@mokuyoaxis/dsh-iris 0.3.0-alpha.1 → 0.3.0-beta.1

package/lib/render.js

@@ -22,6 +22,7 @@ import { imageDimensions } from './pixels.js';
 
 const PNG_DATA_PREFIX = 'data:image/png;base64,';
 const MAX_SCREENSHOT_BYTES = 64 * 1024 * 1024;
+const pendingRenders = new Map();
 
 async function screenshotPng(result) {
   const dataUrl = result?.dataUrl;
@@ -127,6 +128,8 @@ export class BrowserHtmlRenderer {
     const htmlPath = path.join(dir, 'index.html');
     writePrivateFile(htmlPath, content);
     const url = `${address.baseUrl}/iris/render/${path.basename(dir)}/index.html`;
+    const delivery = { served: false };
+    pendingRenders.set(path.basename(dir), delivery);
     try {
       // open 只接受可选的会话名称；取消发生在打开期间时，取得会话后仍须关闭。
       const session = await b.open();
@@ -136,6 +139,9 @@ export class BrowserHtmlRenderer {
         throwIfAborted(signal);
         await waitForRender(this.waitMs, signal); // 等页面加载（无加载完成事件可用的折中）
         throwIfAborted(signal);
+        if (!delivery.served) throw Object.assign(new RenderError('未确认 Iris 已返回本次 HTML 页面；请检查渲染路由和 DSH_WEB_BASE。'), {
+          code: 'IRIS_RENDER_ROUTE_UNCONFIRMED'
+        });
         // 不要求浏览器写入 Iris 私有目录，兼容 downloadDir 内的保存路径限制。
         const result = await b.screenshot(session, { fullPage: fullPage !== false, format: 'png' }, signal);
         throwIfAborted(signal);
@@ -146,6 +152,7 @@ export class BrowserHtmlRenderer {
         try { await b.close(session); } catch (_) { /* 幂等 */ }
       }
     } finally {
+      pendingRenders.delete(path.basename(dir));
       fs.rmSync(dir, { recursive: true, force: true }); // 用完即清
     }
   }
@@ -196,7 +203,10 @@ export function serveRender(req, res) {
       'Referrer-Policy': 'no-referrer',
       'X-Content-Type-Options': 'nosniff'
     });
-    res.end(method === 'HEAD' ? undefined : fs.readFileSync(abs));
+    const body = method === 'HEAD' ? undefined : fs.readFileSync(abs);
+    const delivery = file === 'index.html' && method === 'GET' ? pendingRenders.get(subdir) : undefined;
+    if (delivery) res.once('finish', () => { delivery.served = true; });
+    res.end(body);
   } catch (err) {
     if (!res.headersSent) res.writeHead(500, { 'Content-Type': 'text/plain; charset=utf-8' });
     res.end('render error');

package/lib/scheduling-policy.js

@@ -0,0 +1,66 @@
+// Explicit startup policy; never discovers files or rewrites existing configuration.
+import fs from 'node:fs';
+import path from 'node:path';
+
+export function schedulingError(code, message) {
+  return Object.assign(new Error(message), { code, stage: 'prepare', category: 'rate_limit', acceptance: 'not_accepted' });
+}
+const invalid = message => { throw schedulingError('IRIS_SCHEDULER_CONFIG_INVALID', message); };
+function fields(value, names, where) {
+  if (!value || typeof value !== 'object' || Array.isArray(value) || Object.keys(value).some(name => !names.includes(name))) invalid(`${where} 包含无效字段`);
+}
+function integer(value, min, max, name) {
+  if (!Number.isSafeInteger(value) || value < min || value > max) invalid(`${name} 需要 ${min}–${max} 的整数`);
+  return value;
+}
+function identity(value, where) {
+  if (typeof value !== 'string' || !value.trim() || value !== value.trim() || value.length > 256 || /[\x00-\x1f\x7f]/.test(value)) invalid(`${where} 无效`);
+  return value;
+}
+function limits(value, defaults = {}) {
+  return Object.fromEntries([
+    ['httpConcurrency', 1, 4], ['requestsPerSecond', 1, 1000], ['remoteLimit', 1, 1000]
+  ].flatMap(([key, min, max]) => value[key] === undefined && defaults[key] === undefined ? []
+    : [[key, integer(value[key] === undefined ? defaults[key] : value[key], min, max, key)]]));
+}
+export function checkedSchedulingPolicy(input) {
+  fields(input, ['schemaVersion', 'httpConcurrency', 'requestsPerSecond', 'remoteLimit', 'queueLimit', 'queueTimeoutMs', 'providers'], '调度策略');
+  if (input.schemaVersion !== 1) invalid('仅支持 scheduler schemaVersion=1；不会忽略或迁移其他版本');
+  const providers = input.providers === undefined ? [] : input.providers;
+  if (!Array.isArray(providers) || providers.length > 128) invalid('providers 需要至多 128 项的数组');
+  const seen = new Set();
+  return Object.freeze({ schemaVersion: 1, ...limits(input, { httpConcurrency: 4, requestsPerSecond: 2, remoteLimit: 8 }),
+    queueLimit: integer(input.queueLimit === undefined ? 32 : input.queueLimit, 8, 128, 'queueLimit'),
+    queueTimeoutMs: integer(input.queueTimeoutMs === undefined ? 30000 : input.queueTimeoutMs, 1, 300000, 'queueTimeoutMs'),
+    providers: Object.freeze(providers.map(provider => {
+      fields(provider, ['providerId', 'httpConcurrency', 'requestsPerSecond', 'remoteLimit', 'models'], '供应商策略');
+      const providerId = identity(provider.providerId, 'providerId');
+      if (seen.has(providerId)) invalid('providerId 重复'); seen.add(providerId);
+      const models = provider.models === undefined ? [] : provider.models, ids = new Set();
+      if (!Array.isArray(models) || models.length > 256) invalid('models 需要至多 256 项的数组');
+      return Object.freeze({ providerId, ...limits(provider), models: Object.freeze(models.map(model => {
+        fields(model, ['modelId', 'httpConcurrency', 'requestsPerSecond', 'remoteLimit'], '模型策略');
+        const modelId = identity(model.modelId, 'modelId');
+        if (ids.has(modelId)) invalid('modelId 重复'); ids.add(modelId);
+        return Object.freeze({ modelId, ...limits(model) });
+      })) });
+    })) });
+}
+export function readSchedulingPolicy(file) {
+  if (typeof file !== 'string' || !path.isAbsolute(file)) invalid('scheduler-config 需要明确的绝对路径');
+  let fd;
+  try {
+    fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
+    const stat = fs.fstatSync(fd);
+    if (!stat.isFile() || stat.size > 262144) invalid('scheduler-config 必须是 ≤256 KiB 的普通文件');
+    if (process.platform !== 'win32' && (stat.mode & 0o077)) invalid('scheduler-config 请限制为仅当前用户可读写');
+    const bytes = fs.readFileSync(fd);
+    if (bytes.length > 262144) invalid('scheduler-config 过大');
+    let value;
+    try { value = JSON.parse(bytes.toString('utf8')); } catch { invalid('scheduler-config 不是有效 JSON'); }
+    return checkedSchedulingPolicy(value);
+  } catch (error) {
+    if (error.code === 'IRIS_SCHEDULER_CONFIG_INVALID') throw error;
+    throw schedulingError('IRIS_SCHEDULER_CONFIG_IO', '无法读取 scheduler-config；请检查路径、权限和文件状态，不会退回无调度模式');
+  } finally { if (fd !== undefined) fs.closeSync(fd); }
+}

package/lib/tasks.js

@@ -718,7 +718,7 @@ export async function submitGuard(task, fn) {
 /**
  * 重启恢复：接管仍在运行的远程任务。DSH 重启期间百炼任务在服务端继续跑，
  * 结果 URL 存活 24h，重启后重新盯守即可落袋。
- * @param {(task) => deps|null} depsFor 返回盯守依赖；null 表示无法接管（如供应商已删除）
+ * @param {(task) => deps|null} depsFor 返回盯守依赖；null 仅暂停接管（如连接暂不可用），不证明远端失败
  * @returns {string[]} 成功接管的任务 id
  */
 export function resumePending(depsFor) {
@@ -737,9 +737,10 @@ export function resumePending(depsFor) {
         }
         const deps = depsFor(t);
         if (!deps) {
-          update(t.id, { status: 'failed', error: '无法恢复：对应供应商不可用' });
+          update(t.id, { error: '无法恢复盯守：对应供应商不可用；远端任务状态未改变，可在连接恢复后再次接管' });
           continue;
         }
+        if (t.error) update(t.id, { error: undefined });
         watch(t, deps);
         resumed.push(t.id);
         continue;

package/lib/video-flow-input.js

@@ -0,0 +1,16 @@
+import { normalizeGenerationInput } from './generation-input.js';
+import { parseModelRef } from './models.js';
+
+export const VIDEO_RECIPE = 'video-generate/v0';
+export const MAX_VIDEO_BYTES = 32 * 1024 * 1024;
+export const VIDEO_TYPES = Object.freeze({ 'video/mp4': 'mp4', 'video/webm': 'webm' });
+export function normalizeVideoFlowInput(input) {
+  if (!input || typeof input !== 'object' || Array.isArray(input)
+      || Object.keys(input).some(key => !['model_ref', 'prompt', 'size', 'duration'].includes(key))
+      || !parseModelRef(input.model_ref) || /s2v/i.test(parseModelRef(input.model_ref).modelId)
+      || input.duration !== undefined && (typeof input.duration !== 'number' || !Number.isFinite(input.duration))) {
+    throw Object.assign(new Error('文生视频仅接受明确模型、prompt 和可选 size/duration；不接受首帧、S2V 或路径'), { code: 'IRIS_VIDEO_FLOW_INPUT_INVALID' });
+  }
+  const value = normalizeGenerationInput('video', input);
+  return { model_ref: value.modelRef, ...value.providerInput };
+}

package/lib/video-input.js

@@ -7,19 +7,26 @@ import { parseModelRef } from './models.js';
 import { prepareProviderInput } from './provider-adapter.js';
 import { ProviderContractError } from './provider-contract.js';
 
+/** Recognized input families constrain routing; opaque compatible IDs keep their existing t2v/i2v support. */
+export function videoModelSupportsMode(modelId, mode) {
+  const family = /(?:^|[-_.])(t2v|i2v|s2v|r2v)(?=$|[-_.])/i.exec(modelId)?.[1].toLowerCase();
+  if (family) return family === mode;
+  return mode === 't2v' || mode === 'i2v';
+}
+
 export function videoTaskCandidates(candidates, normalized) {
   const s2v = normalized.videoMode === 's2v';
-  const compatible = candidates.filter(candidate => /s2v/i.test(parseModelRef(candidate.model)?.modelId || '') === s2v);
+  const compatible = candidates.filter(candidate => videoModelSupportsMode(parseModelRef(candidate.model)?.modelId || '', normalized.videoMode));
   if (!compatible.length) throw new GenerationInputError(s2v
-    ? 'audio_path 只能配合 s2v 数字人模型' : 's2v 模型需要首帧和音频输入');
+    ? 'audio_path 只能配合 s2v 数字人模型' : '没有与 ' + normalized.videoMode + ' 输入匹配的视频模型；s2v 模型需要首帧和音频输入');
   return compatible.map(candidate => ({ ...candidate,
-    ...(normalized.firstFramePath ? { async prepareInput({ signal }) {
+    ...(normalized.firstFramePath ? { async prepareInput({ signal, taskId, attemptId, networkBudget, recordNetworkRoute }) {
       if (signal.aborted) throw new ProviderContractError('视频输入准备已取消', { stage: 'prepare', category: 'aborted', acceptance: 'not_accepted' });
       if (s2v) {
         const model = parseModelRef(candidate.model).modelId;
-        const image = await prepareProviderInput(candidate.adapter, { model, filePath: normalized.firstFramePath, signal });
+        const image = await prepareProviderInput(candidate.adapter, { model, filePath: normalized.firstFramePath, signal }, { taskId, attemptId, networkBudget, recordNetworkRoute });
         if (signal.aborted) throw new ProviderContractError('视频输入准备已取消', { stage: 'upload', category: 'aborted', acceptance: 'not_accepted' });
-        const audio = await prepareProviderInput(candidate.adapter, { model, filePath: normalized.audioPath, signal });
+        const audio = await prepareProviderInput(candidate.adapter, { model, filePath: normalized.audioPath, signal }, { taskId, attemptId, networkBudget, recordNetworkRoute });
         return { ...normalized.providerInput, imgDataUrl: image.url, audioUrl: audio.url };
       }
       const mime = { '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.webp': 'image/webp', '.gif': 'image/gif' }[path.extname(normalized.firstFramePath).toLowerCase()];

package/lib/vision-model-routing.js

@@ -12,6 +12,7 @@ import { modelAvailabilityBinding, modelUnavailable } from './model-directory.js
 import { completeVision, VISION_BUDGET } from './vision-core.js';
 import { open } from 'node:fs/promises';
 import { DEFAULT_VISION_INPUT, visionInputLimits } from './vision-image-input.js';
+import { providerNetworkRequirement, networkPolicyError } from './network-policy.js';
 
 const features = Object.freeze({ system: 'unknown', temperature: 'unknown', maxOutputTokens: 'unknown', reasoning: 'unknown' });
 
@@ -50,6 +51,7 @@ function deferredDshPort(host, { prepareImages, orientImages, prepareImageReques
 /** 配置只绑定一个自持模型；CLI 不附加宿主候选。 */
 export function createConfiguredVisionModelPort(provider, model, { allowRateLimited = false, onRateLimit, onModelAvailability, prepareImages = false,
   orientImages = false, prepareImageRequest } = {}) {
+  if (providerNetworkRequirement(provider)) throw networkPolicyError('IRIS_NETWORK_CAPABILITY_UNSUPPORTED', '独立视觉尚未接入此网络目录；已停止调用，不会默认直连。请保留原视觉配置');
   const parsed = parseModelRef(resolveModelRef(provider, 'vision', model));
   const id = 'iris-provider:' + encodeURIComponent(provider.id);
   if (!parsed) return unavailablePort(id);