dsh-connect-workbuddy 5.9.0 → 5.11.0

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as parseCreditMultiplier, A as isEncryptedCredentialError, At as isEncryptedFieldWrapper, B as WorkBuddyCredentialRejectedError, Bt as writeFileAtomic, C as WorkBuddyCredentialStore, Ct as WORKBUDDY_APP_EXECUTABLE_ENV, D as defaultDesktopAuthDirs, Dt as fetchAtRestKeyPayload, E as defaultDesktopAuthCandidates, Et as deriveAtRestKeyId, F as workbuddyAccountId, Ft as readAtRestKey, G as forceNeutralHead, H as channelGateMemberOf, I as workbuddyOwnAuthPath, It as workbuddyAppExecutableCandidates, J as isCredentialRejectedError, K as isContextTooLongBody, L as CONTEXT_OVERFLOW_MARKER, M as legacyWorkbuddyOwnAuthPath, Mt as macosBundleExecutable, N as parseWorkBuddyAuth, Nt as macosNestedAppBundles, O as defaultDesktopAuthPath, Ot as findWorkbuddyAppExecutable, P as preferredAccountName, Pt as openEncryptedField, Q as openingEvidenceOfBody, R as CREDENTIAL_REJECTED_CODE, Rt as resolveDshHome, S as WORKBUDDY_AUTH_FILE_ENV, St as nativeModalityOf, T as authFileName, Tt as deriveAtRestKey, U as classifyUpstreamError, V as WorkBuddyUpstreamClient, W as declaredTools, X as knownRegionOf, Y as isFirstMessageGateBody, Z as modelIdOfBody, _ as deriveCatalog, _t as pickImageModel, a as readHostHeartbeat, at as requestEvidenceOf, b as ENCRYPTED_CREDENTIAL_CODE, bt as NATIVE_MODALITY_BY_MODEL_ID, c as WORKBUDDY_CONNECT_VERSION, ct as REFUSES_OFF_MODEL_IDS, dt as offDefaultFor, et as parseReasoning, f as piAiRuntimeInfo, ft as offRefused, g as applyContextBudgets, gt as WorkBuddyImageError, h as WorkBuddyCatalog, ht as DEFAULT_IMAGE_SIZE, i as processStartTimeMs, it as regionOf, j as isVaultAccountId, jt as isWorkbuddyBundle, k as hasEncryptedCredentialFields, l as createFileRosterSeenStore, lt as defaultOffModelIds, m as FALLBACK_WORKBUDDY_MODELS_GLOBAL, mt as withEffectiveOff, n as clearHostHeartbeat, nt as perturbChannelFingerprints, o as workbuddyHostHeartbeatPath, ot as rewriteSessionTitleModel, p as FALLBACK_WORKBUDDY_MODELS, pt as recordRefusal, q as isConversationIdGateBody, r as isHeartbeatProcessAlive, rt as prepareChatBody, s as writeHostHeartbeat, st as attachBusyLevels, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as parseUpstreamModel, ut as lastRefusalFor, v as fallbackModelsFor, vt as parseQueueAnswer, w as WorkBuddyEncryptedCredentialError, wt as clearAtRestKeyCache, x as WORKBUDDY_AUTH_FILENAME, xt as imageDefaultFor, y as withoutRouters, yt as queueNoticeText, z as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, zt as withFileLock } from "./host-heartbeat-C1tVU2IN.js";
+import { $ as parseCreditMultiplier, $t as withFileLock, A as isEncryptedCredentialError, At as pickMediaModel, B as WorkBuddyCredentialRejectedError, Bt as deriveAtRestKeyId, C as WorkBuddyCredentialStore, Ct as IMAGE_TAG_TEXT_TO_IMAGE, D as defaultDesktopAuthDirs, Dt as imageMimeForPath, E as defaultDesktopAuthCandidates, Et as imageDataUrl, F as workbuddyAccountId, Ft as imageDefaultFor, G as forceNeutralHead, Gt as isWorkbuddyBundle, H as channelGateMemberOf, Ht as findWorkbuddyAppExecutable, I as workbuddyOwnAuthPath, It as nativeModalityOf, J as isCredentialRejectedError, Jt as openEncryptedField, K as isContextTooLongBody, Kt as macosBundleExecutable, L as CONTEXT_OVERFLOW_MARKER, Lt as WORKBUDDY_APP_EXECUTABLE_ENV, M as legacyWorkbuddyOwnAuthPath, Mt as parseQueueAnswer, N as parseWorkBuddyAuth, Nt as queueNoticeText, O as defaultDesktopAuthPath, Ot as isBareBase64Image, P as preferredAccountName, Pt as NATIVE_MODALITY_BY_MODEL_ID, Q as openingEvidenceOfBody, Qt as resolveDshHome, R as CREDENTIAL_REJECTED_CODE, Rt as clearAtRestKeyCache, S as WORKBUDDY_AUTH_FILE_ENV, St as IMAGE_TAG_IMAGE_TO_IMAGE, T as authFileName, Tt as WorkBuddyImageError, U as classifyUpstreamError, V as WorkBuddyUpstreamClient, Vt as fetchAtRestKeyPayload, W as declaredTools, Wt as isEncryptedFieldWrapper, X as knownRegionOf, Xt as workbuddyAppExecutableCandidates, Y as isFirstMessageGateBody, Yt as readAtRestKey, Z as modelIdOfBody, _ as deriveCatalog, _t as WorkBuddyVideoError, a as readHostHeartbeat, at as requestEvidenceOf, b as ENCRYPTED_CREDENTIAL_CODE, bt as resolveVideoParams, c as WORKBUDDY_CONNECT_VERSION, ct as REFUSES_OFF_MODEL_IDS, dt as offDefaultFor, en as writeFileAtomic, et as parseReasoning, f as piAiRuntimeInfo, ft as offRefused, g as applyContextBudgets, gt as VIDEO_TAG_TEXT_TO_VIDEO, h as WorkBuddyCatalog, ht as VIDEO_TAG_IMAGE_TO_VIDEO, i as processStartTimeMs, it as regionOf, j as isVaultAccountId, jt as sniffImageMime, k as hasEncryptedCredentialFields, kt as parseImageDataUrl, l as createFileRosterSeenStore, lt as defaultOffModelIds, m as FALLBACK_WORKBUDDY_MODELS_GLOBAL, mt as withEffectiveOff, n as clearHostHeartbeat, nt as perturbChannelFingerprints, o as workbuddyHostHeartbeatPath, ot as rewriteSessionTitleModel, p as FALLBACK_WORKBUDDY_MODELS, pt as recordRefusal, q as isConversationIdGateBody, qt as macosNestedAppBundles, r as isHeartbeatProcessAlive, rt as prepareChatBody, s as writeHostHeartbeat, st as attachBusyLevels, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as parseUpstreamModel, ut as lastRefusalFor, v as fallbackModelsFor, vt as parseSupportedSecondsRange, w as WorkBuddyEncryptedCredentialError, wt as MAX_INPUT_IMAGE_BYTES, x as WORKBUDDY_AUTH_FILENAME, xt as DEFAULT_IMAGE_SIZE, y as withoutRouters, yt as pickVideoModel, z as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, zt as deriveAtRestKey } from "./host-heartbeat-BYdr-pVq.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, open, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -10,7 +10,7 @@ import { createAssistantMessageEventStream, createProvider, isContextOverflow }
 import { openAICompletionsApi } from "@earendil-works/pi-ai/api/openai-completions.lazy";
 import { ReasoningEffortId, createUserMessage, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
-import { pathToFileURL } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import { createServer } from "node:http";
 import { Readable } from "node:stream";
 import { isIP } from "node:net";
@@ -311,6 +311,18 @@ const WORKBUDDY_ACCOUNT_CREDITS_PATH = "/plugins/dsh-connect-workbuddy/account-c
 const WORKBUDDY_BENEFIT_CLAIM_PATH = "/plugins/dsh-connect-workbuddy/benefit/claim";
 /** Plugin-owned live model refresh endpoint. */
 const WORKBUDDY_MODELS_REFRESH_PATH = "/plugins/dsh-connect-workbuddy/models/refresh";
+/**
+* Plugin-owned MEDIA model list endpoint (image + video, read from the region's
+* `/v3/config`).
+*
+* Separate from {@link WORKBUDDY_MODELS_REFRESH_PATH} because it answers a
+* different question from a different document projection: the refresh route
+* returns the CHAT roster, from which `selectCliModels` drops every media
+* entry, while this one keeps the `text-to-image`/`image-to-image`/
+* `text-to-video`/`image-to-video` rows the card lists. Read-only and free —
+* it is the same GET the image tool already performs.
+*/
+const WORKBUDDY_MEDIA_MODELS_PATH = "/plugins/dsh-connect-workbuddy/media-models";
 /** Plugin-owned local account rescan endpoint. */
 const WORKBUDDY_ACCOUNTS_REFRESH_PATH = "/plugins/dsh-connect-workbuddy/accounts/refresh";
 /** Plugin-owned daily check-in action endpoint. */
@@ -4868,7 +4880,8 @@ function createWorkBuddyShim(options) {
 //#endregion
 //#region src/image-tool.ts
 /**
-* `workbuddy_draw_image`：把 WorkBuddy 国内区的文生图能力暴露成一个 DSH agent 工具。
+* `workbuddy_draw_image`：把 WorkBuddy 的文生图能力（国内区与国际区各自的
+* `text-to-image` 模型）暴露成一个 DSH agent 工具。
 *
 * 为什么手写 ToolDefinition 而不 import `@deepseek-ai/dsh-tools` 的 `defineTool`：
 * 宿主 `Tools.register` 只校验两件事——`output.render` 是函数、`output.schema` 是
@@ -4886,14 +4899,14 @@ function createWorkBuddyShim(options) {
 const WORKBUDDY_IMAGE_TOOL_NAME = "workbuddy_draw_image";
 /** 工具单次执行的上限。实测一张图 17–39 秒，留足余量。 */
 const IMAGE_TOOL_TIMEOUT_MS = 18e4;
-/** 媒体模型目录的缓存时长：目录变化很慢，不必每张图都重新读一遍。 */
-const MEDIA_MODEL_TTL_MS = 3e5;
+/** 下载远程输入图的上限（只覆盖 http(s) 那一次 GET，不含生图本身）。 */
+const IMAGE_INPUT_TIMEOUT_MS = 3e4;
 /** 失败后的冷却：生图按张扣积分，连续重试会在几秒内烧掉几十积分。 */
-const FAILURE_COOLDOWN_MS = 3e4;
-function asRecord(value) {
+const FAILURE_COOLDOWN_MS$1 = 3e4;
+function asRecord$1(value) {
 	return typeof value === "object" && value !== null ? value : {};
 }
-function asNonEmptyString(value) {
+function asNonEmptyString$1(value) {
 	return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
 }
 /**
@@ -4904,7 +4917,7 @@ function asNonEmptyString(value) {
 * 这些失败码都发生在「请求已经发出去」之后——上游可能已经扣了积分或排了队，
 * 连续重试只会把它们再花一遍，所以进冷却。
 */
-const BILLABLE_FAILURE_CODES = /* @__PURE__ */ new Set([
+const BILLABLE_FAILURE_CODES$1 = /* @__PURE__ */ new Set([
 	"AUTH",
 	"RATE_LIMIT",
 	"NO_ROUTE",
@@ -4922,9 +4935,9 @@ const BILLABLE_FAILURE_CODES = /* @__PURE__ */ new Set([
 *
 * 现在由调用点显式置位：请求发出去了才置 `sent`，冷却只看它。
 */
-function isBillableFailure(error, sent) {
+function isBillableFailure$1(error, sent) {
 	if (!sent) return false;
-	if (error instanceof WorkBuddyImageError) return BILLABLE_FAILURE_CODES.has(error.code);
+	if (error instanceof WorkBuddyImageError) return BILLABLE_FAILURE_CODES$1.has(error.code);
 	return true;
 }
 /** 把 b64 图片落成一个临时文件，返回绝对路径。 */
@@ -4938,18 +4951,82 @@ async function writeTempImage(b64, model) {
 	return path;
 }
 /**
+* 输入图的一切毛病都发生在「请求还没发出去」之前，所以统一用 INVALID_ARGS：
+* 不进冷却、不花积分，错误信息直接说清是哪个环节。
+*/
+function inputImageError(message) {
+	return new WorkBuddyImageError(message, "INVALID_ARGS");
+}
+const INLINE_BASE64_LABEL = "（内联 base64）";
+const INLINE_DATA_URL_LABEL = "（内联 data URL）";
+/**
+* 体积与空文件闸门——四种输入形态都从这里过，所以「空文件」和「超过 8 MB」的
+* 文案只有一份。
+*
+* `byteLength` 必须是**解码后**的字节数：base64 比原始字节长约 4/3，拿字符串长度
+* 比上限度会把一个 6 MB 的图误判成超限（并在错误信息里报出一个虚高的 MB 数）。
+*/
+function assertInputImageBytes(byteLength, source) {
+	if (byteLength === 0) throw inputImageError(`workbuddy image: 输入图是空文件：${source}`);
+	if (byteLength > 8388608) {
+		const limit = MAX_INPUT_IMAGE_BYTES / 1024 / 1024;
+		throw inputImageError(`workbuddy image: 输入图 ${(byteLength / 1024 / 1024).toFixed(1)} MB，超过 ${limit} MB 上限：${source}`);
+	}
+}
+/**
+* 把任意形态的输入图规整成上游唯一接受的形态：`data:<mime>;base64,<b64>`。
+*
+* 官方 CLI 的 `processImageInput` 收 data URL、http(s)、裸 base64、本地路径四
+* 种；这里只是把前三种归一，**不做**缩放、裁剪、格式转换——用户给什么就传什么，
+* 免得悄悄改了输入图。
+*/
+async function resolveImageInput(value, signal) {
+	const text = value.trim();
+	if (text.startsWith("data:")) {
+		const parsed = parseImageDataUrl(text);
+		if (parsed === void 0) throw inputImageError("workbuddy image: image 看起来是 data URL，但格式不对（需要 data:image/*;base64,...）。");
+		assertInputImageBytes(Buffer.from(parsed.base64, "base64").byteLength, INLINE_DATA_URL_LABEL);
+		return text;
+	}
+	if (/^https?:\/\//i.test(text)) {
+		let response;
+		try {
+			response = await fetch(text, { signal: signal ?? AbortSignal.timeout(IMAGE_INPUT_TIMEOUT_MS) });
+		} catch (error) {
+			throw inputImageError(`workbuddy image: 下载输入图失败（${text}）：` + (error instanceof Error ? error.message : String(error)));
+		}
+		if (!response.ok) throw inputImageError(`workbuddy image: 下载输入图失败（HTTP ${response.status}）：${text}`);
+		return encodeInputImage(new Uint8Array(await response.arrayBuffer()), response.headers.get("content-type") ?? void 0, text);
+	}
+	if (isBareBase64Image(text)) return encodeInputImage(new Uint8Array(Buffer.from(text, "base64")), void 0, INLINE_BASE64_LABEL);
+	const path = text.startsWith("file:") ? fileURLToPath(text) : text;
+	let bytes;
+	try {
+		bytes = await readFile(path);
+	} catch (error) {
+		throw inputImageError(`workbuddy image: 读不到输入图「${path}」：` + (error instanceof Error ? error.message : String(error)));
+	}
+	return encodeInputImage(new Uint8Array(bytes), void 0, path);
+}
+/** 校验体积、定出 mime，再把字节编成 data URL。 */
+function encodeInputImage(bytes, contentType, source) {
+	assertInputImageBytes(bytes.byteLength, source);
+	const declared = contentType?.split(";")[0]?.trim().toLowerCase();
+	const mime = declared !== void 0 && declared.startsWith("image/") ? declared : imageMimeForPath(source) ?? sniffImageMime(bytes);
+	return imageDataUrl(mime, Buffer.from(bytes).toString("base64"));
+}
+/**
 * 造出工具定义。
 *
 * 每次 `apply()` 只造一个实例，所以冷却状态与目录缓存都挂在闭包里，
 * 生命周期跟着插件走。
 */
 function createImageTool(deps) {
-	const regionLabel = deps.regionLabel ?? "国内区";
 	let mediaCache;
 	let cooldownUntil = 0;
 	const listModels = async (credential, signal) => {
 		const now = Date.now();
-		if (mediaCache !== void 0 && now - mediaCache.at < MEDIA_MODEL_TTL_MS) return mediaCache.models;
+		if (mediaCache !== void 0 && now - mediaCache.at < 3e5) return mediaCache.models;
 		const models = await deps.listMediaModels(credential, signal);
 		mediaCache = {
 			at: now,
@@ -4959,7 +5036,7 @@ function createImageTool(deps) {
 	};
 	return {
 		name: WORKBUDDY_IMAGE_TOOL_NAME,
-		description: "用当前账号的 WorkBuddy 生图能力画一张图（文生图）。只在国内区账号下可用；国际区没有生图模型。每张图会真实消耗 WorkBuddy 积分（实测约 5.71 积分/张），不要在没必要时调用，也不要为了试错连续调用。返回的是 COS 签名 URL，约 24 小时后失效；需要展示给用户时，用 markdown 图片语法引用该 URL。",
+		description: "用当前账号的 WorkBuddy 生图能力画一张图。不填 image 是文生图（用该区带 text-to-image 标签的模型）；填了 image 是改图（用带 image-to-image 标签的模型）。国内区与国际区都可用，模型取自该区产品配置（国内区文生图 hunyuan-image-alpha、改图 hunyuan-image-alpha-edit；国际区 hy-image-3.5 同时带这两个标签，以该区目录为准）。每张图会真实消耗 WorkBuddy 积分，单价随区域与模型不同，以返回结果里的 credit 为准；不要在没必要时调用，也不要为了试错连续调用。返回的是 COS 签名 URL，约 24 小时后失效；需要展示给用户时，用 markdown 图片语法引用该 URL。",
 		parameters: {
 			type: "object",
 			properties: {
@@ -4969,11 +5046,15 @@ function createImageTool(deps) {
 				},
 				size: {
 					type: "string",
-					description: `图片尺寸，形如 1024x1024。默认 ${DEFAULT_IMAGE_SIZE}。`
+					description: `图片尺寸，写成「宽x高」（像素）。比例由宽高决定，不限于方图。常用三档：方图 1024x1024、竖图 1024x1536、横图 1536x1024。要大图就按「总像素 419 万以内」放，出的是真实像素不是插值放大：2048x2048（4.19MP，方形上限）、2048x1536、2560x1440（16:9 桌面壁纸）、2560x1600。竖版同理，把长边放到 2048–2560 那一档。超过这个量级会被上游直接拒绝、不会悄悄降级（2560x2560、3072x3072、4096x4096 都失败），所以不要填 4K 尺寸，也不要指望传大数字能拿到更多细节。不填默认 ${DEFAULT_IMAGE_SIZE}（方图）。用户要竖版 / 横版 / 手机壁纸 / 封面 / 高清大图时，改这里的宽高，不要只在 prompt 里说。`
+				},
+				image: {
+					type: "string",
+					description: "输入图，可选。填了就是改图（image-to-image）；不填就是文生图。接受本地绝对路径、file:// URL、http(s) URL、data URL 或裸 base64。上限 8 MB，不做缩放或格式转换。"
 				},
 				model: {
 					type: "string",
-					description: "生图模型 id，可选。不填就用产品配置里第一个带 text-to-image 标签的模型（国内区即 hunyuan-image-alpha）。填了但目录里没有会直接报错，不会盲发。"
+					description: "模型 id，可选。不填就用该区目录里第一个带当前模式标签的模型（文生图看 text-to-image，改图看 image-to-image）。填了但该 tag 组里没有会直接报错，不会盲发。"
 				}
 			},
 			required: ["prompt"],
@@ -4987,9 +5068,13 @@ function createImageTool(deps) {
 						type: "string",
 						description: "图片地址（COS 签名 URL，或本地 file:// 地址）。"
 					},
+					mode: {
+						type: "string",
+						description: "'generate'（文生图）或 'edit'（改图）。"
+					},
 					model: {
 						type: "string",
-						description: "实际使用的生图模型 id。"
+						description: "实际使用的模型 id。"
 					},
 					prompt: {
 						type: "string",
@@ -5010,6 +5095,7 @@ function createImageTool(deps) {
 				},
 				required: [
 					"url",
+					"mode",
 					"model",
 					"prompt",
 					"hint"
@@ -5017,16 +5103,17 @@ function createImageTool(deps) {
 				additionalProperties: false
 			},
 			render(_args, value) {
-				const record = asRecord(value);
-				const url = asNonEmptyString(record["url"]) ?? "";
-				const model = asNonEmptyString(record["model"]) ?? "unknown";
+				const record = asRecord$1(value);
+				const url = asNonEmptyString$1(record["url"]) ?? "";
+				const model = asNonEmptyString$1(record["model"]) ?? "unknown";
+				const mode = record["mode"] === "edit" ? "改图" : "文生图";
 				const credit = typeof record["credit"] === "number" ? record["credit"] : void 0;
-				const path = asNonEmptyString(record["path"]);
-				const hint = asNonEmptyString(record["hint"]) ?? "";
+				const path = asNonEmptyString$1(record["path"]);
+				const hint = asNonEmptyString$1(record["hint"]) ?? "";
 				const lines = [
-					`![WorkBuddy 生图](${url})`,
+					`![WorkBuddy ${mode}](${url})`,
 					"",
-					`模型：\`${model}\`${credit === void 0 ? "" : ` · 消耗 ${credit} 积分`}`
+					`${mode} · 模型：\`${model}\`${credit === void 0 ? "" : ` · 消耗 ${credit} 积分`}`
 				];
 				if (path !== void 0) lines.push(`本地文件：${path}`);
 				if (hint !== "") lines.push("", hint);
@@ -5038,33 +5125,42 @@ function createImageTool(deps) {
 		},
 		timeoutMs: IMAGE_TOOL_TIMEOUT_MS,
 		async execute(args, exec) {
-			const record = asRecord(args);
-			const prompt = asNonEmptyString(record["prompt"]);
+			const record = asRecord$1(args);
+			const prompt = asNonEmptyString$1(record["prompt"]);
 			if (prompt === void 0) throw new WorkBuddyImageError(`${WORKBUDDY_IMAGE_TOOL_NAME}: 参数 prompt 必填，且必须是非空字符串。`, "INVALID_ARGS");
-			const size = asNonEmptyString(record["size"]) ?? "1024x1024";
-			const requestedModel = asNonEmptyString(record["model"]);
+			const size = asNonEmptyString$1(record["size"]) ?? "1024x1024";
+			const requestedModel = asNonEmptyString$1(record["model"]);
+			const image = asNonEmptyString$1(record["image"]);
 			const now = Date.now();
 			if (now < cooldownUntil) {
 				const seconds = Math.ceil((cooldownUntil - now) / 1e3);
 				throw new WorkBuddyImageError(`workbuddy image: 上一次生图刚失败过，请 ${seconds} 秒后再试（失败冷却是为了避免连续重试白白烧积分）。`, "COOLDOWN");
 			}
 			const credential = await deps.resolveCredential();
-			if (credential === void 0) throw new WorkBuddyImageError(`workbuddy image: ${regionLabel}未登录 WorkBuddy。请先在插件设置里登录国内区账号，再调用生图工具。`, "NOT_LOGGED_IN");
+			if (credential === void 0) throw new WorkBuddyImageError("workbuddy image: 没有可用的 WorkBuddy 账号——要么两个区都没登录，要么已登录的那个区没有打开「允许模型自主生图」。请先在插件设置里登录该区账号，并打开那个开关。", "NOT_LOGGED_IN");
 			const signal = exec.signal === void 0 ? AbortSignal.timeout(IMAGE_TOOL_TIMEOUT_MS) : AbortSignal.any([exec.signal, AbortSignal.timeout(IMAGE_TOOL_TIMEOUT_MS)]);
 			let sent = false;
 			try {
 				const models = await listModels(credential, signal);
-				const model = pickImageModel(models, requestedModel);
+				const input = image === void 0 ? void 0 : await resolveImageInput(image, signal);
+				const model = pickMediaModel(models, requestedModel, input === void 0 ? IMAGE_TAG_TEXT_TO_IMAGE : IMAGE_TAG_IMAGE_TO_IMAGE);
 				sent = true;
-				const outcome = await deps.generateImage(credential, {
+				const outcome = input === void 0 ? await deps.generateImage(credential, {
 					model: model.id,
 					prompt,
 					size
+				}, signal) : await deps.editImage(credential, {
+					model: model.id,
+					prompt,
+					size,
+					image: [input]
 				}, signal);
+				const mode = input === void 0 ? "generate" : "edit";
 				const value = {
+					mode,
 					model: model.id,
 					prompt,
-					hint: `这张图来自 WorkBuddy（模型 ${model.id}），每张约消耗 5.71 积分。COS 签名 URL 约 24 小时失效；要长期保留请及时下载。` + (outcome.credit === void 0 ? "" : `本次实际扣费 ${outcome.credit} 积分。`)
+					hint: `这张图来自 WorkBuddy（模型 ${model.id}，${mode === "edit" ? "改图" : "文生图"}）。按张扣积分，单价随区域与模型不同` + (outcome.credit === void 0 ? "（本次响应没带扣费字段，以额度面板为准）。" : `；本次实际扣费 ${outcome.credit} 积分。`) + "COS 签名 URL 约 24 小时失效；要长期保留请及时下载。"
 				};
 				if (outcome.url !== void 0) value["url"] = outcome.url;
 				else if (outcome.b64 !== void 0) {
@@ -5076,7 +5172,7 @@ function createImageTool(deps) {
 				if (outcome.credit !== void 0) value["credit"] = outcome.credit;
 				return value;
 			} catch (error) {
-				if (isBillableFailure(error, sent)) cooldownUntil = Date.now() + FAILURE_COOLDOWN_MS;
+				if (isBillableFailure$1(error, sent)) cooldownUntil = Date.now() + FAILURE_COOLDOWN_MS$1;
 				throw error;
 			}
 		}
@@ -5097,6 +5193,379 @@ function registerWorkBuddyImageTool(tools, deps) {
 	}
 }
 //#endregion
+//#region src/video-tool.ts
+/**
+* `workbuddy_draw_video`：把 WorkBuddy 的视频生成能力（国内区与国际区各自的
+* `text-to-video` / `image-to-video` 模型）暴露成一个 DSH agent 工具。
+*
+* 与生图工具（一次同步请求就拿回图片）不同，视频是**异步任务**：
+* 先 `submitVideo` 拿到 task id，再 `pollVideoTask` 轮询到 completed，
+* 最后 `downloadVideo` 把每条视频 URL 落成本地 `.mp4`。这一整段都照搬
+* 官方 CLI 的 `VideoService`（submitTask / pollTask / downloadVideos），
+* 详见 docs/VIDEO_GEN.md。
+*
+* 参数 / 选模型层与生图工具几乎完全一致（共用 MEDIA_TAGS、video 标签常量、
+* 媒体目录缓存），所以「接受参数」这部分本插件已经就绪；真正多写的是
+* 上面那段异步执行流程。
+*
+* 为什么手写 ToolDefinition（不 import `@deepseek-ai/dsh-tools` 的 `defineTool`）：
+* 同 image-tool.ts 的注释——宿主 `Tools.register` 只校验 `output.render` 是函数、
+* `output.schema` 是受支持的 JSON Schema，`schemaOf()` 把 `parameters` 原样投影，
+* 手写换来零新 peer 依赖、不会触发 tests/host-peers.spec.ts 对可达图的断言。
+*
+* @module dsh-connect-workbuddy/video-tool
+*/
+/** 工具名。宿主禁止 `run_code`，这个名字与其它 connect 插件的命名习惯一致。 */
+const WORKBUDDY_VIDEO_TOOL_NAME = "workbuddy_draw_video";
+/** 工具单次执行的上限：提交 + 轮询（最多 ~10 分钟）+ 下载，留足余量。 */
+const VIDEO_TOOL_TIMEOUT_MS = 6e5;
+/** 下载远程输入图（图生视频时）的上限，不含生视频本身。 */
+const VIDEO_INPUT_TIMEOUT_MS = 3e4;
+/** 失败后的冷却：视频按次扣积分且一次要几十秒，连续重试会烧掉大量积分。 */
+const FAILURE_COOLDOWN_MS = 6e4;
+function asRecord(value) {
+	return typeof value === "object" && value !== null ? value : {};
+}
+function asNonEmptyString(value) {
+	return typeof value === "string" && value.trim() !== "" ? value.trim() : void 0;
+}
+function asNumber(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function asBoolean(value) {
+	return typeof value === "boolean" ? value : void 0;
+}
+/**
+* 这些失败说明请求真的打到了上游、可能已经扣了积分，才值得进冷却。
+* 参数写错 / 未登录 / 目录里没有模型都还没花钱，轮询也已先花过提交那次的钱。
+*
+* 注意 `REJECTED` **不在**这里：提交阶段被上游 4xx 退回时任务根本没创建、
+* 积分没花，冷却只会让一次「参数写错了」变成白等一分钟。
+*/
+const BILLABLE_FAILURE_CODES = /* @__PURE__ */ new Set([
+	"AUTH",
+	"RATE_LIMIT",
+	"NO_ROUTE",
+	"UPSTREAM",
+	"EMPTY_RESULT",
+	"TASK_FAILED",
+	"POLL_TIMEOUT"
+]);
+/**
+* 是否该进冷却——由「这一次到底有没有把生视频请求发出去」决定。
+* 读目录 / 选模型 / 参数校验全在「发请求」之前，失败了不花积分、不冷却。
+* 一旦 `submitVideo` 被调用，提交那次就花钱了，后续轮询 / 下载失败一律进冷却。
+*/
+function isBillableFailure(error, sent) {
+	if (!sent) return false;
+	if (error instanceof WorkBuddyVideoError) return BILLABLE_FAILURE_CODES.has(error.code);
+	return true;
+}
+/**
+* 把任意形态的输入图规整成上游唯一接受的形态：data URL 或 http(s) URL。
+*
+* 图生视频的 `image_url` 字段只接受上游可访问的 URL。本地文件路径必须
+* 读进来、编码成 data URL 再发，否则上游读到的是空响应，返回
+* "Input ImageUrl data is invalid (too short)"。与 `image-tool.ts` 的
+* `resolveImageInput` 同一套逻辑：data URL 校验后直传，http(s) 校验可达性
+* 后直传，裸 base64 / 本地路径 / file:// 读文件编成 data URL。不做缩放
+* 或格式转换——用户给什么就传什么。
+*/
+async function resolveVideoImageInput(value, signal) {
+	const text = value.trim();
+	if (text.startsWith("data:")) {
+		const parsed = parseImageDataUrl(text);
+		if (parsed === void 0) throw new WorkBuddyVideoError("workbuddy video: image 看起来是 data URL，但格式不对（需要 data:image/*;base64,...）。", "INVALID_ARGS");
+		assertVideoInputImageBytes(Buffer.from(parsed.base64, "base64").byteLength, "（内联 data URL）");
+		return text;
+	}
+	if (/^https?:\/\//i.test(text)) {
+		try {
+			const response = await fetch(text, {
+				method: "HEAD",
+				signal: signal ?? AbortSignal.timeout(VIDEO_INPUT_TIMEOUT_MS)
+			});
+			if (!response.ok) throw new WorkBuddyVideoError(`workbuddy video: 输入图 URL 不可达（HTTP ${response.status}）: ${text}`, "INVALID_ARGS");
+		} catch (error) {
+			if (error instanceof WorkBuddyVideoError) throw error;
+			throw new WorkBuddyVideoError(`workbuddy video: 校验输入图 URL 失败（${text}）：` + (error instanceof Error ? error.message : String(error)), "INVALID_ARGS");
+		}
+		return text;
+	}
+	if (isBareBase64Image(text)) return encodeVideoInputImage(Buffer.from(text, "base64"), "（内联 base64）");
+	const path = text.startsWith("file:") ? fileURLToPath(text) : text;
+	let bytes;
+	try {
+		bytes = await readFile(path);
+	} catch (error) {
+		throw new WorkBuddyVideoError(`workbuddy video: 读不到输入图「${path}」：` + (error instanceof Error ? error.message : String(error)), "INVALID_ARGS");
+	}
+	return encodeVideoInputImage(bytes, path);
+}
+/**
+* 体积与空文件闸门——所有输入图都从这里过，所以「空文件」和「超过 8 MB」
+* 的文案只有一份。与 `image-tool.ts` 的 `assertInputImageBytes` 同逻辑。
+*
+* `byteLength` 必须是解码后的字节数：base64 比原始字节长约 4/3。
+*/
+function assertVideoInputImageBytes(byteLength, source) {
+	if (byteLength === 0) throw new WorkBuddyVideoError(`workbuddy video: 输入图是空文件：${source}`, "INVALID_ARGS");
+	if (byteLength > 8388608) {
+		const limit = MAX_INPUT_IMAGE_BYTES / 1024 / 1024;
+		const actual = (byteLength / 1024 / 1024).toFixed(1);
+		throw new WorkBuddyVideoError(`workbuddy video: 输入图 ${actual} MB，超过 ${limit} MB 上限：${source}`, "INVALID_ARGS");
+	}
+}
+/** 校验体积、定出 MIME，再把字节编成 data URL。 */
+function encodeVideoInputImage(bytes, source) {
+	assertVideoInputImageBytes(bytes.byteLength, source);
+	const mime = imageMimeForPath(source) ?? sniffImageMime(bytes);
+	return imageDataUrl(mime, Buffer.from(bytes).toString("base64"));
+}
+/**
+* 造出工具定义。每次 `apply()` 只造一个实例，冷却状态与目录缓存都挂在闭包里，
+* 生命周期跟着插件走。
+*/
+function createVideoTool(deps) {
+	let mediaCache;
+	let cooldownUntil = 0;
+	/**
+	* 上游在拒绝一次提交时顺带告诉我们的「这个模型支持几秒」。
+	*
+	* 目录里没有 `videoGeneration` 的账号（实测国内区部分账号的 `/v3/config`
+	* 条目只有 `{id,name,tags}`）本地无从校验，只能让上游先拒一次。它拒的时候
+	* 会把区间写在文案里，这里记下来：同一个进程里第二次给同样的越界值，就在本地
+	* 被 `resolveVideoParams` 拦下——零请求、零冷却。键带上区域名，因为模型 id
+	* 不跨区（同名 id 在两个区可能是不同模型）。
+	*/
+	const learnedSeconds = /* @__PURE__ */ new Map();
+	const secondsKey = (domain, modelId) => `${domain}|${modelId}`;
+	const listModels = async (credential, signal) => {
+		const now = Date.now();
+		if (mediaCache !== void 0 && now - mediaCache.at < 3e5) return mediaCache.models;
+		const models = await deps.listMediaModels(credential, signal);
+		mediaCache = {
+			at: now,
+			models
+		};
+		return models;
+	};
+	return {
+		name: WORKBUDDY_VIDEO_TOOL_NAME,
+		description: "用当前账号的 WorkBuddy 视频生成能力生成一段短视频。不填 image 是文生视频（用该区带 text-to-video 标签的模型）；填了 image 是图生视频（用带 image-to-video 标签的模型）。国内区与国际区都可用，模型取自该区产品配置（国内区 kling-video-v3、minimax-video-h3；国际区 kling-video-v3，两种 video tag 都有；以该区目录为准）。视频是异步任务：先提交、再轮询到完成、最后把视频下载到本地，单次可能要几十秒到几分钟。每次生成会真实消耗 WorkBuddy 积分，单价随区域与模型不同，以返回结果里的 credit 为准；不要在没必要时调用，也不要为了试错连续调用。返回的是本地 .mp4 文件路径（file:// URL），由宿主/客户端打开或下载。",
+		parameters: {
+			type: "object",
+			properties: {
+				prompt: {
+					type: "string",
+					description: "画面描述（中文或英文都可以），≤2500 字符。写清楚主体、动作、风格、镜头。"
+				},
+				image: {
+					type: "string",
+					description: "输入图，可选。填了就是图生视频（image-to-video）；不填就是文生视频。接受本地绝对路径、file:// URL、http(s) URL、data URL 或裸 base64。上限 8 MB，不做缩放或格式转换。"
+				},
+				model: {
+					type: "string",
+					description: "模型 id，可选。不填就用用户在设置卡片上按模式钉住的模型；卡片上没钉就用该区目录里第一个带当前模式标签的模型（文生视频看 text-to-video，图生视频看 image-to-video）。填了但该 tag 组里没有会直接报错，不会盲发。"
+				},
+				seconds: {
+					type: "number",
+					description: "视频时长（秒），可选。不填用模型默认（通常 5s）。该模型在目录里给了 videoGeneration.minSeconds..maxSeconds 时，越界直接报错、不会静默夹取；目录没给区间时交给上游判断，被拒的错误里会带上游支持的范围，改完可立刻重试（不计失败冷却）。"
+				},
+				resolution: {
+					type: "string",
+					description: "分辨率，可选，如 720P / 1080P（大小写不敏感，按模型目录里的拼写发）。不填用模型默认。该模型在目录里给了 videoGeneration.resolutions 时，不在列内会回落到默认分辨率并给出告警；目录没给这份清单时原样透传，交给上游判断（与 seconds 同一条判据）。"
+				},
+				aspect_ratio: {
+					type: "string",
+					description: "画面比例，仅文生视频有效，可选：16:9 / 9:16 / 1:1。不填默认 16:9。图生视频由输入图决定比例，传了会被忽略。"
+				},
+				negative_prompt: {
+					type: "string",
+					description: "不希望出现的元素，可选，≤2500 字符。"
+				},
+				enable_audio: {
+					type: "boolean",
+					description: "是否生成带声音的视频，可选，默认 true。"
+				}
+			},
+			required: ["prompt"],
+			additionalProperties: false
+		},
+		output: {
+			schema: {
+				type: "object",
+				properties: {
+					videos: {
+						type: "array",
+						items: { type: "string" },
+						description: "生成的视频本地路径列表（file:// URL，.mp4）。"
+					},
+					mode: {
+						type: "string",
+						description: "'text-to-video' 或 'image-to-video'。"
+					},
+					model: {
+						type: "string",
+						description: "实际使用的模型 id。"
+					},
+					prompt: {
+						type: "string",
+						description: "实际提交的画面描述。"
+					},
+					seconds: {
+						type: "number",
+						description: "实际使用的时长（秒）。"
+					},
+					resolution: {
+						type: "string",
+						description: "实际使用的分辨率。"
+					},
+					hint: {
+						type: "string",
+						description: "给模型的后续提示（如何打开、扣费）。"
+					},
+					credit: {
+						type: "number",
+						description: "本次实际消耗的 WorkBuddy 积分。"
+					}
+				},
+				required: [
+					"videos",
+					"mode",
+					"model",
+					"prompt",
+					"seconds",
+					"resolution",
+					"hint"
+				],
+				additionalProperties: false
+			},
+			render(_args, value) {
+				const record = asRecord(value);
+				const videos = Array.isArray(record["videos"]) ? record["videos"].filter((v) => typeof v === "string") : [];
+				const model = asNonEmptyString(record["model"]) ?? "unknown";
+				const modeLabel = record["mode"] === "image-to-video" ? "图生视频" : "文生视频";
+				const seconds = typeof record["seconds"] === "number" ? record["seconds"] : void 0;
+				const resolution = asNonEmptyString(record["resolution"]);
+				const credit = typeof record["credit"] === "number" ? record["credit"] : void 0;
+				const hint = asNonEmptyString(record["hint"]) ?? "";
+				const lines = [`${modeLabel} · 模型：${model}` + (seconds === void 0 ? "" : ` · ${seconds}s`) + (resolution === void 0 ? "" : ` · ${resolution}`) + (credit === void 0 ? "" : ` · 消耗 ${credit} 积分`), ""];
+				if (videos.length === 0) lines.push("（没有返回任何视频文件）");
+				else videos.forEach((v, i) => {
+					lines.push(`视频 ${i + 1}: [${v}](${v})`);
+				});
+				if (hint !== "") lines.push("", hint);
+				return [{
+					type: "text",
+					text: lines.join("\n")
+				}];
+			}
+		},
+		timeoutMs: VIDEO_TOOL_TIMEOUT_MS,
+		async execute(args, exec) {
+			const record = asRecord(args);
+			const prompt = asNonEmptyString(record["prompt"]);
+			if (prompt === void 0) throw new WorkBuddyVideoError(`${WORKBUDDY_VIDEO_TOOL_NAME}: 参数 prompt 必填，且必须是非空字符串。`, "INVALID_ARGS");
+			const requestedModel = asNonEmptyString(record["model"]);
+			const requestedSeconds = asNumber(record["seconds"]);
+			const requestedResolution = asNonEmptyString(record["resolution"]);
+			const requestedAspectRatio = asNonEmptyString(record["aspect_ratio"]);
+			const requestedNegativePrompt = asNonEmptyString(record["negative_prompt"]);
+			const requestedEnableAudio = asBoolean(record["enable_audio"]);
+			const image = asNonEmptyString(record["image"]);
+			const now = Date.now();
+			if (now < cooldownUntil) {
+				const seconds = Math.ceil((cooldownUntil - now) / 1e3);
+				throw new WorkBuddyVideoError(`workbuddy video: 上一次生视频刚失败过，请 ${seconds} 秒后再试（失败冷却是为了避免连续重试白白烧积分）。`, "COOLDOWN");
+			}
+			const credential = await deps.resolveCredential();
+			if (credential === void 0) throw new WorkBuddyVideoError("workbuddy video: 没有可用的 WorkBuddy 账号——要么两个区都没登录，要么已登录的那个区没有打开「允许模型自主生图」。请先在插件设置里登录该区账号，并打开那个开关。", "NOT_LOGGED_IN");
+			const signal = exec.signal === void 0 ? AbortSignal.timeout(VIDEO_TOOL_TIMEOUT_MS) : AbortSignal.any([exec.signal, AbortSignal.timeout(VIDEO_TOOL_TIMEOUT_MS)]);
+			let sent = false;
+			let chosen;
+			try {
+				const models = await listModels(credential, signal);
+				const imageInput = image === void 0 ? void 0 : await resolveVideoImageInput(image, signal);
+				const tag = imageInput === void 0 ? VIDEO_TAG_TEXT_TO_VIDEO : VIDEO_TAG_IMAGE_TO_VIDEO;
+				const pinned = requestedModel === void 0 ? deps.preferredVideoModel?.(credential, tag) : void 0;
+				let model;
+				try {
+					model = pickVideoModel(models, requestedModel ?? pinned, tag);
+				} catch (error) {
+					if (requestedModel !== void 0 || pinned === void 0) throw error;
+					model = pickVideoModel(models, void 0, tag);
+				}
+				chosen = model;
+				const learned = learnedSeconds.get(secondsKey(credential.domain, model.id));
+				const modelConfig = learned === void 0 ? model.videoGeneration : {
+					...model.videoGeneration,
+					...learned
+				};
+				const resolved = resolveVideoParams({
+					model: model.id,
+					prompt,
+					seconds: requestedSeconds,
+					negativePrompt: requestedNegativePrompt,
+					image: imageInput,
+					resolution: requestedResolution,
+					aspectRatio: requestedAspectRatio,
+					enableAudio: requestedEnableAudio
+				}, modelConfig);
+				const request = {
+					model: model.id,
+					prompt,
+					seconds: resolved.seconds,
+					negativePrompt: requestedNegativePrompt,
+					image: imageInput,
+					resolution: resolved.resolution,
+					aspectRatio: resolved.aspectRatio,
+					enableAudio: requestedEnableAudio
+				};
+				sent = true;
+				const submission = await deps.submitVideo(credential, request, signal);
+				const outcome = await deps.pollVideoTask(credential, submission.taskId, signal);
+				const paths = [];
+				for (const url of outcome.videos) {
+					const local = await deps.downloadVideo(credential, url, signal);
+					paths.push(pathToFileURL(local).href);
+				}
+				const mode = imageInput === void 0 ? "text-to-video" : "image-to-video";
+				const value = {
+					videos: paths,
+					mode,
+					model: model.id,
+					prompt,
+					seconds: resolved.seconds,
+					resolution: resolved.resolution ?? "",
+					hint: `这段视频来自 WorkBuddy（模型 ${model.id}，${mode === "image-to-video" ? "图生视频" : "文生视频"}）。按次扣积分，单价随区域与模型不同` + (outcome.credit === void 0 ? "（本次响应没带扣费字段，以额度面板为准）。" : `；本次实际扣费 ${outcome.credit} 积分。`) + (resolved.warnings.length > 0 ? ` 提示：${resolved.warnings.join("；")}。` : "") + "视频已下载到本地，请用 file:// 链接打开或下载保存。"
+				};
+				if (outcome.credit !== void 0) value["credit"] = outcome.credit;
+				return value;
+			} catch (error) {
+				if (error instanceof WorkBuddyVideoError && error.code === "REJECTED" && chosen !== void 0) {
+					const range = parseSupportedSecondsRange(error.message);
+					if (range !== void 0) learnedSeconds.set(secondsKey(credential.domain, chosen.id), range);
+				}
+				if (isBillableFailure(error, sent)) cooldownUntil = Date.now() + FAILURE_COOLDOWN_MS;
+				throw error;
+			}
+		}
+	};
+}
+/**
+* 把工具注册进宿主。返回 disposer；调用方负责在插件卸载时调用它。
+* 注册本身是同步的；`tools` 服务由宿主提供，拿不到就直接返回 undefined 并记警告。
+*/
+function registerWorkBuddyVideoTool(tools, deps) {
+	try {
+		return tools.register(createVideoTool(deps));
+	} catch (error) {
+		deps.logger.warn(`dsh-connect-workbuddy: 注册 ${WORKBUDDY_VIDEO_TOOL_NAME} 失败: ` + (error instanceof Error ? error.message : String(error)));
+		return;
+	}
+}
+//#endregion
 //#region src/cli-bridge/redact.ts
 /**
 * Scrubbing CLI output before it can reach a conversation.
@@ -9093,6 +9562,8 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 	const showCreditsInMainUi = deps.showCreditsInMainUi?.(region) ?? true;
 	const creditPosition = deps.creditPosition?.(region) ?? "composer";
 	const imageToolEnabled = deps.imageToolEnabled?.(region) ?? false;
+	const videoToolEnabled = deps.videoToolEnabled?.(region) ?? false;
+	const preferredVideoModels = deps.preferredVideoModels?.(region) ?? {};
 	const cliBridgeEnabled = deps.cliBridgeEnabled?.() === true;
 	const cliBridgeModel = deps.cliBridgeModel?.() ?? "";
 	const cliBridgeEffort = deps.cliBridgeEffort?.() ?? "";
@@ -9107,6 +9578,8 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 		enabled,
 		showCreditsInMainUi,
 		imageToolEnabled,
+		videoToolEnabled,
+		preferredVideoModels,
 		cliBridgeEnabled,
 		cliBridgeModel,
 		cliBridgeEffort,
@@ -9128,6 +9601,8 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 			showCreditsInMainUi,
 			creditPosition,
 			imageToolEnabled,
+			videoToolEnabled,
+			preferredVideoModels,
 			cliBridgeEnabled,
 			cliBridgeModel,
 			cliBridgeEffort,
@@ -9150,6 +9625,8 @@ async function workBuddyWebStatus(deps, region, options = {}) {
 		showCreditsInMainUi,
 		creditPosition,
 		imageToolEnabled,
+		videoToolEnabled,
+		preferredVideoModels,
 		cliBridgeEnabled,
 		cliBridgeModel,
 		cliBridgeEffort,
@@ -9472,6 +9949,27 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 				}
 			}
 		});
+		const disposeMediaModels = ctx.webServer.register({
+			kind: "exact",
+			path: WORKBUDDY_MEDIA_MODELS_PATH,
+			handler: async (req, res) => {
+				if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
+				if (!requireLoopback(req, res)) return;
+				if (deps.mediaModels === void 0) return json(res, 503, { error: "media model list unavailable" });
+				const region = requestRegion(req, res);
+				if (region === void 0) return;
+				try {
+					const refresh = new URL(req.url ?? "/", "http://localhost").searchParams.get("refresh") === "1";
+					json(res, 200, { models: (await deps.mediaModels(region, { refresh })).map((model) => ({
+						id: model.id,
+						name: model.name,
+						tags: [...model.tags]
+					})) });
+				} catch (error) {
+					json(res, 500, { error: safeMessage(error) });
+				}
+			}
+		});
 		const disposeProbe = ctx.webServer.register({
 			kind: "exact",
 			path: WORKBUDDY_PROBE_PATH,
@@ -9847,6 +10345,7 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 		return () => {
 			disposeBenefitClaim();
 			disposeRefresh();
+			disposeMediaModels();
 			disposeCheckin();
 			disposeAccounts();
 			disposeUsage();
@@ -9950,25 +10449,48 @@ const regionStateConfig = z.object({
 	/**
 	* Whether the model may call the image-generation tool (opt-IN, default off).
 	*
-	* Per-REGION like the credit switches, and only meaningful on `cn`: the image
-	* catalog has a `text-to-image` model on the CN gateway and none at all on the
-	* international one (measured, see `docs/IMAGE_GEN.md`).
+	* Per-REGION like the credit switches, and it now means the same thing on both
+	* tabs: each region's catalog carries its own `text-to-image` model (CN
+	* `hunyuan-image-alpha`, international `hy-image-3.5`; measured 2026-10-25,
+	* see `docs/IMAGE_GEN.md`). Whichever region is switched on AND opted in owns
+	* the tool; CN wins when both qualify (see `imageToolRegionOf`).
 	*
 	* Every other spending path in this plugin requires a human action: a chat
 	* request is one the user sent, and the per-model "test" button is one the
 	* user clicked. `workbuddy_draw_image` is the first capability where the
 	* MODEL decides to spend — it calls the tool on its own, at about 5.71 credits
-	* an image, and there is no per-call approval seam in the host to ask the user
-	* first (`needsApproval` / `toolApproval` do not exist; verified against the
-	* shipped `app.asar`).
+	* an image on CN and 0.03 on the international gateway (measured, not a price
+	* list: the media catalog carries no cost, so the tool reports the
+	* `usage.credit` the upstream actually settles), and there is no per-call
+	* approval seam in the host to ask the user first (`needsApproval` /
+	* `toolApproval` do not exist; verified against the shipped `app.asar`).
 	*
 	* So it is opt-in, the same way the account pool's credit-based rotation is
 	* opt-in (3.0.0's reasoning): a feature that can move money on its own must be
 	* one the user switched on, not one that arrives with an upgrade. Off also
-	* means the tool is not REGISTERED at all, so the model never sees it and
-	* cannot attempt a call that would be refused.
+	* means that region contributes nothing, and with no opted-in region at all
+	* the tool is not REGISTERED, so the model never sees it and cannot attempt a
+	* call that would be refused.
+	*/
+	imageToolEnabled: z.boolean().default(false).description("Let the model call workbuddy_draw_image on its own (opt-in; an image costs ~5.71 credits on the CN gateway and ~0.03 on the international one, and there is no per-call approval). Off by default, and off means no region registers the tool at all."),
+	/**
+	* Whether the model may call the video-generation tool (opt-IN, default off).
+	* Per-REGION like `imageToolEnabled`, gated the same way: the region must be
+	* switched on AND the user must opt in. CN wins when both qualify. A video
+	* costs real credits per generation and the task runs tens of seconds to
+	* minutes, so no per-call approval exists in the host — hence opt-in.
+	*/
+	videoToolEnabled: z.boolean().default(false).description("Let the model call workbuddy_draw_video on its own (opt-in; a video is an async task that costs WorkBuddy credits and runs tens of seconds to minutes). Off by default, and off means no region registers the tool at all."),
+	/**
+	* The video model pinned for one tag (`text-to-video` / `image-to-video`),
+	* as a model id from THIS region's catalog.
+	*
+	* Written by the card's per-mode picker. The tool reads it only when the call
+	* itself did not name a model, and falls back to the group's first model when
+	* the pinned id is no longer in this region's directory — see
+	* `preferredVideoModel` in `src/video-tool.ts`.
 	*/
-	imageToolEnabled: z.boolean().default(false).description("Let the model call workbuddy_draw_image on its own (opt-in; each image costs ~5.71 credits and there is no per-call approval). Off by default, and off means the tool is not registered at all."),
+	preferredVideoModels: z.dict(z.string()).default({}).description("Video model pinned per tag (\"text-to-video\"/\"image-to-video\"), as a model id from this region catalog. Used only when a tool call names no model."),
 	/**
 	* Per-model override of whether thinking `off` is offered, keyed by model id
 	* (issue #34). An ABSENT key means "use the built-in rule" — the upstream's
@@ -10111,6 +10633,41 @@ function regionEnabled(config, region) {
 /** Every region, in card tab order. */
 const REGION_KEYS = ["cn", "global"];
 /**
+* The region that owns the image tool right now, or `undefined` when no region
+* has it switched on.
+*
+* BOTH gates are required, and both are read live: the region's provider switch
+* must be ON (`regionEnabled`, opt-OUT) and the user must have opted IN to the
+* model spending credits there (`imageToolEnabled`, opt-IN). Absence of
+* `imageToolEnabled` is never consent.
+*
+* CN wins when both regions qualify, and that order is the only backward
+* compatible one: before the international gateway carried a `text-to-image`
+* model (measured 2026-10-25: `hy-image-3.5`) CN was the only region that could
+* ever be opted in, so a profile that opted in there keeps using CN even after
+* the global tab is switched on as well. That is exactly `REGION_KEYS`' order;
+* it is not incidental.
+*/
+function imageToolRegionOf(config) {
+	for (const region of REGION_KEYS) {
+		if (!regionEnabled(config, region)) continue;
+		if (regionStateOf(config, region).imageToolEnabled === true) return region;
+	}
+}
+/**
+* Region that owns the video tool right now, or `undefined` when no region has
+* it switched on. Mirrors `imageToolRegionOf` but reads `videoToolEnabled`
+* (the video-generation opt-in). Both gates required, read live: region provider
+* switch ON (`regionEnabled`, opt-OUT) and the user opted IN (`videoToolEnabled`,
+* opt-IN). CN wins when both qualify (see `REGION_KEYS`).
+*/
+function videoToolRegionOf(config) {
+	for (const region of REGION_KEYS) {
+		if (!regionEnabled(config, region)) continue;
+		if (regionStateOf(config, region).videoToolEnabled === true) return region;
+	}
+}
+/**
 * The account id a region should select, or `undefined` for the documented
 * default: follow whatever the WorkBuddy app is currently signed in as.
 *
@@ -10417,6 +10974,30 @@ function apply(ctx, config) {
 		return client.fetchModels(credential, signal, keep);
 	};
 	/**
+	* The region's MEDIA models, cached briefly for the card's read-only roster.
+	*
+	* Two callers ask the same question — the image tool (to validate a model
+	* argument) and the card's roster block (to SHOW what exists) — and both get
+	* the same answer from the same free GET. The cache exists because the card
+	* re-reads it on every settings render, not because the answer is expensive.
+	*
+	* Region-keyed, and a failure is NOT cached: a gateway hiccup must not make
+	* the roster read "no models" for five minutes.
+	*/
+	const mediaCaches = /* @__PURE__ */ new Map();
+	const readMediaModels = async (region, options) => {
+		const cached = mediaCaches.get(region);
+		const now = Date.now();
+		if (options?.refresh !== true && cached !== void 0 && now - cached.at < 3e5) return cached.models;
+		const credential = await stacks[region].store.resolve();
+		const models = await client.fetchMediaModels(credential, options?.signal);
+		mediaCaches.set(region, {
+			at: Date.now(),
+			models
+		});
+		return models;
+	};
+	/**
 	* Stamp each model's LIVE load level onto the runtime roster.
 	*
 	* Deliberately NOT part of {@link discoverModels}: that reader feeds the
@@ -10487,6 +11068,7 @@ function apply(ctx, config) {
 		})();
 		syncRegionRegistration(value);
 		syncImageTool(value);
+		syncVideoTool(value);
 		syncCliBridge(value);
 		refreshRegionUsability();
 	};
@@ -10552,19 +11134,24 @@ function apply(ctx, config) {
 	let imageTools;
 	let disposeImageTool;
 	const syncImageTool = (value) => {
-		const wanted = regionEnabled(value, "cn") && regionStateOf(value, "cn").imageToolEnabled === true;
+		const wanted = imageToolRegionOf(value) !== void 0;
 		if (wanted && disposeImageTool === void 0 && imageTools !== void 0) {
 			disposeImageTool = registerWorkBuddyImageTool(imageTools, {
 				resolveCredential: async () => {
-					if (!regionEnabled(current(), "cn")) return void 0;
-					try {
-						return await stacks.cn.store.resolve();
-					} catch {
-						return;
+					const live = current();
+					for (const region of REGION_KEYS) {
+						if (!regionEnabled(live, region)) continue;
+						if (regionStateOf(live, region).imageToolEnabled !== true) continue;
+						try {
+							return await stacks[region].store.resolve();
+						} catch {
+							continue;
+						}
 					}
 				},
 				listMediaModels: (credential, signal) => client.fetchMediaModels(credential, signal),
 				generateImage: (credential, request, signal) => client.generateImage(credential, request, signal),
+				editImage: (credential, request, signal) => client.editImage(credential, request, signal),
 				logger: ctx.logger
 			});
 			return;
@@ -10584,6 +11171,48 @@ function apply(ctx, config) {
 			imageTools = void 0;
 		});
 	});
+	let videoTools;
+	let disposeVideoTool;
+	const syncVideoTool = (value) => {
+		const wanted = videoToolRegionOf(value) !== void 0;
+		if (wanted && disposeVideoTool === void 0 && videoTools !== void 0) {
+			disposeVideoTool = registerWorkBuddyVideoTool(videoTools, {
+				resolveCredential: async () => {
+					const live = current();
+					for (const region of REGION_KEYS) {
+						if (!regionEnabled(live, region)) continue;
+						if (regionStateOf(live, region).videoToolEnabled !== true) continue;
+						try {
+							return await stacks[region].store.resolve();
+						} catch {
+							continue;
+						}
+					}
+				},
+				listMediaModels: (credential, signal) => client.fetchMediaModels(credential, signal),
+				submitVideo: (credential, request, signal) => client.submitVideo(credential, request, signal),
+				pollVideoTask: (credential, taskId, signal) => client.pollVideoTask(credential, taskId, signal),
+				preferredVideoModel: (credential, tag) => regionStateOf(current(), regionOf(credential.domain)).preferredVideoModels?.[tag],
+				downloadVideo: (credential, url, signal) => client.downloadVideo(credential, url, signal),
+				logger: ctx.logger
+			});
+			return;
+		}
+		if (!wanted && disposeVideoTool !== void 0) {
+			disposeVideoTool();
+			disposeVideoTool = void 0;
+		}
+	};
+	ctx.inject(["tools"], (toolsCtx) => {
+		videoTools = toolsCtx.tools;
+		if (videoTools === void 0) return;
+		syncVideoTool(current());
+		toolsCtx.effect(() => () => {
+			disposeVideoTool?.();
+			disposeVideoTool = void 0;
+			videoTools = void 0;
+		});
+	});
 	let cliTools;
 	let cliCommands;
 	let cliDirectoryOf;
@@ -10732,6 +11361,7 @@ function apply(ctx, config) {
 		* counts as new — the one property that keeps the marker honest.
 		*/
 		rosterSeen: (region) => stacks[region].rosterSeen.readout(),
+		mediaModels: readMediaModels,
 		regionEnabled: (region) => regionEnabled(current(), region),
 		/**
 		* The region's committed sidebar-credit flag, read from the same config the
@@ -10746,6 +11376,15 @@ function apply(ctx, config) {
 		* is NOT consent to let the model spend.
 		*/
 		imageToolEnabled: (region) => regionStateOf(current(), region).imageToolEnabled === true,
+		/** Whether the model may call the video tool here. Same opt-IN read as above. */
+		videoToolEnabled: (region) => regionStateOf(current(), region).videoToolEnabled === true,
+		/**
+		* The video model pinned per tag in this region, for the card's per-mode
+		* picker. Read from the committed value like the switches above: the picker
+		* must render what the TOOL will actually use, not what the browser mirror
+		* happens to hold.
+		*/
+		preferredVideoModels: (region) => regionStateOf(current(), region).preferredVideoModels ?? {},
 		/**
 		* Whether the optional CodeBuddy CLI route is mounted (`codebuddy_ask` tool
 		* + `/codebuddy` command).
@@ -11733,4 +12372,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { CREDENTIAL_REJECTED_CODE, Config, DEFAULT_PROBE_INPUT_TOKENS, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, NATIVE_MODALITY_BY_MODEL_ID, PROBE_INPUT_TOKEN_CHOICES, PROBE_MAX_TOKENS, PROBE_SYSTEM_PROMPT, REFUSES_OFF_MODEL_IDS, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROBE_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_TPS_PATH, WORKBUDDY_USAGE_PATH, WorkBuddyCatalog, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, WorkBuddyEncryptedCredentialError, WorkBuddyUpstreamClient, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, cooldownOf, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, creditOfStream, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, defaultOffModelIds, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, imageDefaultFor, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, knownRegionOf, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, modelIdOfBody, name, nativeModalityOf, nextRegionEnabled, nextRegionSlots, offDefaultFor, openEncryptedField, outcomeOfFailure, parseCreditMultiplier, parseReasoning, parseRetryAfter, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, probeModel, probeRequestBody, probeSucceeded, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, regionsFieldIsCorrupt, regionsMapOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, settingsNamespaceOf, toPersistedWorkBuddyModel, unwrapVolatileDeep, withEffectiveOff, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };
+export { CREDENTIAL_REJECTED_CODE, Config, DEFAULT_PROBE_INPUT_TOKENS, ENCRYPTED_CREDENTIAL_CODE, FALLBACK_WORKBUDDY_MODELS, FALLBACK_WORKBUDDY_MODELS_GLOBAL, NATIVE_MODALITY_BY_MODEL_ID, PROBE_INPUT_TOKEN_CHOICES, PROBE_MAX_TOKENS, PROBE_SYSTEM_PROMPT, REFUSES_OFF_MODEL_IDS, WORKBUDDY_ACCOUNTS_REFRESH_PATH, WORKBUDDY_APP_EXECUTABLE_ENV, WORKBUDDY_AUTH_FILENAME, WORKBUDDY_AUTH_FILE_ENV, WORKBUDDY_CHECKIN_PATH, WORKBUDDY_CONNECT_VERSION, WORKBUDDY_GLOBAL_PROVIDER, WORKBUDDY_HOST_HEARTBEAT_FILENAME, WORKBUDDY_MODELS_REFRESH_PATH, WORKBUDDY_PROBE_PATH, WORKBUDDY_PROVIDER, WORKBUDDY_PROVIDERS, WORKBUDDY_PROVIDER_DISPLAY_NAMES, WORKBUDDY_REGIONS, WORKBUDDY_REGION_PARAM, WORKBUDDY_SETTINGS_NS, WORKBUDDY_STREAM_IDLE_TIMEOUT_MS, WORKBUDDY_TPS_PATH, WORKBUDDY_USAGE_PATH, WorkBuddyCatalog, WorkBuddyCredentialRejectedError, WorkBuddyCredentialStore, WorkBuddyEncryptedCredentialError, WorkBuddyUpstreamClient, apply, asVolatile, authFileName, classifyUpstreamError, clearAtRestKeyCache, clearHostHeartbeat, cooldownOf, createAccountUsabilityProbe, createWorkBuddyAdapter, createWorkBuddyShim, creditOfStream, defaultDesktopAuthCandidates, defaultDesktopAuthDirs, defaultDesktopAuthPath, defaultOffModelIds, deriveAtRestKey, deriveAtRestKeyId, deriveCatalog, fallbackModelsFor, fetchAtRestKeyPayload, findWorkbuddyAppExecutable, hasEncryptedCredentialFields, imageDefaultFor, imageToolRegionOf, inject, isCredentialRejectedError, isEncryptedCredentialError, isEncryptedFieldWrapper, isHeartbeatProcessAlive, isWorkbuddyBundle, knownRegionOf, legacyAttributionRegion, legacyWorkbuddyOwnAuthPath, macosBundleExecutable, macosNestedAppBundles, modelIdOfBody, name, nativeModalityOf, nextRegionEnabled, nextRegionSlots, offDefaultFor, openEncryptedField, outcomeOfFailure, parseCreditMultiplier, parseReasoning, parseRetryAfter, parseUpstreamModel, parseWorkBuddyAuth, prepareChatBody, probeModel, probeRequestBody, probeSucceeded, processStartTimeMs, readAtRestKey, readHostHeartbeat, regionCleared, regionEnabled, regionEnabledOf, regionOf, regionOfProvider, regionOfStatusUrl, regionStateOf, regionsFieldIsCorrupt, regionsMapOf, registerWorkBuddyStatusRoute, resolveCredentialRecovery, selectAccountFor, settingsNamespaceOf, toPersistedWorkBuddyModel, unwrapVolatileDeep, videoToolRegionOf, withEffectiveOff, withWorkBuddyRegion, workBuddyDisplayName, workBuddyModelInput, workBuddyThinkingLevelMap, workBuddyWebStatus, workbuddyAccountId, workbuddyAppExecutableCandidates, workbuddyHostHeartbeatPath, workbuddyOwnAuthPath, writeHostHeartbeat };