectMediaProtocol(p),
-    apiKeyHint: keyHint(p.apiKey),
+    apiKeyHint: p.dshProvider ? '由 DSH 管理' : keyHint(p.apiKey),
+    ...(p.dshProvider ? { dshProvider: p.dshProvider } : {}),
     capabilities: capabilitiesOf(p),
     // 迁移/推断结果是否与原始声明不同（UI 提示旧配置已推断）
     capabilityInferred: !Array.isArray(p.capabilities) || p.capabilities.length === 0,
@@ -331,16 +331,17 @@ function serveSse(res) {
 }
 
 /** webServer 前缀路由 handler：状态、任务、动作与提示词优化器 API。 */
-export function serveApi(req, res, host) {
+export function serveApi(req, res, host, core) {
+  if (!core || core.snapshot().state !== 'open') return sendJson(res, 503, { error: 'Iris DSH 实例正在关闭或不可用', code: 'IRIS_DSH_RUNTIME_CLOSED' });
   try {
     const method = String(req.method || 'GET').toUpperCase();
     const urlPath = String(req.url || '').split('?')[0];
 
     // POST /iris/api/actions/:name —— GUI 直连触发工具执行
     if (method === 'POST') {
-      if (urlPath === '/iris/api/works/download') return handleWorkbenchPost(req, res, downloadWorkbenchSelection, true);
-      if (urlPath === '/iris/api/works/delete') return handleWorkbenchPost(req, res, deleteWorkbenchArtifacts);
-      if (urlPath === '/iris/api/works/restore') return handleWorkbenchPost(req, res, restoreWorkbenchTransaction);
+      if (urlPath === '/iris/api/works/download') return handleWorkbenchPost(req, res, downloadWorkbenchSelection, true, core);
+      if (urlPath === '/iris/api/works/delete') return handleWorkbenchPost(req, res, deleteWorkbenchArtifacts, false, core);
+      if (urlPath === '/iris/api/works/restore') return handleWorkbenchPost(req, res, restoreWorkbenchTransaction, false, core);
       if (urlPath === '/iris/api/host-client') {
         if (!host || typeof host !== 'object') return sendJson(res, 503, { error: 'host unavailable' });
         return handleJsonPost(req, res, (body) => recordHostClient(body));
@@ -351,16 +352,16 @@ export function serveApi(req, res, host) {
       }
       // D4 人工 retry as new task：产生新的真实计费，请求体必须显式 confirmBilling:true
       const coreTaskRetry = urlPath.match(/^\/iris\/api\/core\/task\/([^/]+)\/retry\/?$/);
-      if (coreTaskRetry) return handleCoreTaskRetry(coreTaskRetry[1], req, res);
+      if (coreTaskRetry) return handleCoreTaskRetry(coreTaskRetry[1], req, res, core);
       // D1/D2/D3 人工动作：reobserve 显式单步 poll 一次；redeliver 只对 succeeded+failed
       // 重新取回产物；cancel 只有 Provider 明确确认才写已取消。三者绝不 submit。
       const coreTaskAction = urlPath.match(/^\/iris\/api\/core\/task\/([^/]+)\/(reobserve|redeliver|cancel|acknowledge|restore|hide|unhide)\/?$/);
-      if (coreTaskAction) return handleCoreTaskManual(coreTaskAction[2], coreTaskAction[1], req, res);
+      if (coreTaskAction) return handleCoreTaskManual(coreTaskAction[2], coreTaskAction[1], req, res, core);
       const promptMatch = typeof host === 'object' && urlPath.match(/^\/iris\/api\/prompt-optimizer\/(optimize|import|reset|enabled)\/?$/);
-      if (promptMatch) return handlePromptOptimizer(host, promptMatch[1], req, res);
+      if (promptMatch) return handlePromptOptimizer(host, promptMatch[1], req, res, core);
       const actionMatch = typeof host === 'object' && urlPath.match(/^\/iris\/api\/actions\/([A-Za-z0-9_-]+)\/?$/);
       if (!actionMatch) { return sendJson(res, 405, { error: 'method not allowed' }); }
-      return handleAction(host, actionMatch[1], req, res);
+      return handleAction(host, actionMatch[1], req, res, core);
     }
     // GET/HEAD 原逻辑
     if (method !== 'GET' && method !== 'HEAD') {
@@ -381,16 +382,16 @@ export function serveApi(req, res, host) {
     if (urlPath === '/iris/api/core/snapshot') {
       if (method === 'HEAD') return sendJson(res, 200, {});
       const query = new URL(req.url || '', 'http://iris.local').searchParams;
-      return serveCoreSnapshot(res, { limit: Number(query.get('limit') || 12) });
+      return serveCoreSnapshot(res, { limit: Number(query.get('limit') || 12) }, core);
     }
     if (urlPath === '/iris/api/works') {
-      return serveWorkbenchArtifacts(req, method, res);
+      return serveWorkbenchArtifacts(req, method, res, core);
     }
-    if (urlPath === '/iris/api/works/transactions') return serveWorkbenchRead(res, method, () => workbenchTransactions());
+    if (urlPath === '/iris/api/works/transactions') return serveWorkbenchRead(res, method, () => workbenchTransactions({ core }));
     const workDetailMatch = urlPath.match(/^\/iris\/api\/works\/(core|legacy)\/([^/]+)$/);
-    if (workDetailMatch) return serveWorkbenchRead(res, method, () => workbenchDetail(workDetailMatch[1], workDetailMatch[2]));
+    if (workDetailMatch) return serveWorkbenchRead(res, method, () => workbenchDetail(workDetailMatch[1], workDetailMatch[2], { core }));
     const coreMediaMatch = urlPath.match(/^\/iris\/api\/core\/artifact\/(artifact_[a-f0-9]{24})\/media$/);
-    if (coreMediaMatch) return serveCoreArtifactMedia(coreMediaMatch[1], method, res);
+    if (coreMediaMatch) return serveCoreArtifactMedia(coreMediaMatch[1], method, res, core);
     if (urlPath === '/iris/api/artifacts') {
       const query = new URL(req.url || '', 'http://iris.local').searchParams;
       const page = artifacts.page({ offset: Number(query.get('offset') || 0), limit: Number(query.get('limit') || 24) });
@@ -416,11 +417,11 @@ export function serveApi(req, res, host) {
   }
 }
 
-async function serveWorkbenchArtifacts(req, method, res) {
+async function serveWorkbenchArtifacts(req, method, res, core) {
   const params = new URL(req.url || '', 'http://iris.local').searchParams;
   const input = Object.fromEntries(params);
   for (const key of ['offset', 'limit']) if (input[key] !== undefined) input[key] = Number(input[key]);
-  try { return sendJson(res, 200, method === 'HEAD' ? {} : await workbenchArtifacts(input)); }
+  try { return sendJson(res, 200, method === 'HEAD' ? {} : await workbenchArtifacts(input, { core })); }
   catch (error) { return sendJson(res, error.statusCode || 500, { error: '作品读取失败', code: error.code || 'IRIS_GALLERY_FAILED' }); }
 }
 
@@ -429,9 +430,9 @@ async function serveWorkbenchRead(res, method, execute) {
   catch (error) { const safe = workbenchError(error); return sendJson(res, safe.statusCode || 400, { error: safe.message, code: safe.code }); }
 }
 
-function handleWorkbenchPost(req, res, execute, download = false) {
+function handleWorkbenchPost(req, res, execute, download = false, core) {
   return handleJsonPost(req, res, async (body, signal) => {
-    try { return await execute(body, { signal }); }
+    try { return await core.runHostOperation(operationSignal => execute(body, { signal: operationSignal, core }), { signal }); }
     catch (error) { throw workbenchError(error); }
   }, download ? (response, _status, bytes) => {
     if (response.writableEnded || response.destroyed) return;
@@ -442,9 +443,9 @@ function handleWorkbenchPost(req, res, execute, download = false) {
   } : sendJson);
 }
 
-async function serveCoreArtifactMedia(artifactId, method, res) {
+async function serveCoreArtifactMedia(artifactId, method, res, core) {
   try {
-    const result = await readCoreArtifactMediaForDsh(artifactId);
+    const result = await core.readCoreArtifactMediaForDsh(artifactId);
     if (res.writableEnded || res.destroyed) return;
     res.writeHead(200, {
       'Content-Type': result.artifact.mediaType,
@@ -461,9 +462,9 @@ async function serveCoreArtifactMedia(artifactId, method, res) {
   }
 }
 
-async function serveCoreSnapshot(res, options = {}) {
+async function serveCoreSnapshot(res, options = {}, core) {
   try {
-    return sendJson(res, 200, await coreSnapshotForDsh({ limit: options.limit || 12 }));
+    return sendJson(res, 200, await core.coreSnapshotForDsh({ limit: options.limit || 12 }));
   } catch (error) {
     console.error('[iris] Core 只读快照失败：', error && error.code || 'unknown');
     return sendJson(res, 409, {
@@ -526,8 +527,8 @@ function handleJsonPost(req, res, execute, respond = sendJson) {
   req.on('error', () => finish(400, { error: 'bad request' }));
 }
 
-function handleAction(host, name, req, res) {
-  return handleJsonPost(req, res, (args, signal) => runAction(host, name, args, { signal }));
+function handleAction(host, name, req, res, core) {
+  return handleJsonPost(req, res, (args, signal) => runAction(host, name, args, { signal, core }));
 }
 
 /**
@@ -538,14 +539,14 @@ function handleAction(host, name, req, res) {
  * 经 AbortSignal 传入在途操作，与 GUI actions 同一约定。
  */
 const CORE_TASK_MANUAL_ACTIONS = Object.freeze({
-  reobserve: { command: 'task.reobserve', run: reobserveProviderTaskForDsh },
-  redeliver: { command: 'task.redeliver', run: redeliverProviderTaskForDsh },
-  cancel: { command: 'task.cancel', run: cancelProviderTaskForDsh },
+  reobserve: { command: 'task.reobserve', run: (core, input) => core.reobserveProviderTaskForDsh(input) },
+  redeliver: { command: 'task.redeliver', run: (core, input) => core.redeliverProviderTaskForDsh(input) },
+  cancel: { command: 'task.cancel', run: (core, input) => core.cancelProviderTaskForDsh(input) },
   // 注意力处置是 Host 偏好（不写 Core 事实）：acknowledge/restore/hide/unhide。
-  acknowledge: { command: 'attention.acknowledge', run: (input) => disposeCoreTaskAttention({ ...input, action: 'acknowledge' }) },
-  restore: { command: 'attention.restore', run: (input) => disposeCoreTaskAttention({ ...input, action: 'restore' }) },
-  hide: { command: 'attention.hide', run: (input) => disposeCoreTaskAttention({ ...input, action: 'hide' }) },
-  unhide: { command: 'attention.unhide', run: (input) => disposeCoreTaskAttention({ ...input, action: 'unhide' }) }
+  acknowledge: { command: 'attention.acknowledge', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'acknowledge' }) },
+  restore: { command: 'attention.restore', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'restore' }) },
+  hide: { command: 'attention.hide', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'hide' }) },
+  unhide: { command: 'attention.unhide', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'unhide' }) }
 });
 
 /**
@@ -554,7 +555,7 @@ const CORE_TASK_MANUAL_ACTIONS = Object.freeze({
  * Prompt，只能由调用方重新提供；缺显式计费确认在读取旧 Task 之前拒绝。
  * 成功返回 200 + 新任务的五类用户投影行与 retriedFrom 关系。
  */
-function handleCoreTaskRetry(taskId, req, res) {
+function handleCoreTaskRetry(taskId, req, res, core) {
   if (!/^task_[a-f0-9]{24}$/.test(taskId)) {
     return sendJson(res, 400, { error: { code: 'IRIS_DSH_TASK_INVALID', message: 'Core Task ID 无效' } });
   }
@@ -567,7 +568,7 @@ function handleCoreTaskRetry(taskId, req, res) {
         throw error;
       }
       const prompt = String(body.prompt || '');
-      const result = await retryProviderTaskForDsh({
+      const result = await core.retryProviderTaskForDsh({
         taskId,
         prompt,
         ...(body.source_artifact_id !== undefined ? { sourceArtifactId: body.source_artifact_id } : {}),
@@ -596,7 +597,7 @@ function handleCoreTaskRetry(taskId, req, res) {
   });
 }
 
-function handleCoreTaskManual(action, taskId, req, res) {
+function handleCoreTaskManual(action, taskId, req, res, core) {
   if (!/^task_[a-f0-9]{24}$/.test(taskId)) {
     return sendJson(res, 400, { error: { code: 'IRIS_DSH_TASK_INVALID', message: 'Core Task ID 无效' } });
   }
@@ -613,7 +614,7 @@ function handleCoreTaskManual(action, taskId, req, res) {
   if (typeof req.on === 'function') req.on('aborted', disconnect);
   if (typeof res.on === 'function') res.on('close', disconnect);
   if (typeof req.resume === 'function') req.resume(); // 无 body 入参；避免小请求体滞留
-  entry.run({ taskId, signal: controller.signal })
+  entry.run(core, { taskId, signal: controller.signal })
     .then((result) => finish(200, {
       ok: true,
       contractVersion: 0,
@@ -630,8 +631,8 @@ function handleCoreTaskManual(action, taskId, req, res) {
     });
 }
 
-function handlePromptOptimizer(host, operation, req, res) {
-  return handleJsonPost(req, res, async (body, signal) => {
+function handlePromptOptimizer(host, operation, req, res, core) {
+  return handleJsonPost(req, res, (body, requestSignal) => core.runHostOperation(async signal => {
     if (operation === 'optimize') return optimizePrompt(host, body, { signal });
     if (operation === 'import') {
       const imported = body && body.config !== undefined ? body.config : body;
@@ -644,7 +645,7 @@ function handlePromptOptimizer(host, operation, req, res) {
     }
     if (operation === 'enabled') return { ok: true, ...setPromptOptimizerEnabled(body && body.enabled), capabilities: PROMPT_CONFIG_CAPABILITIES };
     throw new Error('unknown prompt optimizer operation');
-  });
+  }, { signal: requestSignal }));
 }
 
 /* ---------- 文件选择器 L2：本地文件上传（阶段 10） ---------- */

package/lib/application-runtime.js

@@ -0,0 +1,186 @@
+'use strict';
+
+import { normalizeCoreOptions } from './core-contract.js';
+import { createCoreRuntime } from './core-runtime.js';
+import { createCommandService } from './command-service.js';
+import { normalizeGenerationInput } from './generation-input.js';
+import { createProviderTaskRunner } from './provider-task-runner.js';
+import { createImageFlowService } from './image-flow.js';
+import { createLocalCreationService } from './local-creation.js';
+
+// Internal first-slice execution surface, not a public API or an HTTP allowlist.
+const COMMAND_MODES = Object.freeze({
+  'artifact.import': 'writer', 'artifact.export': 'writer', 'media.diff': 'writer',
+  'task.observe': 'writer', 'task.reobserve': 'writer', 'task.redeliver': 'writer', 'task.cancel': 'writer',
+  'artifact.inspect': 'reader', 'artifact.list': 'reader', 'task.inspect': 'reader', 'task.list': 'reader',
+  'flow.init': 'writer', 'flow.create': 'writer', 'flow.continue': 'writer', 'flow.select': 'writer', 'flow.export': 'writer',
+  'flow.inspect': 'reader', 'flow.list': 'reader',
+  'creation.init': 'writer', 'creation.image': 'writer', 'creation.flow': 'writer'
+});
+
+export class ApplicationRuntimeError extends Error {
+  constructor(code, message) { super(message); this.name = 'ApplicationRuntimeError'; this.code = code; }
+}
+
+function aborted() {
+  return Object.assign(new ApplicationRuntimeError('IRIS_APP_ABORTED', 'Iris 操作已取消'), { name: 'AbortError' });
+}
+
+function closed() {
+  return new ApplicationRuntimeError('IRIS_APP_CLOSED', 'Iris 应用运行时正在关闭或已关闭');
+}
+
+/** Instance-owned FIFO and operation-scoped Core leases. No I/O until an explicit operation. */
+export function createApplicationRuntime({ dataRoot, resolveImageCandidates, resolveTaskAdapter } = {}) {
+  const root = normalizeCoreOptions({ dataRoot }).dataRoot;
+  if (resolveImageCandidates !== undefined && typeof resolveImageCandidates !== 'function') {
+    throw new TypeError('resolveImageCandidates 必须是显式候选解析函数');
+  }
+  if (resolveTaskAdapter !== undefined && typeof resolveTaskAdapter !== 'function') {
+    throw new TypeError('resolveTaskAdapter 必须是显式 Task Provider 解析函数');
+  }
+  let state = 'open';
+  const queue = [];
+  const active = new Set();
+  let writer = null;
+  let disposePromise;
+  let cleanupFailure;
+
+  function snapshot() {
+    return Object.freeze({ state, queuedWrites: queue.length, activeWrites: Number(Boolean(writer)),
+      activeReaders: active.size - Number(Boolean(writer)), cleanupFailed: Boolean(cleanupFailure) });
+  }
+
+  function detach(job) { job.signal?.removeEventListener('abort', job.onAbort); }
+
+  function rejectQueued(job, error) {
+    detach(job);
+    job.reject(error);
+  }
+
+  function stop(job) {
+    job.aborted = true;
+    if (job.runtime && !job.disposal) {
+      job.disposal = job.runtime.dispose();
+      // The operation awaits this same promise below and reports any cleanup error.
+      job.disposal.catch(() => {});
+    }
+  }
+
+  function stopAll() {
+    for (const job of queue.splice(0)) rejectQueued(job, closed());
+    for (const job of active) stop(job);
+  }
+
+  async function perform(job) {
+    if (job.aborted) throw aborted();
+    const runtime = createCoreRuntime({ dataRoot: root, mode: job.mode });
+    job.runtime = runtime;
+    let result, operationError, failed = false;
+    try {
+      runtime.start();
+      result = await job.action(runtime);
+    } catch (error) { failed = true; operationError = error; }
+    try { await (job.disposal || runtime.dispose()); }
+    catch (error) {
+      cleanupFailure ||= error;
+      state = 'closing';
+      stopAll();
+      if (failed) {
+        throw Object.assign(new AggregateError([operationError, error], 'Iris 操作失败且运行时未能安全释放'), { code: error.code });
+      }
+      throw error;
+    }
+    if (failed) throw operationError;
+    return result;
+  }
+
+  function start(job) {
+    active.add(job);
+    job.done = Promise.resolve().then(async () => {
+      let result, error, failed = false;
+      try { result = await perform(job); }
+      catch (caught) { failed = true; error = caught; }
+      detach(job);
+      active.delete(job);
+      if (writer === job) writer = null;
+      if (failed) job.reject(error); else job.resolve(result);
+      dispatch();
+    });
+  }
+
+  function dispatch() {
+    if (state !== 'open' || writer || !queue.length) return;
+    writer = queue.shift();
+    start(writer);
+  }
+
+  function schedule(mode, action, { signal } = {}) {
+    if (signal !== undefined && !(signal instanceof AbortSignal)) throw new TypeError('signal 必须是 AbortSignal');
+    if (state !== 'open') return Promise.reject(closed());
+    if (signal?.aborted) return Promise.reject(aborted());
+    let job;
+    const result = new Promise((resolve, reject) => { job = { mode, action, signal, resolve, reject, aborted: false }; });
+    job.onAbort = () => {
+      const index = queue.indexOf(job);
+      if (index >= 0) { queue.splice(index, 1); rejectQueued(job, aborted()); }
+      else stop(job);
+    };
+    signal?.addEventListener('abort', job.onAbort, { once: true });
+    if (mode === 'writer') { queue.push(job); dispatch(); }
+    else start(job);
+    return result;
+  }
+
+  /** Trusted in-process Host composition; never an external command/HTTP dispatch surface. */
+  function run(mode, action, options) {
+    if (!['reader', 'writer'].includes(mode)) throw new TypeError('Host 操作需要明确 reader/writer 模式');
+    if (typeof action !== 'function') throw new TypeError('Host 操作必须是函数');
+    return schedule(mode, action, options);
+  }
+
+  async function execute(name, input, options) {
+    if (!Object.hasOwn(COMMAND_MODES, name)) {
+      throw new ApplicationRuntimeError('IRIS_APP_COMMAND_UNSUPPORTED', '应用运行时尚未装配该 Command');
+    }
+    const ownedInput = structuredClone(input);
+    return schedule(COMMAND_MODES[name], runtime => {
+      const ports = resolveTaskAdapter ? { resolveTaskAdapter: async task => {
+        const adapter = await resolveTaskAdapter(task, { signal: runtime.signal });
+        if (runtime.signal.aborted) throw aborted();
+        return adapter;
+      } } : {};
+      if (name.startsWith('creation.')) return createLocalCreationService(runtime, { resolveImageCandidates,
+        onPrepared: options?.onPrepared }).execute(name, ownedInput);
+      if (name.startsWith('flow.')) return createImageFlowService(runtime, { ...ports, resolveImageCandidates }).execute(name, ownedInput);
+      return createCommandService(runtime, ports).execute(name, ownedInput);
+    }, options);
+  }
+
+  async function generateImage(input, options) {
+    const normalized = normalizeGenerationInput('image', input);
+    if (!resolveImageCandidates) {
+      throw new ApplicationRuntimeError('IRIS_APP_IMAGE_RESOLVER_MISSING', '图片生成需要显式提供候选解析函数');
+    }
+    return schedule('writer', async runtime => {
+      const candidates = await resolveImageCandidates({ modelRef: normalized.modelRef, signal: runtime.signal });
+      if (runtime.signal.aborted) throw aborted();
+      return createProviderTaskRunner(runtime).submit({ capability: 'image', candidates,
+        providerInput: normalized.providerInput, sourceArtifactId: normalized.sourceArtifactId });
+    }, options);
+  }
+
+  function dispose() {
+    if (disposePromise) return disposePromise;
+    state = 'closing';
+    stopAll();
+    disposePromise = Promise.all([...active].map(job => job.done)).then(() => {
+      if (cleanupFailure) throw cleanupFailure;
+      state = 'closed';
+      return snapshot();
+    });
+    return disposePromise;
+  }
+
+  return Object.freeze({ execute, generateImage, run, dispose, snapshot });
+}