dsh-connect-workbuddy 5.9.0 → 5.10.0

package/lib/{host-heartbeat-C1tVU2IN.js → host-heartbeat-_EeM2YDF.js}

@@ -1158,18 +1158,43 @@ function queueNoticeText(report) {
 *   - `gemini-*`  ：什么都不加
 *   - 其它        ：`response_format: 'b64_json'` + 可选 `n` / `quality` / `style` / `background`
 *
-* 国内区产品配置里带 `text-to-image` 标签的只有 `hunyuan-image-alpha`，
-* 带 `image-to-image` 的只有 `hunyuan-image-alpha-edit`，因此实际走的就是
-* hunyuan 分支、响应里是 COS 签名 URL（24h 有效），单张约 5.71 credits。
+* 两个区的目录各有一条媒体模型，互不重叠（2026-10-25 实测）：
+*   - 国内区（61 条模型）：`text-to-image` 只有 `hunyuan-image-alpha`，
+*     `image-to-image` 只有 `hunyuan-image-alpha-edit`。走 hunyuan 分支，
+*     响应是 COS 签名 URL（24h 有效），单张约 5.71 credits。
+*   - 国际区（29 条模型）：`hy-image-3.5` 同时带 `text-to-image` 与
+*     `image-to-image`。走「其它」分支（带 `response_format: 'b64_json'`），
+*     实测单张约 0.03 credits，返回的同样是 ap-singapore 的 COS 签名 URL。
+*
+* 两个数不是一个价目表的两个档位：目录条目只有 id/name/tags，**没有价格**，
+* 价格只在上游结算时以 `data.usage.credit` 返回，所以工具只能回报实扣、
+* 不能预先报价。
 *
 * @module dsh-connect-workbuddy/image-gen
 */
 /** 产品配置里「文生图」模型的标签。 */
 const IMAGE_TAG_TEXT_TO_IMAGE = "text-to-image";
+/** 产品配置里「图生图 / 改图」模型的标签。 */
+const IMAGE_TAG_IMAGE_TO_IMAGE = "image-to-image";
 /** 官方 CLI 的默认尺寸。 */
 const DEFAULT_IMAGE_SIZE = "1024x1024";
 /** 生图路由。 */
 const IMAGE_GENERATIONS_PATH = "/v2/images/generations";
+/** 改图路由：官方 CLI 的 `ImageService.editImage` 打的就是这条（2026-10-25 国际区实测 200）。 */
+const IMAGE_EDITS_PATH = "/v2/images/edits";
+/**
+* 本插件认作「媒体模型」的全部标签。
+*
+* 目录只读一次就返回全部媒体条目，由调用方按 tag 分组：生图工具只认两个 image
+* 标签，卡片清单则把视频条目一并列出来。这样 `fetchMediaModels` 不必为每种能力
+* 各读一遍 `/v3/config`。
+*/
+const MEDIA_TAGS = [
+	IMAGE_TAG_TEXT_TO_IMAGE,
+	IMAGE_TAG_IMAGE_TO_IMAGE,
+	"text-to-video",
+	"image-to-video"
+];
 /** 生图链路的错误。带一个稳定的 `code`，避免调用方去匹配文案。 */
 var WorkBuddyImageError = class extends Error {
 	code;
@@ -1194,10 +1219,14 @@ function stringList(value) {
 /**
 * 从产品配置的 `data.models` 里挑出带指定 tag 的媒体模型。
 *
+* `tag` 可以是一组标签，命中任一即算——目录只读一次就返回全部媒体条目（{@link MEDIA_TAGS}），
+* 调用方再按能力分组过滤，比每种能力各读一遍 `/v3/config` 少一次往返。
+*
 * 去重按 `id`：上游目录里同一个 id 只应出现一次，但目录是外部数据，
 * 重复条目不该让卡片或工具参数里出现两个同名选项。
 */
 function selectMediaModels(rawModels, tag = IMAGE_TAG_TEXT_TO_IMAGE) {
+	const wanted = typeof tag === "string" ? [tag] : tag;
 	if (!Array.isArray(rawModels)) return [];
 	const out = [];
 	const seen = /* @__PURE__ */ new Set();
@@ -1207,7 +1236,7 @@ function selectMediaModels(rawModels, tag = IMAGE_TAG_TEXT_TO_IMAGE) {
 		const id = asString(record["id"]);
 		if (id === void 0 || seen.has(id)) continue;
 		const tags = stringList(record["tags"]);
-		if (!tags.includes(tag)) continue;
+		if (!wanted.some((one) => tags.includes(one))) continue;
 		seen.add(id);
 		out.push({
 			id,
@@ -1217,24 +1246,31 @@ function selectMediaModels(rawModels, tag = IMAGE_TAG_TEXT_TO_IMAGE) {
 	}
 	return out;
 }
+/** tag 的人话名字，只用在错误信息里。 */
+function tagLabel(tag) {
+	if (tag === "image-to-image") return "图生图";
+	if (tag === "text-to-image") return "文生图";
+	return tag;
+}
 /**
-* 选出生图模型：优先用调用方点名的那个，否则用目录里的第一个。
+* 按能力标签选一个图像模型：先在该标签组内找调用方点名的那个，否则取组内第一个。
 *
-* 点名的模型必须在目录里——不在目录里就直接报错，而不是把它发上去让上游
-* 回一个「route config not found」。这样报错信息能指出真正的问题（模型名写错
-* 或该区没有这个模型），而不是一句上游 404。
+* 点名的模型必须在**这一组**里——写错名字或拿改图模型来文生图都直接报错，
+* 而不是把它发上去让上游回一个「route config not found」。这样报错信息能指出
+* 真正的问题（模型名写错，或该区这一组没有模型），那句话里还会列出本组可用项。
 */
-function pickImageModel(models, requested) {
+function pickMediaModel(models, requested, tag = IMAGE_TAG_TEXT_TO_IMAGE) {
+	const group = models.filter((model) => model.tags.includes(tag));
 	if (requested !== void 0 && requested !== "") {
-		const found = models.find((model) => model.id === requested);
+		const found = group.find((model) => model.id === requested);
 		if (found === void 0) {
-			const known = models.map((model) => model.id).join(", ");
-			throw new WorkBuddyImageError(`workbuddy image: 目录里没有生图模型「${requested}」。可用：${known === "" ? "（空）" : known}`, "NO_IMAGE_MODEL");
+			const known = group.map((model) => model.id).join(", ");
+			throw new WorkBuddyImageError(`workbuddy image: 目录里没有${tagLabel(tag)}模型「${requested}」。可用：${known === "" ? "（空）" : known}`, "NO_IMAGE_MODEL");
 		}
 		return found;
 	}
-	const first = models[0];
-	if (first === void 0) throw new WorkBuddyImageError("workbuddy image: 该区账号的产品配置里没有任何带 text-to-image 标签的模型。国内区应有 hunyuan-image-alpha；国际区当前没有生图模型。", "NO_IMAGE_MODEL");
+	const first = group[0];
+	if (first === void 0) throw new WorkBuddyImageError(`workbuddy image: 该区账号的产品配置里没有任何带 ${tag} 标签的模型（${tagLabel(tag)}）。国内区文生图应是 hunyuan-image-alpha、改图是 hunyuan-image-alpha-edit；国际区 hy-image-3.5 同时带这两个标签；一个都没有说明该区目录暂时没有这类模型。`, "NO_IMAGE_MODEL");
 	return first;
 }
 /** 按官方 CLI 的 `buildBaseRequestBody` 分支规则拼请求体。 */
@@ -1255,6 +1291,83 @@ function buildImageBody(request) {
 	return body;
 }
 /**
+* 改图请求体：生图那一套字段 + `image`（data URL 数组）+ 可选 `input_fidelity`。
+*
+* 顺序照抄官方 CLI 的 `editImage`：先 `buildBaseRequestBody`，再补 `image`，
+* 再可选补 `input_fidelity`。`image` 上游只认字符串数组，单个字符串会被拒。
+*/
+function buildEditBody(request) {
+	const body = buildImageBody(request);
+	body["image"] = [...request.image];
+	if (request.inputFidelity !== void 0 && request.inputFidelity !== "") body["input_fidelity"] = request.inputFidelity;
+	return body;
+}
+/** 输入图的大小上限。上游没说，但一张改图输入不该比产物大一个量级，8 MB 足够。 */
+const MAX_INPUT_IMAGE_BYTES = 8388608;
+/** 按扩展名猜输入图的 MIME；不认识就返回 undefined（交给嗅探）。 */
+const IMAGE_MIME_BY_EXTENSION = {
+	".png": "image/png",
+	".jpg": "image/jpeg",
+	".jpeg": "image/jpeg",
+	".gif": "image/gif",
+	".webp": "image/webp",
+	".bmp": "image/bmp",
+	".svg": "image/svg+xml",
+	".ico": "image/x-icon",
+	".tif": "image/tiff",
+	".tiff": "image/tiff"
+};
+function imageMimeForPath(path) {
+	const lower = path.toLowerCase();
+	const dot = lower.lastIndexOf(".");
+	if (dot < 0) return void 0;
+	return IMAGE_MIME_BY_EXTENSION[lower.slice(dot)];
+}
+/**
+* 按魔数嗅探图片 MIME，照抄官方 CLI 的 `detectMimeTypeFromBase64`。
+*
+* 认不出来时兜底 `image/png`（CLI 也是这么兜的）：宁可让上游按 png 试一次，
+* 也不要因为一个我们没见过的头就拒掉用户给的图。
+*/
+function sniffImageMime(bytes) {
+	const at = (index) => bytes[index] ?? -1;
+	if (at(0) === 137 && at(1) === 80 && at(2) === 78 && at(3) === 71) return "image/png";
+	if (at(0) === 255 && at(1) === 216 && at(2) === 255) return "image/jpeg";
+	if (at(0) === 71 && at(1) === 73 && at(2) === 70 && at(3) === 56) return "image/gif";
+	if (at(0) === 82 && at(1) === 73 && at(2) === 70 && at(3) === 70 && at(8) === 87 && at(9) === 69 && at(10) === 66 && at(11) === 80) return "image/webp";
+	if (at(0) === 66 && at(1) === 77) return "image/bmp";
+	return "image/png";
+}
+/** 拼出上游唯一接受的输入形态：`data:<mime>;base64,<base64>`。 */
+function imageDataUrl(mime, base64) {
+	return `data:${mime};base64,${base64}`;
+}
+/** 解析一个 data URL 形式的输入图；不是 `data:image/*;base64,` 就返回 undefined。 */
+function parseImageDataUrl(value) {
+	const match = /^data:([^;,]+);base64,(.+)$/s.exec(value.trim());
+	if (match === null) return void 0;
+	const mime = match[1] ?? "";
+	const base64 = match[2] ?? "";
+	if (!mime.startsWith("image/") || base64 === "") return void 0;
+	return {
+		mime,
+		base64
+	};
+}
+const BARE_BASE64 = /^[A-Za-z0-9+/]+={0,2}$/;
+/**
+* 看起来像「裸 base64」而不是路径吗？
+*
+* 判据照抄 CLI 的 `processImageInput`：不含路径分隔符、足够长、字符集是 base64。
+* 长度门槛是必要的——`a.png` 这种文件名同样不含分隔符，短到不足以是图片数据。
+*/
+function isBareBase64Image(value) {
+	const text = value.trim();
+	if (text.length < 100) return false;
+	if (text.includes("/") || text.includes("\\")) return false;
+	return BARE_BASE64.test(text);
+}
+/**
 * 解析生图响应。
 *
 * 信封是 `{code, msg, request_id, data}`；`code !== 0` 是业务失败（与 HTTP 状态
@@ -1308,7 +1421,7 @@ function describeImageFailure(status, bodyText) {
 	} catch {}
 	if (status === 401 || status === 403) return new WorkBuddyImageError(`workbuddy image: 凭据被上游拒绝（HTTP ${status}），请在插件设置里重新登录 WorkBuddy。${detail === "" ? "" : ` ${detail}`}`, "AUTH");
 	if (status === 429) return new WorkBuddyImageError(`workbuddy image: 触发上游限流（HTTP 429），稍后再试。${detail === "" ? "" : ` ${detail}`}`, "RATE_LIMIT");
-	if (status === 404) return new WorkBuddyImageError(`workbuddy image: 上游没有这条生图路由（HTTP 404）。全球区没有生图模型，请用国内区账号。${detail === "" ? "" : ` ${detail}`}`, "NO_ROUTE");
+	if (status === 404) return new WorkBuddyImageError(`workbuddy image: 上游没有这条生图路由（HTTP 404）——该区网关没有开放生图接口。${detail === "" ? "" : ` ${detail}`}`, "NO_ROUTE");
 	return new WorkBuddyImageError(`workbuddy image: 上游失败（HTTP ${status}）${detail === "" ? "" : `: ${detail}`}`, "UPSTREAM");
 }
 //#endregion
@@ -4368,12 +4481,22 @@ var WorkBuddyUpstreamClient = class {
 		return levels;
 	}
 	/**
-	* 读该账号所属区的产品配置，挑出带 `text-to-image` 标签的媒体模型。
+	* 读该账号所属区的产品配置，返回**全部**媒体模型（图 + 视频，按 tag 区分）。
 	*
 	* 走的是和 {@link fetchModels} 同一条 `/v3/config`（国内区与国际区都答），
 	* 区别只在这里保留 `data.models` 的媒体条目、而不是投影成 CLI 聊天目录。
-	* 国内区实测 62 条模型里只有 `hunyuan-image-alpha` 带 `text-to-image`；
-	* 国际区一条都没有 —— 所以本方法对国际区返回空数组，而不是编一个模型出来。
+	* 两区实测（2026-10-25，同日各跑一次只读探针）：
+	*   - 国内区 61 条模型 / 17 条带 tag：`hunyuan-image-alpha`（`text-to-image`）、
+	*     `hunyuan-image-alpha-edit`（`image-to-image`）、`kling-video-v3` 与
+	*     `minimax-video-h3`（`text-to-video` + `image-to-video`）。
+	*   - 国际区 29 条 / 7 条带 tag：`hy-image-3.5`（`text-to-image` +
+	*     `image-to-image`）、`kling-video-v3`（两种视频 tag）。
+	* 两边目录完全不重叠，所以「国际区一条都没有」是 2026-10-21 的旧观测，
+	* 已经过期 —— 目录真的没标时才返回空数组（而不是编一个模型出来）。
+	*
+	* 返回的是**未分组**的全集：谁要 `text-to-image` 就自己按 tag 过滤
+	* （{@link selectMediaModels} / `pickMediaModel`）。生图工具、改图路径、卡片清单
+	* 因此共用这一次读取，而不是各读一遍目录。
 	*
 	* 这是一次 EXTRA 读取，不是「复用目录那一次」：`fetchModels` 的结果被投影成
 	* 聊天目录就丢掉了媒体标签，所以这里必须再读一遍同一份文档。它是只读 GET、
@@ -4395,7 +4518,7 @@ var WorkBuddyUpstreamClient = class {
 			});
 			const envelope = await readEnvelope(response);
 			if (!response.ok || envelope.code !== 0) throw envelopeError(response.status, envelope);
-			return selectMediaModels((typeof envelope.data === "object" && envelope.data !== null ? envelope.data : {})["models"], IMAGE_TAG_TEXT_TO_IMAGE);
+			return selectMediaModels((typeof envelope.data === "object" && envelope.data !== null ? envelope.data : {})["models"], MEDIA_TAGS);
 		};
 		try {
 			return await readMedia(GLOBAL_CONFIG_PATH);
@@ -4409,7 +4532,9 @@ var WorkBuddyUpstreamClient = class {
 	* 发一次文生图请求。
 	*
 	* 端点、请求体、响应解析全部照抄官方 CLI 的 ImageService（见 `image-gen.ts`
-	* 的模块注释）。实测单张 5.71 credits，产物是 24 小时有效的 COS 签名 URL。
+	* 的模块注释）。产物是 24 小时有效的 COS 签名 URL；实扣积分随区与模型不同
+	* （国内区 `hunyuan-image-alpha` 5.71、国际区 `hy-image-3.5` 0.03），
+	* 只在响应的 `data.usage.credit` 里给出，调用方按实际值回报。
 	*
 	* 失败分两层：HTTP 非 2xx 交给 {@link describeImageFailure} 翻成带 code 的
 	* 错误（401/403 提示重新登录、404 提示该区没有生图路由、429 提示限流）；
@@ -4432,6 +4557,35 @@ var WorkBuddyUpstreamClient = class {
 		}
 		return parseImageResponse(payload);
 	}
+	/**
+	* 发一次改图请求（`image-to-image`）。
+	*
+	* 端点换成官方 CLI `ImageService.editImage` 用的 `/v2/images/edits`，请求体是
+	* 生图那一套 + `image`（**必须是 data URL 字符串数组**）+ 可选 `input_fidelity`。
+	* 2026-10-25 国际区实测：`hy-image-3.5` + 一张 712×962 的截图 → 200、code 0、
+	* 一张 COS 签名 URL、`credit 0.03`。
+	*
+	* `image` 的形态由调用方（工具层）负责规整成 data URL——这一层只发请求、
+	* 不碰文件系统，和 {@link generateImage} 的分工保持一致。
+	*/
+	async editImage(credential, request, signal) {
+		if (request.image.length === 0) throw new WorkBuddyImageError("workbuddy image: 改图请求缺少输入图（image 数组为空）。", "INVALID_ARGS");
+		const response = await fetch(`${chatBase(credential)}${IMAGE_EDITS_PATH}`, {
+			method: "POST",
+			headers: imageHeaders(credential),
+			body: JSON.stringify(buildEditBody(request)),
+			signal: signal ?? AbortSignal.timeout(IMAGE_TIMEOUT_MS)
+		});
+		const text = await response.text();
+		if (!response.ok) throw describeImageFailure(response.status, text);
+		let payload;
+		try {
+			payload = JSON.parse(text);
+		} catch {
+			throw new WorkBuddyImageError(`workbuddy image: 上游返回的不是 JSON（HTTP ${response.status}）: ${text.slice(0, 200)}`, "UPSTREAM");
+		}
+		return parseImageResponse(payload);
+	}
 	/** Query today's check-in status without changing account state. */
 	async fetchCheckinStatus(credential) {
 		const response = await fetch(`${billingBase(credential)}/v2/billing/meter/checkin-activity-status`, {
@@ -6983,7 +7137,7 @@ function describeRosterSeenPayload(raw) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "5.9.0";
+const WORKBUDDY_CONNECT_VERSION = "5.10.0";
 //#endregion
 //#region src/host-heartbeat.ts
 /**
@@ -7141,4 +7295,4 @@ async function clearHostHeartbeat() {
 	await rm(workbuddyHostHeartbeatPath(), { force: true });
 }
 //#endregion
-export { parseCreditMultiplier as $, isEncryptedCredentialError as A, isEncryptedFieldWrapper as At, WorkBuddyCredentialRejectedError as B, writeFileAtomic as Bt, WorkBuddyCredentialStore as C, WORKBUDDY_APP_EXECUTABLE_ENV as Ct, defaultDesktopAuthDirs as D, fetchAtRestKeyPayload as Dt, defaultDesktopAuthCandidates as E, deriveAtRestKeyId as Et, workbuddyAccountId as F, readAtRestKey as Ft, forceNeutralHead as G, channelGateMemberOf as H, workbuddyOwnAuthPath as I, workbuddyAppExecutableCandidates as It, isCredentialRejectedError as J, isContextTooLongBody as K, CONTEXT_OVERFLOW_MARKER as L, hostPeersInfo as Lt, legacyWorkbuddyOwnAuthPath as M, macosBundleExecutable as Mt, parseWorkBuddyAuth as N, macosNestedAppBundles as Nt, defaultDesktopAuthPath as O, findWorkbuddyAppExecutable as Ot, preferredAccountName as P, openEncryptedField as Pt, openingEvidenceOfBody as Q, CREDENTIAL_REJECTED_CODE as R, resolveDshHome as Rt, WORKBUDDY_AUTH_FILE_ENV as S, nativeModalityOf as St, authFileName as T, deriveAtRestKey as Tt, classifyUpstreamError as U, WorkBuddyUpstreamClient as V, declaredTools as W, knownRegionOf as X, isFirstMessageGateBody as Y, modelIdOfBody as Z, deriveCatalog as _, pickImageModel as _t, readHostHeartbeat as a, requestEvidenceOf as at, ENCRYPTED_CREDENTIAL_CODE as b, NATIVE_MODALITY_BY_MODEL_ID as bt, WORKBUDDY_CONNECT_VERSION as c, REFUSES_OFF_MODEL_IDS as ct, rosterSeenPath as d, offDefaultFor as dt, parseReasoning as et, piAiRuntimeInfo as f, offRefused as ft, applyContextBudgets as g, WorkBuddyImageError as gt, WorkBuddyCatalog as h, DEFAULT_IMAGE_SIZE as ht, processStartTimeMs as i, regionOf as it, isVaultAccountId as j, isWorkbuddyBundle as jt, hasEncryptedCredentialFields as k, findWorkbuddyAppExecutableWithSource as kt, createFileRosterSeenStore as l, defaultOffModelIds as lt, FALLBACK_WORKBUDDY_MODELS_GLOBAL as m, withEffectiveOff as mt, clearHostHeartbeat as n, perturbChannelFingerprints as nt, workbuddyHostHeartbeatPath as o, rewriteSessionTitleModel as ot, FALLBACK_WORKBUDDY_MODELS as p, recordRefusal as pt, isConversationIdGateBody as q, isHeartbeatProcessAlive as r, prepareChatBody as rt, writeHostHeartbeat as s, attachBusyLevels as st, WORKBUDDY_HOST_HEARTBEAT_FILENAME as t, parseUpstreamModel as tt, describeRosterSeenPayload as u, lastRefusalFor as ut, fallbackModelsFor as v, parseQueueAnswer as vt, WorkBuddyEncryptedCredentialError as w, clearAtRestKeyCache as wt, WORKBUDDY_AUTH_FILENAME as x, imageDefaultFor as xt, withoutRouters as y, queueNoticeText as yt, WORKBUDDY_FALLBACK_SYSTEM_PROMPT as z, withFileLock as zt };
+export { parseCreditMultiplier as $, isEncryptedCredentialError as A, nativeModalityOf as At, WorkBuddyCredentialRejectedError as B, macosBundleExecutable as Bt, WorkBuddyCredentialStore as C, parseImageDataUrl as Ct, defaultDesktopAuthDirs as D, queueNoticeText as Dt, defaultDesktopAuthCandidates as E, parseQueueAnswer as Et, workbuddyAccountId as F, fetchAtRestKeyPayload as Ft, forceNeutralHead as G, hostPeersInfo as Gt, channelGateMemberOf as H, openEncryptedField as Ht, workbuddyOwnAuthPath as I, findWorkbuddyAppExecutable as It, isCredentialRejectedError as J, writeFileAtomic as Jt, isContextTooLongBody as K, resolveDshHome as Kt, CONTEXT_OVERFLOW_MARKER as L, findWorkbuddyAppExecutableWithSource as Lt, legacyWorkbuddyOwnAuthPath as M, clearAtRestKeyCache as Mt, parseWorkBuddyAuth as N, deriveAtRestKey as Nt, defaultDesktopAuthPath as O, NATIVE_MODALITY_BY_MODEL_ID as Ot, preferredAccountName as P, deriveAtRestKeyId as Pt, openingEvidenceOfBody as Q, CREDENTIAL_REJECTED_CODE as R, isEncryptedFieldWrapper as Rt, WORKBUDDY_AUTH_FILE_ENV as S, isBareBase64Image as St, authFileName as T, sniffImageMime as Tt, classifyUpstreamError as U, readAtRestKey as Ut, WorkBuddyUpstreamClient as V, macosNestedAppBundles as Vt, declaredTools as W, workbuddyAppExecutableCandidates as Wt, knownRegionOf as X, isFirstMessageGateBody as Y, modelIdOfBody as Z, deriveCatalog as _, IMAGE_TAG_TEXT_TO_IMAGE as _t, readHostHeartbeat as a, requestEvidenceOf as at, ENCRYPTED_CREDENTIAL_CODE as b, imageDataUrl as bt, WORKBUDDY_CONNECT_VERSION as c, REFUSES_OFF_MODEL_IDS as ct, rosterSeenPath as d, offDefaultFor as dt, parseReasoning as et, piAiRuntimeInfo as f, offRefused as ft, applyContextBudgets as g, IMAGE_TAG_IMAGE_TO_IMAGE as gt, WorkBuddyCatalog as h, DEFAULT_IMAGE_SIZE as ht, processStartTimeMs as i, regionOf as it, isVaultAccountId as j, WORKBUDDY_APP_EXECUTABLE_ENV as jt, hasEncryptedCredentialFields as k, imageDefaultFor as kt, createFileRosterSeenStore as l, defaultOffModelIds as lt, FALLBACK_WORKBUDDY_MODELS_GLOBAL as m, withEffectiveOff as mt, clearHostHeartbeat as n, perturbChannelFingerprints as nt, workbuddyHostHeartbeatPath as o, rewriteSessionTitleModel as ot, FALLBACK_WORKBUDDY_MODELS as p, recordRefusal as pt, isConversationIdGateBody as q, withFileLock as qt, isHeartbeatProcessAlive as r, prepareChatBody as rt, writeHostHeartbeat as s, attachBusyLevels as st, WORKBUDDY_HOST_HEARTBEAT_FILENAME as t, parseUpstreamModel as tt, describeRosterSeenPayload as u, lastRefusalFor as ut, fallbackModelsFor as v, MAX_INPUT_IMAGE_BYTES as vt, WorkBuddyEncryptedCredentialError as w, pickMediaModel as wt, WORKBUDDY_AUTH_FILENAME as x, imageMimeForPath as xt, withoutRouters as y, WorkBuddyImageError as yt, WORKBUDDY_FALLBACK_SYSTEM_PROMPT as z, isWorkbuddyBundle as zt };

package/lib/index.d.ts

@@ -1564,12 +1564,22 @@ declare class WorkBuddyUpstreamClient {
    */
   fetchModelBusy(credential: WorkBuddyCredential, modelIds: readonly string[], signal?: AbortSignal): Promise<Map<string, WorkBuddyBusyLevel>>;
   /**
-   * 读该账号所属区的产品配置，挑出带 `text-to-image` 标签的媒体模型。
+   * 读该账号所属区的产品配置，返回**全部**媒体模型（图 + 视频，按 tag 区分）。
    *
    * 走的是和 {@link fetchModels} 同一条 `/v3/config`（国内区与国际区都答），
    * 区别只在这里保留 `data.models` 的媒体条目、而不是投影成 CLI 聊天目录。
-   * 国内区实测 62 条模型里只有 `hunyuan-image-alpha` 带 `text-to-image`；
-   * 国际区一条都没有 —— 所以本方法对国际区返回空数组，而不是编一个模型出来。
+   * 两区实测（2026-10-25，同日各跑一次只读探针）：
+   *   - 国内区 61 条模型 / 17 条带 tag：`hunyuan-image-alpha`（`text-to-image`）、
+   *     `hunyuan-image-alpha-edit`（`image-to-image`）、`kling-video-v3` 与
+   *     `minimax-video-h3`（`text-to-video` + `image-to-video`）。
+   *   - 国际区 29 条 / 7 条带 tag：`hy-image-3.5`（`text-to-image` +
+   *     `image-to-image`）、`kling-video-v3`（两种视频 tag）。
+   * 两边目录完全不重叠，所以「国际区一条都没有」是 2026-10-21 的旧观测，
+   * 已经过期 —— 目录真的没标时才返回空数组（而不是编一个模型出来）。
+   *
+   * 返回的是**未分组**的全集：谁要 `text-to-image` 就自己按 tag 过滤
+   * （{@link selectMediaModels} / `pickMediaModel`）。生图工具、改图路径、卡片清单
+   * 因此共用这一次读取，而不是各读一遍目录。
    *
    * 这是一次 EXTRA 读取，不是「复用目录那一次」：`fetchModels` 的结果被投影成
    * 聊天目录就丢掉了媒体标签，所以这里必须再读一遍同一份文档。它是只读 GET、
@@ -1582,7 +1592,9 @@ declare class WorkBuddyUpstreamClient {
    * 发一次文生图请求。
    *
    * 端点、请求体、响应解析全部照抄官方 CLI 的 ImageService（见 `image-gen.ts`
-   * 的模块注释）。实测单张 5.71 credits，产物是 24 小时有效的 COS 签名 URL。
+   * 的模块注释）。产物是 24 小时有效的 COS 签名 URL；实扣积分随区与模型不同
+   * （国内区 `hunyuan-image-alpha` 5.71、国际区 `hy-image-3.5` 0.03），
+   * 只在响应的 `data.usage.credit` 里给出，调用方按实际值回报。
    *
    * 失败分两层：HTTP 非 2xx 交给 {@link describeImageFailure} 翻成带 code 的
    * 错误（401/403 提示重新登录、404 提示该区没有生图路由、429 提示限流）；
@@ -1593,6 +1605,24 @@ declare class WorkBuddyUpstreamClient {
     readonly prompt: string;
     readonly size?: string;
   }, signal?: AbortSignal): Promise<WorkBuddyImageOutcome>;
+  /**
+   * 发一次改图请求（`image-to-image`）。
+   *
+   * 端点换成官方 CLI `ImageService.editImage` 用的 `/v2/images/edits`，请求体是
+   * 生图那一套 + `image`（**必须是 data URL 字符串数组**）+ 可选 `input_fidelity`。
+   * 2026-10-25 国际区实测：`hy-image-3.5` + 一张 712×962 的截图 → 200、code 0、
+   * 一张 COS 签名 URL、`credit 0.03`。
+   *
+   * `image` 的形态由调用方（工具层）负责规整成 data URL——这一层只发请求、
+   * 不碰文件系统，和 {@link generateImage} 的分工保持一致。
+   */
+  editImage(credential: WorkBuddyCredential, request: {
+    readonly model: string;
+    readonly prompt: string;
+    readonly size?: string;
+    readonly image: readonly string[];
+    readonly inputFidelity?: string;
+  }, signal?: AbortSignal): Promise<WorkBuddyImageOutcome>;
   /** Query today's check-in status without changing account state. */
   fetchCheckinStatus(credential: WorkBuddyCredential): Promise<WorkBuddyCheckinStatus>;
   /**
@@ -4143,6 +4173,19 @@ interface WorkBuddyStatusRouteOptions {
    * renders no segment at all rather than a made-up "0 新模型".
    */
   rosterSeen?(region: WorkBuddyRegion): Promise<RosterSeenReadout>;
+  /**
+   * Read the region's MEDIA models (image + video) for the card's read-only
+   * roster block.
+   *
+   * Optional: a Host that mounts these routes without the upstream client
+   * simply answers 503, and the card hides the block. Returns the same rows the
+   * image tool consumes, so the card's list and the tool's model validation
+   * cannot disagree about what exists in a region.
+   */
+  mediaModels?(region: WorkBuddyRegion, options?: {
+    readonly signal?: AbortSignal;
+    readonly refresh?: boolean;
+  }): Promise<readonly WorkBuddyMediaModel[]>;
   /**
    * Whether the requested region's provider is currently offered to DSH. The
    * card renders this as the tab's on/off checkbox, so the switch reflects the
@@ -4922,6 +4965,23 @@ declare function regionStateOf(config: Config, region: WorkBuddyRegion): WorkBud
  * about a region's state.
  */
 declare function regionEnabled(config: Config, region: WorkBuddyRegion): boolean;
+/**
+ * The region that owns the image tool right now, or `undefined` when no region
+ * has it switched on.
+ *
+ * BOTH gates are required, and both are read live: the region's provider switch
+ * must be ON (`regionEnabled`, opt-OUT) and the user must have opted IN to the
+ * model spending credits there (`imageToolEnabled`, opt-IN). Absence of
+ * `imageToolEnabled` is never consent.
+ *
+ * CN wins when both regions qualify, and that order is the only backward
+ * compatible one: before the international gateway carried a `text-to-image`
+ * model (measured 2026-10-25: `hy-image-3.5`) CN was the only region that could
+ * ever be opted in, so a profile that opted in there keeps using CN even after
+ * the global tab is switched on as well. That is exactly `REGION_KEYS`' order;
+ * it is not incidental.
+ */
+declare function imageToolRegionOf(config: Config): WorkBuddyRegion | undefined;
 /**
  * The account id a region should select, or `undefined` for the documented
  * default: follow whatever the WorkBuddy app is currently signed in as.
@@ -4972,4 +5032,4 @@ declare function legacyAttributionRegion(value: Config, accountsFor: (region: Wo
  */
 declare function apply(ctx: Context, config: Config): void;
 //#endregion
-export { CREDENTIAL_REJECTED_CODE, Config, DEFAULT_PROBE_INPUT_TOKENS, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, NATIVE_MODALITY_BY_MODEL_ID, PROBE_INPUT_TOKEN_CHOICES, PROBE_MAX_TOKENS, PROBE_SYSTEM_PROMPT, REFUSES_OFF_MODEL_IDS, type UpstreamErrorKind, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROBE_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_TPS_PATH, WORKBUDDY_USAGE_PATH, type WorkBuddyAccountChoice, type WorkBuddyAdapter, type WorkBuddyAuthStatus, type WorkBuddyCandidateFailure, WorkBuddyCatalog, type WorkBuddyChatResult, type WorkBuddyCredential, type WorkBuddyCredentialRecovery, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, type WorkBuddyCreditPackage, type WorkBuddyCredits, WorkBuddyEncryptedCredentialError, type WorkBuddyEncryptedField, type WorkBuddyHostHeartbeat, type WorkBuddyModelInfo, type WorkBuddyNativeModality, WorkBuddyPoolPreferences, type WorkBuddyProbeClient, type WorkBuddyProbeOutcome, type WorkBuddyProbeResult, type WorkBuddyProbeStore, type WorkBuddyReasoning, type WorkBuddyRecoveryCandidate, type WorkBuddyRefreshOutcome, WorkBuddyRegionState, type WorkBuddyShim, type WorkBuddyStatusRouteOptions, type WorkBuddyStoreOptions, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyUsabilityProbeOptions, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, cooldownOf, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, creditOfStream, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, defaultOffModelIds, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, imageDefaultFor, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, knownRegionOf, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, modelIdOfBody, name, nativeModalityOf, nextRegionEnabled, nextRegionSlots, offDefaultFor, openEncryptedField, outcomeOfFailure, parseCreditMultiplier, parseReasoning, parseRetryAfter, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, probeModel, probeRequestBody, probeSucceeded, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, regionsFieldIsCorrupt, regionsMapOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, settingsNamespaceOf, toPersistedWorkBuddyModel, unwrapVolatileDeep, withEffectiveOff, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };
+export { CREDENTIAL_REJECTED_CODE, Config, DEFAULT_PROBE_INPUT_TOKENS, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, NATIVE_MODALITY_BY_MODEL_ID, PROBE_INPUT_TOKEN_CHOICES, PROBE_MAX_TOKENS, PROBE_SYSTEM_PROMPT, REFUSES_OFF_MODEL_IDS, type UpstreamErrorKind, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROBE_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_TPS_PATH, WORKBUDDY_USAGE_PATH, type WorkBuddyAccountChoice, type WorkBuddyAdapter, type WorkBuddyAuthStatus, type WorkBuddyCandidateFailure, WorkBuddyCatalog, type WorkBuddyChatResult, type WorkBuddyCredential, type WorkBuddyCredentialRecovery, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, type WorkBuddyCreditPackage, type WorkBuddyCredits, WorkBuddyEncryptedCredentialError, type WorkBuddyEncryptedField, type WorkBuddyHostHeartbeat, type WorkBuddyModelInfo, type WorkBuddyNativeModality, WorkBuddyPoolPreferences, type WorkBuddyProbeClient, type WorkBuddyProbeOutcome, type WorkBuddyProbeResult, type WorkBuddyProbeStore, type WorkBuddyReasoning, type WorkBuddyRecoveryCandidate, type WorkBuddyRefreshOutcome, WorkBuddyRegionState, type WorkBuddyShim, type WorkBuddyStatusRouteOptions, type WorkBuddyStoreOptions, WorkBuddyUpstreamClient, type WorkBuddyUpstreamModel, type WorkBuddyUsabilityProbeOptions, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, cooldownOf, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, creditOfStream, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, defaultOffModelIds, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, imageDefaultFor, imageToolRegionOf, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, knownRegionOf, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, modelIdOfBody, name, nativeModalityOf, nextRegionEnabled, nextRegionSlots, offDefaultFor, openEncryptedField, outcomeOfFailure, parseCreditMultiplier, parseReasoning, parseRetryAfter, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, probeModel, probeRequestBody, probeSucceeded, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, regionsFieldIsCorrupt, regionsMapOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, settingsNamespaceOf, toPersistedWorkBuddyModel, unwrapVolatileDeep, withEffectiveOff, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };