@mokuyoaxis/dsh-iris 0.2.7 → 0.3.0-alpha.1

package/lib/web/transport.js

@@ -0,0 +1,96 @@
+// Same-origin transport. Writes use named media methods or a finite management path.
+const RUN = /^run_[a-f0-9]{24}$/, ARTIFACT = /^artifact_[a-f0-9]{24}$/, OPERATION = /^op_[a-f0-9]{64}$/;
+const KEY = /^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/;
+function id(value, pattern) { if (typeof value !== 'string' || !pattern.test(value)) throw new TypeError('本地操作标识无效'); return value; }
+export class WorkbenchHttpError extends Error {
+  constructor(status, error) {
+    super(error?.message || '本地服务返回了无法读取的响应');
+    this.name = 'WorkbenchHttpError'; this.status = status;
+    this.code = error?.code; this.requestId = error?.requestId;
+  }
+}
+
+export async function redeemLoginLink(ticket, signal) {
+  const response = await fetch('/api/v0/workbench/login', { method: 'POST',
+    headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ ticket }),
+    credentials: 'omit', cache: 'no-store', redirect: 'error',
+    signal: AbortSignal.any([signal, AbortSignal.timeout(15000)]) });
+  const value = await response.json();
+  if (!response.ok) throw new WorkbenchHttpError(response.status, value.error);
+  if (value.contractVersion !== 0 || typeof value.accessToken !== 'string' || !/^[A-Za-z0-9_-]{43}$/.test(value.accessToken)) throw new TypeError('不支持的登录响应');
+  return value.accessToken;
+}
+
+export function createReadClient(token, { onUnauthorized = () => {} } = {}) {
+  const lifetime = new AbortController(), reads = [], media = [];
+  let active = 0;
+  function drain() {
+    while (active < 2 && (reads.length || media.length)) {
+      const job = (reads.length ? reads : media).shift(); active++;
+      run(job).then(job.resolve, job.reject).finally(() => { active--; drain(); });
+    }
+  }
+  async function run({ pathname, binary, download, signal, value, body, key, method = 'GET', mediaType = 'application/json' }) {
+    const combined = AbortSignal.any([lifetime.signal, AbortSignal.timeout(15000), ...(signal ? [signal] : [])]);
+    combined.throwIfAborted();
+    const response = await fetch(pathname, { method, headers: { Authorization: 'Bearer ' + token,
+      ...(method === 'POST' ? { 'Content-Type': mediaType } : {}), ...(key ? { 'Idempotency-Key': key } : {}) },
+      credentials: 'omit', cache: 'no-store', redirect: 'error', signal: combined,
+      ...(method === 'POST' ? { body: body ?? JSON.stringify(value) } : {}) });
+    if (!response.ok) {
+      const body = await response.json();
+      const error = new WorkbenchHttpError(response.status, body.error);
+      if (response.status === 401 && !lifetime.signal.aborted) onUnauthorized();
+      throw error;
+    }
+    if (download) return { blob: await response.blob(), filename: /^attachment; filename="([^"]+)"$/.exec(response.headers.get('content-disposition') || '')?.[1] };
+    return binary ? response.blob() : response.json();
+  }
+  function get(pathname, { binary = false, download = false, signal } = {}) {
+    if (!/^\/api\/v0\//.test(pathname) || pathname.includes('#')) throw new TypeError('仅允许本地 API 路径');
+    if (lifetime.signal.aborted) return Promise.reject(lifetime.signal.reason);
+    return new Promise((resolve, reject) => { (binary || download ? media : reads).push({ pathname, binary, download, signal, resolve, reject }); drain(); });
+  }
+  const post = (pathname, value, options = {}) => run({ pathname, value, method: 'POST', ...options });
+  return Object.freeze({
+    get,
+    callPlugin({ key, ...value }, { signal } = {}) { return post('/api/v0/plugin-operations', value, { key: id(key, KEY), signal }); },
+    lookupCreation(kind, key, options) {
+      if (!['image-import', 'flow-create', 'generation-create', 'audio-import', 'speech-create', 'transcription-create'].includes(kind)) throw new TypeError('创建类型无效');
+      return get('/api/v0/creation-requests?' + new URLSearchParams({ kind, key: id(key, KEY) }), options);
+    },
+    lookupOperation(key, options) { return get('/api/v0/operations?' + new URLSearchParams({ key: id(key, KEY) }), options); },
+    getOperation(operationId, options) { return get('/api/v0/operations/' + id(operationId, OPERATION), options); },
+    getRun(runId, options) { return get('/api/v0/runs/' + id(runId, RUN), options); },
+    uploadImage(image, { key, signal } = {}) {
+      if (!(image instanceof Blob) || !['image/png', 'image/jpeg', 'image/webp'].includes(image.type)) throw new TypeError('需要 PNG/JPEG/WebP 图片字节');
+      return post('/api/v0/images', undefined, { body: image, mediaType: image.type, key: id(key, KEY), signal });
+    },
+    createRun(value, { key, signal } = {}) { return post('/api/v0/runs', value, { key: id(key, KEY), signal }); },
+    createGeneration(value, { key, signal } = {}) { return post('/api/v0/generations', value, { key: id(key, KEY), signal }); },
+    uploadAudio(audio, { key, signal } = {}) {
+      if (!(audio instanceof Blob) || !['audio/wav', 'audio/mpeg', 'audio/ogg', 'audio/flac'].includes(audio.type)) throw new TypeError('需要WAV/MP3/OGG/FLAC音频');
+      return post('/api/v0/audio', undefined, { body: audio, mediaType: audio.type, key: id(key, KEY), signal });
+    },
+    createSpeech(value, { key, signal } = {}) { return post('/api/v0/speeches', value, { key: id(key, KEY), signal }); },
+    createTranscription(value, { key, signal } = {}) { return post('/api/v0/transcriptions', value, { key: id(key, KEY), signal }); },
+    continueRun(runId, expectedRevision, { key, signal } = {}) {
+      return post('/api/v0/runs/' + id(runId, RUN) + '/continue', { expectedRevision }, { key: id(key, KEY), signal });
+    },
+    stopOperation(operationId, { signal } = {}) { return post('/api/v0/operations/' + id(operationId, OPERATION) + '/cancel', {}, { signal }); },
+    selectRun(runId, artifactId, expectedRevision, { signal } = {}) {
+      return post('/api/v0/runs/' + id(runId, RUN) + '/selection', { artifactId: id(artifactId, ARTIFACT), expectedRevision }, { signal });
+    },
+    postManagement(pathname, value) {
+      if (!/^\/api\/v0\/connection-management\/(?:templates|connections(?:\/[a-f0-9-]{36}\/(?:update|revoke|delete|export|skill))?)$/.test(pathname)) {
+        throw new TypeError('仅允许连接管理操作');
+      }
+      return post(pathname, value);
+    },
+    postProvider(action, value, { signal } = {}) {
+      if (!['save', 'discover', 'workflow-check', 'policies', 'enabled', 'remove', 'impact', 'check', 'monitor'].includes(action)) throw new TypeError('仅允许明确的供应商管理操作');
+      return post('/api/v0/provider-management/' + action, value, { signal });
+    },
+    close() { lifetime.abort(); for (const job of [...reads.splice(0), ...media.splice(0)]) job.reject(lifetime.signal.reason); }
+  });
+}

package/lib/web/workbench-login.js

@@ -0,0 +1,165 @@
+// Loaded only by a password-mode shell. Stored authority is a browser session, never the owner control key.
+import { WorkbenchHttpError } from './transport.js';
+
+const TAB = 'iris.workbench.password-session.v0', DEVICE = 'iris.workbench.remembered-session.v0', SETUP = 'iris.workbench.setup.v0';
+const TOKEN = /^[A-Za-z0-9_-]{43}$/, ID = /^[a-f0-9]{32}$/;
+const $ = selector => document.querySelector(selector);
+
+export function createWorkbenchLogin({ connect, disconnect, feedback, describe }) {
+  let status, current, controller, generation = 0, busy = false, storageFailed = false;
+  const validStatus = value => value?.contractVersion === 0 && value.mode === 'password' && typeof value.configured === 'boolean' && ID.test(value.authId);
+  function storage(area, method, value) {
+    try { return window[area][method](area === 'localStorage' ? DEVICE : value?.setup ? SETUP : TAB, value?.text); }
+    catch (error) {
+      if (!['SecurityError', 'QuotaExceededError', 'InvalidStateError'].includes(error.name)) throw error;
+      storageFailed = true; return null;
+    }
+  }
+  function notice() {
+    $('#session-notice').hidden = !storageFailed;
+    if (storageFailed) $('#session-notice').textContent = '浏览器无法保存部分登录信息。本次仍可使用，再次打开时可能需要输入访问口令。';
+  }
+  function cached(area) {
+    const text = storage(area, 'getItem'); if (!text) return null;
+    let value;
+    try { if (text.length > 512) throw new Error('oversized'); value = JSON.parse(text); }
+    catch (_) { storage(area, 'removeItem'); return null; }
+    if (!value || Object.keys(value).sort().join(',') !== 'accessToken,authId,contractVersion,expiresAt,remember'
+        || value.contractVersion !== 0 || value.authId !== status.authId || !TOKEN.test(value.accessToken || '')
+        || typeof value.remember !== 'boolean' || !Number.isFinite(Date.parse(value.expiresAt)) || Date.parse(value.expiresAt) <= Date.now()) {
+      storage(area, 'removeItem'); return null;
+    }
+    return value;
+  }
+  function saveSession(value) {
+    if (!value || value.contractVersion !== 0 || value.authId !== status.authId || !TOKEN.test(value.accessToken || '')
+        || !Number.isFinite(Date.parse(value.expiresAt)) || typeof value.remember !== 'boolean') throw new TypeError('不支持的工作台登录响应');
+    current = value;
+    storage('sessionStorage', 'setItem', { text: JSON.stringify(value) });
+    if (value.remember) storage('localStorage', 'setItem', { text: JSON.stringify(value) });
+    else storage('localStorage', 'removeItem');
+    storage('sessionStorage', 'removeItem', { setup: true }); notice();
+  }
+  function setupTicket() {
+    const text = storage('sessionStorage', 'getItem', { setup: true });
+    if (!text) return null;
+    let value;
+    try { if (text.length > 256) throw new Error('oversized'); value = JSON.parse(text); } catch (_) { /* Clear invalid temporary setup state below. */ }
+    if (value?.authId === status.authId && TOKEN.test(value.ticket || '')) return value.ticket;
+    storage('sessionStorage', 'removeItem', { setup: true }); return null;
+  }
+  function render() {
+    const setup = status?.configured === false;
+    $('#password-login').hidden = false;
+    $('#password-confirm-row').hidden = !setup;
+    $('#password-confirm').required = setup;
+    $('#password').autocomplete = setup ? 'new-password' : 'current-password';
+    $('#password-submit').textContent = setup ? '设置口令并进入' : '进入工作台';
+    $('#password-submit').disabled = busy || !status || setup && !setupTicket();
+    $('#password').disabled = busy || !status || setup && !setupTicket();
+    $('#password-confirm').disabled = busy;
+    $('#password-retry').hidden = !!status;
+    $('#password-hint').textContent = !status ? '正在读取工作台登录状态…' : setup
+      ? setupTicket() ? '为这个工作台设置一个访问口令。之后用普通地址即可登录。'
+        : '首次使用：请打开启动时给出的设置入口，或在本机运行 web login 获取设置入口。'
+      : '用你的访问口令进入。记住此设备后，可跨正常重启继续使用。';
+    notice();
+  }
+  async function request(route, value, signal, token) {
+    const response = await fetch('/api/v0/workbench/' + route, { method: value ? 'POST' : 'GET',
+      credentials: 'omit', cache: 'no-store', redirect: 'error',
+      headers: { ...(value ? { 'Content-Type': 'application/json' } : {}), ...(token ? { Authorization: 'Bearer ' + token } : {}) },
+      ...(value ? { body: JSON.stringify(value) } : {}), signal: AbortSignal.any([signal, AbortSignal.timeout(15000)]) });
+    const result = await response.json();
+    if (!response.ok) throw new WorkbenchHttpError(response.status, result.error);
+    return result;
+  }
+  async function open() {
+    const turn = ++generation; controller?.abort(); controller = new AbortController();
+    const signal = controller.signal; busy = true;
+    $('#login-help').hidden = true; $('#paste-panel').hidden = true;
+    $('#connection-title').textContent = '欢迎回到 Iris'; render();
+    const fragment = location.hash.startsWith('#setup=') ? location.hash.slice(7) : null;
+    if (fragment !== null || location.hash.startsWith('#login=')) history.replaceState(null, '', location.pathname + location.search);
+    try {
+      const value = await request('auth', undefined, signal);
+      if (turn !== generation) return;
+      if (!validStatus(value)) throw new TypeError('不支持的工作台认证响应');
+      status = value;
+      if (fragment !== null && !value.configured) {
+        if (!TOKEN.test(fragment)) throw new Error('首次设置链接无效，请在本机运行 web login 获取当前入口。');
+        storage('sessionStorage', 'setItem', { setup: true, text: JSON.stringify({ authId: status.authId, ticket: fragment }) });
+      }
+      if (!value.configured) {
+        storage('sessionStorage', 'removeItem'); storage('localStorage', 'removeItem'); current = null;
+      } else {
+        storage('sessionStorage', 'removeItem', { setup: true });
+        current = cached('sessionStorage') || cached('localStorage');
+        if (current) await connect(current.accessToken);
+      }
+    } catch (error) { if (turn === generation) feedback(describe(error), true); }
+    finally { if (turn === generation) { busy = false; render(); } }
+  }
+  function forget() {
+    generation++; controller?.abort(); current = null;
+    storage('sessionStorage', 'removeItem'); storage('localStorage', 'removeItem');
+    $('#password').value = ''; $('#password-confirm').value = ''; busy = false; render();
+  }
+  async function logout() {
+    if (busy || !current) return;
+    const turn = ++generation, token = current.accessToken;
+    controller?.abort(); controller = new AbortController(); busy = true; $('#disconnect').disabled = true;
+    try {
+      await request('logout', {}, controller.signal, token);
+      if (turn !== generation) return;
+      forget(); disconnect(); feedback('已退出。输入访问口令即可重新进入。'); $('#password').focus();
+    } catch (error) { if (turn === generation) feedback('退出尚未确认，请重试。' + describe(error), true); }
+    finally { if (turn === generation) busy = false; $('#disconnect').disabled = false; }
+  }
+  $('#password-form').addEventListener('submit', async event => {
+    event.preventDefault(); if (busy || !status) return;
+    const setup = !status.configured, password = $('#password').value;
+    if (setup && password !== $('#password-confirm').value) { feedback('两次输入的访问口令不一致。', true); return; }
+    const ticket = setup ? setupTicket() : undefined;
+    if (setup && !ticket) { feedback('请打开本机启动器给出的首次设置入口。', true); return; }
+    const turn = ++generation; controller?.abort(); controller = new AbortController(); busy = true; render();
+    const remember = $('#password-remember').checked;
+    $('#password').value = ''; $('#password-confirm').value = ''; feedback(setup ? '正在保存访问口令…' : '正在登录…');
+    try {
+      const result = await request(setup ? 'setup' : 'password-login', { password, remember, ...(setup ? { ticket } : {}) }, controller.signal);
+      if (turn !== generation) return;
+      status = { ...status, configured: true }; saveSession(result);
+      await connect(result.accessToken);
+    } catch (error) {
+      if (turn !== generation) return;
+      if (setup) {
+        try {
+          const latest = await request('auth', undefined, controller.signal);
+          if (turn !== generation) return;
+          if (!validStatus(latest) || latest.authId !== status.authId) throw new TypeError('不支持的工作台认证响应');
+          status = latest;
+          if (latest.configured) {
+            storage('sessionStorage', 'removeItem', { setup: true });
+            feedback('访问口令已设置。请直接输入口令登录工作台。'); return;
+          }
+        } catch (verification) {
+          if (turn === generation) feedback(describe(error) + '；设置结果暂时无法核对：' + describe(verification), true);
+          return;
+        }
+      }
+      feedback(describe(error), true);
+    }
+    finally { if (turn === generation) { busy = false; render(); } }
+  });
+  $('#password-show').addEventListener('click', () => {
+    const show = $('#password').type === 'password'; $('#password').type = show ? 'text' : 'password';
+    $('#password-show').textContent = show ? '隐藏' : '显示'; $('#password-show').setAttribute('aria-pressed', String(show));
+  });
+  $('#password-retry').addEventListener('click', open);
+  window.addEventListener('storage', event => {
+    if (event.key === DEVICE && event.newValue === null && current?.remember) {
+      forget(); disconnect(); feedback('此设备保存的登录已清除，请重新输入访问口令。');
+    }
+  });
+  return Object.freeze({ open, logout, forget, pause() { generation++; controller?.abort(); busy = false; } });
+}

package/lib/workbench-auth-cli.js

@@ -0,0 +1,47 @@
+// CLI-only access to one explicitly selected workbench; no directory discovery or raw credential output.
+import fs from 'node:fs';
+import path from 'node:path';
+import { createWorkbenchAuth, resolveWorkbenchAuthDirectory, readWorkbenchPrivateJson, workbenchRootKey, WorkbenchAuthError } from './workbench-auth.js';
+
+export async function manageWorkbenchPassword({ dataRoot, directory: supplied, reset = false, signal }) {
+  const directory = resolveWorkbenchAuthDirectory(dataRoot, supplied), file = path.join(directory, 'active.json');
+  let active;
+  if (fs.existsSync(file)) {
+    active = readWorkbenchPrivateJson(file).value;
+    if (!active || Object.keys(active).sort().join(',') !== 'accessToken,authId,origin,pid,rootKey,schemaVersion,state'
+        || active.schemaVersion !== 0 || active.rootKey !== workbenchRootKey(dataRoot) || !['open', 'closed'].includes(active.state)
+        || !/^http:\/\/127\.0\.0\.1:[1-9]\d{0,4}$/.test(active.origin) || Number(active.origin.split(':').at(-1)) > 65535
+        || !Number.isInteger(active.pid) || active.pid < 1 || !/^[a-f0-9]{32}$/.test(active.authId)
+        || (active.state === 'open' ? !/^[A-Za-z0-9_-]{43}$/.test(active.accessToken) : active.accessToken !== null)) {
+      throw new WorkbenchAuthError('IRIS_WEB_AUTH_CONFIG_INVALID', '工作台控制记录无效，已保留现场', 409);
+    }
+  }
+  if (active?.state === 'open') {
+    const request = async route => {
+      const response = await fetch(active.origin + '/api/v0/workbench/' + route, { method: 'POST',
+        headers: { Authorization: 'Bearer ' + active.accessToken, 'Content-Type': 'application/json' }, body: '{}', redirect: 'error',
+        signal: AbortSignal.any([AbortSignal.timeout(15000), ...(signal ? [signal] : [])]) });
+      const value = await response.json();
+      if (!response.ok) throw new WorkbenchAuthError(value.error?.code || 'IRIS_WEB_AUTH_UNAVAILABLE', value.error?.message || '工作台控制请求失败', response.status);
+      return value;
+    };
+    if (reset) {
+      const value = await request('password-reset');
+      return { contractVersion: 0, origin: active.origin, loginUrl: value.setupUrl, passwordReset: true,
+        message: '工作台会话已注销；打开设置链接重新设置访问口令。Core 任务与 MCP 连接保持。' };
+    }
+    const response = await fetch(active.origin + '/api/v0/workbench/auth', { redirect: 'error',
+      signal: AbortSignal.any([AbortSignal.timeout(15000), ...(signal ? [signal] : [])]) });
+    const status = await response.json();
+    if (!response.ok || status.authId !== active.authId || status.mode !== 'password') throw new WorkbenchAuthError('IRIS_WEB_AUTH_UNAVAILABLE', '工作台身份或认证模式已变化，请核对当前服务', 409);
+    return { contractVersion: 0, origin: active.origin, loginUrl: status.configured ? active.origin : (await request('setup-link')).setupUrl,
+      message: status.configured ? '打开工作台地址，用访问口令登录；记住设备后无需每次重新登录。' : '打开首次设置链接，设置一次访问口令。' };
+  }
+  if (!reset || !fs.existsSync(path.join(directory, 'state.json'))) {
+    throw new WorkbenchAuthError('IRIS_WEB_AUTH_UNAVAILABLE', '工作台未运行，请先执行 web serve；无需手工指定 Token 文件', 409);
+  }
+  const auth = createWorkbenchAuth({ directory, dataRoot });
+  try { auth.start(); await auth.reset(); }
+  finally { await auth.dispose(); }
+  return { contractVersion: 0, passwordReset: true, message: '访问口令已重置。下次 web serve 启动时打开首次设置入口；原任务和连接保持。' };
+}

package/lib/workbench-auth.js

@@ -0,0 +1,200 @@
+// Single-owner browser authentication. No business storage, provider credentials or MCP grants.
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { promisify } from 'node:util';
+import { createCoreRuntime } from './core-runtime.js';
+import { atomicCreatePrivate, atomicWritePrivate } from './private-storage.js';
+
+const scrypt = promisify(crypto.scrypt), TOKEN = /^[A-Za-z0-9_-]{43}$/, HEX = /^[a-f0-9]{64}$/;
+const SESSION_MS = 12 * 60 * 60 * 1000, REMEMBER_MS = 30 * 24 * 60 * 60 * 1000;
+const hash = value => crypto.createHash('sha256').update(value).digest('hex');
+const json = value => JSON.stringify(value, null, 2) + '\n';
+const fields = (value, names) => value && typeof value === 'object' && !Array.isArray(value)
+  && Object.keys(value).length === names.length && names.every(name => Object.hasOwn(value, name));
+const inside = (root, target) => { const rel = path.relative(root, target); return !rel || rel !== '..' && !rel.startsWith('..' + path.sep) && !path.isAbsolute(rel); };
+
+export class WorkbenchAuthError extends Error {
+  constructor(code, message, status = 400) { super(message); this.name = 'WorkbenchAuthError'; this.code = code; this.status = status; }
+}
+const fail = (code, message, status) => { throw new WorkbenchAuthError(code, message, status); };
+export const workbenchRootKey = dataRoot => hash(fs.realpathSync.native(dataRoot));
+
+export function resolveWorkbenchAuthDirectory(dataRoot, supplied) {
+  if (supplied !== undefined) {
+    if (typeof supplied !== 'string' || !path.isAbsolute(supplied)) fail('IRIS_WEB_AUTH_CONFIG_INVALID', 'auth-store 必须是私有目录的绝对路径');
+    return path.resolve(supplied);
+  }
+  const home = process.env.IRIS_HOME || path.join(os.homedir(), '.iris');
+  if (!path.isAbsolute(home)) fail('IRIS_WEB_AUTH_CONFIG_INVALID', 'IRIS_HOME 必须是绝对路径');
+  // Preserve v0 directory placement; record identity follows Core's native root.
+  return path.join(home, 'web-auth', hash(fs.realpathSync(dataRoot)));
+}
+
+export function readWorkbenchPrivateJson(file) {
+  const info = fs.lstatSync(file);
+  if (!info.isFile() || info.isSymbolicLink() || process.platform !== 'win32' && info.mode & 0o077) {
+    fail('IRIS_WEB_AUTH_CONFIG_INVALID', '认证文件须为私有普通文件；不会调整已有文件权限', 409);
+  }
+  const fd = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW || 0));
+  try {
+    const bytes = Buffer.alloc(65537); let offset = 0, count;
+    while (offset < bytes.length && (count = fs.readSync(fd, bytes, offset, bytes.length - offset, null))) offset += count;
+    if (offset > 65536) fail('IRIS_WEB_AUTH_CONFIG_INVALID', '认证文件超过大小限制', 409);
+    const text = bytes.subarray(0, offset).toString('utf8');
+    let value;
+    try { value = JSON.parse(text); } catch (_) { fail('IRIS_WEB_AUTH_CONFIG_INVALID', '认证文件不是有效 JSON，已保留现场', 409); }
+    return { value, digest: hash(text) };
+  } finally { fs.closeSync(fd); }
+}
+
+function prepareDirectory(directory, dataRoot) {
+  const supplied = path.resolve(directory); let parent = supplied;
+  while (!fs.existsSync(parent)) parent = path.dirname(parent);
+  const physical = path.resolve(fs.realpathSync.native(parent), path.relative(parent, supplied));
+  if (inside(dataRoot, physical) || inside(physical, dataRoot)) fail('IRIS_WEB_AUTH_CONFIG_INVALID', '认证目录与 Core 数据根须相互独立');
+  if (!fs.existsSync(supplied)) fs.mkdirSync(supplied, { recursive: true, mode: 0o700 });
+  const info = fs.lstatSync(supplied);
+  if (!info.isDirectory() || info.isSymbolicLink() || process.platform !== 'win32' && info.mode & 0o077) {
+    fail('IRIS_WEB_AUTH_CONFIG_INVALID', 'auth-store 须为私有真实目录；不会调整已有目录权限', 409);
+  }
+  return fs.realpathSync.native(supplied);
+}
+
+function checkedState(value, rootKey) {
+  if (!fields(value, ['schemaVersion', 'rootKey', 'id', 'password', 'sessions']) || value.schemaVersion !== 0 || value.rootKey !== rootKey
+      || !/^[a-f0-9]{32}$/.test(value.id) || !Array.isArray(value.sessions) || value.sessions.length > 32) {
+    fail('IRIS_WEB_AUTH_CONFIG_INVALID', '认证状态的版本、根身份或结构不符合约定，已保留现场', 409);
+  }
+  const password = value.password;
+  if (password !== null && (!fields(password, ['algorithm', 'salt', 'hash']) || password.algorithm !== 'scrypt-v1'
+      || !/^[a-f0-9]{32}$/.test(password.salt) || !/^[a-f0-9]{128}$/.test(password.hash))) {
+    fail('IRIS_WEB_AUTH_CONFIG_INVALID', '认证口令记录无效，不能自动修复或重置', 409);
+  }
+  if (new Set(value.sessions.map(item => item?.hash)).size !== value.sessions.length || password === null && value.sessions.length
+      || value.sessions.some(item => !fields(item, ['hash', 'createdAt', 'expiresAt', 'remember']) || !HEX.test(item.hash)
+        || typeof item.remember !== 'boolean' || !Number.isSafeInteger(item.createdAt) || item.createdAt < 0
+        || item.expiresAt !== item.createdAt + (item.remember ? REMEMBER_MS : SESSION_MS))) {
+    fail('IRIS_WEB_AUTH_CONFIG_INVALID', '浏览器会话记录无效，已保留现场', 409);
+  }
+  return value;
+}
+
+function checkedPassword(password) {
+  if (typeof password !== 'string' || password.length < 8 || password.length > 128) {
+    fail('IRIS_WEB_PASSWORD_INPUT_INVALID', '访问口令需为 8–128 个字符');
+  }
+  return password;
+}
+const derive = (password, salt) => scrypt(password, Buffer.from(salt, 'hex'), 64, { N: 32768, r: 8, p: 1, maxmem: 64 * 1024 * 1024 });
+
+/** Explicit owner lease and atomic state. Session authority survives normal service restarts. */
+export function createWorkbenchAuth({ directory, dataRoot }) {
+  if (typeof directory !== 'string' || !path.isAbsolute(directory)) fail('IRIS_WEB_AUTH_CONFIG_INVALID', 'auth-store 必须是明确的私有绝对路径');
+  let phase = 'new', root, stateFile, controlFile, state, fingerprint, lease, bootstrap, control;
+  let pending, disposal, failures = 0, failedWindow = 0;
+  const rootKey = workbenchRootKey(dataRoot);
+  const open = () => { if (phase !== 'open') fail('IRIS_WEB_AUTH_UNAVAILABLE', '工作台认证尚未启动或正在关闭', 503); };
+  function persist(next) {
+    open();
+    if (readWorkbenchPrivateJson(stateFile).digest !== fingerprint) fail('IRIS_WEB_AUTH_CONFIG_CHANGED', '认证文件在服务外被修改，未覆盖；请在本机核对', 409);
+    const text = json(next); atomicWritePrivate(stateFile, text); state = next; fingerprint = hash(text);
+  }
+  function start() {
+    if (phase !== 'new') fail('IRIS_WEB_AUTH_UNAVAILABLE', '认证实例只能启动一次', 409);
+    root = prepareDirectory(directory, fs.realpathSync.native(dataRoot)); stateFile = path.join(root, 'state.json'); controlFile = path.join(root, 'active.json');
+    if (!fs.existsSync(stateFile)) {
+      if (fs.readdirSync(root).some(name => name !== 'ownership')) fail('IRIS_WEB_AUTH_CONFIG_INVALID', '非空目录不是工作台认证目录，未覆盖文件', 409);
+      try { atomicCreatePrivate(stateFile, json({ schemaVersion: 0, rootKey, id: crypto.randomBytes(16).toString('hex'), password: null, sessions: [] })); }
+      catch (error) { if (error.code !== 'EEXIST') throw error; }
+    }
+    const loaded = readWorkbenchPrivateJson(stateFile); state = checkedState(loaded.value, rootKey); fingerprint = loaded.digest;
+    lease = createCoreRuntime({ dataRoot: path.join(root, 'ownership'), mode: 'writer' }); lease.start();
+    // A previous owner may finish a logout between validation and lease acquisition.
+    const owned = readWorkbenchPrivateJson(stateFile); state = checkedState(owned.value, rootKey); fingerprint = owned.digest;
+    phase = 'open'; bootstrap = state.password === null ? crypto.randomBytes(32).toString('base64url') : null;
+    return info();
+  }
+  function info() {
+    open(); return { mode: 'password', configured: state.password !== null, authId: state.id, rememberDays: 30, minPasswordLength: 8, maxPasswordLength: 128 };
+  }
+  function bindControl({ origin, accessToken }) {
+    open();
+    if (fs.existsSync(controlFile)) readWorkbenchPrivateJson(controlFile);
+    control = { schemaVersion: 0, rootKey, authId: state.id, state: 'open', pid: process.pid, origin, accessToken };
+    atomicWritePrivate(controlFile, json(control));
+  }
+  function setupLink(origin) {
+    open(); if (!bootstrap) fail('IRIS_WEB_PASSWORD_ALREADY_SET', '访问口令已设置，请在普通工作台地址登录', 409);
+    return origin + '/#setup=' + bootstrap;
+  }
+  function authenticate(token) {
+    open(); if (!TOKEN.test(token || '')) return false;
+    const item = state.sessions.find(item => item.hash === hash(token));
+    return !!item && item.expiresAt > Date.now();
+  }
+  function session(nextPassword, remember) {
+    open();
+    const alive = state.sessions.filter(item => item.expiresAt > Date.now());
+    if (alive.length >= 32) fail('IRIS_WEB_SESSION_LIMIT', '已达 32 个有效会话，请退出闲置会话，或在本机重置口令', 429);
+    const accessToken = crypto.randomBytes(32).toString('base64url'), createdAt = Date.now(), expiresAt = createdAt + (remember ? REMEMBER_MS : SESSION_MS);
+    persist({ ...state, password: nextPassword, sessions: [...alive, { hash: hash(accessToken), createdAt, expiresAt, remember }] });
+    return { authId: state.id, accessToken, expiresAt: new Date(expiresAt).toISOString(), remember };
+  }
+  function exclusive(callback) {
+    open(); if (pending) fail('IRIS_WEB_AUTH_BUSY', '正在处理另一项登录请求，请稍后重试', 429);
+    const job = Promise.resolve().then(callback); pending = job;
+    return job.finally(() => { pending = null; });
+  }
+  function setup({ ticket, password, remember }) {
+    checkedPassword(password);
+    if (typeof remember !== 'boolean') fail('IRIS_WEB_PASSWORD_INPUT_INVALID', '请选择是否记住此设备');
+    return exclusive(async () => {
+      if (!bootstrap || !TOKEN.test(ticket || '') || !crypto.timingSafeEqual(Buffer.from(hash(ticket), 'hex'), Buffer.from(hash(bootstrap), 'hex'))) {
+        fail('IRIS_WEB_SETUP_REQUIRED', '首次设置入口无效，请在本机运行 web login 获取当前设置入口', 401);
+      }
+      const salt = crypto.randomBytes(16).toString('hex'), derived = await derive(password, salt);
+      try {
+        const result = session({ algorithm: 'scrypt-v1', salt, hash: derived.toString('hex') }, remember);
+        bootstrap = null; return result;
+      } finally { derived.fill(0); }
+    });
+  }
+  function login({ password, remember }) {
+    checkedPassword(password);
+    if (typeof remember !== 'boolean') fail('IRIS_WEB_PASSWORD_INPUT_INVALID', '请选择是否记住此设备');
+    return exclusive(async () => {
+      if (!state.password) fail('IRIS_WEB_SETUP_REQUIRED', '请先在本机完成工作台访问口令设置', 409);
+      if (Date.now() - failedWindow >= 60000) { failures = 0; failedWindow = Date.now(); }
+      if (failures >= 5) fail('IRIS_WEB_PASSWORD_RATE_LIMITED', '口令尝试过于频繁，请一分钟后重试', 429);
+      const derived = await derive(password, state.password.salt);
+      try {
+        if (!crypto.timingSafeEqual(derived, Buffer.from(state.password.hash, 'hex'))) { failures++; fail('IRIS_WEB_PASSWORD_INVALID', '访问口令不正确', 401); }
+      } finally { derived.fill(0); }
+      failures = 0; return session(state.password, remember);
+    });
+  }
+  function logout(token) {
+    open(); if (!TOKEN.test(token || '')) fail('IRIS_WEB_PASSWORD_INPUT_INVALID', '浏览器会话格式无效');
+    const remaining = state.sessions.filter(item => item.hash !== hash(token));
+    if (remaining.length !== state.sessions.length) persist({ ...state, sessions: remaining });
+    return { signedOut: true };
+  }
+  function reset() {
+    return exclusive(() => { persist({ ...state, password: null, sessions: [] }); bootstrap = crypto.randomBytes(32).toString('base64url'); failures = 0; return { passwordReset: true }; });
+  }
+  function dispose() {
+    if (disposal) return disposal;
+    const wasOpen = phase === 'open'; phase = 'closing'; bootstrap = null;
+    disposal = (async () => {
+      if (pending) await Promise.allSettled([pending]);
+      const errors = [];
+      try { if (wasOpen && control) atomicWritePrivate(controlFile, json({ ...control, state: 'closed', accessToken: null })); } catch (error) { errors.push(error); }
+      try { await lease?.dispose(); } catch (error) { errors.push(error); }
+      phase = 'closed';
+      if (errors.length) throw new AggregateError(errors, '工作台认证释放失败');
+    })(); return disposal;
+  }
+  return Object.freeze({ start, info, bindControl, setupLink, authenticate, setup, login, logout, reset, dispose });
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mokuyoaxis/dsh-iris",
-  "version": "0.2.7",
-  "description": "Multi-provider image, video, music, and speech generation, transcription, visual understanding, and prompt optimization with an integrated Iris workbench for DeepSeek Harness.",
+  "version": "0.3.0-alpha.1",
+  "description": "A multimodal workspace for Agents: Core Web, MCP, CLI and native DSH tools with model pools, durable media tasks, ComfyUI and explicit plugins.",
   "type": "module",
   "main": "lib/index.js",
   "exports": {
@@ -12,9 +12,19 @@
     },
     "./cordis.patch.yml": "./cordis.patch.yml",
     "./package.json": "./package.json",
-    "./doctor": "./lib/doctor.js"
+    "./doctor": "./lib/doctor.js",
+    "./provider-extensions": "./lib/provider-extensions.js",
+    "./plugins": {
+      "types": "./lib/plugins.d.ts",
+      "default": "./lib/plugins.js"
+    },
+    "./contact-sheet": {
+      "types": "./plugins/contact-sheet/index.d.mts",
+      "default": "./plugins/contact-sheet/index.mjs"
+    }
   },
   "files": [
+    "plugins/contact-sheet",
     "lib",
     "bin",
     "cordis.patch.yml",
@@ -62,7 +72,10 @@
     "vision",
     "dashscope",
     "prompt-optimization",
-    "media-workbench"
+    "media-workbench",
+    "mcp",
+    "comfyui",
+    "agent-tools"
   ],
   "license": "MIT",
   "engines": {
@@ -99,7 +112,9 @@
     }
   },
   "dependencies": {
-    "sharp": "^0.35.5"
+    "@modelcontextprotocol/server": "2.3.1",
+    "sharp": "^0.35.5",
+    "zod": "4.6.7"
   },
   "publishConfig": {
     "access": "public"

package/plugins/contact-sheet/index.d.mts

@@ -0,0 +1,4 @@
+import type { CorePlugin } from '@mokuyoaxis/dsh-iris/plugins';
+/** Optional contact-sheet operation and Web page. Installation does not enable or authorize either. */
+declare const plugin: CorePlugin;
+export default plugin;

package/plugins/contact-sheet/index.mjs

@@ -0,0 +1,33 @@
+import sharp from 'sharp';
+import { definePlugin } from '@mokuyoaxis/dsh-iris/plugins';
+
+/** Optional real business plugin. Uses public SDK and Sharp only; no filesystem or Core internals. */
+export default definePlugin({
+  manifest: { contractVersion: 0, id: 'community.contact-sheet', version: '0.1.0', compatibility: { min: '0.3.0-alpha.1', maxExclusive: '0.4.0' }, contributions: {
+    operations: [{ id: 'create', version: '0.1.0', title: '多图对照板', mode: 'writer',
+      commands: ['artifact.read', 'artifact.import'], artifactInputs: ['artifactIds'],
+      inputSchema: { type: 'object', properties: {
+        artifactIds: { type: 'array', minItems: 1, maxItems: 16, items: { type: 'string', pattern: '^artifact_[a-f0-9]{24}$' } },
+        columns: { type: 'integer', minimum: 1, maximum: 4 }, cellSize: { type: 'integer', minimum: 128, maximum: 512 }
+      }, required: ['artifactIds', 'columns', 'cellSize'], additionalProperties: false }
+    }],
+    pages: [{ id: 'board', version: '0.1.0', title: '多图对照板', entry: 'web/board.mjs', styles: ['web/board.css'] }]
+  } },
+  activate() {
+    return { operations: { async create(input, { core, signal }) {
+      const cells = [], columns = Math.min(input.columns, input.artifactIds.length), gap = 12;
+      for (const [index, id] of input.artifactIds.entries()) {
+        signal.throwIfAborted();
+        const image = await core.execute('artifact.read', { artifact_id: id });
+        const bytes = await sharp(Buffer.from(image.imageBase64, 'base64'), { limitInputPixels: 40_000_000 })
+          .rotate().resize(input.cellSize, input.cellSize, { fit: 'contain', background: '#ffffff' }).png().toBuffer();
+        cells.push({ input: bytes, left: gap + index % columns * (input.cellSize + gap), top: gap + Math.floor(index / columns) * (input.cellSize + gap) });
+      }
+      const width = columns * (input.cellSize + gap) + gap, height = Math.ceil(cells.length / columns) * (input.cellSize + gap) + gap;
+      const image = await sharp({ create: { width, height, channels: 3, background: '#f4f2f8' } }).composite(cells).png().toBuffer();
+      signal.throwIfAborted();
+      const result = await core.execute('artifact.import', { image_bytes: image });
+      return { artifactId: result.artifact.id, mediaType: 'image/png', width, height, count: input.artifactIds.length };
+    } } };
+  }
+});

package/plugins/contact-sheet/web/board.css

@@ -0,0 +1,14 @@
+.intro { margin-bottom:24px; }
+.intro h2 { font-size:24px; letter-spacing:-.6px; }
+.board-layout { display:grid; grid-template-columns:minmax(0,1fr) 240px; gap:20px; align-items:start; }
+.image-choices { display:grid; grid-template-columns:repeat(auto-fill,minmax(120px,1fr)); gap:12px; }
+.image-choice { position:relative; margin:0; padding:8px; background:var(--soft); border:1px solid var(--line); border-radius:10px; cursor:pointer; }
+.image-choice:has(input:checked) { border-color:var(--accent); background:var(--tint); }
+.image-choice input { position:absolute; top:10px; left:10px; min-height:0; }
+.image-choice img { display:block; width:100%; height:112px; object-fit:contain; }
+.image-choice span { display:block; text-align:center; margin-top:6px; }
+form button { display:block; width:100%; margin-top:12px; }
+.board-result { margin-top:24px; border-top:1px solid var(--line); padding-top:20px; }
+.board-result img { display:block; max-height:600px; margin:0 auto 16px; object-fit:contain; }
+.board-result a { display:inline-block; padding:9px 14px; border:1px solid var(--line); border-radius:8px; text-decoration:none; }
+@media(max-width:680px) { .board-layout { grid-template-columns:1fr; } form { order:-1; } }