dsh-connect-trae 4.5.2 → 4.6.1

package/CHANGELOG.md

@@ -1,5 +1,146 @@
 # Changelog
 
+## 4.6.1 (2026-10-26)
+
+> **4.6.0 说「图片字节插件拿不到」，这一版把这句话纠正过来。** 那条按
+> `?prompt=&image_size=` 再打一次 GET 的路确实不是取图、而是**又一次生成**，但
+> 「uri → 字节」不是没有通道，只是请求体形态特殊。现在图片会被取回来、落成会话文件、
+> 直接显示在聊天里。
+
+### 修复
+
+- **文生图把图片真的取回来了**。
+  - **取图通道**：`POST /api/ide/v1/get_resource_url`，body 必须正是
+    `{"uri_list":["<tos key>"]}`——`{uri}`/`{path}`/`{resource_uri}`/`{uris:[…]}`/
+    `{resources:[…]}`/`{scene:'report',uri}` 以及 GET `?uri=` 统统只回 200 + 空
+    `url_map`（不报错、也不给地址）。应答是
+    `{"url_map":{"<key>":"<byteimg 签名 URL>"}}`，再直接 GET 那个签名地址（**不带任何
+    Trae 头**，签名在 query 里）即得字节——实测 `image/jpeg`、1,155,578 字节、头
+    `ffd8ffe0`。对已有 key 这一步**零成本**，不会重新生成。
+  - **图片落成会话文件并直接显示**：`generate` 返回 `{url, credit?, bytes, mimeType}`，
+    `execute` 把字节写进 `<session cwd>/trae-images/trae-YYYYMMDD-HHMMSS-<hex>.<ext>`
+    （扩展名跟 mime 走），`output.schema` 恢复 `path` 并进 `required`，`render` 输出
+    `![Trae 文生图](trae-images/…)`。DSH 的聊天按 session cwd 解析相对路径、再过宿主的
+    `api/file` 鉴权路由取字节，所以图真的显示出来，不需要用户去 Trae 客户端翻历史。
+  - **失败语义**：图已生成、积分已扣、但字节取不回来（`url_map` 里没有这个 key / CDN 非
+    2xx / 0 字节 / 落盘失败）→ `IMAGE_UNAVAILABLE`，进 30 秒冷却，文案明说「积分已经扣了」
+    并给出对象 key 供排障，要求模型**不要重试**。
+  - 改图与文生视频仍然**不做**，也不留半截入口。
+- **图片现在落在会话目录，不再落到宿主进程的 cwd**。
+  - 用户在实际 web 会话里跑了一次：工具返回 `trae-images/trae-20261026-034146-1c0a91.jpg`，
+    聊天里却显示「图片无法预览」。文件确实生成了（789,453 字节真 JPEG），但落在**启动 DSH
+    的那个目录**里，而不是会话目录。
+  - 根因：宿主的 `ToolExecution` 不带会话目录。`cwd` 字段 4.15.x 仍标 `Reserved`（不填），
+    `agent.session.cwd` 这个字段不存在，`agent.session.header.cwd` 又只是**创建时**目录
+    （`/cd` 之后就不对）。插件此前只能回退到 `process.cwd()`。
+  - 现在照宿主自己的 `dsh-tool-*` 取法：`ctx.inject(['workingDirectory'])` 后调
+    `workingDirectory.ensure(exec.agent, exec.signal)`（它读 session projection
+    `workingDirectory`，即实时目录，并确认目录还在）。阶梯：宿主 service →
+    `agent.session.header.cwd` → `process.cwd()`。`TraeImageToolDeps` 新增可选
+    `directoryOf`，service 读取放在 `src/index.ts` 注入，`image-tool` 保持纯函数可单测。
+- **取图那一跳的 HTTP 错误不再谎报成因**。
+  - 此前它复用生图那套状态码映射，取图接口回 403 会报 `AUTH`（「上游拒绝了凭据」）、回
+    429 会报 `RATE_LIMIT`——可这时图早已生成、积分早已扣掉，用户照这句话去重新登录，
+    钱花了图还是拿不到。
+  - 现在取图阶段（解析地址、下载字节）的 HTTP 失败一律归 `IMAGE_UNAVAILABLE`，文案保留
+    状态码与上游原文、附上对象 key。冷却判据只看 code，`IMAGE_UNAVAILABLE` 仍在冷却集合里，
+    不会因此变成可重试。
+- **下载回来的东西必须是图片**。签名地址过期时 CDN 常拿 `200` 回一页 HTML，而
+  `content-type` 可能仍写着 `image/jpeg`。现在按字节魔数判定
+  （JPEG/PNG/GIF/WebP/BMP），认不出就如实报 `IMAGE_UNAVAILABLE`（带前 4 字节），
+  不再落一个打不开的 `.jpg`。
+
+### 变更
+
+- **删掉已证明是「又一次生成」的配套代码**：`src/image-gen-trae.ts` 里的
+  `traeImageFetchUrl()`、`computeTraeIdeSign()`、`traeImageSignFields()` 与
+  `TRAE_IMAGE_SIGN_SALT` 全部移除（连同它们的测试）。取图跟 prompt 没有任何关系，
+  留着只会诱导后人再打一次那条会再扣费的 GET。
+
+### 测试
+
+- `tests/image-tool-download.spec.ts` 5 例：stub fetch 断言**三跳**（POST 生图 →
+  POST `get_resource_url` → GET 签名地址），且**没有任何**带 `image_size=` 的请求；
+  `uri_list` 请求体；CDN 请求不带 `Authorization`、只带 `Accept: image/*`；
+  空 `url_map` → `IMAGE_UNAVAILABLE`；取图跳回 401/403/429/500/502 一律
+  `IMAGE_UNAVAILABLE`（断言文案含状态码与对象 key，且**不含**「拒绝了凭据」「限流」）；
+  取图跳回 `200` 但字节不是图片（HTML 错误页）→ `IMAGE_UNAVAILABLE`。
+- `tests/image-gen-trae.spec.ts` 21 例：新增 `buildTraeResourceUrlBody`（只产出
+  `uri_list`、去空白、空 uri → `INVALID_ARGS`）、`parseTraeResourceUrlMap`（去空白、
+  坏形状回空表、丢弃非字符串/空串）、`signedTraeResourceUrl`（取到地址、缺 key 即
+  `IMAGE_UNAVAILABLE` 并带 key）三组纯函数单测。
+- `tests/image-tool-render.spec.ts` 12 例：字节真落盘、文件名与后缀、markdown 用相对路径
+  且不含 key、credit 回显、写盘失败即 `IMAGE_UNAVAILABLE`、`IMAGE_UNAVAILABLE` 进冷却而
+  `INVALID_ARGS` 不进；以及会话目录阶梯三条——只有 `agent.session.header.cwd` 时写进它、
+  实时 `workingDirectory` 优先于创建时目录、`directoryOf` 注入（`index.ts` 接 projection
+  的方式）优先于两者。
+- 全量 **92 files / 1180 tests** 通过（16 个 live 探针被 `TRAE_LIVE` 跳过且未提交，
+  跑一次烧一次积分）；CI 在 `ubuntu-latest` 与 `windows-latest` 双平台通过。
+- 真机（零成本，复用既有 key）：签名 → 1,155,578 字节 JPEG → 落盘同样字节 →
+  render 输出 markdown 图片，整条链路跑通。除 POST 之外整条链路都在真账号上验过。
+
+### 文档
+
+- `README.md` / `README.en.md` 的「文生图」条目与协议表改成「两步取图 + 落盘 + 相对
+  路径显示」，并保留「那条 GET 是又一次生成」的实测记录作为反面证据。
+
+## 4.6.0 (2026-10-26)
+
+> **文生图先只在国内版面世，并且必须由用户亲手勾选。** 企业版的租户网关是另一条
+> 计费面，国际版按另一套套餐计费，两者的生图行为都没有测过——所有取证都在
+> `trae-api-cn.mchost.guru` 上做的。
+
+### 新增
+
+- **文生图接进会话：`trae_draw_image`**（`feat(tools)`）。
+  - 用登录账号画一张图，返回 Trae 的**图片对象 key**（形如 `tos-cn-i-…/cn/<uid>/gen_image/…`，
+    图在 Trae 客户端的历史里能看到；字节插件拿不到，见下）。默认关闭、**按面板单独开**：
+    卡片模型栏勾上「允许模型自主生图」（`drawImageEnabled`）该面板才注册这个工具，
+    取消勾选立即撤下。
+  - **协议是实测出来的，不是从二进制里猜的**：`POST /api/ide/v1/tool_text_to_image`
+    （另有 SSE 变体），请求体**只认** `{prompt, image_size?}`——多带 `mode_type`/`session_id`/
+    `image_urls` 之类的已知字段直接 400 空 body，未知字段反被忽略；成功响应是**扁平**的
+    `{"message":"success","uri":"tos-cn-i-…"}`，没有 `{code,msg,data}` 信封。模型 `seedream_5`。
+  - **尺寸边界**：总像素必须落在 **3686400 ~ 16777216**（`1024x1024` 报
+    `image size must be at least 3686400 pixels`、`4608x4608` 报 at most，两者都**不扣费**）；
+    预设 `2k`/`3k`/`4k` 可用，缺省 `1920x1920`。
+  - **计费口径写进工具文案**：实测 `1920x1920` 一张约 **8.8 积分**（国内版价），上游不回传
+    扣费数字。失败后加 **30 秒冷却**（按张计费，不过冷却的重试等于再买一张）。
+  - **不取图，只回 key**：同路径的 GET 不是取图，**是又一次生成**。决定性探针（CN 个人版）：
+    POST 拿到 `…/1792954795741_44f94116_jpeg_1920x1920` 之后，用同一 `(prompt, size)` 带
+    全套网关头 + `x-ide-sign` 打 GET，回来的是**另一个** uri
+    （`…/1792954810505_b107ac11_jpeg_1920x1920`），耗时 27 秒、**一个像素都没有**——等于又画
+    一张、又扣一次（两次共约 17.6）。非法尺寸探针（`100x100`）同样印证：报错直接来自 Ark 的
+    `[callArkImageGeneration]`。所以发版代码**不再发这条 GET**：`generate` 只发一次 POST，
+    返回 `{url, credit?}`，渲染层把 key 显示成**行内代码**并注明「不能直接打开」，绝不拼进
+    `![](...)`（key 不是路径，拼进去只会得到以当前目录为基准的碎图标）。要真正把 uri 变成
+    字节，需要另一条通道（iCube material 的 `get_url` + `x-icube-token`，基址来自运行时
+    boot config），目前**没有打通**，代码里也不留假装能取的入口。
+    两例 `tests/image-tool-render.spec.ts` 与两例 `tests/image-tool-download.spec.ts`
+    （现已改名口径）用 stub fetch 断言**每次生成只发一次请求**。
+  - **只有国内版面板提供**（`DRAW_IMAGE_PANELS = ['cn']`，见 `src/status-paths.ts`）。
+    企业版走租户网关、国际版按另一套套餐计费，两者的生图行为都**没有测过**：企业版原先
+    就因为这一点被拒绝，国际版没有理由凭「面板是消费者版」放行——而且工具文案里的
+    8.8 积分是国内价，放到国际版就是错的。两处的勾选框都**置灰并写明原因**（不隐藏：
+    隐藏会让人以为插件漏了这个功能），理由与「加进白名单必须先补实测证据」写在同一处注释里。
+  - **注册开关是一个可测的纯函数**：`drawImagePanelsOf()` 三道门——面板在白名单内、
+    该面板的 provider 开着（opt-out 语义，旧配置仍算开）、用户显式勾选（**只认字面量
+    `true`**，`'yes'`、`1` 之类的手改值不算同意）。企业版即使被勾上也**结构性**拒绝，
+    不靠白名单列表的书写顺序。首版把这条规则写在 `apply()` 的闭包里，只能靠读代码确认，
+    现在由 `tests/image-tool-optin.spec.ts` 的 12 例钉住（缺省/非法形状/非布尔真值/关掉的
+    provider/企业版/国际版/多面板顺序/整段 section 与裸 `regions` map 同答）。
+  - **开关就在卡片里，不是一个只有 schema 的字段**：真值是 `regions.<panel>.drawImageEnabled`
+    （Host 的工具解析按面板读它，所以写的是 `regions` 而不是顶层设置键）。勾选即写、不经过
+    「保存」，写后**回读文档**核对——一个谎报授权的勾选框会让「工具没出现」看起来像 bug。
+    4 例卡片测试 `tests/card-draw-image-switch.spec.tsx` 断言写入字段是 `regions`、该槽位的
+    模型目录/图片模型/上下文预算/账号池一个都不能丢。
+  - **范围**：改图（需先走 TOS 上传预签名）与文生视频（异步素材轮询）**不做**，也不留半截入口。
+
+### 文档
+
+- `README.md` / `README.en.md` 新增「文生图」一节与功能列表条目：开关语义（含只有国内版
+  提供）、实测协议表、计费，以及为什么那条「取图」GET **是又一次生成**、插件只回 key。
+
 ## 4.5.2 (2026-10-25)
 
 > **思考档位不再被吞，也不再被谎报。** 插件原先只认识三档，未知档位一律按 `high`

package/README.en.md

@@ -42,6 +42,7 @@ A [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) bund
 - **Multiplier in the model name** — model names show the credit multiplier in Trae's own menu format (e.g. `GLM-5.2 · x0.79`), updated with each directory refresh.
 - **Promotion badge** — Trae publishes its discount rules in the model directory (`activity_discount`: pay ratio, list price, off-peak windows with their time zone). The plugin judges them against **the clock at render time** and paints one capsule beside the model name (`5 折` / `off-peak 5 折` / `limited 5 折`), with the old price, the new price and the window on hover. Judging at render time is what keeps a night-time discount from still hanging there the next morning; when upstream says nothing is discounted right now no badge is painted, the multiplier is never used to guess a promotion, and no campaign without an end time is labelled "limited". It is information only: no request and no billing changes, and the international region (subscription) has no such data and therefore shows no badge. See [docs/PROMO_BADGE.md](docs/PROMO_BADGE.md).
 - **DSH local tool loop** — gets pending structured `tool_calls` from Trae `llm_utils_chat`, lets DSH execute its own local tools, then returns tool results to the model.
+- **Text-to-image (`trae_draw_image`)** — brings the signed-in account's Trae text-to-image service into the conversation: the model draws one image and the plugin **fetches the bytes too**, writes them under the session cwd and shows the picture inline. **Off by default, enabled per panel** — generation really spends credits (measured: ~8.8 for one `1920x1920` on CN personal), so unlike the image-input declaration it only happens when you say so. Protocol, size bounds, the two-step fetch and why the old "fetch" GET is really a second generation are in "Text-to-image" below.
 - **Dual-region detection (CN / international)** — detects local sign-ins across Trae CN, TRAE SOLO CN, Trae, and TRAE SOLO installs. The region is derived from the credential's own `userRegion` claim (host suffix and edition label as fallbacks), with no manual switch.
 - **Region-isolated directories and selections** — CN and international each keep their own model directory, enabled picks, image opt-ins, and context budgets, and each provider reads only its own slot.
 - **Vision follows Trae's own declaration** — when Trae marks a model `multimodal`, the plugin advertises it as such with no manual tick per model (issue #16). The rule is "**models you tick ∪ models Trae marks multimodal**": models Trae marks `false`, or does not mark at all, stay text-only and can still be turned on by hand. A row enabled automatically is shown ticked and read-only, with the reason. See "Image input" below.
@@ -115,6 +116,27 @@ Notes:
 - **An automatically enabled row is shown ticked and read-only.** Under the union, unticking it would be re-applied immediately, so offering a clickable box would be a lie. There is currently no per-model "force off" escape hatch; if you want one, say so on issue #16.
 - Manual ticks still work for models Trae marks `false` (or does not mark), which is the escape hatch for "upstream does not say so, but it actually works".
 
+## Text-to-image (`trae_draw_image`)
+
+The text-to-image service behind TraeWork / SOLO is now reachable from a DSH conversation: the model **draws one image** and the result is written to a local file.
+
+**Off by default, switched on per panel.** Generation **really spends credits** (measured: ~8.8 for one `1920x1920` on CN personal), so this is not the image-input kind of declaration — it is an explicit spend gate. Tick "Allow the model to generate images" (`drawImageEnabled`) in the card's model column and that panel's `trae_draw_image` gets registered with DSH; unticking removes it immediately. Each panel stores its own switch; the enterprise and international panels do not offer one — the former's tenant gateway is a separate billing surface, the latter bills under another plan, and neither has been measured, so the plugin does not pretend otherwise.
+
+**The protocol (all measured, none of it guessed from the binary):**
+
+| Item | Fact |
+|---|---|
+| Endpoint | `POST /api/ide/v1/tool_text_to_image` (plus an SSE variant `..._stream`), model `seedream_5` |
+| Request body | Only `{prompt, image_size?}`. Adding known fields (`mode_type` / `session_id` / `image_urls` / `watermark`) earns a 400 with an empty body; unknown fields are ignored |
+| Success | Flat `{"message":"success","uri":"tos-cn-i-…/cn/<uid>/gen_image/<ts>_<hex>_jpeg_1920x1920"}` — **no** `{code,msg,data}` envelope |
+| Sizes | Total pixels must land in **3686400 ~ 16777216**: `1024x1024` is rejected as too small (`code 3003`, no charge) and `4608x4608` as too large; presets `2k`/`3k`/`4k` work, default is `1920x1920` |
+| Fetch | **Two steps, no extra charge**: `POST /api/ide/v1/get_resource_url` whose body must be exactly `{"uri_list":["<key>"]}` (`{uri}`/`{path}`/`{resource_uri}`/`{uris:[…]}` and GET `?uri=` all answer 200 with an empty `url_map`), replying `{"url_map":{"<key>":"<byteimg signed URL>"}}`; then a plain GET of that signed URL (**no Trae headers** — the signature is in the query) returns the bytes: measured `image/jpeg`, 1,155,578 bytes, header `ffd8ffe0` |
+| What that GET really is | Decisive probe: after the POST returned `…/1792954795741_44f94116_jpeg_1920x1920`, the GET with the same `(prompt, size)` came back with a **different** uri (`…/1792954810505_b107ac11_jpeg_1920x1920`) after 27 s and zero pixels — a second image and a second charge (~17.6 for the pair). The illegal-size probe agreed: the error is Ark's own `[callArkImageGeneration]` |
+
+**The bytes really do come back.** On success the tool returns `url` (the Trae object key, kept for diagnostics), `path` (a local file relative to the session cwd, e.g. `trae-images/trae-20261026-042015-ab12cd.jpg`), `model`, `prompt`, `size` and a `hint`; the renderer emits `![Trae 文生图](trae-images/…)` — DSH's chat resolves that relative path against the session cwd and reads the bytes through the host's authenticated `api/file` route, so the picture shows up inline. Only when the bytes genuinely could not be fetched (`IMAGE_UNAVAILABLE`: the image was generated and charged) does it fall back to inline-code "key only", and such a failure still starts the 30-second cooldown — generation is billed per image, so a retry buys another one.
+
+**Image editing and text-to-video are not opened up.** Editing needs a TOS upload presign first (this plugin has no such path); video polls a material result — a separate async pipeline. Neither ships, and neither leaves half an entry point behind.
+
 ## Model coverage
 
 This plugin serves models from Trae's **SOLO channel** (`DeepSeek-V4-Flash-Official`, `DeepSeek-V4-Pro-Official`, `GLM-5.3`, `GLM-5.2`, `Kimi-K3`, `MiniMax-M3`, `Qwen3.8-Max`, `Doubao-Seed-*`, …), for both the domestic and international sides.

package/README.md

@@ -46,6 +46,7 @@
 - **倍率内嵌模型名** —— 模型名称按 Trae 自身菜单的格式显示积分倍率（如 `GLM-5.2 · x0.79`），倍率随目录刷新更新。
 - **活动优惠徽标** —— Trae 把促销规则发在目录里（`activity_discount`：折扣比例、原价、闲时时段与时区），插件按**当前时钟**判定后，在模型名旁边画一枚胶囊：`5 折` / `闲时 5 折` / `限时 5 折`，悬停写明原价、现价与时段。判定放在**渲染时刻**而不是解析时刻，所以夜间折扣不会在第二天早上继续挂着；上游说「此刻没打折」就不画，**不从倍率反推**，也不给没有结束时间的活动编「限时」。这是纯提示：不改请求、不改计费，国际区（订阅制）没有这项数据因此不显示。详见 [docs/PROMO_BADGE.md](docs/PROMO_BADGE.md)。**同一枚胶囊也画在 DSH 的模型选择器里**（宿主 `conversation.input.model.label` 插槽），挑模型时就能看见——毕竟徽标画在设置卡片里时，你已经选完了。选择器里**倍率只出现一次**：名字里已有的目录倍率会被拆出来，有折扣时换成**折后价**（与卡片同一套时钟判定，同一份数据），打开选择器不会额外触发上游读。
 - **DSH 本地工具循环** —— 通过 Trae `llm_utils_chat` 获取待执行的结构化 `tool_calls`，交由 DSH 自带的本地工具执行，再将工具结果回传模型。
+- **文生图（`trae_draw_image`）** —— 把登录账号的 Trae 文生图能力接进会话：模型画一张图，插件把**图片字节一起取回来**、写进会话目录再显示给你。**默认关闭、按面板单独开**——生图真实消耗积分（实测 CN 个人版 `1920x1920` 一张约 8.8），所以它和识图那种「让不让看图」的开关不同，只能由你点头。协议、尺寸边界、取图那两步，以及为什么「取图」那条 GET 其实是又一次生成，见下方「[文生图](#文生图trae_draw_image)」。
 - **国内国际双区域自动识别** —— 自动发现 Trae CN / TRAE SOLO CN / Trae / TRAE SOLO 四个本地安装的登录账号；区域由凭证自带的 `userRegion` 声明自动判定（host 后缀与 edition 标签兜底），无需手动指定。
 - **目录与勾选按面板隔离** —— 三个面板各一套模型目录、勾选、图片开关与上下文预算，各自读各自的槽位。名录从**该面板所钉的那条网关**读取——原本钉在企业池的客户端去读消费池名录，会永远发现不了自己池的独占模型。
 - **识图能力跟随 Trae 自身的标注** —— Trae 把某个模型标为 `multimodal` 时，插件直接按多模态对外声明，无需你在卡片上逐一手勾（issue #16）。判据是「**你手动勾选的 ∪ Trae 标注多模态的**」：Trae 明确标 `false` 或未标注的模型保持纯文本，你可以照旧手动为它们打开图片输入。卡片上被自动开启的那一行显示为已勾选且只读，并说明原因。详见下方「图片输入（识图）」。
@@ -120,6 +121,27 @@ DSH PiAiAdapter（每个 provider 一套）
 - **被自动开启的行在卡片上显示为已勾选且只读。** 因为并集语义下取消勾选会被立刻重新加上，给它一个可点的框是在撒谎。目前不为单个模型提供「强制关闭」的出口；如果你需要这个开关，可以在 issue #16 下提出。
 - 手动勾选对 Trae 标注 `false`（或未标注）的模型依然有效，这是为那些「上游没标但实际可用」的情况留的口子。
 
+## 文生图（`trae_draw_image`）
+
+TraeWork / SOLO 侧那套文生图服务带出来了：在会话里让模型**画一张图**，插件把图片字节取回来、落成会话目录里的文件，再按相对路径显示在聊天里。取图走 `get_resource_url` 解析签名地址，不会重新生成、不额外计费——见下表。
+
+**默认关闭，按面板单独开。** 生图**真实消耗积分**（实测 CN 个人版 `1920x1920` 一张约 8.8 积分），所以它不是识图那种「让不让看图」的声明，而是一个要你点头的支出口：卡片模型栏勾上「允许模型自主生图」（`drawImageEnabled`），该面板的 `trae_draw_image` 才注册进 DSH；取消勾选立即撤下。面板各存各的开关；企业版与国际版面板不提供——企业版租户网关是另一条计费面，国际版按另一套套餐计费，两者的生图行为都没有测过，不在这里假装支持。
+
+**口径（全部实测，不是从二进制里猜的）：**
+
+| 项目 | 事实 |
+|---|---|
+| 端点 | `POST /api/ide/v1/tool_text_to_image`（另有 SSE 变体 `..._stream`），模型 `seedream_5` |
+| 请求体 | 只有 `{prompt, image_size?}`。多带已知字段（`mode_type` / `session_id` / `image_urls` / `watermark`）网关直接回 400 空 body——未知字段反而被忽略 |
+| 成功响应 | 扁平结构 `{"message":"success","uri":"tos-cn-i-…/cn/<uid>/gen_image/<ts>_<hex>_jpeg_1920x1920"}`，**没有** `{code,msg,data}` 信封 |
+| 尺寸 | 总像素必须落在 **3686400 ~ 16777216**：`1024x1024` 太小被拒（`code 3003`，不扣费）、`4608x4608` 太大被拒；预设 `2k`/`3k`/`4k` 可用，缺省 `1920x1920` |
+| 取图 | **两步、零额外计费**：`POST /api/ide/v1/get_resource_url`，body 只能是 `{"uri_list":["<key>"]}`（`{uri}`/`{path}`/`{resource_uri}`/`{uris:[…]}`、GET `?uri=` 都只回 200 + 空 `url_map`），应答 `{"url_map":{"<key>":"<byteimg 签名 URL>"}}`；再直接 GET 那个签名地址（**不带任何 Trae 头**，签名在 query 里）拿字节——实测 `image/jpeg`、1,155,578 字节、头 `ffd8ffe0` |
+| 那条 GET 的真实身份 | 决定性探针：POST 拿到 `…/1792954795741_44f94116_jpeg_1920x1920` 后，用同一 `(prompt, size)` 打 GET，回来的是**另一个** uri（`…/1792954810505_b107ac11_jpeg_1920x1920`），耗时 27 秒、一个像素都没有——等于又画一张、再扣一次（两次共约 17.6）。非法尺寸探针（`100x100`）也印证：报错直接来自 Ark 的 `[callArkImageGeneration]` |
+
+**图是真的取回来了。** 工具成功时返回 `url`（Trae 对象 key，留作排障）、`path`（相对会话目录的本地文件，如 `trae-images/trae-20261026-042015-ab12cd.jpg`）、`model`、`prompt`、`size` 和一句 `hint`；渲染层输出 `![Trae 文生图](trae-images/…)`——DSH 的聊天按 session cwd 解析这个相对路径，再过宿主的 `api/file` 鉴权路由取字节，所以图直接显示出来。只有字节真的没拿到时（`IMAGE_UNAVAILABLE`：图已生成、积分已扣）才退化成「只有对象 key」的行内代码；那种失败照样进 30 秒冷却——生图按张计费，重试等于再买一张。
+
+**改图与文生视频没有放开。** 改图要先走 TOS 上传预签名（本插件没有这条链路）；视频要轮询素材结果，是另一条异步管线。两者都不做，也不留半截入口。
+
 ## 模型覆盖范围
 
 插件提供的是 Trae **SOLO 通道**的模型（`DeepSeek-V4-Flash-Official`、`DeepSeek-V4-Pro-Official`、`GLM-5.3`、`GLM-5.2`、`Kimi-K3`、`MiniMax-M3`、`Qwen3.8-Max`、`Doubao-Seed-*` 等），三个面板均走这条通道。企业池另有一份名录（例如 `DeepSeek-V4.1-Flash` 只有企业池列），所以两边勾选互不覆盖。

package/lib/client.js

@@ -369,6 +369,48 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/**
+		* Panels whose text-to-image path this plugin has actually MEASURED, in
+		* `TRAE_PANELS` tab order.
+		*
+		* ONE entry today. The other two are refused for the SAME reason — no evidence
+		* — which is exactly the asymmetry the review of #62 held the PR on:
+		*
+		*  - `enterprise` bills through the tenant gateway, a second billing surface
+		*    whose image behaviour has never been probed;
+		*  - `ai` answers on `coresg-normal.trae.ai`, where no `tool_text_to_image`
+		*    request has ever run either — every measurement behind this tool was
+		*    taken against `trae-api-cn.mchost.guru`. Refusing one unverified gateway
+		*    while serving another is not a rule, it is an accident.
+		*
+		* Adding a panel means adding its evidence in the same change (the precedent
+		* for international claims is `docs/INTL_SG_EVIDENCE.md`). Order is
+		* significant: the tool's resolver walks `TRAE_PANELS` order and takes the
+		* FIRST consenting panel, so `cn` — the only measured one — always answers
+		* first.
+		*/
+		const DRAW_IMAGE_PANELS = ["cn"];
+		/**
+		* Build the next `regions` settings value for one panel's 「允许模型自主生图」
+		* switch (`drawImageEnabled`, `trae_draw_image`).
+		*
+		* Same merge rule as every sibling region write: only the addressed panel's
+		* `drawImageEnabled` changes, so flipping the switch carries that slot's model
+		* directory, selection, budgets, pool and credit seat through, and leaves the
+		* other panels alone. The flag is a PANEL's consent, not the account's: cn and
+		* enterprise bill the same Trae CN account but route through different gateways,
+		* so consent must not cross the boundary (the tool resolver reads it per panel).
+		*
+		* `value` may be the whole settings section or the `regions` map; the RETURN
+		* value is always the `regions` map, i.e. exactly what `settingsScope.set(
+		* 'regions', ...)` needs.
+		*/
+		function nextRegionDrawImage(value, panel, enabled) {
+			return nextRegionSlots(regionsMapOf(value), panel, {
+				...regionSlotOf(value, panel),
+				drawImageEnabled: enabled
+			});
+		}
+		/**
 		* Build the next `regions` settings value for one panel's MODEL DIRECTORY.
 		*
 		* The model-directory save REPLACES the whole region slot, so every field of
@@ -1195,6 +1237,14 @@ window.__ModuleLoader__.load({
    capability note. Wraps on narrow cards; keeps the two buttons visually a
    pair and distinct from the save footer below. */
 .dsm-trae-context-bulk{display:flex;flex-wrap:wrap;gap:8px;margin-top:10px}
+/* Per-panel 「自主生图」 consent (trae_draw_image). Sits under the bulk-context
+   row, above the capability note, because it is a per-REGION runtime choice like
+   the model picks above it — not a global preference. The input stays a real
+   checkbox so the card's tests can find it by its accessible name. */
+.dsm-trae-draw-image{display:flex;align-items:flex-start;gap:8px;margin-top:10px;font-size:11px;line-height:16px;cursor:pointer}
+.dsm-trae-draw-image input{flex:none;margin:2px 0 0}
+.dsm-trae-draw-image[data-disabled="true"]{cursor:not-allowed;opacity:.6}
+.dsm-trae-draw-image-hint{color:var(--dsw-alias-label-tertiary,#999)}
 /* Verdict badge. Only a real refusal is coloured as a warning; an unknown
    verdict stays neutral because an inconclusive probe is not evidence against
    the model. */
@@ -4133,6 +4183,8 @@ window.__ModuleLoader__.load({
 			const optimisticSettings = (0, react.useRef)({});
 			/** True while a preference is crossing the wire; serializes both writers. */
 			const [savingSettings, setSavingSettings] = (0, react.useState)(false);
+			/** The in-flight flip of the per-panel 「自主生图」 switch (undefined = read the document). */
+			const [drawImageDraft, setDrawImageDraft] = (0, react.useState)(void 0);
 			/**
 			* Per-account status (check-in / balances / subscription) shown in each row of
 			* the account table, keyed by region then account id. Loaded per account via
@@ -4250,6 +4302,37 @@ window.__ModuleLoader__.load({
 					if (mounted.current) setSavingSettings(false);
 				}
 			};
+			/**
+			* Flip ONE panel's 「允许模型自主生图」 switch (`drawImageEnabled`).
+			*
+			* Not a top-level preference like the two above: the flag lives INSIDE
+			* `regions.<panel>`, because it is per-panel consent and the Host's tool
+			* resolver reads it per panel. `nextRegionDrawImage` carries the rest of that
+			* slot through, so flipping this cannot drop the model directory, budgets,
+			* pool or credit seat — the failure #44 fixed for the pool.
+			*
+			* Serialized by `savingSettings` with the sibling writers: they all write the
+			* same settings document. The read-back re-reads the document, so a write that
+			* silently reverted cannot leave the box claiming a grant the Host never got —
+			* the one failure that matters here, because a box that lies about consent
+			* makes the tool's absence look like a bug.
+			*/
+			const writeDrawImage = async (value) => {
+				if (settingsScope === void 0 || settingsScope.getSnapshot().writable !== true) return;
+				setSavingSettings(true);
+				setWriteError(void 0);
+				setDrawImageDraft(value);
+				try {
+					await writeSettingsField(settingsScope, "regions", nextRegionDrawImage(settingsScope.getSnapshot().value, activeRegion, value), (readBack) => regionSlotsOf(readBack)[activeRegion]?.drawImageEnabled === value);
+				} catch (error) {
+					if (mounted.current) setWriteError(error instanceof Error ? error.message : t("row.requestFailed"));
+				} finally {
+					if (mounted.current) {
+						setDrawImageDraft(void 0);
+						setSavingSettings(false);
+					}
+				}
+			};
 			(0, react.useEffect)(() => settingsScope?.subscribe(() => {
 				setSettingsRevision((value) => value + 1);
 			}), [settingsScope]);
@@ -4854,6 +4937,26 @@ window.__ModuleLoader__.load({
 			const slotImageIds = Array.isArray(regionSlot?.imageModelIds) ? regionSlot.imageModelIds.filter((id) => typeof id === "string") : void 0;
 			const legacyImageIds = legacySlot && typeof settingsValue === "object" && settingsValue !== null && Array.isArray(settingsValue.imageModelIds) ? settingsValue.imageModelIds.filter((id) => typeof id === "string") : [];
 			const savedImageIds = new Set(slotImageIds ?? legacyImageIds);
+			/**
+			* The active panel's 「自主生图」 consent, read from the SAME place the Host
+			* reads it (`regions.<panel>.drawImageEnabled`, see regionStateOf) with any
+			* in-flight flip laid over it. There is deliberately no legacy flat fallback:
+			* this flag was born after the region split, and reading a top-level key here
+			* would show consent the Host's per-panel resolver never grants.
+			*/
+			const committedDrawImage = regionSlot?.drawImageEnabled === true;
+			const drawImageOn = drawImageDraft ?? committedDrawImage;
+			/**
+			* Whether the active panel can serve text-to-image at all. This is the SAME
+			* list the Host registers from (`DRAW_IMAGE_PANELS`, imported rather than
+			* restated), so the box can never offer a grant the Host will then refuse:
+			* a switch that ticks and does nothing is the exact failure this whole
+			* opt-in must not have. Two panels are out — `enterprise` bills through a
+			* tenant gateway, and `ai` has never been probed at all (every measurement
+			* behind the credit figures is CN), so neither may spend credits.
+			*/
+			const drawImageServable = DRAW_IMAGE_PANELS.includes(activeRegion);
+			const drawImageUnavailableHint = activeRegion === "ai" ? t("row.drawImageHintAi") : t("row.drawImageHintEnterprise");
 			const draft = drafts[activeRegion];
 			const visibleModels = draft?.models ?? (status.status === "signed-in" ? status.models : []);
 			/**
@@ -5731,6 +5834,22 @@ window.__ModuleLoader__.load({
 												className: "dsm-trae-model-capability-note",
 												children: t("row.contextBudgetHint")
 											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+												className: "dsm-trae-draw-image",
+												"data-disabled": drawImageServable ? void 0 : "true",
+												title: drawImageServable ? t("row.drawImageHint") : drawImageUnavailableHint,
+												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+													type: "checkbox",
+													checked: drawImageOn,
+													disabled: !drawImageServable || busy || saving || savingSettings || settingsScope?.getSnapshot().writable !== true,
+													onChange: (event) => {
+														writeDrawImage(event.target.checked);
+													}
+												}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [t("row.drawImage"), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+													className: "dsm-trae-draw-image-hint",
+													children: [" ", drawImageServable ? t("row.drawImageHint") : drawImageUnavailableHint]
+												})] })]
+											}),
 											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 												className: "dsm-trae-model-capability-note",
 												children: t("row.modelCapabilityPending")
@@ -6838,6 +6957,10 @@ window.__ModuleLoader__.load({
 			"row.modelsTestAllHint": "The「test all」button probes every model in the catalog, enabled or not, so it spends noticeably more quota than the enabled-only run.",
 			"row.showPointsInMainUi": "Show credits in the composer row",
 			"row.showPointsInMainUiHint": "A clickable readout in the composer tool row while a model from this plugin is selected: Trae CN · <balance> on the CN side, Trae Global · <plan> on the international one.",
+			"row.drawImage": "Let the model draw images (trae_draw_image)",
+			"row.drawImageHint": "Adds a trae_draw_image tool to this panel: the model can generate one image when you ask for one, at this account's real credit cost (measured ~8.8 for 1920x1920 on Trae CN). Off by default — while this is unticked the tool does not exist, so the model cannot spend credits on its own.",
+			"row.drawImageHintEnterprise": "Not available on the enterprise panel: that path bills through the tenant gateway and has not been verified.",
+			"row.drawImageHintAi": "Not available on the international panel: image generation has only been measured on Trae CN, and this path bills on a different plan, so the credit figures shown here would be wrong. Switch to the CN panel to use it.",
 			"row.showPointsInMainUiHintAi": "A clickable readout in the composer tool row while a model from this plugin is selected: Trae Global · <plan>.",
 			"row.creditPositionLabel": "position",
 			"row.creditPositionComposer": "composer toolbar",
@@ -7219,6 +7342,10 @@ window.__ModuleLoader__.load({
 			"row.showPointsInMainUi": "在输入框工具栏显示积分读数",
 			"row.showPointsInMainUiHint": "在输入框工具栏显示可点击读数（选中本插件模型时出现）：国内版为「Trae CN · 余额」，国际版为「Trae 国际版 · 套餐」。",
 			"row.showPointsInMainUiHintAi": "在输入框工具栏显示可点击读数（选中本插件模型时出现）：国际版为「Trae 国际版 · 套餐」。",
+			"row.drawImage": "允许模型自主生图（trae_draw_image）",
+			"row.drawImageHint": "为本面板挂上 trae_draw_image 工具：你要求时模型能生成一张图，按本账号真实扣积分（国内版实测 1920x1920 约 8.8）。默认关闭——不勾选时工具根本不存在，模型无法自己花额度。",
+			"row.drawImageHintEnterprise": "企业面板不提供：那条路径走租户网关计费，未经验证。",
+			"row.drawImageHintAi": "国际版面板不提供：生图只在 Trae CN 实测过，国际版按另一套套餐计费，这里标注的积分价格会对不上。要用请切到国内版面板。",
 			"row.creditPositionLabel": "显示位置",
 			"row.creditPositionComposer": "输入框工具栏",
 			"row.creditPositionStats": "输入框下方",

package/lib/index.d.ts

@@ -4427,6 +4427,13 @@ interface TraeRegionState {
   enabledModelIds?: string[];
   /** Models the user explicitly enabled for image input in this region. */
   imageModelIds?: string[];
+  /**
+   * Whether the model may call trae_draw_image for this panel. Opt-IN:
+   * image generation spends real credits, so an absent value is never consent
+   * (the same rule workbuddy's imageToolEnabled follows). Declared in the
+   * schema below — a field missing from the schema is dropped on every save.
+   */
+  drawImageEnabled?: boolean;
   /** Local DSH context budget per model in this region. */
   contextBudgets?: Record<string, number>;
   /**

package/lib/index.js

@@ -6,7 +6,7 @@ import { PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
 import { existsSync, readFileSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { copyFile, readFile, readdir, rename, rm, stat } from "node:fs/promises";
+import { copyFile, mkdir, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
 import { createCipheriv, createDecipheriv, createHash, randomBytes, randomUUID, sign, timingSafeEqual } from "node:crypto";
 import { withFileLock, writeFileAtomic } from "@deepseek-ai/dsh-atomic-write";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
@@ -1560,6 +1560,64 @@ function nextRegionCreditPosition(value, panel, position) {
 		creditPosition: position
 	});
 }
+/**
+* Panels whose text-to-image path this plugin has actually MEASURED, in
+* `TRAE_PANELS` tab order.
+*
+* ONE entry today. The other two are refused for the SAME reason — no evidence
+* — which is exactly the asymmetry the review of #62 held the PR on:
+*
+*  - `enterprise` bills through the tenant gateway, a second billing surface
+*    whose image behaviour has never been probed;
+*  - `ai` answers on `coresg-normal.trae.ai`, where no `tool_text_to_image`
+*    request has ever run either — every measurement behind this tool was
+*    taken against `trae-api-cn.mchost.guru`. Refusing one unverified gateway
+*    while serving another is not a rule, it is an accident.
+*
+* Adding a panel means adding its evidence in the same change (the precedent
+* for international claims is `docs/INTL_SG_EVIDENCE.md`). Order is
+* significant: the tool's resolver walks `TRAE_PANELS` order and takes the
+* FIRST consenting panel, so `cn` — the only measured one — always answers
+* first.
+*/
+const DRAW_IMAGE_PANELS = ["cn"];
+/**
+* Whether ONE panel's 「允许模型自主生图」 grant is in force, i.e. its box was
+* ticked. ONLY the literal `true` counts: a hand-edited `'yes'` or a `1` is a
+* typo, not consent to spend credits. (A `{ get(): true }` live reference — the
+* DSH 0.1.7 slot shape — IS decoded to the true it holds first, see
+* {@link unwrapVolatileDeep}: that is the Host's own document, not a hand edit.)
+*
+* `value` may be the whole settings section or the `regions` map (see
+* {@link regionsMapOf}).
+*/
+function drawImageEnabledOf(value, panel) {
+	return regionSlotOf(value, panel)["drawImageEnabled"] === true;
+}
+/**
+* The panels that may register `trae_draw_image` RIGHT NOW — the single
+* judgment behind both the tool's registration and its account resolver, and
+* therefore the only place a user's credits can be exposed by accident.
+*
+* Pure and exported on purpose (review of #62, item 3): the first version kept
+* this rule inside `apply()`'s closure, so "does ticking the box actually
+* grant anything" could only be code-reviewed, never tested.
+*
+* THREE gates, all required: the panel must be measured
+* ({@link DRAW_IMAGE_PANELS}), its provider must be switched ON (opt-out rule,
+* so a config written before the switch existed still counts), and the panel
+* must carry an explicit grant. A tick on a switched-off provider is STORED
+* consent, not a live grant: flipping the provider back on restores the tool
+* without asking again, which is why both gates are read here rather than at
+* the checkbox.
+*
+* `enterprise` is refused structurally, even if someone later adds it to
+* {@link DRAW_IMAGE_PANELS}: consent must never cross into the tenant billing
+* surface by editing a list.
+*/
+function drawImagePanelsOf(value) {
+	return TRAE_PANELS.filter((panel) => panel !== "enterprise" && DRAW_IMAGE_PANELS.includes(panel) && regionEnabledOf(value, panel) && drawImageEnabledOf(value, panel));
+}
 //#endregion
 //#region src/decrypt.ts
 const TRAE_AUTH_STORAGE_KEY = "iCubeAuthInfo://icube.cloudide";
@@ -9209,7 +9267,7 @@ async function checkinOne(target, deps) {
 		return {
 			...base,
 			status: "failed",
-			message: messageOf(error)
+			message: messageOf$1(error)
 		};
 	}
 	if (credential === void 0) return {
@@ -9224,7 +9282,7 @@ async function checkinOne(target, deps) {
 		return {
 			...base,
 			status: "failed",
-			message: messageOf(error)
+			message: messageOf$1(error)
 		};
 	}
 	if (!status.enabled) return {
@@ -9260,7 +9318,7 @@ async function checkinOne(target, deps) {
 		return {
 			...base,
 			status: "failed",
-			message: messageOf(error)
+			message: messageOf$1(error)
 		};
 	}
 }
@@ -9312,7 +9370,7 @@ async function testOne(target, modelId, probe, deps) {
 		return {
 			...base,
 			outcome: "auth",
-			detail: messageOf(error)
+			detail: messageOf$1(error)
 		};
 	}
 	if (credential === void 0) return {
@@ -9380,7 +9438,7 @@ function defaultWait(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
 /** A safe message from an unknown throwable, bounded in length. */
-function messageOf(error) {
+function messageOf$1(error) {
 	return (error instanceof Error ? error.message : String(error)).slice(0, 300);
 }
 //#endregion
@@ -9847,6 +9905,565 @@ var UnconfiguredTraeUpstreamClient = class {
 	}
 };
 //#endregion
+//#region src/image-gen-trae.ts
+/**
+* Trae 文生图的纯逻辑层：请求体、响应解析、尺寸校验、取图地址解析、SSE 帧。
+*
+* 与 dsh-connect-workbuddy 的 image-gen.ts 同一分工——本文件只做纯函数与
+* 常量，不发网络请求；网络与工具注册在 image-tool.ts。
+*
+* 协议事实来自 2026-10-25 对 Trae CN 账号的活体探测（tests/live-probe*.spec.ts，
+* 结果存 probe2/3/4/5-results.jsonl）：
+*   - POST {chat}/api/ide/v1/tool_text_to_image，请求体只有 {prompt, image_size?}
+*     被接受；多发 mode_type/request_type/chat_mode/session_id/access_type/
+*     image_urls/watermark 等任何已知字段都会被网关 400 拒绝（空 body）。
+*     未知字段被忽略（camelCase 字段能过）。
+*   - 成功应答是扁平 JSON {message: "success", uri: "<tos 对象 key>"}；
+*     业务失败是扁平 {code: 3003, message: "…"}。没有 {code:0,data} envelope。
+*   - image_size 校验在 Ark 侧：格式 'WIDTHxHEIGHT' 或预设 2k/3k/4k，
+*     总像素 ∈ [3686400, 16777216]（512x512 与 1024x1024 会被拒）；
+*     缺省时输出 1920x1920。
+*   - 同一路径的 GET（?prompt=<P>&image_size=<S> + x-ide-sign 头）**不是取图**，
+*     而是又一次生成：2026-10-26 决定性实测，同一 (prompt, size) 紧接着 GET，
+*     回来的是另一个 uri、耗时 27 秒、零像素（等于多扣一张）。曾为它写下的
+*     traeImageFetchUrl / computeTraeIdeSign / traeImageSignFields 与签名盐已删除——
+*     取图跟 prompt 没有任何关系。
+*   - 真正的取图是两步、不再生成（同日实测，零成本）：POST
+*     /api/ide/v1/get_resource_url { uri_list: [<tos key>] } →
+*     { url_map: { "<key>": "<byteimg 签名 URL>" } }，再直接 GET 那个签名 URL
+*     （不带任何 Trae 头）即得图片字节（实测 image/jpeg、1,155,578 字节、
+*     头 ffd8ffe0）。签名 URL 带 x-expires，过期重新解析即可。
+*   - SSE 端点 tool_text_to_image_stream 的事件名是小写：heartbeat（data:
+*     {timestamp_ms, status}）、result（data: {uri}）、done（data:
+*     {finish_reason}）。
+*   - 计费锚点：1920x1920 一张 ≈ 8.8 积分。
+*
+* @module dsh-connect-trae/image-gen-trae
+*/
+/** 文生图（同步）：一次 POST 拿回结果。Trae 客户端的 ToolText2Image 用的就是它。 */
+const TRAE_TOOL_TEXT_TO_IMAGE_PATH = "/api/ide/v1/tool_text_to_image";
+/** 上游为图像工具固定的模型 id；请求体里没有 model 字段，服务端自选。 */
+const TRAE_IMAGE_MODEL = "seedream_5";
+/** 尺寸预设：活体确认 '2k','3k','4k' 被 Ark 接受，square/square_hd 等
+*  客户端预设名服务端也会翻译（square_hd 实测出 1920x1920）。 */
+const TRAE_IMAGE_SIZE_PRESETS = [
+	"2k",
+	"3k",
+	"4k",
+	"square",
+	"square_hd",
+	"landscape",
+	"portrait"
+];
+var TraeImageError = class extends Error {
+	code;
+	/** 上游业务码（响应里的 code 字段），只在 UPSTREAM 类失败上有值。 */
+	serverCode;
+	constructor(message, code, serverCode) {
+		super(message);
+		this.name = "TraeImageError";
+		this.code = code;
+		this.serverCode = typeof serverCode === "number" ? serverCode : void 0;
+	}
+};
+/** 尺寸合法性：预设名，或 宽x高 且总像素在 Ark 的 [下限,上限] 区间。 */
+function isTraeImageSize(value) {
+	if (TRAE_IMAGE_SIZE_PRESETS.includes(value)) return true;
+	const m = /^([0-9]{3,5})x([0-9]{3,5})$/.exec(value);
+	if (m === null) return false;
+	const pixels = Number(m[1]) * Number(m[2]);
+	return pixels >= 3686400 && pixels <= 16777216;
+}
+/** 组一次文生图请求体；参数毛病全在这里拦下（INVALID_ARGS，不花积分）。 */
+function buildTraeImageBody(input) {
+	const prompt = input.prompt.trim();
+	if (prompt === "") throw new TraeImageError("trae image: prompt 必须是非空字符串。", "INVALID_ARGS");
+	const out = { prompt };
+	if (input.size !== void 0 && input.size !== "") {
+		const size = input.size.trim().toLowerCase();
+		if (!isTraeImageSize(size)) throw new TraeImageError("trae image: 尺寸「" + size + "」不被接受（需 宽x高 且总像素 ∈ [3686400,16777216]，或预设 " + TRAE_IMAGE_SIZE_PRESETS.join("/") + "）。", "INVALID_ARGS");
+		out.image_size = size;
+	}
+	return out;
+}
+/**
+* uri → 可下载 URL 的解析端点。2026-10-26 活体确认：body 必须正是
+* `{ uri_list: [<tos key>] }`；其它所有形态（{uri}、{path}、{resource_uri}、
+* {uris:[…]}、{resources:[…]}、{scene:'report',uri}、GET ?uri=）都回
+* HTTP 200 + 空 url_map——不报错，只是什么都不给。
+*/
+const TRAE_RESOURCE_URL_PATH = "/api/ide/v1/get_resource_url";
+/** 组一次解析请求体；空 uri 在这里拦下（INVALID_ARGS，一分钱没花）。 */
+function buildTraeResourceUrlBody(uri) {
+	const key = typeof uri === "string" ? uri.trim() : "";
+	if (key === "") throw new TraeImageError("trae image: 解析图片地址需要非空的 uri。", "INVALID_ARGS");
+	return { uri_list: [key] };
+}
+/**
+* 解析应答里的 url_map。服务端对认不出的 key 就回空表（不报错），
+* 所以非字符串/空串条目一律丢弃，由调用方按"缺地址"处理。
+*/
+function parseTraeResourceUrlMap(json) {
+	const raw = (json !== null && typeof json === "object" ? json : {})["url_map"];
+	const map = {};
+	if (raw === null || typeof raw !== "object") return map;
+	for (const [key, value] of Object.entries(raw)) if (typeof value === "string" && value.trim() !== "") map[key] = value.trim();
+	return map;
+}
+/**
+* 取该 uri 的签名下载地址。空表 = 服务端认不出这个 key，此时图片已经
+* 生成并计费，却拿不到字节——如实抛 IMAGE_UNAVAILABLE，别谎报成功。
+*/
+function signedTraeResourceUrl(json, uri) {
+	const map = parseTraeResourceUrlMap(json);
+	const signed = map[uri] ?? map[uri.trim()];
+	if (signed === void 0) throw new TraeImageError("trae image: 图片已经生成、积分已经扣了，但服务端没给出可下载地址（url_map 里没有这个 key）：" + uri, "IMAGE_UNAVAILABLE");
+	return signed;
+}
+/** 应答里图片地址的字段名。活体看到的就是 uri；其余字段是 Rust 端
+*  ToolcallResultImage 的字段池（tos_uri/display_url/…），留给未来形态。 */
+const TRAE_IMAGE_URL_FIELDS = [
+	"uri",
+	"tos_uri",
+	"display_url",
+	"image_url",
+	"original_url",
+	"preview_url",
+	"internal_url"
+];
+/** 深度不超过 4 地扫第一个可用 URL 字段；再深的嵌套不是这个 API 的形态。 */
+function findImageUrl(node, depth = 0) {
+	if (depth > 4 || node === null || typeof node !== "object") return void 0;
+	const record = node;
+	for (const field of TRAE_IMAGE_URL_FIELDS) {
+		const value = record[field];
+		if (typeof value === "string" && value.trim() !== "") return value.trim();
+	}
+	for (const value of Object.values(record)) if (value !== null && typeof value === "object") {
+		const found = findImageUrl(value, depth + 1);
+		if (found !== void 0) return found;
+	}
+}
+function findCredit(node, depth = 0) {
+	if (depth > 4 || node === null || typeof node !== "object") return void 0;
+	const record = node;
+	const credit = record.credit;
+	if (typeof credit === "number" && Number.isFinite(credit)) return credit;
+	for (const value of Object.values(record)) if (value !== null && typeof value === "object") {
+		const found = findCredit(value, depth + 1);
+		if (found !== void 0) return found;
+	}
+}
+/**
+* 解析 tool_text_to_image 的扁平 JSON 应答。
+*
+* 实测形态：成功 {message:"success", uri:"…"}；失败 {code:3003, message:"…"}。
+* code 存在且非 0 → UPSTREAM（原样抛出 code/message——余额不足、风控、
+* Ark 参数错误全靠它浮出）；无 code 但 uri 缺失 → EMPTY_RESULT。
+*/
+function parseTraeImageResponse(json) {
+	const record = json !== null && typeof json === "object" ? json : {};
+	const code = typeof record.code === "number" ? record.code : void 0;
+	const message = typeof record.message === "string" ? record.message : void 0;
+	if (code !== void 0 && code !== 0) throw new TraeImageError("trae image: 上游业务错误 code=" + code + (message === void 0 || message === "" ? "" : ": " + message), "UPSTREAM", code);
+	const url = findImageUrl(record);
+	if (url === void 0) throw new TraeImageError("trae image: 应答里没有图片地址" + (message === void 0 ? "" : "（message=" + message + "）"), "EMPTY_RESULT", code);
+	const credit = findCredit(record);
+	return credit === void 0 ? { url } : {
+		url,
+		credit
+	};
+}
+//#endregion
+//#region src/image-tool.ts
+/**
+* trae_draw_image：把 Trae 的文生图能力（客户端与 SOLO 共用的
+* /api/ide/v1/tool_text_to_image 端点）暴露成一个 DSH agent 工具。
+*
+* 与 dsh-connect-workbuddy 的 image-tool.ts 同一注册形态：手写 ToolDefinition、
+* 不 import 宿主类型（宿主 Tools.register 只校验 output.render 是函数、
+* output.schema 是受支持的 JSON Schema；parameters 原样投影给模型）。
+* 这样 bin 可达图不新增任何非 node: 裸说明符（tests/host-peers.spec.ts 的约束）。
+*
+* 作用域（v1，有意为之）：
+*   - 只做文生图。改图（image_urls 传参考图）需要先把本地文件经
+*     get_resource_upload_url 预签名上传到 TOS，那是另一条流水线，未接。
+*   - 只做文生图同步端点。SSE 端点与 video 端点的常量在 image-gen-trae.ts
+*     留档（tool_text_to_image_stream / tool_text_to_video_stream），
+*     Trae 的视频结果还要轮询 query_material_result，等真机探针确认后再加。
+*
+* @module dsh-connect-trae/image-tool
+*/
+/** 工具名。与其它 connect 插件的命名习惯一致。 */
+const TRAE_IMAGE_TOOL_NAME = "trae_draw_image";
+/** 单次生图上限。Trae 客户端里一张图 15-45 秒，留足余量。 */
+const IMAGE_TOOL_TIMEOUT_MS = 18e4;
+/** 失败后的冷却：生图按张扣积分，连续重试会白白烧积分。 */
+const FAILURE_COOLDOWN_MS = 3e4;
+/** 图片落地目录名，相对会话工作目录。 */
+const TRAE_IMAGE_DIR = "trae-images";
+function messageOf(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+/** HTTP 层的状态码映射。语义与 workbuddy 侧一致。 */
+function mapHttpToImageError(status, detail) {
+	const tail = detail === "" ? "" : "：" + detail.slice(0, 200);
+	if (status === 401 || status === 403) return new TraeImageError("trae image: 上游拒绝了凭据（HTTP " + status + "）" + tail, "AUTH");
+	if (status === 429) return new TraeImageError("trae image: 上游限流（HTTP 429）" + tail, "RATE_LIMIT");
+	return new TraeImageError("trae image: 上游 HTTP " + status + tail, "UPSTREAM");
+}
+/**
+* 取图阶段（解析签名地址 / 下载字节）的 HTTP 失败。
+*
+* 这里**不能**复用 mapHttpToImageError：那套映射是给「生图那一跳」用的，401/403 报
+* AUTH、429 报 RATE_LIMIT 都还有意义。到了取图这一跳，图早已生成、积分早已扣掉，
+* 再把 403 说成「上游拒绝了凭据」就是谎报——用户会去重新登录，而钱已经花了、图还是
+* 拿不到。所以一律归成 IMAGE_UNAVAILABLE，文案保留状态码与原文便于排障，并附上对象
+* key。冷却判据只看 code，IMAGE_UNAVAILABLE 同样在冷却集合里，不会因为换了 code 就
+* 变成可重试（重试等于再买一张）。
+*/
+function mapRetrievalHttpError(status, detail, uri) {
+	const tail = detail === "" ? "" : "：" + detail.slice(0, 200);
+	return new TraeImageError("trae image: 图片已经生成、积分已经扣了，但取图接口回了 HTTP " + status + tail + "\n图片对象 key：" + uri, "IMAGE_UNAVAILABLE");
+}
+/**
+* 发一次真机文生图请求，并把图片字节一起取回来。所有可预期的失败都归一成
+* TraeImageError，让上层的冷却判据只看 code（见 createTraeDrawImageTool 的注释）。
+*/
+var TraeImageClient = class {
+	options;
+	constructor(options = {}) {
+		this.options = options;
+	}
+	async generate(account, input, signal) {
+		const body = buildTraeImageBody(input);
+		const endpoint = traeEndpoint(account.baseUrl, TRAE_TOOL_TEXT_TO_IMAGE_PATH);
+		const headers = buildTraeHeaders(account.credential, account.identity, { profile: "model-detail" });
+		const fetchImpl = this.options.fetchImpl ?? globalThis.fetch;
+		const timeoutMs = this.options.timeoutMs ?? IMAGE_TOOL_TIMEOUT_MS;
+		const requestSignal = signal ?? AbortSignal.timeout(timeoutMs);
+		let response;
+		try {
+			response = await fetchImpl(endpoint, {
+				method: "POST",
+				headers,
+				body: JSON.stringify(body),
+				signal: requestSignal
+			});
+		} catch (error) {
+			throw new TraeImageError("trae image: 生图请求发出失败：" + messageOf(error), "NO_ROUTE");
+		}
+		let payload;
+		try {
+			payload = await response.text();
+		} catch (error) {
+			throw new TraeImageError("trae image: 读取应答失败：" + messageOf(error), "UPSTREAM");
+		}
+		if (!response.ok) throw mapHttpToImageError(response.status, payload);
+		let json;
+		try {
+			json = JSON.parse(payload);
+		} catch {
+			throw new TraeImageError("trae image: 应答不是 JSON（HTTP 200）：" + payload.slice(0, 200), "UPSTREAM");
+		}
+		const outcome = parseTraeImageResponse(json);
+		const signed = await this.resolveSignedUrl(account, outcome.url, requestSignal);
+		const image = await this.download(signed, requestSignal, outcome.url);
+		const result = {
+			url: outcome.url,
+			bytes: image.bytes,
+			mimeType: image.mimeType
+		};
+		if (outcome.credit !== void 0) result.credit = outcome.credit;
+		return result;
+	}
+	/**
+	* 把 tos key 解析成一个可直接 GET 的签名地址（byteimg CDN，带 x-expires）。
+	* 这一步只是向服务端要地址，不会重新画图。
+	*/
+	async resolveSignedUrl(account, uri, signal) {
+		const body = buildTraeResourceUrlBody(uri);
+		const endpoint = traeEndpoint(account.baseUrl, TRAE_RESOURCE_URL_PATH);
+		const headers = buildTraeHeaders(account.credential, account.identity, { profile: "model-detail" });
+		const fetchImpl = this.options.fetchImpl ?? globalThis.fetch;
+		const requestSignal = signal ?? AbortSignal.timeout(IMAGE_TOOL_TIMEOUT_MS);
+		let response;
+		try {
+			response = await fetchImpl(endpoint, {
+				method: "POST",
+				headers,
+				body: JSON.stringify(body),
+				signal: requestSignal
+			});
+		} catch (error) {
+			throw new TraeImageError("trae image: 图片已经生成、积分已经扣了，但解析下载地址的请求发不出去：" + messageOf(error), "IMAGE_UNAVAILABLE");
+		}
+		let payload;
+		try {
+			payload = await response.text();
+		} catch (error) {
+			throw new TraeImageError("trae image: 图片已经生成、积分已经扣了，但读取解析应答失败：" + messageOf(error), "IMAGE_UNAVAILABLE");
+		}
+		if (!response.ok) throw mapRetrievalHttpError(response.status, payload, uri);
+		let json;
+		try {
+			json = JSON.parse(payload);
+		} catch {
+			throw new TraeImageError("trae image: 图片已经生成、积分已经扣了，但解析应答不是 JSON（HTTP 200）：" + payload.slice(0, 200), "IMAGE_UNAVAILABLE");
+		}
+		if (json === null || typeof json !== "object") throw new TraeImageError("trae image: 图片已经生成、积分已经扣了，但解析应答里没有 url_map：" + payload.slice(0, 200), "IMAGE_UNAVAILABLE");
+		return signedTraeResourceUrl(json, uri);
+	}
+	/** 下载签名地址上的图片字节。CDN 不需要任何 Trae 头——签名就在 query 里。 */
+	async download(signed, signal, uri) {
+		const fetchImpl = this.options.fetchImpl ?? globalThis.fetch;
+		const requestSignal = signal ?? AbortSignal.timeout(IMAGE_TOOL_TIMEOUT_MS);
+		let response;
+		try {
+			response = await fetchImpl(signed, {
+				method: "GET",
+				headers: { Accept: "image/*" },
+				signal: requestSignal
+			});
+		} catch (error) {
+			throw new TraeImageError("trae image: 图片已经生成、积分已经扣了，但下载字节失败：" + messageOf(error), "IMAGE_UNAVAILABLE");
+		}
+		if (!response.ok) {
+			const key = uri === void 0 || uri === "" ? "" : "\n图片对象 key：" + uri;
+			throw new TraeImageError("trae image: 图片已经生成、积分已经扣了，但下载地址回了 HTTP " + response.status + "。" + key, "IMAGE_UNAVAILABLE");
+		}
+		let buffer;
+		try {
+			buffer = await response.arrayBuffer();
+		} catch (error) {
+			throw new TraeImageError("trae image: 图片已经生成、积分已经扣了，但读取图片字节失败：" + messageOf(error), "IMAGE_UNAVAILABLE");
+		}
+		if (buffer.byteLength === 0) throw new TraeImageError("trae image: 图片已经生成、积分已经扣了，但下载回来是 0 字节。", "IMAGE_UNAVAILABLE");
+		const mimeType = (response.headers.get("content-type") ?? "").split(";")[0]?.trim() ?? "";
+		const sniffed = imageMimeTypeOf(new Uint8Array(buffer));
+		if (sniffed === void 0) throw new TraeImageError("trae image: 图片已经生成、积分已经扣了，但下载回来的不是图片（content-type " + (mimeType === "" ? "缺失" : mimeType) + "，前 4 字节 " + hexPrefix(new Uint8Array(buffer)) + "）。" + (uri === void 0 || uri === "" ? "" : "\n图片对象 key：" + uri), "IMAGE_UNAVAILABLE");
+		return {
+			bytes: new Uint8Array(buffer),
+			mimeType: sniffed
+		};
+	}
+};
+function asRecord(value) {
+	return typeof value === "object" && value !== null ? value : {};
+}
+/**
+* 从字节魔数判断图片类型（JPEG / PNG / GIF / WebP / BMP）。
+*
+* 为什么不信 content-type：签名地址过期或被劫持时，CDN 常拿 200 回一页 HTML。
+* 那样写下去的文件扩展名是 .jpg 却打不开，用户只看到碎图标，而积分已经扣了。
+* 认不出就返回 undefined，由调用方如实报 IMAGE_UNAVAILABLE。
+*/
+function imageMimeTypeOf(bytes) {
+	const at = (index) => bytes[index] ?? -1;
+	if (at(0) === 255 && at(1) === 216 && at(2) === 255) return "image/jpeg";
+	if (at(0) === 137 && at(1) === 80 && at(2) === 78 && at(3) === 71) return "image/png";
+	if (at(0) === 71 && at(1) === 73 && at(2) === 70) return "image/gif";
+	if (at(0) === 82 && at(1) === 73 && at(2) === 70 && at(3) === 70 && at(8) === 87 && at(9) === 69 && at(10) === 66 && at(11) === 80) return "image/webp";
+	if (at(0) === 66 && at(1) === 77) return "image/bmp";
+}
+/** 前若干字节的十六进制，只用于排障文案。 */
+function hexPrefix(bytes) {
+	return [...bytes.slice(0, 4)].map((value) => value.toString(16).padStart(2, "0")).join("");
+}
+function asNonEmptyString(value) {
+	return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
+}
+/**
+* 这些失败码都发生在「生图请求已经发出去」之后或尝试发出它——上游可能已经
+* 扣了积分或排了队，连续重试只会把它们再花一遍，所以进冷却。
+* INVALID_ARGS / NOT_LOGGED_IN 一分钱没花，不冷却（判据同 workbuddy）。
+*/
+const BILLABLE_FAILURE_CODES = /* @__PURE__ */ new Set([
+	"AUTH",
+	"RATE_LIMIT",
+	"NO_ROUTE",
+	"UPSTREAM",
+	"EMPTY_RESULT",
+	"IMAGE_UNAVAILABLE"
+]);
+function isBillableFailure(error) {
+	if (error instanceof TraeImageError) return BILLABLE_FAILURE_CODES.has(error.code);
+	return true;
+}
+/** 造出工具定义。每次 apply() 只造一个实例，冷却状态挂在闭包里。 */
+function createTraeDrawImageTool(deps) {
+	let cooldownUntil = 0;
+	return {
+		name: TRAE_IMAGE_TOOL_NAME,
+		description: "用当前登录的 Trae 账号文生图（TraeWork/SOLO 同款服务，模型 seedream_5）。只在用户明确要一张图时调用：每张真实扣该账号积分，实测 CN 个人版 1920x1920 一张约 8.8 积分（尺寸越大越贵），而上游不回传扣费数字，以 Trae 额度面板为准。不是常开能力：只有插件设置里为该区打开「允许模型自主生图」(drawImageEnabled) 时本工具才存在，没打开就没得调——不要用报错去试探它开没开。取图口径：生成成功后本工具会把图片字节取回来、写进会话工作目录的 trae-images/ 下，结果里给相对路径 path，渲染层已经据此把图显示给用户了——不需要你再写 markdown。取图走 get_resource_url 解析签名地址（只是要地址，不会重新生成、不额外计费）。不要为了\"取图\"或\"换张\"重跑同一条 prompt（那会再扣一张）。失败码 IMAGE_UNAVAILABLE 表示图已生成、积分已扣、但字节没落地：同样不要重跑。失败后有 30 秒冷却，冷却内重试不会打到上游。尺寸：默认 1920x1920，也可给 宽x高（总像素需在 3686400~16777216 之间，如 2048x2048）或预设 2k/3k/4k；过小（如 1024x1024）会被上游直接拒绝。（改图与文生视频暂未开放：改图需要先走 TOS 上传预签名，视频要轮询素材结果。）",
+		parameters: {
+			type: "object",
+			properties: {
+				prompt: {
+					type: "string",
+					description: "画面描述（中文或英文都可以）。写清楚主体、风格、构图、光线。"
+				},
+				size: {
+					type: "string",
+					description: "图片尺寸：默认 1920x1920；也可给 宽x高（总像素 3686400~16777216，如 2048x2048）或预设 2k/3k/4k。过小（如 1024x1024）会被上游拒绝。"
+				}
+			},
+			required: ["prompt"],
+			additionalProperties: false
+		},
+		output: {
+			schema: {
+				type: "object",
+				properties: {
+					url: {
+						type: "string",
+						description: "Trae 图片对象 key（tos uri），留作记录与排障，不是可直接打开的 URL。"
+					},
+					path: {
+						type: "string",
+						description: "图片文件相对会话工作目录的路径（如 trae-images/trae-20261026-041500-ab12cd.jpg）；渲染层已据此显示图片。"
+					},
+					model: {
+						type: "string",
+						description: "实际使用的生图模型 id。"
+					},
+					prompt: {
+						type: "string",
+						description: "实际提交的画面描述。"
+					},
+					size: {
+						type: "string",
+						description: "实际提交的尺寸。"
+					},
+					hint: {
+						type: "string",
+						description: "给模型的后续提示（图片位置、扣费口径）。"
+					},
+					credit: {
+						type: "number",
+						description: "上游若回传扣费数字，这里给出积分数。"
+					}
+				},
+				required: [
+					"url",
+					"path",
+					"model",
+					"prompt",
+					"size",
+					"hint"
+				],
+				additionalProperties: false
+			},
+			render(_args, value) {
+				const record = asRecord(value);
+				const url = asNonEmptyString(record["url"]) ?? "";
+				const path = asNonEmptyString(record["path"]) ?? "";
+				const model = asNonEmptyString(record["model"]) ?? "unknown";
+				const size = asNonEmptyString(record["size"]) ?? "";
+				const credit = typeof record["credit"] === "number" ? record["credit"] : void 0;
+				const hint = asNonEmptyString(record["hint"]) ?? "";
+				const lines = path === "" ? ["图片已生成，但字节没取回来（只有对象 key）：`" + url + "`"] : ["![Trae 文生图](" + path + ")"];
+				lines.push("", "文生图 · 模型：" + model + (size === "" ? "" : " · 尺寸：" + size) + (credit === void 0 ? "" : " · 消耗 " + credit + " 积分"));
+				if (hint !== "") lines.push("", hint);
+				return [{
+					type: "text",
+					text: lines.join("\n")
+				}];
+			}
+		},
+		timeoutMs: IMAGE_TOOL_TIMEOUT_MS,
+		async execute(args, exec) {
+			const record = asRecord(args);
+			const prompt = asNonEmptyString(record["prompt"]);
+			if (prompt === void 0) throw new TraeImageError("trae_draw_image: 参数 prompt 必填，且必须是非空字符串。", "INVALID_ARGS");
+			const size = asNonEmptyString(record["size"]) ?? "1920x1920";
+			const now = Date.now();
+			if (now < cooldownUntil) throw new TraeImageError("trae image: 上一次生图刚失败过，请 " + Math.ceil((cooldownUntil - now) / 1e3) + " 秒后再试（失败冷却是为了避免连续重试白白烧积分）。", "COOLDOWN");
+			const account = await deps.resolveAccount();
+			if (account === void 0) throw new TraeImageError("trae image: 没有可用的 Trae 账号——要么相关区都没登录，要么已登录的那个区没有打开「允许模型自主生图」（drawImageEnabled）。请先登录 Trae 并在插件设置里打开那个开关。", "NOT_LOGGED_IN");
+			const signal = exec.signal === void 0 ? AbortSignal.timeout(IMAGE_TOOL_TIMEOUT_MS) : AbortSignal.any([exec.signal, AbortSignal.timeout(IMAGE_TOOL_TIMEOUT_MS)]);
+			try {
+				const outcome = await deps.generate(account, {
+					prompt,
+					size
+				}, signal);
+				const saved = await saveTraeImage(await deps.directoryOf?.(exec) ?? sessionCwdOf(exec) ?? process.cwd(), outcome);
+				const value = {
+					url: outcome.url,
+					path: saved.relativePath,
+					model: TRAE_IMAGE_MODEL,
+					prompt,
+					size,
+					hint: "这张图来自 Trae 文生图（模型 seedream_5），按张计入该账号积分（实测 1920x1920 约 8.8，上游不回传数字，以 Trae 额度面板为准）。图片已保存到会话目录下的 " + saved.relativePath + "（绝对路径 " + saved.absolutePath + "），渲染层已经把它显示给用户了，不需要你再写 markdown。不要为了取图或换张重跑同一条 prompt——那会再扣一张。"
+				};
+				if (outcome.credit !== void 0) value.credit = outcome.credit;
+				return value;
+			} catch (error) {
+				if (isBillableFailure(error)) cooldownUntil = Date.now() + FAILURE_COOLDOWN_MS;
+				throw error;
+			}
+		}
+	};
+}
+/** 从 exec 里读会话工作目录（宿主没给就返回 undefined）。 */
+function sessionCwdOf(exec) {
+	const session = exec.agent?.session;
+	return nonEmptyPath(session?.workingDirectory) ?? nonEmptyPath(session?.header?.cwd) ?? nonEmptyPath(session?.cwd) ?? nonEmptyPath(exec.cwd);
+}
+/** 只在真拿到非空字符串时返回它（空串/空白/null 一律当「不知道」）。 */
+function nonEmptyPath(value) {
+	if (typeof value !== "string") return void 0;
+	return value.trim() === "" ? void 0 : value;
+}
+/** mime → 文件后缀（上游目前只回 image/jpeg）。 */
+function imageExtensionFor(mimeType) {
+	const type = mimeType.toLowerCase();
+	if (type.includes("png")) return "png";
+	if (type.includes("webp")) return "webp";
+	if (type.includes("gif")) return "gif";
+	return "jpg";
+}
+/** 文件名：本地时间的可排序时间戳 + 随机后缀，同一秒两张图也不会互相覆盖。 */
+function imageFileName(mimeType, now) {
+	const date = new Date(now);
+	const pad = (value) => String(value).padStart(2, "0");
+	const stamp = String(date.getFullYear()) + pad(date.getMonth() + 1) + pad(date.getDate()) + "-" + pad(date.getHours()) + pad(date.getMinutes()) + pad(date.getSeconds());
+	const rand = Math.random().toString(16).slice(2, 8);
+	return "trae-" + stamp + "-" + rand + "." + imageExtensionFor(mimeType);
+}
+/**
+* 把图片字节写成 <cwd>/trae-images/<name>，返回绝对路径与相对路径。
+* 相对路径给 render 用：DSH 的聊天按 session cwd 解析 markdown 图片地址，
+* 再过 api/file 鉴权路由取字节，所以相对路径就能显示。
+*/
+async function saveTraeImage(cwd, outcome) {
+	const name = imageFileName(outcome.mimeType, Date.now());
+	const directory = join(cwd, TRAE_IMAGE_DIR);
+	try {
+		await mkdir(directory, { recursive: true });
+		const absolutePath = join(directory, name);
+		await writeFile(absolutePath, outcome.bytes);
+		return {
+			absolutePath,
+			relativePath: "trae-images/" + name
+		};
+	} catch (error) {
+		throw new TraeImageError("trae image: 图片已经生成、积分已经扣了，但写入本地文件失败（目录 " + directory + "）：" + messageOf(error) + "\n图片对象 key：" + outcome.url, "IMAGE_UNAVAILABLE");
+	}
+}
+/**
+* 把工具注册进宿主。返回 disposer；调用方负责在插件卸载时调用它。
+* 注册失败只记警告——生图工具缺失不该让整个插件起不来（同 workbuddy）。
+*/
+function registerTraeDrawImageTool(tools, deps) {
+	try {
+		return tools.register(createTraeDrawImageTool(deps));
+	} catch (error) {
+		deps.logger.warn("dsh-connect-trae: 注册 trae_draw_image 失败: " + messageOf(error));
+		return;
+	}
+}
+//#endregion
 //#region src/index.ts
 const name = "dsh-connect-trae";
 const inject = ["llm"];
@@ -9978,6 +10595,7 @@ const regionStateConfig = z.object({
 	lastCatalog: z.array(modelConfig).default([]),
 	enabledModelIds: z.array(z.string()).default([]),
 	imageModelIds: z.array(z.string()).default([]),
+	drawImageEnabled: z.boolean().default(false).description("Allow the model to generate images with trae_draw_image on this panel (consumes credits; default off)"),
 	contextBudgets: z.dict(z.number().step(1).min(1)).default({}),
 	creditPosition: z.union([z.const("composer"), z.const("stats")]).default("composer").description("积分读数显示位置：\"composer\" = 输入框工具栏（默认），\"stats\" = 输入框下方（与「轮次 / 步数 / token」统计同一行）。装了别的插件后读数不显示时改成 stats。"),
 	pool: z.object({
@@ -11120,8 +11738,68 @@ function apply(ctx, config) {
 		const settings = settingsCtx.settings;
 		ctx.effect(() => settings.configure({ auto: true }, ctx.fiber));
 	});
+	const drawImageClient = new TraeImageClient({ logger: ctx.logger });
+	let drawImageTools;
+	let disposeDrawImageTool;
+	const syncTraeDrawImageTool = (value) => {
+		if (drawImagePanelsOf(value).length === 0) {
+			disposeDrawImageTool?.();
+			disposeDrawImageTool = void 0;
+			return;
+		}
+		if (disposeDrawImageTool !== void 0 || drawImageTools === void 0) return;
+		disposeDrawImageTool = registerTraeDrawImageTool(drawImageTools, {
+			resolveAccount: async () => {
+				for (const panel of drawImagePanelsOf(current())) {
+					const stack = stacks[panel];
+					try {
+						return {
+							credential: await stack.store.resolve(),
+							identity: await stack.identity(),
+							baseUrl: REGION_GATEWAYS[stack.region].chat
+						};
+					} catch {
+						continue;
+					}
+				}
+			},
+			generate: (account, request, signal) => drawImageClient.generate(account, request, signal),
+			directoryOf: (exec) => ensureSessionDirectory === void 0 ? void 0 : ensureSessionDirectory(exec),
+			logger: ctx.logger
+		});
+	};
+	let ensureSessionDirectory;
+	ctx.inject(["workingDirectory"], (directoryCtx) => {
+		const service = directoryCtx.workingDirectory;
+		if (service === void 0 || typeof service.ensure !== "function") return;
+		const ensure = service.ensure.bind(service);
+		ensureSessionDirectory = async (exec) => {
+			const agent = exec.agent;
+			if (agent === void 0) return void 0;
+			try {
+				const directory = await ensure(agent, exec.signal);
+				return typeof directory === "string" && directory.trim() !== "" ? directory : void 0;
+			} catch {
+				return;
+			}
+		};
+		directoryCtx.effect(() => () => {
+			ensureSessionDirectory = void 0;
+		});
+	});
+	ctx.inject(["tools"], (toolsCtx) => {
+		drawImageTools = toolsCtx.tools;
+		if (drawImageTools === void 0) return;
+		syncTraeDrawImageTool(current());
+		toolsCtx.effect(() => () => {
+			disposeDrawImageTool?.();
+			disposeDrawImageTool = void 0;
+			drawImageTools = void 0;
+		});
+	});
 	ctx.on("loader/volatile-update", () => {
 		applySelection(current());
+		syncTraeDrawImageTool(current());
 	});
 	let stopped = false;
 	ctx.effect(() => () => {

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-trae",
   "displayName": "DSH Connect Trae",
   "description": "把本机登录的 Trae 模型接入 DeepSeek Harness：国内版与国际版双供应商并行，提供用量/积分概览与每日签到领取。",
-  "version": "4.5.2",
+  "version": "4.6.1",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",