dsh-image-gen 0.6.0 → 0.6.5

package/lib/index.js

@@ -3,7 +3,8 @@ import { Context, Service } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
 import { lstat, mkdir, readFile, readdir, realpath, rename, stat, unlink, writeFile } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { createHash, randomUUID } from "node:crypto";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+import http from "node:http";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -5951,6 +5952,8 @@ const SAVE_WORKSPACE_ROUTE = "/plugins/dsh-image-gen/save-workspace";
 const TEST_CONNECTION_ROUTE = "/plugins/dsh-image-gen/test";
 /** Browser route the workbench infinite canvas pushes live state through. */
 const CANVAS_STATE_ROUTE = "/plugins/dsh-image-gen/canvas-state";
+const SUBSCRIPTION_LOGIN_ROUTE = "/plugins/dsh-image-gen/subscription-login";
+const SUBSCRIPTION_STATUS_ROUTE = "/plugins/dsh-image-gen/subscription-status";
 /** Every accepted canvas node kind, for validating untrusted pushes. */
 const CANVAS_NODE_KINDS = [
 	"image",
@@ -5973,8 +5976,25 @@ const IMAGE_PROVIDERS = [
 	"dashscope",
 	"xai",
 	"zhipu",
-	"comfyui"
+	"comfyui",
+	"chatgpt-sub",
+	"grok-sub",
+	"google-sub"
 ];
+/**
+* Providers that generate through a logged-in subscription account instead
+* of an API key. They use no credential reference and never join the
+* cloud/BYOK sets.
+*/
+const SUBSCRIPTION_PROVIDERS = [
+	"chatgpt-sub",
+	"grok-sub",
+	"google-sub"
+];
+/** True when the provider generates through a logged-in subscription account. */
+function isSubscriptionProvider(provider) {
+	return SUBSCRIPTION_PROVIDERS.includes(provider);
+}
 /** Providers supported by the first browser workbench release. */
 const CLOUD_IMAGE_PROVIDERS = [
 	"google",
@@ -6027,7 +6047,16 @@ const PROVIDER_DISPLAY_NAMES = {
 	dashscope: "DashScope",
 	xai: "xAI Grok",
 	zhipu: "智谱 GLM",
-	comfyui: "ComfyUI"
+	comfyui: "ComfyUI",
+	"chatgpt-sub": "ChatGPT 订阅",
+	"grok-sub": "Grok 订阅",
+	"google-sub": "Google 订阅"
+};
+/** Display names for the subscription providers, separate from the BYOK table. */
+const SUBSCRIPTION_PROVIDER_DISPLAY_NAMES = {
+	"chatgpt-sub": "ChatGPT 订阅",
+	"grok-sub": "Grok 订阅",
+	"google-sub": "Google 订阅"
 };
 /** Default endpoints and base URLs. */
 const DEFAULT_GOOGLE_ENDPOINT = "https://generativelanguage.googleapis.com/v1beta/interactions";
@@ -6092,13 +6121,20 @@ function mergeComfyUIPrompt(preset, user) {
 	if (userText.length === 0) return presetText;
 	return `${presetText}, ${userText}`;
 }
+/** Default models for the subscription channels; fixed by the bridge protocol. */
+const DEFAULT_SUBSCRIPTION_MODELS = {
+	"chatgpt-sub": "gpt-image-2.5-flare",
+	"grok-sub": "grok-imagine-image-2.0",
+	"google-sub": "gemini-3-pro-image"
+};
+DEFAULT_SUBSCRIPTION_MODELS["chatgpt-sub"], DEFAULT_SUBSCRIPTION_MODELS["grok-sub"], DEFAULT_SUBSCRIPTION_MODELS["google-sub"];
 //#endregion
 //#region lib/types/config.js
 /** User-facing configuration for supported image providers. */
 /** Default workspace subfolder that receives generated image files. */
 const DEFAULT_WORKSPACE_FOLDER = "dsh-image-gen";
 /** Google tool-level controls. */
-const ASPECT_RATIOS = [
+const ASPECT_RATIOS$1 = [
 	"1:1",
 	"3:2",
 	"2:3",
@@ -6121,6 +6157,8 @@ const Config = z.object({
 	openaiModel: z.string().default(DEFAULT_OPENAI_MODEL),
 	openaiCompatBaseURL: z.string().default(""),
 	openaiCompatModel: z.string().default(""),
+	openaiCompatEditFormat: z.union([z.const("multipart"), z.const("jsonImageUrlArray")]).default("multipart"),
+	openaiCompatEditExtra: z.dict(z.any()).default({}),
 	seedreamBaseURL: z.string().default(DEFAULT_SEEDREAM_BASE_URL),
 	seedreamModel: z.string().default(DEFAULT_SEEDREAM_MODEL),
 	dashscopeEndpoint: z.string().default(DEFAULT_DASHSCOPE_ENDPOINT),
@@ -6162,7 +6200,9 @@ function resolveProvider(config) {
 				apiKeyEnv: OPENAI_COMPAT_API_KEY_ENV,
 				model,
 				baseURL,
-				imageSize: "1024x1024"
+				imageSize: "1024x1024",
+				editFormat: config.openaiCompatEditFormat ?? "multipart",
+				editExtra: config.openaiCompatEditExtra ?? {}
 			};
 		}
 		case "seedream": return {
@@ -6204,6 +6244,18 @@ function resolveProvider(config) {
 				timeoutMs: config.comfyuiTimeoutMs ?? 3e5
 			};
 		}
+		case "chatgpt-sub": return {
+			provider: "chatgpt-sub",
+			model: DEFAULT_SUBSCRIPTION_MODELS["chatgpt-sub"]
+		};
+		case "grok-sub": return {
+			provider: "grok-sub",
+			model: DEFAULT_SUBSCRIPTION_MODELS["grok-sub"]
+		};
+		case "google-sub": return {
+			provider: "google-sub",
+			model: DEFAULT_SUBSCRIPTION_MODELS["google-sub"]
+		};
 		case "google": return {
 			provider: "google",
 			apiKeyEnv: GOOGLE_API_KEY_ENV,
@@ -6255,6 +6307,9 @@ function withProviderOverrides(config, provider, model) {
 			...base,
 			zhipuModel: trimmed
 		};
+		case "chatgpt-sub": return base;
+		case "grok-sub": return base;
+		case "google-sub": return base;
 		case "comfyui": return base;
 	}
 }
@@ -6495,24 +6550,24 @@ const MAX_NODE_COUNT = 1e5;
 const MAX_SELECTION_COUNT = 1e3;
 /** Serve one canvas-state push. */
 async function serveCanvasState(req, res, deps) {
-	if (req.method !== "POST") return jsonError$4(res, 405, "method-not-allowed");
-	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$4(res, 415, "json-required");
+	if (req.method !== "POST") return jsonError$5(res, 405, "method-not-allowed");
+	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$5(res, 415, "json-required");
 	const origin = req.headers.origin;
 	const host = req.headers.host;
-	if (origin !== void 0 && host !== void 0 && origin !== `http://${host}` && origin !== `https://${host}`) return jsonError$4(res, 403, "origin-rejected");
+	if (origin !== void 0 && host !== void 0 && origin !== `http://${host}` && origin !== `https://${host}`) return jsonError$5(res, 403, "origin-rejected");
 	let body;
 	try {
-		body = JSON.parse(await readBody$3(req, deps.maxBodyBytes));
+		body = JSON.parse(await readBody$4(req, deps.maxBodyBytes));
 	} catch (error) {
-		return jsonError$4(res, error instanceof Error && error.message === "request-too-large" ? 413 : 400, "invalid-request");
+		return jsonError$5(res, error instanceof Error && error.message === "request-too-large" ? 413 : 400, "invalid-request");
 	}
 	const push = parseCanvasStatePush(body);
-	if (push === void 0) return jsonError$4(res, 400, "invalid-canvas-state");
+	if (push === void 0) return jsonError$5(res, 400, "invalid-canvas-state");
 	let selectionImage;
 	if (push.selectionImage !== void 0) {
 		const decoded = decodeSelectionImage(push.selectionImage);
-		if (decoded === void 0) return jsonError$4(res, 400, "invalid-selection-image");
-		if (decoded.data.byteLength > deps.maxImageBytes) return jsonError$4(res, 413, "selection-image-too-large");
+		if (decoded === void 0) return jsonError$5(res, 400, "invalid-selection-image");
+		if (decoded.data.byteLength > deps.maxImageBytes) return jsonError$5(res, 413, "selection-image-too-large");
 		selectionImage = decoded;
 	}
 	deps.mirror.apply(push, selectionImage);
@@ -6668,7 +6723,7 @@ function optionalDimension(value) {
 function nonNegativeInteger$1(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
-async function readBody$3(req, maxBytes) {
+async function readBody$4(req, maxBytes) {
 	const chunks = [];
 	let bytes = 0;
 	for await (const chunk of req) {
@@ -6679,7 +6734,7 @@ async function readBody$3(req, maxBytes) {
 	}
 	return Buffer.concat(chunks).toString("utf8");
 }
-function jsonError$4(res, status, code) {
+function jsonError$5(res, status, code) {
 	res.writeHead(status, {
 		"content-type": "application/json",
 		"cache-control": "no-store"
@@ -6793,7 +6848,7 @@ function findReferenceImage(messages, sourceAttachmentId) {
 }
 /** Validate an untrusted serialized image reference at an HTTP/UI boundary. */
 function parseImageAttachmentRef(value) {
-	const ref = record$7(value);
+	const ref = record$8(value);
 	if (ref === void 0) return void 0;
 	if (typeof ref.attachmentId !== "string" || !imageMediaType$4(ref.mediaType)) return void 0;
 	if (!nonNegativeInteger(ref.bytes) || !positiveInteger(ref.width) || !positiveInteger(ref.height)) return void 0;
@@ -6825,7 +6880,7 @@ function findInBlocks(blocks, sourceAttachmentId) {
 	}
 }
 function parseDimensions(value) {
-	const dimensions = record$7(value);
+	const dimensions = record$8(value);
 	if (dimensions === void 0 || !positiveInteger(dimensions.width) || !positiveInteger(dimensions.height)) return void 0;
 	return {
 		width: dimensions.width,
@@ -6897,7 +6952,7 @@ function positiveInteger(value) {
 function nonNegativeInteger(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
-function record$7(value) {
+function record$8(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 //#endregion
@@ -7115,8 +7170,8 @@ function prepareComfyUIWorkflow(workflowJson, prompt, seed = randomSeed(), image
 	};
 	let imageInputs = 0;
 	const prepared = Object.fromEntries(Object.entries(workflow).map(([nodeId, value]) => {
-		const node = record$6(value);
-		const inputs = node === void 0 ? void 0 : record$6(node.inputs);
+		const node = record$7(value);
+		const inputs = node === void 0 ? void 0 : record$7(node.inputs);
 		if (inputs === void 0) return [nodeId, value];
 		const nextInputs = inject(inputs);
 		if (isImagePlaceholder(nextInputs[IMAGE_INPUT_KEY])) {
@@ -7152,7 +7207,7 @@ function parseWorkflow(workflowJson) {
 	}
 	if (!isRecord(value) || Object.keys(value).length === 0) throw new Error("ComfyUI workflow must be a non-empty API-format JSON object");
 	if (!Object.values(value).some((node) => {
-		const inputs = record$6(node)?.inputs;
+		const inputs = record$7(node)?.inputs;
 		return inputs !== void 0 && containsPromptPlaceholder(inputs);
 	})) throw new Error(`ComfyUI workflow must contain ${COMFYUI_PROMPT_PLACEHOLDER} (or ${LEGACY_PROMPT_PLACEHOLDER}) in a text input`);
 	return value;
@@ -7168,7 +7223,7 @@ function containsPromptPlaceholder(value) {
 function isRecord(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function record$6(value) {
+function record$7(value) {
 	return isRecord(value) ? value : void 0;
 }
 //#endregion
@@ -7302,9 +7357,9 @@ async function waitForOutput(baseURL, promptId, signal) {
 		});
 		const text = await readBoundedText$3(response, MAX_HISTORY_BYTES);
 		if (!response.ok) throw new Error(`ComfyUI history request failed (${response.status}): ${redactSecrets(text).slice(0, ERROR_LIMIT$3)}`);
-		const entry = record$5(parseJsonRecord(text, "ComfyUI history returned invalid JSON")[promptId]);
+		const entry = record$6(parseJsonRecord(text, "ComfyUI history returned invalid JSON")[promptId]);
 		if (entry !== void 0) {
-			const status = record$5(entry.status);
+			const status = record$6(entry.status);
 			if (status?.status_str === "error") throw new Error(`ComfyUI workflow failed: ${redactSecrets(JSON.stringify(status.messages ?? status)).slice(0, ERROR_LIMIT$3)}`);
 			const output = firstOutputImage(entry.outputs);
 			if (output !== void 0) return output;
@@ -7314,13 +7369,13 @@ async function waitForOutput(baseURL, promptId, signal) {
 	}
 }
 function firstOutputImage(value) {
-	const outputs = record$5(value);
+	const outputs = record$6(value);
 	if (outputs === void 0) return void 0;
 	for (const nodeOutput of Object.values(outputs)) {
-		const images = record$5(nodeOutput)?.images;
+		const images = record$6(nodeOutput)?.images;
 		if (!Array.isArray(images)) continue;
 		for (const image of images) {
-			const item = record$5(image);
+			const item = record$6(image);
 			if (typeof item?.filename !== "string" || item.filename.length === 0) continue;
 			const output = {
 				filename: item.filename,
@@ -7361,7 +7416,7 @@ function comfyUIBaseURL(value) {
 function endpoint(baseURL, path) {
 	return new URL(path, baseURL);
 }
-function record$5(value) {
+function record$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function parseJsonRecord(text, message) {
@@ -7371,7 +7426,7 @@ function parseJsonRecord(text, message) {
 	} catch {
 		throw new Error(message);
 	}
-	const parsed = record$5(value);
+	const parsed = record$6(value);
 	if (parsed === void 0) throw new Error(message);
 	return parsed;
 }
@@ -7455,7 +7510,7 @@ async function editDashScopeImage(options) {
 			model: options.model,
 			input: { messages: [{
 				role: "user",
-				content: [...options.sourceImages.map((sourceImage) => ({ image: toDataUrl$1(sourceImage) })), { text: options.prompt }]
+				content: [...options.sourceImages.map((sourceImage) => ({ image: toDataUrl$2(sourceImage) })), { text: options.prompt }]
 			}] },
 			parameters: {
 				prompt_extend: true,
@@ -7472,7 +7527,7 @@ function formatSize(size) {
 	if (size === void 0 || size.length === 0) return void 0;
 	return size.replace("x", "*");
 }
-function toDataUrl$1(image) {
+function toDataUrl$2(image) {
 	return `data:${image.mediaType};base64,${Buffer.from(image.data).toString("base64")}`;
 }
 async function requestQwenImage(options) {
@@ -7596,13 +7651,13 @@ async function requestGoogleImage(input) {
 	};
 }
 function outputImage(value) {
-	const interaction = record$4(value);
+	const interaction = record$5(value);
 	if (interaction === void 0) return void 0;
 	const direct = imageContent(interaction.output_image, false);
 	if (direct !== void 0) return direct;
 	if (!Array.isArray(interaction.steps)) return void 0;
 	for (const step of interaction.steps) {
-		const modelOutput = record$4(step);
+		const modelOutput = record$5(step);
 		if (modelOutput?.type !== "model_output" || !Array.isArray(modelOutput.content)) continue;
 		for (const content of modelOutput.content) {
 			const image = imageContent(content, true);
@@ -7611,14 +7666,14 @@ function outputImage(value) {
 	}
 }
 function imageContent(value, requiresImageType) {
-	const image = record$4(value);
+	const image = record$5(value);
 	if (image === void 0 || requiresImageType && image.type !== "image" || typeof image.data !== "string") return void 0;
 	return {
 		data: image.data,
 		mime_type: image.mime_type
 	};
 }
-function record$4(value) {
+function record$5(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function mediaTypeOf(value) {
@@ -7881,22 +7936,22 @@ async function deleteImageFromWorkspace(filePath, allowedWorkspaceRoots) {
 }
 //#endregion
 //#region lib/types/image-route.js
-const MAX_BODY_BYTES$1 = 65536;
+const MAX_BODY_BYTES$2 = 65536;
 /** Serve one verified durable image reference to a same-origin browser request. */
 async function serveImage(req, res, deps) {
-	if (req.method !== "POST") return jsonError$3(res, 405, "method-not-allowed");
-	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$3(res, 415, "json-required");
+	if (req.method !== "POST") return jsonError$4(res, 405, "method-not-allowed");
+	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$4(res, 415, "json-required");
 	const origin = req.headers.origin;
 	const host = req.headers.host;
-	if (origin !== void 0 && host !== void 0 && origin !== `http://${host}` && origin !== `https://${host}`) return jsonError$3(res, 403, "origin-rejected");
+	if (origin !== void 0 && host !== void 0 && origin !== `http://${host}` && origin !== `https://${host}`) return jsonError$4(res, 403, "origin-rejected");
 	let body;
 	try {
-		body = JSON.parse(await readBody$2(req));
+		body = JSON.parse(await readBody$3(req));
 	} catch {
-		return jsonError$3(res, 400, "invalid-request");
+		return jsonError$4(res, 400, "invalid-request");
 	}
 	const attachment = attachmentFromRequest(body);
-	if (attachment === void 0) return jsonError$3(res, 400, "invalid-attachment");
+	if (attachment === void 0) return jsonError$4(res, 400, "invalid-attachment");
 	try {
 		const stored = await deps.readImage(attachment);
 		res.writeHead(200, {
@@ -7907,10 +7962,10 @@ async function serveImage(req, res, deps) {
 		});
 		res.end(stored.data);
 	} catch {
-		jsonError$3(res, 404, "image-unavailable");
+		jsonError$4(res, 404, "image-unavailable");
 	}
 }
-function sameOrigin$3(req) {
+function sameOrigin$4(req) {
 	const origin = req.headers.origin;
 	const host = req.headers.host;
 	if (origin !== void 0 && host !== void 0 && origin !== `http://${host}` && origin !== `https://${host}`) return false;
@@ -7918,14 +7973,14 @@ function sameOrigin$3(req) {
 }
 /** Safely delete one or more generated image files from the workspace disk. */
 async function serveDelete(req, res, deps) {
-	if (req.method !== "POST") return jsonError$3(res, 405, "method-not-allowed");
-	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$3(res, 415, "json-required");
-	if (!sameOrigin$3(req)) return jsonError$3(res, 403, "origin-rejected");
+	if (req.method !== "POST") return jsonError$4(res, 405, "method-not-allowed");
+	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$4(res, 415, "json-required");
+	if (!sameOrigin$4(req)) return jsonError$4(res, 403, "origin-rejected");
 	let body;
 	try {
-		body = JSON.parse(await readBody$2(req));
+		body = JSON.parse(await readBody$3(req));
 	} catch {
-		return jsonError$3(res, 400, "invalid-request");
+		return jsonError$4(res, 400, "invalid-request");
 	}
 	const rawPaths = typeof body === "object" && body !== null && "paths" in body && Array.isArray(body.paths) ? body.paths : [];
 	const deletedFiles = [];
@@ -7955,13 +8010,13 @@ async function serveDelete(req, res, deps) {
 }
 /** Serve on-demand image persistence into the workspace. */
 async function serveSaveWorkspace(req, res, deps) {
-	if (!sameOrigin$3(req)) return jsonError$3(res, 403, "origin-rejected");
-	if (req.method !== "POST") return jsonError$3(res, 405, "method-not-allowed");
-	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$3(res, 415, "json-required");
+	if (!sameOrigin$4(req)) return jsonError$4(res, 403, "origin-rejected");
+	if (req.method !== "POST") return jsonError$4(res, 405, "method-not-allowed");
+	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$4(res, 415, "json-required");
 	try {
-		const raw = JSON.parse(await readBody$2(req));
+		const raw = JSON.parse(await readBody$3(req));
 		const attachment = parseImageAttachmentRef(raw.attachment);
-		if (!attachment) return jsonError$3(res, 400, "invalid-attachment");
+		if (!attachment) return jsonError$4(res, 400, "invalid-attachment");
 		if (!deps.isSaveEnabled()) {
 			res.writeHead(200, {
 				"content-type": "application/json",
@@ -7979,10 +8034,10 @@ async function serveSaveWorkspace(req, res, deps) {
 		try {
 			targetRoot = await assertWorkspaceAllowed(rawTarget, allowedRoots);
 		} catch {
-			return jsonError$3(res, 403, "workspace-root-not-allowed");
+			return jsonError$4(res, 403, "workspace-root-not-allowed");
 		}
 		const stored = await deps.readImage(attachment);
-		if (!stored || !stored.data) return jsonError$3(res, 404, "image-not-found");
+		if (!stored || !stored.data) return jsonError$4(res, 404, "image-not-found");
 		const savedTo = await deps.saveToWorkspace({
 			workspaceRoot: targetRoot,
 			attachmentId: String(attachment.attachmentId),
@@ -8010,28 +8065,28 @@ async function serveSaveWorkspace(req, res, deps) {
 }
 /** Validate the persisted reference carried by a tool presentation. */
 function imageAttachmentFromMeta(meta) {
-	const value = record$3(meta);
+	const value = record$4(meta);
 	if (value?.kind !== "dsh-image-gen") return void 0;
 	return parseImageAttachmentRef(value.attachment);
 }
 function attachmentFromRequest(value) {
-	return parseImageAttachmentRef(record$3(value)?.attachment);
+	return parseImageAttachmentRef(record$4(value)?.attachment);
 }
-function record$3(value) {
+function record$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
-async function readBody$2(req) {
+async function readBody$3(req) {
 	const chunks = [];
 	let bytes = 0;
 	for await (const chunk of req) {
 		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
 		bytes += buffer.byteLength;
-		if (bytes > MAX_BODY_BYTES$1) throw new Error("request too large");
+		if (bytes > MAX_BODY_BYTES$2) throw new Error("request too large");
 		chunks.push(buffer);
 	}
 	return Buffer.concat(chunks).toString("utf8");
 }
-function jsonError$3(res, status, code) {
+function jsonError$4(res, status, code) {
 	res.writeHead(status, {
 		"content-type": "application/json",
 		"cache-control": "no-store"
@@ -8059,6 +8114,27 @@ async function generateOpenAICompatibleImage(input) {
 	}), input.provider, input);
 }
 async function editOpenAICompatibleImage(input) {
+	if (input.editFormat === "jsonImageUrlArray") {
+		const body = {
+			model: input.model,
+			images: input.sourceImages.map((sourceImage) => ({ image_url: toDataUrl$1(sourceImage) })),
+			prompt: input.prompt,
+			n: 1,
+			size: "auto",
+			response_format: "url",
+			...input.editExtra ?? {}
+		};
+		return parseImageResponse(await fetch(imageEndpoint$1(input.baseURL, "edits"), {
+			method: "POST",
+			redirect: "error",
+			signal: input.signal,
+			headers: {
+				authorization: `Bearer ${input.apiKey}`,
+				"content-type": "application/json"
+			},
+			body: JSON.stringify(body)
+		}), "openai", input);
+	}
 	const form = new FormData();
 	const imageField = input.sourceImages.length > 1 ? "image[]" : "image";
 	input.sourceImages.forEach((sourceImage, index) => {
@@ -8102,6 +8178,9 @@ function imageEndpoint$1(baseURL, operation) {
 		throw new Error("Image endpoint must be an absolute URL");
 	}
 }
+function toDataUrl$1(image) {
+	return `data:${image.mediaType};base64,${Buffer.from(image.data).toString("base64")}`;
+}
 function firstImage$1(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
 	const record = value;
@@ -8111,10 +8190,10 @@ function firstImage$1(value) {
 	if (typeof candidate !== "object" || candidate === null || Array.isArray(candidate)) return void 0;
 	const item = candidate;
 	const mime = typeof item.mime_type === "string" ? item.mime_type : typeof item.mime === "string" ? item.mime : void 0;
-	return typeof item.b64_json === "string" ? {
+	return typeof item.b64_json === "string" && item.b64_json.length > 0 ? {
 		b64_json: item.b64_json,
 		...mime === void 0 ? {} : { mime_type: mime }
-	} : typeof item.url === "string" ? {
+	} : typeof item.url === "string" && item.url.length > 0 ? {
 		url: item.url,
 		...mime === void 0 ? {} : { mime_type: mime }
 	} : void 0;
@@ -8129,11 +8208,15 @@ async function downloadImage$1(url, provider, input) {
 			mediaType: imageMediaType$2(parsed.mediaType) ?? "image/png"
 		};
 	}
-	const response = await fetch(url, {
+	let response = await fetch(url, {
 		redirect: "follow",
 		signal: input.signal,
 		...input.apiKey === void 0 ? {} : { headers: { authorization: `Bearer ${input.apiKey}` } }
 	});
+	if (!response.ok && input.apiKey !== void 0) response = await fetch(url, {
+		redirect: "follow",
+		signal: input.signal
+	});
 	if (!response.ok) throw new Error(`${provider} image download failed (${response.status})`);
 	const data = await readBoundedBytes$1(response, input.maxBytes);
 	const mediaType = detectImageMediaType(data) ?? imageMediaType$2(response.headers.get("content-type"));
@@ -8252,10 +8335,10 @@ function firstImage(value) {
 	if (typeof candidate !== "object" || candidate === null || Array.isArray(candidate)) return void 0;
 	const item = candidate;
 	const mime = typeof item.mime_type === "string" ? item.mime_type : typeof item.mime === "string" ? item.mime : void 0;
-	return typeof item.b64_json === "string" ? {
+	return typeof item.b64_json === "string" && item.b64_json.length > 0 ? {
 		b64_json: item.b64_json,
 		...mime === void 0 ? {} : { mime_type: mime }
-	} : typeof item.url === "string" ? {
+	} : typeof item.url === "string" && item.url.length > 0 ? {
 		url: item.url,
 		...mime === void 0 ? {} : { mime_type: mime }
 	} : void 0;
@@ -8313,6 +8396,1193 @@ async function readBoundedBytes(response, maxBytes) {
 	return joined;
 }
 //#endregion
+//#region lib/types/subscription/oauth.js
+/**
+* OAuth primitives shared by the subscription vendors.
+*
+* Adapted from @goodandready/dsh-subscriptions (MIT, (c) 2026 GooDAnDReaDY)
+* lib/oauth.js, lib/pkce.js, lib/jwt.js — PKCE generation, authorize-URL
+* building and the JWT payload reads the vendors need for identity headers.
+*/
+async function createPkce() {
+	const verifier = Buffer.from(randomBytes(32)).toString("base64url");
+	return {
+		verifier,
+		challenge: Buffer.from(createHash("sha256").update(verifier).digest()).toString("base64url"),
+		state: Buffer.from(randomBytes(16)).toString("base64url")
+	};
+}
+/** Build an authorization-code URL with PKCE and optional extra params. */
+function buildAuthorizeUrl(input) {
+	const url = new URL(input.authUrl);
+	url.searchParams.set("response_type", "code");
+	url.searchParams.set("client_id", input.clientId);
+	url.searchParams.set("redirect_uri", input.redirectUri);
+	url.searchParams.set("code_challenge", input.challenge);
+	url.searchParams.set("code_challenge_method", "S256");
+	url.searchParams.set("state", input.state);
+	if (input.scope !== void 0 && input.scope.length > 0) url.searchParams.set("scope", input.scope);
+	if (input.extra !== void 0) for (const [key, value] of Object.entries(input.extra)) {
+		if (value === null || value === void 0 || value === "") continue;
+		url.searchParams.set(key, String(value));
+	}
+	return url.toString();
+}
+/** Decode a JWT payload without signature verification (identity read only). */
+function decodeJwtPayload(token) {
+	const parts = String(token ?? "").split(".");
+	if (parts.length < 2) return void 0;
+	try {
+		const json = Buffer.from(parts[1], "base64url").toString("utf8");
+		const parsed = JSON.parse(json);
+		return typeof parsed === "object" && parsed !== null ? parsed : void 0;
+	} catch {
+		return;
+	}
+}
+/** The chatgpt-account-id a Codex API call must carry. */
+function chatgptAccountId(token) {
+	const payload = decodeJwtPayload(token);
+	if (payload === void 0) return "";
+	if (typeof payload.chatgpt_account_id === "string") return payload.chatgpt_account_id;
+	const nested = payload["https://api.openai.com/auth"];
+	if (typeof nested === "object" && nested !== null && typeof nested.chatgpt_account_id === "string") return nested.chatgpt_account_id;
+	const orgs = payload.organizations;
+	if (Array.isArray(orgs) && orgs[0] !== null && typeof orgs[0] === "object" && typeof orgs[0].id === "string") return orgs[0].id;
+	return "";
+}
+/** The account email for badges and login confirmation. */
+function emailFromToken(token) {
+	const payload = decodeJwtPayload(token);
+	if (payload === void 0) return "";
+	const email = payload.email;
+	const preferred = payload.preferred_username;
+	if (typeof email === "string" && email.length > 0) return email;
+	if (typeof preferred === "string") return preferred;
+	return "";
+}
+/** POST an OAuth token endpoint with form encoding; 25s cap like the source. */
+async function formTokenRequest(url, params, fetchImpl) {
+	const response = await fetchImpl(url, {
+		method: "POST",
+		headers: {
+			"Content-Type": "application/x-www-form-urlencoded",
+			Accept: "application/json"
+		},
+		body: new URLSearchParams(params).toString(),
+		signal: AbortSignal.timeout(25e3)
+	});
+	if (!response.ok) {
+		const text = await response.text().catch(() => "");
+		throw new Error(`token endpoint HTTP ${String(response.status)}${text.length > 0 ? `: ${text.slice(0, 200)}` : ""}`);
+	}
+	try {
+		const parsed = await response.json();
+		return typeof parsed === "object" && parsed !== null ? parsed : {};
+	} catch {
+		return {};
+	}
+}
+//#endregion
+//#region lib/types/subscription/loopback.js
+/**
+* Temporary loopback server that catches the OAuth redirect on a vendor-fixed
+* local port and hands the code to a handler.
+*
+* Adapted from @goodandready/dsh-subscriptions (MIT, (c) 2026 GooDAnDReaDY)
+* lib/loopback.js — same protocol (first matching request wins, server shuts
+* down, 10-minute cap), restated in TypeScript with this bundle's style.
+*/
+const OK_HTML = "<!doctype html><meta charset=\"utf-8\"><title>dsh-image-gen</title><p>登录成功，可以关闭此页返回设置。</p>";
+const ERR_HTML = "<!doctype html><meta charset=\"utf-8\"><title>dsh-image-gen</title><p>登录失败，请返回设置重试。</p>";
+/**
+* Listen on the redirect_uri's port and resolve when the provider calls back.
+* Rejects on port conflicts, network errors, or when nothing arrives in time.
+*/
+function startLoopback(options) {
+	const parsed = new URL(options.redirectUri);
+	if (parsed.hostname !== "localhost" && parsed.hostname !== "127.0.0.1") return Promise.reject(/* @__PURE__ */ new Error(`loopback redirect requires localhost, got ${parsed.hostname}`));
+	const port = Number(parsed.port) || 80;
+	const path = parsed.pathname;
+	const timeoutMs = options.timeoutMs ?? 6e5;
+	const state = { done: false };
+	return new Promise((resolve, reject) => {
+		const server = http.createServer((req, res) => {
+			const url = new URL(req.url ?? "/", `http://127.0.0.1:${String(port)}`);
+			if (!url.pathname.startsWith(path)) {
+				res.writeHead(404, { "Content-Type": "text/html; charset=utf-8" });
+				res.end(ERR_HTML);
+				return;
+			}
+			if (state.done) return;
+			state.done = true;
+			res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+			Promise.resolve(options.onCode(url.searchParams)).then((html) => {
+				res.end(html.length > 0 ? html : OK_HTML);
+			}).catch(() => {
+				res.end(ERR_HTML);
+			}).finally(() => {
+				clearTimeout(timer);
+				server.close();
+				resolve({ ok: true });
+			});
+		});
+		server.on("error", (error) => {
+			if (state.done) return;
+			state.done = true;
+			clearTimeout(timer);
+			reject(error);
+		});
+		const timer = setTimeout(() => {
+			if (state.done) return;
+			state.done = true;
+			server.close();
+			reject(/* @__PURE__ */ new Error("loopback timeout: no callback received"));
+		}, timeoutMs);
+		server.listen(port, parsed.hostname);
+	});
+}
+//#endregion
+//#region lib/types/subscription/blob.js
+/**
+* OAuth token blob persistence for subscription accounts.
+*
+* Adapted from @goodandready/dsh-subscriptions (MIT, (c) 2026 GooDAnDReaDY)
+* lib/blob.js — trimmed to the two image vendors this plugin ships. The blob
+* is stored through the DSH Credentials service under a provider-scoped ref
+* (see refs.ts); it never reaches the browser side.
+*/
+function asString(value) {
+	return value === null || value === void 0 ? "" : String(value);
+}
+/** Serialize a blob for storage; at least one token must be present. */
+function serializeBlob(obj) {
+	const accessToken = asString(obj.accessToken);
+	const refreshToken = asString(obj.refreshToken);
+	if (accessToken.length === 0 && refreshToken.length === 0) throw new Error("oauth blob needs accessToken or refreshToken");
+	return JSON.stringify({
+		accessToken,
+		refreshToken,
+		expiresAt: Number(obj.expiresAt) || 0,
+		label: asString(obj.label),
+		email: asString(obj.email),
+		accountId: asString(obj.accountId)
+	});
+}
+/** Parse a stored blob back; invalid input throws. */
+function parseBlob(text) {
+	const obj = typeof text === "string" ? JSON.parse(text) : text;
+	if (typeof obj !== "object" || obj === null) throw new Error("invalid oauth blob");
+	const row = obj;
+	return {
+		accessToken: asString(row.accessToken),
+		refreshToken: asString(row.refreshToken),
+		expiresAt: Number(row.expiresAt) || 0,
+		label: asString(row.label),
+		email: asString(row.email),
+		accountId: asString(row.accountId)
+	};
+}
+//#endregion
+//#region lib/types/subscription/vendors/codex.js
+/**
+* ChatGPT (Codex) subscription image vendor.
+*
+* Adapted from @goodandready/dsh-subscriptions (MIT, (c) 2026 GooDAnDReaDY)
+* lib/vendors/codex.js and lib/images.js — only the pieces the image channel
+* needs: authorize URL, code exchange, refresh, and the generations call.
+* The device-code flow and chat streaming stay out of this bundle.
+*/
+const CODEX_AUTH = "https://auth.openai.com/oauth/authorize";
+const CODEX_TOKEN = "https://auth.openai.com/oauth/token";
+const CODEX_SCOPE = "openid profile email offline_access api.connectors.read api.connectors.invoke";
+/** Where the ChatGPT subscription image request goes. */
+const CODEX_IMAGE_URL = "https://chatgpt.com/backend-api/codex/images/generations";
+/** The model served by this endpoint (probed live: gpt-image-2.5-flare works
+* on the ChatGPT internal generations route as of 2026-09-14). */
+const CODEX_IMAGE_MODEL = "gpt-image-2.5-flare";
+/** Public client id of the Codex CLI; vendor-fixed redirect on port 1455. */
+const CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+const CODEX_REDIRECT_URI = "http://localhost:1455/auth/callback";
+function codexConfig() {
+	return {
+		clientId: CODEX_CLIENT_ID,
+		redirectUri: CODEX_REDIRECT_URI
+	};
+}
+function codexAuthorizeUrl(cfg, pkce) {
+	return buildAuthorizeUrl({
+		authUrl: CODEX_AUTH,
+		clientId: cfg.clientId,
+		redirectUri: cfg.redirectUri,
+		challenge: pkce.challenge,
+		state: pkce.state,
+		scope: CODEX_SCOPE,
+		extra: {
+			id_token_add_organizations: "true",
+			codex_cli_simplified_flow: "true",
+			originator: "codex_cli_rs"
+		}
+	});
+}
+/** Identity fields every Codex API call must carry. */
+function codexIdentityHeaders(blob) {
+	return {
+		authorization: `Bearer ${blob.accessToken}`,
+		"chatgpt-account-id": blob.accountId,
+		originator: "codex_cli_rs",
+		"content-type": "application/json",
+		accept: "application/json"
+	};
+}
+function decorate(blob, json) {
+	const idToken = typeof json.id_token === "string" ? json.id_token : "";
+	return {
+		...blob,
+		accountId: blob.accountId.length > 0 ? blob.accountId : chatgptAccountId(idToken) || chatgptAccountId(blob.accessToken),
+		email: blob.email.length > 0 ? blob.email : emailFromToken(idToken) || emailFromToken(blob.accessToken),
+		label: blob.label.length > 0 ? blob.label : emailFromToken(idToken) || emailFromToken(blob.accessToken) || "ChatGPT"
+	};
+}
+function tokenBlobFromOAuth$2(json) {
+	const access = json.access_token;
+	const refresh = json.refresh_token;
+	return {
+		accessToken: typeof access === "string" ? access : "",
+		refreshToken: typeof refresh === "string" ? refresh : "",
+		expiresAt: Date.now() + (Number(json.expires_in) || 3600) * 1e3,
+		label: "",
+		email: "",
+		accountId: ""
+	};
+}
+async function codexExchangeCode(cfg, pkce, code) {
+	const json = await formTokenRequest(CODEX_TOKEN, {
+		grant_type: "authorization_code",
+		client_id: cfg.clientId,
+		code,
+		redirect_uri: cfg.redirectUri,
+		code_verifier: pkce.verifier
+	}, fetch);
+	return decorate(tokenBlobFromOAuth$2(json), json);
+}
+async function codexRefresh(blob) {
+	const next = tokenBlobFromOAuth$2(await formTokenRequest(CODEX_TOKEN, {
+		grant_type: "refresh_token",
+		client_id: CODEX_CLIENT_ID,
+		refresh_token: blob.refreshToken
+	}, fetch));
+	return {
+		...next,
+		refreshToken: next.refreshToken.length > 0 ? next.refreshToken : blob.refreshToken,
+		label: blob.label,
+		email: blob.email,
+		accountId: blob.accountId.length > 0 ? blob.accountId : next.accountId
+	};
+}
+//#endregion
+//#region lib/types/subscription/vendors/grok.js
+/**
+* Grok subscription image vendor.
+*
+* Adapted from @goodandready/dsh-subscriptions (MIT, (c) 2026 GooDAnDReaDY)
+* lib/vendors/grok.js and lib/images.js — only the pieces the image channel
+* needs: authorize URL, code exchange, refresh, and the generations call
+* (grok-cli token, not an xAI API key).
+*/
+const GROK_AUTH = "https://auth.x.ai/oauth2/authorize";
+const GROK_TOKEN = "https://auth.x.ai/oauth2/token";
+const GROK_SCOPE = "openid profile email offline_access grok-cli:access api:access conversations:read conversations:write";
+/** Where the Grok subscription image request goes. */
+const GROK_IMAGE_URL = "https://api.x.ai/v1/images/generations";
+/** The model served by this endpoint. */
+const GROK_IMAGE_MODEL = "grok-imagine-image-2.0";
+/** Public client id of the grok-cli; vendor-fixed redirect on 127.0.0.1:56121. */
+const GROK_CLIENT_ID = "b1a00492-073a-47ea-816f-4c329264a828";
+const GROK_REDIRECT_URI = "http://127.0.0.1:56121/callback";
+function grokConfig() {
+	return {
+		clientId: GROK_CLIENT_ID,
+		redirectUri: GROK_REDIRECT_URI
+	};
+}
+function grokAuthorizeUrl(cfg, pkce) {
+	return buildAuthorizeUrl({
+		authUrl: GROK_AUTH,
+		clientId: cfg.clientId,
+		redirectUri: cfg.redirectUri,
+		challenge: pkce.challenge,
+		state: pkce.state,
+		scope: GROK_SCOPE
+	});
+}
+/** Identity fields every grok.com call must carry (the API host ignores them). */
+function grokIdentityHeaders(blob) {
+	return {
+		authorization: `Bearer ${blob.accessToken}`,
+		"X-XAI-Token-Auth": "xai-grok-cli",
+		"x-grok-client-identifier": "grok-shell",
+		"x-grok-client-version": "0.2.103",
+		"User-Agent": "xai-grok-cli",
+		"content-type": "application/json",
+		accept: "application/json"
+	};
+}
+function tokenBlobFromOAuth$1(json) {
+	const access = json.access_token;
+	const refresh = json.refresh_token;
+	return {
+		accessToken: typeof access === "string" ? access : "",
+		refreshToken: typeof refresh === "string" ? refresh : "",
+		expiresAt: Date.now() + (Number(json.expires_in) || 3600) * 1e3,
+		label: "",
+		email: "",
+		accountId: ""
+	};
+}
+async function grokExchangeCode(cfg, pkce, code) {
+	const blob = tokenBlobFromOAuth$1(await formTokenRequest(GROK_TOKEN, {
+		grant_type: "authorization_code",
+		client_id: cfg.clientId,
+		code,
+		redirect_uri: cfg.redirectUri,
+		code_verifier: pkce.verifier
+	}, fetch));
+	return {
+		...blob,
+		email: blob.email.length > 0 ? blob.email : emailFromToken(blob.accessToken),
+		label: "Grok"
+	};
+}
+async function grokRefresh(blob) {
+	const next = tokenBlobFromOAuth$1(await formTokenRequest(GROK_TOKEN, {
+		grant_type: "refresh_token",
+		client_id: GROK_CLIENT_ID,
+		refresh_token: blob.refreshToken
+	}, fetch));
+	return {
+		...next,
+		refreshToken: next.refreshToken.length > 0 ? next.refreshToken : blob.refreshToken,
+		label: blob.label.length > 0 ? blob.label : "Grok",
+		email: blob.email.length > 0 ? blob.email : next.email
+	};
+}
+//#endregion
+//#region lib/types/subscription/vendors/antigravity.js
+/**
+* Google Antigravity (Nano Banana Pro) subscription image vendor.
+*
+* Protocol adapted from opencode-antigravity-auth-remix (MIT,
+* (c) 2026 Darkstarrd-dev, based on NoeFabris/opencode-antigravity-auth):
+* Google OAuth with the Antigravity CLI's public client credentials, managed
+* project discovery via loadCodeAssist, and image generation through the
+* v1internal:streamGenerateContent endpoint with the gemini-3-pro-image
+* model. Reference: dist/src/constants.js, dist/src/plugin/image.js,
+* dist/src/plugin/project.js.
+*
+* The dsh-subscriptions antigravity vendor left the OAuth client empty
+* (Google's is confidential); the remix package ships the Antigravity CLI's
+* own embedded client id/secret, which the community treats as public the
+* same way Codex CLI's and grok-cli's are.
+*/
+const AUTH = "https://accounts.google.com/o/oauth2/v2/auth";
+const TOKEN = "https://oauth2.googleapis.com/token";
+const SCOPE = [
+	"https://www.googleapis.com/auth/cloud-platform",
+	"https://www.googleapis.com/auth/userinfo.email",
+	"https://www.googleapis.com/auth/userinfo.profile",
+	"https://www.googleapis.com/auth/cclog",
+	"https://www.googleapis.com/auth/experimentsandconfigs"
+].join(" ");
+/** Antigravity CLI's embedded OAuth client, treated as public like Codex's. */
+const ANTIGRAVITY_CLIENT_ID = "1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com";
+const ANTIGRAVITY_CLIENT_SECRET = "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";
+const ANTIGRAVITY_REDIRECT_URI = "http://localhost:51121/oauth-callback";
+/**
+* Endpoint fallback order for generation, mirroring the reference (daily
+* sandbox first, then autopush, then prod).
+*/
+const ANTIGRAVITY_ENDPOINTS = [
+	"https://daily-cloudcode-pa.sandbox.googleapis.com",
+	"https://autopush-cloudcode-pa.sandbox.googleapis.com",
+	"https://cloudcode-pa.googleapis.com"
+];
+/** loadCodeAssist is best supported on prod; discovery tries prod first. */
+const LOAD_ENDPOINTS = [
+	"https://cloudcode-pa.googleapis.com",
+	"https://daily-cloudcode-pa.sandbox.googleapis.com",
+	"https://autopush-cloudcode-pa.sandbox.googleapis.com"
+];
+/** The image model served through this channel: Nano Banana Pro. */
+const ANTIGRAVITY_IMAGE_MODEL = "gemini-3-pro-image";
+/**
+* Antigravity client version carried in the browser User-Agent. Google's
+* backend routes by this: a non-Antigravity or outdated UA lands in the
+* enterprise-license check and fails with the misleading 403 #3501
+* "You do not have a valid license of this product". The official
+* auto-updater publishes the current version; changelog scrape and the
+* hardcoded fallback keep the header sane when the updater is unreachable
+* (same strategy as the reference implementation's version.js).
+*/
+const ANTIGRAVITY_VERSION_FALLBACK = "2.0.6";
+const VERSION_URL = "https://antigravity-auto-updater-974169037036.us-central1.run.app";
+const CHANGELOG_URL = "https://antigravity.google/changelog";
+const VERSION_FETCH_TIMEOUT_MS = 5e3;
+const CHANGELOG_SCAN_CHARS = 5e3;
+const VERSION_REGEX = /\d+\.\d+\.\d+/;
+let antigravityVersion;
+/** Current client version: the fetched one, or the fallback until fetched. */
+function getAntigravityVersion() {
+	return antigravityVersion ?? ANTIGRAVITY_VERSION_FALLBACK;
+}
+/** Fetch and cache the current version once; failures keep the fallback. */
+async function initAntigravityVersion() {
+	if (antigravityVersion !== void 0) return;
+	const parsed = await fetchVersionText(VERSION_URL) ?? await fetchVersionText(CHANGELOG_URL, CHANGELOG_SCAN_CHARS);
+	if (parsed !== void 0) antigravityVersion = parsed;
+}
+async function fetchVersionText(url, maxChars) {
+	try {
+		const response = await fetch(url, { signal: AbortSignal.timeout(VERSION_FETCH_TIMEOUT_MS) });
+		if (!response.ok) return void 0;
+		let text = await response.text();
+		if (maxChars !== void 0) text = text.slice(0, maxChars);
+		const match = text.match(VERSION_REGEX);
+		return match === null ? void 0 : match[0];
+	} catch {
+		return;
+	}
+}
+/** Hardcoded fallback project when Antigravity returns none (workspace accounts). */
+const DEFAULT_PROJECT_ID = "rising-fact-p41fc";
+/** Generation timeout mirroring the reference implementation. */
+const IMAGE_TIMEOUT_MS = 12e4;
+/** Aspect ratios the generationConfig.imageConfig accepts. */
+const ASPECT_RATIOS = [
+	"1:1",
+	"16:9",
+	"9:16",
+	"4:3",
+	"3:4",
+	"21:9"
+];
+/** Safety settings the image endpoint requires to not block benign prompts. */
+const SAFETY_SETTINGS_OFF = [
+	{
+		category: "HARM_CATEGORY_HARASSMENT",
+		threshold: "OFF"
+	},
+	{
+		category: "HARM_CATEGORY_HATE_SPEECH",
+		threshold: "OFF"
+	},
+	{
+		category: "HARM_CATEGORY_SEXUALLY_EXPLICIT",
+		threshold: "OFF"
+	},
+	{
+		category: "HARM_CATEGORY_DANGEROUS_CONTENT",
+		threshold: "OFF"
+	},
+	{
+		category: "HARM_CATEGORY_CIVIC_INTEGRITY",
+		threshold: "OFF"
+	}
+];
+function antigravityConfig() {
+	return {
+		clientId: ANTIGRAVITY_CLIENT_ID,
+		clientSecret: ANTIGRAVITY_CLIENT_SECRET,
+		redirectUri: ANTIGRAVITY_REDIRECT_URI
+	};
+}
+function antigravityAuthorizeUrl(cfg, pkce) {
+	return buildAuthorizeUrl({
+		authUrl: AUTH,
+		clientId: cfg.clientId,
+		redirectUri: cfg.redirectUri,
+		challenge: pkce.challenge,
+		state: pkce.state,
+		scope: SCOPE,
+		extra: {
+			access_type: "offline",
+			prompt: "consent"
+		}
+	});
+}
+/**
+* Headers for project discovery (loadCodeAssist): the reference keeps the
+* plain SDK identity here, mirroring its project.js loadHeaders.
+*/
+function loadHeaders(projectId) {
+	const platform = process.platform === "win32" ? "WINDOWS" : process.platform === "darwin" ? "MACOS" : "LINUX";
+	return {
+		"User-Agent": "google-api-nodejs-client/9.15.1",
+		"X-Goog-Api-Client": "google-cloud-sdk vscode_cloudshelleditor/0.1",
+		"Client-Metadata": JSON.stringify({
+			ideType: "ANTIGRAVITY",
+			platform,
+			pluginType: "GEMINI",
+			...projectId.length > 0 ? { duetProject: projectId } : {}
+		})
+	};
+}
+/**
+* Headers for content requests (image generation): the full Electron
+* browser User-Agent with the Antigravity client version, matching the
+* official IDE. This is the identity the license check keys on — the plain
+* SDK UA here is what produced 403 #3501 on personal accounts.
+*/
+function contentHeaders(projectId) {
+	const uaPlatform = process.platform === "darwin" ? "Macintosh; Intel Mac OS X 10_15_7" : "Windows NT 10.0; Win64; x64";
+	const platform = process.platform === "win32" ? "WINDOWS" : process.platform === "darwin" ? "MACOS" : "LINUX";
+	return {
+		"User-Agent": `Mozilla/5.0 (${uaPlatform}) AppleWebKit/537.36 (KHTML, like Gecko) Antigravity/${getAntigravityVersion()} Chrome/138.0.7204.235 Electron/37.3.1 Safari/537.36`,
+		"X-Goog-Api-Client": "google-cloud-sdk vscode_cloudshelleditor/0.1",
+		"Client-Metadata": JSON.stringify({
+			ideType: "ANTIGRAVITY",
+			platform,
+			pluginType: "GEMINI",
+			...projectId.length > 0 ? { duetProject: projectId } : {}
+		})
+	};
+}
+function tokenBlobFromOAuth(json) {
+	const access = json.access_token;
+	const refresh = json.refresh_token;
+	const idToken = typeof json.id_token === "string" ? json.id_token : "";
+	return {
+		accessToken: typeof access === "string" ? access : "",
+		refreshToken: typeof refresh === "string" ? refresh : "",
+		expiresAt: Date.now() + (Number(json.expires_in) || 3600) * 1e3,
+		label: "",
+		email: emailFromIdToken(idToken),
+		accountId: ""
+	};
+}
+/** Decode the id_token's JWT payload for the account email (identity only). */
+function emailFromIdToken(idToken) {
+	const parts = idToken.split(".");
+	if (parts.length < 2) return "";
+	try {
+		const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
+		return typeof payload.email === "string" ? payload.email : "";
+	} catch {
+		return "";
+	}
+}
+async function antigravityExchangeCode(cfg, pkce, code) {
+	const blob = tokenBlobFromOAuth(await formTokenRequest(TOKEN, {
+		client_id: cfg.clientId,
+		client_secret: cfg.clientSecret,
+		grant_type: "authorization_code",
+		code,
+		redirect_uri: cfg.redirectUri,
+		code_verifier: pkce.verifier
+	}, fetch));
+	if (blob.accessToken.length === 0) throw new Error("Antigravity token endpoint returned no access token");
+	return blob;
+}
+async function antigravityRefresh(blob) {
+	const next = tokenBlobFromOAuth(await formTokenRequest(TOKEN, {
+		client_id: ANTIGRAVITY_CLIENT_ID,
+		client_secret: ANTIGRAVITY_CLIENT_SECRET,
+		grant_type: "refresh_token",
+		refresh_token: blob.refreshToken
+	}, fetch));
+	return {
+		...next,
+		refreshToken: next.refreshToken.length > 0 ? next.refreshToken : blob.refreshToken,
+		label: blob.label,
+		email: blob.email.length > 0 ? blob.email : next.email,
+		accountId: ""
+	};
+}
+/**
+* Resolve the managed project id for the logged-in account. Most accounts
+* have one; when loadCodeAssist reports none, the hardcoded fallback keeps
+* generation working (mirrors the reference's ensureProjectContext).
+* Returns '' only when every endpoint fails, letting generate() throw then.
+*/
+async function antigravityResolveProject(blob) {
+	const metadata = {
+		ideType: "ANTIGRAVITY",
+		platform: platformOf(),
+		pluginType: "GEMINI"
+	};
+	for (const base of LOAD_ENDPOINTS) try {
+		const response = await fetch(`${base}/v1internal:loadCodeAssist`, {
+			method: "POST",
+			headers: {
+				"Content-Type": "application/json",
+				Authorization: `Bearer ${blob.accessToken}`,
+				...loadHeaders("")
+			},
+			body: JSON.stringify({ metadata }),
+			signal: AbortSignal.timeout(25e3)
+		});
+		if (!response.ok) continue;
+		const payload = await response.json().catch(() => null);
+		if (payload === null) continue;
+		const project = payload.cloudaicompanionProject;
+		const id = typeof project === "string" ? project : typeof project === "object" && project !== null && typeof project.id === "string" ? project.id : "";
+		if (id.length > 0) return id;
+	} catch {}
+	return DEFAULT_PROJECT_ID;
+}
+function platformOf() {
+	if (process.platform === "win32") return "WINDOWS";
+	if (process.platform === "darwin") return "MACOS";
+	return "LINUX";
+}
+/**
+* Build the streamGenerateContent request body for one image generation.
+* Ported from the reference buildImageRequest + the wrapping envelope: no
+* tools, no systemInstruction, no thinkingConfig; responseModalities asks
+* for TEXT+IMAGE.
+*/
+function antigravityImageBody(options) {
+	const imageConfig = { aspectRatio: options.aspectRatio !== void 0 && ASPECT_RATIOS.includes(options.aspectRatio) ? options.aspectRatio : "1:1" };
+	if (options.hd === true) imageConfig.imageSize = "4K";
+	return {
+		contents: [{
+			role: "user",
+			parts: [{ text: options.prompt }]
+		}],
+		generationConfig: {
+			candidateCount: 1,
+			imageConfig,
+			responseModalities: ["TEXT", "IMAGE"]
+		},
+		safetySettings: SAFETY_SETTINGS_OFF
+	};
+}
+/** Wrap the inner request in the Antigravity agent envelope. */
+function antigravityEnvelope(projectId, request) {
+	return {
+		project: projectId,
+		model: ANTIGRAVITY_IMAGE_MODEL,
+		userAgent: "antigravity",
+		requestId: `req_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`,
+		requestType: "agent",
+		request: {
+			...request,
+			session_id: `sess-${randomUUID()}`
+		}
+	};
+}
+/**
+* Generate one image on the logged-in Antigravity account: resolve the
+* project, POST the wrapped body to each endpoint in fallback order, and
+* parse the SSE stream for the inlineData image part.
+*/
+async function antigravityGenerateImage(options) {
+	await initAntigravityVersion();
+	const inner = antigravityImageBody({
+		prompt: options.prompt,
+		...options.aspectRatio !== void 0 ? { aspectRatio: options.aspectRatio } : {},
+		...options.hd !== void 0 ? { hd: options.hd } : {}
+	});
+	const body = antigravityEnvelope(options.projectId, inner);
+	let lastError = "no endpoint succeeded";
+	for (const base of ANTIGRAVITY_ENDPOINTS) {
+		const url = `${base}/v1internal:streamGenerateContent?alt=sse`;
+		const timeoutSignal = AbortSignal.timeout(IMAGE_TIMEOUT_MS);
+		const signal = options.signal !== void 0 ? AbortSignal.any([options.signal, timeoutSignal]) : timeoutSignal;
+		try {
+			const response = await fetch(url, {
+				method: "POST",
+				headers: {
+					...contentHeaders(options.projectId),
+					Authorization: `Bearer ${options.blob.accessToken}`,
+					"Content-Type": "application/json",
+					Accept: "text/event-stream"
+				},
+				body: JSON.stringify(body),
+				signal
+			});
+			if (!response.ok) {
+				const text = await response.text().catch(() => "");
+				lastError = `HTTP ${String(response.status)}: ${text.slice(0, 200)}`;
+				if (response.status === 403 || response.status === 404 || response.status === 429 || response.status >= 500) continue;
+				throw new Error(`antigravity ${lastError}`);
+			}
+			const text = await response.text();
+			const parsed = parseSseImage(text);
+			if (parsed !== void 0) return parsed;
+			const reason = parseSseError(text);
+			lastError = reason !== void 0 ? reason : "response contained no image";
+			continue;
+		} catch (error) {
+			if (options.signal?.aborted === true) throw error;
+			lastError = error instanceof Error ? error.message : String(error);
+			continue;
+		}
+	}
+	throw new Error(`antigravity image generation failed: ${lastError}`);
+}
+/** Scan an SSE body for the first image part in any data: line. */
+function parseSseImage(text) {
+	for (const line of text.split("\n")) {
+		if (!line.startsWith("data: ")) continue;
+		const raw = line.slice(6).trim();
+		if (raw.length === 0 || raw === "[DONE]") continue;
+		try {
+			const data = JSON.parse(raw);
+			for (const candidate of data.response?.candidates ?? []) for (const part of candidate.content?.parts ?? []) {
+				const inline = part.inlineData;
+				if (typeof inline?.data === "string" && inline.data.length > 0 && typeof inline.mimeType === "string" && inline.mimeType.startsWith("image/")) return {
+					b64: inline.data,
+					mimeType: inline.mimeType
+				};
+			}
+		} catch {}
+	}
+}
+/** Pull the first error block an SSE body reports, for better messages. */
+function parseSseError(text) {
+	for (const line of text.split("\n")) {
+		if (!line.startsWith("data: ")) continue;
+		const raw = line.slice(6).trim();
+		if (raw.length === 0 || raw === "[DONE]") continue;
+		try {
+			const data = JSON.parse(raw);
+			if (data.error !== void 0) {
+				const code = typeof data.error.code === "string" || typeof data.error.code === "number" ? String(data.error.code) : "";
+				const message = typeof data.error.message === "string" ? data.error.message : "";
+				const joined = `${code.length > 0 ? `${code}: ` : ""}${message}`.trim();
+				if (joined.length > 0) return joined;
+			}
+		} catch {}
+	}
+}
+//#endregion
+//#region lib/types/subscription/manager.js
+/**
+* Subscription account manager: login flows, blob storage through the DSH
+* Credentials service, token refresh with per-account locking, and image
+* generation on the logged-in account.
+*
+* The account store pattern follows @goodandready/dsh-subscriptions (MIT,
+* (c) 2026 GooDAnDReaDY) lib/accounts.js, trimmed to one account per vendor
+* (no rotation, no cooldowns) because this bundle has exactly two vendors
+* and no chat adapter to protect.
+*
+* Isolation invariants (project rules):
+* - OAuth blobs live under SUBSCRIPTION_OAUTH_* refs, never the API-key refs.
+* - Login/logout never touches any other setting or credential.
+* - The browser side never sees a token; it sees the authorize URL and
+*   status words only. Generation happens host-side, mirroring every other
+*   adapter in this bundle.
+*/
+/** The vendor each dsh-image-gen subscription provider maps onto. */
+function vendorOf(provider) {
+	if (provider === "chatgpt-sub") return "codex";
+	if (provider === "google-sub") return "antigravity";
+	return "grok";
+}
+/** Credential ref one vendor's OAuth blob is stored under (index fixed at 1). */
+function subscriptionOauthRef(vendor) {
+	return credentialRef(`${vendor.toUpperCase()}_OAUTH_1`);
+}
+/**
+* Per-application manager instance. Constructed once in the plugin entry,
+* owns the pending-login map (PKCE state to login session) and the refresh
+* locks; nothing here is persisted except the blobs themselves.
+*/
+/** Provider names by vendor for login-result pages and errors. */
+function providerNameOf(vendor) {
+	return SUBSCRIPTION_PROVIDER_DISPLAY_NAMES[vendor === "codex" ? "chatgpt-sub" : vendor === "antigravity" ? "google-sub" : "grok-sub"];
+}
+var SubscriptionManager = class {
+	ctx;
+	pending = /* @__PURE__ */ new Map();
+	refreshLocks = /* @__PURE__ */ new Map();
+	/** Cheap in-memory expiry cache so badges do not hit credentials on read. */
+	blobCache = /* @__PURE__ */ new Map();
+	/** Antigravity needs a per-account project id on every generation call. */
+	projectCache = /* @__PURE__ */ new Map();
+	constructor(ctx) {
+		this.ctx = ctx;
+	}
+	/** Read a vendor's stored blob, or undefined when signed out. */
+	async readBlob(vendor) {
+		try {
+			const raw = (await this.ctx.credentials.resolve(subscriptionOauthRef(vendor)))?.value ?? "";
+			if (raw.trim().length === 0) return void 0;
+			return parseBlob(raw);
+		} catch {
+			return;
+		}
+	}
+	/** Login status for the settings card; never throws. */
+	async loginStatus(vendor) {
+		const blob = await this.readBlob(vendor);
+		if (blob === void 0) return { state: "logged-out" };
+		return {
+			state: "logged-in",
+			email: blob.email
+		};
+	}
+	/**
+	* Begin a login: registers PKCE state, starts the loopback catch server on
+	* the vendor-fixed redirect port, and returns the authorize URL for the
+	* browser to open. Completion lands in the loopback callback.
+	*/
+	async beginLogin(vendor) {
+		const redirectUri = vendor === "codex" ? CODEX_REDIRECT_URI : vendor === "antigravity" ? ANTIGRAVITY_REDIRECT_URI : GROK_REDIRECT_URI;
+		const pkce = await createPkce();
+		this.pending.set(pkce.state, {
+			vendor,
+			pkce
+		});
+		const url = vendor === "codex" ? codexAuthorizeUrl(codexConfig(), pkce) : vendor === "antigravity" ? antigravityAuthorizeUrl(antigravityConfig(), pkce) : grokAuthorizeUrl(grokConfig(), pkce);
+		startLoopback({
+			redirectUri,
+			onCode: async (params) => await this.completeLoginFromCallback(vendor, params.get("code") ?? "", params.get("state") ?? "")
+		}).catch(() => {});
+		return { url };
+	}
+	/** Loopback callback: validate state, exchange the code, store the blob. */
+	async completeLoginFromCallback(vendor, code, state) {
+		if (code.length === 0) throw new Error("callback carried no authorization code");
+		const row = this.pending.get(state);
+		if (row === void 0 || row.vendor !== vendor) throw new Error("login session expired; start again");
+		this.pending.delete(state);
+		const blob = vendor === "codex" ? await codexExchangeCode(codexConfig(), row.pkce, code) : vendor === "antigravity" ? await antigravityExchangeCode(antigravityConfig(), row.pkce, code) : await grokExchangeCode(grokConfig(), row.pkce, code);
+		await this.saveBlob(vendor, blob);
+		return `<!doctype html><meta charset="utf-8"><title>dsh-image-gen</title><p>${providerNameOf(vendor)} 登录成功（${escapeHtml(blob.email)}），可以关闭此页返回设置。</p>`;
+	}
+	/** Sign out: clear the blob and the caches. No other setting changes. */
+	async logout(vendor) {
+		await this.ctx.credentials.unset(subscriptionOauthRef(vendor));
+		this.blobCache.delete(vendor);
+		this.projectCache.clear();
+	}
+	async saveBlob(vendor, blob) {
+		await this.ctx.credentials.set(subscriptionOauthRef(vendor), serializeBlob(blob));
+		this.blobCache.set(vendor, blob);
+	}
+	/**
+	* Return a blob whose access token is usable; refreshes first when the
+	* stored one is expired (or expiring within the skew window). Single-flight
+	* per vendor so concurrent generate calls share one refresh.
+	*/
+	async ensureFresh(vendor) {
+		const blob = await this.readBlob(vendor);
+		if (blob === void 0) throw notLoggedInError(vendor);
+		if (blob.refreshToken.length === 0) return blob;
+		if (blob.expiresAt !== 0 && blob.expiresAt - 6e4 > Date.now()) return blob;
+		const inflight = this.refreshLocks.get(vendor);
+		if (inflight !== void 0) return inflight;
+		const refresh = (async () => {
+			const next = vendor === "codex" ? await codexRefresh(blob) : vendor === "antigravity" ? await antigravityRefresh(blob) : await grokRefresh(blob);
+			const merged = {
+				...next,
+				refreshToken: next.refreshToken.length > 0 ? next.refreshToken : blob.refreshToken,
+				accountId: next.accountId.length > 0 ? next.accountId : blob.accountId
+			};
+			await this.saveBlob(vendor, merged);
+			return merged;
+		})().finally(() => {
+			this.refreshLocks.delete(vendor);
+		});
+		this.refreshLocks.set(vendor, refresh);
+		return refresh;
+	}
+	/** Generate one image through the logged-in account. b64 reply decoded host-side. */
+	async generate(options) {
+		const { vendor, prompt } = options;
+		const session = await this.ensureFresh(vendor);
+		const text = prompt.trim();
+		if (text.length === 0) throw new Error("prompt must be a non-empty string");
+		if (vendor === "antigravity") {
+			const projectId = await this.ensureAntigravityProject(session);
+			const aspectRatio = antigravityAspectRatioOf(options.size);
+			return [{ b64_json: (await antigravityGenerateImage({
+				blob: session,
+				projectId,
+				prompt: text,
+				...aspectRatio !== void 0 ? { aspectRatio } : {},
+				hd: options.quality === "hd" || options.quality === "high",
+				...options.signal !== void 0 ? { signal: options.signal } : {}
+			})).b64 }];
+		}
+		let url;
+		let headers;
+		let body;
+		if (vendor === "codex") {
+			url = CODEX_IMAGE_URL;
+			headers = codexIdentityHeaders(session);
+			body = {
+				prompt: text,
+				model: CODEX_IMAGE_MODEL,
+				...options.size !== void 0 && options.size.length > 0 ? { size: options.size } : {},
+				...options.quality !== void 0 && options.quality.length > 0 ? { quality: options.quality } : {}
+			};
+		} else {
+			url = GROK_IMAGE_URL;
+			headers = grokIdentityHeaders(session);
+			const aspect = {
+				"1024x1024": "1:1",
+				"1024x1536": "2:3",
+				"1536x1024": "3:2",
+				auto: "auto"
+			};
+			const level = options.quality === "low" ? "low" : options.quality === "medium" || options.quality === "high" ? "medium" : void 0;
+			body = {
+				prompt: text,
+				model: GROK_IMAGE_MODEL,
+				response_format: "b64_json",
+				...options.size !== void 0 && aspect[options.size] !== void 0 ? { aspect_ratio: aspect[options.size] } : {},
+				...level !== void 0 ? { quality: level } : {}
+			};
+		}
+		const response = await fetch(url, {
+			method: "POST",
+			headers,
+			body: JSON.stringify(body),
+			...options.signal !== void 0 ? { signal: options.signal } : {}
+		});
+		const payload = await response.json().catch(() => ({}));
+		if (!response.ok) {
+			const detail = extractErrorMessage(payload);
+			throw new Error(`${vendor} HTTP ${String(response.status)}${detail !== void 0 ? `: ${detail.slice(0, 200)}` : ""}`);
+		}
+		return parseImages(payload);
+	}
+	/**
+	* Resolve (and cache per refresh token) the managed project id the
+	* Antigravity generation envelope needs. Re-resolved when the account
+	* signs out or a different account logs in.
+	*/
+	async ensureAntigravityProject(blob) {
+		const cacheKey = blob.refreshToken.length > 0 ? blob.refreshToken : blob.accessToken.slice(0, 32);
+		const cached = this.projectCache.get(cacheKey);
+		if (cached !== void 0) return cached;
+		const projectId = await antigravityResolveProject(blob);
+		this.projectCache.set(cacheKey, projectId);
+		return projectId;
+	}
+};
+/** Map an OpenAI-style size onto the aspect ratio Antigravity accepts. */
+function antigravityAspectRatioOf(size) {
+	const table = {
+		"1024x1024": "1:1",
+		"1024x1536": "2:3",
+		"1536x1024": "3:2",
+		"768x1398": "9:16",
+		"1398x768": "16:9",
+		auto: "1:1"
+	};
+	if (size === void 0) return void 0;
+	const mapped = table[size];
+	if (mapped !== void 0) return mapped;
+	return /^\d+:\d+$/.test(size) ? size : "1:1";
+}
+/** Response parsing: both vendors reply in the same `{data:[{b64_json}]}` shape. */
+function parseImages(payload) {
+	const body = typeof payload === "object" && payload !== null ? payload : {};
+	const rows = Array.isArray(body.data) ? body.data : [];
+	const images = [];
+	for (const row of rows) {
+		if (typeof row !== "object" || row === null) continue;
+		const b64 = row.b64_json;
+		if (typeof b64 !== "string" || b64.length === 0) continue;
+		const revised = row.revised_prompt;
+		images.push({
+			b64_json: b64,
+			...typeof revised === "string" && revised.length > 0 ? { revisedPrompt: revised } : {}
+		});
+	}
+	if (images.length === 0) throw new Error("response contains no images");
+	return images;
+}
+function extractErrorMessage(payload) {
+	if (typeof payload !== "object" || payload === null) return void 0;
+	const error = payload.error;
+	if (typeof error !== "object" || error === null) return void 0;
+	const row = error;
+	if (typeof row.message === "string") return row.message;
+	if (typeof row.code === "string") return row.code;
+}
+function notLoggedInError(vendor) {
+	const display = providerNameOf(vendor);
+	return /* @__PURE__ */ new Error(`${display} 未登录：请到 设置 > 插件 > 图像生成 的订阅区完成登录`);
+}
+function escapeHtml(value) {
+	return value.replace(/[&<>"']/g, (ch) => ({
+		"&": "&amp;",
+		"<": "&lt;",
+		">": "&gt;",
+		"\"": "&quot;",
+		"'": "&#39;"
+	})[ch] ?? ch);
+}
+//#endregion
+//#region lib/types/subscription/subscription-route.js
+const MAX_BODY_BYTES$1 = 16384;
+/** The vendor each subscription provider logs in as. */
+function vendorOfProvider(provider) {
+	if (provider === "chatgpt-sub") return "codex";
+	if (provider === "google-sub") return "antigravity";
+	return "grok";
+}
+/** Register the login/status routes on the plugin's web server. */
+function registerSubscriptionRoutes(ctx, manager) {
+	ctx.effect(() => ctx.webServer.register({
+		kind: "exact",
+		path: SUBSCRIPTION_LOGIN_ROUTE,
+		handler: (req, res) => {
+			serveLogin(req, res, manager);
+		}
+	}), "dsh-image-gen: subscription login route");
+	ctx.effect(() => ctx.webServer.register({
+		kind: "exact",
+		path: SUBSCRIPTION_STATUS_ROUTE,
+		handler: (req, res) => {
+			serveStatus(req, res, manager);
+		}
+	}), "dsh-image-gen: subscription status route");
+}
+async function serveLogin(req, res, manager) {
+	if (!sameOrigin$3(req)) return jsonError$3(res, 403, "origin-rejected");
+	if (req.method !== "POST") return jsonError$3(res, 405, "method-not-allowed");
+	if (!(req.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) return jsonError$3(res, 415, "json-required");
+	let body;
+	try {
+		body = JSON.parse(await readBody$2(req));
+	} catch {
+		return jsonError$3(res, 400, "invalid-request");
+	}
+	const provider = record$3(body)?.provider;
+	if (typeof provider !== "string" || !SUBSCRIPTION_PROVIDERS.includes(provider)) return jsonError$3(res, 400, "invalid-provider");
+	const action = record$3(body)?.action;
+	const vendor = vendorOfProvider(provider);
+	try {
+		if (action === "logout") {
+			await manager.logout(vendor);
+			return json$3(res, 200, { ok: true });
+		}
+		const { url } = await manager.beginLogin(vendor);
+		json$3(res, 200, {
+			ok: true,
+			url
+		});
+	} catch (error) {
+		json$3(res, 502, {
+			ok: false,
+			error: error instanceof Error ? error.message : String(error)
+		});
+	}
+}
+async function serveStatus(req, res, manager) {
+	if (!sameOrigin$3(req)) return jsonError$3(res, 403, "origin-rejected");
+	if (req.method !== "POST") return jsonError$3(res, 405, "method-not-allowed");
+	const statuses = {};
+	for (const provider of SUBSCRIPTION_PROVIDERS) {
+		const status = await manager.loginStatus(vendorOfProvider(provider));
+		statuses[provider] = status.state === "logged-in" ? {
+			state: status.state,
+			email: status.email
+		} : { state: status.state };
+	}
+	json$3(res, 200, {
+		ok: true,
+		statuses
+	});
+}
+function sameOrigin$3(req) {
+	const origin = req.headers.origin;
+	const host = req.headers.host;
+	return origin === void 0 || host === void 0 || origin === `http://${host}` || origin === `https://${host}`;
+}
+function record$3(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+async function readBody$2(req) {
+	const chunks = [];
+	let bytes = 0;
+	for await (const chunk of req) {
+		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+		bytes += buffer.byteLength;
+		if (bytes > MAX_BODY_BYTES$1) throw new Error("request too large");
+		chunks.push(buffer);
+	}
+	return Buffer.concat(chunks).toString("utf8");
+}
+function json$3(res, status, value) {
+	if (res.headersSent || res.writableEnded || res.destroyed) return;
+	res.writeHead(status, {
+		"content-type": "application/json; charset=utf-8",
+		"cache-control": "no-store"
+	});
+	res.end(JSON.stringify(value));
+}
+function jsonError$3(res, status, code) {
+	json$3(res, status, { error: code });
+}
+//#endregion
+//#region lib/types/subscription.js
+/** Timeout for one subscription image call, mirroring the other adapters. */
+const SUBSCRIPTION_TIMEOUT_MS = 3e5;
+/**
+* Generate one image through a logged-in subscription account. Returns the
+* same `{ data, mediaType }` contract as the API-key adapters so the caller
+* can feed it straight into `saveGenerated`.
+*/
+async function generateSubscriptionImage(options) {
+	const { manager, provider, prompt, maxBytes, signal } = options;
+	const size = options.size?.trim();
+	const result = await withTimeout(manager.generate({
+		vendor: vendorOf(provider),
+		prompt,
+		...size !== void 0 && size.length > 0 ? { size } : {},
+		signal
+	}), signal);
+	const first = Array.isArray(result) ? result[0] : void 0;
+	if (first === void 0 || typeof first.b64_json !== "string" || first.b64_json.length === 0) throw new Error("Subscription image reply contained no image payload");
+	const bytes = new Uint8Array(Buffer.from(first.b64_json, "base64"));
+	if (bytes.byteLength > maxBytes) throw new Error(`Subscription image is ${formatBytes(bytes.byteLength)}, above this DSH's ${formatBytes(maxBytes)} limit`);
+	const mediaType = detectImageMediaType(bytes);
+	if (mediaType === void 0) throw new Error("Subscription image payload has an unrecognized format");
+	return {
+		data: bytes,
+		mediaType,
+		...typeof first.revisedPrompt === "string" && first.revisedPrompt.length > 0 ? { revisedPrompt: first.revisedPrompt } : {}
+	};
+}
+/** Subscription channels are prompt-only today; edit_image is rejected outright. */
+function assertSubscriptionEditUnsupported(provider) {
+	throw new Error(`edit_image with ${SUBSCRIPTION_PROVIDER_DISPLAY_NAMES[provider]} is not supported yet: the subscription channel only accepts text prompts. Retry with an API-key provider (for example google or openai) through the provider argument.`);
+}
+/** Run one promise with the subscription timeout and the call's abort signal. */
+async function withTimeout(promise, signal) {
+	let timer;
+	let rejectCall;
+	const onAbort = () => {
+		rejectCall(/* @__PURE__ */ new Error("Subscription image generation aborted"));
+	};
+	const guarded = new Promise((resolve, reject) => {
+		rejectCall = reject;
+		timer = setTimeout(() => {
+			reject(/* @__PURE__ */ new Error(`Subscription image generation timed out after ${String(Math.round(SUBSCRIPTION_TIMEOUT_MS / 1e3))}s`));
+		}, SUBSCRIPTION_TIMEOUT_MS);
+		promise.then(resolve, reject);
+	});
+	signal.addEventListener("abort", onAbort, { once: true });
+	try {
+		return await guarded;
+	} finally {
+		if (timer !== void 0) clearTimeout(timer);
+		signal.removeEventListener("abort", onAbort);
+	}
+}
+function formatBytes(bytes) {
+	if (bytes >= 1048576) return `${String(Math.round(bytes / 1048576 * 10) / 10)}MB`;
+	return `${String(Math.round(bytes / 1024))}KB`;
+}
+//#endregion
 //#region lib/types/inspiration/data/awesome-gpt-image-2.json
 var awesome_gpt_image_2_default = {
 	repository: "https://github.com/freestylefly/awesome-gpt-image-2",
@@ -19214,6 +20484,8 @@ async function generateFromStudio(ctx, config, input, signal, fallbackWorkspaceR
 	assertAllowed(studioProfile(config, input.provider, true), input);
 	const active = resolveProvider(withProviderOverrides(config, input.provider, input.model));
 	if (active.provider === "comfyui") throw new Error("ComfyUI 暂未接入工作台");
+	if (isSubscriptionProvider(active.provider)) throw new Error("订阅生图暂未接入工作台，请通过对话或设置切换默认 Provider 使用");
+	const wired = active;
 	const credential = await requireApiKey(ctx, input.provider);
 	const rawRefs = input.references ?? (input.reference ? [input.reference] : []);
 	if (input.mode === "edit" && rawRefs.length === 0) throw new Error("图生图需要至少一张参考图");
@@ -19223,13 +20495,13 @@ async function generateFromStudio(ctx, config, input, signal, fallbackWorkspaceR
 	const generateSingle = async (index) => {
 		let generated;
 		let output;
-		if (active.provider === "google") {
+		if (wired.provider === "google") {
 			const aspectRatio = input.ratio;
 			const imageSize = input.quality;
 			generated = input.mode === "edit" ? await editGoogleImage({
 				apiKey: credential,
-				endpoint: active.endpoint,
-				model: active.model,
+				endpoint: wired.endpoint,
+				model: wired.model,
 				prompt: input.prompt,
 				sourceImages,
 				aspectRatio,
@@ -19238,8 +20510,8 @@ async function generateFromStudio(ctx, config, input, signal, fallbackWorkspaceR
 				signal
 			}) : await generateGoogleImage({
 				apiKey: credential,
-				endpoint: active.endpoint,
-				model: active.model,
+				endpoint: wired.endpoint,
+				model: wired.model,
 				prompt: input.prompt,
 				aspectRatio,
 				imageSize,
@@ -19247,34 +20519,38 @@ async function generateFromStudio(ctx, config, input, signal, fallbackWorkspaceR
 				signal
 			});
 			output = `${aspectRatio}, ${imageSize}`;
-		} else if (active.provider === "openai" || active.provider === "openai-compat" || active.provider === "xai" || active.provider === "zhipu") {
+		} else if (wired.provider === "openai" || wired.provider === "openai-compat" || wired.provider === "xai" || wired.provider === "zhipu") {
 			const size = openAISize(input.ratio);
 			generated = input.mode === "edit" ? await editOpenAICompatibleImage({
 				apiKey: credential,
-				baseURL: active.baseURL,
-				model: active.model,
+				baseURL: wired.baseURL,
+				model: wired.model,
 				prompt: input.prompt,
 				sourceImages,
 				size,
 				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
-				signal
+				signal,
+				...wired.provider === "openai-compat" ? {
+					editFormat: wired.editFormat,
+					editExtra: wired.editExtra
+				} : {}
 			}) : await generateOpenAICompatibleImage({
-				provider: active.provider,
+				provider: wired.provider,
 				apiKey: credential,
-				baseURL: active.baseURL,
-				model: active.model,
+				baseURL: wired.baseURL,
+				model: wired.model,
 				prompt: input.prompt,
 				size,
 				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
 				signal
 			});
 			output = size;
-		} else if (active.provider === "seedream") {
+		} else if (wired.provider === "seedream") {
 			const size = input.quality;
 			generated = input.mode === "edit" ? await editSeedreamImage({
 				apiKey: credential,
-				baseURL: active.baseURL,
-				model: active.model,
+				baseURL: wired.baseURL,
+				model: wired.model,
 				prompt: input.prompt,
 				sourceImages,
 				size,
@@ -19283,8 +20559,8 @@ async function generateFromStudio(ctx, config, input, signal, fallbackWorkspaceR
 			}) : await generateOpenAICompatibleImage({
 				provider: "seedream",
 				apiKey: credential,
-				baseURL: active.baseURL,
-				model: active.model,
+				baseURL: wired.baseURL,
+				model: wired.model,
 				prompt: input.prompt,
 				size,
 				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
@@ -19296,8 +20572,8 @@ async function generateFromStudio(ctx, config, input, signal, fallbackWorkspaceR
 			const size = dashScopeSize(input.ratio);
 			generated = input.mode === "edit" ? await editDashScopeImage({
 				apiKey: credential,
-				endpoint: active.endpoint,
-				model: active.model,
+				endpoint: wired.endpoint,
+				model: wired.model,
 				prompt: input.prompt,
 				sourceImages,
 				size,
@@ -19305,8 +20581,8 @@ async function generateFromStudio(ctx, config, input, signal, fallbackWorkspaceR
 				signal
 			}) : await generateDashScopeImage({
 				apiKey: credential,
-				endpoint: active.endpoint,
-				model: active.model,
+				endpoint: wired.endpoint,
+				model: wired.model,
 				prompt: input.prompt,
 				size,
 				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
@@ -19412,7 +20688,7 @@ function studioProfile(config, provider, configured) {
 	}
 	if (active.provider === "comfyui") throw new Error("Invalid cloud provider profile");
 	const model = active.model;
-	if (provider === "google") return profile(provider, model, configured, ASPECT_RATIOS.map(option), IMAGE_SIZES.map((value) => ({
+	if (provider === "google") return profile(provider, model, configured, ASPECT_RATIOS$1.map(option), IMAGE_SIZES.map((value) => ({
 		value,
 		label: value
 	})), "1:1", "1K");
@@ -19667,6 +20943,7 @@ function probeTarget(provider, config, apiKey) {
 		url: joinUrl(config.comfyuiBaseURL ?? "http://127.0.0.1:8188", "system_stats"),
 		headers: {}
 	};
+	if (isSubscriptionProvider(provider)) throw new Error("Subscription providers are probed through the manager, not probeTarget");
 	if (provider === "google") return {
 		url: googleModelsUrl(config),
 		headers: { "x-goog-api-key": apiKey ?? "" }
@@ -19905,6 +21182,27 @@ async function probeComfyUIConnection(config, signal) {
 		message: `HTTP ${String(response.status)}`
 	};
 }
+/**
+* Probe a subscription provider: the internal manager's login state for the
+* matching vendor. No network call and no token access; the probe reports
+* signed-in (with the account email) or signed-out guidance.
+*/
+async function probeSubscriptionConnection(provider, manager) {
+	const vendor = provider === "chatgpt-sub" ? "codex" : provider === "google-sub" ? "antigravity" : "grok";
+	const display = provider === "chatgpt-sub" ? "ChatGPT" : provider === "google-sub" ? "Google" : "Grok";
+	const status = await manager.loginStatus(vendor);
+	if (status.state === "logged-in") return { ok: true };
+	if (status.state === "logged-out") return {
+		ok: false,
+		reason: "missing-key",
+		message: `${display} 账号未登录：请在设置卡片中点击“登录”完成授权`
+	};
+	return {
+		ok: false,
+		reason: "error",
+		message: "登录状态读取失败"
+	};
+}
 /** Serve the settings card's per-provider connectivity probe. */
 async function serveTestConnection(req, res, deps) {
 	if (!sameOrigin(req)) return jsonError(res, 403, "origin-rejected");
@@ -19918,12 +21216,13 @@ async function serveTestConnection(req, res, deps) {
 	}
 	const provider = record(body)?.provider;
 	if (typeof provider !== "string" || !IMAGE_PROVIDERS.includes(provider)) return jsonError(res, 400, "invalid-provider");
+	const active = provider;
 	if (record(body)?.action === "models") {
-		if (provider === "comfyui") return jsonError(res, 400, "models-unsupported");
+		if (active === "comfyui" || isSubscriptionProvider(active)) return jsonError(res, 400, "models-unsupported");
 		let result;
 		try {
-			const apiKey = await deps.resolveKey(provider);
-			result = provider === "google" ? await fetchGoogleImageModels(deps.config(), apiKey) : provider === "dashscope" ? await fetchDashScopeImageModels(deps.config(), apiKey) : await fetchOpenAIImageModels(provider, deps.config(), apiKey);
+			const apiKey = await deps.resolveKey(active);
+			result = active === "google" ? await fetchGoogleImageModels(deps.config(), apiKey) : active === "dashscope" ? await fetchDashScopeImageModels(deps.config(), apiKey) : await fetchOpenAIImageModels(active, deps.config(), apiKey);
 		} catch (error) {
 			result = {
 				ok: false,
@@ -19935,10 +21234,11 @@ async function serveTestConnection(req, res, deps) {
 	}
 	let result;
 	try {
-		if (provider === "comfyui") result = await probeComfyUIConnection(deps.config());
+		if (active === "comfyui") result = await probeComfyUIConnection(deps.config());
+		else if (isSubscriptionProvider(active)) result = await probeSubscriptionConnection(active, deps.subscriptionManager);
 		else {
-			const apiKey = await deps.resolveKey(provider);
-			result = await probeProviderConnection(provider, deps.config(), apiKey);
+			const apiKey = await deps.resolveKey(active);
+			result = await probeProviderConnection(active, deps.config(), apiKey);
 		}
 	} catch (error) {
 		result = {
@@ -19999,6 +21299,8 @@ function apply(ctx, config = {}) {
 	let current = () => migrateOpenAICompatConfig(config);
 	const knownWorkspaceRoots = /* @__PURE__ */ new Set();
 	const canvasMirror = new CanvasMirror();
+	const subscriptionManager = new SubscriptionManager(ctx);
+	registerSubscriptionRoutes(ctx, subscriptionManager);
 	installImageSettings(ctx, config, {
 		setSource: (source) => {
 			current = () => migrateOpenAICompatConfig(source());
@@ -20054,7 +21356,8 @@ function apply(ctx, config = {}) {
 		path: TEST_CONNECTION_ROUTE,
 		handler: (req, res) => serveTestConnection(req, res, {
 			resolveKey: (provider) => resolveApiKey(ctx, provider),
-			config: () => current()
+			config: () => current(),
+			subscriptionManager
 		})
 	}), "dsh-image-gen: test connection route");
 	ctx.effect(() => ctx.webServer.register({
@@ -20128,13 +21431,16 @@ function apply(ctx, config = {}) {
 					"dashscope",
 					"xai",
 					"zhipu",
-					"comfyui"
+					"comfyui",
+					"chatgpt-sub",
+					"grok-sub",
+					"google-sub"
 				],
-				description: "Optional provider for this call only (for example when the user asks to use a specific provider); omit to use the configured default."
+				description: "Optional provider for this call only (for example when the user asks to use a specific provider); omit to use the configured default. chatgpt-sub, grok-sub, and google-sub generate through the logged-in subscription account instead of an API key."
 			},
 			model: {
 				type: "string",
-				description: "Optional model name for this call only, overriding the configured model. Not used by ComfyUI (use workflow instead)."
+				description: "Optional model name for this call only, overriding the configured model. Not used by ComfyUI (use workflow instead) nor by the subscription providers (model fixed by the subscription)."
 			},
 			aspect_ratio: {
 				type: "string",
@@ -20181,6 +21487,14 @@ function apply(ctx, config = {}) {
 					signal: exec.signal
 				}), active.provider, workflow.name, "API workflow", current(), exec, knownWorkspaceRoots);
 			}
+			if (active.provider === "chatgpt-sub" || active.provider === "grok-sub" || active.provider === "google-sub") return saveGenerated(ctx, await generateSubscriptionImage({
+				manager: subscriptionManager,
+				provider: active.provider,
+				prompt: args.prompt,
+				...args.size !== void 0 ? { size: args.size } : {},
+				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
+				signal: exec.signal
+			}), active.provider, active.model, "subscription", current(), exec, knownWorkspaceRoots);
 			const credential = await requireApiKey(ctx, active.provider, "generate_image");
 			if (active.provider === "google") {
 				const aspectRatio = args.aspect_ratio ?? active.aspectRatio;
@@ -20241,13 +21555,16 @@ function apply(ctx, config = {}) {
 					"dashscope",
 					"xai",
 					"zhipu",
-					"comfyui"
+					"comfyui",
+					"chatgpt-sub",
+					"grok-sub",
+					"google-sub"
 				],
-				description: "Optional provider for this call only (for example when the user asks to use a specific provider); omit to use the configured default."
+				description: "Optional provider for this call only (for example when the user asks to use a specific provider); omit to use the configured default. chatgpt-sub, grok-sub, and google-sub cannot edit images yet; the subscription channel is text-prompt only, so retry editing with an API-key provider instead."
 			},
 			model: {
 				type: "string",
-				description: "Optional model name for this call only, overriding the configured model. Not used by ComfyUI (use workflow instead)."
+				description: "Optional model name for this call only, overriding the configured model. Not used by ComfyUI (use workflow instead) nor by the subscription providers (model fixed by the subscription)."
 			},
 			source: {
 				type: "string",
@@ -20306,6 +21623,7 @@ function apply(ctx, config = {}) {
 		output: imageOutput("Edited"),
 		async execute(args, exec) {
 			const active = resolveProvider(withProviderOverrides(current(), providerOverrideOf(args.provider), args.model));
+			if (active.provider === "chatgpt-sub" || active.provider === "grok-sub" || active.provider === "google-sub") assertSubscriptionEditUnsupported(active.provider);
 			const canvasSelection = args.source === "canvas_selection";
 			if (canvasSelection && (args.source_attachment_id !== void 0 || Array.isArray(args.source_attachment_ids) || args.source_path !== void 0 || Array.isArray(args.source_paths))) throw new Error("edit_image source=canvas_selection cannot be combined with source_attachment_id, source_attachment_ids, source_path, or source_paths; provide exactly one selector");
 			const sourceImages = canvasSelection ? await resolveCanvasSelectionReferences({
@@ -20367,7 +21685,11 @@ function apply(ctx, config = {}) {
 				sourceImages,
 				size,
 				maxBytes: ctx.attachments.imageLimits.maxImageBytes,
-				signal: exec.signal
+				signal: exec.signal,
+				...active.provider === "openai-compat" ? {
+					editFormat: active.editFormat,
+					editExtra: active.editExtra
+				} : {}
 			}), active.provider, active.model, size, current(), exec, knownWorkspaceRoots);
 			if (active.provider === "seedream") return saveGenerated(ctx, await editSeedreamImage({
 				apiKey: credential,