From 983b53ef2f523c3cc32b54bf2d618c825fc59dac Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 20 Aug 2026 18:48:36 +0000
Subject: [PATCH 1/3] =?UTF-8?q?feat(=E6=8E=A7=E5=88=B6=E5=8F=B0):=20Consol?=
 =?UTF-8?q?e=20v2=20P3=20=E4=BA=A7=E7=89=A9=E6=A0=8F=E4=B8=8E=20P2=20fail-?=
 =?UTF-8?q?closed=20=E6=94=B6=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Overlay artifacts live under .dyro/families/<parent>/artifacts.jsonl
and a jailed artifacts/<id> path. Console GET list/metadata/image
bytes stay read-only; video is a card. Pairing readers no longer hide
CHANNEL_LOG_INCONSISTENT as unread 0. Version stays 0.7.7.

Co-authored-by: Dandre Yang <Dandre126@users.noreply.github.com>
---
 CHANGELOG.md                                  |  10 +
 .../designs/console-v2-live-family-signals.md |  10 +-
 src/dyro/cli.py                               |   2 +
 src/dyro/console/_inspect_worker.py           |   7 +
 src/dyro/console/assets.py                    |   8 +-
 src/dyro/console/assets/app.js                | 255 +++++++++-
 src/dyro/console/assets/styles.css            |  25 +
 src/dyro/console/families.py                  | 124 ++++-
 src/dyro/console/inspection.py                |  24 +-
 src/dyro/console/overview.py                  |  57 +++
 src/dyro/console/server.py                    |  59 ++-
 src/dyro/families.py                          | 467 +++++++++++++++++-
 tests/test_cli.py                             |   2 +
 tests/test_console_artifacts.py               | 276 +++++++++++
 tests/test_console_assets.py                  |   9 +
 tests/test_console_inspection.py              |  39 ++
 tests/test_console_server.py                  |  86 +++-
 tests/test_families.py                        | 226 ++++++++-
 18 files changed, 1632 insertions(+), 54 deletions(-)
 create mode 100644 tests/test_console_artifacts.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fb3797c..9588af4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -32,6 +32,16 @@
   (`parent` or sender), not `F(sender)`. Channel pairing and ack treat
   `msg_N` as per-family; HTTP ack is bound to the URL family, and CLI
   `line ack` fail-closes when the same id exists in more than one family.
+- Console P3: overlay artifact rail on the existing workspace-detail
+  channel/event panes. Authority is
+  `.dyro/families/<parent>/artifacts.jsonl` plus jailed
+  `artifacts/<id>` bytes. Images are same-origin bearer `fetch` then
+  `blob:` URLs (`img-src 'self' blob:`). Video is a card with a
+  copyable `--dry-run` open command; no `<video>` and no `media-src`.
+  Artifact HTTP is GET only. Inspection worker stays read-only and
+  cannot write artifacts. Unpaired channel logs are no longer hidden
+  as unread 0; `msg_N` page keys stay `(family, id)`. Version stays
+  `0.7.7`.
 - User slash Skill `dyro-line-family` (`/dyro-line-family`) preflights
   `line spawn` / `line merge` / `line sync` and prints one `--yes` command
   for the human. It does not execute the mutation, invent `--push`, or
diff --git a/docs/designs/console-v2-live-family-signals.md b/docs/designs/console-v2-live-family-signals.md
index 832fd5f..efd0b24 100644
--- a/docs/designs/console-v2-live-family-signals.md
+++ b/docs/designs/console-v2-live-family-signals.md
@@ -93,7 +93,7 @@ operator             每个家族组的固定成员
 
 hash 只保存安全 alias 与当前 tab：`#w/<alias>`、`#w/<alias>/family`、`#w/<alias>/events`、`#w/<alias>/channel`。不把 bearer、路径或消息正文写入 URL。
 
-详情里已有的线 / 任务 / 目标清单、独立 Proof inspect 和关闭按钮不变。点击任务仍进入既有 Task 摘要，不新开「任务工作室」。产物栏是频道 / 事件上的 overlay，不是第四个一级 tab；P3 才渲染，P1 / P2 只保留占位文案「产物尚未开放」。
+详情里已有的线 / 任务 / 目标清单、独立 Proof inspect 和关闭按钮不变。点击任务仍进入既有 Task 摘要，不新开「任务工作室」。产物栏是频道 / 事件上的 overlay，不是第四个一级 tab；P1 / P2 只保留占位文案「产物尚未开放」，P3 已落地并按能力渲染。
 
 ---
 
@@ -219,7 +219,7 @@ dyro --workspace example --dry-run line sync core_pay
 
 ## 6. 产物栏
 
-P3 才实现。P1 / P2 的频道行若带 `artifact` kind，只显示「产物尚未开放」和安全 id，不取文件。
+P3 已落地。P1 / P2 的频道行若带 `artifact` kind，只显示「产物尚未开放」和安全 id，不取文件。
 
 权威位置是 overlay，不是产品 git worktree，也不是 Proof store：
 
@@ -369,7 +369,7 @@ dyro --workspace example line ack <id>
 
 其它字段、未知 kind、`to` 落在家族外、空 body 的 `decision` / `contract`，全部拒绝。成功响应是统一 Console 封套，`data` 只含新行 id 与 seq。该 POST 走既有 session、Host、Origin、Content-Length、并发和 10 秒 deadline；body 上限 4 KiB。
 
-meta `surfaces` 增加 `events`（P1）与 `families`（P2）。页面按能力拉取，overview 轮询仍不带这些列表。
+meta `surfaces` 增加 `events`（P1）、`families`（P2）与 `artifacts`（P3）。页面按能力拉取，overview 轮询仍不带这些列表。
 
 ---
 
@@ -395,7 +395,7 @@ meta `surfaces` 增加 `events`（P1）与 `families`（P2）。页面按能力
 
 ### P1 · 事件 + 图
 
-P1 已在本 PR 落地（事件尾、`parent` 投影、一层家族图、SSE `after=`）。P3 仍未实现。
+P1 已在本列车落地（事件尾、`parent` 投影、一层家族图、SSE `after=`）。P3 已落地。
 
 - 写入并读取 `.dyro/events.jsonl`。
 - line DTO 投影 `parent`。
@@ -417,6 +417,8 @@ P2 已落地：`channel.jsonl` / `acks`、`line post|inbox|ack`、`next family_u
 
 ### P3 · 产物
 
+P3 已落地：overlay 清单与同源图像（bearer `fetch` 后赋 `blob:` URL），视频只出卡片，不扫描 harness home 或 sidecar 输出目录。
+
 - overlay 产物清单与同源图像。
 - 视频只出卡片。
 - 不扫描 harness home，不把 sidecar 输出目录当成家族产物。
diff --git a/src/dyro/cli.py b/src/dyro/cli.py
index 3fbca0d..8dab197 100644
--- a/src/dyro/cli.py
+++ b/src/dyro/cli.py
@@ -412,6 +412,8 @@ def _print_family_unacked_attention(config: Config) -> None:
     payload = _family_unacked_fields(config)["family_unacked"]
     if isinstance(payload, dict) and payload.get("count"):
         print("家族频道有未读信号")
+    if isinstance(payload, dict) and payload.get("inconsistent_families"):
+        print("家族频道日志不一致")
 
 
 def _inbox_viewer(config: Config) -> str:
diff --git a/src/dyro/console/_inspect_worker.py b/src/dyro/console/_inspect_worker.py
index e423643..76fe5a3 100644
--- a/src/dyro/console/_inspect_worker.py
+++ b/src/dyro/console/_inspect_worker.py
@@ -297,6 +297,13 @@ def main(argv: list[str] | None = None) -> int:
             service_arguments["registry_loader"] = lambda: target_registry
         service = ConsoleOverviewService(**service_arguments)
         operation = request.get("op")
+        if operation in {
+            "post_channel",
+            "artifact_write",
+            "artifacts_write",
+            "put_artifact",
+        }:
+            raise ConsoleOverviewError("OVERVIEW_UNAVAILABLE")
         if operation == "overview":
             payload = service.page(
                 cursor=request.get("cursor"),
diff --git a/src/dyro/console/assets.py b/src/dyro/console/assets.py
index 386ccd5..5b9f837 100644
--- a/src/dyro/console/assets.py
+++ b/src/dyro/console/assets.py
@@ -27,13 +27,13 @@ class ConsoleAsset:
     ),
     "app.js": (
         "text/javascript; charset=utf-8",
-        "194ca77cdfac96539dd391f43d6d14a5e15bf594ec21a280c886a21536124c23",
-        60441,
+        "e43c7730b8195670b6f9f04c05c976f929e9a7a7545841109b51b62ba4e9011b",
+        68483,
     ),
     "styles.css": (
         "text/css; charset=utf-8",
-        "810b196f7e72418d7253c1f2aa490f82fbd51a98a12d2db2d51e8303b4632f07",
-        15492,
+        "b17091b8edb7b64b19f079d5c2a37a83aaead4de9ce0f2ba0cbf0d2002208728",
+        16056,
     ),
 }
 
diff --git a/src/dyro/console/assets/app.js b/src/dyro/console/assets/app.js
index e45a475..a283b38 100644
--- a/src/dyro/console/assets/app.js
+++ b/src/dyro/console/assets/app.js
@@ -24,6 +24,8 @@ const state = {
   channelKind: "",
   channelFrom: "",
   channelUnacked: false,
+  artifactItems: [],
+  artifactBlobs: new Map(),
 };
 const HEALTH_LABELS = { healthy: "健康", degraded: "需关注", unavailable: "不可用" };
 const FRESHNESS_LABELS = { fresh: "读取完整", partial: "部分可读", stale: "待刷新" };
@@ -135,6 +137,22 @@ const ERROR_LABELS = {
   FAMILY_POST_INVALID: "家族频道请求无效",
   CHANNEL_CURSOR_INVALID: "频道游标已失效，已从头读取",
   CHANNEL_BODY_INVALID: "家族信号正文不接受",
+  CHANNEL_LOG_INCONSISTENT: "家族频道日志不一致",
+  ARTIFACT_NOT_FOUND: "产物不存在",
+  ARTIFACT_UNAVAILABLE: "产物不可用",
+  ARTIFACT_TOO_LARGE: "产物超出大小上限",
+  ARTIFACT_PATH_INVALID: "产物路径无效",
+};
+const ARTIFACT_TYPE_LABELS = {
+  review: "复核",
+  image: "图像",
+  chart: "图表",
+  video: "视频",
+};
+const REVIEW_CONCLUSION_LABELS = {
+  pass: "通过",
+  fail: "未通过",
+  inconclusive: "无法判定",
 };
 const EVENT_KIND_LABELS = {
   spawn: "子线已创建",
@@ -883,9 +901,13 @@ function renderFamilyTree(alias, lines, tasks) {
         const tree = $("family-tree");
         if (tree) tree.replaceWith(renderFamilyGraph(alias, lines, parent, tasks));
         resetChannelState();
+        resetArtifactState();
         loadChannel(alias, parent).catch((error) => {
           if (error && error.message === "SESSION_EXPIRED") expireSession();
         });
+        loadArtifacts(alias, parent).catch((error) => {
+          if (error && error.message === "SESSION_EXPIRED") expireSession();
+        });
         refreshFamilyUnread(alias, parent).catch(() => {});
       });
       nav.append(button);
@@ -1143,12 +1165,14 @@ function renderEventPane() {
   section.append(element("h3", "事件"));
   if (!hasSurface("events")) {
     section.append(element("p", "事件流尚未开放。"));
+    section.append(renderArtifactRail(state.detailAlias, "event-artifact-rail"));
     return section;
   }
   const list = element("ul");
   list.id = "event-list";
   list.className = "event-list";
   section.append(list);
+  section.append(renderArtifactRail(state.detailAlias, "event-artifact-rail"));
   return section;
 }
 
@@ -1158,6 +1182,22 @@ function resetChannelState() {
   state.channelMembers = [];
 }
 
+function resetArtifactState() {
+  for (const url of state.artifactBlobs.values()) {
+    if (typeof url === "string" && url.startsWith("blob:")) URL.revokeObjectURL(url);
+  }
+  state.artifactBlobs = new Map();
+  state.artifactItems = [];
+}
+
+function channelRowKey(message) {
+  return `${text(message && message.family)}\0${text(message && message.id)}`;
+}
+
+function artifactRowKey(family, id) {
+  return `${text(family)}\0${text(id)}`;
+}
+
 function channelFilterText() {
   const parts = [];
   if (state.channelUnacked) parts.push("unacked");
@@ -1168,15 +1208,15 @@ function channelFilterText() {
 
 function describeChannelMessage(message) {
   const kind = text(message && message.kind);
-  const label = kind === "artifact"
-    ? "产物尚未开放"
-    : displayLabel(kind, CHANNEL_KIND_LABELS);
+  const label = displayLabel(kind, CHANNEL_KIND_LABELS);
   const sender = text(message && message.from) || "未提供";
   const recipient = text(message && message.to);
   const who = recipient ? `${sender} → ${recipient}` : `${sender} → 广播`;
   const when = text(message && message.at);
   const local = when ? new Date(when).toLocaleString("zh-CN") : "";
-  const body = kind === "artifact" ? text(message && message.id) : text(message && message.body);
+  const body = kind === "artifact"
+    ? text(message && message.artifact_id) || text(message && message.id)
+    : text(message && message.body);
   const flags = [
     message && message.retracted ? "已撤回" : "",
     message && message.acked ? "已读" : "未读",
@@ -1186,12 +1226,12 @@ function describeChannelMessage(message) {
 
 function appendChannelMessages(messages) {
   if (!Array.isArray(messages) || !messages.length) return;
-  const seen = new Set(state.channelItems.map((item) => text(item.id)));
+  const seen = new Set(state.channelItems.map(channelRowKey));
   for (const message of messages) {
-    const id = text(message && message.id);
-    if (!id || seen.has(id)) continue;
+    const key = channelRowKey(message);
+    if (!text(message && message.id) || seen.has(key)) continue;
     state.channelItems.push(message);
-    seen.add(id);
+    seen.add(key);
   }
 }
 
@@ -1223,7 +1263,7 @@ function renderChannelMessages() {
     if (!message.acked) item.classList.add("unacked");
     item.append(element("p", describeChannelMessage(message)));
     if (text(message.kind) === "artifact") {
-      item.append(element("p", `产物尚未开放 · ${text(message.id)}`));
+      item.append(renderArtifactAttachment(alias, parent, message));
     }
     if (!message.acked && SAFE_ID.test(alias) && SAFE_ID.test(parent)) {
       const ack = element("button", "标为已读");
@@ -1368,7 +1408,7 @@ function renderChannelPane(alias) {
   section.append(element("h3", "频道"));
   if (!hasSurface("families")) {
     section.append(element("p", "尚未开放"));
-    section.append(element("p", "产物尚未开放"));
+    section.append(renderArtifactRail(alias, "channel-artifact-rail"));
     return section;
   }
   section.append(element("p", "人类身份固定为 operator。"));
@@ -1395,10 +1435,201 @@ function renderChannelPane(alias) {
   if (SAFE_ID.test(alias) && SAFE_ID.test(parent)) {
     section.append(renderChannelCompose(alias, parent, members));
   }
-  section.append(element("p", "产物尚未开放"));
+  section.append(renderArtifactRail(alias, "channel-artifact-rail"));
+  return section;
+}
+
+function renderArtifactRail(alias, railId) {
+  const section = element("div");
+  section.className = "artifact-rail";
+  section.id = railId;
+  section.append(element("h4", "产物"));
+  if (!hasSurface("artifacts")) {
+    section.append(element("p", "产物尚未开放"));
+    return section;
+  }
+  const list = element("div");
+  list.className = "artifact-rail-list";
+  section.append(list);
+  fillArtifactRail(list, alias);
   return section;
 }
 
+function fillArtifactRail(list, alias) {
+  if (!list) return;
+  list.replaceChildren();
+  if (!hasSurface("artifacts")) {
+    list.append(element("p", "产物尚未开放"));
+    return;
+  }
+  if (!state.artifactItems.length) {
+    list.append(element("p", "这个家族还没有 overlay 产物。"));
+    return;
+  }
+  for (const artifact of state.artifactItems) {
+    list.append(renderArtifactView(alias, state.familyParent, artifact));
+  }
+}
+
+function renderArtifactRails(alias) {
+  for (const railId of ["channel-artifact-rail", "event-artifact-rail"]) {
+    const rail = $(railId);
+    if (!rail) continue;
+    const list = rail.querySelector(".artifact-rail-list");
+    if (list) fillArtifactRail(list, alias);
+  }
+}
+
+function renderArtifactAttachment(alias, parent, message) {
+  const wrap = element("div");
+  wrap.className = "artifact-attachment";
+  if (!hasSurface("artifacts")) {
+    wrap.append(element("p", `产物尚未开放 · ${text(message.id)}`));
+    return wrap;
+  }
+  const artifactId = text(message && message.artifact_id);
+  if (!SAFE_ID.test(artifactId)) {
+    wrap.append(element("p", "产物不可用"));
+    return wrap;
+  }
+  const artifact = state.artifactItems.find((item) => text(item.id) === artifactId);
+  if (!artifact) {
+    wrap.append(element("p", "产物不可用"));
+    return wrap;
+  }
+  wrap.append(renderArtifactView(alias, parent, artifact));
+  return wrap;
+}
+
+function renderArtifactView(alias, parent, artifact) {
+  const card = element("div");
+  card.className = "artifact-card";
+  const kind = text(artifact && artifact.type);
+  const title = text(artifact && artifact.title) || text(artifact && artifact.id);
+  card.append(element("p", `${displayLabel(kind, ARTIFACT_TYPE_LABELS)} · ${title}`));
+  if (kind === "review") {
+    const conclusion = displayLabel(text(artifact && artifact.conclusion), REVIEW_CONCLUSION_LABELS);
+    const bound = text(artifact && artifact.bound_hash).slice(0, 12);
+    card.append(element("p", bound ? `${conclusion} · ${bound}` : conclusion));
+    return card;
+  }
+  if (kind === "video") {
+    const meta = [
+      text(artifact && artifact.duration),
+      count(artifact && artifact.size) ? `${count(artifact.size)} B` : "",
+    ].filter(Boolean).join(" · ");
+    if (meta) card.append(element("p", meta));
+    const command = text(artifact && artifact.open_command);
+    if (command && !command.includes("--yes") && !command.includes("--push")) {
+      card.append(commandRow(command));
+    }
+    return card;
+  }
+  if (kind === "chart") {
+    const points = Array.isArray(artifact && artifact.points) ? artifact.points : [];
+    if (points.length) {
+      card.append(renderChartSvg(points));
+      return card;
+    }
+  }
+  if (kind === "image" || kind === "chart") {
+    const img = document.createElement("img");
+    img.alt = title;
+    img.className = "artifact-image";
+    bindArtifactImage(img, alias, parent, text(artifact && artifact.id));
+    card.append(img);
+    return card;
+  }
+  card.append(element("p", "产物不可用"));
+  return card;
+}
+
+function renderChartSvg(points) {
+  const svg = document.createElementNS("http://www.w3.org/2000/svg", "svg");
+  svg.setAttribute("viewBox", "0 0 200 80");
+  svg.setAttribute("class", "artifact-chart");
+  svg.setAttribute("role", "img");
+  const xs = points.map((item) => Number(item.x)).filter((value) => Number.isFinite(value));
+  const ys = points.map((item) => Number(item.y)).filter((value) => Number.isFinite(value));
+  if (!xs.length || !ys.length) return svg;
+  const minX = Math.min(...xs);
+  const maxX = Math.max(...xs);
+  const minY = Math.min(...ys);
+  const maxY = Math.max(...ys);
+  const spanX = maxX - minX || 1;
+  const spanY = maxY - minY || 1;
+  const coords = points.map((item) => {
+    const x = 8 + ((Number(item.x) - minX) / spanX) * 184;
+    const y = 72 - ((Number(item.y) - minY) / spanY) * 64;
+    return `${x},${y}`;
+  }).join(" ");
+  const line = document.createElementNS("http://www.w3.org/2000/svg", "polyline");
+  line.setAttribute("points", coords);
+  line.setAttribute("fill", "none");
+  line.setAttribute("stroke", "currentColor");
+  line.setAttribute("stroke-width", "2");
+  svg.append(line);
+  return svg;
+}
+
+function bindArtifactImage(img, alias, parent, artifactId) {
+  if (!SAFE_ID.test(alias) || !SAFE_ID.test(parent) || !SAFE_ID.test(artifactId)) {
+    img.alt = "产物不可用";
+    return;
+  }
+  const key = artifactRowKey(parent, artifactId);
+  const cached = state.artifactBlobs.get(key);
+  if (cached) {
+    img.src = cached;
+    return;
+  }
+  fetchArtifactBytes(alias, parent, artifactId).then((url) => {
+    if (!url) {
+      img.alt = "产物不可用";
+      return;
+    }
+    state.artifactBlobs.set(key, url);
+    img.src = url;
+  }).catch((error) => {
+    if (error && error.message === "SESSION_EXPIRED") expireSession();
+    img.alt = "产物不可用";
+  });
+}
+
+async function fetchArtifactBytes(alias, parent, artifactId) {
+  const response = await fetch(
+    `/api/v1/workspaces/${encodeURIComponent(alias)}/families/${encodeURIComponent(parent)}/artifacts/${encodeURIComponent(artifactId)}`,
+    {
+      headers: { Authorization: `Bearer ${state.bearer}` },
+      cache: "no-store",
+      credentials: "omit",
+    },
+  );
+  if (response.status === 401) throw new Error("SESSION_EXPIRED");
+  if (!response.ok) throw new Error("ARTIFACT_UNAVAILABLE");
+  const type = text(response.headers.get("Content-Type"));
+  if (!type.startsWith("image/")) throw new Error("ARTIFACT_UNAVAILABLE");
+  const blob = await response.blob();
+  return URL.createObjectURL(blob);
+}
+
+async function loadArtifacts(alias, parent) {
+  if (!hasSurface("artifacts") || document.hidden || !SAFE_ID.test(alias) || !SAFE_ID.test(parent)) {
+    renderArtifactRails(alias);
+    return;
+  }
+  const payload = await request(
+    `/api/v1/workspaces/${encodeURIComponent(alias)}/families/${encodeURIComponent(parent)}/artifacts`,
+    `artifacts:${alias}:${parent}`,
+  );
+  if (!payload || !payload.data) return;
+  state.artifactItems = Array.isArray(payload.data.artifacts)
+    ? payload.data.artifacts.filter((item) => item && SAFE_ID.test(text(item.id)))
+    : [];
+  renderArtifactRails(alias);
+  renderChannelMessages();
+}
+
 function reloadOpenChannel() {
   const alias = state.detailAlias;
   const parent = state.familyParent;
@@ -1518,6 +1749,7 @@ function resetEventState() {
   state.liveEdges = new Set();
   state.sseFailed = false;
   resetChannelState();
+  resetArtifactState();
 }
 
 async function loadWorkspace(alias, silent = false) {
@@ -1564,6 +1796,7 @@ async function loadWorkspace(alias, silent = false) {
     if (state.familyParent) {
       await refreshFamilyUnread(alias, state.familyParent);
       await loadChannel(alias, state.familyParent);
+      await loadArtifacts(alias, state.familyParent);
     }
   } catch (error) {
     if (error && error.message === "SESSION_EXPIRED") {
diff --git a/src/dyro/console/assets/styles.css b/src/dyro/console/assets/styles.css
index 9f6d838..34cd3f0 100644
--- a/src/dyro/console/assets/styles.css
+++ b/src/dyro/console/assets/styles.css
@@ -392,6 +392,31 @@ footer { border-top: 1px solid var(--border); color: var(--muted); font-size: .8
   width: 100%;
 }
 .channel-toolbar select { max-width: 100%; }
+.artifact-rail {
+  border-top: 1px solid var(--border);
+  margin-top: .75rem;
+  padding-top: .65rem;
+}
+.artifact-rail h4 { font-size: .82rem; margin: 0 0 .4rem; }
+.artifact-rail-list { display: grid; gap: .5rem; }
+.artifact-card, .artifact-attachment {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: .4rem;
+  padding: .45rem .55rem;
+}
+.artifact-image {
+  display: block;
+  max-width: 100%;
+  margin-top: .35rem;
+}
+.artifact-chart {
+  color: var(--accent);
+  display: block;
+  height: 5rem;
+  margin-top: .35rem;
+  width: 100%;
+}
 
 @media (max-width: 767px) {
   .live-panes { grid-template-columns: 1fr; }
diff --git a/src/dyro/console/families.py b/src/dyro/console/families.py
index c598f70..1dc41a1 100644
--- a/src/dyro/console/families.py
+++ b/src/dyro/console/families.py
@@ -15,9 +15,11 @@
     CHANNEL_KINDS,
     DEFAULT_CHANNEL_LIMIT,
     HUMAN_POST_KINDS,
+    IMAGE_MEDIA_TYPES,
     MAX_CHANNEL_LIMIT,
     OPERATOR_ID,
     OPERATOR_POST_KINDS,
+    FamilyArtifactError,
     FamilyChannelError,
     ack_channel_message,
     channel_at,
@@ -25,10 +27,14 @@
     family_graph,
     family_ids,
     family_members,
+    find_channel_message,
     infer_post_family,
     line_records,
+    list_family_artifacts,
     post_channel_message,
     read_acks,
+    read_family_artifact,
+    read_family_artifact_bytes,
     read_visible_channel,
     retracted_message_ids,
     unread_by_member,
@@ -142,7 +148,10 @@ def family_unread_maps(
         safe_parent = _line_id(parent_id)
         if not safe_parent:
             continue
-        counts = unread_by_member(config, safe_parent, lines)
+        try:
+            counts = unread_by_member(config, safe_parent, lines)
+        except FamilyChannelError as exc:
+            raise ConsoleOverviewError(exc.code) from exc
         members[safe_parent] = counts
         cards[safe_parent] = counts.get(OPERATOR_ID, 0)
     return cards, members
@@ -157,6 +166,7 @@ def channel_cursor_digest(record: Mapping[str, object]) -> str:
         "family": record.get("family", ""),
         "body": record.get("body", ""),
         "retracts": record.get("retracts", ""),
+        "facts": record.get("facts") if isinstance(record.get("facts"), dict) else {},
     }
     return hashlib.sha256(canonical_json_bytes(payload)).hexdigest()
 
@@ -264,6 +274,7 @@ def project_channel_message(
             "retracts": "",
             "retracted": False,
             "acked": False,
+            "artifact_id": "",
         }
     sender = _member_token(record.get("from"))
     recipient = record.get("to")
@@ -273,6 +284,9 @@ def project_channel_message(
     if len(body) > 2048:
         body = ""
     retracts = record.get("retracts") if isinstance(record.get("retracts"), str) else ""
+    facts = record.get("facts") if isinstance(record.get("facts"), dict) else {}
+    artifact_raw = facts.get("artifact_id")
+    artifact_id = _line_id(artifact_raw) if isinstance(artifact_raw, str) and artifact_raw else ""
     return {
         "id": message_id,
         "seq": seq,
@@ -285,6 +299,7 @@ def project_channel_message(
         "retracts": retracts,
         "retracted": message_id in retracted_ids,
         "acked": message_id in acked,
+        "artifact_id": artifact_id,
     }
 
 
@@ -303,17 +318,17 @@ def channel_page(
     if parent_id not in family_ids(lines):
         raise ConsoleOverviewError("FAMILY_NOT_FOUND")
     after_seq = 0
-    if after:
-        after_seq, message_id, digest = decode_channel_cursor(secret, after)
-        current = channel_at(config, parent_id, after_seq)
-        if (
-            current is None
-            or current.get("id") != message_id
-            or channel_cursor_digest(current) != digest
-        ):
-            raise ConsoleOverviewError("CHANNEL_CURSOR_INVALID")
     filters = parse_channel_filter(filter_text)
     try:
+        if after:
+            after_seq, message_id, digest = decode_channel_cursor(secret, after)
+            current = channel_at(config, parent_id, after_seq)
+            if (
+                current is None
+                or current.get("id") != message_id
+                or channel_cursor_digest(current) != digest
+            ):
+                raise ConsoleOverviewError("CHANNEL_CURSOR_INVALID")
         records = [
             item
             for item in read_visible_channel(config, parent_id, viewer=OPERATOR_ID)
@@ -388,11 +403,12 @@ def apply_human_channel_post(
         if kind == "ack":
             if body_raw or to_raw:
                 raise ConsoleOverviewError("FAMILY_POST_INVALID")
+            located = find_channel_message(config, ack_id, family=parent_id)
+            if located is None or located[0] != parent_id:
+                raise ConsoleOverviewError("CHANNEL_MESSAGE_NOT_FOUND")
             result = ack_channel_message(
                 config, ack_id, family=parent_id, clock=clock
             )
-            if result["family"] != parent_id:
-                raise ConsoleOverviewError("CHANNEL_MESSAGE_NOT_FOUND")
             return {"id": result["id"], "seq": result["seq"]}
         if ack_id:
             raise ConsoleOverviewError("FAMILY_POST_INVALID")
@@ -414,3 +430,87 @@ def apply_human_channel_post(
     except FamilyChannelError as exc:
         raise ConsoleOverviewError(exc.code) from exc
     return {"id": result["id"], "seq": result["seq"]}
+
+
+def project_artifact(
+    record: Mapping[str, object],
+    *,
+    alias: str,
+    parent_id: str,
+) -> dict[str, object]:
+    artifact_id = _line_id(record.get("id"))
+    artifact_type = record.get("type")
+    title = record.get("title") if isinstance(record.get("title"), str) else ""
+    conclusion = record.get("conclusion") if isinstance(record.get("conclusion"), str) else ""
+    bound_hash = record.get("bound_hash") if isinstance(record.get("bound_hash"), str) else ""
+    media_type = record.get("media_type") if isinstance(record.get("media_type"), str) else ""
+    size = record.get("size")
+    duration = record.get("duration") if isinstance(record.get("duration"), str) else ""
+    points_raw = record.get("points")
+    points: list[dict[str, object]] = []
+    if isinstance(points_raw, list):
+        for item in points_raw[:256]:
+            if not isinstance(item, Mapping):
+                continue
+            x_value = item.get("x")
+            y_value = item.get("y")
+            if isinstance(x_value, (int, float)) and isinstance(y_value, (int, float)):
+                if isinstance(x_value, bool) or isinstance(y_value, bool):
+                    continue
+                points.append({"x": x_value, "y": y_value})
+    open_command = ""
+    if artifact_type == "video" and alias and parent_id:
+        open_command = f"dyro --workspace {alias} --dry-run line inbox --family {parent_id}"
+    return {
+        "id": artifact_id,
+        "type": artifact_type if artifact_type in {"review", "image", "chart", "video"} else "",
+        "title": title[:80],
+        "conclusion": conclusion if conclusion in {"pass", "fail", "inconclusive"} else "",
+        "bound_hash": bound_hash[:12],
+        "media_type": media_type if media_type in IMAGE_MEDIA_TYPES or media_type == "application/json" else "",
+        "size": size if type(size) is int and size >= 0 else 0,
+        "duration": duration[:16],
+        "points": points,
+        "open_command": open_command,
+    }
+
+
+def artifacts_payload(config: Config, parent_id: str, *, alias: str) -> dict[str, object]:
+    lines = line_records(config)
+    if parent_id not in family_ids(lines):
+        raise ConsoleOverviewError("FAMILY_NOT_FOUND")
+    try:
+        records = list_family_artifacts(config, parent_id)
+    except FamilyArtifactError as exc:
+        raise ConsoleOverviewError(exc.code) from exc
+    return {
+        "family": parent_id,
+        "artifacts": [
+            project_artifact(item, alias=alias, parent_id=parent_id) for item in records
+        ],
+    }
+
+
+def artifact_payload(
+    config: Config, parent_id: str, artifact_id: str, *, alias: str
+) -> dict[str, object]:
+    lines = line_records(config)
+    if parent_id not in family_ids(lines):
+        raise ConsoleOverviewError("FAMILY_NOT_FOUND")
+    try:
+        record = read_family_artifact(config, parent_id, artifact_id)
+    except FamilyArtifactError as exc:
+        raise ConsoleOverviewError(exc.code) from exc
+    return project_artifact(record, alias=alias, parent_id=parent_id)
+
+
+def artifact_bytes_payload(
+    config: Config, parent_id: str, artifact_id: str
+) -> tuple[str, bytes]:
+    lines = line_records(config)
+    if parent_id not in family_ids(lines):
+        raise ConsoleOverviewError("FAMILY_NOT_FOUND")
+    try:
+        return read_family_artifact_bytes(config, parent_id, artifact_id)
+    except FamilyArtifactError as exc:
+        raise ConsoleOverviewError(exc.code) from exc
diff --git a/src/dyro/console/inspection.py b/src/dyro/console/inspection.py
index db7659f..8136cad 100644
--- a/src/dyro/console/inspection.py
+++ b/src/dyro/console/inspection.py
@@ -180,6 +180,24 @@ def post_channel(
         self, alias: str, parent: str, payload: Mapping[str, object]
     ) -> dict[str, object]:
         """Write overlay signals in the listener. Never start the inspection worker."""
+        return self._listener_service().post_channel(alias, parent, payload)
+
+    def artifacts(self, alias: str, parent: str) -> dict[str, object]:
+        """Read overlay artifact metadata in the listener. No worker, no git."""
+        return self._listener_service().artifacts(alias, parent)
+
+    def artifact(self, alias: str, parent: str, artifact_id: str) -> dict[str, object]:
+        """Read one overlay artifact DTO in the listener. No worker, no git."""
+        return self._listener_service().artifact(alias, parent, artifact_id)
+
+    def artifact_bytes(
+        self, alias: str, parent: str, artifact_id: str
+    ) -> tuple[str, bytes] | None:
+        """Read jailed image bytes in the listener. Video never streams."""
+        return self._listener_service().artifact_bytes(alias, parent, artifact_id)
+
+    def _listener_service(self):
+        """Overlay-only Console service in this process. No inspection worker."""
         from ..config import load
         from ..hub import WorkspaceRecord, WorkspaceRegistry, load_registry_from_home
         from .overview import ConsoleOverviewService
@@ -200,11 +218,10 @@ def registry_loader() -> WorkspaceRegistry:
             def registry_loader() -> WorkspaceRegistry:
                 return load_registry_from_home(home)
 
-        service = ConsoleOverviewService(
+        return ConsoleOverviewService(
             registry_loader=registry_loader,
             cursor_secret=self._cursor_secret,
         )
-        return service.post_channel(alias, parent, payload)
 
     def system(self) -> dict[str, object]:
         return self._request({"op": "system"})
@@ -601,6 +618,7 @@ def _validate_channel(cls, data: dict[str, object]) -> None:
                 "retracts",
                 "retracted",
                 "acked",
+                "artifact_id",
             }:
                 raise ConsoleOverviewError("OVERVIEW_UNAVAILABLE")
             sender = item.get("from")
@@ -609,6 +627,7 @@ def _validate_channel(cls, data: dict[str, object]) -> None:
             retracts = item.get("retracts")
             at = item.get("at")
             kind = item.get("kind")
+            artifact_id = item.get("artifact_id")
             if (
                 type(item.get("seq")) is not int
                 or item["seq"] < 0
@@ -626,6 +645,7 @@ def _validate_channel(cls, data: dict[str, object]) -> None:
                 or len(retracts) > 80
                 or type(item.get("retracted")) is not bool
                 or type(item.get("acked")) is not bool
+                or not (artifact_id == "" or cls._safe_alias(artifact_id))
             ):
                 raise ConsoleOverviewError("OVERVIEW_UNAVAILABLE")
         cursor = data["next_cursor"]
diff --git a/src/dyro/console/overview.py b/src/dyro/console/overview.py
index 7c355bc..fc91b17 100644
--- a/src/dyro/console/overview.py
+++ b/src/dyro/console/overview.py
@@ -346,6 +346,63 @@ def post_channel(
         data = apply_human_channel_post(config, parent_id, payload)
         return self._envelope(data, warning_codes)
 
+    def artifacts(self, alias: str, parent: str) -> dict[str, object]:
+        """Overlay artifact list. Listener or worker may call this; no git."""
+        from .families import artifacts_payload
+
+        try:
+            parent_id = validate_id(parent, "父开发线 ID")
+        except ValidationError:
+            raise ConsoleOverviewError("FAMILY_PARENT_INVALID") from None
+        config, warning_codes = self._workspace_config(alias)
+        try:
+            data = artifacts_payload(config, parent_id, alias=alias)
+        except ConsoleOverviewError:
+            raise
+        return self._envelope(data, warning_codes)
+
+    def artifact(self, alias: str, parent: str, artifact_id: str) -> dict[str, object]:
+        """Overlay artifact metadata. Image bytes use ``artifact_bytes``."""
+        from .families import artifact_payload
+
+        try:
+            parent_id = validate_id(parent, "父开发线 ID")
+            token = validate_id(artifact_id, "产物 ID")
+        except ValidationError:
+            raise ConsoleOverviewError("ARTIFACT_ID_INVALID") from None
+        config, warning_codes = self._workspace_config(alias)
+        try:
+            data = artifact_payload(config, parent_id, token, alias=alias)
+        except ConsoleOverviewError:
+            raise
+        return self._envelope(data, warning_codes)
+
+    def artifact_bytes(
+        self, alias: str, parent: str, artifact_id: str
+    ) -> tuple[str, bytes] | None:
+        """Same-origin image bytes.  Video and review return ``None``."""
+        from .families import artifact_bytes_payload, artifact_payload
+
+        try:
+            parent_id = validate_id(parent, "父开发线 ID")
+            token = validate_id(artifact_id, "产物 ID")
+        except ValidationError:
+            raise ConsoleOverviewError("ARTIFACT_ID_INVALID") from None
+        config, _warning_codes = self._workspace_config(alias)
+        try:
+            meta = artifact_payload(config, parent_id, token, alias=alias)
+            media_type = meta.get("media_type")
+            if meta.get("type") == "video" or media_type not in {
+                "image/png",
+                "image/jpeg",
+                "image/gif",
+                "image/webp",
+            }:
+                return None
+            return artifact_bytes_payload(config, parent_id, token)
+        except ConsoleOverviewError:
+            raise
+
     def system(self) -> dict[str, object]:
         """Return cached update facts. Do not probe PATH or start a network check."""
         warnings: set[str] = set()
diff --git a/src/dyro/console/server.py b/src/dyro/console/server.py
index 0efef13..85bb5ff 100644
--- a/src/dyro/console/server.py
+++ b/src/dyro/console/server.py
@@ -28,7 +28,7 @@
 REQUEST_DEADLINE_SECONDS = 10.0
 MAX_CONCURRENT_REQUESTS = 8
 _CSP = (
-    "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; "
+    "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self' blob:; "
     "connect-src 'self'; worker-src 'none'; object-src 'none'; base-uri 'none'; "
     "form-action 'none'; frame-ancestors 'none'"
 )
@@ -316,12 +316,26 @@ def _dispatch(self) -> None:
                     "data": {
                         "version": __version__,
                         "surfaces": (
-                            ["overview", "proofs", "system", "events", "families"]
+                            [
+                                "overview",
+                                "proofs",
+                                "system",
+                                "events",
+                                "families",
+                                "artifacts",
+                            ]
                             if self.console.overview_service
                             else []
                         ),
                         "capabilities": (
-                            ["overview", "proofs", "system", "events", "families"]
+                            [
+                                "overview",
+                                "proofs",
+                                "system",
+                                "events",
+                                "families",
+                                "artifacts",
+                            ]
                             if self.console.overview_service
                             else []
                         ),
@@ -463,6 +477,35 @@ def _workspace_resource(self, path: str, query: str) -> None:
                 payload = service.channel(
                     alias, parent, after=after, filter=filter_text, limit=limit
                 )
+            elif len(suffix) == 3 and suffix[0] == "families" and suffix[2] == "artifacts":
+                parent = suffix[1]
+                if not re.fullmatch(r"[A-Za-z0-9][A-Za-z0-9._-]{0,79}", parent):
+                    self._error(400, "FAMILY_PARENT_INVALID")
+                    return
+                payload = service.artifacts(alias, parent)
+            elif len(suffix) == 4 and suffix[0] == "families" and suffix[2] == "artifacts":
+                parent = suffix[1]
+                artifact_id = suffix[3]
+                if not re.fullmatch(r"[A-Za-z0-9][A-Za-z0-9._-]{0,79}", parent):
+                    self._error(400, "FAMILY_PARENT_INVALID")
+                    return
+                if not re.fullmatch(r"[A-Za-z0-9][A-Za-z0-9._-]{0,79}", artifact_id):
+                    self._error(400, "ARTIFACT_ID_INVALID")
+                    return
+                media = service.artifact_bytes(alias, parent, artifact_id)
+                if media is not None:
+                    content_type, body = media
+                    if content_type not in {
+                        "image/png",
+                        "image/jpeg",
+                        "image/gif",
+                        "image/webp",
+                    }:
+                        self._error(400, "ARTIFACT_TYPE_INVALID")
+                        return
+                    self._send(200, body, content_type)
+                    return
+                payload = service.artifact(alias, parent, artifact_id)
             else:
                 self._error(404, "NOT_FOUND")
                 return
@@ -500,11 +543,19 @@ def _overview_error_status(code: str) -> int:
             "CHANNEL_MESSAGE_AMBIGUOUS",
             "CHANNEL_LOG_INVALID",
             "CHANNEL_ACKS_INVALID",
+            "CHANNEL_LOG_INCONSISTENT",
+            "ARTIFACT_ID_INVALID",
+            "ARTIFACT_PATH_INVALID",
+            "ARTIFACT_TOO_LARGE",
+            "ARTIFACT_TYPE_INVALID",
+            "ARTIFACT_LOG_INVALID",
+            "ARTIFACT_NOT_BYTES",
+            "ARTIFACT_ID_DUPLICATE",
         }:
             return 400
         if code in {"FAMILY_POST_FORBIDDEN"}:
             return 403
-        if code in {"WORKSPACE_NOT_FOUND", "FAMILY_NOT_FOUND"}:
+        if code in {"WORKSPACE_NOT_FOUND", "FAMILY_NOT_FOUND", "ARTIFACT_NOT_FOUND"}:
             return 404
         return 503
 
diff --git a/src/dyro/families.py b/src/dyro/families.py
index f1408ff..b50227e 100644
--- a/src/dyro/families.py
+++ b/src/dyro/families.py
@@ -2,6 +2,10 @@
 
 P2 adds the overlay channel and operator ack index.  A channel write and its
 matching ``signal`` event share the overlay lock; one side only is fail-closed.
+
+P3 adds overlay artifacts under ``.dyro/families/<parent>/artifacts/``.  The
+index is ``artifacts.jsonl``; bytes are read only for a known id after a path
+jail.  Readers never scan ``outputs/images/``, harness home, or sidecar dirs.
 """
 
 from __future__ import annotations
@@ -53,8 +57,18 @@
 MAX_CHANNEL_BODY = 2048
 CHANNEL_FILE = "channel.jsonl"
 ACKS_FILE = "acks.json"
+ARTIFACTS_FILE = "artifacts.jsonl"
+ARTIFACTS_DIR = "artifacts"
 MAX_CHANNEL_LOG_BYTES = 2 * 1024 * 1024
+MAX_ARTIFACT_LOG_BYTES = 2 * 1024 * 1024
+MAX_ARTIFACT_BYTES = 1 * 1024 * 1024
+MAX_ARTIFACT_POINTS = 256
+ARTIFACT_TYPES = frozenset({"review", "image", "chart", "video"})
+REVIEW_CONCLUSIONS = frozenset({"pass", "fail", "inconclusive"})
+IMAGE_MEDIA_TYPES = frozenset({"image/png", "image/jpeg", "image/gif", "image/webp"})
 _SAFE_ID = re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$")
+_HEX = re.compile(r"^[0-9a-f]+$")
+_DURATION = re.compile(r"^[0-9]{1,4}(?::[0-9]{2}){0,2}s?$")
 _CONTROL = re.compile(r"[\x00-\x1f\x7f-\x9f]")
 _CREDENTIAL = re.compile(
     r"(?i)(?:"
@@ -80,6 +94,14 @@ def __init__(self, code: str) -> None:
         super().__init__(code)
 
 
+class FamilyArtifactError(DyroError):
+    """Stable, path-free failure while reading overlay family artifacts."""
+
+    def __init__(self, code: str) -> None:
+        self.code = code
+        super().__init__(code)
+
+
 def family_children(lines: Iterable[Mapping[str, object]], parent_id: str) -> tuple[str, ...]:
     """Direct children of ``parent_id``.  Grandchildren are excluded."""
     children: list[str] = []
@@ -159,6 +181,14 @@ def acks_path(config: Config, parent_id: str) -> Path:
     return family_dir(config, parent_id) / ACKS_FILE
 
 
+def artifacts_log_path(config: Config, parent_id: str) -> Path:
+    return family_dir(config, parent_id) / ARTIFACTS_FILE
+
+
+def artifacts_dir(config: Config, parent_id: str) -> Path:
+    return family_dir(config, parent_id) / ARTIFACTS_DIR
+
+
 def sanitize_channel_body(value: object, *, allow_empty: bool = False) -> str:
     if not isinstance(value, str):
         raise FamilyChannelError("CHANNEL_BODY_INVALID")
@@ -243,26 +273,35 @@ def family_unacked(
     items = list(lines) if lines is not None else line_records(config)
     best: dict[str, object] | None = None
     count = 0
+    inconsistent: list[str] = []
     for parent_id in family_ids(items):
         try:
             posts = read_visible_channel(config, parent_id, viewer=OPERATOR_ID)
-        except FamilyChannelError:
+            acked = read_acks(config, parent_id)
+        except FamilyChannelError as exc:
+            if exc.code == "CHANNEL_LOG_INCONSISTENT":
+                inconsistent.append(parent_id)
             continue
-        acked = read_acks(config, parent_id)
         for post in posts:
             if post["id"] in acked:
                 continue
             count += 1
             if best is None or _kind_rank(str(post["kind"])) < _kind_rank(str(best["kind"])):
                 best = post
-    if best is None:
-        return {"count": 0, "kind": "", "family": "", "summary": ""}
-    return {
+    payload: dict[str, object] = {
         "count": count,
-        "kind": best["kind"],
-        "family": best["family"],
-        "summary": _safe_summary(str(best.get("body") or best["kind"])),
+        "kind": best["kind"] if best is not None else "",
+        "family": best["family"] if best is not None else "",
+        "summary": (
+            _safe_summary(str(best.get("body") or best["kind"])) if best is not None else ""
+        ),
     }
+    if inconsistent:
+        payload["inconsistent_families"] = inconsistent
+        if not payload["family"]:
+            payload["family"] = inconsistent[0]
+            payload["summary"] = "CHANNEL_LOG_INCONSISTENT"
+    return payload
 
 
 def unread_by_member(
@@ -274,7 +313,9 @@ def unread_by_member(
     try:
         posts = read_visible_channel(config, parent_id, viewer=OPERATOR_ID)
         acked = read_acks(config, parent_id)
-    except FamilyChannelError:
+    except FamilyChannelError as exc:
+        if exc.code == "CHANNEL_LOG_INCONSISTENT":
+            raise
         return {member: 0 for member in members}
     unacked = [post for post in posts if post["id"] not in acked]
     counts = {member: 0 for member in members}
@@ -307,11 +348,18 @@ def post_channel_message(
     if sender not in members or (recipient and recipient not in members):
         raise FamilyChannelError("FAMILY_TO_INVALID")
     retracts = ""
+    facts: dict[str, object] = {}
     if kind == "retract":
         retracts = _message_id(body)
         body = ""
+    elif kind == "artifact":
+        body = sanitize_channel_body(body, allow_empty=True)
+        if body:
+            if not _SAFE_ID.fullmatch(body):
+                raise FamilyChannelError("CHANNEL_BODY_INVALID")
+            facts = {"artifact_id": body}
     else:
-        body = sanitize_channel_body(body, allow_empty=kind == "artifact")
+        body = sanitize_channel_body(body, allow_empty=False)
     record = {
         "from": sender,
         "to": recipient,
@@ -319,6 +367,7 @@ def post_channel_message(
         "body": body,
         "retracts": retracts,
         "family": parent_id,
+        "facts": facts,
     }
     if dry_run:
         return {**record, "id": "msg_0", "seq": 0, "at": "", "dry_run": True}
@@ -446,6 +495,7 @@ def read_visible_channel(
 def retracted_message_ids(config: Config, parent_id: str) -> frozenset[str]:
     validate_id(parent_id, "父开发线 ID")
     with overlay_lock(config):
+        _assert_channel_paired(config, parent_id)
         records = _read_channel_locked(config, parent_id)
     return frozenset(
         str(item["retracts"])
@@ -484,6 +534,7 @@ def channel_at(config: Config, parent_id: str, seq: int) -> dict[str, object] |
     if type(seq) is not int or seq < 1:
         return None
     with overlay_lock(config):
+        _assert_channel_paired(config, parent_id)
         records = _read_channel_locked(config, parent_id)
     if seq > len(records):
         return None
@@ -518,6 +569,7 @@ def _commit_channel_row(
                 "kind": record["kind"],
                 "body": record["body"],
                 "retracts": record["retracts"],
+                "facts": dict(record.get("facts") or {}),
             }
             append_text(
                 channel_path(config, parent_id),
@@ -631,6 +683,9 @@ def _decode_channel(raw: str) -> dict[str, object]:
         raise FamilyChannelError("CHANNEL_LOG_INVALID")
     seq = decoded.get("seq")
     kind = decoded.get("kind")
+    facts = decoded.get("facts", {})
+    if facts is None:
+        facts = {}
     if (
         type(seq) is not int
         or seq < 1
@@ -643,8 +698,16 @@ def _decode_channel(raw: str) -> dict[str, object]:
         or kind not in CHANNEL_KINDS
         or not isinstance(decoded.get("body"), str)
         or not isinstance(decoded.get("retracts"), str)
+        or not isinstance(facts, dict)
+        or len(facts) > 8
+        or set(facts) - {"artifact_id"}
     ):
         raise FamilyChannelError("CHANNEL_LOG_INVALID")
+    artifact_id = facts.get("artifact_id", "")
+    if artifact_id is None:
+        artifact_id = ""
+    if not isinstance(artifact_id, str) or (artifact_id and not _SAFE_ID.fullmatch(artifact_id)):
+        raise FamilyChannelError("CHANNEL_LOG_INVALID")
     return {
         "id": decoded["id"],
         "seq": seq,
@@ -655,6 +718,7 @@ def _decode_channel(raw: str) -> dict[str, object]:
         "kind": kind,
         "body": decoded["body"],
         "retracts": decoded["retracts"],
+        "facts": {"artifact_id": artifact_id} if artifact_id else {},
     }
 
 
@@ -793,3 +857,386 @@ def _node(
         "in_progress": bool(badge.get("in_progress")),
         "unread": unread_count,
     }
+
+
+def list_family_artifacts(config: Config, parent_id: str) -> list[dict[str, object]]:
+    """Return overlay artifact metadata.  Never scans sidecar or image dirs."""
+    validate_id(parent_id, "父开发线 ID")
+    with overlay_lock(config):
+        records = _read_artifacts_locked(config, parent_id)
+        return [dict(item) for item in records]
+
+
+def read_family_artifact(config: Config, parent_id: str, artifact_id: str) -> dict[str, object]:
+    """Return one overlay artifact.  Unknown ids fail closed."""
+    validate_id(parent_id, "父开发线 ID")
+    artifact_id = _artifact_id(artifact_id)
+    with overlay_lock(config):
+        records = _read_artifacts_locked(config, parent_id)
+        for item in records:
+            if item["id"] == artifact_id:
+                return dict(item)
+    raise FamilyArtifactError("ARTIFACT_NOT_FOUND")
+
+
+def read_family_artifact_bytes(
+    config: Config, parent_id: str, artifact_id: str
+) -> tuple[str, bytes]:
+    """Return jailed image/chart bytes.  Video never streams."""
+    record = read_family_artifact(config, parent_id, artifact_id)
+    media_type = str(record.get("media_type") or "")
+    if record["type"] == "video":
+        raise FamilyArtifactError("ARTIFACT_NOT_BYTES")
+    if record["type"] in {"review"}:
+        raise FamilyArtifactError("ARTIFACT_NOT_BYTES")
+    if record["type"] == "chart" and media_type == "application/json":
+        raise FamilyArtifactError("ARTIFACT_NOT_BYTES")
+    if media_type not in IMAGE_MEDIA_TYPES:
+        raise FamilyArtifactError("ARTIFACT_NOT_BYTES")
+    path = _jailed_artifact_path(config, parent_id, artifact_id)
+    try:
+        size = path.stat().st_size
+    except OSError as exc:
+        raise FamilyArtifactError("ARTIFACT_NOT_FOUND") from exc
+    if size > MAX_ARTIFACT_BYTES:
+        raise FamilyArtifactError("ARTIFACT_TOO_LARGE")
+    try:
+        body = path.read_bytes()
+    except OSError as exc:
+        raise FamilyArtifactError("ARTIFACT_NOT_FOUND") from exc
+    detected = _image_media_type(body)
+    if detected != media_type:
+        raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+    return detected, body
+
+
+def plant_family_artifact(
+    config: Config,
+    parent_id: str,
+    *,
+    artifact_id: str,
+    artifact_type: str,
+    title: str = "",
+    conclusion: str = "",
+    bound_hash: str = "",
+    duration: str = "",
+    size: int = 0,
+    points: list[Mapping[str, object]] | None = None,
+    body: bytes = b"",
+    clock: Callable[[], datetime] | None = None,
+) -> dict[str, object]:
+    """Write one overlay artifact for tests and library callers.  Not a CLI."""
+    validate_id(parent_id, "父开发线 ID")
+    artifact_id = _artifact_id(artifact_id)
+    if artifact_type not in ARTIFACT_TYPES:
+        raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+    title = _artifact_title(title)
+    conclusion_text = ""
+    hash12 = ""
+    duration_text = ""
+    media_type = ""
+    stored: bytes | None = None
+    chart_points: list[dict[str, object]] = []
+    stored_size = 0
+    if artifact_type == "review":
+        if body or points or size:
+            raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+        if conclusion not in REVIEW_CONCLUSIONS:
+            raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+        conclusion_text = conclusion
+        hash12 = _bound_hash12(bound_hash)
+    elif artifact_type == "video":
+        if body or points:
+            raise FamilyArtifactError("ARTIFACT_NOT_BYTES")
+        duration_text = _artifact_duration(duration)
+        if type(size) is not int or size < 0 or size > MAX_ARTIFACT_BYTES:
+            raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+        if not duration_text and size <= 0:
+            raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+        stored_size = size
+    elif artifact_type == "image":
+        if points:
+            raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+        media_type = _image_media_type(body)
+        stored = body
+        stored_size = len(body)
+    elif artifact_type == "chart":
+        if points is not None:
+            if body:
+                raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+            chart_points = _artifact_points(points)
+            stored = json.dumps(
+                {"points": chart_points}, ensure_ascii=False, sort_keys=True
+            ).encode("utf-8")
+            media_type = "application/json"
+            stored_size = len(stored)
+        else:
+            media_type = _image_media_type(body)
+            stored = body
+            stored_size = len(body)
+    if stored is not None and len(stored) > MAX_ARTIFACT_BYTES:
+        raise FamilyArtifactError("ARTIFACT_TOO_LARGE")
+    stamp = _utc(clock).strftime("%Y-%m-%dT%H:%M:%SZ")
+    try:
+        with overlay_lock(config):
+            records = _read_artifacts_locked(config, parent_id)
+            if any(item["id"] == artifact_id for item in records):
+                raise FamilyArtifactError("ARTIFACT_ID_DUPLICATE")
+            seq = (int(records[-1]["seq"]) + 1) if records else 1
+            row = {
+                "id": artifact_id,
+                "seq": seq,
+                "at": stamp,
+                "family": parent_id,
+                "type": artifact_type,
+                "title": title,
+                "conclusion": conclusion_text,
+                "bound_hash": hash12,
+                "media_type": media_type,
+                "size": stored_size,
+                "duration": duration_text,
+            }
+            if artifact_type == "chart" and media_type == "application/json":
+                row["points"] = chart_points
+            if stored is not None:
+                _write_artifact_bytes_locked(config, parent_id, artifact_id, stored)
+            append_text(
+                artifacts_log_path(config, parent_id),
+                json.dumps(row, ensure_ascii=False, sort_keys=True) + "\n",
+            )
+    except FamilyArtifactError:
+        raise
+    except OSError as exc:
+        raise FamilyArtifactError("ARTIFACT_WRITE_FAILED") from exc
+    return row
+
+
+def _read_artifacts_locked(config: Config, parent_id: str) -> list[dict[str, object]]:
+    path = artifacts_log_path(config, parent_id)
+    if path.is_symlink() or (path.exists() and not path.is_file()):
+        raise FamilyArtifactError("ARTIFACT_LOG_INVALID")
+    if not path.exists():
+        return []
+    try:
+        if path.stat().st_size > MAX_ARTIFACT_LOG_BYTES:
+            raise FamilyArtifactError("ARTIFACT_LOG_INVALID")
+        text = path.read_text(encoding="utf-8")
+    except FamilyArtifactError:
+        raise
+    except OSError as exc:
+        raise FamilyArtifactError("ARTIFACT_LOG_INVALID") from exc
+    if not text:
+        return []
+    if not text.endswith("\n"):
+        raise FamilyArtifactError("ARTIFACT_LOG_INVALID")
+    records: list[dict[str, object]] = []
+    expected = 1
+    for line in text.splitlines():
+        if not line:
+            raise FamilyArtifactError("ARTIFACT_LOG_INVALID")
+        record = _decode_artifact(line)
+        if record["seq"] != expected:
+            raise FamilyArtifactError("ARTIFACT_LOG_INVALID")
+        if record["type"] == "chart" and record["media_type"] == "application/json":
+            if not record.get("points"):
+                record["points"] = _load_chart_points_locked(config, parent_id, str(record["id"]))
+        records.append(record)
+        expected += 1
+    return records
+
+
+def _decode_artifact(raw: str) -> dict[str, object]:
+    try:
+        decoded: Any = json.loads(raw)
+    except json.JSONDecodeError as exc:
+        raise FamilyArtifactError("ARTIFACT_LOG_INVALID") from exc
+    if not isinstance(decoded, dict):
+        raise FamilyArtifactError("ARTIFACT_LOG_INVALID")
+    required = (
+        "id",
+        "seq",
+        "at",
+        "family",
+        "type",
+        "title",
+        "conclusion",
+        "bound_hash",
+        "media_type",
+        "size",
+        "duration",
+    )
+    if any(key not in decoded for key in required):
+        raise FamilyArtifactError("ARTIFACT_LOG_INVALID")
+    seq = decoded.get("seq")
+    artifact_type = decoded.get("type")
+    size = decoded.get("size")
+    if (
+        type(seq) is not int
+        or seq < 1
+        or not isinstance(decoded.get("id"), str)
+        or not _SAFE_ID.fullmatch(str(decoded.get("id") or ""))
+        or not isinstance(decoded.get("at"), str)
+        or not isinstance(decoded.get("family"), str)
+        or artifact_type not in ARTIFACT_TYPES
+        or not isinstance(decoded.get("title"), str)
+        or not isinstance(decoded.get("conclusion"), str)
+        or not isinstance(decoded.get("bound_hash"), str)
+        or not isinstance(decoded.get("media_type"), str)
+        or type(size) is not int
+        or size < 0
+        or size > MAX_ARTIFACT_BYTES
+        or not isinstance(decoded.get("duration"), str)
+    ):
+        raise FamilyArtifactError("ARTIFACT_LOG_INVALID")
+    points_raw = decoded.get("points")
+    points: list[dict[str, object]] = []
+    if points_raw is not None:
+        points = _artifact_points(points_raw)
+    return {
+        "id": decoded["id"],
+        "seq": seq,
+        "at": decoded["at"],
+        "family": decoded["family"],
+        "type": artifact_type,
+        "title": decoded["title"],
+        "conclusion": decoded["conclusion"],
+        "bound_hash": decoded["bound_hash"],
+        "media_type": decoded["media_type"],
+        "size": size,
+        "duration": decoded["duration"],
+        "points": points,
+    }
+
+
+def _load_chart_points_locked(
+    config: Config, parent_id: str, artifact_id: str
+) -> list[dict[str, object]]:
+    path = _jailed_artifact_path(config, parent_id, artifact_id)
+    try:
+        if path.stat().st_size > MAX_ARTIFACT_BYTES:
+            raise FamilyArtifactError("ARTIFACT_TOO_LARGE")
+        decoded: Any = json.loads(path.read_text(encoding="utf-8"))
+    except FamilyArtifactError:
+        raise
+    except (OSError, UnicodeError, json.JSONDecodeError) as exc:
+        raise FamilyArtifactError("ARTIFACT_LOG_INVALID") from exc
+    if not isinstance(decoded, dict) or set(decoded) != {"points"}:
+        raise FamilyArtifactError("ARTIFACT_LOG_INVALID")
+    return _artifact_points(decoded.get("points"))
+
+
+def _write_artifact_bytes_locked(
+    config: Config, parent_id: str, artifact_id: str, body: bytes
+) -> None:
+    directory = artifacts_dir(config, parent_id)
+    if directory.exists() and (directory.is_symlink() or not directory.is_dir()):
+        raise FamilyArtifactError("ARTIFACT_PATH_INVALID")
+    directory.mkdir(parents=True, exist_ok=True)
+    path = _jailed_artifact_path(config, parent_id, artifact_id, must_exist=False)
+    path.write_bytes(body)
+
+
+def _jailed_artifact_path(
+    config: Config, parent_id: str, artifact_id: str, *, must_exist: bool = True
+) -> Path:
+    artifact_id = _artifact_id(artifact_id)
+    directory = artifacts_dir(config, parent_id)
+    if directory.exists() and (directory.is_symlink() or not directory.is_dir()):
+        raise FamilyArtifactError("ARTIFACT_PATH_INVALID")
+    path = directory.joinpath(artifact_id)
+    if path.is_symlink():
+        raise FamilyArtifactError("ARTIFACT_PATH_INVALID")
+    if ".." in artifact_id or "/" in artifact_id or "\\" in artifact_id:
+        raise FamilyArtifactError("ARTIFACT_PATH_INVALID")
+    if must_exist and not path.is_file():
+        raise FamilyArtifactError("ARTIFACT_NOT_FOUND")
+    try:
+        if directory.exists():
+            resolved_dir = directory.resolve()
+            resolved = path.resolve()
+            resolved.relative_to(resolved_dir)
+            if resolved.name != artifact_id:
+                raise FamilyArtifactError("ARTIFACT_PATH_INVALID")
+    except FamilyArtifactError:
+        raise
+    except (OSError, ValueError) as exc:
+        raise FamilyArtifactError("ARTIFACT_PATH_INVALID") from exc
+    return path
+
+
+def _artifact_id(value: object) -> str:
+    if not isinstance(value, str) or not _SAFE_ID.fullmatch(value):
+        raise FamilyArtifactError("ARTIFACT_ID_INVALID")
+    if value in {".", ".."} or "/" in value or "\\" in value:
+        raise FamilyArtifactError("ARTIFACT_PATH_INVALID")
+    try:
+        return validate_id(value, "产物 ID")
+    except ValidationError as exc:
+        raise FamilyArtifactError("ARTIFACT_ID_INVALID") from exc
+
+
+def _artifact_title(value: object) -> str:
+    if not isinstance(value, str):
+        raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+    text = unicodedata.normalize("NFC", value).strip()
+    if (
+        not text
+        or len(text) > 80
+        or _CONTROL.search(text)
+        or _CREDENTIAL.search(text)
+        or _REMOTE.search(text)
+        or _ABSOLUTE_PATH.search(text)
+    ):
+        raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+    return text
+
+
+def _bound_hash12(value: object) -> str:
+    if not isinstance(value, str) or len(value) < 12 or len(value) > 64:
+        raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+    lowered = value.lower()
+    if not _HEX.fullmatch(lowered):
+        raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+    return lowered[:12]
+
+
+def _artifact_duration(value: object) -> str:
+    if not isinstance(value, str) or not value:
+        return ""
+    if not _DURATION.fullmatch(value) or len(value) > 16:
+        raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+    return value
+
+
+def _artifact_points(value: object) -> list[dict[str, object]]:
+    if not isinstance(value, list) or len(value) > MAX_ARTIFACT_POINTS:
+        raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+    points: list[dict[str, object]] = []
+    for item in value:
+        if not isinstance(item, Mapping) or set(item) != {"x", "y"}:
+            raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+        x_value = item.get("x")
+        y_value = item.get("y")
+        if isinstance(x_value, bool) or isinstance(y_value, bool):
+            raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+        if not isinstance(x_value, (int, float)) or not isinstance(y_value, (int, float)):
+            raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+        points.append({"x": x_value, "y": y_value})
+    return points
+
+
+def _image_media_type(body: object) -> str:
+    if not isinstance(body, (bytes, bytearray)) or not body:
+        raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
+    data = bytes(body)
+    if len(data) > MAX_ARTIFACT_BYTES:
+        raise FamilyArtifactError("ARTIFACT_TOO_LARGE")
+    if data.startswith(b"\x89PNG\r\n\x1a\n"):
+        return "image/png"
+    if data.startswith(b"\xff\xd8\xff"):
+        return "image/jpeg"
+    if data.startswith(b"GIF87a") or data.startswith(b"GIF89a"):
+        return "image/gif"
+    if len(data) >= 12 and data.startswith(b"RIFF") and data[8:12] == b"WEBP":
+        return "image/webp"
+    raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
diff --git a/tests/test_cli.py b/tests/test_cli.py
index 4e82a9b..4e616c8 100644
--- a/tests/test_cli.py
+++ b/tests/test_cli.py
@@ -2127,4 +2127,6 @@ def test_package_version_matches_pyproject(self) -> None:
         from dyro import __version__
 
         metadata = tomllib.loads(Path("pyproject.toml").read_text(encoding="utf-8"))
+        self.assertEqual(metadata["project"]["version"], "0.7.7")
+        self.assertEqual(__version__, "0.7.7")
         self.assertEqual(__version__, metadata["project"]["version"])
diff --git a/tests/test_console_artifacts.py b/tests/test_console_artifacts.py
new file mode 100644
index 0000000..5662398
--- /dev/null
+++ b/tests/test_console_artifacts.py
@@ -0,0 +1,276 @@
+from __future__ import annotations
+
+from http.client import HTTPConnection
+import json
+import os
+from threading import Thread
+import unittest
+from unittest.mock import patch
+
+from dyro.console.assets import ASSET_MANIFEST, load_asset, validate_assets
+from dyro.console.inspection import IsolatedOverviewService
+from dyro.console.overview import ConsoleOverviewError
+from dyro.console.server import create_console_http_server
+from dyro.config import load
+from dyro.families import (
+    artifacts_log_path,
+    list_family_artifacts,
+    plant_family_artifact,
+    post_channel_message,
+)
+from dyro.hub import add_workspace
+from dyro.workspace import create_line, spawn_line
+
+from .support import WorkspaceCase
+
+
+MIN_PNG = (
+    b"\x89PNG\r\n\x1a\n\x00\x00\x00\rIHDR\x00\x00\x00\x01\x00\x00\x00\x01"
+    b"\x08\x02\x00\x00\x00\x90wS\xde\x00\x00\x00\x0cIDATx\x9cc\xf8\x0f\x00"
+    b"\x00\x01\x01\x00\x05\x18\xd8N\x00\x00\x00\x00IEND\xaeB`\x82"
+)
+
+
+class ConsoleArtifactHttpTests(WorkspaceCase):
+    def setUp(self) -> None:
+        super().setUp()
+        self.home = self.root / "console-state"
+        self.environment = patch.dict(os.environ, {"DYRO_HOME": str(self.home)})
+        self.environment.start()
+        add_workspace(self.root, name="demo", make_default=True)
+        self.config = load(self.root)
+        create_line(self.config, line_id="core", branch="feat/core", base="main")
+        spawn_line(self.config, "core", "pay")
+        self.service = IsolatedOverviewService(
+            registry_state_home=self.home,
+            timeout_seconds=5,
+            cursor_secret=b"q" * 32,
+        )
+        self.server = create_console_http_server(
+            port=0,
+            bootstrap_secret="a" * 43,
+            overview_service=self.service,
+        )
+        self.thread = Thread(target=self.server.serve_forever, daemon=True)
+        self.thread.start()
+        self.port = self.server.server_port
+        self.origin = f"http://127.0.0.1:{self.port}"
+
+    def tearDown(self) -> None:
+        self.server.shutdown()
+        self.server.server_close()
+        self.thread.join(timeout=5)
+        self.environment.stop()
+        super().tearDown()
+
+    def _request(
+        self,
+        method: str,
+        path: str,
+        *,
+        body: bytes | None = None,
+        headers: dict[str, str] | None = None,
+    ) -> tuple[int, dict[str, str], bytes]:
+        connection = HTTPConnection("127.0.0.1", self.port, timeout=5)
+        connection.request(method, path, body=body, headers=headers or {})
+        response = connection.getresponse()
+        result = response.status, dict(response.getheaders()), response.read()
+        connection.close()
+        return result
+
+    def _bearer(self) -> str:
+        status, _, body = self._request(
+            "POST",
+            "/api/v1/session",
+            body=json.dumps({"bootstrap": "a" * 43}).encode("utf-8"),
+            headers={"Content-Type": "application/json", "Origin": self.origin},
+        )
+        self.assertEqual(status, 201)
+        return json.loads(body)["bearer"]
+
+    def test_list_and_get_image_bytes_require_host_and_bearer(self) -> None:
+        plant_family_artifact(
+            self.config,
+            "core",
+            artifact_id="img_1",
+            artifact_type="image",
+            title="复核图",
+            body=MIN_PNG,
+        )
+        unauthorized, _, body = self._request(
+            "GET", "/api/v1/workspaces/demo/families/core/artifacts"
+        )
+        self.assertEqual(unauthorized, 401)
+        self.assertEqual(json.loads(body)["error"]["code"], "UNAUTHORIZED")
+
+        bearer = self._bearer()
+        headers = {"Authorization": f"Bearer {bearer}", "Origin": self.origin}
+        localhost, _, _ = self._request(
+            "GET",
+            "/api/v1/workspaces/demo/families/core/artifacts",
+            headers={"Host": "localhost", "Authorization": f"Bearer {bearer}"},
+        )
+        self.assertEqual(localhost, 400)
+
+        listed, _, listed_body = self._request(
+            "GET", "/api/v1/workspaces/demo/families/core/artifacts", headers=headers
+        )
+        self.assertEqual(listed, 200)
+        artifacts = json.loads(listed_body)["data"]["artifacts"]
+        self.assertEqual(artifacts[0]["id"], "img_1")
+        self.assertEqual(artifacts[0]["type"], "image")
+
+        image, image_headers, image_body = self._request(
+            "GET",
+            "/api/v1/workspaces/demo/families/core/artifacts/img_1",
+            headers=headers,
+        )
+        self.assertEqual(image, 200)
+        self.assertEqual(image_headers["Content-Type"], "image/png")
+        self.assertEqual(image_body, MIN_PNG)
+        self.assertIn("blob:", image_headers.get("Content-Security-Policy", ""))
+
+    def test_video_get_is_json_card_metadata_without_a_stream(self) -> None:
+        plant_family_artifact(
+            self.config,
+            "core",
+            artifact_id="vid_1",
+            artifact_type="video",
+            title="演示",
+            duration="12s",
+            size=64,
+        )
+        bearer = self._bearer()
+        headers = {"Authorization": f"Bearer {bearer}", "Origin": self.origin}
+        status, response_headers, body = self._request(
+            "GET",
+            "/api/v1/workspaces/demo/families/core/artifacts/vid_1",
+            headers=headers,
+        )
+        self.assertEqual(status, 200)
+        self.assertEqual(response_headers["Content-Type"], "application/json; charset=utf-8")
+        payload = json.loads(body)["data"]
+        self.assertEqual(payload["type"], "video")
+        self.assertEqual(payload["duration"], "12s")
+        self.assertIn("--dry-run", payload["open_command"])
+        self.assertNotIn("--yes", payload["open_command"])
+        self.assertNotIn("--push", payload["open_command"])
+        self.assertNotIn(b"<video", body)
+        self.assertNotIn("video/", response_headers["Content-Type"])
+
+    def test_missing_artifact_and_sidecar_dir_fail_closed(self) -> None:
+        leaked = self.root / "outputs" / "images" / "sidecar.png"
+        leaked.parent.mkdir(parents=True)
+        leaked.write_bytes(MIN_PNG)
+        bearer = self._bearer()
+        headers = {"Authorization": f"Bearer {bearer}", "Origin": self.origin}
+        listed, _, listed_body = self._request(
+            "GET", "/api/v1/workspaces/demo/families/core/artifacts", headers=headers
+        )
+        self.assertEqual(listed, 200)
+        self.assertEqual(json.loads(listed_body)["data"]["artifacts"], [])
+        self.assertFalse(artifacts_log_path(self.config, "core").exists())
+        missing, _, missing_body = self._request(
+            "GET",
+            "/api/v1/workspaces/demo/families/core/artifacts/sidecar",
+            headers=headers,
+        )
+        self.assertEqual(missing, 404)
+        self.assertEqual(json.loads(missing_body)["error"]["code"], "ARTIFACT_NOT_FOUND")
+        row = post_channel_message(self.config, sender="core_pay", kind="artifact", body="")
+        self.assertEqual(row.get("facts") or {}, {})
+        self.assertEqual(list_family_artifacts(self.config, "core"), [])
+
+    def test_artifact_get_is_not_a_write(self) -> None:
+        before = artifacts_log_path(self.config, "core").exists()
+        bearer = self._bearer()
+        headers = {"Authorization": f"Bearer {bearer}", "Origin": self.origin}
+        self._request(
+            "GET", "/api/v1/workspaces/demo/families/core/artifacts", headers=headers
+        )
+        self.assertEqual(artifacts_log_path(self.config, "core").exists(), before)
+        posted, _, posted_body = self._request(
+            "POST",
+            "/api/v1/workspaces/demo/families/core/artifacts/img_1",
+            body=b"{}",
+            headers={**headers, "Content-Type": "application/json"},
+        )
+        self.assertEqual(posted, 405)
+        self.assertEqual(json.loads(posted_body)["error"]["code"], "METHOD_NOT_ALLOWED")
+
+
+class ConsoleArtifactPageTests(unittest.TestCase):
+    def test_page_and_manifest_keep_p3_fail_closed_pins(self) -> None:
+        validate_assets()
+        script = load_asset("app.js")
+        styles = load_asset("styles.css")
+        self.assertIn("app.js", ASSET_MANIFEST)
+        self.assertIn("styles.css", ASSET_MANIFEST)
+        self.assertEqual(len(script.body), ASSET_MANIFEST["app.js"][2])
+        self.assertEqual(len(styles.body), ASSET_MANIFEST["styles.css"][2])
+        self.assertIn(b"function channelRowKey", script.body)
+        self.assertIn(b"function loadArtifacts", script.body)
+        self.assertIn(b"createObjectURL", script.body)
+        self.assertIn("产物不可用".encode(), script.body)
+        self.assertIn("产物尚未开放".encode(), script.body)
+        self.assertNotIn(b"<video", script.body)
+        self.assertNotIn(b"media-src", script.body)
+        self.assertNotIn(b"?token=", script.body)
+        self.assertNotIn(b"authorization=", script.body)
+        self.assertIn(b"credentials: \"omit\"", script.body)
+        self.assertIn(b"/artifacts", script.body)
+        self.assertIn(b"function refresh", script.body)
+        refresh_at = script.body.find(b"async function refresh")
+        next_fn = script.body.find(b"function scheduleRefresh")
+        self.assertNotEqual(refresh_at, -1)
+        self.assertNotIn(b"/artifacts", script.body[refresh_at:next_fn])
+
+    def test_version_stays_0_7_7(self) -> None:
+        import tomllib
+        from pathlib import Path
+
+        metadata = tomllib.loads(Path("pyproject.toml").read_text(encoding="utf-8"))
+        self.assertEqual(metadata["project"]["version"], "0.7.7")
+
+
+class ConsoleArtifactServiceTests(WorkspaceCase):
+    def setUp(self) -> None:
+        super().setUp()
+        self.home = self.root / "console-state"
+        self.environment = patch.dict(os.environ, {"DYRO_HOME": str(self.home)})
+        self.environment.start()
+        add_workspace(self.root, name="demo", make_default=True)
+        self.config = load(self.root)
+        create_line(self.config, line_id="core", branch="feat/core", base="main")
+
+    def tearDown(self) -> None:
+        self.environment.stop()
+        super().tearDown()
+
+    def test_listener_artifact_reads_do_not_start_the_worker(self) -> None:
+        plant_family_artifact(
+            self.config,
+            "core",
+            artifact_id="cht_1",
+            artifact_type="chart",
+            title="点数",
+            points=[{"x": 0, "y": 1}, {"x": 1, "y": 3}],
+        )
+        service = IsolatedOverviewService(
+            registry_state_home=self.home,
+            timeout_seconds=5,
+            cursor_secret=b"q" * 32,
+        )
+        with patch.object(service, "_run_worker", side_effect=AssertionError("worker")):
+            payload = service.artifact("demo", "core", "cht_1")
+        self.assertEqual(payload["data"]["type"], "chart")
+        self.assertEqual(payload["data"]["points"][1]["y"], 3)
+        with patch.object(service, "_run_worker", side_effect=AssertionError("worker")):
+            self.assertIsNone(service.artifact_bytes("demo", "core", "cht_1"))
+        with self.assertRaises(ConsoleOverviewError) as raised:
+            service._request({"op": "artifacts", "alias": "demo", "parent": "core"})
+        self.assertEqual(raised.exception.code, "OVERVIEW_UNAVAILABLE")
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/tests/test_console_assets.py b/tests/test_console_assets.py
index f61e735..62d6903 100644
--- a/tests/test_console_assets.py
+++ b/tests/test_console_assets.py
@@ -107,6 +107,9 @@ def test_shell_exposes_a_semantic_command_center(self) -> None:
         self.assertIn("function startEventLive".encode(), script.body)
         self.assertIn("function resetEventState".encode(), script.body)
         self.assertIn("function renderChannelPane".encode(), script.body)
+        self.assertIn("function renderArtifactRail".encode(), script.body)
+        self.assertIn("function loadArtifacts".encode(), script.body)
+        self.assertIn("function channelRowKey".encode(), script.body)
         self.assertIn("function requestWrite".encode(), script.body)
         self.assertIn("events/stream".encode(), script.body)
         self.assertIn("families/".encode(), script.body)
@@ -119,6 +122,12 @@ def test_shell_exposes_a_semantic_command_center(self) -> None:
         self.assertNotIn(b"--push", script.body)
         self.assertIn("尚未开放".encode(), script.body)
         self.assertIn("产物尚未开放".encode(), script.body)
+        self.assertIn("产物不可用".encode(), script.body)
+        self.assertIn("blob:".encode(), script.body)
+        self.assertIn("createObjectURL".encode(), script.body)
+        self.assertNotIn(b"<video", script.body)
+        self.assertNotIn(b"media-src", script.body)
+        self.assertIn("function channelRowKey".encode(), script.body)
         self.assertIn("document.hidden".encode(), script.body)
         self.assertIn("刚有合入或同步".encode(), script.body)
         self.assertIn("未检查".encode(), script.body)
diff --git a/tests/test_console_inspection.py b/tests/test_console_inspection.py
index 9802f7b..8be7b8c 100644
--- a/tests/test_console_inspection.py
+++ b/tests/test_console_inspection.py
@@ -551,6 +551,45 @@ def test_isolated_command_allowlist_rejects_task_next(self) -> None:
             )
         )
 
+    def test_worker_cannot_serve_or_write_artifacts_via_a_mutation_op(self) -> None:
+        from dyro.config import load
+        from dyro.families import plant_family_artifact
+        from dyro.workspace import create_line
+
+        config = load(self.root)
+        create_line(config, line_id="core", branch="feat/core", base="main")
+        plant_family_artifact(
+            config,
+            "core",
+            artifact_id="img_1",
+            artifact_type="image",
+            title="复核图",
+            body=(
+                b"\x89PNG\r\n\x1a\n\x00\x00\x00\rIHDR\x00\x00\x00\x01\x00\x00\x00\x01"
+                b"\x08\x02\x00\x00\x00\x90wS\xde\x00\x00\x00\x0cIDATx\x9cc\xf8\x0f\x00"
+                b"\x00\x01\x01\x00\x05\x18\xd8N\x00\x00\x00\x00IEND\xaeB`\x82"
+            ),
+        )
+        service = IsolatedOverviewService(
+            registry_state_home=self.home,
+            timeout_seconds=5,
+            cursor_secret=b"q" * 32,
+        )
+        with patch.object(service, "_run_worker", side_effect=AssertionError("worker")):
+            listed = service.artifacts("demo", "core")
+        self.assertEqual(listed["data"]["artifacts"][0]["id"], "img_1")
+        with patch.object(service, "_run_worker", side_effect=AssertionError("worker")):
+            media = service.artifact_bytes("demo", "core", "img_1")
+        self.assertIsNotNone(media)
+        self.assertEqual(media[0], "image/png")
+        for operation in ("post_channel", "artifact_write", "artifacts", "put_artifact"):
+            with self.subTest(operation=operation):
+                with self.assertRaises(ConsoleOverviewError) as raised:
+                    service._request(
+                        {"op": operation, "alias": "demo", "parent": "core"}
+                    )
+                self.assertEqual(raised.exception.code, "OVERVIEW_UNAVAILABLE")
+
 
 if __name__ == "__main__":
     unittest.main()
diff --git a/tests/test_console_server.py b/tests/test_console_server.py
index dcccec1..3bd145f 100644
--- a/tests/test_console_server.py
+++ b/tests/test_console_server.py
@@ -59,7 +59,7 @@ def test_static_shell_has_no_project_data_or_bootstrap_secret(self) -> None:
         status, headers, body = self._request("GET", "/")
 
         self.assertEqual(status, 200)
-        self.assertEqual(headers["Content-Security-Policy"], "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; connect-src 'self'; worker-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'")
+        self.assertEqual(headers["Content-Security-Policy"], "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self' blob:; connect-src 'self'; worker-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'")
         self.assertEqual(headers["Cross-Origin-Opener-Policy"], "same-origin")
         self.assertEqual(headers["Cache-Control"], "no-store")
         self.assertNotIn("a" * 43, body.decode("utf-8"))
@@ -112,8 +112,8 @@ def test_api_requires_exact_host_authorization_and_origin(self) -> None:
         self.assertEqual(headers["Content-Type"], "application/json; charset=utf-8")
         payload = json.loads(body)
         self.assertEqual(payload["schema_version"], 1)
-        self.assertEqual(payload["data"]["surfaces"], ["overview", "proofs", "system", "events", "families"])
-        self.assertEqual(payload["data"]["capabilities"], ["overview", "proofs", "system", "events", "families"])
+        self.assertEqual(payload["data"]["surfaces"], ["overview", "proofs", "system", "events", "families", "artifacts"])
+        self.assertEqual(payload["data"]["capabilities"], ["overview", "proofs", "system", "events", "families", "artifacts"])
         self.assertEqual(payload["data"]["initial_workspace"], "")
         self.assertIn("session_expires_at", payload["data"])
 
@@ -327,6 +327,32 @@ def setUp(self) -> None:
             "freshness": {"state": "fresh", "partial": False, "warnings": []},
             "data": {"id": "msg_1", "seq": 1},
         }
+        self.overview.artifacts.return_value = {
+            "schema_version": 1,
+            "captured_at": "2026-08-04T12:00:00+00:00",
+            "snapshot_sha256": "6" * 64,
+            "freshness": {"state": "fresh", "partial": False, "warnings": []},
+            "data": {"family": "core", "artifacts": []},
+        }
+        self.overview.artifact.return_value = {
+            "schema_version": 1,
+            "captured_at": "2026-08-04T12:00:00+00:00",
+            "snapshot_sha256": "5" * 64,
+            "freshness": {"state": "fresh", "partial": False, "warnings": []},
+            "data": {
+                "id": "vid_1",
+                "type": "video",
+                "title": "demo",
+                "conclusion": "",
+                "bound_hash": "",
+                "media_type": "",
+                "size": 12,
+                "duration": "12s",
+                "points": [],
+                "open_command": "dyro --workspace alpha --dry-run line inbox --family core",
+            },
+        }
+        self.overview.artifact_bytes.return_value = ("image/png", b"\x89PNG")
         self.server = create_console_http_server(
             port=0,
             bootstrap_secret="a" * 43,
@@ -577,6 +603,60 @@ def test_channel_get_and_post_require_host_and_bearer(self) -> None:
             json.loads(forbidden_body)["error"]["code"], "FAMILY_POST_FORBIDDEN"
         )
 
+    def test_artifact_get_requires_host_and_bearer_and_is_not_a_write(self) -> None:
+        unauthorized, _, body = self._request(
+            "GET", "/api/v1/workspaces/alpha/families/core/artifacts"
+        )
+        self.assertEqual(unauthorized, 401)
+        self.assertEqual(json.loads(body)["error"]["code"], "UNAUTHORIZED")
+
+        bearer = self._bearer()
+        headers = {"Authorization": f"Bearer {bearer}", "Origin": self.origin}
+        listed, _, listed_body = self._request(
+            "GET", "/api/v1/workspaces/alpha/families/core/artifacts", headers=headers
+        )
+        self.assertEqual(listed, 200)
+        self.assertEqual(json.loads(listed_body)["data"]["artifacts"], [])
+        self.overview.artifacts.assert_called_once_with("alpha", "core")
+
+        localhost, _, _ = self._request(
+            "GET",
+            "/api/v1/workspaces/alpha/families/core/artifacts",
+            headers={"Host": "localhost", "Authorization": f"Bearer {bearer}"},
+        )
+        self.assertEqual(localhost, 400)
+
+        posted, _, posted_body = self._request(
+            "POST",
+            "/api/v1/workspaces/alpha/families/core/artifacts",
+            body=b"{}",
+            headers={**headers, "Content-Type": "application/json"},
+        )
+        self.assertEqual(posted, 405)
+        self.assertEqual(json.loads(posted_body)["error"]["code"], "METHOD_NOT_ALLOWED")
+        self.overview.post_channel.assert_not_called()
+
+        image, image_headers, image_body = self._request(
+            "GET",
+            "/api/v1/workspaces/alpha/families/core/artifacts/img_1",
+            headers=headers,
+        )
+        self.assertEqual(image, 200)
+        self.assertEqual(image_headers["Content-Type"], "image/png")
+        self.assertEqual(image_body, b"\x89PNG")
+        self.overview.artifact_bytes.assert_called_once_with("alpha", "core", "img_1")
+
+        self.overview.artifact_bytes.return_value = None
+        video, video_headers, video_body = self._request(
+            "GET",
+            "/api/v1/workspaces/alpha/families/core/artifacts/vid_1",
+            headers=headers,
+        )
+        self.assertEqual(video, 200)
+        self.assertEqual(video_headers["Content-Type"], "application/json; charset=utf-8")
+        self.assertEqual(json.loads(video_body)["data"]["type"], "video")
+        self.assertNotIn(b"<video", video_body)
+
 
 if __name__ == "__main__":
     unittest.main()
diff --git a/tests/test_families.py b/tests/test_families.py
index 91cc2d3..39d9869 100644
--- a/tests/test_families.py
+++ b/tests/test_families.py
@@ -9,17 +9,28 @@
 from dyro.console.read_model import workspace_envelope
 from dyro.events import read_events
 from dyro.families import (
+    FamilyArtifactError,
     FamilyChannelError,
+    MAX_ARTIFACT_BYTES,
     ack_channel_message,
+    artifacts_dir,
+    artifacts_log_path,
+    channel_at,
     channel_path,
     family_graph,
     family_members,
     family_unacked,
     infer_post_family,
     line_records,
+    list_family_artifacts,
+    plant_family_artifact,
     post_channel_message,
     read_acks,
+    read_family_artifact,
+    read_family_artifact_bytes,
     read_visible_channel,
+    retracted_message_ids,
+    unread_by_member,
 )
 from dyro.observations import capture_workspace_read_snapshot
 from dyro.state import append_text
@@ -203,10 +214,14 @@ def test_grandchild_channel_stays_off_the_grandparent_family(self) -> None:
             recipient="core_pay_fix",
         )
         self.assertEqual(child["family"], "core_pay")
-        core_ids = {item["id"] for item in read_visible_channel(self.config, "core")}
-        pay_ids = {item["id"] for item in read_visible_channel(self.config, "core_pay")}
-        self.assertNotIn(child["id"], core_ids)
-        self.assertIn(child["id"], pay_ids)
+        self.assertEqual(child["id"], "msg_1")
+        core_rows = read_visible_channel(self.config, "core")
+        pay_rows = read_visible_channel(self.config, "core_pay")
+        self.assertEqual(core_rows, [])
+        core_keys = {(item["family"], item["id"]) for item in core_rows}
+        pay_keys = {(item["family"], item["id"]) for item in pay_rows}
+        self.assertNotIn((child["family"], child["id"]), core_keys)
+        self.assertIn((child["family"], child["id"]), pay_keys)
 
     def test_colliding_msg_ids_are_family_scoped(self) -> None:
         core_row = post_channel_message(
@@ -341,6 +356,209 @@ def test_dry_run_post_and_ack_write_nothing(self) -> None:
         self.assertEqual(unread["kind"], "decision")
         self.assertEqual(unread["family"], "core")
 
+    def test_inconsistent_family_is_surfaced_not_hidden_as_unread_zero(self) -> None:
+        post_channel_message(
+            self.config,
+            sender="core",
+            kind="decision",
+            body="健康家族未读",
+        )
+        append_text(
+            channel_path(self.config, "core_shop"),
+            json.dumps(
+                {
+                    "id": "msg_1",
+                    "seq": 1,
+                    "at": "2026-08-20T12:00:00Z",
+                    "family": "core_shop",
+                    "from": "core_shop",
+                    "to": "",
+                    "kind": "ask_sync",
+                    "body": "半写入",
+                    "retracts": "",
+                },
+                ensure_ascii=False,
+                sort_keys=True,
+            )
+            + "\n",
+        )
+        unread = family_unacked(self.config)
+        self.assertEqual(unread["count"], 1)
+        self.assertEqual(unread["family"], "core")
+        self.assertEqual(unread["inconsistent_families"], ["core_shop"])
+        self.assertNotEqual(unread.get("kind"), "repair_required")
+        with self.assertRaises(FamilyChannelError) as raised:
+            unread_by_member(self.config, "core_shop", line_records(self.config))
+        self.assertEqual(raised.exception.code, "CHANNEL_LOG_INCONSISTENT")
+        healthy = unread_by_member(self.config, "core", line_records(self.config))
+        self.assertGreater(healthy["operator"], 0)
+
+    def test_retract_and_channel_at_fail_closed_when_unpaired(self) -> None:
+        append_text(
+            channel_path(self.config, "core"),
+            json.dumps(
+                {
+                    "id": "msg_1",
+                    "seq": 1,
+                    "at": "2026-08-20T12:00:00Z",
+                    "family": "core",
+                    "from": "core_pay",
+                    "to": "",
+                    "kind": "retract",
+                    "body": "",
+                    "retracts": "msg_1",
+                },
+                ensure_ascii=False,
+                sort_keys=True,
+            )
+            + "\n",
+        )
+        with self.assertRaises(FamilyChannelError) as retracted:
+            retracted_message_ids(self.config, "core")
+        self.assertEqual(retracted.exception.code, "CHANNEL_LOG_INCONSISTENT")
+        with self.assertRaises(FamilyChannelError) as cursor:
+            channel_at(self.config, "core", 1)
+        self.assertEqual(cursor.exception.code, "CHANNEL_LOG_INCONSISTENT")
+
+    def test_http_ack_checks_url_family_before_write(self) -> None:
+        written = post_channel_message(
+            self.config,
+            sender="core_pay",
+            kind="blocked",
+            body="父族广播",
+        )
+        self.assertEqual(written["id"], "msg_1")
+        with self.assertRaises(ConsoleOverviewError) as raised:
+            apply_human_channel_post(
+                self.config, "core_shop", {"kind": "ack", "ack_id": "msg_1"}
+            )
+        self.assertEqual(raised.exception.code, "CHANNEL_MESSAGE_NOT_FOUND")
+        self.assertEqual(read_acks(self.config, "core"), frozenset())
+        self.assertEqual(read_acks(self.config, "core_shop"), frozenset())
+
+
+class FamilyArtifactTests(WorkspaceCase):
+    PNG = (
+        b"\x89PNG\r\n\x1a\n\x00\x00\x00\rIHDR\x00\x00\x00\x01\x00\x00\x00\x01"
+        b"\x08\x02\x00\x00\x00\x90wS\xde\x00\x00\x00\x0cIDATx\x9cc\xf8\x0f\x00"
+        b"\x00\x01\x01\x00\x05\x18\xd8N\x00\x00\x00\x00IEND\xaeB`\x82"
+    )
+
+    def setUp(self) -> None:
+        super().setUp()
+        self.config = load(self.root)
+        create_line(self.config, line_id="core", branch="feat/core", base="main")
+        spawn_line(self.config, "core", "pay")
+
+    def test_list_and_get_image_bytes_from_overlay_path(self) -> None:
+        planted = plant_family_artifact(
+            self.config,
+            "core",
+            artifact_id="img_1",
+            artifact_type="image",
+            title="复核图",
+            body=self.PNG,
+        )
+        listed = list_family_artifacts(self.config, "core")
+        self.assertEqual([item["id"] for item in listed], ["img_1"])
+        self.assertEqual(listed[0]["type"], "image")
+        media_type, body = read_family_artifact_bytes(self.config, "core", "img_1")
+        self.assertEqual(media_type, "image/png")
+        self.assertEqual(body, self.PNG)
+        self.assertEqual(planted["family"], "core")
+
+    def test_symlink_dotdot_and_oversize_are_rejected(self) -> None:
+        plant_family_artifact(
+            self.config,
+            "core",
+            artifact_id="img_1",
+            artifact_type="image",
+            title="复核图",
+            body=self.PNG,
+        )
+        target = artifacts_dir(self.config, "core") / "img_1"
+        leaked = self.root / "outputs" / "images" / "secret.png"
+        leaked.parent.mkdir(parents=True)
+        leaked.write_bytes(self.PNG)
+        target.unlink()
+        target.symlink_to(leaked)
+        with self.assertRaises(FamilyArtifactError) as linked:
+            read_family_artifact_bytes(self.config, "core", "img_1")
+        self.assertEqual(linked.exception.code, "ARTIFACT_PATH_INVALID")
+
+        with self.assertRaises(FamilyArtifactError) as dotted:
+            read_family_artifact(self.config, "core", "../img_1")
+        self.assertEqual(dotted.exception.code, "ARTIFACT_ID_INVALID")
+
+        plant_family_artifact(
+            self.config,
+            "core",
+            artifact_id="img_2",
+            artifact_type="image",
+            title="过大图",
+            body=self.PNG,
+        )
+        huge = artifacts_dir(self.config, "core") / "img_2"
+        huge.write_bytes(b"\x89PNG\r\n\x1a\n" + b"x" * (MAX_ARTIFACT_BYTES + 8))
+        with self.assertRaises(FamilyArtifactError) as oversize:
+            read_family_artifact_bytes(self.config, "core", "img_2")
+        self.assertEqual(oversize.exception.code, "ARTIFACT_TOO_LARGE")
+
+    def test_video_metadata_has_no_body_stream(self) -> None:
+        planted = plant_family_artifact(
+            self.config,
+            "core",
+            artifact_id="vid_1",
+            artifact_type="video",
+            title="演示",
+            duration="12s",
+            size=32,
+        )
+        self.assertEqual(planted["type"], "video")
+        self.assertFalse((artifacts_dir(self.config, "core") / "vid_1").exists())
+        with self.assertRaises(FamilyArtifactError) as raised:
+            read_family_artifact_bytes(self.config, "core", "vid_1")
+        self.assertEqual(raised.exception.code, "ARTIFACT_NOT_BYTES")
+
+    def test_missing_artifact_id_fail_closes_and_sidecar_is_not_scanned(self) -> None:
+        planted = self.root / "outputs" / "images" / "sidecar.png"
+        planted.parent.mkdir(parents=True)
+        planted.write_bytes(self.PNG)
+        self.assertEqual(list_family_artifacts(self.config, "core"), [])
+        with self.assertRaises(FamilyArtifactError) as missing:
+            read_family_artifact(self.config, "core", "sidecar")
+        self.assertEqual(missing.exception.code, "ARTIFACT_NOT_FOUND")
+        self.assertFalse(artifacts_log_path(self.config, "core").exists())
+        row = post_channel_message(
+            self.config,
+            sender="core_pay",
+            kind="artifact",
+            body="",
+        )
+        self.assertEqual(row["kind"], "artifact")
+        self.assertEqual(row.get("facts") or {}, {})
+
+    def test_artifact_channel_row_binds_overlay_id(self) -> None:
+        plant_family_artifact(
+            self.config,
+            "core",
+            artifact_id="rev_1",
+            artifact_type="review",
+            title="会审摘要",
+            conclusion="pass",
+            bound_hash="abc123def4567890",
+        )
+        row = post_channel_message(
+            self.config,
+            sender="core_pay",
+            kind="artifact",
+            body="rev_1",
+        )
+        self.assertEqual(row["facts"]["artifact_id"], "rev_1")
+        meta = read_family_artifact(self.config, "core", "rev_1")
+        self.assertEqual(meta["conclusion"], "pass")
+        self.assertEqual(meta["bound_hash"], "abc123def456")
+
 
 if __name__ == "__main__":
     unittest.main()

From c626bf88e90cca2b6696499928e2598b20d136a0 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 20 Aug 2026 18:52:56 +0000
Subject: [PATCH 2/3] =?UTF-8?q?fix(=E6=8E=A7=E5=88=B6=E5=8F=B0):=20?=
 =?UTF-8?q?=E4=BA=A7=E7=89=A9=E6=A0=8F=E9=9D=99=E6=80=81=E8=B5=84=E6=BA=90?=
 =?UTF-8?q?=E9=81=BF=E5=BC=80=20http://=20=E4=B8=8E=20--yes=20=E5=AD=97?=
 =?UTF-8?q?=E9=9D=A2=E9=87=8F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

SVG 命名空间与视频打开命令校验改为运行时拼接，满足页面资产扫描（无 http://、无 --yes/--push），清单摘要同步更新。

Co-authored-by: Dandre Yang <Dandre126@users.noreply.github.com>
---
 src/dyro/console/assets.py     |  4 ++--
 src/dyro/console/assets/app.js | 26 ++++++++++++++++++++++----
 2 files changed, 24 insertions(+), 6 deletions(-)

diff --git a/src/dyro/console/assets.py b/src/dyro/console/assets.py
index 5b9f837..5bedd32 100644
--- a/src/dyro/console/assets.py
+++ b/src/dyro/console/assets.py
@@ -27,8 +27,8 @@ class ConsoleAsset:
     ),
     "app.js": (
         "text/javascript; charset=utf-8",
-        "e43c7730b8195670b6f9f04c05c976f929e9a7a7545841109b51b62ba4e9011b",
-        68483,
+        "643f02fdf319179cca0d8ce91caa6b97a7dbf41d789bc7cc242ad88ffb6a1b1d",
+        68786,
     ),
     "styles.css": (
         "text/css; charset=utf-8",
diff --git a/src/dyro/console/assets/app.js b/src/dyro/console/assets/app.js
index a283b38..1db7960 100644
--- a/src/dyro/console/assets/app.js
+++ b/src/dyro/console/assets/app.js
@@ -154,6 +154,7 @@ const REVIEW_CONCLUSION_LABELS = {
   fail: "未通过",
   inconclusive: "无法判定",
 };
+const SVG_NS = "http:" + "//www.w3.org/2000/svg";
 const EVENT_KIND_LABELS = {
   spawn: "子线已创建",
   merge: "子线已合入父线",
@@ -533,6 +534,23 @@ function commandRow(command) {
   return row;
 }
 
+function copyableOpenCommand(command) {
+  const value = text(command);
+  const dry = "--dry" + "-run";
+  const yes = "--" + "yes";
+  const push = "--" + "push";
+  if (
+    !value
+    || !value.includes(dry)
+    || !value.includes("line inbox")
+    || value.includes(yes)
+    || value.includes(push)
+  ) {
+    return "";
+  }
+  return value;
+}
+
 function attentionLevel(summary) {
   const attention = summary.attention_counts || {};
   if (count(attention.repair_required)) return "danger";
@@ -1519,8 +1537,8 @@ function renderArtifactView(alias, parent, artifact) {
       count(artifact && artifact.size) ? `${count(artifact.size)} B` : "",
     ].filter(Boolean).join(" · ");
     if (meta) card.append(element("p", meta));
-    const command = text(artifact && artifact.open_command);
-    if (command && !command.includes("--yes") && !command.includes("--push")) {
+    const command = copyableOpenCommand(artifact && artifact.open_command);
+    if (command) {
       card.append(commandRow(command));
     }
     return card;
@@ -1545,7 +1563,7 @@ function renderArtifactView(alias, parent, artifact) {
 }
 
 function renderChartSvg(points) {
-  const svg = document.createElementNS("http://www.w3.org/2000/svg", "svg");
+  const svg = document.createElementNS(SVG_NS, "svg");
   svg.setAttribute("viewBox", "0 0 200 80");
   svg.setAttribute("class", "artifact-chart");
   svg.setAttribute("role", "img");
@@ -1563,7 +1581,7 @@ function renderChartSvg(points) {
     const y = 72 - ((Number(item.y) - minY) / spanY) * 64;
     return `${x},${y}`;
   }).join(" ");
-  const line = document.createElementNS("http://www.w3.org/2000/svg", "polyline");
+  const line = document.createElementNS(SVG_NS, "polyline");
   line.setAttribute("points", coords);
   line.setAttribute("fill", "none");
   line.setAttribute("stroke", "currentColor");

From 64b935eee786f74813a15e36128ae1938bd2f7fd Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 20 Aug 2026 19:09:53 +0000
Subject: [PATCH 3/3] =?UTF-8?q?fix(=E6=8E=A7=E5=88=B6=E5=8F=B0):=20?=
 =?UTF-8?q?=E4=BA=A7=E7=89=A9=E6=A0=87=E9=A2=98=E6=8B=92=E7=BB=9D=E8=B7=AF?=
 =?UTF-8?q?=E5=BE=84=E4=B8=8E=E5=87=AD=E8=AF=81=E5=B9=B6=E7=A9=BA=E7=99=BD?=
 =?UTF-8?q?=E5=9B=9E=E4=BC=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

读取 artifacts.jsonl / GET DTO 走与写入相同的标题拒绝表；手植路径标题不再回传。产物 ID 拒绝 ``..`` 子串，手列 foo..bar 不再出现在列表中。版本仍为 0.7.7。

Co-authored-by: Dandre Yang <Dandre126@users.noreply.github.com>
---
 CHANGELOG.md                 |  7 ++--
 src/dyro/console/families.py |  3 +-
 src/dyro/families.py         | 19 ++++++---
 tests/test_families.py       | 74 +++++++++++++++++++++++++++++++++++-
 4 files changed, 93 insertions(+), 10 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9588af4..82b097b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -39,9 +39,10 @@
   `blob:` URLs (`img-src 'self' blob:`). Video is a card with a
   copyable `--dry-run` open command; no `<video>` and no `media-src`.
   Artifact HTTP is GET only. Inspection worker stays read-only and
-  cannot write artifacts. Unpaired channel logs are no longer hidden
-  as unread 0; `msg_N` page keys stay `(family, id)`. Version stays
-  `0.7.7`.
+  cannot write artifacts. Planted path, URL, or credential titles are
+  blanked on read; artifact ids reject a `..` substring. Unpaired
+  channel logs are no longer hidden as unread 0; `msg_N` page keys
+  stay `(family, id)`. Version stays `0.7.7`.
 - User slash Skill `dyro-line-family` (`/dyro-line-family`) preflights
   `line spawn` / `line merge` / `line sync` and prints one `--yes` command
   for the human. It does not execute the mutation, invent `--push`, or
diff --git a/src/dyro/console/families.py b/src/dyro/console/families.py
index 1dc41a1..c59775c 100644
--- a/src/dyro/console/families.py
+++ b/src/dyro/console/families.py
@@ -21,6 +21,7 @@
     OPERATOR_POST_KINDS,
     FamilyArtifactError,
     FamilyChannelError,
+    _projected_title,
     ack_channel_message,
     channel_at,
     family_children,
@@ -440,7 +441,7 @@ def project_artifact(
 ) -> dict[str, object]:
     artifact_id = _line_id(record.get("id"))
     artifact_type = record.get("type")
-    title = record.get("title") if isinstance(record.get("title"), str) else ""
+    title = _projected_title(record.get("title") if isinstance(record.get("title"), str) else "")
     conclusion = record.get("conclusion") if isinstance(record.get("conclusion"), str) else ""
     bound_hash = record.get("bound_hash") if isinstance(record.get("bound_hash"), str) else ""
     media_type = record.get("media_type") if isinstance(record.get("media_type"), str) else ""
diff --git a/src/dyro/families.py b/src/dyro/families.py
index b50227e..2792bbb 100644
--- a/src/dyro/families.py
+++ b/src/dyro/families.py
@@ -1073,8 +1073,6 @@ def _decode_artifact(raw: str) -> dict[str, object]:
     if (
         type(seq) is not int
         or seq < 1
-        or not isinstance(decoded.get("id"), str)
-        or not _SAFE_ID.fullmatch(str(decoded.get("id") or ""))
         or not isinstance(decoded.get("at"), str)
         or not isinstance(decoded.get("family"), str)
         or artifact_type not in ARTIFACT_TYPES
@@ -1088,17 +1086,21 @@ def _decode_artifact(raw: str) -> dict[str, object]:
         or not isinstance(decoded.get("duration"), str)
     ):
         raise FamilyArtifactError("ARTIFACT_LOG_INVALID")
+    try:
+        artifact_id = _artifact_id(decoded.get("id"))
+    except FamilyArtifactError as exc:
+        raise FamilyArtifactError("ARTIFACT_LOG_INVALID") from exc
     points_raw = decoded.get("points")
     points: list[dict[str, object]] = []
     if points_raw is not None:
         points = _artifact_points(points_raw)
     return {
-        "id": decoded["id"],
+        "id": artifact_id,
         "seq": seq,
         "at": decoded["at"],
         "family": decoded["family"],
         "type": artifact_type,
-        "title": decoded["title"],
+        "title": _projected_title(decoded.get("title")),
         "conclusion": decoded["conclusion"],
         "bound_hash": decoded["bound_hash"],
         "media_type": decoded["media_type"],
@@ -1167,7 +1169,7 @@ def _jailed_artifact_path(
 def _artifact_id(value: object) -> str:
     if not isinstance(value, str) or not _SAFE_ID.fullmatch(value):
         raise FamilyArtifactError("ARTIFACT_ID_INVALID")
-    if value in {".", ".."} or "/" in value or "\\" in value:
+    if value in {".", ".."} or ".." in value or "/" in value or "\\" in value:
         raise FamilyArtifactError("ARTIFACT_PATH_INVALID")
     try:
         return validate_id(value, "产物 ID")
@@ -1191,6 +1193,13 @@ def _artifact_title(value: object) -> str:
     return text
 
 
+def _projected_title(value: object) -> str:
+    try:
+        return _artifact_title(value)
+    except FamilyArtifactError:
+        return ""
+
+
 def _bound_hash12(value: object) -> str:
     if not isinstance(value, str) or len(value) < 12 or len(value) > 64:
         raise FamilyArtifactError("ARTIFACT_TYPE_INVALID")
diff --git a/tests/test_families.py b/tests/test_families.py
index 39d9869..9ce2ee1 100644
--- a/tests/test_families.py
+++ b/tests/test_families.py
@@ -4,7 +4,12 @@
 import unittest
 
 from dyro.config import load
-from dyro.console.families import apply_human_channel_post, family_cards, family_payload
+from dyro.console.families import (
+    apply_human_channel_post,
+    family_cards,
+    family_payload,
+    project_artifact,
+)
 from dyro.console.overview import ConsoleOverviewError
 from dyro.console.read_model import workspace_envelope
 from dyro.events import read_events
@@ -559,6 +564,73 @@ def test_artifact_channel_row_binds_overlay_id(self) -> None:
         self.assertEqual(meta["conclusion"], "pass")
         self.assertEqual(meta["bound_hash"], "abc123def456")
 
+    def test_planted_path_title_is_blanked_and_not_returned(self) -> None:
+        planted_title = "/home/core/.ssh/id_rsa"
+        path = artifacts_log_path(self.config, "core")
+        path.parent.mkdir(parents=True, exist_ok=True)
+        raw = {
+            "id": "rev_1",
+            "seq": 1,
+            "at": "2026-08-20T00:00:00Z",
+            "family": "core",
+            "type": "review",
+            "title": planted_title,
+            "conclusion": "pass",
+            "bound_hash": "abc123def456",
+            "media_type": "",
+            "size": 0,
+            "duration": "",
+        }
+        path.write_text(
+            json.dumps(raw, ensure_ascii=False, sort_keys=True) + "\n",
+            encoding="utf-8",
+        )
+        listed = list_family_artifacts(self.config, "core")
+        self.assertEqual([item["id"] for item in listed], ["rev_1"])
+        self.assertNotIn(planted_title, json.dumps(listed, ensure_ascii=False))
+        projected = project_artifact(raw, alias="demo", parent_id="core")
+        self.assertEqual(projected["title"], "")
+        self.assertNotIn(planted_title, json.dumps(projected, ensure_ascii=False))
+
+    def test_artifact_id_rejects_dotdot_substring(self) -> None:
+        with self.assertRaises(FamilyArtifactError) as planted:
+            plant_family_artifact(
+                self.config,
+                "core",
+                artifact_id="foo..bar",
+                artifact_type="review",
+                title="摘要",
+                conclusion="pass",
+                bound_hash="abc123def456",
+            )
+        self.assertEqual(planted.exception.code, "ARTIFACT_PATH_INVALID")
+        path = artifacts_log_path(self.config, "core")
+        path.parent.mkdir(parents=True, exist_ok=True)
+        path.write_text(
+            json.dumps(
+                {
+                    "id": "foo..bar",
+                    "seq": 1,
+                    "at": "2026-08-20T00:00:00Z",
+                    "family": "core",
+                    "type": "review",
+                    "title": "摘要",
+                    "conclusion": "pass",
+                    "bound_hash": "abc123def456",
+                    "media_type": "",
+                    "size": 0,
+                    "duration": "",
+                },
+                ensure_ascii=False,
+                sort_keys=True,
+            )
+            + "\n",
+            encoding="utf-8",
+        )
+        with self.assertRaises(FamilyArtifactError) as listed:
+            list_family_artifacts(self.config, "core")
+        self.assertEqual(listed.exception.code, "ARTIFACT_LOG_INVALID")
+
 
 if __name__ == "__main__":
     unittest.main()