dsh-connect-workbuddy 4.14.1 → 5.0.0

package/lib/index.js

@@ -1,12 +1,14 @@
-import { $ as withEffectiveOff, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as defaultOffModelIds, K as systemOpeningsOfBody, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, Q as recordRefusal, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as offDefaultFor, Y as lastRefusalFor, Z as offRefused, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as deriveAtRestKey, b as WorkBuddyEncryptedCredentialError, bt as writeFileAtomic, c as WORKBUDDY_CONNECT_VERSION, ct as findWorkbuddyAppExecutable, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, dt as isWorkbuddyBundle, et as NATIVE_MODALITY_BY_MODEL_ID, f as WorkBuddyCatalog, ft as macosBundleExecutable, g as ENCRYPTED_CREDENTIAL_CODE, gt as workbuddyAppExecutableCandidates, h as fallbackModelsFor, ht as readAtRestKey, i as processStartTimeMs, it as clearAtRestKeyCache, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, m as deriveCatalog, mt as openEncryptedField, n as clearHostHeartbeat, nt as nativeModalityOf, o as workbuddyHostHeartbeatPath, ot as deriveAtRestKeyId, p as applyContextBudgets, pt as macosNestedAppBundles, q as REFUSES_OFF_MODEL_IDS, r as isHeartbeatProcessAlive, rt as WORKBUDDY_APP_EXECUTABLE_ENV, s as writeHostHeartbeat, st as fetchAtRestKeyPayload, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as imageDefaultFor, u as FALLBACK_WORKBUDDY_MODELS, ut as isEncryptedFieldWrapper, v as WORKBUDDY_AUTH_FILE_ENV, vt as resolveDshHome, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, yt as withFileLock, z as knownRegionOf } from "./host-heartbeat-D1WnqQY2.js";
+import { $ as REFUSES_OFF_MODEL_IDS, A as workbuddyAccountId, At as withFileLock, B as isCredentialRejectedError, C as defaultDesktopAuthDirs, Ct as macosBundleExecutable, D as isVaultAccountId, Dt as workbuddyAppExecutableCandidates, E as isEncryptedCredentialError, Et as readAtRestKey, F as WorkBuddyUpstreamClient, G as parseCreditMultiplier, H as knownRegionOf, I as classifyUpstreamError, J as perturbChannelFingerprints, K as parseReasoning, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, Q as busyDisplaySuffix, R as forceNeutralHead, S as defaultDesktopAuthCandidates, St as isWorkbuddyBundle, T as hasEncryptedCredentialFields, Tt as openEncryptedField, U as modelIdOfBody, V as isFirstMessageGateBody, W as openingEvidenceOfBody, X as regionOf, Y as prepareChatBody, Z as attachBusyLevels, _ as WORKBUDDY_AUTH_FILENAME, _t as deriveAtRestKeyId, a as readHostHeartbeat, at as withEffectiveOff, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as pickImageModel, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, dt as NATIVE_MODALITY_BY_MODEL_ID, et as defaultOffModelIds, f as WorkBuddyCatalog, ft as imageDefaultFor, g as ENCRYPTED_CREDENTIAL_CODE, gt as deriveAtRestKey, h as fallbackModelsFor, ht as clearAtRestKeyCache, i as processStartTimeMs, it as recordRefusal, j as workbuddyOwnAuthPath, jt as writeFileAtomic, k as parseWorkBuddyAuth, kt as resolveDshHome, l as piAiRuntimeInfo, lt as parseQueueAnswer, m as deriveCatalog, mt as WORKBUDDY_APP_EXECUTABLE_ENV, n as clearHostHeartbeat, nt as offDefaultFor, o as workbuddyHostHeartbeatPath, ot as DEFAULT_IMAGE_SIZE, p as applyContextBudgets, pt as nativeModalityOf, q as parseUpstreamModel, r as isHeartbeatProcessAlive, rt as offRefused, s as writeHostHeartbeat, st as WorkBuddyImageError, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as lastRefusalFor, u as FALLBACK_WORKBUDDY_MODELS, ut as queueNoticeText, v as WORKBUDDY_AUTH_FILE_ENV, vt as fetchAtRestKeyPayload, w as defaultDesktopAuthPath, wt as macosNestedAppBundles, x as authFileName, xt as isEncryptedFieldWrapper, y as WorkBuddyCredentialStore, yt as findWorkbuddyAppExecutable, z as isConversationIdGateBody } from "./host-heartbeat-D313ENPV.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { createAssistantMessageEventStream, createProvider, isContextOverflow } from "@earendil-works/pi-ai";
 import { openAICompletionsApi } from "@earendil-works/pi-ai/api/openai-completions.lazy";
 import { ReasoningEffortId, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
+import { pathToFileURL } from "node:url";
 import { createServer } from "node:http";
 import { Readable } from "node:stream";
 //#region src/credential-recovery.ts
@@ -296,7 +298,7 @@ function workBuddyModelInput(info) {
 * `x0.00`, matching WorkBuddy's rendering of free models.
 */
 function workBuddyDisplayName(info) {
-	return info.creditMultiplier === void 0 ? info.name : `${info.name} · x${info.creditMultiplier.toFixed(2)}`;
+	return `${info.creditMultiplier === void 0 ? info.name : `${info.name} · x${info.creditMultiplier.toFixed(2)}`}${busyDisplaySuffix(info.busyLevel)}`;
 }
 /**
 * Map only levels advertised by WorkBuddy; undeclared DSH levels stay unavailable.
@@ -2277,6 +2279,7 @@ const KIND_STATUS = {
 	session_dead: 401,
 	policy_reject: 403,
 	channel_reject: 400,
+	model_queue: 429,
 	not_found: 502,
 	server: 502,
 	client: 400
@@ -2960,6 +2963,43 @@ function clippedUpstreamText(text, limit) {
 	return `${cut.trimEnd()}…`;
 }
 /**
+* The channel-gate reply's evidence sentence: what the gateway actually read.
+*
+* Read from the HOST's body, not from the prepared one, because the prepared
+* body has the plugin's neutral head in front of every opening it recognises —
+* so the first line it could report is the plugin's own placeholder, which is
+* exactly the false lead issue #98's reporters were given. They were told the
+* gateway had refused `You are a helpful assistant.`, a line that returns 200
+* when sent alone.
+*
+* Each entry is labelled with its ROLE (`system` / `assistant`) because both are
+* scanned and the difference is what tells the reader where to look: an
+* `assistant` entry is a history message, i.e. the session is poisoned and every
+* later turn will fail the same way until that line is changed.
+*
+* Each entry also says whether the plugin's own neutralisation already covers
+* it. An entry marked "not in the plugin's list" is the actionable one: that
+* opening goes on the wire verbatim, so either the host wrote it or the
+* gateway's list grew.
+*
+* Capped at {@link CHANNEL_EVIDENCE_LIMIT} entries: a session can carry dozens
+* of system/assistant messages, and a wall of them would bury the one that
+* matters. The remainder is counted instead of listed.
+*/
+function channelEvidenceText(bodyJson) {
+	const entries = openingEvidenceOfBody(bodyJson);
+	if (entries.length === 0) return "（请求里没有可读的 system 或 assistant 消息开头。）";
+	const shown = entries.slice(0, CHANNEL_EVIDENCE_LIMIT);
+	const rendered = shown.map((entry) => {
+		const label = entry.neutralized ? "（插件已加中性头）" : "（不在插件已知名单里，网关可能新增了词条）";
+		return `「${entry.role}：${entry.opening}」${label}`;
+	}).join("、");
+	const hidden = entries.length - shown.length;
+	return `请求里被网关扫描的消息开头：${rendered}${hidden > 0 ? `……另有 ${hidden} 条未列出。` : "。"}`;
+}
+/** How many message openings the channel-gate reply lists. */
+const CHANNEL_EVIDENCE_LIMIT = 4;
+/**
 * The line prepended to an answer that came from a failover account.
 *
 * Block-quoted and bracketed so it reads as machinery rather than as the model's
@@ -3256,7 +3296,7 @@ function createWorkBuddyShim(options) {
 	* which another account may well survive.
 	*/
 	function isFailoverWorthy(kind) {
-		return kind !== "client" && kind !== "model_busy" && kind !== "channel_reject";
+		return kind !== "client" && kind !== "model_busy" && kind !== "channel_reject" && kind !== "model_queue";
 	}
 	async function chatCompletions(req, res) {
 		if (!isJsonContentType(req)) {
@@ -3284,6 +3324,56 @@ function createWorkBuddyShim(options) {
 		const controller = new AbortController();
 		res.on("close", () => controller.abort());
 		let result = await client.chatStream(credential, prepared, controller.signal);
+		/**
+		* The retry ladder that does not depend on knowing the fingerprint
+		* (issue #98, both halves).
+		*
+		* The gateway refuses the request for data the plugin cannot see: a list of
+		* refused `system`/`assistant` OPENINGS (the plugin holds a measured
+		* SNAPSHOT, `UNAPPROVED_CHANNEL_OPENINGS`) and, since 2026-10-21, at least
+		* one long substring INSIDE the prompt. Every account and every region
+		* sends the same bytes, so without a rescue the only outcome is a dead end
+		* the reader cannot get out of.
+		*
+		* Two rungs, both on the SAME credential (the gate reads the request, not
+		* the account, which is why `channel_reject` is not failover-worthy):
+		*
+		*   1. `forceNeutralHead` — move every scanned opening behind the neutral
+		*      head. Measured: whatever the banned opening is, moving it off the
+		*      start of the content answers 200.
+		*   2. `perturbChannelFingerprints` — insert zero-width spaces at the
+		*      sentence boundaries of the scanned messages, which breaks an
+		*      exact-substring fingerprint without changing a word the model reads.
+		*      This is the rung that rescues the inside-the-prompt fingerprints,
+		*      where rung 1 is a no-op.
+		*
+		* Both return `undefined` when they would change nothing; that is the
+		* signal not to spend a request on a body that would be refused identically.
+		*
+		* Nothing has been written to the client at this point (`!ok` means the
+		* upstream answered non-2xx before any stream started), so a retry cannot
+		* splice two responses together. The first attempt's failure is NOT booked
+		* as an account failure: it was the request that was refused, not the
+		* credential.
+		*/
+		let retriedWithForcedHead = false;
+		let retriedWithPerturbation = false;
+		if (!result.ok && result.kind === "channel_reject" && !controller.signal.aborted) {
+			const forced = forceNeutralHead(prepared);
+			if (forced !== void 0) {
+				logger?.warn("dsh-connect-workbuddy: the channel gate refused the body; retrying once with the neutral head forced in front of every opening");
+				result = await client.chatStream(credential, forced, controller.signal);
+				retriedWithForcedHead = true;
+			}
+			if (!result.ok && result.kind === "channel_reject" && !controller.signal.aborted) {
+				const rescued = perturbChannelFingerprints(forced ?? prepared);
+				if (rescued !== void 0) {
+					logger?.warn("dsh-connect-workbuddy: the channel gate refused the body again; retrying once with an invisible perturbation of the scanned text");
+					result = await client.chatStream(credential, rescued, controller.signal);
+					retriedWithPerturbation = true;
+				}
+			}
+		}
 		const triedAccountIds = [];
 		/**
 		* The account the request STARTED on, and the reason it was abandoned.
@@ -3364,6 +3454,11 @@ function createWorkBuddyShim(options) {
 			const why = shortfall === void 0 ? "" : `：${shortfall}`;
 			const refusedReport = refusedTierReport(result, requestModelId);
 			if (refusedReport !== void 0) reportRefusedTier(refusedReport);
+			const queue = result.kind === "model_queue" ? parseQueueAnswer(result.message) : void 0;
+			if (queue !== void 0) {
+				writeOpenAIError(res, 429, "model_queue", `${queueNoticeText(queue)}（上游 code ${queue.code}）${note}`);
+				return;
+			}
 			if (result.kind === "policy_reject") {
 				const detail = result.detail;
 				const lead = detail?.displayMsg ?? clippedUpstreamText(result.message, 200);
@@ -3390,9 +3485,12 @@ function createWorkBuddyShim(options) {
 				if (detail?.upstreamCode !== void 0) meta.push(`code ${detail.upstreamCode}`);
 				if (detail?.requestId !== void 0) meta.push(`requestId ${detail.requestId}`);
 				const stamp = meta.length === 0 ? "" : `（${meta.join("，")}）`;
-				const openings = systemOpeningsOfBody(prepared);
-				const evidence = openings.length === 0 ? "" : `命中的 system 提示开头：${openings.map((opening) => `「${opening}」`).join("、")}。`;
-				const message = `workbuddy 上游失败：${failoverReasonText(result)}（http ${result.status}）${note}${stamp}。${evidence}该请求被 WorkBuddy 网关的渠道校验拦截，上游把它描述成「不是官方客户端发出的」，但那是误导性文案：网关匹配的是 system 提示的开头，与账号、积分、额度、网络都无关，换账号或换区域也不会改变结果。若这段开头来自宿主或其他插件，请修改该提示；插件已对已知的第三方 agent 指纹做归一化，新的指纹可反馈到 issue 里`;
+				const evidence = channelEvidenceText(raw);
+				const retries = [];
+				if (retriedWithForcedHead) retries.push("强制中性头");
+				if (retriedWithPerturbation) retries.push("一次不可见扰动");
+				const retryNote = retries.length === 0 ? "" : `，并已用${retries.join("与")}重试过`;
+				const message = `workbuddy 上游失败：${failoverReasonText(result)}（http ${result.status}）${note}${stamp}。${evidence}该请求被 WorkBuddy 网关的渠道校验拦截，上游把它描述成「不是官方客户端发出的」，但那是误导性文案：网关匹配的是每一条 system 与 assistant 消息的开头，与账号、积分、额度、网络都无关，换账号或换区域也不会改变结果。插件已对已知的第三方 agent 指纹做归一化` + retryNote + "；若上面标着「不在插件已知名单里」的开头来自宿主或其他插件，请修改该提示；新的指纹可反馈到 issue 里";
 				writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, message, hostErrorCode(result.kind));
 				return;
 			}
@@ -3401,10 +3499,11 @@ function createWorkBuddyShim(options) {
 			if (detail?.upstreamCode !== void 0) meta.push(`code ${detail.upstreamCode}`);
 			if (detail?.requestId !== void 0) meta.push(`requestId ${detail.requestId}`);
 			const stamp = meta.length === 0 ? "" : `（${meta.join("，")}）`;
+			const siblingGate = isConversationIdGateBody(result.message) ? "该请求被上游以「conversation id missing」拒绝：网关要求每个请求带上会话 id 头（X-Conversation-ID、X-Conversation-Request-ID、X-Conversation-Message-ID），插件每次都会带上这三个头；仍出现说明这次请求没有走插件的聊天通道，请升级插件或反馈 issue" : isFirstMessageGateBody(result.message) ? "该请求被上游以「first message is not system prompt」拒绝：网关要求首条消息是 system 消息；插件在请求带消息时会保证这一点，所以出现这条说明这次请求本身没有消息，或没有走插件的聊天通道，请升级插件或反馈 issue" : void 0;
 			const refusedTier = reasoningTierRefusal(result);
 			const receipt = refusedTier ?? detail?.tips ?? detail?.displayMsg ?? clippedUpstreamText(result.message, 400);
 			const advice = refusedTier !== void 0 ? "这不是账号或网络问题：该模型实测拒绝「off」推理档位，请到模型卡片里取消该行的「可关闭思考」勾选后重试" : result.kind === "client" ? "该请求被上游按参数拒绝：与网络、账号、额度都无关，换账号也不会改变结果，请按上面的提示调整后重试" : shortfall === void 0 ? "" : "建议换一个模型继续，或稍后等待该账号的额度恢复";
-			const body = advice === "" ? receipt : `${receipt.replace(/[。.]$/u, "")}。${advice}`;
+			const body = siblingGate !== void 0 ? siblingGate : advice === "" ? receipt : `${receipt.replace(/[。.]$/u, "")}。${advice}`;
 			writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, `workbuddy 上游失败：${failoverReasonText(result)}（http ${result.status}）${note}${why}${stamp}。${body}`, hostErrorCode(result.kind));
 			return;
 		}
@@ -3465,6 +3564,237 @@ function createWorkBuddyShim(options) {
 	};
 }
 //#endregion
+//#region src/image-tool.ts
+/**
+* `workbuddy_draw_image`：把 WorkBuddy 国内区的文生图能力暴露成一个 DSH agent 工具。
+*
+* 为什么手写 ToolDefinition 而不 import `@deepseek-ai/dsh-tools` 的 `defineTool`：
+* 宿主 `Tools.register` 只校验两件事——`output.render` 是函数、`output.schema` 是
+* 受支持的 JSON Schema；`schemaOf()` 把 `parameters` **原样**投影给模型。也就是说
+* raw JSON Schema 完全够用，而 `defineTool` 额外提供的只有「按 spec 编译 schema +
+* 代校验参数」这一层包装。手写换来的是：零新 peer 依赖、不需要动态 import 兜底、
+* 不会碰到 tests/host-peers.spec.ts 对 `lib/bin.js` 可达图的断言（那里禁止除
+* `node:` 外的任何裸说明符）。
+*
+* 代价是参数校验要自己做——见 {@link createImageTool} 的 execute。
+*
+* @module dsh-connect-workbuddy/image-tool
+*/
+/** 工具名。宿主禁止 `run_code`，这个名字与其它 connect 插件的命名习惯一致。 */
+const WORKBUDDY_IMAGE_TOOL_NAME = "workbuddy_draw_image";
+/** 工具单次执行的上限。实测一张图 17–39 秒，留足余量。 */
+const IMAGE_TOOL_TIMEOUT_MS = 18e4;
+/** 媒体模型目录的缓存时长：目录变化很慢，不必每张图都重新读一遍。 */
+const MEDIA_MODEL_TTL_MS = 3e5;
+/** 失败后的冷却：生图按张扣积分，连续重试会在几秒内烧掉几十积分。 */
+const FAILURE_COOLDOWN_MS = 3e4;
+function asRecord(value) {
+	return typeof value === "object" && value !== null ? value : {};
+}
+function asNonEmptyString(value) {
+	return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
+}
+/**
+* 这些失败说明请求真的打到了上游、可能已经扣了积分，才值得进冷却。
+* 参数写错 / 未登录 / 目录里没有模型都还没花钱。
+*/
+/**
+* 这些失败码都发生在「请求已经发出去」之后——上游可能已经扣了积分或排了队，
+* 连续重试只会把它们再花一遍，所以进冷却。
+*/
+const BILLABLE_FAILURE_CODES = /* @__PURE__ */ new Set([
+	"AUTH",
+	"RATE_LIMIT",
+	"NO_ROUTE",
+	"UPSTREAM",
+	"EMPTY_RESULT"
+]);
+/**
+* 是否该进冷却——由「这一次到底有没有把生图请求发出去」决定，而不是由异常
+* 的类型反推。
+*
+* 早先的写法是「不是 WorkBuddyImageError 就算花过钱」，方向正好错了两头：
+* 读目录（`fetchMediaModels` 的那次只读 GET）失败抛的是 upstream.ts 的
+* `envelopeError`/网络错误，一分钱没花却把工具冷却 30 秒；而参数写错这类真正
+* 免费的失败又因为带着 `INVALID_ARGS` 才被放行——判据和事实不在一根轴上。
+*
+* 现在由调用点显式置位：请求发出去了才置 `sent`，冷却只看它。
+*/
+function isBillableFailure(error, sent) {
+	if (!sent) return false;
+	if (error instanceof WorkBuddyImageError) return BILLABLE_FAILURE_CODES.has(error.code);
+	return true;
+}
+/** 把 b64 图片落成一个临时文件，返回绝对路径。 */
+async function writeTempImage(b64, model) {
+	const dir = join(tmpdir(), "workbuddy-image-gen");
+	await mkdir(dir, { recursive: true });
+	const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+	const safeModel = model.replace(/[^A-Za-z0-9._-]+/g, "_");
+	const path = join(dir, `${safeModel}-${stamp}.png`);
+	await writeFile(path, Buffer.from(b64, "base64"));
+	return path;
+}
+/**
+* 造出工具定义。
+*
+* 每次 `apply()` 只造一个实例，所以冷却状态与目录缓存都挂在闭包里，
+* 生命周期跟着插件走。
+*/
+function createImageTool(deps) {
+	const regionLabel = deps.regionLabel ?? "国内区";
+	let mediaCache;
+	let cooldownUntil = 0;
+	const listModels = async (credential, signal) => {
+		const now = Date.now();
+		if (mediaCache !== void 0 && now - mediaCache.at < MEDIA_MODEL_TTL_MS) return mediaCache.models;
+		const models = await deps.listMediaModels(credential, signal);
+		mediaCache = {
+			at: now,
+			models
+		};
+		return models;
+	};
+	return {
+		name: WORKBUDDY_IMAGE_TOOL_NAME,
+		description: "用当前账号的 WorkBuddy 生图能力画一张图（文生图）。只在国内区账号下可用；国际区没有生图模型。每张图会真实消耗 WorkBuddy 积分（实测约 5.71 积分/张），不要在没必要时调用，也不要为了试错连续调用。返回的是 COS 签名 URL，约 24 小时后失效；需要展示给用户时，用 markdown 图片语法引用该 URL。",
+		parameters: {
+			type: "object",
+			properties: {
+				prompt: {
+					type: "string",
+					description: "画面描述（中文或英文都可以）。写清楚主体、风格、构图、光线。"
+				},
+				size: {
+					type: "string",
+					description: `图片尺寸，形如 1024x1024。默认 ${DEFAULT_IMAGE_SIZE}。`
+				},
+				model: {
+					type: "string",
+					description: "生图模型 id，可选。不填就用产品配置里第一个带 text-to-image 标签的模型（国内区即 hunyuan-image-alpha）。填了但目录里没有会直接报错，不会盲发。"
+				}
+			},
+			required: ["prompt"],
+			additionalProperties: false
+		},
+		output: {
+			schema: {
+				type: "object",
+				properties: {
+					url: {
+						type: "string",
+						description: "图片地址（COS 签名 URL，或本地 file:// 地址）。"
+					},
+					model: {
+						type: "string",
+						description: "实际使用的生图模型 id。"
+					},
+					prompt: {
+						type: "string",
+						description: "实际提交的画面描述。"
+					},
+					hint: {
+						type: "string",
+						description: "给模型的后续提示（如何展示、链接时效）。"
+					},
+					credit: {
+						type: "number",
+						description: "本次实际消耗的 WorkBuddy 积分。"
+					},
+					path: {
+						type: "string",
+						description: "上游返回 base64 时，落盘的本地绝对路径。"
+					}
+				},
+				required: [
+					"url",
+					"model",
+					"prompt",
+					"hint"
+				],
+				additionalProperties: false
+			},
+			render(_args, value) {
+				const record = asRecord(value);
+				const url = asNonEmptyString(record["url"]) ?? "";
+				const model = asNonEmptyString(record["model"]) ?? "unknown";
+				const credit = typeof record["credit"] === "number" ? record["credit"] : void 0;
+				const path = asNonEmptyString(record["path"]);
+				const hint = asNonEmptyString(record["hint"]) ?? "";
+				const lines = [
+					`![WorkBuddy 生图](${url})`,
+					"",
+					`模型：\`${model}\`${credit === void 0 ? "" : ` · 消耗 ${credit} 积分`}`
+				];
+				if (path !== void 0) lines.push(`本地文件：${path}`);
+				if (hint !== "") lines.push("", hint);
+				return [{
+					type: "text",
+					text: lines.join("\n")
+				}];
+			}
+		},
+		timeoutMs: IMAGE_TOOL_TIMEOUT_MS,
+		async execute(args, exec) {
+			const record = asRecord(args);
+			const prompt = asNonEmptyString(record["prompt"]);
+			if (prompt === void 0) throw new WorkBuddyImageError(`${WORKBUDDY_IMAGE_TOOL_NAME}: 参数 prompt 必填，且必须是非空字符串。`, "INVALID_ARGS");
+			const size = asNonEmptyString(record["size"]) ?? "1024x1024";
+			const requestedModel = asNonEmptyString(record["model"]);
+			const now = Date.now();
+			if (now < cooldownUntil) {
+				const seconds = Math.ceil((cooldownUntil - now) / 1e3);
+				throw new WorkBuddyImageError(`workbuddy image: 上一次生图刚失败过，请 ${seconds} 秒后再试（失败冷却是为了避免连续重试白白烧积分）。`, "COOLDOWN");
+			}
+			const credential = await deps.resolveCredential();
+			if (credential === void 0) throw new WorkBuddyImageError(`workbuddy image: ${regionLabel}未登录 WorkBuddy。请先在插件设置里登录国内区账号，再调用生图工具。`, "NOT_LOGGED_IN");
+			const signal = exec.signal === void 0 ? AbortSignal.timeout(IMAGE_TOOL_TIMEOUT_MS) : AbortSignal.any([exec.signal, AbortSignal.timeout(IMAGE_TOOL_TIMEOUT_MS)]);
+			let sent = false;
+			try {
+				const models = await listModels(credential, signal);
+				const model = pickImageModel(models, requestedModel);
+				sent = true;
+				const outcome = await deps.generateImage(credential, {
+					model: model.id,
+					prompt,
+					size
+				}, signal);
+				const value = {
+					model: model.id,
+					prompt,
+					hint: `这张图来自 WorkBuddy（模型 ${model.id}），每张约消耗 5.71 积分。COS 签名 URL 约 24 小时失效；要长期保留请及时下载。` + (outcome.credit === void 0 ? "" : `本次实际扣费 ${outcome.credit} 积分。`)
+				};
+				if (outcome.url !== void 0) value["url"] = outcome.url;
+				else if (outcome.b64 !== void 0) {
+					const path = await writeTempImage(outcome.b64, model.id);
+					value["url"] = pathToFileURL(path).href;
+					value["path"] = path;
+					value["hint"] = `${value["hint"]} 上游返回的是内联 base64，已落盘到本地。`;
+				} else throw new WorkBuddyImageError("workbuddy image: 上游既没有返回 url 也没有返回 b64_json。", "EMPTY_RESULT");
+				if (outcome.credit !== void 0) value["credit"] = outcome.credit;
+				return value;
+			} catch (error) {
+				if (isBillableFailure(error, sent)) cooldownUntil = Date.now() + FAILURE_COOLDOWN_MS;
+				throw error;
+			}
+		}
+	};
+}
+/**
+* 把工具注册进宿主。返回 disposer；调用方负责在插件卸载时调用它。
+*
+* 注册本身是同步的；`tools` 服务由宿主提供，拿不到就直接返回 undefined
+* 并记一条警告——生图工具缺失不该让整个插件起不来。
+*/
+function registerWorkBuddyImageTool(tools, deps) {
+	try {
+		return tools.register(createImageTool(deps));
+	} catch (error) {
+		deps.logger.warn(`dsh-connect-workbuddy: 注册 ${WORKBUDDY_IMAGE_TOOL_NAME} 失败: ` + (error instanceof Error ? error.message : String(error)));
+		return;
+	}
+}
+//#endregion
 //#region src/probe.ts
 /**
 * How long to bench a MODEL that answered 14003 with no stated time.
@@ -5517,6 +5847,7 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 	const enabled = deps.regionEnabled(region);
 	const showCreditsInMainUi = deps.showCreditsInMainUi?.(region) ?? true;
 	const creditPosition = deps.creditPosition?.(region) ?? "composer";
+	const imageToolEnabled = deps.imageToolEnabled?.(region) ?? false;
 	const authStatus = await store.status();
 	const selectionExplicit = store.hasExplicitSelection();
 	if (authStatus.state !== "signed-out" && accounts.length === 0) return {
@@ -5524,7 +5855,8 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 		accounts: [],
 		selectionExplicit,
 		enabled,
-		showCreditsInMainUi
+		showCreditsInMainUi,
+		imageToolEnabled
 	};
 	let credential;
 	try {
@@ -5540,6 +5872,7 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 			enabled,
 			showCreditsInMainUi,
 			creditPosition,
+			imageToolEnabled,
 			...await store.selectionLost() ? { selectionLost: true } : {},
 			...webAccounts.length === 0 ? await searchedPaths(store) : {}
 		};
@@ -5556,6 +5889,7 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 		enabled,
 		showCreditsInMainUi,
 		creditPosition,
+		imageToolEnabled,
 		accounts: accounts.map(toWebAccount),
 		models: deps.displayModels(region).map((model) => toWebModel(model, deps.contextBudgets(region))).map((model) => model.reasoning === void 0 || lastRefusalFor(model.id) === void 0 ? model : {
 			...model,
@@ -6259,6 +6593,28 @@ const regionStateConfig = z.object({
 	enabledModelIds: z.array(z.string()).default([]),
 	imageModelIds: z.array(z.string()).default([]),
 	/**
+	* Whether the model may call the image-generation tool (opt-IN, default off).
+	*
+	* Per-REGION like the credit switches, and only meaningful on `cn`: the image
+	* catalog has a `text-to-image` model on the CN gateway and none at all on the
+	* international one (measured, see `docs/IMAGE_GEN.md`).
+	*
+	* Every other spending path in this plugin requires a human action: a chat
+	* request is one the user sent, and the per-model "test" button is one the
+	* user clicked. `workbuddy_draw_image` is the first capability where the
+	* MODEL decides to spend — it calls the tool on its own, at about 5.71 credits
+	* an image, and there is no per-call approval seam in the host to ask the user
+	* first (`needsApproval` / `toolApproval` do not exist; verified against the
+	* shipped `app.asar`).
+	*
+	* So it is opt-in, the same way the account pool's credit-based rotation is
+	* opt-in (3.0.0's reasoning): a feature that can move money on its own must be
+	* one the user switched on, not one that arrives with an upgrade. Off also
+	* means the tool is not REGISTERED at all, so the model never sees it and
+	* cannot attempt a call that would be refused.
+	*/
+	imageToolEnabled: z.boolean().default(false).description("Let the model call workbuddy_draw_image on its own (opt-in; each image costs ~5.71 credits and there is no per-call approval). Off by default, and off means the tool is not registered at all."),
+	/**
 	* Per-model override of whether thinking `off` is offered, keyed by model id
 	* (issue #34). An ABSENT key means "use the built-in rule" — the upstream's
 	* `canDisableThinking` declaration minus the ids known to refuse `off` (see
@@ -6575,6 +6931,31 @@ function apply(ctx, config) {
 		const keep = regionStateOf(current(), region).enabledModelIds ?? [];
 		return client.fetchModels(credential, signal, keep);
 	};
+	/**
+	* Stamp each model's LIVE load level onto the runtime roster.
+	*
+	* Deliberately NOT part of {@link discoverModels}: that reader feeds the
+	* settings card's "Refresh from WorkBuddy" draft, which is SAVED into
+	* `lastCatalog` — and a saved load level is a lie the moment the settings page
+	* is closed (`src/busy.ts`). So the level is stamped only on the path that
+	* builds the RUNTIME catalog, and it dies with the process.
+	*
+	* Fail-soft on purpose: a refresh that cannot read the load probe still
+	* delivers the roster. Losing a badge is nothing; losing the model list
+	* because a 5-second probe timed out would be the same defect this plugin
+	* spends most of its comments avoiding.
+	*/
+	const withBusyLevels = async (region, models, signal) => {
+		if (models.length === 0) return models;
+		try {
+			const credential = await stacks[region].store.resolve();
+			const levels = await client.fetchModelBusy(credential, models.map((model) => model.id), signal);
+			return levels.size === 0 ? models : attachBusyLevels(models, levels);
+		} catch (error) {
+			ctx.logger.warn("dsh-connect-workbuddy: model load probe unavailable; refreshing the roster without load levels", error);
+			return models;
+		}
+	};
 	/** Push the current config into every region's store selection and catalog. */
 	const applySelection = (value) => {
 		const authFile = unwrapVolatile(value.authFile);
@@ -6585,6 +6966,7 @@ function apply(ctx, config) {
 		}
 		invalidateCatalog();
 		syncRegionRegistration(value);
+		syncImageTool(value);
 		refreshRegionUsability();
 	};
 	/**
@@ -6646,6 +7028,41 @@ function apply(ctx, config) {
 			declared: false
 		})));
 	};
+	let imageTools;
+	let disposeImageTool;
+	const syncImageTool = (value) => {
+		const wanted = regionEnabled(value, "cn") && regionStateOf(value, "cn").imageToolEnabled === true;
+		if (wanted && disposeImageTool === void 0 && imageTools !== void 0) {
+			disposeImageTool = registerWorkBuddyImageTool(imageTools, {
+				resolveCredential: async () => {
+					if (!regionEnabled(current(), "cn")) return void 0;
+					try {
+						return await stacks.cn.store.resolve();
+					} catch {
+						return;
+					}
+				},
+				listMediaModels: (credential, signal) => client.fetchMediaModels(credential, signal),
+				generateImage: (credential, request, signal) => client.generateImage(credential, request, signal),
+				logger: ctx.logger
+			});
+			return;
+		}
+		if (!wanted && disposeImageTool !== void 0) {
+			disposeImageTool();
+			disposeImageTool = void 0;
+		}
+	};
+	ctx.inject(["tools"], (toolsCtx) => {
+		imageTools = toolsCtx.tools;
+		if (imageTools === void 0) return;
+		syncImageTool(current());
+		toolsCtx.effect(() => () => {
+			disposeImageTool?.();
+			disposeImageTool = void 0;
+			imageTools = void 0;
+		});
+	});
 	ctx.inject(["webServer"], (webCtx) => registerWorkBuddyStatusRoute(webCtx, {
 		store: (region) => stacks[region].store,
 		client,
@@ -6684,6 +7101,12 @@ function apply(ctx, config) {
 		*/
 		showCreditsInMainUi: (region) => regionStateOf(current(), region).showCreditsInMainUi !== false,
 		/**
+		* Whether the model may call the image tool here. Read from the committed
+		* value like the flag above, and deliberately `=== true`: an absent setting
+		* is NOT consent to let the model spend.
+		*/
+		imageToolEnabled: (region) => regionStateOf(current(), region).imageToolEnabled === true,
+		/**
 		* WHERE the readout sits, resolved here rather than read from the browser
 		* settings mirror, for the same measured reason as the flag above: on the
 		* affected 0.1.7 deployments that mirror never picks up this plugin's
@@ -7554,8 +7977,9 @@ function apply(ctx, config) {
 				if (region === void 0) return [];
 				if (!regionEnabled(current(), region)) return [];
 				const discovered = await discoverModels(region, signal);
+				const live = await withBusyLevels(region, discovered, signal);
 				const state = regionStateOf(current(), region);
-				return withImageSelection(deriveCatalog(discovered, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), new Set(state.imageModelIds ?? [])).map((model) => ({
+				return withImageSelection(deriveCatalog(live, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), new Set(state.imageModelIds ?? [])).map((model) => ({
 					id: model.id,
 					name: workBuddyDisplayName(model),
 					contextWindow: model.contextWindow,
@@ -7575,7 +7999,7 @@ function apply(ctx, config) {
 				try {
 					const credential = await stacks[region].store.resolve();
 					if (stopped) return;
-					const models = await client.fetchModels(credential, void 0, regionStateOf(current(), region).enabledModelIds ?? []);
+					const models = await withBusyLevels(region, await client.fetchModels(credential, void 0, regionStateOf(current(), region).enabledModelIds ?? []));
 					if (stopped) return;
 					const state = regionStateOf(current(), region);
 					stacks[region].catalog.set(withEffectiveOff(withImageSelection(deriveCatalog(models, new Set(state.enabledModelIds ?? []), state.contextBudgets ?? {}), new Set(state.imageModelIds ?? [])), new Set(savedOffModelIds(state, models))));

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "WorkBuddy Model Access",
+    "description": "Connects locally signed-in WorkBuddy models, CN and international alike, to DSH, reading each model's credit multiplier from the upstream catalog on every refresh, with per-model image input toggles, account switching backed by an auto-failing-over pool, manual daily check-in, and read-only credit overviews shown as compact pills on the card and in the composer."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "WorkBuddy 模型接入",
+    "description": "将本机登录的 WorkBuddy 模型（国内版与国际版）接入 DSH，每次刷新按上游目录自动读取每个模型的积分倍率，支持逐模型图片输入开关、多账号切换与账号池自动换号，并提供每日签到、卡片与输入框里的胶囊积分读数等只读积分概览。"
+  }
+}

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型（国内版与国际版）接入 DeepSeek Harness：每次刷新按上游目录自动读取每个模型的积分倍率，支持逐模型图片输入开关、多账号切换与账号池自动换号，并提供每日签到、卡片与输入框里的胶囊积分读数等只读积分概览。",
-  "version": "4.14.1",
+  "version": "5.0.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",
@@ -31,6 +31,7 @@
     },
     "./client": "./lib/client.js",
     "./cordis.patch.yml": "./cordis.patch.yml",
+    "./locale/*.json": "./locale/*.json",
     "./package.json": "./package.json"
   },
   "dependencies": {
@@ -39,6 +40,7 @@
   "files": [
     "lib",
     "icons",
+    "locale",
     "docs/assets",
     "screenshots.json",
     "cordis.patch.yml",