@mokuyoaxis/dsh-iris 0.3.0-alpha.1 → 0.3.0-beta.1

package/lib/local-api.js

@@ -8,7 +8,8 @@ import { createCoreRuntime } from './core-runtime.js';
 import { inspectFlowRoot, listFlowRuns, readFlowRun } from './flow-store.js';
 import { inspectCoreArtifactMetadata, readCoreArtifactBytes, listCoreArtifacts } from './core-artifacts.js';
 import { isPluginSourceImage } from './plugin-source-image.js';
-import { imageCandidatesFromCatalog, ttsCandidatesFromCatalog, transcribeCandidatesFromCatalog, loadProviderCatalog, providerTaskBinding } from './provider-catalog.js';
+import { imageCandidatesFromCatalog, videoCandidatesFromCatalog, ttsCandidatesFromCatalog, transcribeCandidatesFromCatalog, loadProviderCatalog, providerTaskBinding } from './provider-catalog.js';
+import { videoModelSupportsMode } from './video-input.js';
 import { AUDIO_TYPES, MAX_AUDIO_INPUT_BYTES, isAudioRecipe } from './audio-flow-input.js';
 import { CREATION_KINDS } from './creation-request-store.js';
 import { supportsImageEdit } from './provider-protocol.js';
@@ -33,9 +34,15 @@ import { CONNECTION_TEMPLATE_EXAMPLE } from './connection-template.js';
 import { checkedBridgeCapabilities, DEFAULT_BRIDGE_CAPABILITIES } from './core-bridge-selection.js';
 import { createCoreCapabilityCatalog, projectCoreSessionOperations, CORE_CAPABILITY_GROUPS } from './core-capability-catalog.js';
 import { MCP_CONNECTION_PRESETS, MCP_CONFIG_FORMATS } from './mcp-delivery.js';
+import { VIDEO_RECIPE, VIDEO_TYPES, MAX_VIDEO_BYTES } from './video-flow-input.js';
 import { checkedPluginSelection, hasPluginSelection } from './plugin-selection.js';
 import { readAllOperations, projectOperation } from './operation-store.js';
 import { createWorkbenchAuth, WorkbenchAuthError } from './workbench-auth.js';
+import { createProviderNetworkManager } from './network-routing.js';
+import { providerNetworkRequirement } from './network-policy.js';
+import { networkManagementSettings, manageNetworkResources, NETWORK_MANAGEMENT_ACTIONS } from './network-management.js';
+import { networkDoctor, probeNetworkRoute } from './network-doctor.js';
+import { createMediaScheduler } from './media-scheduler.js';
 
 export const MAX_LOCAL_API_IMAGE_BYTES = 64 * 1024 * 1024;
 const RUN = /^run_[a-f0-9]{24}$/;
@@ -54,16 +61,25 @@ function fail(code, message, status) { throw new LocalApiError(code, message, st
 function httpError(error) {
   if (error instanceof LocalApiError) return error;
   if (error instanceof WorkbenchAuthError) return new LocalApiError(error.code, error.message, error.status);
+  if (error instanceof ProviderContractError && error.category === 'invalid_request') return new LocalApiError('IRIS_CONFIG_INPUT_INVALID',
+    '供应商配置或参数无效，请核对所选协议要求的 API 根地址、模型和参数', 400);
+  if (/^IRIS_NETWORK_/.test(error?.code || '')) return new LocalApiError(error.code, error.message, 409);
   if (/^IRIS_PLUGIN_/.test(error?.code || '')) return new LocalApiError(error.code,
     error.code === 'IRIS_PLUGIN_INPUT_INVALID' ? '业务输入不符合当前插件参数要求' : '插件业务未授权、缺失或版本不一致；请读取原 Operation 并核对准确插件版本',
     error.code === 'IRIS_PLUGIN_INPUT_INVALID' ? 400 : error.code === 'IRIS_PLUGIN_OPERATION_DENIED' ? 403 : 409);
   if (['IRIS_CONFIG_CHANGED', 'IRIS_CONFIG_BUSY'].includes(error?.code)) return new LocalApiError(error.code,
     '配置已变化或有其他写入，请保留草稿并重新读取后核对', 409);
+  if (error?.code === 'IRIS_PROVIDER_CREDENTIAL_UNAVAILABLE') return new LocalApiError(error.code,
+    '环境凭据未就绪，请由所有者检查 Core 进程中的指定变量；不会改绑或重新提交任务', 409);
+  if (error?.providerCode === 'IRIS_PROVIDER_DIRECTORY_CREDENTIALS') return new LocalApiError(error.providerCode,
+    '上游模型目录包含认证内容，已拒绝读取与保存；请检查该服务的目录响应', 502);
   if (error?.code === 'IRIS_CONFIG_INPUT_INVALID' || error?.code === 'IRIS_FUNCTION_POLICY_INVALID') return new LocalApiError('IRIS_CONFIG_INPUT_INVALID',
     '设置无效，请检查地址、协议、模型用途和密钥动作', 400);
   if (error?.code === 'IRIS_OPERATION_NOT_FOUND') return new LocalApiError(error.code, 'Operation 不存在', 404);
   if (error?.code === 'IRIS_OPERATION_KEY_CONFLICT') return new LocalApiError(error.code, '该 UUID 已绑定其他业务、输入或依赖，请先查询原操作', 409);
   if (error?.code === 'IRIS_OPERATION_QUEUE_FULL') return new LocalApiError(error.code, '活动操作已达上限，本次未接收', 429);
+  if (/^IRIS_SCHEDULER_(?:QUEUE_FULL|QUEUE_TIMEOUT)$/.test(error?.code || '')) return new LocalApiError(error.code, error.message, 429);
+  if (['IRIS_APP_OPERATION_BUSY', 'IRIS_PROVIDER_TASK_BUSY'].includes(error?.code)) return new LocalApiError(error.code, '原 Run 或 Task 正在执行，请查询原操作', 409);
   if (error?.code === 'IRIS_OPERATION_INPUT_INVALID' || error?.code === 'IRIS_OPERATION_KEY_INVALID') return new LocalApiError(error.code, 'Operation 输入无效', 400);
   if (/^IRIS_CONNECTION_/.test(error?.code || '')) {
     const status = error.code === 'IRIS_CONNECTION_AUTH_REQUIRED' ? 401 : error.code === 'IRIS_CONNECTION_CAPABILITY_DENIED' ? 403
@@ -84,7 +100,7 @@ function httpError(error) {
   if (error?.code === 'IRIS_CREATION_KEY_CONFLICT') return new LocalApiError('IRIS_API_KEY_CONFLICT', '该 Key 已绑定其他输入', 409);
   if (error?.code === 'IRIS_CREATION_NOT_FOUND') return new LocalApiError('IRIS_API_NOT_FOUND', '该实例中没有此创建请求', 404);
   if (['IRIS_CREATION_KEY_INVALID', 'IRIS_CREATION_INPUT_INVALID', 'IRIS_GENERATION_INPUT_INVALID',
-    'IRIS_IMAGE_IMPORT_INVALID', 'IRIS_IMAGE_EDIT_INPUT_INVALID', 'IRIS_FLOW_INPUT_INVALID', 'IRIS_COMFYUI_PARAMETERS_INVALID'].includes(error?.code)) {
+    'IRIS_IMAGE_IMPORT_INVALID', 'IRIS_IMAGE_EDIT_INPUT_INVALID', 'IRIS_FLOW_INPUT_INVALID', 'IRIS_VIDEO_FLOW_INPUT_INVALID', 'IRIS_COMFYUI_PARAMETERS_INVALID'].includes(error?.code)) {
     return new LocalApiError('IRIS_API_INPUT_INVALID', '创作输入或静态图片无效，请检查来源、模型和参数', 400);
   }
   if (error?.code === 'IRIS_CREATION_MEDIA_MISMATCH') return new LocalApiError('IRIS_API_MEDIA_UNSUPPORTED', '图片真实格式与 Content-Type 不一致', 415);
@@ -114,7 +130,8 @@ function reportUnexpected(error, requestId) {
   // Keep call sites for diagnosis, without the potentially private exception message or directory names.
   const frames = String(error?.stack || '').split('\n').slice(1, 7)
     .map(line => line.replace(/(?:file:\/\/)?(?:\/[^\s()]+)+(?=:\d+:\d+)/g, value => path.basename(value)));
-  console.error(JSON.stringify({ event: 'iris_local_api_error', requestId, frames }));
+  const code = ['IRIS_SCHEDULER_QUEUE_TIMEOUT', 'IRIS_SCHEDULER_QUEUE_FULL', 'IRIS_SCHEDULER_CLOSED'].includes(error?.code) ? error.code : undefined;
+  console.error(JSON.stringify({ event: 'iris_local_api_error', requestId, ...(code ? { code } : {}), frames }));
 }
 
 function headerCount(request, name) {
@@ -160,7 +177,8 @@ const json = (request, response, value, status = 200) => send(request, response,
 /** Internal Host, read-only by default. Construction performs no I/O and never binds a port. */
 export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWrites = false, serveWorkbench = false,
   allowExecution = false, allowSelection = false, allowMcp = false, connectionsFile, executionPorts, allowConnectionManagement = false, connectionStore, providerRegistry, pluginRegistry,
-  allowProviderManagement = false, panelManifestPath, panelContributions, allowedOperations, workbenchAuth } = {}) {
+  allowProviderManagement = false, allowNetworkManagement = false, panelManifestPath, panelContributions, allowedOperations, workbenchAuth, networkConfigPath, networkManager,
+  scheduling, scheduler: suppliedScheduler } = {}) {
   if (typeof allowExecution !== 'boolean') throw new TypeError('allowExecution 必须是布尔值');
   if (typeof allowSelection !== 'boolean') throw new TypeError('allowSelection 必须是布尔值');
   if (typeof allowMcp !== 'boolean') throw new TypeError('allowMcp 必须是布尔值');
@@ -175,8 +193,13 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
     fail('IRIS_API_CONFIG_INVALID', '工作台口令认证只接受明确的私有 directory，且仅用于 web serve');
   }
   if (typeof allowProviderManagement !== 'boolean') throw new TypeError('allowProviderManagement 必须是布尔值');
+  if (typeof allowNetworkManagement !== 'boolean') throw new TypeError('allowNetworkManagement 必须是布尔值');
+  if (allowNetworkManagement && !networkConfigPath) fail('IRIS_API_CONFIG_INVALID', '网络管理需要显式network-config路径');
   if (pluginRegistry && providerRegistry && providerRegistry !== pluginRegistry.providers) fail('IRIS_API_CONFIG_INVALID', '插件与 Provider 注册器须来自同一装配实例');
   const suppliedRegistry = pluginRegistry?.providers ?? providerRegistry;
+  if (networkConfigPath !== undefined && (typeof networkConfigPath !== 'string' || !path.isAbsolute(networkConfigPath))) fail('IRIS_API_CONFIG_INVALID', '网络文件必须是显式绝对路径');
+  if (networkManager && (typeof networkManager.resolveProviderNetwork !== 'function' || typeof networkManager.dispose !== 'function')) throw new TypeError('networkManager 需要实例解析与释放方法');
+  if ((networkConfigPath || scheduling || suppliedScheduler) && suppliedRegistry && !networkManager) fail('IRIS_API_CONFIG_INVALID', '借用 Provider 注册器并使用网络或调度配置时，请同时传入由调用者持有的网络管理实例，按顺序统一释放');
   const capabilityCatalog = createCoreCapabilityCatalog({ registry: pluginRegistry });
   const pluginExecution = allowedOperations !== undefined;
   const selectedOperations = pluginExecution ? capabilityCatalog.selectOperations(allowedOperations) : [];
@@ -191,11 +214,18 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
   if (allowExecution && !providerConfigPath && !executionPorts) fail('IRIS_API_CONFIG_INVALID', '执行模式需要显式 Provider 配置');
   if (connectionsFile !== undefined && (typeof connectionsFile !== 'string' || !path.isAbsolute(connectionsFile))) fail('IRIS_API_CONFIG_INVALID', '连接授权须为显式根外文件');
   let state = 'new', origin = null, tokenDigest = null, application, server, physicalRoot;
+  const scheduler = suppliedScheduler || networkManager?.scheduler || (scheduling ? createMediaScheduler(scheduling) : undefined);
+  if (scheduler && networkManager && networkManager.scheduler !== scheduler) fail('IRIS_API_CONFIG_INVALID', '应用与网络管理必须共用同一调度实例');
+  const ownedScheduler = Boolean(scheduler && !suppliedScheduler && !networkManager?.scheduler);
+  const ownedNetwork = !networkManager && (networkConfigPath !== undefined || Boolean(scheduler));
+  const networks = networkManager || (ownedNetwork ? createProviderNetworkManager({ networkConfigPath, scheduler }) : undefined);
+  const resolveProviderNetwork = ({ provider, ...context }) => networks?.resolveProviderNetwork({ ...context,
+    networkRequirement: context.networkRequirement || providerNetworkRequirement(provider) });
   let browserAuth;
   let providerMonitor;
-  let runner, runnerStarted = false, connections, mcp, managed, imageGenerationEnabled = false, audioEnabled = false;
+  let runner, runnerStarted = false, connections, mcp, managed, imageGenerationEnabled = false, audioEnabled = false, videoEnabled = false;
   let registry = suppliedRegistry, panel = DEFAULT_PANEL, pluginPanel, providerManagementBusy = false;
-  const capabilityFacts = () => capabilityCatalog.snapshot({ audioEnabled, panelContributions: pluginPanel?.selection, allowedOperations: allowedPluginIds });
+  const capabilityFacts = () => capabilityCatalog.snapshot({ audioEnabled, videoEnabled, panelContributions: pluginPanel?.selection, allowedOperations: allowedPluginIds });
   const changedAuthorizations = new Set();
   let loginTicket = null;
   const browserSessions = new Set();
@@ -214,7 +244,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
     return [...facts.tools, ...facts.pluginTools].filter(tool => tool.scope !== 'execute'
       || (tool.name === 'iris_core_plugin_call' ? pluginExecution : !pluginExecution || allowExecution)).map(tool => tool.name);
   };
-  const availableCapabilities = () => capabilityCatalog.snapshot({ audioEnabled }).groups;
+  const availableCapabilities = () => capabilityCatalog.snapshot({ audioEnabled, videoEnabled }).groups;
 
   function issueLoginLink() {
     const ticket = crypto.randomBytes(32).toString('base64url');
@@ -287,6 +317,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
   async function requireArtifactCapability(caller, artifactId) {
     if (caller.owner) return;
     const metadata = await application.run('reader', runtime => runtime.run('inspect', ({ dataRoot }) => inspectCoreArtifactMetadata(dataRoot, artifactId)));
+    scope(caller, 'read'); // A revocation during the metadata read invalidates the original handshake too.
     const selection = connections.selection(caller.connectionId, caller.runtimeInstanceId);
     if (isPluginSourceImage(metadata) && (selection.pluginOperations || []).some(pin => selectedOperations.some(item => hasPluginSelection([pin], item.dependency) && item.artifactInputs?.length))) return;
     if (metadata.metadata?.pluginOperationId) {
@@ -308,7 +339,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
     // alone only grant the declared eligible source images handled above.
     if (CORE_CAPABILITY_GROUPS.some(group => selection.capabilities.includes(group.id)
         && (metadata.mediaType.startsWith('image/') ? group.media === 'image'
-          : metadata.mediaType.startsWith('audio/') ? group.requiresAudio
+          : metadata.mediaType.startsWith('video/') ? group.media === 'video' : metadata.mediaType.startsWith('audio/') ? group.requiresAudio
             : metadata.mediaType === 'text/plain' && group.media === 'transcribe'))) return;
     fail('IRIS_CONNECTION_CAPABILITY_DENIED', '此连接没有选择该作品的媒体功能或图片来源用途', 403);
   }
@@ -344,6 +375,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
     }
     if (url.pathname.startsWith('/api/v0/connection-management')) return manage(request, response, url, caller);
     if (url.pathname.startsWith('/api/v0/provider-management')) return manageProviders(request, response, url, caller);
+    if (url.pathname.startsWith('/api/v0/network-management')) return manageNetworks(request, response, url, caller);
     const selecting = /^\/api\/v0\/runs\/([^/]+)\/selection$/.exec(url.pathname);
     if (selecting) return selectRun(request, response, selecting[1], caller);
     const connection = /^\/api\/v0\/connections\/([a-f0-9-]{36})\/(handshake|disconnect|client-info)$/.exec(url.pathname);
@@ -380,10 +412,11 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
       const result = await runner.submit({ key: request.headers['idempotency-key'], runId: continuing[1], expectedRunRevision: value.expectedRevision });
       return json(request, response, result, result.idempotentReplay ? 200 : 202);
     }
-    scope(caller, 'create', ({ '/api/v0/images': 'iris_core_import_image', '/api/v0/runs': 'iris_core_create_run',
+    const creationTool = ({ '/api/v0/images': 'iris_core_import_image', '/api/v0/runs': 'iris_core_create_run',
       '/api/v0/generations': 'iris_core_create_generation', '/api/v0/audio': 'iris_core_import_audio',
-      '/api/v0/speeches': 'iris_core_create_speech', '/api/v0/transcriptions': 'iris_core_create_transcription' })[url.pathname]);
-    return create(request, response, url);
+      '/api/v0/speeches': 'iris_core_create_speech', '/api/v0/transcriptions': 'iris_core_create_transcription', '/api/v0/videos': 'iris_core_create_video' })[url.pathname];
+    scope(caller, 'create', creationTool);
+    return create(request, response, url, caller, creationTool);
   }
 
   async function selectRun(request, response, runId, caller) {
@@ -429,11 +462,11 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
     if (['GET', 'HEAD'].includes(request.method) && url.pathname === '/api/v0/provider-management/settings') {
       return json(request, response, await executeConfigCommand(providerConfigPath, 'settings.show', {}, { registry }));
     }
-    const monitor = () => providerMonitor ||= createProviderMonitor({ configPath: providerConfigPath, registry });
+    const monitor = () => providerMonitor ||= createProviderMonitor({ configPath: providerConfigPath, registry, resolveProviderNetwork });
     if (['GET', 'HEAD'].includes(request.method) && url.pathname === '/api/v0/provider-management/diagnostics') {
       const settings = await executeConfigCommand(providerConfigPath, 'settings.show', {}, { registry });
       return json(request, response, { ...projectProviderDiagnostics(loadProviderCatalog(providerConfigPath), registry), revision: settings.revision,
-        monitors: monitor().snapshot(), execution: allowExecution, imageGeneration: imageGenerationEnabled, audio: audioEnabled });
+        monitors: monitor().snapshot(), execution: allowExecution, imageGeneration: imageGenerationEnabled, audio: audioEnabled, video: videoEnabled });
     }
     const command = { '/api/v0/provider-management/save': 'settings.save', '/api/v0/provider-management/discover': 'settings.discover',
       '/api/v0/provider-management/policies': 'settings.policies', '/api/v0/provider-management/enabled': 'settings.enabled',
@@ -466,11 +499,11 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
         const result = await application.run('writer', runtime => runtime.run('execute', async ({ dataRoot }) => {
           const dependencies = providerDependencies(dataRoot, value.providerId);
           if (dependencies.blockingTasks.length || dependencies.blockingRuns.length) fail('IRIS_PROVIDER_REFERENCED', '当前工作区仍有未完成或可恢复流程依赖此供应商，请先处理原任务', 409);
-          return executeConfigCommand(providerConfigPath, command, value, { registry, signal: controller.signal });
+          return executeConfigCommand(providerConfigPath, command, value, { registry, signal: controller.signal, resolveProviderNetwork });
         }), { signal: controller.signal });
         providerMonitor?.snapshot(); return json(request, response, result);
       }
-      const result = await executeConfigCommand(providerConfigPath, command, value, { registry, signal: controller.signal });
+      const result = await executeConfigCommand(providerConfigPath, command, value, { registry, signal: controller.signal, resolveProviderNetwork });
       if (command === 'settings.enabled' || command === 'settings.save') providerMonitor?.snapshot();
       return await json(request, response, result);
     } catch (error) {
@@ -481,6 +514,28 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
       throw error;
     } finally { response.off('close', aborted); providerManagementBusy = false; }
   }
+  async function manageNetworks(request, response, url, caller) {
+    if (!caller.owner) fail('IRIS_CONNECTION_CAPABILITY_DENIED', '只有工作台所有者可以管理和检测网络出口', 403);
+    if (!allowNetworkManagement) fail('IRIS_API_READ_ONLY', '此服务未开启网络出口管理', 405);
+    query(url);
+    const options = { networkConfigPath, providerConfigPath, registry, resolveProviderNetwork };
+    const action = url.pathname.slice('/api/v0/network-management/'.length);
+    if (['GET', 'HEAD'].includes(request.method) && ['settings', 'doctor'].includes(action)) {
+      return json(request, response, action === 'settings' ? networkManagementSettings(options) : { ...networkDoctor(options), instanceId });
+    }
+    if (request.method !== 'POST' || ![...NETWORK_MANAGEMENT_ACTIONS, 'probe'].includes(action)) fail('IRIS_API_NOT_FOUND', '没有此网络管理操作', 404);
+    if (providerManagementBusy) fail('IRIS_API_BUSY', '供应商或出口设置正在处理，请等待完成', 429);
+    providerManagementBusy = true;
+    const controller = new AbortController(), aborted = () => { if (!response.writableFinished) controller.abort(); };
+    response.once('close', aborted);
+    try {
+      const input = await smallJson(request, 64 * 1024);
+      controller.signal.throwIfAborted();
+      const result = action === 'probe' ? await probeNetworkRoute(options, input, { signal: controller.signal })
+        : manageNetworkResources(options, action, input, { signal: controller.signal });
+      return await json(request, response, { ...result, instanceId });
+    } finally { response.off('close', aborted); providerManagementBusy = false; }
+  }
   async function manage(request, response, url, caller) {
     if (!caller.owner) fail('IRIS_CONNECTION_CAPABILITY_DENIED', '只有工作台所有者可以管理连接', 403);
     if (!allowConnectionManagement) fail('IRIS_API_READ_ONLY', '此服务未开启连接管理', 405);
@@ -536,12 +591,12 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
       reader.start();
       return await reader.run('inspect', ({ dataRoot: physicalRoot }) => {
         const metadata = inspectCoreArtifactMetadata(physicalRoot, artifactId);
-        if (!(kind === 'image' ? IMAGE_TYPES.has(metadata.mediaType) : kind === 'audio' ? AUDIO_MEDIA_TYPES.has(metadata.mediaType) : metadata.mediaType === 'text/plain')) {
+        if (!(kind === 'image' ? IMAGE_TYPES.has(metadata.mediaType) : kind === 'video' ? Object.hasOwn(VIDEO_TYPES, metadata.mediaType) : kind === 'audio' ? AUDIO_MEDIA_TYPES.has(metadata.mediaType) : metadata.mediaType === 'text/plain')) {
           fail('IRIS_API_MEDIA_UNSUPPORTED', '此入口不支持该作品类型', 415);
         }
-        if (metadata.size > (kind === 'text' ? 1024 * 1024 : MAX_LOCAL_API_IMAGE_BYTES)) fail('IRIS_API_MEDIA_TOO_LARGE', '作品超过此读取入口的大小上限', 413);
+        if (metadata.size > (kind === 'text' ? 1024 * 1024 : kind === 'video' ? MAX_VIDEO_BYTES : MAX_LOCAL_API_IMAGE_BYTES)) fail('IRIS_API_MEDIA_TOO_LARGE', '作品超过此读取入口的大小上限', 413);
         const result = readCoreArtifactBytes(physicalRoot, artifactId);
-        if (result.bytes.length > MAX_LOCAL_API_IMAGE_BYTES || result.bytes.length !== result.artifact.size
+        if (result.bytes.length > (kind === 'video' ? MAX_VIDEO_BYTES : MAX_LOCAL_API_IMAGE_BYTES) || result.bytes.length !== result.artifact.size
             || digest(result.bytes).toString('hex') !== result.artifact.digest.value) {
           fail('IRIS_API_RECORD_CONFLICT', '图片字节与已保存记录不一致', 409);
         }
@@ -559,6 +614,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
       if (error.code === 'IRIS_PROVIDER_IMAGE_PROTOCOL_INVALID') {
         return { contractVersion: 0, configured: true, models: [], total: 0, gap: 'protocol_unavailable' };
       }
+      if (error.code === 'IRIS_PROVIDER_CREDENTIAL_UNAVAILABLE') return { contractVersion: 0, configured: true, models: [], total: 0, gap: 'credential_unavailable' };
       if (error.code !== 'IRIS_PROVIDER_MODEL_UNAVAILABLE') throw error;
       candidates = [];
     }
@@ -576,15 +632,25 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
       if (!capabilities.includes(capability)) continue;
       let candidates;
       try { candidates = select(catalog, '', registry); }
-      catch (error) { if (error.code !== 'IRIS_PROVIDER_MODEL_UNAVAILABLE') throw error; candidates = []; }
+      catch (error) { if (!['IRIS_PROVIDER_MODEL_UNAVAILABLE', 'IRIS_PROVIDER_CREDENTIAL_UNAVAILABLE'].includes(error.code)) throw error; candidates = []; }
       entries.push(...candidates.map(route => ({ capability, modelRef: route.modelRef, displayName: route.model })));
     }
     return { contractVersion: 0, configured: true, models: entries, total: entries.length };
   }
 
-  async function create(request, response, url) {
+  function videoModels() {
+    if (!providerConfigPath) return { contractVersion: 0, configured: false, models: [], total: 0 };
+    let candidates;
+    try { candidates = videoCandidatesFromCatalog(loadProviderCatalog(providerConfigPath), '', registry); }
+    catch (error) { if (!['IRIS_PROVIDER_MODEL_UNAVAILABLE', 'IRIS_PROVIDER_CREDENTIAL_UNAVAILABLE'].includes(error.code)) throw error; candidates = []; }
+    const entries = candidates.filter(route => videoModelSupportsMode(route.model, 't2v')).map(route => ({ modelRef: route.modelRef, displayName: route.model }));
+    return { contractVersion: 0, configured: true, models: entries, total: entries.length };
+  }
+
+  async function create(request, response, url, caller, creationTool) {
     query(url);
-    if (!['/api/v0/images', '/api/v0/runs', '/api/v0/generations', '/api/v0/audio', '/api/v0/speeches', '/api/v0/transcriptions'].includes(url.pathname)) fail('IRIS_API_NOT_FOUND', '没有此本地创建接口', 404);
+    if (!['/api/v0/images', '/api/v0/runs', '/api/v0/generations', '/api/v0/audio', '/api/v0/speeches', '/api/v0/transcriptions', '/api/v0/videos'].includes(url.pathname)) fail('IRIS_API_NOT_FOUND', '没有此本地创建接口', 404);
+    if (url.pathname === '/api/v0/videos' && !videoEnabled) fail('IRIS_FLOW_VIDEO_ROOT_REQUIRED', '需要新的 execution init --video 根；原根不迁移', 409);
     const isImage = url.pathname === '/api/v0/images', isAudio = url.pathname === '/api/v0/audio', upload = isImage || isAudio;
     if (!audioEnabled && ['/api/v0/audio', '/api/v0/speeches', '/api/v0/transcriptions'].includes(url.pathname)) fail('IRIS_FLOW_AUDIO_ROOT_REQUIRED', '请使用新的音频执行根；原根不迁移', 409);
     if (headerCount(request, 'idempotency-key') !== 1 || !KEY.test(request.headers['idempotency-key'] || '')) {
@@ -624,8 +690,18 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
         try { value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes)); }
         catch (_) { fail('IRIS_API_INPUT_INVALID', '需要有效的 UTF-8 JSON'); }
       }
+      if (url.pathname === '/api/v0/runs' || url.pathname === '/api/v0/transcriptions') {
+        if (!value || typeof value !== 'object' || Array.isArray(value)
+            || typeof value.sourceArtifactId !== 'string' || !ARTIFACT.test(value.sourceArtifactId)) {
+          fail('IRIS_API_INPUT_INVALID', '需要当前数据根中的有效来源 Artifact ID');
+        }
+        // Input reuse follows the existing media/shared-source grant. Knowing an ID
+        // does not authorize a new Run to read or upload another capability's media.
+        await requireArtifactCapability(caller, value.sourceArtifactId);
+        scope(caller, 'create', creationTool);
+      }
       const command = { '/api/v0/images': 'creation.image', '/api/v0/audio': 'creation.audio', '/api/v0/runs': 'creation.flow',
-        '/api/v0/generations': 'creation.generate', '/api/v0/speeches': 'creation.speech', '/api/v0/transcriptions': 'creation.transcribe' }[url.pathname];
+        '/api/v0/generations': 'creation.generate', '/api/v0/speeches': 'creation.speech', '/api/v0/transcriptions': 'creation.transcribe', '/api/v0/videos': 'creation.video' }[url.pathname];
       const result = await application.execute(command, {
         key: request.headers['idempotency-key'], ...(upload ? { bytes, mediaType } : { value })
       }, { signal: controller.signal, onPrepared: () => { prepared = true; } });
@@ -720,8 +796,9 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
     const connectionPost = connections && /^\/api\/v0\/connections\/[a-f0-9-]{36}\/(?:handshake|disconnect|client-info)$/.test(request.url.split('?')[0]);
     const managementPost = allowConnectionManagement && request.url.split('?')[0].startsWith('/api/v0/connection-management/');
     const providerPost = allowProviderManagement && request.url.split('?')[0].startsWith('/api/v0/provider-management/');
+    const networkPost = allowNetworkManagement && request.url.split('?')[0].startsWith('/api/v0/network-management/');
     const pluginPost = pluginExecution && (request.url.split('?')[0] === '/api/v0/plugin-operations' || /^\/api\/v0\/operations\/op_[a-f0-9]{64}\/cancel$/.test(request.url.split('?')[0]));
-    if (!['GET', 'HEAD'].includes(request.method) && !((allowLocalWrites || allowSelection || connectionPost || managementPost || providerPost || pluginPost) && request.method === 'POST')) {
+    if (!['GET', 'HEAD'].includes(request.method) && !((allowLocalWrites || allowSelection || connectionPost || managementPost || providerPost || networkPost || pluginPost) && request.method === 'POST')) {
       fail('IRIS_API_READ_ONLY', allowLocalWrites || allowSelection ? '仅支持 GET/HEAD 与明确开启的 POST 操作' : '当前接口仅支持只读 GET/HEAD', 405);
     }
     if (request.method !== 'POST' && (request.headers['transfer-encoding'] !== undefined || (request.headers['content-length'] !== undefined && request.headers['content-length'] !== '0'))) {
@@ -733,10 +810,12 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
     if (request.method === 'POST') return specialPost(request, response, url, caller);
     if (url.pathname.startsWith('/api/v0/connection-management')) return manage(request, response, url, caller);
     if (url.pathname.startsWith('/api/v0/provider-management')) return manageProviders(request, response, url, caller);
+    if (url.pathname.startsWith('/api/v0/network-management')) return manageNetworks(request, response, url, caller);
     const callerScopes = scope(caller, 'read');
     const matchRun = /^\/api\/v0\/runs\/([^/]+)(\/download)?$/.exec(url.pathname);
     const matchImage = /^\/api\/v0\/artifacts\/([^/]+)\/content$/.exec(url.pathname);
-    const matchAudio = audioEnabled && /^\/api\/v0\/artifacts\/([^/]+)\/(audio|text)$/.exec(url.pathname);
+    const matchMedia = audioEnabled && /^\/api\/v0\/artifacts\/([^/]+)\/(audio|text)$/.exec(url.pathname)
+      || videoEnabled && /^\/api\/v0\/artifacts\/([^/]+)\/(video)$/.exec(url.pathname);
     const operation = (allowExecution || pluginExecution) && /^\/api\/v0\/operations\/(op_[a-f0-9]{64})$/.exec(url.pathname);
     const runOperations = allowExecution && /^\/api\/v0\/runs\/(run_[a-f0-9]{24})\/operations$/.exec(url.pathname);
     const operationLookup = (allowExecution || pluginExecution) && url.pathname === '/api/v0/operations';
@@ -746,16 +825,16 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
     if (creationLookup && !caller.owner) fail('IRIS_CONNECTION_CAPABILITY_DENIED', '只有工作台所有者可以定位原创建请求', 403);
     query(url, pluginCatalog ? ['limit', 'offset'] : pluginHistory ? ['limit', 'cursor'] : url.pathname === '/api/v0/runs' ? ['limit', 'cursor', 'selection', 'kind'] : runOperations ? ['limit', 'cursor']
       : creationLookup ? ['kind', 'key'] : operationLookup ? ['key'] : []);
-    if (matchRun && !RUN.test(matchRun[1]) || matchImage && !ARTIFACT.test(matchImage[1]) || matchAudio && !ARTIFACT.test(matchAudio[1])) {
+    if (matchRun && !RUN.test(matchRun[1]) || matchImage && !ARTIFACT.test(matchImage[1]) || matchMedia && !ARTIFACT.test(matchMedia[1])) {
       fail('IRIS_API_INPUT_INVALID', '流程或图片 ID 格式无效');
     }
     const readTool = pluginCatalog ? 'iris_core_plugin_catalog' : pluginHistory ? 'iris_core_operation' : operation ? 'iris_core_operation' : runOperations ? 'iris_core_operation' : operationLookup ? 'iris_core_lookup'
-      : matchAudio ? matchAudio[2] === 'audio' ? 'iris_core_audio' : 'iris_core_transcript'
+      : matchMedia ? matchMedia[2] === 'video' ? 'iris_core_video' : matchMedia[2] === 'audio' ? 'iris_core_audio' : 'iris_core_transcript'
         : matchImage ? 'iris_core_image' : matchRun ? matchRun[2] ? null : 'iris_core_run'
-          : ({ '/api/v0/models': 'iris_core_models', '/api/v0/audio-models': 'iris_core_audio_models', '/api/v0/runs': 'iris_core_runs', '/api/v0/connections': 'iris_core_connections', '/api/v0/adapters': 'iris_core_connection' })[url.pathname];
+          : ({ '/api/v0/models': 'iris_core_models', '/api/v0/video-models': 'iris_core_video_models', '/api/v0/audio-models': 'iris_core_audio_models', '/api/v0/runs': 'iris_core_runs', '/api/v0/connections': 'iris_core_connections', '/api/v0/adapters': 'iris_core_connection' })[url.pathname];
     if (readTool) scope(caller, 'read', readTool);
     if (matchRun?.[2] && !caller.owner && !connections.selection(caller.connectionId, caller.runtimeInstanceId).tools
-      .some(name => ['iris_core_image', 'iris_core_audio', 'iris_core_transcript'].includes(name))) fail('IRIS_CONNECTION_CAPABILITY_DENIED', '未选择作品交付工具', 403);
+      .some(name => ['iris_core_image', 'iris_core_audio', 'iris_core_transcript', 'iris_core_video'].includes(name))) fail('IRIS_CONNECTION_CAPABILITY_DENIED', '未选择作品交付工具', 403);
     if (activeReads >= 2) fail('IRIS_API_BUSY', '读取繁忙，请稍后再试', 429);
     activeReads++;
     try {
@@ -800,15 +879,17 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
         return await json(request, response, { contractVersion: 0, instanceId, readOnly: mediaReadOnly,
           ...(identity ? { rootId: identity.rootId } : {}),
           connectionManagement: Boolean(caller.owner && allowConnectionManagement), workbenchMediaReadOnly: serveWorkbench && mediaReadOnly,
-          providerManagement: Boolean(caller.owner && allowProviderManagement), ...(serveWorkbench && caller.owner ? { panel: panel.identity } : {}),
+          providerManagement: Boolean(caller.owner && allowProviderManagement), networkManagement: Boolean(caller.owner && allowNetworkManagement),
+          ...(serveWorkbench && caller.owner ? { panel: panel.identity } : {}),
           ...(pluginPanel && caller.owner ? { panelContributions: pluginPanel.manifest } : {}),
           ...(pluginExecution ? { pluginExecution: true, pluginOperations: caller.owner ? selectedOperations.map(item => item.dependency) : selection?.pluginOperations || [] } : {}),
-          ...(audioEnabled ? { audio: true } : {}),
+          ...(audioEnabled ? { audio: true } : {}), ...(videoEnabled ? { video: true } : {}),
           operations: projectCoreSessionOperations({ scopes: callerScopes, ...(selection ? { tools: selection.tools } : {}),
-            imageGeneration: imageGenerationEnabled, audio: audioEnabled, execution: allowExecution, pluginExecution,
+            imageGeneration: imageGenerationEnabled, audio: audioEnabled, video: videoEnabled, execution: allowExecution, pluginExecution,
             creationLookup: Boolean(identity?.rootId), selection: canSelect }),
           ...(selection || {}),
           ...(allowExecution || pluginExecution ? { executionEnabled: runner.snapshot().executionEnabled } : {}),
+          ...(caller.owner && scheduler ? { scheduling: scheduler.snapshot(physicalRoot) } : {}),
           limits: { runPageSize: 30, imageBytes: MAX_LOCAL_API_IMAGE_BYTES, activeReads: 2,
             ...(allowLocalWrites ? { uploadBytes: MAX_IMPORT_IMAGE_BYTES, jsonBytes: 64 * 1024, activeUploads: 1, localWrites: 9 } : {}) } });
       }
@@ -819,6 +900,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
       if (operation) {
         const result = await application.execute('operation.inspect', { id: operation[1] });
         await requireOperationCapability(caller, result.operation);
+        if (runner?.scheduling(operation[1])) result.operation.scheduling = runner.scheduling(operation[1]);
         return await json(request, response, result);
       }
       if (creationLookup) {
@@ -830,6 +912,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
         if (!KEY.test(url.searchParams.get('key') || '')) fail('IRIS_API_INPUT_INVALID', '需要原 Operation Key');
         const result = await application.execute('operation.lookup', { key: url.searchParams.get('key') });
         await requireOperationCapability(caller, result.operation);
+        if (runner?.scheduling(result.operation.id)) result.operation.scheduling = runner.scheduling(result.operation.id);
         return await json(request, response, result);
       }
       if (runOperations) {
@@ -840,6 +923,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
           ...(limit !== null ? { limit: Number(limit) } : {}), ...(cursor !== null ? { cursor } : {}) }));
       }
       if (url.pathname === '/api/v0/models') return await json(request, response, models());
+      if (url.pathname === '/api/v0/video-models' && videoEnabled) return await json(request, response, videoModels());
       if (url.pathname === '/api/v0/audio-models' && audioEnabled) return await json(request, response, audioModels(caller));
       if (url.pathname === '/api/v0/runs') {
         const limitText = url.searchParams.get('limit') ?? '20';
@@ -849,10 +933,10 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
         const selection = url.searchParams.get('selection') ?? 'all';
         if (!['all', 'selected', 'unselected'].includes(selection)) fail('IRIS_API_INPUT_INVALID', '选择筛选无效');
         const kind = url.searchParams.get('kind') ?? 'all';
-        if (!['all', 'image', 'speech', 'transcribe'].includes(kind)) fail('IRIS_API_INPUT_INVALID', '作品类别无效');
+        if (!['all', 'image', 'speech', 'transcribe', 'video'].includes(kind)) fail('IRIS_API_INPUT_INVALID', '作品类别无效');
         const records = (await application.run('reader', runtime => runtime.run('inspect', ({ dataRoot }) => listFlowRuns(dataRoot))))
-          .filter(run => allowsRun(caller, run) && (kind === 'all' || kind === 'image' && !isAudioRecipe(run.recipe)
-            || kind === 'speech' && run.recipe === 'speech/v0' || kind === 'transcribe' && run.recipe === 'transcribe/v0'));
+          .filter(run => allowsRun(caller, run) && (kind === 'all' || kind === 'image' && !isAudioRecipe(run.recipe) && run.recipe !== VIDEO_RECIPE
+            || kind === 'video' && run.recipe === VIDEO_RECIPE || kind === 'speech' && run.recipe === 'speech/v0' || kind === 'transcribe' && run.recipe === 'transcribe/v0'));
         const selected = records.filter(run => Boolean(run.selection)).length;
         const counts = { all: records.length, selected, unselected: records.length - selected };
         const ordered = records.filter(run => selection === 'all' || Boolean(run.selection) === (selection === 'selected'))
@@ -863,15 +947,15 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
         return await json(request, response, { contractVersion: 0, total: ordered.length, counts,
           runs: page.map(projectLocalApiRunSummary), nextCursor: index + page.length < ordered.length ? page.at(-1).id : null });
       }
-      let artifactId, mediaKind = matchAudio ? matchAudio[2] : 'image';
+      let artifactId, mediaKind = matchMedia ? matchMedia[2] : 'image';
       if (matchRun) {
         await requireFlowCapability(caller, matchRun[1]);
         const view = projectLocalApiFlow(await application.execute('flow.inspect', { run_id: matchRun[1] }));
         if (!matchRun[2]) return await json(request, response, view);
-        const audio = isAudioRecipe(view.recipe);
-        if (audio) {
-          mediaKind = view.recipe === 'speech/v0' ? 'audio' : 'text';
-          scope(caller, 'read', mediaKind === 'audio' ? 'iris_core_audio' : 'iris_core_transcript');
+        const audio = isAudioRecipe(view.recipe), video = view.recipe === VIDEO_RECIPE;
+        if (audio || video) {
+          mediaKind = video ? 'video' : view.recipe === 'speech/v0' ? 'audio' : 'text';
+          scope(caller, 'read', mediaKind === 'video' ? 'iris_core_video' : mediaKind === 'audio' ? 'iris_core_audio' : 'iris_core_transcript');
           if (!view.output) fail('IRIS_API_SELECTION_REQUIRED', '请先接回原任务结果', 409);
           artifactId = view.output.artifactId;
         } else {
@@ -880,12 +964,12 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
           artifactId = view.selection.artifactId;
         }
       } else if (matchImage) artifactId = matchImage[1];
-      else if (matchAudio) artifactId = matchAudio[1];
+      else if (matchMedia) artifactId = matchMedia[1];
       else fail('IRIS_API_NOT_FOUND', '没有此只读接口', 404);
       await requireArtifactCapability(caller, artifactId);
       const result = await image(artifactId, mediaKind);
       return await send(request, response, 200, result.bytes, { 'Content-Type': result.artifact.mediaType,
-        ...(matchRun ? { 'Content-Disposition': `attachment; filename="iris-${artifactId}.${IMAGE_TYPES.get(result.artifact.mediaType) || AUDIO_TYPES[result.artifact.mediaType] || 'txt'}"` } : {}) });
+        ...(matchRun ? { 'Content-Disposition': `attachment; filename="iris-${artifactId}.${IMAGE_TYPES.get(result.artifact.mediaType) || AUDIO_TYPES[result.artifact.mediaType] || VIDEO_TYPES[result.artifact.mediaType] || 'txt'}"` } : {}) });
     } finally { activeReads--; }
   }
 
@@ -899,7 +983,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
         error: { code: safe.code, message: safe.message, requestId } })), {
         Connection: 'close', ...(safe.status === 401 ? { 'WWW-Authenticate': 'Bearer realm="iris-local"' } : {}),
         ...(safe.status === 405 ? { Allow: safe.allow || (safe.code === 'IRIS_API_METHOD_DENIED' ? 'POST'
-          : allowLocalWrites || allowSelection || allowConnectionManagement || allowProviderManagement ? 'GET, HEAD, POST' : 'GET, HEAD') } : {}) });
+          : allowLocalWrites || allowSelection || allowConnectionManagement || allowProviderManagement || allowNetworkManagement ? 'GET, HEAD, POST' : 'GET, HEAD') } : {}) });
     }
   }
 
@@ -918,7 +1002,9 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
       ['application', () => application?.dispose()], ['requests', () => Promise.all([...jobs])],
       ['connections-store', () => managed?.dispose()], ['connections', () => connections?.dispose()],
       ['workbench-auth', () => browserAuth?.dispose()],
-      ['providers', () => suppliedRegistry ? undefined : registry?.dispose()]
+      ['providers', () => suppliedRegistry ? undefined : registry?.dispose()],
+      ['network', () => ownedNetwork ? networks.dispose() : undefined],
+      ['scheduler', () => ownedScheduler ? scheduler.dispose() : undefined]
     ]) {
       try { await close(); } catch (error) { failures.push({ stage, error }); }
     }
@@ -946,7 +1032,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
           physicalRoot = await reader.run('inspect', ({ dataRoot: root }) => {
             inspectFlowRoot(root);
             const version = inspectCreationRoot(root, { allowAbsent: !allowLocalWrites })?.schemaVersion;
-            imageGenerationEnabled = [2, 3].includes(version); audioEnabled = version === 3;
+            imageGenerationEnabled = [2, 3, 4].includes(version); audioEnabled = [3, 4].includes(version); videoEnabled = version === 4;
             return root;
           });
         } finally { await reader.dispose(); }
@@ -955,7 +1041,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
         let ports = {};
         if (allowExecution) {
           if (!executionPorts) loadProviderCatalog(providerConfigPath); // Static validation only; no discovery or model call.
-          ports = executionPorts || configuredImagePorts(providerConfigPath, registry);
+          ports = executionPorts || configuredImagePorts(providerConfigPath, registry, { resolveProviderNetwork, deferCooling: Boolean(scheduler) });
         }
         let grants = [];
         if (connectionsFile) {
@@ -983,11 +1069,13 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
           }
           for (const grant of dynamic) connections.setGrant(grant);
         }
-        application = createApplicationRuntime({ dataRoot: physicalRoot, ...ports,
-          ...(!allowExecution && allowLocalWrites && providerConfigPath ? { resolveAudioCandidates: ({ capability, modelRef }) => {
+        application = createApplicationRuntime({ dataRoot: physicalRoot, ...ports, scheduler,
+          ...(!allowExecution && allowLocalWrites && providerConfigPath ? { resolveVideoCandidates: ({ modelRef }) => videoCandidatesFromCatalog(loadProviderCatalog(providerConfigPath), modelRef, registry).map(route => ({
+            adapter: { id: route.provider.id, protocol: route.provider.mediaProtocol, networkRequirement: providerNetworkRequirement(route.provider) }, model: route.modelRef,
+            providerBinding: providerTaskBinding(route.provider, registry), selectionReason: 'explicit' })), resolveAudioCandidates: ({ capability, modelRef }) => {
             const select = capability === 'tts' ? ttsCandidatesFromCatalog : transcribeCandidatesFromCatalog;
             return select(loadProviderCatalog(providerConfigPath), modelRef, registry).map(route => ({
-              adapter: { id: route.provider.id, protocol: route.provider.mediaProtocol }, model: route.modelRef,
+              adapter: { id: route.provider.id, protocol: route.provider.mediaProtocol, networkRequirement: providerNetworkRequirement(route.provider) }, model: route.modelRef,
               providerBinding: providerTaskBinding(route.provider, registry), selectionReason: 'explicit'
             }));
           }, resolveImageCandidates: ({ modelRef, input }) =>
@@ -997,7 +1085,7 @@ export function createLocalReadApi({ dataRoot, providerConfigPath, allowLocalWri
                 compileComfyWorkflow(route.provider.comfyWorkflow, input);
               }
               return {
-                adapter: { id: route.provider.id, protocol: route.provider.mediaProtocol }, model: route.modelRef,
+                adapter: { id: route.provider.id, protocol: route.provider.mediaProtocol, networkRequirement: providerNetworkRequirement(route.provider) }, model: route.modelRef,
                 supportsImageEdit: supportsImageEdit(route.provider.mediaProtocol, route.model, registry),
                 providerBinding: providerTaskBinding(route.provider, registry), selectionReason: 'explicit'
               };

package/lib/local-creation.js

@@ -6,6 +6,7 @@ import { readImportImage } from './image-import.js';
 import { normalizeGenerationInput } from './generation-input.js';
 import { readFlowRun, requireAudioRoot } from './flow-store.js';
 import { readImportAudio, normalizeAudioFlowInput } from './audio-flow-input.js';
+import { VIDEO_RECIPE, normalizeVideoFlowInput } from './video-flow-input.js';
 import { initializeCreationRoot, inspectCreationRoot, creationRequestId, creationInputDigest,
   readCreationRequest, publishCreationRequest, completeCreationRequest, creationFail, CREATION_KINDS, isImportCreation } from './creation-request-store.js';
 
@@ -32,8 +33,8 @@ function flowInput(input, generate = false) {
   return { ...(normalized.sourceArtifactId ? { source_artifact_id: normalized.sourceArtifactId } : {}), model_ref: normalized.modelRef,
     ...normalized.providerInput };
 }
-export function createLocalCreationService(runtime, { resolveImageCandidates, resolveAudioCandidates, onPrepared } = {}) {
-  const flows = createImageFlowService(runtime, { resolveImageCandidates, resolveAudioCandidates });
+export function createLocalCreationService(runtime, { resolveImageCandidates, resolveAudioCandidates, resolveVideoCandidates, onPrepared } = {}) {
+  const flows = createImageFlowService(runtime, { resolveImageCandidates, resolveAudioCandidates, resolveVideoCandidates });
   function execute(name, input) {
     if (name === 'creation.root' || name === 'creation.lookup') {
       return runtime.run('inspect', ({ dataRoot, signal }) => {
@@ -46,7 +47,8 @@ export function createLocalCreationService(runtime, { resolveImageCandidates, re
         }
         const marker = inspectCreationRoot(dataRoot, { allowAbsent: true });
         if (name === 'creation.root') return { contractVersion: 0, rootId: marker?.rootId ?? null,
-          ...([2, 3].includes(marker?.schemaVersion) ? { imageGeneration: true } : {}), ...(marker?.schemaVersion === 3 ? { audio: true } : {}) };
+          ...([2, 3, 4].includes(marker?.schemaVersion) ? { imageGeneration: true } : {}), ...([3, 4].includes(marker?.schemaVersion) ? { audio: true } : {}),
+          ...(marker?.schemaVersion === 4 ? { video: true } : {}) };
         if (!marker) creationFail('IRIS_CREATION_NOT_FOUND', '此数据根尚无创建请求区');
         const id = creationRequestId(marker, input.kind, input.key);
         const request = readCreationRequest(dataRoot, id, marker);
@@ -86,7 +88,7 @@ export function createLocalCreationService(runtime, { resolveImageCandidates, re
     return runtime.run('execute', async ({ dataRoot, signal }) => {
       if (name === 'creation.init') return { contractVersion: 0, root: initializeCreationRoot(dataRoot) };
       const kinds = { 'creation.image': 'image-import', 'creation.flow': 'flow-create', 'creation.generate': 'generation-create',
-        'creation.audio': 'audio-import', 'creation.speech': 'speech-create', 'creation.transcribe': 'transcription-create' };
+        'creation.audio': 'audio-import', 'creation.speech': 'speech-create', 'creation.transcribe': 'transcription-create', 'creation.video': 'video-create' };
       const kind = kinds[name];
       if (!kind) throw new TypeError('未知本地创建操作');
       if (['audio-import', 'speech-create', 'transcription-create'].includes(kind)) requireAudioRoot(dataRoot);
@@ -102,6 +104,11 @@ export function createLocalCreationService(runtime, { resolveImageCandidates, re
         if (!value || typeof value !== 'object' || Array.isArray(value) || Object.keys(value).some(key => !allowed.includes(key))) creationFail('IRIS_CREATION_INPUT_INVALID', '音频创建输入无效');
         owned = normalizeAudioFlowInput(speech ? 'speech/v0' : 'transcribe/v0', { model_ref: value.modelRef,
           ...(speech ? { text: value.text, ...(value.voice !== undefined ? { voice: value.voice } : {}) } : { source_artifact_id: value.sourceArtifactId }) });
+      } else if (kind === 'video-create') {
+        const value = input.value;
+        if (!value || typeof value !== 'object' || Array.isArray(value) || Object.keys(value).some(key => !['modelRef', 'prompt', 'size', 'duration'].includes(key))) creationFail('IRIS_CREATION_INPUT_INVALID', '文生视频输入无效');
+        owned = normalizeVideoFlowInput({ model_ref: value.modelRef, prompt: value.prompt,
+          ...(value.size !== undefined ? { size: value.size } : {}), ...(value.duration !== undefined ? { duration: value.duration } : {}) });
       } else owned = flowInput(input.value, kind === 'generation-create');
       const inputDigest = creationInputDigest(kind, owned);
       let request = readCreationRequest(dataRoot, id, marker);
@@ -112,7 +119,7 @@ export function createLocalCreationService(runtime, { resolveImageCandidates, re
           ? { artifactId: 'artifact_' + crypto.randomBytes(12).toString('hex'), ...owned,
             metadata: source.metadata, createdAt: new Date().toISOString() }
           : await flows.prepareCreation(dataRoot, signal, { ...owned, ...(kind === 'speech-create' ? { recipe: 'speech/v0' }
-            : kind === 'transcription-create' ? { recipe: 'transcribe/v0' } : {}) });
+            : kind === 'transcription-create' ? { recipe: 'transcribe/v0' } : kind === 'video-create' ? { recipe: VIDEO_RECIPE } : {}) });
         signal.throwIfAborted();
         request = publishCreationRequest(dataRoot, { schemaVersion: 0, id, rootId: marker.rootId, kind,
           inputDigest, createdAt: intent.createdAt, intent, state: 'prepared' });

package/lib/local-operations.js

@@ -8,8 +8,8 @@ export function createLocalOperationService(runtime) {
     return runtime.run(readOnly ? 'inspect' : 'execute', ({ dataRoot, signal }) => {
       signal.throwIfAborted();
       if (name === 'execution.init') {
-        if (!input || typeof input !== 'object' || Array.isArray(input) || Object.keys(input).some(key => !['imageGeneration', 'audio'].includes(key))
-            || ['imageGeneration', 'audio'].some(key => input[key] !== undefined && typeof input[key] !== 'boolean')) operationFail('IRIS_OPERATION_INPUT_INVALID', 'execution.init 只接受可选 imageGeneration/audio 开关');
+        if (!input || typeof input !== 'object' || Array.isArray(input) || Object.keys(input).some(key => !['imageGeneration', 'audio', 'video'].includes(key))
+            || ['imageGeneration', 'audio', 'video'].some(key => input[key] !== undefined && typeof input[key] !== 'boolean')) operationFail('IRIS_OPERATION_INPUT_INVALID', 'execution.init 只接受可选 imageGeneration/audio/video 开关');
         return { contractVersion: 0, root: initializeExecutionRoot(dataRoot, input), executionEnabled: false };
       }
       if (name === 'operation.accept') {

package/lib/local-request-root.js

@@ -36,7 +36,7 @@ export function inspectLocalRequestRoot(root, { allowAbsent = false } = {}) {
   }
   try {
     const versions = fs.readdirSync(base);
-    if (versions.length !== 1 || !['v0', 'v1', 'v2', 'v3'].includes(versions[0])) invalid();
+    if (versions.length !== 1 || !['v0', 'v1', 'v2', 'v3', 'v4'].includes(versions[0])) invalid();
     const schemaVersion = Number(versions[0].slice(1)), version = directory(root, ['creation-requests', versions[0]]);
     const allowed = schemaVersion === 0 ? ['root.json', 'requests'] : ['root.json', 'requests', 'operations', 'runner'];
     if (fs.readdirSync(version).some(name => !allowed.includes(name) && !/^root\.json\.tmp-[1-9][0-9]*-[a-f0-9]{12}$/.test(name))) invalid();
@@ -62,7 +62,7 @@ export function inspectLocalRequestRoot(root, { allowAbsent = false } = {}) {
 }
 
 export function initializeLocalRequestRoot(root, schemaVersion) {
-  if (![0, 1, 2, 3].includes(schemaVersion)) throw new TypeError('未知请求容器版本');
+  if (![0, 1, 2, 3, 4].includes(schemaVersion)) throw new TypeError('未知请求容器版本');
   const existing = inspectLocalRequestRoot(root, { allowAbsent: true });
   if (existing) {
     if (existing.schemaVersion !== schemaVersion) requestRootFail('IRIS_CREATION_ROOT_VERSION_CONFLICT', '请求根版本不同；不自动升级、降级或迁移，请使用新的专用根');