@mokuyoaxis/dsh-iris 0.2.6 → 0.3.0-alpha.1

package/lib/adapters.js

@@ -15,6 +15,7 @@ import { dashscopeApiBase, imageSizeViolation, isDashScopeBaseUrl, normalizeImag
 import { chmodPrivateFile, ensurePrivateDir, privateSibling } from './private-storage.js';
 import { isFreeQuotaExhausted, retryAfterDelay } from './provider-health.js';
 import { ProviderContractError } from './provider-contract.js';
+import { boundedProviderBody, readProviderText, PROVIDER_RESPONSE_LIMITS } from './provider-response.js';
 export { generateMusic } from './music-transport.js';
 
 /**
@@ -42,8 +43,8 @@ function authHeaders(key) {
   };
 }
 
-async function readJson(res) {
-  const text = await res.text();
+async function readJson(res, maxBytes = PROVIDER_RESPONSE_LIMITS.json) {
+  const text = await readProviderText(res, { maxBytes });
   try {
     return text ? JSON.parse(text) : null;
   } catch (_) {
@@ -149,8 +150,9 @@ async function fetchImageJson(url, options) {
   let response;
   try {
     response = await fetch(url, options);
-    return { res: response, body: await readJson(response) };
+    return { res: response, body: await readJson(response, response.ok ? PROVIDER_RESPONSE_LIMITS.mediaJson : PROVIDER_RESPONSE_LIMITS.json) };
   } catch (err) {
+    if (err instanceof ProviderContractError) throw err;
     throw transportFetchError(err, response);
   }
 }
@@ -287,7 +289,11 @@ export async function submitVideo({ key, baseUrl, model, prompt, imgDataUrl, siz
  * 返回 oss:// 形式 URL；调用模型时请求头须带 X-DashScope-OssResourceResolve: enable
  * （submitVideo 的 s2v 分支已自动处理）。
  */
-export async function uploadTempFile({ key, baseUrl, model, filePath, timeoutMs = T_UPLOAD, signal }) {
+export async function uploadTempFile({ key, baseUrl, model, filePath, bytes, filename, timeoutMs = T_UPLOAD, signal }) {
+  if ((filePath === undefined) === (bytes === undefined)) throw new TypeError('上传须且只能提供本地路径或明确字节');
+  const name = filePath !== undefined ? path.basename(filePath) : filename;
+  if (typeof name !== 'string' || !name || name.length > 128 || /[\/\\\0]/.test(name)
+      || bytes !== undefined && (!(bytes instanceof Uint8Array) || !bytes.length)) throw new TypeError('上传字节或文件名无效');
   const apiBase = dashscopeApiBase(baseUrl);
   const u = new URL(`${apiBase}/uploads`);
   u.searchParams.set('action', 'getPolicy');
@@ -296,7 +302,6 @@ export async function uploadTempFile({ key, baseUrl, model, filePath, timeoutMs
   const pbody = await readJson(pres);
   if (!pres.ok || !pbody || !pbody.data) throw providerError(pres.status, pbody, '获取上传凭证失败', pres.headers);
   const pol = pbody.data;
-  const name = path.basename(filePath);
   const keyPath = `${pol.upload_dir}/${Date.now()}-${name}`;
   const fd = new FormData();
   fd.append('OSSAccessKeyId', pol.oss_access_key_id);
@@ -306,7 +311,7 @@ export async function uploadTempFile({ key, baseUrl, model, filePath, timeoutMs
   fd.append('x-oss-forbid-overwrite', pol.x_oss_forbid_overwrite);
   fd.append('key', keyPath);
   fd.append('success_action_status', '200');
-  fd.append('file', new Blob([fs.readFileSync(filePath)]), name);
+  fd.append('file', new Blob([bytes ?? fs.readFileSync(filePath)]), name);
   const up = await fetch(pol.upload_host, { method: 'POST', body: fd, signal: timeoutSignal(timeoutMs, signal) });
   if (up.status !== 200) throw new Error(`临时上传失败：HTTP ${up.status}`);
   return 'oss://' + keyPath;
@@ -366,7 +371,7 @@ export async function synthesizeTts({ key, baseUrl, model = 'qwen-tts-latest', t
     signal: timeoutSignal(timeoutMs, signal),
     body: JSON.stringify({ model, input: { text, voice } })
   });
-  const body = await readJson(res);
+  const body = await readJson(res, res.ok ? PROVIDER_RESPONSE_LIMITS.mediaJson : PROVIDER_RESPONSE_LIMITS.json);
   if (!res.ok) {
     const error = providerError(res.status, body, '合成失败', res.headers);
     if (res.status === 404 && (/NotFound\.Model|model_not_found/i.test(error.providerCode)
@@ -614,7 +619,7 @@ export async function visionStream({ key, baseUrl, model = 'qwen-vl-plus', promp
     throw networkError(err); // 网络层失败归类为 network
   }
   if (!res.ok) {
-    const text = await res.text().catch(() => '');
+    const text = await readProviderText(res, { maxBytes: PROVIDER_RESPONSE_LIMITS.json, stage: 'response', acceptance: 'unknown' });
     let body = null;
     try { body = JSON.parse(text); } catch (_) { /* keep null */ }
     throw providerError(res.status, body, '视觉理解失败', res.headers);
@@ -655,15 +660,19 @@ export function extFromUrl(url, fallback = 'bin') {
   return fallback;
 }
 
-export async function downloadTo(url, filePath, { timeoutMs = T_DOWNLOAD, signal } = {}) {
+export async function downloadTo(url, filePath, { timeoutMs = T_DOWNLOAD, signal, maxBytes = PROVIDER_RESPONSE_LIMITS.video } = {}) {
   const res = await fetch(url, { signal: timeoutSignal(timeoutMs, signal) });
-  if (!res.ok) throw new Error(`下载结果失败：HTTP ${res.status}`);
+  if (!res.ok) {
+    await res.body?.cancel();
+    throw Object.assign(new Error(`下载结果失败：HTTP ${res.status}`), { stage: 'download', category: 'provider', httpStatus: res.status, acceptance: 'accepted' });
+  }
   if (!res.body) throw new Error('下载结果失败：响应没有内容');
   ensurePrivateDir(path.dirname(filePath));
   const tmp = privateSibling(filePath, 'download');
   try {
     const output = fs.createWriteStream(tmp, { flags: 'wx', mode: 0o600 });
-    await pipeline(Readable.fromWeb(res.body), output);
+    const closed = new Promise(resolve => output.once('close', resolve));
+    await pipeline(Readable.from(boundedProviderBody(res, { maxBytes, stage: 'download', acceptance: 'accepted' })), output).finally(() => closed);
     const bytes = fs.statSync(tmp).size;
     fs.renameSync(tmp, filePath);
     chmodPrivateFile(filePath);

package/lib/api.js

@@ -26,7 +26,6 @@ import { selectMediaProtocol } from './provider-protocol.js';
 import { deriveUserState } from './task-semantics.js';
 import { hostDoctor } from './doctor.js';
 import { hostRuntimeEvidence, recordHostClient } from './host-runtime.js';
-import { cancelProviderTaskForDsh, coreSnapshotForDsh, disposeCoreTaskAttention, readCoreArtifactMediaForDsh, redeliverProviderTaskForDsh, reobserveProviderTaskForDsh, retryProviderTaskForDsh } from './dsh-core-adapter.js';
 import { optimizePrompt } from './prompt-optimizer.js';
 import { PROMPT_OPTIMIZER_CAPABILITIES } from './prompt-optimizer-core.js';
 import {
@@ -332,16 +331,17 @@ function serveSse(res) {
 }
 
 /** webServer 前缀路由 handler：状态、任务、动作与提示词优化器 API。 */
-export function serveApi(req, res, host) {
+export function serveApi(req, res, host, core) {
+  if (!core || core.snapshot().state !== 'open') return sendJson(res, 503, { error: 'Iris DSH 实例正在关闭或不可用', code: 'IRIS_DSH_RUNTIME_CLOSED' });
   try {
     const method = String(req.method || 'GET').toUpperCase();
     const urlPath = String(req.url || '').split('?')[0];
 
     // POST /iris/api/actions/:name —— GUI 直连触发工具执行
     if (method === 'POST') {
-      if (urlPath === '/iris/api/works/download') return handleWorkbenchPost(req, res, downloadWorkbenchSelection, true);
-      if (urlPath === '/iris/api/works/delete') return handleWorkbenchPost(req, res, deleteWorkbenchArtifacts);
-      if (urlPath === '/iris/api/works/restore') return handleWorkbenchPost(req, res, restoreWorkbenchTransaction);
+      if (urlPath === '/iris/api/works/download') return handleWorkbenchPost(req, res, downloadWorkbenchSelection, true, core);
+      if (urlPath === '/iris/api/works/delete') return handleWorkbenchPost(req, res, deleteWorkbenchArtifacts, false, core);
+      if (urlPath === '/iris/api/works/restore') return handleWorkbenchPost(req, res, restoreWorkbenchTransaction, false, core);
       if (urlPath === '/iris/api/host-client') {
         if (!host || typeof host !== 'object') return sendJson(res, 503, { error: 'host unavailable' });
         return handleJsonPost(req, res, (body) => recordHostClient(body));
@@ -352,16 +352,16 @@ export function serveApi(req, res, host) {
       }
       // D4 人工 retry as new task：产生新的真实计费，请求体必须显式 confirmBilling:true
       const coreTaskRetry = urlPath.match(/^\/iris\/api\/core\/task\/([^/]+)\/retry\/?$/);
-      if (coreTaskRetry) return handleCoreTaskRetry(coreTaskRetry[1], req, res);
+      if (coreTaskRetry) return handleCoreTaskRetry(coreTaskRetry[1], req, res, core);
       // D1/D2/D3 人工动作：reobserve 显式单步 poll 一次；redeliver 只对 succeeded+failed
       // 重新取回产物；cancel 只有 Provider 明确确认才写已取消。三者绝不 submit。
       const coreTaskAction = urlPath.match(/^\/iris\/api\/core\/task\/([^/]+)\/(reobserve|redeliver|cancel|acknowledge|restore|hide|unhide)\/?$/);
-      if (coreTaskAction) return handleCoreTaskManual(coreTaskAction[2], coreTaskAction[1], req, res);
+      if (coreTaskAction) return handleCoreTaskManual(coreTaskAction[2], coreTaskAction[1], req, res, core);
       const promptMatch = typeof host === 'object' && urlPath.match(/^\/iris\/api\/prompt-optimizer\/(optimize|import|reset|enabled)\/?$/);
-      if (promptMatch) return handlePromptOptimizer(host, promptMatch[1], req, res);
+      if (promptMatch) return handlePromptOptimizer(host, promptMatch[1], req, res, core);
       const actionMatch = typeof host === 'object' && urlPath.match(/^\/iris\/api\/actions\/([A-Za-z0-9_-]+)\/?$/);
       if (!actionMatch) { return sendJson(res, 405, { error: 'method not allowed' }); }
-      return handleAction(host, actionMatch[1], req, res);
+      return handleAction(host, actionMatch[1], req, res, core);
     }
     // GET/HEAD 原逻辑
     if (method !== 'GET' && method !== 'HEAD') {
@@ -382,16 +382,16 @@ export function serveApi(req, res, host) {
     if (urlPath === '/iris/api/core/snapshot') {
       if (method === 'HEAD') return sendJson(res, 200, {});
       const query = new URL(req.url || '', 'http://iris.local').searchParams;
-      return serveCoreSnapshot(res, { limit: Number(query.get('limit') || 12) });
+      return serveCoreSnapshot(res, { limit: Number(query.get('limit') || 12) }, core);
     }
     if (urlPath === '/iris/api/works') {
-      return serveWorkbenchArtifacts(req, method, res);
+      return serveWorkbenchArtifacts(req, method, res, core);
     }
-    if (urlPath === '/iris/api/works/transactions') return serveWorkbenchRead(res, method, () => workbenchTransactions());
+    if (urlPath === '/iris/api/works/transactions') return serveWorkbenchRead(res, method, () => workbenchTransactions({ core }));
     const workDetailMatch = urlPath.match(/^\/iris\/api\/works\/(core|legacy)\/([^/]+)$/);
-    if (workDetailMatch) return serveWorkbenchRead(res, method, () => workbenchDetail(workDetailMatch[1], workDetailMatch[2]));
+    if (workDetailMatch) return serveWorkbenchRead(res, method, () => workbenchDetail(workDetailMatch[1], workDetailMatch[2], { core }));
     const coreMediaMatch = urlPath.match(/^\/iris\/api\/core\/artifact\/(artifact_[a-f0-9]{24})\/media$/);
-    if (coreMediaMatch) return serveCoreArtifactMedia(coreMediaMatch[1], method, res);
+    if (coreMediaMatch) return serveCoreArtifactMedia(coreMediaMatch[1], method, res, core);
     if (urlPath === '/iris/api/artifacts') {
       const query = new URL(req.url || '', 'http://iris.local').searchParams;
       const page = artifacts.page({ offset: Number(query.get('offset') || 0), limit: Number(query.get('limit') || 24) });
@@ -417,11 +417,11 @@ export function serveApi(req, res, host) {
   }
 }
 
-async function serveWorkbenchArtifacts(req, method, res) {
+async function serveWorkbenchArtifacts(req, method, res, core) {
   const params = new URL(req.url || '', 'http://iris.local').searchParams;
   const input = Object.fromEntries(params);
   for (const key of ['offset', 'limit']) if (input[key] !== undefined) input[key] = Number(input[key]);
-  try { return sendJson(res, 200, method === 'HEAD' ? {} : await workbenchArtifacts(input)); }
+  try { return sendJson(res, 200, method === 'HEAD' ? {} : await workbenchArtifacts(input, { core })); }
   catch (error) { return sendJson(res, error.statusCode || 500, { error: '作品读取失败', code: error.code || 'IRIS_GALLERY_FAILED' }); }
 }
 
@@ -430,9 +430,9 @@ async function serveWorkbenchRead(res, method, execute) {
   catch (error) { const safe = workbenchError(error); return sendJson(res, safe.statusCode || 400, { error: safe.message, code: safe.code }); }
 }
 
-function handleWorkbenchPost(req, res, execute, download = false) {
+function handleWorkbenchPost(req, res, execute, download = false, core) {
   return handleJsonPost(req, res, async (body, signal) => {
-    try { return await execute(body, { signal }); }
+    try { return await core.runHostOperation(operationSignal => execute(body, { signal: operationSignal, core }), { signal }); }
     catch (error) { throw workbenchError(error); }
   }, download ? (response, _status, bytes) => {
     if (response.writableEnded || response.destroyed) return;
@@ -443,9 +443,9 @@ function handleWorkbenchPost(req, res, execute, download = false) {
   } : sendJson);
 }
 
-async function serveCoreArtifactMedia(artifactId, method, res) {
+async function serveCoreArtifactMedia(artifactId, method, res, core) {
   try {
-    const result = await readCoreArtifactMediaForDsh(artifactId);
+    const result = await core.readCoreArtifactMediaForDsh(artifactId);
     if (res.writableEnded || res.destroyed) return;
     res.writeHead(200, {
       'Content-Type': result.artifact.mediaType,
@@ -462,9 +462,9 @@ async function serveCoreArtifactMedia(artifactId, method, res) {
   }
 }
 
-async function serveCoreSnapshot(res, options = {}) {
+async function serveCoreSnapshot(res, options = {}, core) {
   try {
-    return sendJson(res, 200, await coreSnapshotForDsh({ limit: options.limit || 12 }));
+    return sendJson(res, 200, await core.coreSnapshotForDsh({ limit: options.limit || 12 }));
   } catch (error) {
     console.error('[iris] Core 只读快照失败：', error && error.code || 'unknown');
     return sendJson(res, 409, {
@@ -527,8 +527,8 @@ function handleJsonPost(req, res, execute, respond = sendJson) {
   req.on('error', () => finish(400, { error: 'bad request' }));
 }
 
-function handleAction(host, name, req, res) {
-  return handleJsonPost(req, res, (args, signal) => runAction(host, name, args, { signal }));
+function handleAction(host, name, req, res, core) {
+  return handleJsonPost(req, res, (args, signal) => runAction(host, name, args, { signal, core }));
 }
 
 /**
@@ -539,14 +539,14 @@ function handleAction(host, name, req, res) {
  * 经 AbortSignal 传入在途操作，与 GUI actions 同一约定。
  */
 const CORE_TASK_MANUAL_ACTIONS = Object.freeze({
-  reobserve: { command: 'task.reobserve', run: reobserveProviderTaskForDsh },
-  redeliver: { command: 'task.redeliver', run: redeliverProviderTaskForDsh },
-  cancel: { command: 'task.cancel', run: cancelProviderTaskForDsh },
+  reobserve: { command: 'task.reobserve', run: (core, input) => core.reobserveProviderTaskForDsh(input) },
+  redeliver: { command: 'task.redeliver', run: (core, input) => core.redeliverProviderTaskForDsh(input) },
+  cancel: { command: 'task.cancel', run: (core, input) => core.cancelProviderTaskForDsh(input) },
   // 注意力处置是 Host 偏好（不写 Core 事实）：acknowledge/restore/hide/unhide。
-  acknowledge: { command: 'attention.acknowledge', run: (input) => disposeCoreTaskAttention({ ...input, action: 'acknowledge' }) },
-  restore: { command: 'attention.restore', run: (input) => disposeCoreTaskAttention({ ...input, action: 'restore' }) },
-  hide: { command: 'attention.hide', run: (input) => disposeCoreTaskAttention({ ...input, action: 'hide' }) },
-  unhide: { command: 'attention.unhide', run: (input) => disposeCoreTaskAttention({ ...input, action: 'unhide' }) }
+  acknowledge: { command: 'attention.acknowledge', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'acknowledge' }) },
+  restore: { command: 'attention.restore', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'restore' }) },
+  hide: { command: 'attention.hide', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'hide' }) },
+  unhide: { command: 'attention.unhide', run: (core, input) => core.disposeCoreTaskAttention({ ...input, action: 'unhide' }) }
 });
 
 /**
@@ -555,7 +555,7 @@ const CORE_TASK_MANUAL_ACTIONS = Object.freeze({
  * Prompt，只能由调用方重新提供；缺显式计费确认在读取旧 Task 之前拒绝。
  * 成功返回 200 + 新任务的五类用户投影行与 retriedFrom 关系。
  */
-function handleCoreTaskRetry(taskId, req, res) {
+function handleCoreTaskRetry(taskId, req, res, core) {
   if (!/^task_[a-f0-9]{24}$/.test(taskId)) {
     return sendJson(res, 400, { error: { code: 'IRIS_DSH_TASK_INVALID', message: 'Core Task ID 无效' } });
   }
@@ -568,7 +568,7 @@ function handleCoreTaskRetry(taskId, req, res) {
         throw error;
       }
       const prompt = String(body.prompt || '');
-      const result = await retryProviderTaskForDsh({
+      const result = await core.retryProviderTaskForDsh({
         taskId,
         prompt,
         ...(body.source_artifact_id !== undefined ? { sourceArtifactId: body.source_artifact_id } : {}),
@@ -597,7 +597,7 @@ function handleCoreTaskRetry(taskId, req, res) {
   });
 }
 
-function handleCoreTaskManual(action, taskId, req, res) {
+function handleCoreTaskManual(action, taskId, req, res, core) {
   if (!/^task_[a-f0-9]{24}$/.test(taskId)) {
     return sendJson(res, 400, { error: { code: 'IRIS_DSH_TASK_INVALID', message: 'Core Task ID 无效' } });
   }
@@ -614,7 +614,7 @@ function handleCoreTaskManual(action, taskId, req, res) {
   if (typeof req.on === 'function') req.on('aborted', disconnect);
   if (typeof res.on === 'function') res.on('close', disconnect);
   if (typeof req.resume === 'function') req.resume(); // 无 body 入参；避免小请求体滞留
-  entry.run({ taskId, signal: controller.signal })
+  entry.run(core, { taskId, signal: controller.signal })
     .then((result) => finish(200, {
       ok: true,
       contractVersion: 0,
@@ -631,8 +631,8 @@ function handleCoreTaskManual(action, taskId, req, res) {
     });
 }
 
-function handlePromptOptimizer(host, operation, req, res) {
-  return handleJsonPost(req, res, async (body, signal) => {
+function handlePromptOptimizer(host, operation, req, res, core) {
+  return handleJsonPost(req, res, (body, requestSignal) => core.runHostOperation(async signal => {
     if (operation === 'optimize') return optimizePrompt(host, body, { signal });
     if (operation === 'import') {
       const imported = body && body.config !== undefined ? body.config : body;
@@ -645,7 +645,7 @@ function handlePromptOptimizer(host, operation, req, res) {
     }
     if (operation === 'enabled') return { ok: true, ...setPromptOptimizerEnabled(body && body.enabled), capabilities: PROMPT_CONFIG_CAPABILITIES };
     throw new Error('unknown prompt optimizer operation');
-  });
+  }, { signal: requestSignal }));
 }
 
 /* ---------- 文件选择器 L2：本地文件上传（阶段 10） ---------- */

package/lib/application-runtime.js

@@ -0,0 +1,213 @@
+'use strict';
+
+import { normalizeCoreOptions } from './core-contract.js';
+import { createCoreRuntime, inspectCoreWriterLease } from './core-runtime.js';
+import { createCommandService } from './command-service.js';
+import { normalizeGenerationInput } from './generation-input.js';
+import { createProviderTaskRunner } from './provider-task-runner.js';
+import { createImageFlowService } from './image-flow.js';
+import { createLocalCreationService } from './local-creation.js';
+import { createLocalOperationService } from './local-operations.js';
+import { reservePluginOperation } from './plugin-operations.js';
+import { invokeReservedPlugin } from './plugin-execution.js';
+
+// Internal first-slice execution surface, not a public API or an HTTP allowlist.
+const COMMAND_MODES = Object.freeze({
+  'artifact.import': 'writer', 'artifact.export': 'writer', 'media.diff': 'writer',
+  'task.observe': 'writer', 'task.reobserve': 'writer', 'task.redeliver': 'writer', 'task.cancel': 'writer',
+  'artifact.inspect': 'reader', 'artifact.list': 'reader', 'task.inspect': 'reader', 'task.list': 'reader',
+  'flow.init': 'writer', 'flow.create': 'writer', 'flow.continue': 'writer', 'flow.select': 'writer', 'flow.export': 'writer',
+  'flow.inspect': 'reader', 'flow.list': 'reader',
+  'creation.init': 'writer', 'creation.image': 'writer', 'creation.flow': 'writer', 'creation.generate': 'writer',
+  'creation.audio': 'writer', 'creation.speech': 'writer', 'creation.transcribe': 'writer',
+  'creation.root': 'reader', 'creation.lookup': 'reader',
+  'execution.init': 'writer', 'operation.accept': 'writer', 'operation.transition': 'writer',
+  'operation.inspect': 'reader', 'operation.lookup': 'reader', 'operation.list': 'reader'
+});
+
+export class ApplicationRuntimeError extends Error {
+  constructor(code, message) { super(message); this.name = 'ApplicationRuntimeError'; this.code = code; }
+}
+
+function aborted() {
+  return Object.assign(new ApplicationRuntimeError('IRIS_APP_ABORTED', 'Iris 操作已取消'), { name: 'AbortError' });
+}
+
+function closed() {
+  return new ApplicationRuntimeError('IRIS_APP_CLOSED', 'Iris 应用运行时正在关闭或已关闭');
+}
+
+/** Instance-owned FIFO and operation-scoped Core leases. No I/O until an explicit operation. */
+export function createApplicationRuntime({ dataRoot, resolveImageCandidates, resolveAudioCandidates, resolveTaskAdapter } = {}) {
+  const root = normalizeCoreOptions({ dataRoot }).dataRoot;
+  if (resolveImageCandidates !== undefined && typeof resolveImageCandidates !== 'function') {
+    throw new TypeError('resolveImageCandidates 必须是显式候选解析函数');
+  }
+  if (resolveTaskAdapter !== undefined && typeof resolveTaskAdapter !== 'function') {
+    throw new TypeError('resolveTaskAdapter 必须是显式 Task Provider 解析函数');
+  }
+  if (resolveAudioCandidates !== undefined && typeof resolveAudioCandidates !== 'function') throw new TypeError('音频候选解析须为函数');
+  let state = 'open';
+  const queue = [];
+  const active = new Set();
+  let writer = null;
+  let disposePromise;
+  let cleanupFailure;
+
+  function snapshot() {
+    return Object.freeze({ state, queuedWrites: queue.length, activeWrites: Number(Boolean(writer)),
+      activeReaders: active.size - Number(Boolean(writer)), cleanupFailed: Boolean(cleanupFailure) });
+  }
+
+  function detach(job) { job.signal?.removeEventListener('abort', job.onAbort); }
+
+  function rejectQueued(job, error) {
+    detach(job);
+    job.reject(error);
+  }
+
+  function stop(job) {
+    job.aborted = true;
+    if (job.runtime && !job.disposal) {
+      job.disposal = job.runtime.dispose();
+      // The operation awaits this same promise below and reports any cleanup error.
+      job.disposal.catch(() => {});
+    }
+  }
+
+  function stopAll() {
+    for (const job of queue.splice(0)) rejectQueued(job, closed());
+    for (const job of active) stop(job);
+  }
+
+  async function perform(job) {
+    if (job.aborted) throw aborted();
+    const runtime = createCoreRuntime({ dataRoot: root, mode: job.mode });
+    job.runtime = runtime;
+    let result, operationError, failed = false;
+    try {
+      runtime.start();
+      result = await job.action(runtime);
+    } catch (error) {
+      failed = true; operationError = error;
+      if (job.mode === 'reader' && error?.code === 'IRIS_ARTIFACT_INDEX_INVALID' && error.missingFile === true) {
+        const lease = inspectCoreWriterLease(root);
+        if (lease.status === 'present' && lease.ownerStatus === 'alive') {
+          operationError = new ApplicationRuntimeError('IRIS_CORE_DATA_ROOT_BUSY', '作品读取遇到活动写入，请在写入结束后显式重试');
+          Object.defineProperty(operationError, 'cause', { value: error });
+        }
+      }
+    }
+    try { await (job.disposal || runtime.dispose()); }
+    catch (error) {
+      cleanupFailure ||= error;
+      state = 'closing';
+      stopAll();
+      if (failed) {
+        throw Object.assign(new AggregateError([operationError, error], 'Iris 操作失败且运行时未能安全释放'), { code: error.code });
+      }
+      throw error;
+    }
+    if (failed) throw operationError;
+    return result;
+  }
+
+  function start(job) {
+    active.add(job);
+    job.done = Promise.resolve().then(async () => {
+      let result, error, failed = false;
+      try { result = await perform(job); }
+      catch (caught) { failed = true; error = caught; }
+      detach(job);
+      active.delete(job);
+      if (writer === job) writer = null;
+      if (failed) job.reject(error); else job.resolve(result);
+      dispatch();
+    });
+  }
+
+  function dispatch() {
+    if (state !== 'open' || writer || !queue.length) return;
+    writer = queue.shift();
+    start(writer);
+  }
+
+  function schedule(mode, action, { signal } = {}) {
+    if (signal !== undefined && !(signal instanceof AbortSignal)) throw new TypeError('signal 必须是 AbortSignal');
+    if (state !== 'open') return Promise.reject(closed());
+    if (signal?.aborted) return Promise.reject(aborted());
+    let job;
+    const result = new Promise((resolve, reject) => { job = { mode, action, signal, resolve, reject, aborted: false }; });
+    job.onAbort = () => {
+      const index = queue.indexOf(job);
+      if (index >= 0) { queue.splice(index, 1); rejectQueued(job, aborted()); }
+      else stop(job);
+    };
+    signal?.addEventListener('abort', job.onAbort, { once: true });
+    if (mode === 'writer') { queue.push(job); dispatch(); }
+    else start(job);
+    return result;
+  }
+
+  /** Trusted in-process Host composition; never an external command/HTTP dispatch surface. */
+  function run(mode, action, options) {
+    if (!['reader', 'writer'].includes(mode)) throw new TypeError('Host 操作需要明确 reader/writer 模式');
+    if (typeof action !== 'function') throw new TypeError('Host 操作必须是函数');
+    return schedule(mode, action, options);
+  }
+
+  async function execute(name, input, options) {
+    if (!Object.hasOwn(COMMAND_MODES, name)) {
+      throw new ApplicationRuntimeError('IRIS_APP_COMMAND_UNSUPPORTED', '应用运行时尚未装配该 Command');
+    }
+    const ownedInput = structuredClone(input);
+    return schedule(COMMAND_MODES[name], runtime => {
+      const ports = resolveTaskAdapter ? { resolveTaskAdapter: async task => {
+        const adapter = await resolveTaskAdapter(task, { signal: runtime.signal });
+        if (runtime.signal.aborted) throw aborted();
+        return adapter;
+      } } : {};
+      if (name === 'execution.init' || name.startsWith('operation.')) return createLocalOperationService(runtime).execute(name, ownedInput);
+      if (name.startsWith('creation.')) return createLocalCreationService(runtime, { resolveImageCandidates, resolveAudioCandidates,
+        onPrepared: options?.onPrepared }).execute(name, ownedInput);
+      if (name.startsWith('flow.')) return createImageFlowService(runtime, { ...ports, resolveImageCandidates, resolveAudioCandidates }).execute(name, ownedInput);
+      return createCommandService(runtime, ports).execute(name, ownedInput);
+    }, options);
+  }
+
+  async function generateImage(input, options) {
+    const normalized = normalizeGenerationInput('image', input);
+    if (!resolveImageCandidates) {
+      throw new ApplicationRuntimeError('IRIS_APP_IMAGE_RESOLVER_MISSING', '图片生成需要显式提供候选解析函数');
+    }
+    return schedule('writer', async runtime => {
+      const candidates = await resolveImageCandidates({ modelRef: normalized.modelRef, signal: runtime.signal });
+      if (runtime.signal.aborted) throw aborted();
+      return createProviderTaskRunner(runtime).submit({ capability: 'image', candidates,
+        providerInput: normalized.providerInput, sourceArtifactId: normalized.sourceArtifactId });
+    }, options);
+  }
+
+  /** Explicit trusted assembly only. No HTTP/MCP route or persistent Operation action is added. */
+  async function executePluginOperation(registry, id, input, { allowedOperations = [], dependency, signal } = {}) {
+    const reserved = reservePluginOperation(registry, id, input, allowedOperations, dependency);
+    try {
+      return await schedule(reserved.mode, runtime => runtime.run(reserved.mode === 'reader' ? 'inspect' : 'execute',
+        () => invokeReservedPlugin(runtime, reserved)), { signal });
+    } finally { reserved.release(); }
+  }
+
+  function dispose() {
+    if (disposePromise) return disposePromise;
+    state = 'closing';
+    stopAll();
+    disposePromise = Promise.all([...active].map(job => job.done)).then(() => {
+      if (cleanupFailure) throw cleanupFailure;
+      state = 'closed';
+      return snapshot();
+    });
+    return disposePromise;
+  }
+
+  return Object.freeze({ execute, generateImage, executePluginOperation, run, dispose, snapshot });
+}

package/lib/audio-flow-input.js

@@ -0,0 +1,37 @@
+import { normalizeGenerationInput } from './generation-input.js';
+import { parseModelRef } from './models.js';
+
+export const AUDIO_RECIPES = Object.freeze({
+  'speech/v0': Object.freeze({ capability: 'tts', step: 'speak' }),
+  'transcribe/v0': Object.freeze({ capability: 'transcribe', step: 'transcribe' })
+});
+export const MAX_AUDIO_INPUT_BYTES = 20 * 1024 * 1024;
+export const AUDIO_TYPES = Object.freeze({ 'audio/wav': 'wav', 'audio/mpeg': 'mp3', 'audio/ogg': 'ogg', 'audio/flac': 'flac' });
+export const isAudioRecipe = recipe => Object.hasOwn(AUDIO_RECIPES, recipe);
+const invalid = message => { throw Object.assign(new Error(message), { code: 'IRIS_AUDIO_INPUT_INVALID' }); };
+
+export function normalizeAudioFlowInput(recipe, input) {
+  if (!isAudioRecipe(recipe) || !input || typeof input !== 'object' || Array.isArray(input)) invalid('不支持的音频流程输入');
+  const speech = recipe === 'speech/v0', required = speech ? ['model_ref', 'text'] : ['model_ref', 'source_artifact_id'];
+  if (Object.keys(input).some(key => ![...required, ...(speech ? ['voice'] : [])].includes(key))
+      || required.some(key => typeof input[key] !== 'string') || !parseModelRef(input.model_ref)
+      || input.voice !== undefined && typeof input.voice !== 'string') invalid('请提供明确模型和文字或当前工作区的音频作品');
+  if (speech) {
+    const normalized = normalizeGenerationInput('tts', input);
+    return { model_ref: normalized.modelRef, ...normalized.providerInput };
+  }
+  if (!/^artifact_[a-f0-9]{24}$/.test(input.source_artifact_id)) invalid('转写来源须为当前工作区的音频作品');
+  return { model_ref: input.model_ref, source_artifact_id: input.source_artifact_id };
+}
+
+/** Bounded container sniffing, not a decoder or a claim of provider compatibility. */
+export function readImportAudio(bytes, mediaType) {
+  if (!(bytes instanceof Uint8Array) || !bytes.length || bytes.length > MAX_AUDIO_INPUT_BYTES) invalid('音频须为最多20 MiB的WAV、MP3、OGG或FLAC');
+  const value = Buffer.from(bytes);
+  const actual = value.length >= 12 && value.toString('ascii', 0, 4) === 'RIFF' && value.toString('ascii', 8, 12) === 'WAVE' ? 'audio/wav'
+    : value.length >= 10 && (value.toString('ascii', 0, 3) === 'ID3' || value[0] === 0xff && (value[1] & 0xe0) === 0xe0) ? 'audio/mpeg'
+      : value.length >= 27 && value.toString('ascii', 0, 4) === 'OggS' ? 'audio/ogg'
+        : value.length >= 8 && value.toString('ascii', 0, 4) === 'fLaC' ? 'audio/flac' : null;
+  if (!actual || actual !== mediaType) invalid('音频容器与Content-Type不一致，或不是支持的格式');
+  return { bytes: value, mediaType: actual, metadata: {} };
+}