@mokuyoaxis/dsh-iris 0.2.6 → 0.2.7

package/lib/api.js

@@ -26,7 +26,6 @@ import { selectMediaProtocol } from './provider-protocol.js';
 import { deriveUserState } from './task-semantics.js';
 import { hostDoctor } from './doctor.js';
 import { hostRuntimeEvidence, recordHostClient } from './host-runtime.js';
-import { cancelProviderTaskForDsh, coreSnapshotForDsh, disposeCoreTaskAttention, readCoreArtifactMediaForDsh, redeliverProviderTaskForDsh, reobserveProviderTaskForDsh, retryProviderTaskForDsh } from './dsh-core-adapter.js';
 import { optimizePrompt } from './prompt-optimizer.js';
 import { PROMPT_OPTIMIZER_CAPABILITIES } from './prompt-optimizer-core.js';
 import {
@@ -332,16 +331,17 @@ function serveSse(res) {
 }
 
 /** webServer 前缀路由 handler：状态、任务、动作与提示词优化器 API。 */
-export function serveApi(req, res, host) {
+export function serveApi(req, res, host, core) {
+  if (!core || core.snapshot().state !== 'open') return sendJson(res, 503, { error: 'Iris DSH 实例正在关闭或不可用', code: 'IRIS_DSH_RUNTIME_CLOSED' });
   try {
     const method = String(req.method || 'GET').toUpperCase();
     const urlPath = String(req.url || '').split('?')[0];
 
     // POST /iris/api/actions/:name —— GUI 直连触发工具执行
     if (method === 'POST') {
-      if (urlPath === '/iris/api/works/download') return handleWorkbenchPost(req, res, downloadWorkbenchSelection, true);
-      if (urlPath === '/iris/api/works/delete') return handleWorkbenchPost(req, res, deleteWorkbenchArtifacts);
-      if (urlPath === '/iris/api/works/restore') return handleWorkbenchPost(req, res, restoreWorkbenchTransaction);
+      if (urlPath === '/iris/api/works/download') return handleWorkbenchPost(req, res, downloadWorkbenchSelection, true, core);
+      if (urlPath === '/iris/api/works/delete') return handleWorkbenchPost(req, res, deleteWorkbenchArtifacts, false, core);
+      if (urlPath === '/iris/api/works/restore') return handleWorkbenchPost(req, res, restoreWorkbenchTransaction, false, core);
       if (urlPath === '/iris/api/host-client') {
         if (!host || typeof host !== 'object') return sendJson(res, 503, { error: 'host unavailable' });
         return handleJsonPost(req, res, (body) => recordHostClient(body));
@@ -352,16 +352,16 @@ export function serveApi(req, res, host) {
       }
       // D4 人工 retry as new task：产生新的真实计费，请求体必须显式 confirmBilling:true
       const coreTaskRetry = urlPath.match(/^\/iris\/api\/core\/task\/([^/]+)\/retry\/?$/);
-      if (coreTaskRetry) return handleCoreTaskRetry(coreTaskRetry[1], req, res);
+      if (coreTaskRetry) return handleCoreTaskRetry(coreTaskRetry[1], req, res, core);
       // D1/D2/D3 人工动作：reobserve 显式单步 poll 一次；redeliver 只对 succeeded+failed
       // 重新取回产物；cancel 只有 Provider 明确确认才写已取消。三者绝不 submit。
       const coreTaskAction = urlPath.match(/^\/iris\/api\/core\/task\/([^/]+)\/(reobserve|redeliver|cancel|acknowledge|restore|hide|unhide)\/?$/);
-      if (coreTaskAction) return handleCoreTaskManual(coreTaskAction[2], coreTaskAction[1], req, res);
+      if (coreTaskAction) return handleCoreTaskManual(coreTaskAction[2], coreTaskAction[1], req, res, core);
       const promptMatch = typeof host === 'object' && urlPath.match(/^\/iris\/api\/prompt-optimizer\/(optimize|import|reset|enabled)\/?$/);
-      if (promptMatch) return handlePromptOptimizer(host, promptMatch[1], req, res);
+      if (promptMatch) return handlePromptOptimizer(host, promptMatch[1], req, res, core);
       const actionMatch = typeof host === 'object' && urlPath.match(/^\/iris\/api\/actions\/([A-Za-z0-9_-]+)\/?$/);
       if (!actionMatch) { return sendJson(res, 405, { error: 'method not allowed' }); }
-      return handleAction(host, actionMatch[1], req, res);
+      return handleAction(host, actionMatch[1], req, res, core);
     }
     // GET/HEAD 原逻辑
     if (method !== 'GET' && method !== 'HEAD') {
@@ -382,16 +382,16 @@ export function serveApi(req, res, host) {
     if (urlPath === '/iris/api/core/snapshot') {
       if (method === 'HEAD') return sendJson(res, 200, {});
       const query = new URL(req.url || '', 'http://iris.local').searchParams;
-      return serveCoreSnapshot(res, { limit: Number(query.get('limit') || 12) });
+      return serveCoreSnapshot(res, { limit: Number(query.get('limit') || 12) }, core);
     }
     if (urlPath === '/iris/api/works') {
-      return serveWorkbenchArtifacts(req, method, res);
+      return serveWorkbenchArtifacts(req, method, res, core);
     }
-    if (urlPath === '/iris/api/works/transactions') return serveWorkbenchRead(res, method, () => workbenchTransactions());
+    if (urlPath === '/iris/api/works/transactions') return serveWorkbenchRead(res, method, () => workbenchTransactions({ core }));
     const workDetailMatch = urlPath.match(/^\/iris\/api\/works\/(core|legacy)\/([^/]+)$/);
-    if (workDetailMatch) return serveWorkbenchRead(res, method, () => workbenchDetail(workDetailMatch[1], workDetailMatch[2]));
+    if (workDetailMatch) return serveWorkbenchRead(res, method, () => workbenchDetail(workDetailMatch[1], workDetailMatch[2], { core }));
     const coreMediaMatch = urlPath.match(/^\/iris\/api\/core\/artifact\/(artifact_[a-f0-9]{24})\/media$/);
-    if (coreMediaMatch) return serveCoreArtifactMedia(coreMediaMatch[1], method, res);
+    if (coreMediaMatch) return serveCoreArtifactMedia(coreMediaMatch[1], method, res, core);
     if (urlPath === '/iris/api/artifacts') {
       const query = new URL(req.url || '', 'http://iris.local').searchParams;
       const page = artifacts.page({ offset: Number(query.get('offset') || 0), limit: Number(query.get('limit') || 24) });
@@ -417,11 +417,11 @@ export function serveApi(req, res, host) {
   }
 }
 
-async function serveWorkbenchArtifacts(req, method, res) {
+async function serveWorkbenchArtifacts(req, method, res, core) {
   const params = new URL(req.url || '', 'http://iris.local').searchParams;
   const input = Object.fromEntries(params);
   for (const key of ['offset', 'limit']) if (input[key] !== undefined) input[key] = Number(input[key]);
-  try { return sendJson(res, 200, method === 'HEAD' ? {} : await workbenchArtifacts(input)); }
+  try { return sendJson(res, 200, method === 'HEAD' ? {} : await workbenchArtifacts(input, { core })); }
   catch (error) { return sendJson(res, error.statusCode || 500, { error: '作品读取失败', code: error.code || 'IRIS_GALLERY_FAILED' }); }
 }
 
@@ -430,9 +430,9 @@ async function serveWorkbenchRead(res, method, execute) {
   catch (error) { const safe = workbenchError(error); return sendJson(res, safe.statusCode || 400, { error: safe.message, code: safe.code }); }
 }
 
-function handleWorkbenchPost(req, res, execute, download = false) {
+function handleWorkbenchPost(req, res, execute, download = false, core) {
   return handleJsonPost(req, res, async (body, signal) => {
-    try { return await execute(body, { signal }); }
+    try { return await core.runHostOperation(operationSignal => execute(body, { signal: operationSignal, core }), { signal }); }
     catch (error) { throw workbenchError(error); }
   }, download ? (response, _status, bytes) => {
     if (response.writableEnded || response.destroyed) return;
@@ -443,9 +443,9 @@ function handleWorkbenchPost(req, res, execute, download = false) {
   } : sendJson);
 }
 
-async function serveCoreArtifactMedia(artifactId, method, res) {
+async function serveCoreArtifactMedia(artifactId, method, res, core) {
   try {
-    const result = await readCoreArtifactMediaForDsh(artifactId);
+    const result = await core.readCoreArtifactMediaForDsh(artifactId);
     if (res.writableEnded || res.destroyed) return;
     res.writeHead(200, {
       'Content-Type': result.artifact.mediaType,
@@ -462,9 +462,9 @@ async function serveCoreArtifactMedia(artifactId, method, res) {
   }
 }
 
-async function serveCoreSnapshot(res, options = {}) {
+async function serveCoreSnapshot(res, options = {}, core) {
   try {
-    return sendJson(res, 200, await coreSnapshotForDsh({ limit: options.limit || 12 }));
+    return sendJson(res, 200, await core.coreSnapshotForDsh({ limit: options.limit || 12 }));
   } catch (error) {
     console.error('[iris] Core 只读快照失败：', error && error.code || 'unknown');
     return sendJson(res, 409, {
@@ -527,8 +527,8 @@ function handleJsonPost(req, res, execute, respond = sendJson) {
   req.on('error', () => finish(400, { error: 'bad request' }));
 }
 
-function handleAction(host, name, req, res) {
-  return handleJsonPost(req, res, (args, signal) => runAction(host, name, args, { signal }));
+function handleAction(host, name, req, res, core) {
+  return handleJsonPost(req, res, (args, signal) => runAction(host, name, args, { signal, core }));
 }
 
 /**
@@ -539,14 +539,14 @@ function handleAction(host, name, req, res) {
  * 经 AbortSignal 传入在途操作，与 GUI actions 同一约定。
  */
 const CORE_TASK_MANUAL_ACTIONS = Object.freeze({
-  reobserve: { command: 'task.reobserve', run: reobserveProviderTaskForDsh },
-  redeliver: { command: 'task.redeliver', run: redeliverProviderTaskForDsh },
-  cancel: { command: 'task.cancel', run: cancelProviderTaskForDsh },
+  reobserve: { command: 'task.reobserve', run: (core, input) => core.reobserveProviderTaskForDsh(input) },
+  redeliver: { command: 'task.redeliver', run: (core, input) => core.redeliverProviderTaskForDsh(input) },
+  cancel: { command: 'task.cancel', run: (core, input) => core.cancelProviderTaskForDsh(input) },
   // 注意力处置是 Host 偏好（不写 Core 事实）：acknowledge/restore/hide/unhide。
-  acknowledge: { command: 'attention.acknowledge', run: (input) => disposeCoreTaskAttention({ ...input, action: 'acknowledge' }) },
-  restore: { command: 'attention.restore', run: (input) => disposeCoreTaskAttention({ ...input, action: 'restore' }) },
-  hide: { command: 'attention.hide', run: (input) => disposeCoreTaskAttention({ ...input, action: 'hide' }) },
-  unhide: { command: 'attention.unhide', run: (input) => disposeCoreTaskAttention({ ...input, action: 'unhide' }) }
+  acknowledge: { command: 'attention.acknowledge', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'acknowledge' }) },
+  restore: { command: 'attention.restore', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'restore' }) },
+  hide: { command: 'attention.hide', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'hide' }) },
+  unhide: { command: 'attention.unhide', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'unhide' }) }
 });
 
 /**
@@ -555,7 +555,7 @@ const CORE_TASK_MANUAL_ACTIONS = Object.freeze({
  * Prompt，只能由调用方重新提供；缺显式计费确认在读取旧 Task 之前拒绝。
  * 成功返回 200 + 新任务的五类用户投影行与 retriedFrom 关系。
  */
-function handleCoreTaskRetry(taskId, req, res) {
+function handleCoreTaskRetry(taskId, req, res, core) {
   if (!/^task_[a-f0-9]{24}$/.test(taskId)) {
     return sendJson(res, 400, { error: { code: 'IRIS_DSH_TASK_INVALID', message: 'Core Task ID 无效' } });
   }
@@ -568,7 +568,7 @@ function handleCoreTaskRetry(taskId, req, res) {
         throw error;
       }
       const prompt = String(body.prompt || '');
-      const result = await retryProviderTaskForDsh({
+      const result = await core.retryProviderTaskForDsh({
         taskId,
         prompt,
         ...(body.source_artifact_id !== undefined ? { sourceArtifactId: body.source_artifact_id } : {}),
@@ -597,7 +597,7 @@ function handleCoreTaskRetry(taskId, req, res) {
   });
 }
 
-function handleCoreTaskManual(action, taskId, req, res) {
+function handleCoreTaskManual(action, taskId, req, res, core) {
   if (!/^task_[a-f0-9]{24}$/.test(taskId)) {
     return sendJson(res, 400, { error: { code: 'IRIS_DSH_TASK_INVALID', message: 'Core Task ID 无效' } });
   }
@@ -614,7 +614,7 @@ function handleCoreTaskManual(action, taskId, req, res) {
   if (typeof req.on === 'function') req.on('aborted', disconnect);
   if (typeof res.on === 'function') res.on('close', disconnect);
   if (typeof req.resume === 'function') req.resume(); // 无 body 入参；避免小请求体滞留
-  entry.run({ taskId, signal: controller.signal })
+  entry.run(core, { taskId, signal: controller.signal })
     .then((result) => finish(200, {
       ok: true,
       contractVersion: 0,
@@ -631,8 +631,8 @@ function handleCoreTaskManual(action, taskId, req, res) {
     });
 }
 
-function handlePromptOptimizer(host, operation, req, res) {
-  return handleJsonPost(req, res, async (body, signal) => {
+function handlePromptOptimizer(host, operation, req, res, core) {
+  return handleJsonPost(req, res, (body, requestSignal) => core.runHostOperation(async signal => {
     if (operation === 'optimize') return optimizePrompt(host, body, { signal });
     if (operation === 'import') {
       const imported = body && body.config !== undefined ? body.config : body;
@@ -645,7 +645,7 @@ function handlePromptOptimizer(host, operation, req, res) {
     }
     if (operation === 'enabled') return { ok: true, ...setPromptOptimizerEnabled(body && body.enabled), capabilities: PROMPT_CONFIG_CAPABILITIES };
     throw new Error('unknown prompt optimizer operation');
-  });
+  }, { signal: requestSignal }));
 }
 
 /* ---------- 文件选择器 L2：本地文件上传（阶段 10） ---------- */

package/lib/application-runtime.js

@@ -0,0 +1,186 @@
+'use strict';
+
+import { normalizeCoreOptions } from './core-contract.js';
+import { createCoreRuntime } from './core-runtime.js';
+import { createCommandService } from './command-service.js';
+import { normalizeGenerationInput } from './generation-input.js';
+import { createProviderTaskRunner } from './provider-task-runner.js';
+import { createImageFlowService } from './image-flow.js';
+import { createLocalCreationService } from './local-creation.js';
+
+// Internal first-slice execution surface, not a public API or an HTTP allowlist.
+const COMMAND_MODES = Object.freeze({
+  'artifact.import': 'writer', 'artifact.export': 'writer', 'media.diff': 'writer',
+  'task.observe': 'writer', 'task.reobserve': 'writer', 'task.redeliver': 'writer', 'task.cancel': 'writer',
+  'artifact.inspect': 'reader', 'artifact.list': 'reader', 'task.inspect': 'reader', 'task.list': 'reader',
+  'flow.init': 'writer', 'flow.create': 'writer', 'flow.continue': 'writer', 'flow.select': 'writer', 'flow.export': 'writer',
+  'flow.inspect': 'reader', 'flow.list': 'reader',
+  'creation.init': 'writer', 'creation.image': 'writer', 'creation.flow': 'writer'
+});
+
+export class ApplicationRuntimeError extends Error {
+  constructor(code, message) { super(message); this.name = 'ApplicationRuntimeError'; this.code = code; }
+}
+
+function aborted() {
+  return Object.assign(new ApplicationRuntimeError('IRIS_APP_ABORTED', 'Iris 操作已取消'), { name: 'AbortError' });
+}
+
+function closed() {
+  return new ApplicationRuntimeError('IRIS_APP_CLOSED', 'Iris 应用运行时正在关闭或已关闭');
+}
+
+/** Instance-owned FIFO and operation-scoped Core leases. No I/O until an explicit operation. */
+export function createApplicationRuntime({ dataRoot, resolveImageCandidates, resolveTaskAdapter } = {}) {
+  const root = normalizeCoreOptions({ dataRoot }).dataRoot;
+  if (resolveImageCandidates !== undefined && typeof resolveImageCandidates !== 'function') {
+    throw new TypeError('resolveImageCandidates 必须是显式候选解析函数');
+  }
+  if (resolveTaskAdapter !== undefined && typeof resolveTaskAdapter !== 'function') {
+    throw new TypeError('resolveTaskAdapter 必须是显式 Task Provider 解析函数');
+  }
+  let state = 'open';
+  const queue = [];
+  const active = new Set();
+  let writer = null;
+  let disposePromise;
+  let cleanupFailure;
+
+  function snapshot() {
+    return Object.freeze({ state, queuedWrites: queue.length, activeWrites: Number(Boolean(writer)),
+      activeReaders: active.size - Number(Boolean(writer)), cleanupFailed: Boolean(cleanupFailure) });
+  }
+
+  function detach(job) { job.signal?.removeEventListener('abort', job.onAbort); }
+
+  function rejectQueued(job, error) {
+    detach(job);
+    job.reject(error);
+  }
+
+  function stop(job) {
+    job.aborted = true;
+    if (job.runtime && !job.disposal) {
+      job.disposal = job.runtime.dispose();
+      // The operation awaits this same promise below and reports any cleanup error.
+      job.disposal.catch(() => {});
+    }
+  }
+
+  function stopAll() {
+    for (const job of queue.splice(0)) rejectQueued(job, closed());
+    for (const job of active) stop(job);
+  }
+
+  async function perform(job) {
+    if (job.aborted) throw aborted();
+    const runtime = createCoreRuntime({ dataRoot: root, mode: job.mode });
+    job.runtime = runtime;
+    let result, operationError, failed = false;
+    try {
+      runtime.start();
+      result = await job.action(runtime);
+    } catch (error) { failed = true; operationError = error; }
+    try { await (job.disposal || runtime.dispose()); }
+    catch (error) {
+      cleanupFailure ||= error;
+      state = 'closing';
+      stopAll();
+      if (failed) {
+        throw Object.assign(new AggregateError([operationError, error], 'Iris 操作失败且运行时未能安全释放'), { code: error.code });
+      }
+      throw error;
+    }
+    if (failed) throw operationError;
+    return result;
+  }
+
+  function start(job) {
+    active.add(job);
+    job.done = Promise.resolve().then(async () => {
+      let result, error, failed = false;
+      try { result = await perform(job); }
+      catch (caught) { failed = true; error = caught; }
+      detach(job);
+      active.delete(job);
+      if (writer === job) writer = null;
+      if (failed) job.reject(error); else job.resolve(result);
+      dispatch();
+    });
+  }
+
+  function dispatch() {
+    if (state !== 'open' || writer || !queue.length) return;
+    writer = queue.shift();
+    start(writer);
+  }
+
+  function schedule(mode, action, { signal } = {}) {
+    if (signal !== undefined && !(signal instanceof AbortSignal)) throw new TypeError('signal 必须是 AbortSignal');
+    if (state !== 'open') return Promise.reject(closed());
+    if (signal?.aborted) return Promise.reject(aborted());
+    let job;
+    const result = new Promise((resolve, reject) => { job = { mode, action, signal, resolve, reject, aborted: false }; });
+    job.onAbort = () => {
+      const index = queue.indexOf(job);
+      if (index >= 0) { queue.splice(index, 1); rejectQueued(job, aborted()); }
+      else stop(job);
+    };
+    signal?.addEventListener('abort', job.onAbort, { once: true });
+    if (mode === 'writer') { queue.push(job); dispatch(); }
+    else start(job);
+    return result;
+  }
+
+  /** Trusted in-process Host composition; never an external command/HTTP dispatch surface. */
+  function run(mode, action, options) {
+    if (!['reader', 'writer'].includes(mode)) throw new TypeError('Host 操作需要明确 reader/writer 模式');
+    if (typeof action !== 'function') throw new TypeError('Host 操作必须是函数');
+    return schedule(mode, action, options);
+  }
+
+  async function execute(name, input, options) {
+    if (!Object.hasOwn(COMMAND_MODES, name)) {
+      throw new ApplicationRuntimeError('IRIS_APP_COMMAND_UNSUPPORTED', '应用运行时尚未装配该 Command');
+    }
+    const ownedInput = structuredClone(input);
+    return schedule(COMMAND_MODES[name], runtime => {
+      const ports = resolveTaskAdapter ? { resolveTaskAdapter: async task => {
+        const adapter = await resolveTaskAdapter(task, { signal: runtime.signal });
+        if (runtime.signal.aborted) throw aborted();
+        return adapter;
+      } } : {};
+      if (name.startsWith('creation.')) return createLocalCreationService(runtime, { resolveImageCandidates,
+        onPrepared: options?.onPrepared }).execute(name, ownedInput);
+      if (name.startsWith('flow.')) return createImageFlowService(runtime, { ...ports, resolveImageCandidates }).execute(name, ownedInput);
+      return createCommandService(runtime, ports).execute(name, ownedInput);
+    }, options);
+  }
+
+  async function generateImage(input, options) {
+    const normalized = normalizeGenerationInput('image', input);
+    if (!resolveImageCandidates) {
+      throw new ApplicationRuntimeError('IRIS_APP_IMAGE_RESOLVER_MISSING', '图片生成需要显式提供候选解析函数');
+    }
+    return schedule('writer', async runtime => {
+      const candidates = await resolveImageCandidates({ modelRef: normalized.modelRef, signal: runtime.signal });
+      if (runtime.signal.aborted) throw aborted();
+      return createProviderTaskRunner(runtime).submit({ capability: 'image', candidates,
+        providerInput: normalized.providerInput, sourceArtifactId: normalized.sourceArtifactId });
+    }, options);
+  }
+
+  function dispose() {
+    if (disposePromise) return disposePromise;
+    state = 'closing';
+    stopAll();
+    disposePromise = Promise.all([...active].map(job => job.done)).then(() => {
+      if (cleanupFailure) throw cleanupFailure;
+      state = 'closed';
+      return snapshot();
+    });
+    return disposePromise;
+  }
+
+  return Object.freeze({ execute, generateImage, run, dispose, snapshot });
+}

package/lib/client.js

@@ -21,7 +21,7 @@ window.__ModuleLoader__.load({ id: '@mokuyoaxis/dsh-iris', factory: (require) =>
   var exports = module.exports;
 
   var React = require('react');
-  var IRIS_CLIENT_VERSION = '0.2.6';
+  var IRIS_CLIENT_VERSION = '0.2.7';
   var HOST_CLIENT_PROTOCOL_VERSION = 0;
   var reportedSeats = [];
 
@@ -140,11 +140,17 @@ window.__ModuleLoader__.load({ id: '@mokuyoaxis/dsh-iris', factory: (require) =>
     '.iris-doctor-score { font-weight: 600; flex: 1; }',
     '.iris-doctor-list { display: grid; gap: 4px; margin-top: 7px; }',
     '.iris-doctor-row { display: grid; grid-template-columns: 14px 1fr; gap: 6px; font-size: 11px; }',
+    '.iris-doctor-row > span:last-child { min-width: 0; overflow-wrap: anywhere; }',
     '.iris-doctor-row.ok { color: var(--dsw-alias-label-secondary, #9a9a9a); }',
     '.iris-doctor-row.warn { color: var(--dsw-alias-state-warn-primary, #d9a941); }',
     '.iris-doctor-row.error { color: var(--dsw-alias-state-error-primary, #e06c6c); }',
     '.iris-doctor-details { margin-top: 7px; color: var(--dsw-alias-label-secondary, #9a9a9a); }',
     '.iris-doctor-details summary { cursor: pointer; font-size: 11px; }',
+    '.iris-browser-check { border-top: 1px solid var(--dsw-alias-border-l1, #ffffff12); margin-top: 10px; padding-top: 9px; min-width: 0; }',
+    '.iris-browser-check .iris-doctor-top { margin-bottom: 5px; }',
+    '.iris-browser-check img { display: block; width: 100%; max-height: 200px; object-fit: contain; margin-top: 7px; border-radius: 7px; background: var(--dsw-alias-bg-layer-2, #ffffff05); }',
+    '.iris-browser-check-note { font-size: 12px; line-height: 1.6; overflow-wrap: anywhere; }',
+    '.iris-browser-check-note.error { color: var(--dsw-alias-state-error-primary, #e06c6c); }',
     '.iris-core-runtime { cursor: default; padding: 0; overflow: hidden; }',
     '.iris-core-runtime-head { display: flex; align-items: center; gap: 8px; padding: 9px 10px; }',
     '.iris-core-runtime-title { min-width: 0; flex: 1; display: grid; gap: 1px; }',
@@ -3136,6 +3142,80 @@ window.__ModuleLoader__.load({ id: '@mokuyoaxis/dsh-iris', factory: (require) =>
         note ? React.createElement('div', { className: 'iris-clean-note' }, note) : null);
     }
 
+    function BrowserCheckPanel(props) {
+      var statePair = React.useState({ status: 'idle', message: '尚未实测' });
+      var state = statePair[0], setState = statePair[1];
+      var request = React.useRef(null);
+      React.useEffect(function () { return function () {
+        var operation = request.current;
+        request.current = null;
+        if (operation) { clearTimeout(operation.timer); operation.controller.abort(); }
+      }; }, []);
+
+      function stop(timedOut) {
+        var operation = request.current;
+        if (!operation) return;
+        request.current = null;
+        clearTimeout(operation.timer);
+        operation.controller.abort();
+        setState({ status: 'canceled', message: timedOut
+          ? '截图自检超过 60 秒，已停止等待。若恰好完成保存，可在作品库查看。'
+          : '已取消本次自检等待。若恰好完成保存，可在作品库查看。' });
+      }
+      function start() {
+        if (request.current || !props.available) return;
+        var operation = { controller: new AbortController(), started: Date.now() };
+        request.current = operation;
+        setState({ status: 'running', message: '正在打开浏览器并生成测试截图…' });
+        operation.timer = setTimeout(function () { if (request.current === operation) stop(true); }, 60000);
+        fetch('/iris/api/actions/html', {
+          method: 'POST', headers: { 'content-type': 'application/json' }, credentials: 'same-origin',
+          signal: operation.controller.signal,
+          body: JSON.stringify({ fullPage: false, width: 480, height: 240,
+            html: '<style>body{margin:0;background:#edf3f1;color:#183e34;font-family:system-ui,sans-serif}.iris-test{padding:32px}h1{font-size:26px;margin:0 0 12px}p{font-size:16px;margin:8px 0}</style><div class="iris-test"><h1>Iris · 截图自检</h1><p>中文与 HTML 渲染测试</p><p>本页只使用内联样式，不调用模型。</p></div>' })
+        }).then(function (res) { return res.json().then(function (data) {
+          if (!res.ok || data.ok !== true) throw Object.assign(new Error(data.error || '截图自检失败'), { code: data.code });
+          var id = data.artifactIds && data.artifactIds[0];
+          if (data.storage !== 'core' || !/^artifact_[a-f0-9]{24}$/.test(id || '')) throw new Error('服务端未返回有效截图作品，请核对前后端版本。');
+          return id;
+        }); }).then(function (id) {
+          if (request.current !== operation || operation.controller.signal.aborted) return;
+          setState({ status: 'passed', artifactId: id, message: '本次截图已保存 · ' + ((Date.now() - operation.started) / 1000).toFixed(1) + ' 秒 · ' + new Date().toLocaleTimeString() });
+          window.dispatchEvent(new CustomEvent('iris-core-artifacts-changed'));
+        }).catch(function (error) {
+          if (request.current !== operation || operation.controller.signal.aborted) return;
+          var code = String(error && error.code || '');
+          var detail = String(error && error.message || error);
+          var message = '截图自检未通过。请查看错误详情。';
+          if (code === 'IRIS_RENDER_ADDRESS_INVALID') message = '截图地址配置有误，请核对 DSH_WEB_BASE。';
+          else if (code === 'IRIS_CORE_DATA_ROOT_BUSY') message = '作品库正在被其他操作写入，请稍后重试。';
+          else if (/^IRIS_HOST_CAPABILITY_/.test(code)) message = '宿主浏览器接口不可用，请检查浏览器插件是否启用。';
+          else if (/Missing X server|DISPLAY|BROWSER_HOST_/.test(detail + code)) message = '浏览器进程未能启动，请检查运行环境与显示服务。';
+          else if (/BROWSER_NAVIGATION|ERR_CONNECTION_REFUSED|ERR_NAME_NOT_RESOLVED/.test(detail + code)) message = '浏览器未能打开渲染页面，请核对上方截图地址与宿主监听状态。';
+          else if (/BROWSER_SCREENSHOT/.test(code)) message = '浏览器未能生成截图，请查看错误详情。';
+          setState({ status: 'failed', message: message, detail: detail, code: code });
+        }).finally(function () {
+          clearTimeout(operation.timer);
+          if (request.current === operation) request.current = null;
+        });
+      }
+      var busy = state.status === 'running';
+      return React.createElement('div', { className: 'iris-browser-check', 'data-iris-browser-check': state.status },
+        React.createElement('div', { className: 'iris-doctor-top' },
+          React.createElement('strong', { className: 'iris-doctor-score' }, 'HTML 截图'),
+          React.createElement('button', { className: 'iris-pm-btn', disabled: busy || !props.available, onClick: start }, busy ? '检测中…' : '截图自检'),
+          busy ? React.createElement('button', { className: 'iris-pm-btn', onClick: function () { stop(false); } }, '取消') : null),
+        React.createElement('div', { className: 'iris-browser-check-note' + (state.status === 'failed' ? ' error' : ''), role: 'status', 'aria-live': 'polite' }, state.message),
+        props.address ? React.createElement('div', { className: 'iris-browser-check-note iris-wb-muted' }, props.address) : null,
+        React.createElement('div', { className: 'iris-wb-muted' }, '点击后打开浏览器，生成一张本地测试作品；不调用模型。'),
+        state.artifactId ? React.createElement('details', { className: 'iris-doctor-details' },
+          React.createElement('summary', {}, '查看测试截图'),
+          React.createElement('img', { src: '/iris/api/core/artifact/' + state.artifactId + '/media', alt: 'Iris HTML 截图自检结果', loading: 'lazy' })) : null,
+        state.detail ? React.createElement('details', { className: 'iris-doctor-details' },
+          React.createElement('summary', {}, '错误详情'),
+          React.createElement('div', { className: 'iris-browser-check-note' }, (state.code ? state.code + ' · ' : '') + state.detail)) : null);
+    }
+
     function HostDoctorPanel() {
       var pair = React.useState(null);
       var report = pair[0];
@@ -3160,12 +3240,14 @@ window.__ModuleLoader__.load({ id: '@mokuyoaxis/dsh-iris', factory: (require) =>
 
       var checks = report && Array.isArray(report.checks) ? report.checks : [];
       var issues = checks.filter(function (item) { return item.status !== 'ok'; });
+      var renderAddress = checks.find(function (item) { return item.id === 'render-address'; });
       var mark = { ok: '✓', warn: '!', error: '×' };
       function rows(list) {
         return React.createElement('div', { className: 'iris-doctor-list' }, list.map(function (item) {
           return React.createElement('div', { key: item.id, className: 'iris-doctor-row ' + item.status },
             React.createElement('span', {}, mark[item.status] || '·'),
-            React.createElement('span', {}, item.summary));
+            React.createElement('span', {}, item.summary,
+              item.status !== 'ok' && item.suggestion ? React.createElement('div', { className: 'iris-wb-muted' }, item.suggestion) : null));
         }));
       }
       var score = report
@@ -3181,7 +3263,11 @@ window.__ModuleLoader__.load({ id: '@mokuyoaxis/dsh-iris', factory: (require) =>
         checks.length ? React.createElement('details', { className: 'iris-doctor-details' },
           React.createElement('summary', {}, '查看全部 ' + checks.length + ' 项'),
           rows(checks)) : null,
-        React.createElement('div', { className: 'iris-wb-muted' }, '只读本机注册证据；不调用 Browser、模型或供应商。'));
+        React.createElement('div', { className: 'iris-wb-muted' }, '刷新只读装载证据，不启动浏览器；接口已提供不代表截图已通过。'),
+        React.createElement(BrowserCheckPanel, {
+          available: Boolean(report && report.capabilities && report.capabilities.browser && report.capabilities.browser.status === 'available'),
+          address: renderAddress && renderAddress.status === 'ok' ? renderAddress.summary : ''
+        }));
     }
 
     function revealWorkbenchItem(node) {

package/lib/core-artifact-store.js

@@ -422,6 +422,11 @@ export function inspectCoreArtifact(dataRoot, id) {
   return publicArtifact(readArtifact(dataRoot, id).manifest);
 }
 
+/** 先检查清单/普通文件大小，用于媒体边界限额；读取或提供字节时仍必须校验内容哈希。 */
+export function inspectCoreArtifactMetadata(dataRoot, id) {
+  return publicArtifact(readArtifact(dataRoot, id, { verifyContent: false }).manifest);
+}
+
 /** 供宿主投影层读取已经校验过内容哈希的字节；不暴露 Core 内部路径。 */
 export function readCoreArtifactBytes(dataRoot, id) {
   const hit = readArtifact(dataRoot, id);

package/lib/core-maintenance.js

@@ -2,9 +2,11 @@ import fs from 'node:fs';
 import path from 'node:path';
 import crypto from 'node:crypto';
 import { inspectCoreArtifact, refreshCoreArtifactInventory } from './core-artifacts.js';
-import { inspectCoreTask, listCoreTasks } from './core-tasks.js';
+import { assertFlowTaskMatches, inspectCoreTask, listCoreTasks } from './core-tasks.js';
 import { atomicWritePrivate } from './private-storage.js';
 import { readDeliveryCache } from './core-delivery-cache.js';
+import { flowReferences } from './flow-store.js';
+import { creationReferences } from './creation-request-store.js';
 
 const TASK = /^task_[a-f0-9]{24}$/;
 const ARTIFACT = /^artifact_[a-f0-9]{24}$/;
@@ -51,7 +53,18 @@ function inventory(root) {
   }
   const artifacts = names(root, 'artifact-store/v0/records').filter(name => ARTIFACT.test(name.slice(0, -5)) && name.endsWith('.json'))
     .map(name => inspectCoreArtifact(root, name.slice(0, -5)));
-  return { tasks, artifacts };
+  const flows = flowReferences(root);
+  for (const reference of flows) {
+    if (reference.run.edit.claimed && !tasks.some(task => task.id === reference.run.edit.taskId)) {
+      fail('IRIS_FLOW_TASK_CONFLICT', '流程已建立的 Task 丢失，停止管理');
+    }
+  }
+  for (const task of tasks.filter(task => task.flowBinding)) {
+    const reference = flows.find(item => item.run.id === task.flowBinding.runId);
+    if (!reference) fail('IRIS_FLOW_TASK_CONFLICT', '流程 Task 的 Run 记录丢失，停止管理');
+    assertFlowTaskMatches(task, reference.run);
+  }
+  return { tasks, artifacts, flows, creations: creationReferences(root) };
 }
 
 function ids(value, pattern, label) {
@@ -65,6 +78,14 @@ export function planCoreDeletion(root, input) {
   if (!taskIds.length && !artifactIds.length) fail('IRIS_COMMAND_INPUT_INVALID', '请明确指定 Task 或 Artifact ID');
   const existing = inventory(root), selectedTasks = new Set(taskIds), selectedArtifacts = new Set(artifactIds);
   const blockers = [], files = [];
+  for (const reference of existing.creations) {
+    for (const id of reference.taskIds) if (selectedTasks.has(id)) blockers.push({ id, referencedBy: reference.requestId, reason: 'creation_task_reference' });
+    for (const id of reference.artifactIds) if (selectedArtifacts.has(id)) blockers.push({ id, referencedBy: reference.requestId, reason: 'creation_artifact_reference' });
+  }
+  for (const reference of existing.flows) {
+    for (const id of reference.taskIds) if (selectedTasks.has(id)) blockers.push({ id, referencedBy: reference.run.id, reason: 'flow_task_reference' });
+    for (const id of reference.artifactIds) if (selectedArtifacts.has(id)) blockers.push({ id, referencedBy: reference.run.id, reason: 'flow_artifact_reference' });
+  }
   for (const id of taskIds) {
     const task = inspectCoreTask(root, id);
     if (task.phase !== 'terminal' || task.acceptance === 'unknown' || task.outcome === 'unknown') blockers.push({ id, reason: 'task_not_settled' });
@@ -115,6 +136,8 @@ export function planCoreCleanup(root, { older_than_ms = 3600000 } = {}) {
   if (!Number.isSafeInteger(older_than_ms) || older_than_ms < 60000) fail('IRIS_COMMAND_INPUT_INVALID', 'older_than_ms 至少为 60000');
   const existing = inventory(root);
   const referenced = new Set(existing.artifacts.map(artifact => artifact.id));
+  for (const reference of existing.creations) for (const id of reference.artifactIds) referenced.add(id);
+  for (const reference of existing.flows) for (const id of reference.artifactIds) referenced.add(id);
   for (const artifact of existing.artifacts) for (const edge of artifact.relations) referenced.add(edge.artifactId);
   for (const task of existing.tasks) for (const id of task.artifactIds) referenced.add(id);
   for (const task of existing.tasks) if (task.deliveryCache && task.deliveryState !== 'ready') {

package/lib/core-runtime.js

@@ -13,6 +13,7 @@ import {
   transitionCoreLifecycle
 } from './core-contract.js';
 import { ensurePrivateDir } from './private-storage.js';
+import { listCreationRequests } from './creation-request-store.js';
 import { WRITER_LEASE_DIR, WRITER_INTENT_FILE, publishLeaseRecord, readWriterLease,
   removeWriterIntent, retireLeaseDirectory, writerOwnerStatus } from './core-writer-lease.js';
 
@@ -162,6 +163,24 @@ export function createCoreRuntime(input) {
     }
     const candidateRoot = physicalDataRoot(options);
     const candidateLease = options.mode === 'writer' ? acquireWriterLease(candidateRoot, instanceId) : null;
+    if (candidateLease) {
+      try { listCreationRequests(candidateRoot); }
+      catch (error) {
+        try { releaseWriterLease(candidateLease); }
+        catch (cleanupError) {
+          // Retained ownership must also make dispose fail, so the application stops its writer queue.
+          root = candidateRoot; lease = candidateLease;
+          lifecycle = transitionCoreLifecycle(lifecycle, 'dispose');
+          abortController.abort();
+          const failure = Object.assign(new AggregateError([error, cleanupError], '请求区检查失败且租约未能安全释放'),
+            { code: 'IRIS_CORE_LEASE_INVALID' });
+          disposePromise = Promise.reject(failure);
+          void disposePromise.catch(() => {});
+          throw failure;
+        }
+        throw error;
+      }
+    }
     root = candidateRoot;
     lease = candidateLease;
     lifecycle = transitionCoreLifecycle(lifecycle, 'start');