dsh-image-gen 0.2.6 → 0.3.1

package/lib/index.js

@@ -3,14 +3,17 @@ import * as dshSettings from "@deepseek-ai/dsh-settings";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import z from "@deepseek-ai/schemastery";
 import { lstat, mkdir, readFile, realpath, rename, stat, unlink, writeFile } from "node:fs/promises";
-import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { randomUUID } from "node:crypto";
 //#region lib/types/shared.js
-/** Values shared by the Host and browser Bundle faces. */
 /** Browser route used by the generated-image card. */
 const IMAGE_ROUTE = "/plugins/dsh-image-gen/image";
 /** Browser route used for deleting generated images and workspace files. */
 const DELETE_ROUTE = "/plugins/dsh-image-gen/delete";
+/** Same-origin route used by the browser image workbench. */
+const STUDIO_ROUTE = "/plugins/dsh-image-gen/studio";
+/** Browser route used for saving generated images to workspace on demand. */
+const SAVE_WORKSPACE_ROUTE = "/plugins/dsh-image-gen/save-workspace";
 /** Namespace persisted through DSH Settings. */
 const IMAGE_GENERATION_NAMESPACE = "image-generation";
 /** Supported providers. */
@@ -21,6 +24,13 @@ const IMAGE_PROVIDERS = [
 	"dashscope",
 	"comfyui"
 ];
+/** Providers supported by the first browser workbench release. */
+const CLOUD_IMAGE_PROVIDERS = [
+	"google",
+	"openai",
+	"seedream",
+	"dashscope"
+];
 /** Default endpoints and base URLs. */
 const DEFAULT_GOOGLE_ENDPOINT = "https://generativelanguage.googleapis.com/v1beta/interactions";
 const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com/v1";
@@ -93,6 +103,21 @@ const OPENAI_API_KEY_ENV = "OPENAI_API_KEY";
 const SEEDREAM_API_KEY_ENV = "ARK_API_KEY";
 /** DashScope credential reference. */
 const DASHSCOPE_API_KEY_ENV = "DASHSCOPE_API_KEY";
+/** Google tool-level controls. */
+const ASPECT_RATIOS = [
+	"1:1",
+	"3:2",
+	"2:3",
+	"4:3",
+	"3:4",
+	"16:9",
+	"9:16"
+];
+const IMAGE_SIZES = [
+	"1K",
+	"2K",
+	"4K"
+];
 /** Cordis configuration schema. */
 const Config = z.object({
 	provider: z.union(IMAGE_PROVIDERS).default("google"),
@@ -212,8 +237,8 @@ function prepareComfyUIWorkflow(workflowJson, prompt, seed = randomSeed(), image
 	};
 	let imageInputs = 0;
 	const prepared = Object.fromEntries(Object.entries(workflow).map(([nodeId, value]) => {
-		const node = record$4(value);
-		const inputs = node === void 0 ? void 0 : record$4(node.inputs);
+		const node = record$5(value);
+		const inputs = node === void 0 ? void 0 : record$5(node.inputs);
 		if (inputs === void 0) return [nodeId, value];
 		const nextInputs = inject(inputs);
 		if (isImagePlaceholder(nextInputs[IMAGE_INPUT_KEY])) {
@@ -249,7 +274,7 @@ function parseWorkflow(workflowJson) {
 	}
 	if (!isRecord(value) || Object.keys(value).length === 0) throw new Error("ComfyUI workflow must be a non-empty API-format JSON object");
 	if (!Object.values(value).some((node) => {
-		const inputs = record$4(node)?.inputs;
+		const inputs = record$5(node)?.inputs;
 		return inputs !== void 0 && containsPromptPlaceholder(inputs);
 	})) throw new Error(`ComfyUI workflow must contain ${COMFYUI_PROMPT_PLACEHOLDER} (or ${LEGACY_PROMPT_PLACEHOLDER}) in a text input`);
 	return value;
@@ -265,7 +290,7 @@ function containsPromptPlaceholder(value) {
 function isRecord(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function record$4(value) {
+function record$5(value) {
 	return isRecord(value) ? value : void 0;
 }
 //#endregion
@@ -373,9 +398,9 @@ async function waitForOutput(baseURL, promptId, signal) {
 		});
 		const text = await readBoundedText$3(response, MAX_HISTORY_BYTES);
 		if (!response.ok) throw new Error(`ComfyUI history request failed (${response.status}): ${text.slice(0, ERROR_LIMIT$3)}`);
-		const entry = record$3(parseJsonRecord(text, "ComfyUI history returned invalid JSON")[promptId]);
+		const entry = record$4(parseJsonRecord(text, "ComfyUI history returned invalid JSON")[promptId]);
 		if (entry !== void 0) {
-			const status = record$3(entry.status);
+			const status = record$4(entry.status);
 			if (status?.status_str === "error") throw new Error(`ComfyUI workflow failed: ${JSON.stringify(status.messages ?? status).slice(0, ERROR_LIMIT$3)}`);
 			const output = firstOutputImage(entry.outputs);
 			if (output !== void 0) return output;
@@ -385,13 +410,13 @@ async function waitForOutput(baseURL, promptId, signal) {
 	}
 }
 function firstOutputImage(value) {
-	const outputs = record$3(value);
+	const outputs = record$4(value);
 	if (outputs === void 0) return void 0;
 	for (const nodeOutput of Object.values(outputs)) {
-		const images = record$3(nodeOutput)?.images;
+		const images = record$4(nodeOutput)?.images;
 		if (!Array.isArray(images)) continue;
 		for (const image of images) {
-			const item = record$3(image);
+			const item = record$4(image);
 			if (typeof item?.filename !== "string" || item.filename.length === 0) continue;
 			const output = {
 				filename: item.filename,
@@ -412,7 +437,7 @@ async function downloadOutput(baseURL, output, maxBytes, signal) {
 		signal
 	});
 	if (!response.ok) throw new Error(`ComfyUI image download failed (${response.status})`);
-	const mediaType = imageMediaType$3(response.headers.get("content-type")) ?? imageMediaTypeFromName(output.filename);
+	const mediaType = imageMediaType$4(response.headers.get("content-type")) ?? imageMediaTypeFromName(output.filename);
 	if (mediaType === void 0) throw new Error("ComfyUI image download returned an unsupported content type");
 	return {
 		data: await readBoundedBytes$2(response, maxBytes),
@@ -432,7 +457,7 @@ function comfyUIBaseURL(value) {
 function endpoint(baseURL, path) {
 	return new URL(path, baseURL);
 }
-function record$3(value) {
+function record$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function parseJsonRecord(text, message) {
@@ -442,11 +467,11 @@ function parseJsonRecord(text, message) {
 	} catch {
 		throw new Error(message);
 	}
-	const parsed = record$3(value);
+	const parsed = record$4(value);
 	if (parsed === void 0) throw new Error(message);
 	return parsed;
 }
-function imageMediaType$3(value) {
+function imageMediaType$4(value) {
 	const mediaType = value?.split(";", 1)[0]?.trim().toLowerCase();
 	return mediaType === "image/png" || mediaType === "image/jpeg" || mediaType === "image/webp" || mediaType === "image/gif" ? mediaType : void 0;
 }
@@ -601,17 +626,28 @@ function generateGoogleImage(input) {
 }
 /** Send one native Google image-editing request using already-resolved bytes. */
 function editGoogleImage(input) {
+	const interactionInput = input.sourceImages.length === 1 ? [{
+		type: "image",
+		mime_type: input.sourceImages[0].mediaType,
+		data: Buffer.from(input.sourceImages[0].data).toString("base64")
+	}, {
+		type: "text",
+		text: input.prompt
+	}] : [...input.sourceImages.flatMap((sourceImage, index) => [{
+		type: "text",
+		text: `图 ${index + 1} (Image ${index + 1}):`
+	}, {
+		type: "image",
+		mime_type: sourceImage.mediaType,
+		data: Buffer.from(sourceImage.data).toString("base64")
+	}]), {
+		type: "text",
+		text: input.prompt
+	}];
 	return requestGoogleImage({
 		...input,
 		operation: "editing",
-		interactionInput: [{
-			type: "text",
-			text: input.prompt
-		}, ...input.sourceImages.map((sourceImage) => ({
-			type: "image",
-			mime_type: sourceImage.mediaType,
-			data: Buffer.from(sourceImage.data).toString("base64")
-		}))]
+		interactionInput
 	});
 }
 /** Shared Google request, response parsing, decoding, and size enforcement. */
@@ -656,13 +692,13 @@ async function requestGoogleImage(input) {
 	};
 }
 function outputImage(value) {
-	const interaction = record$2(value);
+	const interaction = record$3(value);
 	if (interaction === void 0) return void 0;
 	const direct = imageContent(interaction.output_image, false);
 	if (direct !== void 0) return direct;
 	if (!Array.isArray(interaction.steps)) return void 0;
 	for (const step of interaction.steps) {
-		const modelOutput = record$2(step);
+		const modelOutput = record$3(step);
 		if (modelOutput?.type !== "model_output" || !Array.isArray(modelOutput.content)) continue;
 		for (const content of modelOutput.content) {
 			const image = imageContent(content, true);
@@ -671,14 +707,14 @@ function outputImage(value) {
 	}
 }
 function imageContent(value, requiresImageType) {
-	const image = record$2(value);
+	const image = record$3(value);
 	if (image === void 0 || requiresImageType && image.type !== "image" || typeof image.data !== "string") return void 0;
 	return {
 		data: image.data,
 		mime_type: image.mime_type
 	};
 }
-function record$2(value) {
+function record$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function mediaTypeOf(value) {
@@ -822,9 +858,9 @@ function findReferenceImage(messages, sourceAttachmentId) {
 }
 /** Validate an untrusted serialized image reference at an HTTP/UI boundary. */
 function parseImageAttachmentRef(value) {
-	const ref = record$1(value);
+	const ref = record$2(value);
 	if (ref === void 0) return void 0;
-	if (typeof ref.attachmentId !== "string" || !imageMediaType$2(ref.mediaType)) return void 0;
+	if (typeof ref.attachmentId !== "string" || !imageMediaType$3(ref.mediaType)) return void 0;
 	if (!nonNegativeInteger(ref.bytes) || !positiveInteger(ref.width) || !positiveInteger(ref.height)) return void 0;
 	if (ref.name !== void 0 && typeof ref.name !== "string") return void 0;
 	const originalDimensions = ref.originalDimensions === void 0 ? void 0 : parseDimensions(ref.originalDimensions);
@@ -854,14 +890,14 @@ function findInBlocks(blocks, sourceAttachmentId) {
 	}
 }
 function parseDimensions(value) {
-	const dimensions = record$1(value);
+	const dimensions = record$2(value);
 	if (dimensions === void 0 || !positiveInteger(dimensions.width) || !positiveInteger(dimensions.height)) return void 0;
 	return {
 		width: dimensions.width,
 		height: dimensions.height
 	};
 }
-function imageMediaType$2(value) {
+function imageMediaType$3(value) {
 	return value === "image/png" || value === "image/jpeg" || value === "image/webp" || value === "image/gif";
 }
 function collectInBlocks(blocks) {
@@ -926,27 +962,251 @@ function positiveInteger(value) {
 function nonNegativeInteger(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
-function record$1(value) {
+function record$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 //#endregion
+//#region lib/types/workspace-save.js
+/** Persist one generated image as a file under the session workspace. */
+/** File extension for each supported image media type. */
+const EXTENSION = {
+	"image/png": "png",
+	"image/jpeg": "jpg",
+	"image/webp": "webp",
+	"image/gif": "gif"
+};
+/**
+* Build the deterministic file name for a generated image:
+* `image-<digest-prefix>.<ext>`. The digest prefix comes from the
+* content-addressed attachment id, so the same image bytes always map to the
+* same file name regardless of when they were generated, and re-saving simply
+* overwrites the previous copy in place.
+* @param attachmentId - durable attachment id (`sha256:<hex>`).
+* @param mediaType - verified image media type.
+* @returns the file name (no directory).
+*/
+function workspaceImageName(attachmentId, mediaType) {
+	return `image-${(attachmentId.startsWith("sha256:") ? attachmentId.slice(7) : attachmentId).slice(0, 8).padEnd(8, "0")}.${EXTENSION[mediaType]}`;
+}
+/**
+* Resolve the configured image folder inside the session workspace. The
+* folder may nest, but must stay inside the workspace: absolute paths and
+* parent-traversal segments are rejected for both separator styles.
+*
+* This lexical pass is necessary but not sufficient: `saveImageToWorkspace`
+* additionally verifies the on-disk resolution so symlinked folders cannot
+* escape the workspace.
+* @param workspaceRoot - the session workspace directory.
+* @param folder - configured subfolder; empty/blank means the workspace root.
+* @returns the absolute image directory.
+* @throws when the folder would escape the workspace root.
+*/
+function workspaceImageDir(workspaceRoot, folder) {
+	const trimmed = (folder ?? "").trim();
+	const root = resolve(workspaceRoot);
+	const dir = trimmed === "" ? root : resolve(root, trimmed);
+	if (!containsPath(root, dir)) throw new Error(`image workspace folder '${folder}' must stay inside the session workspace`);
+	return dir;
+}
+/** True when `child` equals `parent` or lives underneath it (lexically). */
+function containsPath(parent, child) {
+	const rel = relative(parent, child);
+	return rel === "" || rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);
+}
+/**
+* Real path of the closest existing ancestor of `dir` (inclusive). Walking up
+* lets us validate symlinked folder segments before creating anything under
+* them.
+*/
+async function nearestExistingRealPath(dir) {
+	let probe = dir;
+	for (;;) try {
+		return await realpath(probe);
+	} catch (error) {
+		if (error?.code !== "ENOENT") throw error;
+		const parent = dirname(probe);
+		if (parent === probe) throw error;
+		probe = parent;
+	}
+}
+/** Reject a directory whose on-disk resolution lands outside the workspace. */
+function assertInsideWorkspace(realRoot, candidate, folder) {
+	if (containsPath(realRoot, candidate)) return;
+	throw new Error(`image workspace folder '${folder ?? ""}' must stay inside the session workspace (${candidate} resolves outside ${realRoot})`);
+}
+/**
+* Write one generated image durably under the session workspace.
+*
+* Containment is enforced twice: lexically by `workspaceImageDir`, then
+* against real paths, so a configured folder (or any intermediate segment)
+* that is a symlink pointing outside the workspace is rejected before and
+* after anything is created.
+*
+* The bytes are written to a same-directory staging file and renamed onto the
+* target, so a crash never leaves a half-written image under its final name.
+* Re-saving identical bytes rewrites the same file (the name is content-
+* addressed), which keeps repeated generations idempotent. A cancellation is
+* honoured up to and including the final rename: an aborted save never
+* resolves successfully and never leaves the image behind under its final
+* name.
+* @param options - workspace root, configured folder, attachment identity, and image bytes.
+* @returns the absolute path of the written file.
+*/
+async function saveImageToWorkspace(options) {
+	const dir = workspaceImageDir(options.workspaceRoot, options.folder);
+	options.signal?.throwIfAborted();
+	const realRoot = await realpath(resolve(options.workspaceRoot));
+	assertInsideWorkspace(realRoot, await nearestExistingRealPath(dir), options.folder);
+	const name = workspaceImageName(options.attachmentId, options.mediaType);
+	const target = join(dir, name);
+	const staging = join(dir, `.${name}.${process.pid}-${randomUUID()}.tmp`);
+	await mkdir(dir, { recursive: true });
+	assertInsideWorkspace(realRoot, await realpath(dir), options.folder);
+	try {
+		await writeFile(staging, options.data, {
+			flag: "wx",
+			signal: options.signal
+		});
+		options.signal?.throwIfAborted();
+		await rename(staging, target);
+	} catch (error) {
+		await unlink(staging).catch(() => {});
+		throw error;
+	}
+	try {
+		options.signal?.throwIfAborted();
+	} catch (error) {
+		await unlink(target).catch(() => {});
+		throw error;
+	}
+	return target;
+}
+/** Regex pattern strictly matching generated image file names (e.g. image-01234567.png). */
+const GENERATED_IMAGE_NAME_REGEX = /^image-[0-9a-f]{8,}\.(png|jpg|jpeg|webp|gif)$/i;
+/** Discover all DSH workspace paths recorded in local application storage. */
+async function getDshWorkspaceRoots() {
+	const roots = [];
+	try {
+		const home = process.env.USERPROFILE || process.env.HOME || "";
+		if (home) {
+			const workspaceJsonPath = join(home, ".dsh", "storages", "workspace.json");
+			const content = await readFile(workspaceJsonPath, "utf8");
+			const workspaces = JSON.parse(content)?.tables?.workspaces;
+			if (workspaces && typeof workspaces === "object") {
+				for (const ws of Object.values(workspaces)) if (ws && typeof ws === "object" && "path" in ws && typeof ws.path === "string") {
+					const p = ws.path;
+					if (p.trim()) roots.push(p.trim());
+				}
+			}
+		}
+	} catch {}
+	return roots;
+}
+/** Discover detailed workspace records from DSH workspace.json storage. */
+async function getDshWorkspacesFull() {
+	const list = [];
+	try {
+		const home = process.env.USERPROFILE || process.env.HOME || "";
+		if (home) {
+			const workspaceJsonPath = join(home, ".dsh", "storages", "workspace.json");
+			const content = await readFile(workspaceJsonPath, "utf8");
+			const workspaces = JSON.parse(content)?.tables?.workspaces;
+			if (workspaces && typeof workspaces === "object") for (const [id, ws] of Object.entries(workspaces)) {
+				const raw = ws;
+				if (raw && typeof raw.path === "string") {
+					const p = raw.path.trim();
+					if (!p) continue;
+					const title = typeof raw.title === "string" && raw.title.trim() ? raw.title.trim() : basename(p);
+					const rawSessions = raw.sessionIds;
+					const sessionIds = Array.isArray(rawSessions) ? rawSessions.filter((s) => typeof s === "string") : [];
+					list.push({
+						workspaceId: id,
+						path: p,
+						title,
+						sessionIds
+					});
+				}
+			}
+		}
+	} catch {}
+	return list;
+}
+/**
+* Verify whether a candidate path lives within an allowed DSH workspace root.
+* Resolves symlinks via `realpath` to prevent symlink traversal attacks.
+* @returns the canonical realpath of the candidate root.
+* @throws when candidateRoot does not exist or falls outside the allowed roots.
+*/
+async function assertWorkspaceAllowed(candidateRoot, allowedRoots) {
+	const realCandidate = await realpath(resolve(candidateRoot));
+	const rootsToCheck = /* @__PURE__ */ new Set();
+	for (const r of allowedRoots) if (typeof r === "string" && r.trim()) try {
+		rootsToCheck.add(await realpath(resolve(r)));
+	} catch {}
+	for (const allowed of rootsToCheck) if (containsPath(allowed, realCandidate)) return realCandidate;
+	throw new Error(`Directory '${candidateRoot}' is not within an allowed DSH workspace`);
+}
+/**
+* Safely delete a generated image file from workspace disk by its path.
+* Enforces strict safety gates:
+* 1. Base name must match generated image pattern (`image-<hex>.<ext>`) to avoid touching user files.
+* 2. Path must be a regular file and NOT a symbolic link.
+* 3. Real canonical path's basename must also match the pattern.
+* 4. Real canonical path must reside within an allowed workspace root (or process.cwd()).
+*/
+async function deleteImageFromWorkspace(filePath, allowedWorkspaceRoots) {
+	const resolved = resolve(filePath);
+	const base = resolved.split(/[/\\]/).pop() ?? "";
+	if (!GENERATED_IMAGE_NAME_REGEX.test(base)) return false;
+	try {
+		const fileLstat = await lstat(resolved);
+		if (fileLstat.isSymbolicLink() || !fileLstat.isFile()) return false;
+	} catch (err) {
+		if (err?.code === "ENOENT") return true;
+		throw err;
+	}
+	try {
+		const realFile = await realpath(resolved);
+		const realBase = realFile.split(/[/\\]/).pop() ?? "";
+		if (!GENERATED_IMAGE_NAME_REGEX.test(realBase)) return false;
+		const rootsToCheck = /* @__PURE__ */ new Set();
+		if (allowedWorkspaceRoots) {
+			for (const r of allowedWorkspaceRoots) if (typeof r === "string" && r.trim()) rootsToCheck.add(resolve(r));
+		}
+		rootsToCheck.add(resolve(process.cwd()));
+		let withinAllowed = false;
+		for (const root of rootsToCheck) try {
+			if (containsPath(await realpath(root), realFile)) {
+				withinAllowed = true;
+				break;
+			}
+		} catch {}
+		if (!withinAllowed) return false;
+		await unlink(realFile);
+		return true;
+	} catch (err) {
+		if (err?.code === "ENOENT") return true;
+		throw err;
+	}
+}
+//#endregion
 //#region lib/types/image-route.js
 const MAX_BODY_BYTES = 65536;
 /** Serve one verified durable image reference to a same-origin browser request. */
 async function serveImage(req, res, deps) {
-	if (req.method !== "POST") return jsonError(res, 405, "method-not-allowed");
-	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError(res, 415, "json-required");
+	if (req.method !== "POST") return jsonError$1(res, 405, "method-not-allowed");
+	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$1(res, 415, "json-required");
 	const origin = req.headers.origin;
 	const host = req.headers.host;
-	if (origin !== void 0 && host !== void 0 && origin !== `http://${host}` && origin !== `https://${host}`) return jsonError(res, 403, "origin-rejected");
+	if (origin !== void 0 && host !== void 0 && origin !== `http://${host}` && origin !== `https://${host}`) return jsonError$1(res, 403, "origin-rejected");
 	let body;
 	try {
-		body = JSON.parse(await readBody(req));
+		body = JSON.parse(await readBody$1(req));
 	} catch {
-		return jsonError(res, 400, "invalid-request");
+		return jsonError$1(res, 400, "invalid-request");
 	}
 	const attachment = attachmentFromRequest(body);
-	if (attachment === void 0) return jsonError(res, 400, "invalid-attachment");
+	if (attachment === void 0) return jsonError$1(res, 400, "invalid-attachment");
 	try {
 		const stored = await deps.readImage(attachment);
 		res.writeHead(200, {
@@ -957,24 +1217,27 @@ async function serveImage(req, res, deps) {
 		});
 		res.end(stored.data);
 	} catch {
-		jsonError(res, 404, "image-unavailable");
+		jsonError$1(res, 404, "image-unavailable");
 	}
 }
-/** Safely delete one or more generated image files from the workspace disk. */
-async function serveDelete(req, res, deps) {
-	if (req.method !== "POST") return jsonError(res, 405, "method-not-allowed");
-	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError(res, 415, "json-required");
+function sameOrigin$1(req) {
 	const origin = req.headers.origin;
 	const host = req.headers.host;
-	if (origin !== void 0 && host !== void 0 && origin !== `http://${host}` && origin !== `https://${host}`) return jsonError(res, 403, "origin-rejected");
+	if (origin !== void 0 && host !== void 0 && origin !== `http://${host}` && origin !== `https://${host}`) return false;
+	return true;
+}
+/** Safely delete one or more generated image files from the workspace disk. */
+async function serveDelete(req, res, deps) {
+	if (req.method !== "POST") return jsonError$1(res, 405, "method-not-allowed");
+	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$1(res, 415, "json-required");
+	if (!sameOrigin$1(req)) return jsonError$1(res, 403, "origin-rejected");
 	let body;
 	try {
-		body = JSON.parse(await readBody(req));
+		body = JSON.parse(await readBody$1(req));
 	} catch {
-		return jsonError(res, 400, "invalid-request");
+		return jsonError$1(res, 400, "invalid-request");
 	}
 	const rawPaths = typeof body === "object" && body !== null && "paths" in body && Array.isArray(body.paths) ? body.paths : [];
-	const rawAttachmentIds = typeof body === "object" && body !== null && "attachmentIds" in body && Array.isArray(body.attachmentIds) ? body.attachmentIds : [];
 	const deletedFiles = [];
 	const failedFiles = [];
 	for (const p of rawPaths) if (typeof p === "string" && p.trim()) try {
@@ -989,14 +1252,6 @@ async function serveDelete(req, res, deps) {
 			error: err instanceof Error ? err.message : String(err)
 		});
 	}
-	for (const id of rawAttachmentIds) if (typeof id === "string" && id.trim()) try {
-		if (await deps.deleteWorkspaceImageByAttachmentId(id)) deletedFiles.push(id);
-	} catch (err) {
-		failedFiles.push({
-			path: id,
-			error: err instanceof Error ? err.message : String(err)
-		});
-	}
 	res.writeHead(200, {
 		"content-type": "application/json",
 		"cache-control": "no-store"
@@ -1008,19 +1263,74 @@ async function serveDelete(req, res, deps) {
 		failedFiles
 	}));
 }
+/** Serve on-demand image persistence into the workspace. */
+async function serveSaveWorkspace(req, res, deps) {
+	if (!sameOrigin$1(req)) return jsonError$1(res, 403, "origin-rejected");
+	if (req.method !== "POST") return jsonError$1(res, 405, "method-not-allowed");
+	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$1(res, 415, "json-required");
+	try {
+		const raw = JSON.parse(await readBody$1(req));
+		const attachment = parseImageAttachmentRef(raw.attachment);
+		if (!attachment) return jsonError$1(res, 400, "invalid-attachment");
+		if (!deps.isSaveEnabled()) {
+			res.writeHead(200, {
+				"content-type": "application/json",
+				"cache-control": "no-store"
+			});
+			res.end(JSON.stringify({
+				ok: true,
+				savedTo: void 0
+			}));
+			return;
+		}
+		const rawTarget = typeof raw.workspaceRoot === "string" && raw.workspaceRoot.trim() ? raw.workspaceRoot.trim() : deps.getActiveWorkspaceRoot();
+		const allowedRoots = await deps.getAllowedWorkspaceRoots();
+		let targetRoot;
+		try {
+			targetRoot = await assertWorkspaceAllowed(rawTarget, allowedRoots);
+		} catch {
+			return jsonError$1(res, 403, "workspace-root-not-allowed");
+		}
+		const stored = await deps.readImage(attachment);
+		if (!stored || !stored.data) return jsonError$1(res, 404, "image-not-found");
+		const savedTo = await deps.saveToWorkspace({
+			workspaceRoot: targetRoot,
+			attachmentId: String(attachment.attachmentId),
+			mediaType: attachment.mediaType,
+			data: stored.data
+		});
+		res.writeHead(200, {
+			"content-type": "application/json",
+			"cache-control": "no-store"
+		});
+		res.end(JSON.stringify({
+			ok: true,
+			savedTo
+		}));
+	} catch (err) {
+		res.writeHead(500, {
+			"content-type": "application/json",
+			"cache-control": "no-store"
+		});
+		res.end(JSON.stringify({
+			ok: false,
+			error: err instanceof Error ? err.message : String(err)
+		}));
+	}
+}
 /** Validate the persisted reference carried by a tool presentation. */
 function imageAttachmentFromMeta(meta) {
-	const value = record(meta);
+	const value = record$1(meta);
 	if (value?.kind !== "dsh-image-gen") return void 0;
 	return parseImageAttachmentRef(value.attachment);
 }
 function attachmentFromRequest(value) {
-	return parseImageAttachmentRef(record(value)?.attachment);
+	return parseImageAttachmentRef(record$1(value)?.attachment);
 }
-function record(value) {
+function record$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
-async function readBody(req) {
+async function readBody$1(req) {
 	const chunks = [];
 	let bytes = 0;
 	for await (const chunk of req) {
@@ -1031,7 +1341,7 @@ async function readBody(req) {
 	}
 	return Buffer.concat(chunks).toString("utf8");
 }
-function jsonError(res, status, code) {
+function jsonError$1(res, status, code) {
 	res.writeHead(status, {
 		"content-type": "application/json",
 		"cache-control": "no-store"
@@ -1060,10 +1370,12 @@ async function generateOpenAICompatibleImage(input) {
 }
 async function editOpenAICompatibleImage(input) {
 	const form = new FormData();
-	const imageField = input.sourceImages.length === 1 ? "image" : "image[]";
+	const imageField = input.sourceImages.length > 1 ? "image[]" : "image";
 	input.sourceImages.forEach((sourceImage, index) => {
 		const uploadBytes = new Uint8Array(sourceImage.data);
-		form.append(imageField, new Blob([uploadBytes], { type: sourceImage.mediaType }), `reference-${index + 1}.${extensionOf(sourceImage.mediaType)}`);
+		const blob = new Blob([uploadBytes], { type: sourceImage.mediaType });
+		const filename = `reference-${index + 1}.${extensionOf(sourceImage.mediaType)}`;
+		form.append(imageField, blob, filename);
 	});
 	form.append("prompt", input.prompt);
 	form.append("model", input.model);
@@ -1089,7 +1401,7 @@ async function parseImageResponse(response, provider, input) {
 	if (image === void 0) throw new Error(`${provider} image request returned no image: ${text.slice(0, ERROR_LIMIT$1)}`);
 	if (image.b64_json !== void 0) return {
 		data: decodeBase64$1(image.b64_json, provider),
-		mediaType: imageMediaType$1(image.mime_type) ?? "image/png"
+		mediaType: imageMediaType$2(image.mime_type) ?? "image/png"
 	};
 	return downloadImage$1(image.url, provider, input);
 }
@@ -1124,7 +1436,7 @@ async function downloadImage$1(url, provider, input) {
 		if (parsed === void 0) throw new Error(`${provider} image request returned invalid data URL`);
 		return {
 			data: decodeBase64$1(parsed.base64, provider),
-			mediaType: imageMediaType$1(parsed.mediaType) ?? "image/png"
+			mediaType: imageMediaType$2(parsed.mediaType) ?? "image/png"
 		};
 	}
 	const response = await fetch(url, {
@@ -1133,7 +1445,7 @@ async function downloadImage$1(url, provider, input) {
 		...input.apiKey === void 0 ? {} : { headers: { authorization: `Bearer ${input.apiKey}` } }
 	});
 	if (!response.ok) throw new Error(`${provider} image download failed (${response.status})`);
-	const mediaType = imageMediaType$1(response.headers.get("content-type"));
+	const mediaType = imageMediaType$2(response.headers.get("content-type"));
 	if (mediaType === void 0) throw new Error(`${provider} image download returned unsupported content type`);
 	return {
 		data: await readBoundedBytes$1(response, input.maxBytes),
@@ -1162,7 +1474,7 @@ function decodeBase64$1(value, provider) {
 	if (decoded.length === 0) throw new Error(`${provider} image request returned invalid base64 image data`);
 	return new Uint8Array(decoded);
 }
-function imageMediaType$1(value) {
+function imageMediaType$2(value) {
 	const mediaType = value?.split(";", 1)[0]?.trim().toLowerCase();
 	return mediaType === "image/png" || mediaType === "image/jpeg" || mediaType === "image/webp" || mediaType === "image/gif" ? mediaType : void 0;
 }
@@ -1226,7 +1538,7 @@ async function editSeedreamImage(input) {
 	if (image === void 0) throw new Error(`seedream image editing returned no image: ${text.slice(0, ERROR_LIMIT)}`);
 	if (image.b64_json !== void 0) return {
 		data: decodeBase64(image.b64_json),
-		mediaType: imageMediaType(image.mime_type) ?? "image/png"
+		mediaType: imageMediaType$1(image.mime_type) ?? "image/png"
 	};
 	return downloadImage(image.url, input);
 }
@@ -1264,7 +1576,7 @@ async function downloadImage(url, input) {
 		signal: input.signal
 	});
 	if (!response.ok) throw new Error(`seedream image download failed (${response.status})`);
-	const mediaType = imageMediaType(response.headers.get("content-type"));
+	const mediaType = imageMediaType$1(response.headers.get("content-type"));
 	if (mediaType === void 0) throw new Error("seedream image download returned unsupported content type");
 	return {
 		data: await readBoundedBytes(response, input.maxBytes),
@@ -1278,7 +1590,7 @@ function decodeBase64(value) {
 	if (decoded.length === 0) throw new Error("seedream image editing returned invalid base64 image data");
 	return new Uint8Array(decoded);
 }
-function imageMediaType(value) {
+function imageMediaType$1(value) {
 	const mediaType = value?.split(";", 1)[0]?.trim().toLowerCase();
 	return mediaType === "image/png" || mediaType === "image/jpeg" || mediaType === "image/webp" || mediaType === "image/gif" ? mediaType : void 0;
 }
@@ -1310,202 +1622,500 @@ async function readBoundedBytes(response, maxBytes) {
 	return joined;
 }
 //#endregion
-//#region lib/types/workspace-save.js
-/** Persist one generated image as a file under the session workspace. */
-/** File extension for each supported image media type. */
-const EXTENSION = {
-	"image/png": "png",
-	"image/jpeg": "jpg",
-	"image/webp": "webp",
-	"image/gif": "gif"
+//#region lib/types/studio.js
+const PROVIDER_LABELS = {
+	google: "Google",
+	openai: "OpenAI",
+	seedream: "Seedream",
+	dashscope: "DashScope"
 };
-/**
-* Build the deterministic file name for a generated image:
-* `image-<digest-prefix>.<ext>`. The digest prefix comes from the
-* content-addressed attachment id, so the same image bytes always map to the
-* same file name regardless of when they were generated, and re-saving simply
-* overwrites the previous copy in place.
-* @param attachmentId - durable attachment id (`sha256:<hex>`).
-* @param mediaType - verified image media type.
-* @returns the file name (no directory).
-*/
-function workspaceImageName(attachmentId, mediaType) {
-	return `image-${(attachmentId.startsWith("sha256:") ? attachmentId.slice(7) : attachmentId).slice(0, 8).padEnd(8, "0")}.${EXTENSION[mediaType]}`;
+const CREDENTIALS = {
+	google: GOOGLE_API_KEY_ENV,
+	openai: OPENAI_API_KEY_ENV,
+	seedream: SEEDREAM_API_KEY_ENV,
+	dashscope: DASHSCOPE_API_KEY_ENV
+};
+const RATIO_LABELS = {
+	auto: "自动",
+	"1:1": "1:1 方形",
+	"3:2": "3:2 横向",
+	"2:3": "2:3 肖像",
+	"4:3": "4:3 横向",
+	"3:4": "3:4 竖向",
+	"16:9": "16:9 宽屏",
+	"9:16": "9:16 竖屏"
+};
+/** Return only browser-safe capability data. */
+async function describeStudio(ctx, config) {
+	const configuredEntries = await Promise.all(CLOUD_IMAGE_PROVIDERS.map(async (provider) => {
+		const credential = await ctx.credentials.resolve(credentialRef(CREDENTIALS[provider]));
+		return [provider, credential !== void 0 && credential.value.trim().length > 0];
+	}));
+	const configured = Object.fromEntries(configuredEntries);
+	const profiles = CLOUD_IMAGE_PROVIDERS.map((provider) => studioProfile(config, provider, configured[provider]));
+	const preferred = config.provider;
+	return {
+		providers: profiles,
+		activeProvider: preferred !== void 0 && cloudProvider$1(preferred) ? preferred : profiles.find((profile) => profile.configured)?.provider ?? "google"
+	};
 }
-/**
-* Resolve the configured image folder inside the session workspace. The
-* folder may nest, but must stay inside the workspace: absolute paths and
-* parent-traversal segments are rejected for both separator styles.
-*
-* This lexical pass is necessary but not sufficient: `saveImageToWorkspace`
-* additionally verifies the on-disk resolution so symlinked folders cannot
-* escape the workspace.
-* @param workspaceRoot - the session workspace directory.
-* @param folder - configured subfolder; empty/blank means the workspace root.
-* @returns the absolute image directory.
-* @throws when the folder would escape the workspace root.
-*/
-function workspaceImageDir(workspaceRoot, folder) {
-	const trimmed = (folder ?? "").trim();
-	const root = resolve(workspaceRoot);
-	const dir = trimmed === "" ? root : resolve(root, trimmed);
-	if (!containsPath(root, dir)) throw new Error(`image workspace folder '${folder}' must stay inside the session workspace`);
-	return dir;
+/** Execute one validated browser workbench request using the existing provider adapters. */
+async function generateFromStudio(ctx, config, input, signal, fallbackWorkspaceRoot) {
+	assertAllowed(studioProfile(config, input.provider, true), input);
+	const active = resolveProvider(providerConfig(config, input.provider, input.model));
+	if (active.provider === "comfyui") throw new Error("ComfyUI 暂未接入工作台");
+	const credential = await ctx.credentials.resolve(credentialRef(active.apiKeyEnv));
+	if (credential === void 0 || credential.value.trim().length === 0) throw new Error(`${PROVIDER_LABELS[input.provider]} 尚未配置 API Key，请先到设置中配置`);
+	const rawRefs = input.references ?? (input.reference ? [input.reference] : []);
+	if (input.mode === "edit" && rawRefs.length === 0) throw new Error("图生图需要至少一张参考图");
+	const sourceImages = input.mode === "edit" ? await Promise.all(rawRefs.map((ref) => readStudioReference(ctx, ref, signal))) : [];
+	const startedAt = Date.now();
+	const count = input.count ?? 1;
+	const generateSingle = async (index) => {
+		let generated;
+		let output;
+		if (active.provider === "google") {
+			const aspectRatio = input.ratio;
+			const imageSize = input.quality;
+			generated = input.mode === "edit" ? await editGoogleImage({
+				apiKey: credential.value,
+				endpoint: active.endpoint,
+				model: active.model,
+				prompt: input.prompt,
+				sourceImages,
+				aspectRatio,
+				imageSize,
+				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
+				signal
+			}) : await generateGoogleImage({
+				apiKey: credential.value,
+				endpoint: active.endpoint,
+				model: active.model,
+				prompt: input.prompt,
+				aspectRatio,
+				imageSize,
+				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
+				signal
+			});
+			output = `${aspectRatio}, ${imageSize}`;
+		} else if (active.provider === "openai") {
+			const size = openAISize(input.ratio);
+			generated = input.mode === "edit" ? await editOpenAICompatibleImage({
+				apiKey: credential.value,
+				baseURL: active.baseURL,
+				model: active.model,
+				prompt: input.prompt,
+				sourceImages,
+				size,
+				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
+				signal
+			}) : await generateOpenAICompatibleImage({
+				provider: "openai",
+				apiKey: credential.value,
+				baseURL: active.baseURL,
+				model: active.model,
+				prompt: input.prompt,
+				size,
+				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
+				signal
+			});
+			output = size;
+		} else if (active.provider === "seedream") {
+			const size = input.quality;
+			generated = input.mode === "edit" ? await editSeedreamImage({
+				apiKey: credential.value,
+				baseURL: active.baseURL,
+				model: active.model,
+				prompt: input.prompt,
+				sourceImages,
+				size,
+				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
+				signal
+			}) : await generateOpenAICompatibleImage({
+				provider: "seedream",
+				apiKey: credential.value,
+				baseURL: active.baseURL,
+				model: active.model,
+				prompt: input.prompt,
+				size,
+				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
+				signal
+			});
+			output = size;
+		} else {
+			if (input.mode === "edit" && sourceImages.length > 3) throw new Error("DashScope (通义万相) 图生图目前最多支持 3 张参考图，请精简后重试");
+			const size = dashScopeSize(input.ratio);
+			generated = input.mode === "edit" ? await editDashScopeImage({
+				apiKey: credential.value,
+				endpoint: active.endpoint,
+				model: active.model,
+				prompt: input.prompt,
+				sourceImages,
+				size,
+				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
+				signal
+			}) : await generateDashScopeImage({
+				apiKey: credential.value,
+				endpoint: active.endpoint,
+				model: active.model,
+				prompt: input.prompt,
+				size,
+				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
+				signal
+			});
+			output = size;
+		}
+		if (!ctx.attachments.imageLimits.mediaTypes.includes(generated.mediaType)) throw new Error(`当前 DSH 不支持保存 ${generated.mediaType} 图片`);
+		return {
+			attachment: await ctx.attachments.saveImage({
+				data: generated.data,
+				mediaType: generated.mediaType,
+				name: count > 1 ? `studio-image-${index + 1}` : "studio-image"
+			}),
+			output
+		};
+	};
+	if (count === 1) {
+		const single = await generateSingle(0);
+		return {
+			attachment: single.attachment,
+			output: single.output,
+			provider: input.provider,
+			model: input.model,
+			prompt: input.prompt,
+			createdAt: Date.now(),
+			elapsedMs: Date.now() - startedAt,
+			requestedCount: 1,
+			failedCount: 0,
+			items: [single],
+			...single.savedTo ? { savedTo: single.savedTo } : {}
+		};
+	}
+	const poolResults = await runPool(Array.from({ length: count }, (_, i) => () => generateSingle(i)), 2);
+	const successes = [];
+	const errors = [];
+	for (let i = 0; i < poolResults.length; i++) {
+		const r = poolResults[i];
+		if (r.status === "fulfilled") successes.push(r.value);
+		else errors.push({
+			index: i,
+			message: r.reason instanceof Error ? r.reason.message : String(r.reason)
+		});
+	}
+	if (successes.length === 0) {
+		const firstReason = poolResults[0] && poolResults[0].status === "rejected" ? poolResults[0].reason : /* @__PURE__ */ new Error("批量生图全部失败");
+		throw firstReason instanceof Error ? firstReason : new Error(String(firstReason));
+	}
+	const first = successes[0];
+	return {
+		attachment: first.attachment,
+		output: first.output,
+		provider: input.provider,
+		model: input.model,
+		prompt: input.prompt,
+		createdAt: Date.now(),
+		elapsedMs: Date.now() - startedAt,
+		requestedCount: count,
+		failedCount: errors.length,
+		items: successes,
+		...errors.length > 0 ? { errors } : {},
+		...first.savedTo ? { savedTo: first.savedTo } : {}
+	};
 }
-/** True when `child` equals `parent` or lives underneath it (lexically). */
-function containsPath(parent, child) {
-	const rel = relative(parent, child);
-	return rel === "" || rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);
+async function runPool(tasks, concurrency = 2) {
+	const results = new Array(tasks.length);
+	let nextIndex = 0;
+	async function worker() {
+		while (nextIndex < tasks.length) {
+			const currentIndex = nextIndex++;
+			const task = tasks[currentIndex];
+			try {
+				const val = await task();
+				results[currentIndex] = {
+					status: "fulfilled",
+					value: val
+				};
+			} catch (err) {
+				results[currentIndex] = {
+					status: "rejected",
+					reason: err
+				};
+			}
+		}
+	}
+	const workers = Array.from({ length: Math.min(concurrency, tasks.length) }, () => worker());
+	await Promise.all(workers);
+	return results;
+}
+function studioProfile(config, provider, configured) {
+	const active = resolveProvider(providerConfig(config, provider));
+	if (active.provider === "comfyui") throw new Error("Invalid cloud provider profile");
+	const model = active.model;
+	if (provider === "google") return profile(provider, model, configured, ASPECT_RATIOS.map(option), IMAGE_SIZES.map((value) => ({
+		value,
+		label: value
+	})), "1:1", "1K");
+	if (provider === "openai") return profile(provider, model, configured, [
+		"1:1",
+		"3:2",
+		"2:3"
+	].map(option), [{
+		value: "standard",
+		label: "标准（推荐）"
+	}], "1:1", "standard");
+	if (provider === "seedream") return profile(provider, model, configured, [{
+		value: "auto",
+		label: "模型自动"
+	}], [
+		"1K",
+		"2K",
+		"4K"
+	].map((value) => ({
+		value,
+		label: value
+	})), "auto", "2K");
+	return profile(provider, model, configured, [
+		"1:1",
+		"3:2",
+		"2:3",
+		"16:9",
+		"9:16"
+	].map(option), [{
+		value: "standard",
+		label: "标准（推荐）"
+	}], "1:1", "standard");
+}
+function profile(provider, model, configured, ratioOptions, qualityOptions, defaultRatio, defaultQuality) {
+	return {
+		provider,
+		label: PROVIDER_LABELS[provider],
+		model,
+		configured,
+		supportsEditing: true,
+		ratioOptions,
+		qualityOptions,
+		defaultRatio,
+		defaultQuality
+	};
 }
-/**
-* Real path of the closest existing ancestor of `dir` (inclusive). Walking up
-* lets us validate symlinked folder segments before creating anything under
-* them.
-*/
-async function nearestExistingRealPath(dir) {
-	let probe = dir;
-	for (;;) try {
-		return await realpath(probe);
-	} catch (error) {
-		if (error?.code !== "ENOENT") throw error;
-		const parent = dirname(probe);
-		if (parent === probe) throw error;
-		probe = parent;
+function option(value) {
+	return {
+		value,
+		label: RATIO_LABELS[value] ?? value
+	};
+}
+function providerConfig(config, provider, model) {
+	if (model === void 0) return {
+		...config,
+		provider
+	};
+	switch (provider) {
+		case "google": return {
+			...config,
+			provider,
+			googleModel: model
+		};
+		case "openai": return {
+			...config,
+			provider,
+			openaiModel: model
+		};
+		case "seedream": return {
+			...config,
+			provider,
+			seedreamModel: model
+		};
+		case "dashscope": return {
+			...config,
+			provider,
+			dashscopeModel: model
+		};
 	}
 }
-/** Reject a directory whose on-disk resolution lands outside the workspace. */
-function assertInsideWorkspace(realRoot, candidate, folder) {
-	if (containsPath(realRoot, candidate)) return;
-	throw new Error(`image workspace folder '${folder ?? ""}' must stay inside the session workspace (${candidate} resolves outside ${realRoot})`);
+function assertAllowed(profile, input) {
+	if (input.model !== profile.model) throw new Error("模型配置已变化，请刷新工作台后重试");
+	if (!profile.ratioOptions.some((option) => option.value === input.ratio)) throw new Error("该 Provider 不支持所选比例");
+	if (!profile.qualityOptions.some((option) => option.value === input.quality)) throw new Error("该 Provider 不支持所选清晰度");
+	if (input.mode === "edit" && !profile.supportsEditing) throw new Error("该 Provider 暂不支持图生图");
 }
-/**
-* Write one generated image durably under the session workspace.
-*
-* Containment is enforced twice: lexically by `workspaceImageDir`, then
-* against real paths, so a configured folder (or any intermediate segment)
-* that is a symlink pointing outside the workspace is rejected before and
-* after anything is created.
-*
-* The bytes are written to a same-directory staging file and renamed onto the
-* target, so a crash never leaves a half-written image under its final name.
-* Re-saving identical bytes rewrites the same file (the name is content-
-* addressed), which keeps repeated generations idempotent. A cancellation is
-* honoured up to and including the final rename: an aborted save never
-* resolves successfully and never leaves the image behind under its final
-* name.
-* @param options - workspace root, configured folder, attachment identity, and image bytes.
-* @returns the absolute path of the written file.
-*/
-async function saveImageToWorkspace(options) {
-	const dir = workspaceImageDir(options.workspaceRoot, options.folder);
-	options.signal?.throwIfAborted();
-	const realRoot = await realpath(resolve(options.workspaceRoot));
-	assertInsideWorkspace(realRoot, await nearestExistingRealPath(dir), options.folder);
-	const name = workspaceImageName(options.attachmentId, options.mediaType);
-	const target = join(dir, name);
-	const staging = join(dir, `.${name}.${process.pid}-${randomUUID()}.tmp`);
-	await mkdir(dir, { recursive: true });
-	assertInsideWorkspace(realRoot, await realpath(dir), options.folder);
-	try {
-		await writeFile(staging, options.data, {
-			flag: "wx",
-			signal: options.signal
-		});
-		options.signal?.throwIfAborted();
-		await rename(staging, target);
+async function readStudioReference(ctx, reference, signal) {
+	if (reference === void 0) throw new Error("图生图需要至少一张参考图");
+	if ("attachment" in reference) {
+		const stored = await ctx.attachments.readImage(reference.attachment, signal);
+		return {
+			data: stored.data,
+			mediaType: stored.ref.mediaType
+		};
+	}
+	const data = decodeCanonicalBase64(reference.data);
+	if (data.byteLength > ctx.attachments.imageLimits.maxImageBytes) throw new Error("参考图超过当前 DSH 的大小限制");
+	await ctx.attachments.validateImage({
+		data,
+		mediaType: reference.mediaType,
+		...reference.name === void 0 ? {} : { name: reference.name }
+	});
+	return {
+		data,
+		mediaType: reference.mediaType
+	};
+}
+function decodeCanonicalBase64(value) {
+	if (!/^[A-Za-z0-9+/]*={0,2}$/.test(value) || value.length % 4 !== 0) throw new Error("参考图编码无效");
+	const data = Buffer.from(value, "base64");
+	if (data.byteLength === 0 || data.toString("base64") !== value) throw new Error("参考图编码无效");
+	return new Uint8Array(data);
+}
+function openAISize(ratio) {
+	if (ratio === "3:2") return "1536x1024";
+	if (ratio === "2:3") return "1024x1536";
+	return "1024x1024";
+}
+function dashScopeSize(ratio) {
+	return {
+		"1:1": "1024*1024",
+		"3:2": "1536*1024",
+		"2:3": "1024*1536",
+		"16:9": "1664*928",
+		"9:16": "928*1664"
+	}[ratio] ?? "1024*1024";
+}
+function cloudProvider$1(value) {
+	return CLOUD_IMAGE_PROVIDERS.includes(value);
+}
+//#endregion
+//#region lib/types/studio-route.js
+/** Serve workbench capabilities and generation requests without exposing provider credentials. */
+async function serveStudio(req, res, deps) {
+	if (!sameOrigin(req)) return jsonError(res, 403, "origin-rejected");
+	if (req.method === "GET") try {
+		return json(res, 200, await deps.describe());
 	} catch (error) {
-		await unlink(staging).catch(() => {});
-		throw error;
+		return jsonError(res, 500, errorMessage(error, "studio-unavailable"));
 	}
+	if (req.method !== "POST") return jsonError(res, 405, "method-not-allowed");
+	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError(res, 415, "json-required");
+	const controller = new AbortController();
+	const onConnectionClose = () => {
+		if (!res.writableEnded) controller.abort(/* @__PURE__ */ new Error("The browser closed the image generation request."));
+	};
+	const onReqAborted = () => {
+		controller.abort(/* @__PURE__ */ new Error("The browser closed the image generation request."));
+	};
+	res.once("close", onConnectionClose);
+	req.once("aborted", onReqAborted);
 	try {
-		options.signal?.throwIfAborted();
+		let input;
+		try {
+			input = parseStudioGenerateRequest(JSON.parse(await readBody(req, deps.maxBodyBytes)));
+		} catch (error) {
+			return jsonError(res, 400, errorMessage(error, "invalid-request"));
+		}
+		const output = await deps.generate(input, controller.signal);
+		if (!res.headersSent && !res.writableEnded && !res.destroyed) json(res, 200, output);
 	} catch (error) {
-		await unlink(target).catch(() => {});
-		throw error;
+		if (res.headersSent || res.writableEnded || res.destroyed) return;
+		jsonError(res, controller.signal.aborted ? 499 : 502, errorMessage(error, "generation-failed"));
+	} finally {
+		res.off("close", onConnectionClose);
+		req.off("aborted", onReqAborted);
 	}
-	return target;
 }
-/** Regex pattern strictly matching generated image file names (e.g. image-01234567.png). */
-const GENERATED_IMAGE_NAME_REGEX = /^image-[0-9a-f]{8,}\.(png|jpg|jpeg|webp|gif)$/i;
-/**
-* Safely delete a generated image file from workspace disk by its path.
-* Enforces strict safety gates:
-* 1. Base name must match generated image pattern (`image-<hex>.<ext>`) to avoid touching user files.
-* 2. Path must be a regular file and NOT a symbolic link.
-* 3. Real canonical path's basename must also match the pattern.
-* 4. Real canonical path must reside within an allowed workspace root (or process.cwd()).
-*/
-async function deleteImageFromWorkspace(filePath, allowedWorkspaceRoots) {
-	const resolved = resolve(filePath);
-	const base = resolved.split(/[/\\]/).pop() ?? "";
-	if (!GENERATED_IMAGE_NAME_REGEX.test(base)) return false;
-	try {
-		const fileLstat = await lstat(resolved);
-		if (fileLstat.isSymbolicLink() || !fileLstat.isFile()) return false;
-	} catch (err) {
-		if (err?.code === "ENOENT") return true;
-		throw err;
-	}
-	try {
-		const realFile = await realpath(resolved);
-		const realBase = realFile.split(/[/\\]/).pop() ?? "";
-		if (!GENERATED_IMAGE_NAME_REGEX.test(realBase)) return false;
-		const rootsToCheck = /* @__PURE__ */ new Set();
-		if (allowedWorkspaceRoots) {
-			for (const r of allowedWorkspaceRoots) if (typeof r === "string" && r.trim()) rootsToCheck.add(resolve(r));
-		}
-		rootsToCheck.add(resolve(process.cwd()));
-		let withinAllowed = false;
-		for (const root of rootsToCheck) try {
-			if (containsPath(await realpath(root), realFile)) {
-				withinAllowed = true;
-				break;
-			}
-		} catch {}
-		if (!withinAllowed) return false;
-		await unlink(realFile);
-		return true;
-	} catch (err) {
-		if (err?.code === "ENOENT") return true;
-		throw err;
+/** Strictly validate the small untrusted workbench wire contract. */
+function parseStudioGenerateRequest(value) {
+	const input = record(value);
+	if (input === void 0) throw new Error("请求格式无效");
+	if (input.mode !== "generate" && input.mode !== "edit") throw new Error("请选择生成类型");
+	if (!cloudProvider(input.provider)) throw new Error("不支持该图像 Provider");
+	const prompt = requiredText(input.prompt, "请输入提示词", 2e3);
+	const model = requiredText(input.model, "请选择模型", 200);
+	const ratio = requiredText(input.ratio, "请选择比例", 32);
+	const quality = requiredText(input.quality, "请选择清晰度", 32);
+	const references = (Array.isArray(input.references) ? input.references : input.reference !== void 0 ? [input.reference] : []).map(parseReference);
+	if (input.mode === "edit" && references.length === 0) throw new Error("图生图需要至少一张参考图");
+	if (references.length > 5) throw new Error("最多支持上传 5 张参考图");
+	const workspaceRoot = typeof input.workspaceRoot === "string" && input.workspaceRoot.trim().length > 0 ? input.workspaceRoot.trim() : void 0;
+	let count;
+	if (input.count !== void 0) {
+		if (typeof input.count !== "number" || !Number.isInteger(input.count) || input.count < 1 || input.count > 4) throw new Error("生成数量仅支持 1 到 4 张");
+		count = input.count;
 	}
+	return {
+		mode: input.mode,
+		provider: input.provider,
+		model,
+		prompt,
+		ratio,
+		quality,
+		...count !== void 0 ? { count } : {},
+		...references.length > 0 ? {
+			references,
+			reference: references[0]
+		} : {},
+		...workspaceRoot !== void 0 ? { workspaceRoot } : {}
+	};
 }
-/**
-* Safely find and delete a generated image file by its attachment ID within a single workspace root.
-* Strictly checks sha256:64hex format and avoids scanning unrelated workspaces.
-* Only used as fallback for historical images where savedTo was not persisted.
-*/
-async function deleteImageByAttachmentIdFromWorkspace(attachmentId, options = {}) {
-	const match = attachmentId.match(/^sha256:([0-9a-f]{64})$/i);
-	if (!match || !match[1]) return false;
-	const prefix = match[1].slice(0, 8);
-	const rootsToCheck = /* @__PURE__ */ new Set();
-	if (options.workspaceRoot && options.workspaceRoot.trim()) rootsToCheck.add(resolve(options.workspaceRoot.trim()));
-	else if (options.allowedWorkspaceRoots) {
-		for (const r of options.allowedWorkspaceRoots) if (typeof r === "string" && r.trim()) rootsToCheck.add(resolve(r));
+function parseReference(value) {
+	const reference = record(value);
+	if (reference === void 0) throw new Error("参考图格式无效");
+	if ("attachment" in reference) {
+		const attachment = parseImageAttachmentRef(reference.attachment);
+		if (attachment === void 0) throw new Error("参考图附件无效");
+		return { attachment };
 	}
-	rootsToCheck.add(resolve(process.cwd()));
-	const candidateDirs = /* @__PURE__ */ new Set();
-	if (options.folder && options.folder.trim()) candidateDirs.add(options.folder.trim());
-	candidateDirs.add("dsh-image-gen");
-	candidateDirs.add("image");
-	candidateDirs.add("images");
-	candidateDirs.add("");
-	const candidateExtensions = [
-		"png",
-		"jpg",
-		"jpeg",
-		"webp",
-		"gif"
-	];
-	let deleted = false;
-	for (const root of rootsToCheck) for (const dir of candidateDirs) for (const ext of candidateExtensions) {
-		const targetPath = join(root, dir, `image-${prefix}.${ext}`);
-		try {
-			if (await deleteImageFromWorkspace(targetPath, rootsToCheck)) deleted = true;
-		} catch {}
+	if (!imageMediaType(reference.mediaType) || typeof reference.data !== "string") throw new Error("参考图格式无效");
+	if (reference.data.length === 0) throw new Error("参考图内容为空");
+	if (reference.name !== void 0 && typeof reference.name !== "string") throw new Error("参考图名称无效");
+	return {
+		mediaType: reference.mediaType,
+		data: reference.data,
+		...typeof reference.name === "string" ? { name: reference.name.slice(0, 240) } : {}
+	};
+}
+function requiredText(value, message, maxLength) {
+	if (typeof value !== "string" || value.trim().length === 0) throw new Error(message);
+	const text = value.trim();
+	if (text.length > maxLength) throw new Error(`${message}（最多 ${String(maxLength)} 个字符）`);
+	return text;
+}
+function cloudProvider(value) {
+	return typeof value === "string" && CLOUD_IMAGE_PROVIDERS.includes(value);
+}
+function imageMediaType(value) {
+	return value === "image/png" || value === "image/jpeg" || value === "image/webp" || value === "image/gif";
+}
+function sameOrigin(req) {
+	const origin = req.headers.origin;
+	const host = req.headers.host;
+	return origin === void 0 || host === void 0 || origin === `http://${host}` || origin === `https://${host}`;
+}
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+async function readBody(req, maxBytes) {
+	const chunks = [];
+	let bytes = 0;
+	for await (const chunk of req) {
+		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+		bytes += buffer.byteLength;
+		if (bytes > maxBytes) throw new Error("参考图过大，请压缩后重试");
+		chunks.push(buffer);
 	}
-	return deleted;
+	return Buffer.concat(chunks).toString("utf8");
+}
+function errorMessage(error, fallback) {
+	return error instanceof Error && error.message.trim().length > 0 ? error.message : fallback;
+}
+function json(res, status, value) {
+	if (res.headersSent || res.writableEnded || res.destroyed) return;
+	res.writeHead(status, {
+		"content-type": "application/json; charset=utf-8",
+		"cache-control": "no-store"
+	});
+	res.end(JSON.stringify(value));
+}
+function jsonError(res, status, message) {
+	if (res.headersSent || res.writableEnded || res.destroyed) return;
+	json(res, status, { error: message });
 }
 //#endregion
 //#region lib/types/index.js
@@ -1533,14 +2143,53 @@ function apply(ctx, config = {}) {
 	ctx.effect(() => ctx.webServer.register({
 		kind: "exact",
 		path: DELETE_ROUTE,
-		handler: (req, res) => serveDelete(req, res, {
-			deleteWorkspaceImage: (filePath) => deleteImageFromWorkspace(filePath, knownWorkspaceRoots),
-			deleteWorkspaceImageByAttachmentId: (attachmentId) => deleteImageByAttachmentIdFromWorkspace(attachmentId, {
+		handler: (req, res) => serveDelete(req, res, { deleteWorkspaceImage: (filePath) => deleteImageFromWorkspace(filePath, knownWorkspaceRoots) })
+	}), "dsh-image-gen: delete route");
+	ctx.effect(() => ctx.webServer.register({
+		kind: "exact",
+		path: SAVE_WORKSPACE_ROUTE,
+		handler: (req, res) => serveSaveWorkspace(req, res, {
+			readImage: (ref) => ctx.attachments.readImage(ref),
+			saveToWorkspace: (options) => saveImageToWorkspace({
+				workspaceRoot: options.workspaceRoot,
 				folder: current().workspaceFolder,
-				allowedWorkspaceRoots: knownWorkspaceRoots
-			})
+				attachmentId: options.attachmentId,
+				mediaType: options.mediaType,
+				data: options.data
+			}),
+			getActiveWorkspaceRoot: () => Array.from(knownWorkspaceRoots)[0] || process.cwd(),
+			getAllowedWorkspaceRoots: async () => {
+				const discovered = await getDshWorkspaceRoots().catch(() => []);
+				return /* @__PURE__ */ new Set([
+					...knownWorkspaceRoots,
+					...discovered,
+					process.cwd()
+				]);
+			},
+			isSaveEnabled: () => current().saveToWorkspace !== false
 		})
-	}), "dsh-image-gen: delete route");
+	}), "dsh-image-gen: save workspace route");
+	ctx.effect(() => ctx.webServer.register({
+		kind: "exact",
+		path: STUDIO_ROUTE,
+		handler: (req, res) => serveStudio(req, res, {
+			describe: async () => {
+				const base = await describeStudio(ctx, current());
+				const workspaces = await getDshWorkspacesFull().catch(() => []);
+				const activeRoot = Array.from(knownWorkspaceRoots)[0] || workspaces[0]?.path || process.cwd();
+				return {
+					...base,
+					workspaceRoot: activeRoot,
+					workspaces
+				};
+			},
+			generate: (input, signal) => {
+				const fallbackRoot = Array.from(knownWorkspaceRoots)[0] || process.cwd();
+				return generateFromStudio(ctx, current(), input, signal, fallbackRoot);
+			},
+			maxBodyBytes: Math.ceil(ctx.attachments.imageLimits.maxImageBytes * 1.4 * 5) + 262144
+		})
+	}), "dsh-image-gen: studio route");
 	ctx.tools.register(defineTool({
 		name: "generate_image",
 		description: "Generate a new image with the configured provider. Use when the user asks to create or draw a new image; use edit_image instead when they want to change an existing image. Give a complete visual prompt including subject, composition, style, lighting, and any exact text that should appear. A successful image is attached directly to the conversation and may also be saved under the session workspace. Do not call read, glob, or other tools to locate or verify the image.",
@@ -1839,7 +2488,8 @@ function imageOutput(verb) {
 					required: true
 				},
 				savedTo: { type: "string" },
-				saveError: { type: "string" }
+				saveError: { type: "string" },
+				seed: { type: "integer" }
 			}
 		},
 		render: (_args, value) => {
@@ -1949,4 +2599,4 @@ function installImageSettings(ctx, config, hooks) {
 	ctx.logger.warn("dsh-image-gen: this DSH exposes neither settings API generation; settings UI stays on the composition entry");
 }
 //#endregion
-export { Config, DELETE_ROUTE, IMAGE_ROUTE, apply, imageAttachmentFromMeta, inject, name };
+export { Config, DELETE_ROUTE, IMAGE_ROUTE, SAVE_WORKSPACE_ROUTE, STUDIO_ROUTE, apply, imageAttachmentFromMeta, inject, name };