dsh-connect-workbuddy 5.9.0 → 5.10.0

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as parseCreditMultiplier, A as isEncryptedCredentialError, At as isEncryptedFieldWrapper, B as WorkBuddyCredentialRejectedError, Bt as writeFileAtomic, C as WorkBuddyCredentialStore, Ct as WORKBUDDY_APP_EXECUTABLE_ENV, D as defaultDesktopAuthDirs, Dt as fetchAtRestKeyPayload, E as defaultDesktopAuthCandidates, Et as deriveAtRestKeyId, F as workbuddyAccountId, Ft as readAtRestKey, G as forceNeutralHead, H as channelGateMemberOf, I as workbuddyOwnAuthPath, It as workbuddyAppExecutableCandidates, J as isCredentialRejectedError, K as isContextTooLongBody, L as CONTEXT_OVERFLOW_MARKER, M as legacyWorkbuddyOwnAuthPath, Mt as macosBundleExecutable, N as parseWorkBuddyAuth, Nt as macosNestedAppBundles, O as defaultDesktopAuthPath, Ot as findWorkbuddyAppExecutable, P as preferredAccountName, Pt as openEncryptedField, Q as openingEvidenceOfBody, R as CREDENTIAL_REJECTED_CODE, Rt as resolveDshHome, S as WORKBUDDY_AUTH_FILE_ENV, St as nativeModalityOf, T as authFileName, Tt as deriveAtRestKey, U as classifyUpstreamError, V as WorkBuddyUpstreamClient, W as declaredTools, X as knownRegionOf, Y as isFirstMessageGateBody, Z as modelIdOfBody, _ as deriveCatalog, _t as pickImageModel, a as readHostHeartbeat, at as requestEvidenceOf, b as ENCRYPTED_CREDENTIAL_CODE, bt as NATIVE_MODALITY_BY_MODEL_ID, c as WORKBUDDY_CONNECT_VERSION, ct as REFUSES_OFF_MODEL_IDS, dt as offDefaultFor, et as parseReasoning, f as piAiRuntimeInfo, ft as offRefused, g as applyContextBudgets, gt as WorkBuddyImageError, h as WorkBuddyCatalog, ht as DEFAULT_IMAGE_SIZE, i as processStartTimeMs, it as regionOf, j as isVaultAccountId, jt as isWorkbuddyBundle, k as hasEncryptedCredentialFields, l as createFileRosterSeenStore, lt as defaultOffModelIds, m as FALLBACK_WORKBUDDY_MODELS_GLOBAL, mt as withEffectiveOff, n as clearHostHeartbeat, nt as perturbChannelFingerprints, o as workbuddyHostHeartbeatPath, ot as rewriteSessionTitleModel, p as FALLBACK_WORKBUDDY_MODELS, pt as recordRefusal, q as isConversationIdGateBody, r as isHeartbeatProcessAlive, rt as prepareChatBody, s as writeHostHeartbeat, st as attachBusyLevels, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as parseUpstreamModel, ut as lastRefusalFor, v as fallbackModelsFor, vt as parseQueueAnswer, w as WorkBuddyEncryptedCredentialError, wt as clearAtRestKeyCache, x as WORKBUDDY_AUTH_FILENAME, xt as imageDefaultFor, y as withoutRouters, yt as queueNoticeText, z as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, zt as withFileLock } from "./host-heartbeat-C1tVU2IN.js";
+import { $ as parseCreditMultiplier, A as isEncryptedCredentialError, At as nativeModalityOf, B as WorkBuddyCredentialRejectedError, Bt as macosBundleExecutable, C as WorkBuddyCredentialStore, Ct as parseImageDataUrl, D as defaultDesktopAuthDirs, Dt as queueNoticeText, E as defaultDesktopAuthCandidates, Et as parseQueueAnswer, F as workbuddyAccountId, Ft as fetchAtRestKeyPayload, G as forceNeutralHead, H as channelGateMemberOf, Ht as openEncryptedField, I as workbuddyOwnAuthPath, It as findWorkbuddyAppExecutable, J as isCredentialRejectedError, Jt as writeFileAtomic, K as isContextTooLongBody, Kt as resolveDshHome, L as CONTEXT_OVERFLOW_MARKER, M as legacyWorkbuddyOwnAuthPath, Mt as clearAtRestKeyCache, N as parseWorkBuddyAuth, Nt as deriveAtRestKey, O as defaultDesktopAuthPath, Ot as NATIVE_MODALITY_BY_MODEL_ID, P as preferredAccountName, Pt as deriveAtRestKeyId, Q as openingEvidenceOfBody, R as CREDENTIAL_REJECTED_CODE, Rt as isEncryptedFieldWrapper, S as WORKBUDDY_AUTH_FILE_ENV, St as isBareBase64Image, T as authFileName, Tt as sniffImageMime, U as classifyUpstreamError, Ut as readAtRestKey, V as WorkBuddyUpstreamClient, Vt as macosNestedAppBundles, W as declaredTools, Wt as workbuddyAppExecutableCandidates, X as knownRegionOf, Y as isFirstMessageGateBody, Z as modelIdOfBody, _ as deriveCatalog, _t as IMAGE_TAG_TEXT_TO_IMAGE, a as readHostHeartbeat, at as requestEvidenceOf, b as ENCRYPTED_CREDENTIAL_CODE, bt as imageDataUrl, c as WORKBUDDY_CONNECT_VERSION, ct as REFUSES_OFF_MODEL_IDS, dt as offDefaultFor, et as parseReasoning, f as piAiRuntimeInfo, ft as offRefused, g as applyContextBudgets, gt as IMAGE_TAG_IMAGE_TO_IMAGE, h as WorkBuddyCatalog, ht as DEFAULT_IMAGE_SIZE, i as processStartTimeMs, it as regionOf, j as isVaultAccountId, jt as WORKBUDDY_APP_EXECUTABLE_ENV, k as hasEncryptedCredentialFields, kt as imageDefaultFor, l as createFileRosterSeenStore, lt as defaultOffModelIds, m as FALLBACK_WORKBUDDY_MODELS_GLOBAL, mt as withEffectiveOff, n as clearHostHeartbeat, nt as perturbChannelFingerprints, o as workbuddyHostHeartbeatPath, ot as rewriteSessionTitleModel, p as FALLBACK_WORKBUDDY_MODELS, pt as recordRefusal, q as isConversationIdGateBody, qt as withFileLock, r as isHeartbeatProcessAlive, rt as prepareChatBody, s as writeHostHeartbeat, st as attachBusyLevels, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as parseUpstreamModel, ut as lastRefusalFor, v as fallbackModelsFor, vt as MAX_INPUT_IMAGE_BYTES, w as WorkBuddyEncryptedCredentialError, wt as pickMediaModel, x as WORKBUDDY_AUTH_FILENAME, xt as imageMimeForPath, y as withoutRouters, yt as WorkBuddyImageError, z as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, zt as isWorkbuddyBundle } from "./host-heartbeat-_EeM2YDF.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, open, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -10,7 +10,7 @@ import { createAssistantMessageEventStream, createProvider, isContextOverflow }
 import { openAICompletionsApi } from "@earendil-works/pi-ai/api/openai-completions.lazy";
 import { ReasoningEffortId, createUserMessage, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
-import { pathToFileURL } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import { createServer } from "node:http";
 import { Readable } from "node:stream";
 import { isIP } from "node:net";
@@ -311,6 +311,18 @@ const WORKBUDDY_ACCOUNT_CREDITS_PATH = "/plugins/dsh-connect-workbuddy/account-c
 const WORKBUDDY_BENEFIT_CLAIM_PATH = "/plugins/dsh-connect-workbuddy/benefit/claim";
 /** Plugin-owned live model refresh endpoint. */
 const WORKBUDDY_MODELS_REFRESH_PATH = "/plugins/dsh-connect-workbuddy/models/refresh";
+/**
+* Plugin-owned MEDIA model list endpoint (image + video, read from the region's
+* `/v3/config`).
+*
+* Separate from {@link WORKBUDDY_MODELS_REFRESH_PATH} because it answers a
+* different question from a different document projection: the refresh route
+* returns the CHAT roster, from which `selectCliModels` drops every media
+* entry, while this one keeps the `text-to-image`/`image-to-image`/
+* `text-to-video`/`image-to-video` rows the card lists. Read-only and free —
+* it is the same GET the image tool already performs.
+*/
+const WORKBUDDY_MEDIA_MODELS_PATH = "/plugins/dsh-connect-workbuddy/media-models";
 /** Plugin-owned local account rescan endpoint. */
 const WORKBUDDY_ACCOUNTS_REFRESH_PATH = "/plugins/dsh-connect-workbuddy/accounts/refresh";
 /** Plugin-owned daily check-in action endpoint. */
@@ -4868,7 +4880,8 @@ function createWorkBuddyShim(options) {
 //#endregion
 //#region src/image-tool.ts
 /**
-* `workbuddy_draw_image`：把 WorkBuddy 国内区的文生图能力暴露成一个 DSH agent 工具。
+* `workbuddy_draw_image`：把 WorkBuddy 的文生图能力（国内区与国际区各自的
+* `text-to-image` 模型）暴露成一个 DSH agent 工具。
 *
 * 为什么手写 ToolDefinition 而不 import `@deepseek-ai/dsh-tools` 的 `defineTool`：
 * 宿主 `Tools.register` 只校验两件事——`output.render` 是函数、`output.schema` 是
@@ -4886,8 +4899,8 @@ function createWorkBuddyShim(options) {
 const WORKBUDDY_IMAGE_TOOL_NAME = "workbuddy_draw_image";
 /** 工具单次执行的上限。实测一张图 17–39 秒，留足余量。 */
 const IMAGE_TOOL_TIMEOUT_MS = 18e4;
-/** 媒体模型目录的缓存时长：目录变化很慢，不必每张图都重新读一遍。 */
-const MEDIA_MODEL_TTL_MS = 3e5;
+/** 下载远程输入图的上限（只覆盖 http(s) 那一次 GET，不含生图本身）。 */
+const IMAGE_INPUT_TIMEOUT_MS = 3e4;
 /** 失败后的冷却：生图按张扣积分，连续重试会在几秒内烧掉几十积分。 */
 const FAILURE_COOLDOWN_MS = 3e4;
 function asRecord(value) {
@@ -4938,18 +4951,82 @@ async function writeTempImage(b64, model) {
 	return path;
 }
 /**
+* 输入图的一切毛病都发生在「请求还没发出去」之前，所以统一用 INVALID_ARGS：
+* 不进冷却、不花积分，错误信息直接说清是哪个环节。
+*/
+function inputImageError(message) {
+	return new WorkBuddyImageError(message, "INVALID_ARGS");
+}
+const INLINE_BASE64_LABEL = "（内联 base64）";
+const INLINE_DATA_URL_LABEL = "（内联 data URL）";
+/**
+* 体积与空文件闸门——四种输入形态都从这里过，所以「空文件」和「超过 8 MB」的
+* 文案只有一份。
+*
+* `byteLength` 必须是**解码后**的字节数：base64 比原始字节长约 4/3，拿字符串长度
+* 比上限度会把一个 6 MB 的图误判成超限（并在错误信息里报出一个虚高的 MB 数）。
+*/
+function assertInputImageBytes(byteLength, source) {
+	if (byteLength === 0) throw inputImageError(`workbuddy image: 输入图是空文件：${source}`);
+	if (byteLength > 8388608) {
+		const limit = MAX_INPUT_IMAGE_BYTES / 1024 / 1024;
+		throw inputImageError(`workbuddy image: 输入图 ${(byteLength / 1024 / 1024).toFixed(1)} MB，超过 ${limit} MB 上限：${source}`);
+	}
+}
+/**
+* 把任意形态的输入图规整成上游唯一接受的形态：`data:<mime>;base64,<b64>`。
+*
+* 官方 CLI 的 `processImageInput` 收 data URL、http(s)、裸 base64、本地路径四
+* 种；这里只是把前三种归一，**不做**缩放、裁剪、格式转换——用户给什么就传什么，
+* 免得悄悄改了输入图。
+*/
+async function resolveImageInput(value, signal) {
+	const text = value.trim();
+	if (text.startsWith("data:")) {
+		const parsed = parseImageDataUrl(text);
+		if (parsed === void 0) throw inputImageError("workbuddy image: image 看起来是 data URL，但格式不对（需要 data:image/*;base64,...）。");
+		assertInputImageBytes(Buffer.from(parsed.base64, "base64").byteLength, INLINE_DATA_URL_LABEL);
+		return text;
+	}
+	if (/^https?:\/\//i.test(text)) {
+		let response;
+		try {
+			response = await fetch(text, { signal: signal ?? AbortSignal.timeout(IMAGE_INPUT_TIMEOUT_MS) });
+		} catch (error) {
+			throw inputImageError(`workbuddy image: 下载输入图失败（${text}）：` + (error instanceof Error ? error.message : String(error)));
+		}
+		if (!response.ok) throw inputImageError(`workbuddy image: 下载输入图失败（HTTP ${response.status}）：${text}`);
+		return encodeInputImage(new Uint8Array(await response.arrayBuffer()), response.headers.get("content-type") ?? void 0, text);
+	}
+	if (isBareBase64Image(text)) return encodeInputImage(new Uint8Array(Buffer.from(text, "base64")), void 0, INLINE_BASE64_LABEL);
+	const path = text.startsWith("file:") ? fileURLToPath(text) : text;
+	let bytes;
+	try {
+		bytes = await readFile(path);
+	} catch (error) {
+		throw inputImageError(`workbuddy image: 读不到输入图「${path}」：` + (error instanceof Error ? error.message : String(error)));
+	}
+	return encodeInputImage(new Uint8Array(bytes), void 0, path);
+}
+/** 校验体积、定出 mime，再把字节编成 data URL。 */
+function encodeInputImage(bytes, contentType, source) {
+	assertInputImageBytes(bytes.byteLength, source);
+	const declared = contentType?.split(";")[0]?.trim().toLowerCase();
+	const mime = declared !== void 0 && declared.startsWith("image/") ? declared : imageMimeForPath(source) ?? sniffImageMime(bytes);
+	return imageDataUrl(mime, Buffer.from(bytes).toString("base64"));
+}
+/**
 * 造出工具定义。
 *
 * 每次 `apply()` 只造一个实例，所以冷却状态与目录缓存都挂在闭包里，
 * 生命周期跟着插件走。
 */
 function createImageTool(deps) {
-	const regionLabel = deps.regionLabel ?? "国内区";
 	let mediaCache;
 	let cooldownUntil = 0;
 	const listModels = async (credential, signal) => {
 		const now = Date.now();
-		if (mediaCache !== void 0 && now - mediaCache.at < MEDIA_MODEL_TTL_MS) return mediaCache.models;
+		if (mediaCache !== void 0 && now - mediaCache.at < 3e5) return mediaCache.models;
 		const models = await deps.listMediaModels(credential, signal);
 		mediaCache = {
 			at: now,
@@ -4959,7 +5036,7 @@ function createImageTool(deps) {
 	};
 	return {
 		name: WORKBUDDY_IMAGE_TOOL_NAME,
-		description: "用当前账号的 WorkBuddy 生图能力画一张图（文生图）。只在国内区账号下可用；国际区没有生图模型。每张图会真实消耗 WorkBuddy 积分（实测约 5.71 积分/张），不要在没必要时调用，也不要为了试错连续调用。返回的是 COS 签名 URL，约 24 小时后失效；需要展示给用户时，用 markdown 图片语法引用该 URL。",
+		description: "用当前账号的 WorkBuddy 生图能力画一张图。不填 image 是文生图（用该区带 text-to-image 标签的模型）；填了 image 是改图（用带 image-to-image 标签的模型）。国内区与国际区都可用，模型取自该区产品配置（国内区文生图 hunyuan-image-alpha、改图 hunyuan-image-alpha-edit；国际区 hy-image-3.5 同时带这两个标签，以该区目录为准）。每张图会真实消耗 WorkBuddy 积分，单价随区域与模型不同，以返回结果里的 credit 为准；不要在没必要时调用，也不要为了试错连续调用。返回的是 COS 签名 URL，约 24 小时后失效；需要展示给用户时，用 markdown 图片语法引用该 URL。",
 		parameters: {
 			type: "object",
 			properties: {
@@ -4971,9 +5048,13 @@ function createImageTool(deps) {
 					type: "string",
 					description: `图片尺寸，形如 1024x1024。默认 ${DEFAULT_IMAGE_SIZE}。`
 				},
+				image: {
+					type: "string",
+					description: "输入图，可选。填了就是改图（image-to-image）；不填就是文生图。接受本地绝对路径、file:// URL、http(s) URL、data URL 或裸 base64。上限 8 MB，不做缩放或格式转换。"
+				},
 				model: {
 					type: "string",
-					description: "生图模型 id，可选。不填就用产品配置里第一个带 text-to-image 标签的模型（国内区即 hunyuan-image-alpha）。填了但目录里没有会直接报错，不会盲发。"
+					description: "模型 id，可选。不填就用该区目录里第一个带当前模式标签的模型（文生图看 text-to-image，改图看 image-to-image）。填了但该 tag 组里没有会直接报错，不会盲发。"
 				}
 			},
 			required: ["prompt"],
@@ -4987,9 +5068,13 @@ function createImageTool(deps) {
 						type: "string",
 						description: "图片地址（COS 签名 URL，或本地 file:// 地址）。"
 					},
+					mode: {
+						type: "string",
+						description: "'generate'（文生图）或 'edit'（改图）。"
+					},
 					model: {
 						type: "string",
-						description: "实际使用的生图模型 id。"
+						description: "实际使用的模型 id。"
 					},
 					prompt: {
 						type: "string",
@@ -5010,6 +5095,7 @@ function createImageTool(deps) {
 				},
 				required: [
 					"url",
+					"mode",
 					"model",
 					"prompt",
 					"hint"
@@ -5020,13 +5106,14 @@ function createImageTool(deps) {
 				const record = asRecord(value);
 				const url = asNonEmptyString(record["url"]) ?? "";
 				const model = asNonEmptyString(record["model"]) ?? "unknown";
+				const mode = record["mode"] === "edit" ? "改图" : "文生图";
 				const credit = typeof record["credit"] === "number" ? record["credit"] : void 0;
 				const path = asNonEmptyString(record["path"]);
 				const hint = asNonEmptyString(record["hint"]) ?? "";
 				const lines = [
-					`![WorkBuddy 生图](${url})`,
+					`![WorkBuddy ${mode}](${url})`,
 					"",
-					`模型：\`${model}\`${credit === void 0 ? "" : ` · 消耗 ${credit} 积分`}`
+					`${mode} · 模型：\`${model}\`${credit === void 0 ? "" : ` · 消耗 ${credit} 积分`}`
 				];
 				if (path !== void 0) lines.push(`本地文件：${path}`);
 				if (hint !== "") lines.push("", hint);
@@ -5043,28 +5130,37 @@ function createImageTool(deps) {
 			if (prompt === void 0) throw new WorkBuddyImageError(`${WORKBUDDY_IMAGE_TOOL_NAME}: 参数 prompt 必填，且必须是非空字符串。`, "INVALID_ARGS");
 			const size = asNonEmptyString(record["size"]) ?? "1024x1024";
 			const requestedModel = asNonEmptyString(record["model"]);
+			const image = asNonEmptyString(record["image"]);
 			const now = Date.now();
 			if (now < cooldownUntil) {
 				const seconds = Math.ceil((cooldownUntil - now) / 1e3);
 				throw new WorkBuddyImageError(`workbuddy image: 上一次生图刚失败过，请 ${seconds} 秒后再试（失败冷却是为了避免连续重试白白烧积分）。`, "COOLDOWN");
 			}
 			const credential = await deps.resolveCredential();
-			if (credential === void 0) throw new WorkBuddyImageError(`workbuddy image: ${regionLabel}未登录 WorkBuddy。请先在插件设置里登录国内区账号，再调用生图工具。`, "NOT_LOGGED_IN");
+			if (credential === void 0) throw new WorkBuddyImageError("workbuddy image: 没有可用的 WorkBuddy 账号——要么两个区都没登录，要么已登录的那个区没有打开「允许模型自主生图」。请先在插件设置里登录该区账号，并打开那个开关。", "NOT_LOGGED_IN");
 			const signal = exec.signal === void 0 ? AbortSignal.timeout(IMAGE_TOOL_TIMEOUT_MS) : AbortSignal.any([exec.signal, AbortSignal.timeout(IMAGE_TOOL_TIMEOUT_MS)]);
 			let sent = false;
 			try {
 				const models = await listModels(credential, signal);
-				const model = pickImageModel(models, requestedModel);
+				const input = image === void 0 ? void 0 : await resolveImageInput(image, signal);
+				const model = pickMediaModel(models, requestedModel, input === void 0 ? IMAGE_TAG_TEXT_TO_IMAGE : IMAGE_TAG_IMAGE_TO_IMAGE);
 				sent = true;
-				const outcome = await deps.generateImage(credential, {
+				const outcome = input === void 0 ? await deps.generateImage(credential, {
 					model: model.id,
 					prompt,
 					size
+				}, signal) : await deps.editImage(credential, {
+					model: model.id,
+					prompt,
+					size,
+					image: [input]
 				}, signal);
+				const mode = input === void 0 ? "generate" : "edit";
 				const value = {
+					mode,
 					model: model.id,
 					prompt,
-					hint: `这张图来自 WorkBuddy（模型 ${model.id}），每张约消耗 5.71 积分。COS 签名 URL 约 24 小时失效；要长期保留请及时下载。` + (outcome.credit === void 0 ? "" : `本次实际扣费 ${outcome.credit} 积分。`)
+					hint: `这张图来自 WorkBuddy（模型 ${model.id}，${mode === "edit" ? "改图" : "文生图"}）。按张扣积分，单价随区域与模型不同` + (outcome.credit === void 0 ? "（本次响应没带扣费字段，以额度面板为准）。" : `；本次实际扣费 ${outcome.credit} 积分。`) + "COS 签名 URL 约 24 小时失效；要长期保留请及时下载。"
 				};
 				if (outcome.url !== void 0) value["url"] = outcome.url;
 				else if (outcome.b64 !== void 0) {
@@ -9472,6 +9568,27 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 				}
 			}
 		});
+		const disposeMediaModels = ctx.webServer.register({
+			kind: "exact",
+			path: WORKBUDDY_MEDIA_MODELS_PATH,
+			handler: async (req, res) => {
+				if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
+				if (!requireLoopback(req, res)) return;
+				if (deps.mediaModels === void 0) return json(res, 503, { error: "media model list unavailable" });
+				const region = requestRegion(req, res);
+				if (region === void 0) return;
+				try {
+					const refresh = new URL(req.url ?? "/", "http://localhost").searchParams.get("refresh") === "1";
+					json(res, 200, { models: (await deps.mediaModels(region, { refresh })).map((model) => ({
+						id: model.id,
+						name: model.name,
+						tags: [...model.tags]
+					})) });
+				} catch (error) {
+					json(res, 500, { error: safeMessage(error) });
+				}
+			}
+		});
 		const disposeProbe = ctx.webServer.register({
 			kind: "exact",
 			path: WORKBUDDY_PROBE_PATH,
@@ -9847,6 +9964,7 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 		return () => {
 			disposeBenefitClaim();
 			disposeRefresh();
+			disposeMediaModels();
 			disposeCheckin();
 			disposeAccounts();
 			disposeUsage();
@@ -9950,25 +10068,30 @@ const regionStateConfig = z.object({
 	/**
 	* Whether the model may call the image-generation tool (opt-IN, default off).
 	*
-	* Per-REGION like the credit switches, and only meaningful on `cn`: the image
-	* catalog has a `text-to-image` model on the CN gateway and none at all on the
-	* international one (measured, see `docs/IMAGE_GEN.md`).
+	* Per-REGION like the credit switches, and it now means the same thing on both
+	* tabs: each region's catalog carries its own `text-to-image` model (CN
+	* `hunyuan-image-alpha`, international `hy-image-3.5`; measured 2026-10-25,
+	* see `docs/IMAGE_GEN.md`). Whichever region is switched on AND opted in owns
+	* the tool; CN wins when both qualify (see `imageToolRegionOf`).
 	*
 	* Every other spending path in this plugin requires a human action: a chat
 	* request is one the user sent, and the per-model "test" button is one the
 	* user clicked. `workbuddy_draw_image` is the first capability where the
 	* MODEL decides to spend — it calls the tool on its own, at about 5.71 credits
-	* an image, and there is no per-call approval seam in the host to ask the user
-	* first (`needsApproval` / `toolApproval` do not exist; verified against the
-	* shipped `app.asar`).
+	* an image on CN and 0.03 on the international gateway (measured, not a price
+	* list: the media catalog carries no cost, so the tool reports the
+	* `usage.credit` the upstream actually settles), and there is no per-call
+	* approval seam in the host to ask the user first (`needsApproval` /
+	* `toolApproval` do not exist; verified against the shipped `app.asar`).
 	*
 	* So it is opt-in, the same way the account pool's credit-based rotation is
 	* opt-in (3.0.0's reasoning): a feature that can move money on its own must be
 	* one the user switched on, not one that arrives with an upgrade. Off also
-	* means the tool is not REGISTERED at all, so the model never sees it and
-	* cannot attempt a call that would be refused.
+	* means that region contributes nothing, and with no opted-in region at all
+	* the tool is not REGISTERED, so the model never sees it and cannot attempt a
+	* call that would be refused.
 	*/
-	imageToolEnabled: z.boolean().default(false).description("Let the model call workbuddy_draw_image on its own (opt-in; each image costs ~5.71 credits and there is no per-call approval). Off by default, and off means the tool is not registered at all."),
+	imageToolEnabled: z.boolean().default(false).description("Let the model call workbuddy_draw_image on its own (opt-in; an image costs ~5.71 credits on the CN gateway and ~0.03 on the international one, and there is no per-call approval). Off by default, and off means no region registers the tool at all."),
 	/**
 	* Per-model override of whether thinking `off` is offered, keyed by model id
 	* (issue #34). An ABSENT key means "use the built-in rule" — the upstream's
@@ -10111,6 +10234,28 @@ function regionEnabled(config, region) {
 /** Every region, in card tab order. */
 const REGION_KEYS = ["cn", "global"];
 /**
+* The region that owns the image tool right now, or `undefined` when no region
+* has it switched on.
+*
+* BOTH gates are required, and both are read live: the region's provider switch
+* must be ON (`regionEnabled`, opt-OUT) and the user must have opted IN to the
+* model spending credits there (`imageToolEnabled`, opt-IN). Absence of
+* `imageToolEnabled` is never consent.
+*
+* CN wins when both regions qualify, and that order is the only backward
+* compatible one: before the international gateway carried a `text-to-image`
+* model (measured 2026-10-25: `hy-image-3.5`) CN was the only region that could
+* ever be opted in, so a profile that opted in there keeps using CN even after
+* the global tab is switched on as well. That is exactly `REGION_KEYS`' order;
+* it is not incidental.
+*/
+function imageToolRegionOf(config) {
+	for (const region of REGION_KEYS) {
+		if (!regionEnabled(config, region)) continue;
+		if (regionStateOf(config, region).imageToolEnabled === true) return region;
+	}
+}
+/**
 * The account id a region should select, or `undefined` for the documented
 * default: follow whatever the WorkBuddy app is currently signed in as.
 *
@@ -10417,6 +10562,30 @@ function apply(ctx, config) {
 		return client.fetchModels(credential, signal, keep);
 	};
 	/**
+	* The region's MEDIA models, cached briefly for the card's read-only roster.
+	*
+	* Two callers ask the same question — the image tool (to validate a model
+	* argument) and the card's roster block (to SHOW what exists) — and both get
+	* the same answer from the same free GET. The cache exists because the card
+	* re-reads it on every settings render, not because the answer is expensive.
+	*
+	* Region-keyed, and a failure is NOT cached: a gateway hiccup must not make
+	* the roster read "no models" for five minutes.
+	*/
+	const mediaCaches = /* @__PURE__ */ new Map();
+	const readMediaModels = async (region, options) => {
+		const cached = mediaCaches.get(region);
+		const now = Date.now();
+		if (options?.refresh !== true && cached !== void 0 && now - cached.at < 3e5) return cached.models;
+		const credential = await stacks[region].store.resolve();
+		const models = await client.fetchMediaModels(credential, options?.signal);
+		mediaCaches.set(region, {
+			at: Date.now(),
+			models
+		});
+		return models;
+	};
+	/**
 	* Stamp each model's LIVE load level onto the runtime roster.
 	*
 	* Deliberately NOT part of {@link discoverModels}: that reader feeds the
@@ -10552,19 +10721,24 @@ function apply(ctx, config) {
 	let imageTools;
 	let disposeImageTool;
 	const syncImageTool = (value) => {
-		const wanted = regionEnabled(value, "cn") && regionStateOf(value, "cn").imageToolEnabled === true;
+		const wanted = imageToolRegionOf(value) !== void 0;
 		if (wanted && disposeImageTool === void 0 && imageTools !== void 0) {
 			disposeImageTool = registerWorkBuddyImageTool(imageTools, {
 				resolveCredential: async () => {
-					if (!regionEnabled(current(), "cn")) return void 0;
-					try {
-						return await stacks.cn.store.resolve();
-					} catch {
-						return;
+					const live = current();
+					for (const region of REGION_KEYS) {
+						if (!regionEnabled(live, region)) continue;
+						if (regionStateOf(live, region).imageToolEnabled !== true) continue;
+						try {
+							return await stacks[region].store.resolve();
+						} catch {
+							continue;
+						}
 					}
 				},
 				listMediaModels: (credential, signal) => client.fetchMediaModels(credential, signal),
 				generateImage: (credential, request, signal) => client.generateImage(credential, request, signal),
+				editImage: (credential, request, signal) => client.editImage(credential, request, signal),
 				logger: ctx.logger
 			});
 			return;
@@ -10732,6 +10906,7 @@ function apply(ctx, config) {
 		* counts as new — the one property that keeps the marker honest.
 		*/
 		rosterSeen: (region) => stacks[region].rosterSeen.readout(),
+		mediaModels: readMediaModels,
 		regionEnabled: (region) => regionEnabled(current(), region),
 		/**
 		* The region's committed sidebar-credit flag, read from the same config the
@@ -11733,4 +11908,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { CREDENTIAL_REJECTED_CODE, Config, DEFAULT_PROBE_INPUT_TOKENS, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, NATIVE_MODALITY_BY_MODEL_ID, PROBE_INPUT_TOKEN_CHOICES, PROBE_MAX_TOKENS, PROBE_SYSTEM_PROMPT, REFUSES_OFF_MODEL_IDS, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROBE_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_TPS_PATH, WORKBUDDY_USAGE_PATH, WorkBuddyCatalog, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, WorkBuddyEncryptedCredentialError, WorkBuddyUpstreamClient, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, cooldownOf, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, creditOfStream, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, defaultOffModelIds, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, imageDefaultFor, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, knownRegionOf, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, modelIdOfBody, name, nativeModalityOf, nextRegionEnabled, nextRegionSlots, offDefaultFor, openEncryptedField, outcomeOfFailure, parseCreditMultiplier, parseReasoning, parseRetryAfter, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, probeModel, probeRequestBody, probeSucceeded, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, regionsFieldIsCorrupt, regionsMapOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, settingsNamespaceOf, toPersistedWorkBuddyModel, unwrapVolatileDeep, withEffectiveOff, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };
+export { CREDENTIAL_REJECTED_CODE, Config, DEFAULT_PROBE_INPUT_TOKENS, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, NATIVE_MODALITY_BY_MODEL_ID, PROBE_INPUT_TOKEN_CHOICES, PROBE_MAX_TOKENS, PROBE_SYSTEM_PROMPT, REFUSES_OFF_MODEL_IDS, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROBE_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_TPS_PATH, WORKBUDDY_USAGE_PATH, WorkBuddyCatalog, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, WorkBuddyEncryptedCredentialError, WorkBuddyUpstreamClient, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, cooldownOf, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, creditOfStream, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, defaultOffModelIds, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, imageDefaultFor, imageToolRegionOf, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, knownRegionOf, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, modelIdOfBody, name, nativeModalityOf, nextRegionEnabled, nextRegionSlots, offDefaultFor, openEncryptedField, outcomeOfFailure, parseCreditMultiplier, parseReasoning, parseRetryAfter, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, probeModel, probeRequestBody, probeSucceeded, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, regionsFieldIsCorrupt, regionsMapOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, settingsNamespaceOf, toPersistedWorkBuddyModel, unwrapVolatileDeep, withEffectiveOff, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型（国内版与国际版）接入 DeepSeek Harness：每次刷新按上游目录自动读取每个模型的积分倍率，支持逐模型图片输入开关、多账号切换与账号池自动换号，并提供每日签到、卡片与输入框里的胶囊积分读数等只读积分概览。",
-  "version": "5.9.0",
+  "version": "5.10.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",