@mokuyoaxis/dsh-iris 0.2.7 → 0.3.0-beta.1

package/lib/core-tasks.js

@@ -8,7 +8,10 @@ import { parseModelRef } from './models.js';
 import { providerErrorRecord } from './provider-contract.js';
 import { deriveLegacyStatus, semanticViolations } from './task-semantics.js';
 import { readDeliveryCache } from './core-delivery-cache.js';
-import { flowTaskBinding, readFlowRun, validFlowBinding } from './flow-store.js';
+import { flowStep, flowStepId, flowTaskBinding, flowCapability, readFlowRun, validFlowBinding } from './flow-store.js';
+import { checkedPluginDependency, assertPluginDependencyMatches, PluginContractError } from './plugin-contract.js';
+import { checkedNetworkRequirement, sameNetworkRequirement } from './network-policy.js';
+import { checkedNetworkRouteFact, checkedNetworkRouteRecord, networkRouteFactKey, MAX_NETWORK_ROUTE_FACTS } from './network-route-evidence.js';
 
 const STORE_DIR = 'task-store';
 const STORE_VERSION = 'v0';
@@ -103,7 +106,7 @@ function appendAttemptStage(attempt, key, reference) {
 
 function validateRecord(record, expectedId) {
   if (!record || typeof record !== 'object' || Array.isArray(record)
-      || record.schemaVersion !== 0 || record.semanticsVersion !== 2
+      || record.schemaVersion !== 0 || ![2, 3].includes(record.semanticsVersion)
       || record.id !== expectedId || !CAPABILITIES.has(record.capability)
       || !Array.isArray(record.attempts) || !Array.isArray(record.artifactIds)
       || !Number.isSafeInteger(record.revision) || record.revision < 1
@@ -111,8 +114,9 @@ function validateRecord(record, expectedId) {
       || (record.deliveryCache !== undefined && record.deliveryCache !== true)
       || (record.providerBinding !== undefined && !PROVIDER_BINDING.test(record.providerBinding))
       || (record.retriedFrom !== undefined && !TASK_ID.test(record.retriedFrom))
-      || (record.flowBinding !== undefined && (record.capability !== 'image' || !validFlowBinding(record.flowBinding)))
-      || (record.sourceArtifactId !== undefined && (record.capability !== 'image' || !ARTIFACT_ID.test(record.sourceArtifactId)))) {
+      || (record.flowBinding !== undefined && (!validFlowBinding(record.flowBinding)
+        || ({ edit: 'image', generate: 'image', speak: 'tts', transcribe: 'transcribe', video: 'video' })[record.flowBinding.stepId] !== record.capability))
+      || (record.sourceArtifactId !== undefined && (!['image', 'transcribe'].includes(record.capability) || !ARTIFACT_ID.test(record.sourceArtifactId)))) {
     fail('IRIS_TASK_INVALID', 'Task 记录结构无效');
   }
   if (record.attempts.some((attempt, index) => !attempt || !ATTEMPT_ID.test(attempt.id)
@@ -123,6 +127,36 @@ function validateRecord(record, expectedId) {
       || !validAttemptStageTimestamps(attempt.stageTimestamps))) {
     fail('IRIS_TASK_INVALID', 'Task Attempt 记录结构无效');
   }
+  try {
+    if (record.semanticsVersion === 3) {
+      checkedNetworkRequirement(record.networkRequirement);
+      if (!Array.isArray(record.networkRoutes) || record.networkRoutes.length > MAX_NETWORK_ROUTE_FACTS) throw new Error('routes');
+      for (const attempt of record.attempts) {
+        checkedNetworkRequirement(attempt.networkRequirement);
+        if (!sameNetworkRequirement(record.networkRequirement, attempt.networkRequirement)) throw new Error('attempt requirement');
+      }
+      const keys = new Set();
+      for (const route of record.networkRoutes) {
+        const { phase, firstAt, lastAt, requestCount, ...fact } = checkedNetworkRouteRecord(route);
+        if (!sameNetworkRequirement(record.networkRequirement, { schemaVersion: 1, configId: fact.configId, catalogId: fact.catalogId })) throw new Error('route requirement');
+        const attempt = fact.attemptId === undefined ? undefined : record.attempts.find(value => value.id === fact.attemptId);
+        if (fact.attemptId !== undefined && (!attempt || attempt.providerId !== fact.providerId)) throw new Error('route attempt');
+        const key = networkRouteFactKey(fact);
+        if (keys.has(key)) throw new Error('duplicate route');
+        keys.add(key);
+      }
+    } else if (record.networkRequirement !== undefined || record.networkRoutes !== undefined
+        || record.attempts.some(attempt => attempt.networkRequirement !== undefined)) throw new Error('legacy requirement');
+  } catch (_) { fail('IRIS_TASK_INVALID', 'Task 或 Attempt 的网络要求、版本或路线事实无效'); }
+  try {
+    for (const item of [record, ...record.attempts]) if (item.pluginDependency !== undefined) {
+      if (checkedPluginDependency(item.pluginDependency).kind !== 'providers' || !item.providerBinding) fail('IRIS_TASK_INVALID', 'Task 插件依赖需要 Provider 与端点绑定');
+    }
+    assertPluginDependencyMatches(record.pluginDependency, record.attempts.at(-1)?.pluginDependency);
+  } catch (error) {
+    if (!(error instanceof PluginContractError)) throw error;
+    fail('IRIS_TASK_INVALID', 'Task 或 Attempt 的插件依赖无效或不一致');
+  }
   const violations = semanticViolations(record);
   if (violations.length) fail('IRIS_TASK_INVALID', 'Task 事实语义冲突：' + violations.join(', '));
   return record;
@@ -178,11 +212,13 @@ function newTaskRecord(input, id) {
   const retriedFrom = input.retriedFrom === undefined ? undefined : String(input.retriedFrom);
   if (retriedFrom !== undefined && !TASK_ID.test(retriedFrom)) fail('IRIS_TASK_INPUT_INVALID', 'retriedFrom 必须是合法 Task ID');
   const sourceArtifactId = input.sourceArtifactId;
-  if (sourceArtifactId !== undefined && (capability !== 'image' || !ARTIFACT_ID.test(sourceArtifactId))) fail('IRIS_TASK_INPUT_INVALID', '改图 sourceArtifactId 必须是合法 Artifact ID');
+  if (sourceArtifactId !== undefined && (!['image', 'transcribe'].includes(capability) || !ARTIFACT_ID.test(sourceArtifactId))) fail('IRIS_TASK_INPUT_INVALID', '来源须为改图或转写的合法 Artifact ID');
   const now = new Date().toISOString();
+  const networkRequirement = input.networkRequirement === undefined ? undefined : checkedNetworkRequirement(input.networkRequirement);
   return {
     schemaVersion: 0,
-    semanticsVersion: 2,
+    semanticsVersion: networkRequirement ? 3 : 2,
+    ...(networkRequirement ? { networkRequirement, networkRoutes: [] } : {}),
     id,
     capability,
     status: 'running',
@@ -210,9 +246,11 @@ export function createCoreTask(dataRoot, input = {}) {
 /** Flow 只能接回自己持久预留的 Task；原有 Task 没有该字段，读取语义不变。 */
 export function assertFlowTaskMatches(task, run) {
   const providerId = parseModelRef(run.input.model_ref).providerId;
-  if (task.id !== run.edit.taskId || task.capability !== 'image' || task.sourceArtifactId !== run.source.artifactId
+  if (task.id !== flowStep(run).taskId || task.capability !== flowCapability(run) || task.sourceArtifactId !== run.source?.artifactId
       || !validFlowBinding(task.flowBinding) || task.flowBinding.runId !== run.id
+      || task.flowBinding.stepId !== flowStepId(run)
       || task.flowBinding.inputDigest !== run.inputDigest
+      || !sameNetworkRequirement(task.networkRequirement, run.networkRequirement)
       || task.attempts.some(attempt => attempt.providerId !== providerId
         || attempt.model !== run.input.model_ref || attempt.providerBinding !== run.providerBinding)
       || (task.attempts.length && (task.providerId !== providerId || task.modelRef !== run.input.model_ref || task.providerBinding !== run.providerBinding))) {
@@ -228,13 +266,13 @@ export function findFlowTask(dataRoot, run) {
       if (!stat.isDirectory() || stat.isSymbolicLink()) fail('IRIS_FLOW_TASK_CONFLICT', '流程 Task 目录不安全');
     } catch (error) { if (error.code !== 'ENOENT') throw error; }
   }
-  try { fs.lstatSync(taskFile(dataRoot, run.edit.taskId)); }
+  try { fs.lstatSync(taskFile(dataRoot, flowStep(run).taskId)); }
   catch (error) {
     if (error.code !== 'ENOENT') throw error;
-    if (run.edit.claimed) fail('IRIS_FLOW_TASK_CONFLICT', '流程已建立的 Task 丢失，禁止重建或重新生成');
+    if (flowStep(run).claimed) fail('IRIS_FLOW_TASK_CONFLICT', '流程已建立的 Task 丢失，禁止重建或重新生成');
     return null;
   }
-  return assertFlowTaskMatches(readRecord(dataRoot, run.edit.taskId), run);
+  return assertFlowTaskMatches(readRecord(dataRoot, flowStep(run).taskId), run);
 }
 
 /** 仅从已提交的 Run 读取 ID；排他发布，新旧身份均不能覆盖。 */
@@ -242,7 +280,8 @@ export function claimFlowTask(dataRoot, runId) {
   const run = readFlowRun(dataRoot, runId);
   const previous = findFlowTask(dataRoot, run);
   if (previous) return previous;
-  return writeRecord(dataRoot, { ...newTaskRecord({ capability: 'image', sourceArtifactId: run.source.artifactId }, run.edit.taskId),
+  return writeRecord(dataRoot, { ...newTaskRecord({ capability: flowCapability(run), sourceArtifactId: run.source?.artifactId,
+    ...(run.networkRequirement ? { networkRequirement: run.networkRequirement } : {}) }, flowStep(run).taskId),
     flowBinding: flowTaskBinding(run) }, true);
 }
 
@@ -255,9 +294,7 @@ export function inspectCoreTask(dataRoot, id) {
  * skipInvalid 只服务用户侧只读投影：单条损坏记录跳过并计入 dropped，
  * 其余记录照常返回；默认严格模式不变，损坏记录仍使整体读取失败。
  */
-export function listCoreTasks(dataRoot, { offset = 0, limit = 50, skipInvalid = false, status, capability, provider_id, model_ref, outcome, delivery_state } = {}) {
-  const start = Math.max(0, Math.trunc(Number(offset) || 0));
-  const size = Math.max(1, Math.min(200, Math.trunc(Number(limit) || 50)));
+function taskRecords(dataRoot, skipInvalid = false) {
   const directory = taskDirectory(dataRoot);
   let names;
   for (const managed of [
@@ -267,10 +304,7 @@ export function listCoreTasks(dataRoot, { offset = 0, limit = 50, skipInvalid =
     try { stat = fs.lstatSync(managed); }
     catch (error) {
       if (error?.code === 'ENOENT') {
-        return Object.freeze({
-          schemaVersion: 0, total: 0, offset: start, limit: size, dropped: 0,
-          tasks: Object.freeze([])
-        });
+        return { records: [], dropped: 0 };
       }
       fail('IRIS_TASK_STORE_INVALID', 'Task Store 无法读取');
     }
@@ -288,6 +322,20 @@ export function listCoreTasks(dataRoot, { offset = 0, limit = 50, skipInvalid =
       dropped += 1;
     }
   }
+  return { records, dropped };
+}
+
+/** Strict single-pass admission view, including pending intents after a crash. No mutation or pagination rescan. */
+export function coreRemoteTaskIdentities(dataRoot) {
+  return taskRecords(dataRoot).records.filter(task => !['succeeded', 'failed', 'canceled'].includes(task.outcome)
+    && (['accepted', 'unknown'].includes(task.acceptance) || task.phase === 'submitting' && task.attempts.length))
+    .map(task => ({ providerId: task.providerId, modelRef: task.modelRef }));
+}
+
+export function listCoreTasks(dataRoot, { offset = 0, limit = 50, skipInvalid = false, status, capability, provider_id, model_ref, outcome, delivery_state } = {}) {
+  const start = Math.max(0, Math.trunc(Number(offset) || 0));
+  const size = Math.max(1, Math.min(200, Math.trunc(Number(limit) || 50)));
+  const { records, dropped } = taskRecords(dataRoot, skipInvalid);
   records.sort((a, b) => String(b.updatedAt).localeCompare(String(a.updatedAt)));
   const matches = records.filter(record => Object.entries({ status, capability, providerId: provider_id, modelRef: model_ref, outcome, deliveryState: delivery_state })
     .every(([field, value]) => value === undefined || record[field] === value));
@@ -302,13 +350,17 @@ export function beginCoreAttempt(dataRoot, taskId, fields = {}) {
   const providerId = String(fields.providerId || '').trim();
   const model = String(fields.model || '').trim();
   const parsed = parseModelRef(model);
+  const pluginDependency = fields.pluginDependency === undefined ? undefined : checkedPluginDependency(fields.pluginDependency);
+  const networkRequirement = fields.networkRequirement === undefined ? undefined : checkedNetworkRequirement(fields.networkRequirement);
   if (!providerId || !parsed || parsed.providerId !== providerId
       || (fields.providerBinding !== undefined && !PROVIDER_BINDING.test(fields.providerBinding))
-      || (fields.selectionReason !== undefined && !ATTEMPT_SELECTION_REASONS.has(fields.selectionReason))) {
+      || (fields.selectionReason !== undefined && !ATTEMPT_SELECTION_REASONS.has(fields.selectionReason))
+      || (pluginDependency && (pluginDependency.kind !== 'providers' || !fields.providerBinding))) {
     fail('IRIS_ATTEMPT_INPUT_INVALID', 'Attempt 的 providerId 与复合 model 必须一致');
   }
   let created;
   mutate(dataRoot, taskId, (task) => {
+    if (!sameNetworkRequirement(task.networkRequirement, networkRequirement)) fail('IRIS_NETWORK_REQUIREMENT_MISMATCH', '新 Attempt 必须保持原 Task 的网络要求，不会隐式升级或解除');
     if (task.acceptance === 'accepted' || task.acceptance === 'unknown') {
       fail('IRIS_TASK_RESUBMIT_FORBIDDEN', 'Task 已受理或受理未知，禁止创建新 Attempt');
     }
@@ -325,7 +377,9 @@ export function beginCoreAttempt(dataRoot, taskId, fields = {}) {
       startedAt: submitStartedAt,
       stageTimestamps: { queuedAt, submitStartedAt },
       ...(fields.selectionReason !== undefined ? { selectionReason: fields.selectionReason } : {}),
-      ...(fields.providerBinding !== undefined ? { providerBinding: fields.providerBinding } : {})
+      ...(fields.providerBinding !== undefined ? { providerBinding: fields.providerBinding } : {}),
+      ...(networkRequirement ? { networkRequirement } : {}),
+      ...(pluginDependency ? { pluginDependency } : {})
     };
     task.attempts.push(created);
     task.activeAttemptId = created.id;
@@ -333,6 +387,8 @@ export function beginCoreAttempt(dataRoot, taskId, fields = {}) {
     task.modelRef = model;
     if (created.providerBinding) task.providerBinding = created.providerBinding;
     else delete task.providerBinding;
+    if (created.pluginDependency) task.pluginDependency = created.pluginDependency;
+    else delete task.pluginDependency;
     task.phase = 'submitting';
     task.acceptance = 'none';
     task.watchState = 'idle';
@@ -346,6 +402,37 @@ export function beginCoreAttempt(dataRoot, taskId, fields = {}) {
   return Object.freeze(clone(created));
 }
 
+/** Persist before dispatch. A record proves an attempted route, never acceptance or public IP. */
+export function recordCoreNetworkRoute(dataRoot, taskId, input) {
+  const supplied = checkedNetworkRouteFact(input);
+  return mutate(dataRoot, taskId, task => {
+    const requirement = { schemaVersion: 1, configId: supplied.configId, catalogId: supplied.catalogId };
+    if (task.semanticsVersion !== 3 || !sameNetworkRequirement(task.networkRequirement, requirement)) {
+      fail('IRIS_NETWORK_REQUIREMENT_MISMATCH', '路线事实必须属于原 Task 的已保存网络要求；不会隐式转换旧任务');
+    }
+    const attemptId = supplied.attemptId ?? task.activeAttemptId;
+    const fact = checkedNetworkRouteFact({ ...supplied, ...(attemptId ? { attemptId } : {}) });
+    const attempt = attemptId ? task.attempts.find(value => value.id === attemptId) : undefined;
+    if (attemptId && (!attempt || attempt.providerId !== fact.providerId)
+        || !attemptId && task.providerId !== undefined && task.providerId !== fact.providerId) {
+      fail('IRIS_NETWORK_ROUTE_INVALID', '路线事实与 Task 原 Provider 或 Attempt 不一致');
+    }
+    const key = networkRouteFactKey(fact);
+    const previous = task.networkRoutes.find(value => {
+      const { phase, firstAt, lastAt, requestCount, ...identity } = value;
+      return networkRouteFactKey(identity) === key;
+    });
+    const now = timestampAfter(task.updatedAt, previous?.lastAt);
+    if (previous) {
+      if (previous.requestCount === Number.MAX_SAFE_INTEGER) fail('IRIS_NETWORK_ROUTE_LIMIT', '路线事实计数已超出支持范围，停止派发');
+      previous.requestCount++; previous.lastAt = now;
+    } else {
+      if (task.networkRoutes.length === MAX_NETWORK_ROUTE_FACTS) fail('IRIS_NETWORK_ROUTE_LIMIT', 'Task 不同路线事实已达128项，停止派发并保留历史');
+      task.networkRoutes.push({ ...fact, phase: 'dispatch_started', firstAt: now, lastAt: now, requestCount: 1 });
+    }
+  });
+}
+
 export function recordCoreAttemptResult(dataRoot, taskId, snapshot) {
   return mutate(dataRoot, taskId, (task) => {
     const attempt = task.attempts.find((item) => item.id === snapshot?.id);
@@ -519,7 +606,7 @@ export function failCoreDelivery(dataRoot, taskId, error) {
     task.phase = 'terminal';
     task.watchState = 'idle';
     task.deliveryState = 'failed';
-    task.lastError = safeError(error, { stage: 'download', category: 'local_io', acceptance: 'accepted' });
+    task.lastError = safeError(error, { stage: 'download', category: error?.category || 'local_io', acceptance: 'accepted' });
     task.finishedAt = new Date().toISOString();
   });
 }
@@ -599,6 +686,11 @@ export function recoverCoreTask(dataRoot, taskId) {
       });
     });
   }
+  // 拒绝受理已落盘、最终失败尚未落盘时，只收口原 Attempt；恢复绝不接着试下一候选。
+  if (current.phase === 'terminal' && current.acceptance === 'not_accepted' && current.outcome === 'none') {
+    return finalizeCoreNoAcceptance(dataRoot, taskId,
+      current.lastError || '供应商明确未受理；提交在最终状态落盘前中断');
+  }
   if (current.outcome === 'succeeded' && ['pending', 'downloading'].includes(current.deliveryState)) {
     return mutate(dataRoot, taskId, (task) => {
       task.phase = 'terminal';

package/lib/core-writer-lease.js

@@ -44,6 +44,22 @@ function optionalRecord(file) {
   catch (error) { if (error?.code === 'ENOENT') return null; throw error; }
 }
 
+/** Recognize only an unpublished preparation from a proven-dead owner. Keep it
+ * as evidence: initialization may ignore this metadata, but never removes it. */
+export function isAbandonedWriterPreparation(root, name) {
+  const match = /^\.iris-runtime-writer-v0\.owner\.json\.prepare-([1-9][0-9]*)-[a-f0-9]{12}$/.exec(name);
+  if (!match) return false;
+  try {
+    const file = path.join(root, name), stat = fs.lstatSync(file);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1) return false;
+    const owner = checkedOwner(readRecord(file).value);
+    return String(owner.pid) === match[1] && writerOwnerStatus(owner.pid) === 'missing';
+  } catch (error) {
+    if (error.code && !['ENOENT', 'EACCES', 'EPERM'].includes(error.code)) throw error;
+    return false;
+  }
+}
+
 /** 完整私有记录先在根中准备，再以 hard link 原子发布；已有目标绝不覆盖。 */
 export function publishLeaseRecord(root, target, value) {
   const prepared = privateSibling(path.join(root, WRITER_INTENT_FILE), 'prepare');

package/lib/creation-request-store.js

@@ -3,8 +3,11 @@ import crypto from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
 import { atomicCreatePrivate, atomicWritePrivate } from './private-storage.js';
-import { inspectFlowRoot, validateFlowCreation } from './flow-store.js';
-import { WRITER_LEASE_DIR, WRITER_INTENT_FILE } from './core-writer-lease.js';
+import { validateFlowCreation } from './flow-store.js';
+import { inspectLocalRequestRoot, initializeLocalRequestRoot, requestDirectory } from './local-request-root.js';
+import { normalizeComfyParameters } from './comfyui-workflow.js';
+import { AUDIO_TYPES, MAX_AUDIO_INPUT_BYTES, normalizeAudioFlowInput } from './audio-flow-input.js';
+import { VIDEO_RECIPE, normalizeVideoFlowInput } from './video-flow-input.js';
 
 const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/;
 const ID = /^req_[a-f0-9]{64}$/;
@@ -13,6 +16,8 @@ const SHA = /^[a-f0-9]{64}$/;
 const DIGEST = /^sha256:[a-f0-9]{64}$/;
 const TYPES = new Set(['image/png', 'image/jpeg', 'image/webp']);
 const MAX_IMAGE = 20 * 1024 * 1024;
+export const CREATION_KINDS = Object.freeze(['image-import', 'flow-create', 'generation-create', 'audio-import', 'speech-create', 'transcription-create', 'video-create']);
+export const isImportCreation = kind => ['image-import', 'audio-import'].includes(kind);
 const iso = value => typeof value === 'string' && Number.isFinite(Date.parse(value)) && new Date(value).toISOString() === value;
 const hash = value => crypto.createHash('sha256').update(value).digest('hex');
 const copy = value => structuredClone(value);
@@ -22,16 +27,6 @@ function keys(value, allowed, required = allowed) {
 }
 export function creationFail(code, message) { throw Object.assign(new Error(message), { code }); }
 const invalid = () => creationFail('IRIS_CREATION_STORE_INVALID', '创建请求区未知、损坏或尚未完整初始化');
-function directory(root, segments, create = false) {
-  let current = root;
-  for (const segment of segments) {
-    current = path.join(current, segment);
-    if (create && !fs.existsSync(current)) fs.mkdirSync(current, { mode: 0o700 });
-    const stat = fs.lstatSync(current);
-    if (!stat.isDirectory() || stat.isSymbolicLink()) invalid();
-  }
-  return current;
-}
 function jsonFile(file) {
   const stat = fs.lstatSync(file);
   if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 128 * 1024) invalid();
@@ -39,54 +34,29 @@ function jsonFile(file) {
 }
 
 export function inspectCreationRoot(root, { allowAbsent = false } = {}) {
-  let base;
-  try { base = directory(root, ['creation-requests']); }
-  catch (error) {
-    if (error.code === 'ENOENT' && !fs.existsSync(path.join(root, 'creation-requests'))) {
-      if (allowAbsent) return null;
-      creationFail('IRIS_CREATION_ROOT_REQUIRED', '请先在空的专用 Flow 根显式执行 api init');
-    }
-    if (error.code === 'ENOENT') invalid();
-    throw error;
-  }
-  try {
-    if (fs.readdirSync(base).some(name => name !== 'v0')) invalid();
-    const version = directory(root, ['creation-requests', 'v0']);
-    if (fs.readdirSync(version).some(name => !['root.json', 'requests'].includes(name)
-        && !/^root\.json\.tmp-[1-9][0-9]*-[a-f0-9]{12}$/.test(name))) invalid();
-    const marker = jsonFile(path.join(version, 'root.json'));
-    if (!keys(marker, ['schemaVersion', 'kind', 'rootId', 'createdAt']) || marker.schemaVersion !== 0
-        || marker.kind !== 'iris-creation-requests' || !UUID.test(marker.rootId) || !iso(marker.createdAt)) invalid();
-    directory(root, ['creation-requests', 'v0', 'requests']);
-    return copy(marker);
-  } catch (error) { if (error.code === 'ENOENT') invalid(); throw error; }
+  return inspectLocalRequestRoot(root, { allowAbsent });
 }
 
 export function initializeCreationRoot(root) {
-  const existing = inspectCreationRoot(root, { allowAbsent: true });
-  if (existing) { listCreationRequests(root); return existing; }
-  inspectFlowRoot(root);
-  if (fs.readdirSync(root).some(name => !['flow-store', WRITER_LEASE_DIR, WRITER_INTENT_FILE].includes(name))
-      || fs.readdirSync(path.join(root, 'flow-store')).some(name => name !== 'v0')
-      || fs.readdirSync(path.join(root, 'flow-store/v0')).some(name => !['root.json', 'runs'].includes(name))
-      || fs.readdirSync(path.join(root, 'flow-store/v0/runs')).length) {
-    creationFail('IRIS_CREATION_ROOT_NOT_EMPTY', '请求区仅在新的空 Flow 根初始化；不转换已有创作数据');
-  }
-  const marker = { schemaVersion: 0, kind: 'iris-creation-requests', rootId: crypto.randomUUID(), createdAt: new Date().toISOString() };
-  directory(root, ['creation-requests', 'v0', 'requests'], true);
-  atomicCreatePrivate(path.join(root, 'creation-requests/v0/root.json'), JSON.stringify(marker, null, 2) + '\n');
-  return copy(marker);
+  const marker = initializeLocalRequestRoot(root, 0);
+  listCreationRequests(root);
+  return marker;
 }
 
 export function creationRequestId(marker, kind, key) {
   if (!UUID.test(key)) creationFail('IRIS_CREATION_KEY_INVALID', 'Idempotency-Key 须为单个小写 UUIDv4');
-  if (!['image-import', 'flow-create'].includes(kind)) throw new TypeError('未知本地创建类型');
+  if (!CREATION_KINDS.includes(kind)) throw new TypeError('未知本地创建类型');
   return 'req_' + hash(JSON.stringify(['creation-requests/v0', marker.rootId, kind, key]));
 }
 export function creationInputDigest(kind, input) {
-  return 'sha256:' + hash(JSON.stringify(kind === 'image-import'
-    ? ['image-import/v0', input.mediaType, input.size, input.sha256]
-    : ['flow-create/v0', 'image-edit/v0', input.source_artifact_id, input.model_ref, input.prompt, input.size ?? null, 1]));
+  if (kind === 'video-create') return 'sha256:' + hash(JSON.stringify(['video-create/v0', normalizeVideoFlowInput(input)]));
+  if (['speech-create', 'transcription-create'].includes(kind)) return 'sha256:' + hash(JSON.stringify([kind + '/v0',
+    normalizeAudioFlowInput(kind === 'speech-create' ? 'speech/v0' : 'transcribe/v0', input)]));
+  return 'sha256:' + hash(JSON.stringify(isImportCreation(kind)
+    ? [kind + '/v0', input.mediaType, input.size, input.sha256]
+    : kind === 'generation-create' ? ['generation-create/v0', 'image-generate/v0', input.model_ref, input.prompt, input.size ?? null, 1,
+      ...(input.workflow_parameters !== undefined ? [['comfyui-parameters/v0', normalizeComfyParameters(input.workflow_parameters)]] : [])]
+      : ['flow-create/v0', 'image-edit/v0', input.source_artifact_id, input.model_ref, input.prompt, input.size ?? null, 1]));
 }
 function validate(record, id, marker) {
   if (!keys(record, ['schemaVersion', 'id', 'rootId', 'kind', 'inputDigest', 'createdAt', 'intent', 'state', 'completedAt', 'result'],
@@ -96,14 +66,20 @@ function validate(record, id, marker) {
       || !['prepared', 'succeeded'].includes(record.state)) invalid();
   const intent = record.intent;
   let expectedResult, expectedDigest;
-  if (record.kind === 'image-import') {
+  if (isImportCreation(record.kind)) {
+    const audio = record.kind === 'audio-import';
     if (!keys(intent, ['artifactId', 'mediaType', 'size', 'sha256', 'metadata', 'createdAt'])
-        || !ARTIFACT.test(intent.artifactId) || !TYPES.has(intent.mediaType) || !SHA.test(intent.sha256)
-        || !Number.isSafeInteger(intent.size) || intent.size < 1 || intent.size > MAX_IMAGE
-        || !keys(intent.metadata, ['width', 'height']) || !['width', 'height'].every(key => Number.isSafeInteger(intent.metadata[key]) && intent.metadata[key] > 0)) invalid();
+        || audio && ![3, 4].includes(marker.schemaVersion)
+        || !ARTIFACT.test(intent.artifactId) || !(audio ? Object.hasOwn(AUDIO_TYPES, intent.mediaType) : TYPES.has(intent.mediaType)) || !SHA.test(intent.sha256)
+        || !Number.isSafeInteger(intent.size) || intent.size < 1 || intent.size > (audio ? MAX_AUDIO_INPUT_BYTES : MAX_IMAGE)
+        || (audio ? !keys(intent.metadata, []) : !keys(intent.metadata, ['width', 'height']) || !['width', 'height'].every(key => Number.isSafeInteger(intent.metadata[key]) && intent.metadata[key] > 0))) invalid();
     expectedDigest = creationInputDigest(record.kind, intent);
     expectedResult = { artifactId: intent.artifactId };
-  } else if (record.kind === 'flow-create') {
+  } else if (['flow-create', 'generation-create', 'speech-create', 'transcription-create', 'video-create'].includes(record.kind)) {
+    if (record.kind === 'video-create' ? marker.schemaVersion !== 4 || intent.recipe !== VIDEO_RECIPE
+      : record.kind === 'generation-create' ? ![2, 3, 4].includes(marker.schemaVersion) || intent.recipe !== 'image-generate/v0'
+      : record.kind === 'flow-create' ? intent.recipe !== undefined
+        : ![3, 4].includes(marker.schemaVersion) || intent.recipe !== (record.kind === 'speech-create' ? 'speech/v0' : 'transcribe/v0')) invalid();
     try { validateFlowCreation(intent); } catch (_) { invalid(); }
     expectedDigest = creationInputDigest(record.kind, intent.input);
     expectedResult = { runId: intent.runId };
@@ -118,7 +94,7 @@ function validate(record, id, marker) {
 export function readCreationRequest(root, id, marker = inspectCreationRoot(root)) {
   if (!ID.test(id)) invalid();
   let record;
-  try { record = jsonFile(path.join(root, 'creation-requests/v0/requests', id + '.json')); }
+  try { record = jsonFile(path.join(requestDirectory(root, marker, 'requests'), id + '.json')); }
   catch (error) { if (error.code === 'ENOENT') return null; throw error; }
   return copy(validate(record, id, marker));
 }
@@ -126,7 +102,7 @@ export function listCreationRequests(root) {
   const marker = inspectCreationRoot(root, { allowAbsent: true });
   if (!marker) return [];
   const records = [];
-  for (const name of fs.readdirSync(path.join(root, 'creation-requests/v0/requests'))) {
+  for (const name of fs.readdirSync(requestDirectory(root, marker, 'requests'))) {
     if (/^req_[a-f0-9]{64}\.json\.tmp-[1-9][0-9]*-[a-f0-9]{12}$/.test(name)) continue;
     if (!/^req_[a-f0-9]{64}\.json$/.test(name)) invalid();
     const record = readCreationRequest(root, name.slice(0, -5), marker);
@@ -138,22 +114,23 @@ export function listCreationRequests(root) {
 export function publishCreationRequest(root, record) {
   const marker = inspectCreationRoot(root);
   validate(record, record.id, marker);
-  atomicCreatePrivate(path.join(root, 'creation-requests/v0/requests', record.id + '.json'), JSON.stringify(record, null, 2) + '\n');
+  atomicCreatePrivate(path.join(requestDirectory(root, marker, 'requests'), record.id + '.json'), JSON.stringify(record, null, 2) + '\n');
   return copy(record);
 }
 export function completeCreationRequest(root, record) {
   const current = readCreationRequest(root, record.id);
   if (!current || JSON.stringify(current) !== JSON.stringify(record) || current.state !== 'prepared') invalid();
   const finished = { ...record, state: 'succeeded', completedAt: new Date().toISOString(),
-    result: record.kind === 'image-import' ? { artifactId: record.intent.artifactId } : { runId: record.intent.runId } };
-  validate(finished, record.id, inspectCreationRoot(root));
-  atomicWritePrivate(path.join(root, 'creation-requests/v0/requests', record.id + '.json'), JSON.stringify(finished, null, 2) + '\n');
+    result: isImportCreation(record.kind) ? { artifactId: record.intent.artifactId } : { runId: record.intent.runId } };
+  const marker = inspectCreationRoot(root);
+  validate(finished, record.id, marker);
+  atomicWritePrivate(path.join(requestDirectory(root, marker, 'requests'), record.id + '.json'), JSON.stringify(finished, null, 2) + '\n');
   return copy(finished);
 }
 export function creationReferences(root) {
   return listCreationRequests(root).filter(record => record.state === 'prepared').map(record => ({
-    requestId: record.id, taskIds: record.kind === 'flow-create' ? [record.intent.taskId] : [],
-    artifactIds: record.kind === 'image-import' ? [record.intent.artifactId]
-      : [record.intent.source.artifactId, record.intent.comparisonArtifactId]
+    requestId: record.id, taskIds: !isImportCreation(record.kind) ? [record.intent.taskId] : [],
+    artifactIds: isImportCreation(record.kind) ? [record.intent.artifactId]
+      : [record.intent.source?.artifactId, record.intent.comparisonArtifactId].filter(Boolean)
   }));
 }

package/lib/doctor.js

@@ -224,9 +224,9 @@ export async function doctor(options = {}) {
   const nodeVersion = options.nodeVersion || process.versions.node;
   const checks = [];
 
-  checks.push(atLeast(parseVersion(nodeVersion), [22, 0, 0])
+  checks.push(atLeast(parseVersion(nodeVersion), [22, 1, 0])
     ? result('node', 'ok', `Node.js ${nodeVersion}`)
-    : result('node', 'error', `Node.js ${nodeVersion} 低于最低要求 22.0.0`, '升级 Node.js 后再运行 Iris。'));
+    : result('node', 'error', `Node.js ${nodeVersion} 低于最低要求 22.1.0`, '升级 Node.js 后再运行 Iris。'));
   try { await sharpLoader(); checks.push(result('sharp', 'ok', 'sharp 可加载')); }
   catch (_) { checks.push(result('sharp', 'error', 'sharp 无法加载', '在当前平台重新安装 @mokuyoaxis/dsh-iris，确认 sharp 有可用的 ARM64/系统构建。')); }
   for (const command of ['ffmpeg', 'ffprobe']) {

package/lib/dsh-core-adapter.js

@@ -2,10 +2,11 @@
 
 import fs from 'node:fs';
 import path from 'node:path';
+import { finished } from 'node:stream/promises';
 import { runtimeProviders, assignments, irisHome, recordRateLimit, recordAvailability, refreshAutomaticDirectories } from './config.js';
 import { withDshProviderConfig } from './dsh-provider-config.js';
 import { createCommandService } from './command-service.js';
-import { createCoreArtifact, inspectCoreArtifact, listCoreArtifacts, listCoreArtifactMetadata, readCoreArtifactBytes } from './core-artifacts.js';
+import { createCoreArtifact, inspectCoreArtifact, listCoreArtifactMetadata, readCoreArtifactBytes, readCoreArtifactStream } from './core-artifacts.js';
 import { createApplicationRuntime } from './application-runtime.js';
 import { normalizeCoreOptions } from './core-contract.js';
 import { readSummaryFrames } from './summary-input.js';
@@ -375,7 +376,9 @@ export function createDshRuntime({ dataRoot: requestedRoot, getHost = () => unde
           ? { text: input.text, ...(input.voice !== undefined ? { voice: input.voice } : {}) }
           : input.audio_url !== undefined
             ? { audio_url: input.audio_url }
-            : { prompt: input.prompt, ...(input.sourceArtifactId !== undefined ? { source_artifact_id: input.sourceArtifactId } : {}) },
+            : { prompt: input.prompt,
+              ...(input.videoMode !== undefined ? { video_mode: input.videoMode } : {}),
+              ...(input.sourceArtifactId !== undefined ? { source_artifact_id: input.sourceArtifactId } : {}) },
         model_ref: input.modelRef,
         confirm_billing: input.confirmBilling
       });
@@ -503,7 +506,7 @@ export function createDshRuntime({ dataRoot: requestedRoot, getHost = () => unde
     return true;
   }
 
-  /** DSH 启动时只接管仍有明确远端受理证据的 Core 图片 Task。 */
+  /** DSH 启动时恢复本地拒绝终态；仅为可查询且有远端受理证据的 Task 继续盯守。 */
   async function resumeProviderTaskWatchesForDsh(options = {}) {
     options.signal.throwIfAborted();
     if (!fs.existsSync(dataRoot)) return Object.freeze([]);
@@ -518,11 +521,14 @@ export function createDshRuntime({ dataRoot: requestedRoot, getHost = () => unde
     }));
     const resumed = [];
     for (const original of records) {
-      if (!WATCHABLE_CAPABILITIES.has(original.capability)) continue;
+      const incompleteRejection = original.phase === 'terminal'
+        && original.acceptance === 'not_accepted' && original.outcome === 'none';
+      if (!WATCHABLE_CAPABILITIES.has(original.capability) && !incompleteRejection) continue;
       try {
         options.signal.throwIfAborted();
         if (observableProviderTask(original)) await configuredAdapterForTask(original, options.signal);
         const needsRecovery = (original.phase === 'submitting' && original.acceptance === 'none')
+          || incompleteRejection
           || original.cancelState === 'requested'
           || (original.outcome === 'succeeded' && ['pending', 'downloading'].includes(original.deliveryState))
           || (original.acceptance === 'accepted' && original.watchState === 'active');
@@ -597,6 +603,7 @@ export function createDshRuntime({ dataRoot: requestedRoot, getHost = () => unde
         schemaVersion: 0, available: false, readOnly: true, degraded: false, droppedTasks: 0,
         tasks: Object.freeze({ total: 0, recent: Object.freeze([]) }),
         artifacts: Object.freeze({ total: 0, recent: Object.freeze([]) }),
+        activity: Object.freeze({ running: 0, paused: 0, attention: 0, truncated: false, recent: Object.freeze([]) }),
         userTasks: Object.freeze([])
       }));
     }
@@ -604,25 +611,39 @@ export function createDshRuntime({ dataRoot: requestedRoot, getHost = () => unde
       const tasks = listCoreTasks(dataRoot, { limit: options.limit || 12, skipInvalid: true });
       let artifacts = { total: 0, artifacts: Object.freeze([]) };
       let artifactDegraded = false;
-      try { artifacts = listCoreArtifacts(dataRoot, { limit: options.limit || 12 }); }
+      try {
+        const metadata = listCoreArtifactMetadata(dataRoot), limit = Math.max(1, Math.min(200, Number(options.limit) || 12));
+        artifacts = { total: metadata.artifacts.length, artifacts: metadata.artifacts.slice(0, limit),
+          dropped: metadata.dropped, legacySkipped: metadata.legacySkipped };
+        artifactDegraded = metadata.dropped > 0;
+      }
       catch (_) { artifactDegraded = true; }
+      const records = listAllCoreTaskRecords(dataRoot), prefs = readCoreAttentionPrefs();
       const userTasks = decorateCoreUserRows(
         tasks.tasks.map((task) => projectCoreTaskUserRow(task, artifacts.artifacts)),
-        listAllCoreTaskRecords(dataRoot),
-        readCoreAttentionPrefs()
+        records, prefs
       );
+      const visible = decorateCoreUserRows(records.map(task => projectCoreTaskUserRow(task, artifacts.artifacts)), records, prefs)
+        .filter(row => !row.suppressed && row.disposition !== 'hidden' && !row.historical);
+      const running = visible.filter(row => row.userState === 'running');
+      const paused = visible.filter(row => row.userState === 'observation_paused');
+      const attention = visible.filter(row => ['attention', 'delivery_failed'].includes(row.userState) && row.disposition !== 'acknowledged');
       return Object.freeze({
         schemaVersion: 0, available: true, readOnly: true,
         degraded: artifactDegraded || tasks.dropped > 0,
         droppedTasks: tasks.dropped,
         tasks: Object.freeze({ total: tasks.total, recent: tasks.tasks }),
-        artifacts: Object.freeze({ total: artifacts.total, recent: artifacts.artifacts }),
+        artifacts: Object.freeze({ total: artifacts.total, recent: artifacts.artifacts,
+          ...(artifacts.dropped ? { dropped: artifacts.dropped } : {}),
+          ...(artifacts.legacySkipped ? { legacySkipped: artifacts.legacySkipped } : {}) }),
+        activity: Object.freeze({ running: running.length, paused: paused.length, attention: attention.length,
+          truncated: records.length < tasks.total, recent: Object.freeze([...running, ...paused].slice(0, 10)) }),
         userTasks: Object.freeze(userTasks)
       });
     }), options.signal);
   }
 
-  /** bounded：全量扫描仅供自动静默派生；超界仍有界退出。 */
+  /** bounded：自动静默与活动摘要复用同一扫描；超界明确标注统计不完整。 */
   const SUCCESSOR_SCAN_LIMIT = 2000;
   function listAllCoreTaskRecords(dataRoot) {
     const all = [];
@@ -687,6 +708,36 @@ export function createDshRuntime({ dataRoot: requestedRoot, getHost = () => unde
     }
   }
 
+  /** Hold the reader and DSH lifetime until the media stream has closed; HEAD only hashes. */
+  async function streamCoreArtifactMediaForDsh(artifactId, consume, options = {}) {
+    const id = String(artifactId || '').trim();
+    if (!/^artifact_[a-f0-9]{24}$/.test(id) || !fs.existsSync(dataRoot)) {
+      throw new DshCoreAdapterError('IRIS_DSH_ARTIFACT_NOT_FOUND', 'Core Artifact 不存在');
+    }
+    try {
+      return await withReader(runtime => runtime.run('inspect', async ({ dataRoot, signal }) => {
+        const result = options.headOnly ? { artifact: inspectCoreArtifact(dataRoot, id) }
+          : readCoreArtifactStream(dataRoot, id, { signal });
+        const closed = result.stream && finished(result.stream, { cleanup: true });
+        void closed?.catch(() => {}); // The consumer reports stream errors; observe them during setup too.
+        try {
+          const type = result.artifact.mediaType;
+          if (!type.startsWith('image/') && !type.startsWith('audio/') && !['video/mp4', 'video/webm', 'text/plain', 'application/json'].includes(type)) {
+            throw new DshCoreAdapterError('IRIS_DSH_ARTIFACT_UNSUPPORTED', '当前 DSH 媒体预览不支持此 Artifact 类型');
+          }
+          return await consume(result);
+        } finally {
+          result.stream?.destroy();
+          await closed?.catch(() => {}); // Drain the handle even after an early response or cancellation.
+        }
+      }), options.signal);
+    } catch (error) {
+      if (options.signal?.aborted || error?.code === 'IRIS_APP_CLOSED' || error?.code === 'IRIS_CORE_LEASE_INVALID') throw error;
+      if (error instanceof DshCoreAdapterError) throw error;
+      throw new DshCoreAdapterError('IRIS_DSH_ARTIFACT_NOT_FOUND', 'Core Artifact 不存在');
+    }
+  }
+
   /**
    * 将已经 ready 的 Core 图片投影为 DSH attachment blocks。重复调用只重复宿主展示，
    * 不修改 Task/Artifact，也不触发 submit、poll 或 download。
@@ -769,6 +820,7 @@ export function createDshRuntime({ dataRoot: requestedRoot, getHost = () => unde
     maintainWorkbenchForDsh: (...args) => invoke(maintainWorkbenchForDsh, 2, args),
     coreSnapshotForDsh: (...args) => invoke(coreSnapshotForDsh, 0, args),
     readCoreArtifactMediaForDsh: (...args) => invoke(readCoreArtifactMediaForDsh, 1, args),
+    streamCoreArtifactMediaForDsh: (...args) => invoke(streamCoreArtifactMediaForDsh, 2, args),
     projectCoreTaskForDsh: (...args) => invoke(projectCoreTaskForDsh, 2, args),
   });
 }