dsh-modellix 0.1.0 → 0.2.0

package/lib/index.js

@@ -3,7 +3,10 @@ import { createHash, randomUUID } from "node:crypto";
 import { getOrCreateAnonymousUserId } from "@deepseek-ai/dsh-anonymous-user-id";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
 import { SettingsConflictError, settingsNamespace } from "@deepseek-ai/dsh-settings";
+import { lstat, open, realpath } from "node:fs/promises";
+import { basename, isAbsolute, relative, resolve } from "node:path";
 import { WebError } from "@deepseek-ai/dsh-web";
+import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { defineDomain } from "@deepseek-ai/dsh-storage-domain";
 import { z as z$1 } from "zod";
 import { defineTool } from "@deepseek-ai/dsh-tools";
@@ -1248,8 +1251,8 @@ var ModelCatalogClient = class {
 	}
 };
 function parseCatalogPage(payload, query, source) {
-	const envelope = record$1(payload);
-	const data = record$1(envelope?.data) ?? envelope;
+	const envelope = record$2(payload);
+	const data = record$2(envelope?.data) ?? envelope;
 	const rawItems = Array.isArray(payload) ? payload : firstArray(data?.items, data?.models, data?.list, envelope?.items, envelope?.models);
 	if (rawItems === null) throw new DesignError("UNEXPECTED_RESPONSE", "The model catalog response does not contain a model list");
 	const items = rawItems.map((item) => parseModel(item, query.category)).filter((item) => item !== null && item.categories.includes(query.category));
@@ -1267,9 +1270,9 @@ function parseCatalogPage(payload, query, source) {
 	};
 }
 function parseModel(value, requestedCategory) {
-	const item = record$1(value);
+	const item = record$2(value);
 	if (item === null) return null;
-	const provider = identifier(item.provider ?? item.provider_id ?? record$1(item.provider_info)?.slug);
+	const provider = identifier(item.provider ?? item.provider_id ?? record$2(item.provider_info)?.slug);
 	let modelId = identifier(item.model_id ?? item.modelId ?? item.id ?? item.name);
 	const rawSlug = stringValue(item.slug ?? item.model);
 	let slugProvider = null;
@@ -1282,9 +1285,11 @@ function parseModel(value, requestedCategory) {
 	}
 	const resolvedProvider = provider ?? slugProvider;
 	if (resolvedProvider === null || modelId === null) return null;
-	const categories = parseCategories(item.categories ?? item.category ?? item.task_type ?? item.type, requestedCategory);
+	const rawTaskType = item.task_type ?? item.taskType ?? item.type;
+	const categories = parseCategories(item.categories ?? item.category ?? rawTaskType, requestedCategory);
 	const displayName = stringValue(item.display_name ?? item.displayName ?? item.title) ?? modelId;
 	const description = stringValue(item.description ?? item.summary);
+	const taskType = routingType(rawTaskType);
 	const thumbnailUrl = safeHttpsUrl$2(item.thumbnail_url ?? item.thumbnailUrl ?? item.cover_url ?? item.cover);
 	return {
 		provider: resolvedProvider,
@@ -1292,10 +1297,16 @@ function parseModel(value, requestedCategory) {
 		slug: `${resolvedProvider}/${modelId}`,
 		displayName,
 		categories,
+		...taskType === null ? {} : { taskType },
 		...description === null ? {} : { description },
 		...thumbnailUrl === null ? {} : { thumbnailUrl }
 	};
 }
+function routingType(value) {
+	if (typeof value !== "string") return null;
+	const normalized = value.trim().toLowerCase();
+	return /^[a-z0-9]+(?:-[a-z0-9]+){0,7}$/u.test(normalized) ? normalized.slice(0, 64) : null;
+}
 function parseCategories(value, fallback) {
 	if (value === void 0 || value === null) return [fallback];
 	const candidates = Array.isArray(value) ? value : [value];
@@ -1358,7 +1369,7 @@ function safeHttpsUrl$2(value) {
 		return null;
 	}
 }
-function record$1(value) {
+function record$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 function firstArray(...values) {
@@ -1409,7 +1420,7 @@ var ModelSchemaClient = class {
 		const url = new URL(`/portal/v1/models/${encodeURIComponent(modelId)}`, PUBLIC_ORIGIN);
 		url.searchParams.set("provider", provider);
 		const payload = await requestNoAuthorization(this.#fetch, url, signal, this.#requestTimeoutMs);
-		const data = asRecord$4(payload.data) ?? payload;
+		const data = asRecord$5(payload.data) ?? payload;
 		return {
 			provider,
 			modelId,
@@ -1429,7 +1440,7 @@ function extractAllowedSubmitUrl(document, provider, modelId) {
 	assertIdentifier(modelId, "modelId");
 	const servers = document.servers;
 	if (!Array.isArray(servers) || servers.length === 0) throw new DesignError("SCHEMA_INVALID", "The public model schema does not publish a submission server");
-	const server = asRecord$4(servers[0]);
+	const server = asRecord$5(servers[0]);
 	if (typeof server?.url !== "string") throw new DesignError("SCHEMA_INVALID", "The public model schema server URL is missing");
 	let url;
 	try {
@@ -1445,13 +1456,13 @@ function parseSchemaData(value) {
 	if (typeof value === "string") {
 		if (value.length > 2 * 1024 * 1024) throw new DesignError("SCHEMA_INVALID", "schema_data exceeds the size limit");
 		try {
-			const object = asRecord$4(JSON.parse(value));
+			const object = asRecord$5(JSON.parse(value));
 			if (object !== null) return object;
 		} catch (cause) {
 			throw new DesignError("SCHEMA_INVALID", "schema_data is not valid JSON", { cause });
 		}
 	}
-	const object = asRecord$4(value);
+	const object = asRecord$5(value);
 	if (object === null) throw new DesignError("SCHEMA_INVALID", "The portal model detail does not contain schema_data");
 	return object;
 }
@@ -1484,14 +1495,164 @@ async function requestNoAuthorization(fetchPort, url, signal, requestTimeoutMs =
 		});
 		throw new DesignError("SCHEMA_INVALID", "The model schema is not valid JSON", { cause });
 	}
-	const document = asRecord$4(parsed);
+	const document = asRecord$5(parsed);
 	if (document === null) throw new DesignError("SCHEMA_INVALID", "The model schema must be an object");
 	return document;
 }
 function assertIdentifier(value, field) {
 	if (!IDENTIFIER$1.test(value)) throw new DesignError("INVALID_ARGUMENT", `${field} must be a Modellix provider/model identifier`);
 }
-function asRecord$4(value) {
+function asRecord$5(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+}
+//#endregion
+//#region src/design/media-upload-client.ts
+const MEDIA_UPLOAD_URL = "https://api.modellix.ai/api/v1/media/files";
+const MAX_MEDIA_FILE_BYTES = 16 * 1024 * 1024;
+const MAX_UPLOAD_RESPONSE_BYTES = 512 * 1024;
+const DEFAULT_UPLOAD_TIMEOUT_MS = 3e4;
+const SAFE_FILE_ID = /^[A-Za-z0-9._~:+@=-]{1,512}$/u;
+var MediaUploadClient = class {
+	#fetch;
+	#timeoutMs;
+	constructor(options = {}) {
+		this.#fetch = options.fetch ?? fetch;
+		this.#timeoutMs = options.timeoutMs ?? DEFAULT_UPLOAD_TIMEOUT_MS;
+	}
+	async upload(input) {
+		if (input.bytes.byteLength < 1 || input.bytes.byteLength > MAX_MEDIA_FILE_BYTES) throw new DesignError("INVALID_ARGUMENT", "Media file size must be between 1 byte and 16 MiB");
+		if (input.apiKey.trim() === "" || /[\r\n]/u.test(input.apiKey)) throw new DesignError("INVALID_ARGUMENT", "Modellix credential is missing or malformed");
+		input.signal?.throwIfAborted();
+		const filename = safeFilename(input.filename, input.mimeType);
+		const form = new FormData();
+		form.append("file", new Blob([input.bytes], { type: input.mimeType }), filename);
+		const deadline = requestDeadline(input.signal, this.#timeoutMs);
+		let response;
+		try {
+			response = await this.#fetch(MEDIA_UPLOAD_URL, {
+				method: "POST",
+				headers: new Headers({
+					accept: "application/json",
+					authorization: `Bearer ${input.apiKey}`
+				}),
+				body: form,
+				redirect: "error",
+				signal: deadline.signal
+			});
+		} catch (cause) {
+			throw new DesignError("SUBMIT_UNKNOWN", "The media upload outcome is unknown; do not retry automatically", { cause });
+		}
+		if (response.redirected) {
+			response.body?.cancel().catch(() => void 0);
+			throw new DesignError("SUBMIT_UNKNOWN", "The media upload outcome is unknown; do not retry automatically", { status: response.status });
+		}
+		if (!response.ok) {
+			const ambiguous = response.status === 408 || response.status === 409 || response.status === 425 || response.status === 429 || response.status >= 500;
+			response.body?.cancel().catch(() => void 0);
+			throw new DesignError(ambiguous ? "SUBMIT_UNKNOWN" : "SUBMIT_REJECTED", ambiguous ? "The media upload outcome is unknown; do not retry automatically" : `The media upload was rejected with HTTP ${String(response.status)}`, { status: response.status });
+		}
+		let payload;
+		try {
+			payload = await readBoundedResponseJson(response, MAX_UPLOAD_RESPONSE_BYTES, deadline.signal);
+			return parseMediaUploadRecord(payload);
+		} catch (cause) {
+			throw new DesignError("SUBMIT_UNKNOWN", "The upload succeeded but its file metadata could not be read; do not retry automatically", { cause });
+		}
+	}
+};
+async function prepareMediaUploadFromSession(agent, attachmentId, signal) {
+	if (agent === void 0) throw new DesignError("INVALID_ARGUMENT", "Session attachments require an active Agent");
+	const ref = findSessionAttachment(agent, attachmentId);
+	if (ref === null) throw new DesignError("INVALID_ARGUMENT", "The attachment is not present in this conversation");
+	return {
+		bytes: (await agent.ctx.attachments.readImage(ref, signal)).data,
+		filename: safeFilename(ref.name ?? `attachment-${String(ref.attachmentId)}`, ref.mediaType),
+		mimeType: ref.mediaType
+	};
+}
+async function prepareMediaUploadFromPath(cwd, inputPath) {
+	if (cwd === void 0 || cwd.trim() === "") throw new DesignError("INVALID_ARGUMENT", "A session workspace is required for path uploads");
+	if (inputPath.trim() === "" || inputPath.length > 32767) throw new DesignError("INVALID_ARGUMENT", "Media path is missing or too long");
+	const workspace = await realpath(cwd);
+	const candidate = resolve(workspace, inputPath);
+	const candidateStats = await lstat(candidate).catch((cause) => {
+		throw new DesignError("INVALID_ARGUMENT", "The media file could not be inspected", { cause });
+	});
+	if (candidateStats.isSymbolicLink()) throw new DesignError("INVALID_ARGUMENT", "Media upload input must not be a symbolic link");
+	const resolved = await realpath(candidate).catch((cause) => {
+		throw new DesignError("INVALID_ARGUMENT", "The media file could not be resolved", { cause });
+	});
+	if (!within(workspace, resolved)) throw new DesignError("INVALID_ARGUMENT", "Media path must stay inside the session workspace");
+	const before = candidateStats;
+	if (!before.isFile() || before.isSymbolicLink()) throw new DesignError("INVALID_ARGUMENT", "Media upload input must be a regular file");
+	if (before.size < 1 || before.size > MAX_MEDIA_FILE_BYTES) throw new DesignError("INVALID_ARGUMENT", "Media file size must be between 1 byte and 16 MiB");
+	const handle = await open(resolved, "r");
+	let bytes;
+	try {
+		const opened = await handle.stat();
+		if (!opened.isFile() || opened.size !== before.size || opened.dev !== before.dev || opened.ino !== before.ino) throw new DesignError("INVALID_ARGUMENT", "Media file changed while it was being opened");
+		bytes = await handle.readFile();
+	} finally {
+		await handle.close();
+	}
+	if (bytes.byteLength !== before.size) throw new DesignError("INVALID_ARGUMENT", "Media file changed while it was being read");
+	const mimeType = detectImageMimeType(bytes);
+	return {
+		bytes,
+		filename: safeFilename(basename(resolved), mimeType),
+		mimeType
+	};
+}
+function findSessionAttachment(agent, attachmentId) {
+	for (const message of agent.session.deriveMessages().toReversed()) for (const block of message.content.toReversed()) if (block.type === "image" && String(block.attachment.attachmentId) === attachmentId) return block.attachment;
+	return null;
+}
+function within(root, candidate) {
+	const suffix = relative(root, candidate);
+	return suffix === "" || !suffix.startsWith("..") && !isAbsolute(suffix);
+}
+function detectImageMimeType(bytes) {
+	if (bytes.length >= 8 && bytes.slice(0, 8).every((value, index) => value === [
+		137,
+		80,
+		78,
+		71,
+		13,
+		10,
+		26,
+		10
+	][index])) return "image/png";
+	if (bytes.length >= 3 && bytes[0] === 255 && bytes[1] === 216 && bytes[2] === 255) return "image/jpeg";
+	const ascii = (start, end) => new TextDecoder("ascii").decode(bytes.slice(start, end));
+	if (bytes.length >= 12 && ascii(0, 4) === "RIFF" && ascii(8, 12) === "WEBP") return "image/webp";
+	throw new DesignError("INVALID_ARGUMENT", "Unsupported media type; use PNG, JPEG, or WebP");
+}
+function safeFilename(value, mimeType) {
+	const extension = mimeType === "image/png" ? ".png" : mimeType === "image/webp" ? ".webp" : ".jpg";
+	const headerSafe = value.normalize("NFC").replaceAll(/["\\/]/gu, "_");
+	const cleaned = Array.from(headerSafe, (character) => {
+		const codePoint = character.codePointAt(0) ?? 0;
+		return codePoint <= 31 || codePoint === 127 ? "_" : character;
+	}).join("").trim().slice(0, 180);
+	return cleaned === "" ? `upload${extension}` : cleaned;
+}
+function parseMediaUploadRecord(payload) {
+	const root = record$1(payload);
+	const data = record$1(root?.data) ?? root;
+	if (data === null || typeof data.file_id !== "string" || !SAFE_FILE_ID.test(data.file_id) || typeof data.type !== "string" || typeof data.filename !== "string" || typeof data.size !== "number" || !Number.isSafeInteger(data.size) || data.size < 0 || typeof data.url !== "string") throw new TypeError("Media upload response is malformed");
+	const url = new URL(data.url);
+	if (url.protocol !== "https:" || url.username !== "" || url.password !== "") throw new TypeError("Media upload URL is unsafe");
+	const createdAt = typeof data.created_at === "string" && Number.isFinite(Date.parse(data.created_at)) ? new Date(data.created_at).toISOString() : typeof data.created_at === "number" && Number.isFinite(data.created_at) ? new Date(data.created_at).toISOString() : null;
+	return {
+		fileId: data.file_id,
+		type: data.type.slice(0, 128),
+		url: url.href,
+		filename: data.filename.slice(0, 512),
+		size: data.size,
+		createdAt
+	};
+}
+function record$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 //#endregion
@@ -2065,11 +2226,11 @@ function parsePlannerResponse(text, status) {
 	} catch (_error) {
 		throw plannerError("PLANNER_RESPONSE_INVALID", "Design planner returned malformed JSON", status);
 	}
-	const root = asRecord$3(envelope);
+	const root = asRecord$4(envelope);
 	const choices = root === null ? null : root.choices;
-	const choice = Array.isArray(choices) ? asRecord$3(choices[0]) : null;
+	const choice = Array.isArray(choices) ? asRecord$4(choices[0]) : null;
 	if (choice?.finish_reason === "length") throw plannerError("PLANNER_RESPONSE_INVALID", "Design planner response was incomplete", status);
-	const message = asRecord$3(choice?.message);
+	const message = asRecord$4(choice?.message);
 	if (typeof message?.content !== "string") throw plannerError("PLANNER_RESPONSE_INVALID", "Design planner response did not contain structured output", status);
 	let content;
 	try {
@@ -2080,7 +2241,7 @@ function parsePlannerResponse(text, status) {
 	return parseWireResult(content, status);
 }
 function parseWireResult(value, status) {
-	const root = asRecord$3(value);
+	const root = asRecord$4(value);
 	if (root === null || !hasExactKeys(root, [
 		"set",
 		"unset",
@@ -2091,7 +2252,7 @@ function parseWireResult(value, status) {
 	if (clarification !== null && (typeof clarification !== "string" || clarification.trim() === "" || clarification.length > MAX_CLARIFICATION_LENGTH)) throw invalidWireResult(status);
 	return {
 		set: root.set.map((entry) => {
-			const item = asRecord$3(entry);
+			const item = asRecord$4(entry);
 			if (item === null || !hasExactKeys(item, ["path", "value"]) || typeof item.path !== "string") throw invalidWireResult(status);
 			return {
 				path: item.path,
@@ -2185,7 +2346,7 @@ async function cancelBody(response) {
 function statusError(status) {
 	switch (status) {
 		case 401: return plannerError("PLANNER_UNAUTHORIZED", "Design planner authentication was rejected", status);
-		case 402: return plannerError("PLANNER_BILLING_BLOCKED", "Design planner billing is unavailable", status);
+		case 402: return plannerError("PLANNER_BILLING_BLOCKED", "The Design planner request is unavailable for the current account", status);
 		case 403: return plannerError("PLANNER_FORBIDDEN", "Design planner access was forbidden", status);
 		case 429: return plannerError("PLANNER_RATE_LIMITED", "Design planner is rate limited", status);
 		default:
@@ -2194,7 +2355,7 @@ function statusError(status) {
 	}
 }
 function submitUnknown(status) {
-	return plannerError("SUBMIT_UNKNOWN", "The paid Design planner outcome is unknown; do not retry automatically", status);
+	return plannerError("SUBMIT_UNKNOWN", "The Design planner outcome is unknown; do not retry automatically", status);
 }
 function validateApiKey$1(value) {
 	if (typeof value !== "string" || value.trim() === "" || value.length > 16384 || /[\r\n]/u.test(value)) throw plannerError("MISSING_API_KEY", "A Modellix API key is required");
@@ -2209,7 +2370,7 @@ function safeStringify(value) {
 		throw plannerError("INVALID_ARGUMENT", "Design planner input must be JSON-compatible");
 	}
 }
-function asRecord$3(value) {
+function asRecord$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 function invalidWireResult(status) {
@@ -2301,11 +2462,11 @@ var PredictionClient = class {
 				model,
 				...requestId === null ? {} : { requestId }
 			});
-			throw new DesignError("SUBMIT_UNKNOWN", "The paid request outcome is unknown; do not retry automatically", { cause });
+			throw new DesignError("SUBMIT_UNKNOWN", "The generation request outcome is unknown; do not retry automatically", { cause });
 		}
 		if (response.redirected) {
 			response.body?.cancel().catch(() => void 0);
-			throw new DesignError("SUBMIT_UNKNOWN", "The paid request outcome is unknown; do not retry automatically", { status: response.status });
+			throw new DesignError("SUBMIT_UNKNOWN", "The generation request outcome is unknown; do not retry automatically", { status: response.status });
 		}
 		if (!response.ok) {
 			const ambiguous = isAmbiguousSubmitStatus(response.status);
@@ -2317,21 +2478,21 @@ var PredictionClient = class {
 				status: response.status,
 				...requestId === null ? {} : { requestId }
 			});
-			throw new DesignError(ambiguous ? "SUBMIT_UNKNOWN" : "SUBMIT_REJECTED", ambiguous ? "The paid request outcome is unknown; do not retry automatically" : `The paid request was rejected with HTTP ${response.status}`, { status: response.status });
+			throw new DesignError(ambiguous ? "SUBMIT_UNKNOWN" : "SUBMIT_REJECTED", ambiguous ? "The generation request outcome is unknown; do not retry automatically" : `The generation request was rejected with HTTP ${response.status}`, { status: response.status });
 		}
 		let payload;
 		try {
 			payload = await readBoundedResponseJson(response, MAX_PREDICTION_RESPONSE_BYTES, deadline.signal);
 		} catch (cause) {
-			throw new DesignError("SUBMIT_UNKNOWN", "The paid request succeeded but its task identifier could not be read", { cause });
+			throw new DesignError("SUBMIT_UNKNOWN", "The generation request succeeded but its task identifier could not be read", { cause });
 		}
 		let task;
 		try {
 			task = parsePredictionTask(payload);
 		} catch (cause) {
-			throw new DesignError("SUBMIT_UNKNOWN", "The paid request succeeded but its task response was invalid", { cause });
+			throw new DesignError("SUBMIT_UNKNOWN", "The generation request succeeded but its task response was invalid", { cause });
 		}
-		if (task === null) throw new DesignError("SUBMIT_UNKNOWN", "The paid request response did not contain a valid task identifier");
+		if (task === null) throw new DesignError("SUBMIT_UNKNOWN", "The generation request response did not contain a valid task identifier");
 		this.#log({
 			level: "info",
 			event: "design.submit.accepted",
@@ -2449,14 +2610,14 @@ function validateSubmitEndpoint(endpoint, modelSlug) {
 	return url;
 }
 function parsePredictionTask(payload, expectedTaskId) {
-	const root = asRecord$2(payload);
+	const root = asRecord$3(payload);
 	if (root === null) return null;
-	const envelope = asRecord$2(root.data) ?? root;
-	const data = asRecord$2(envelope.task) ?? asRecord$2(root.task) ?? envelope;
+	const envelope = asRecord$3(root.data) ?? root;
+	const data = asRecord$3(envelope.task) ?? asRecord$3(root.task) ?? envelope;
 	const taskId = safeId(data.task_id) ?? safeId(data.taskId) ?? safeId(data.id) ?? safeId(root.task_id) ?? safeId(root.taskId) ?? (expectedTaskId === void 0 ? null : safeId(expectedTaskId));
 	if (taskId === null) return null;
 	if (expectedTaskId !== void 0 && taskId !== expectedTaskId) throw new DesignError("UNEXPECTED_RESPONSE", "Task status response identifier does not match the requested task");
-	const result = asRecord$2(data.result) ?? asRecord$2(root.result);
+	const result = asRecord$3(data.result) ?? asRecord$3(root.result);
 	const expiresAt = timestamp(data.result_expires_at ?? data.resultExpiresAt ?? data.expires_at ?? data.expiresAt ?? result?.result_expires_at ?? result?.resultExpiresAt ?? result?.expires_at ?? result?.expiresAt);
 	const resourceContainer = data.result_resources ?? data.resources ?? result?.result_resources ?? result?.resources ?? data.output ?? result?.output ?? root.resources ?? root.output ?? result;
 	return {
@@ -2473,7 +2634,7 @@ function parseResources(value, inheritedExpiresAt = null) {
 }
 function parseResourcesAtDepth(value, inheritedExpiresAt, depth) {
 	if (depth > DESIGN_WIRE_LIMITS.maxJsonDepth) throw new DesignError("UNEXPECTED_RESPONSE", "Prediction resources exceed the structural depth limit");
-	const envelope = asRecord$2(value);
+	const envelope = asRecord$3(value);
 	if (envelope !== null && !hasResourceUrl(envelope)) {
 		const nested = envelope.resources ?? envelope.result_resources ?? envelope.output;
 		if (nested !== void 0 && nested !== value) return parseResourcesAtDepth(nested, inheritedExpiresAt, depth + 1);
@@ -2503,7 +2664,7 @@ function parseResourcesAtDepth(value, inheritedExpiresAt, depth) {
 					type: kind,
 					url: candidate
 				}, inheritedExpiresAt) : parseResource({
-					...asRecord$2(candidate),
+					...asRecord$3(candidate),
 					type: kind
 				}, inheritedExpiresAt);
 				if (resource !== null) appendResource(grouped, resource);
@@ -2535,7 +2696,7 @@ function parseResource(value, inheritedExpiresAt) {
 			expiresAt: inheritedExpiresAt
 		};
 	}
-	const resource = asRecord$2(value);
+	const resource = asRecord$3(value);
 	if (resource === null) return null;
 	const url = safeHttpsUrl$1(resource.url ?? resource.uri ?? resource.image_url ?? resource.video_url ?? resource.audio_url);
 	const mimeType = boundedString(resource.mime_type ?? resource.mimeType);
@@ -2645,7 +2806,7 @@ function retryAfterMs(value, nowMs) {
 function isAbortError$1(value) {
 	return value instanceof Error && value.name === "AbortError";
 }
-function asRecord$2(value) {
+function asRecord$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 var TaskReadFailure = class extends Error {
@@ -2829,7 +2990,7 @@ const UNSAFE_PROPERTY_NAMES = /* @__PURE__ */ new Set([
 	"prototype"
 ]);
 function parseDesignSchema(input, limits = {}) {
-	const document = asRecord$1(input);
+	const document = asRecord$2(input);
 	if (document === null) throw new DesignError("SCHEMA_INVALID", "Schema input must be an object");
 	const normalizedLimits = normalizeLimits(limits);
 	switch (inspectJsonBudget(document, {
@@ -2885,14 +3046,14 @@ function parseDesignSchema(input, limits = {}) {
 	detectReferenceCycles(discovered.schema, "#", context, [], 0);
 	const root = expandSchema(discovered.schema, "#", context, [], 0);
 	const required = stringSet(root.required);
-	const properties = asRecord$1(root.properties);
+	const properties = asRecord$2(root.properties);
 	let fields;
 	if (properties === null) {
 		const rootField = compileField("body", "", root, true, context, 0);
 		fields = rootField === null ? [] : [rootField];
 	} else {
 		fields = Object.entries(properties).map(([key, schema], index) => {
-			const object = asRecord$1(schema);
+			const object = asRecord$2(schema);
 			return object === null ? invalidProperty(key, index, context) : compileField(key, `/${escapePointerToken$1(key)}`, object, required.has(key), context, 1, index);
 		}).filter((field) => field !== null);
 		fields = sortFields(fields);
@@ -2911,7 +3072,7 @@ function parseDesignSchema(input, limits = {}) {
 	};
 }
 function discoverPostBody(document, diagnostics) {
-	const rootPost = asRecord$1(document.post);
+	const rootPost = asRecord$2(document.post);
 	if (rootPost !== null) {
 		const schema = requestBodySchema(rootPost);
 		if (schema !== null) return {
@@ -2923,11 +3084,11 @@ function discoverPostBody(document, diagnostics) {
 			operationPath: null
 		};
 	}
-	const paths = asRecord$1(document.paths);
+	const paths = asRecord$2(document.paths);
 	if (paths !== null) {
 		const candidates = [];
 		for (const path of Object.keys(paths).sort()) {
-			const post = asRecord$1(asRecord$1(paths[path])?.post);
+			const post = asRecord$2(asRecord$2(paths[path])?.post);
 			if (post === null) continue;
 			const schema = requestBodySchema(post);
 			if (schema !== null) candidates.push({
@@ -2940,7 +3101,7 @@ function discoverPostBody(document, diagnostics) {
 			path: "#/paths",
 			keyword: "post",
 			blocking: true,
-			message: "Multiple POST bodies were found; Design cannot safely select a paid operation"
+			message: "Multiple POST bodies were found; Design cannot safely select a submission operation"
 		});
 		if (candidates[0] !== void 0) return candidates[0];
 	}
@@ -2956,8 +3117,8 @@ function discoverPostBody(document, diagnostics) {
 	return null;
 }
 function requestBodySchema(operation) {
-	const content = asRecord$1(asRecord$1(operation.requestBody)?.content);
-	return asRecord$1((asRecord$1(content?.["application/json"]) ?? asRecord$1(content?.["application/*+json"]))?.schema);
+	const content = asRecord$2(asRecord$2(operation.requestBody)?.content);
+	return asRecord$2((asRecord$2(content?.["application/json"]) ?? asRecord$2(content?.["application/*+json"]))?.schema);
 }
 function looksLikeJsonSchema(value) {
 	return [
@@ -2996,14 +3157,14 @@ function compileField(key, path, rawSchema, required, context, depth, _sourceInd
 	reportUnsupportedKeywords(schema, path, context);
 	const nullable = schema.nullable === true || schemaTypes(schema).includes("null");
 	const kind = inferKind(schema, key);
-	const nestedProperties = asRecord$1(schema.properties);
+	const nestedProperties = asRecord$2(schema.properties);
 	const nestedRequired = stringSet(schema.required);
 	const properties = nestedProperties === null ? [] : sortFields(Object.entries(nestedProperties).map(([childKey, childSchema], index) => {
-		const object = asRecord$1(childSchema);
+		const object = asRecord$2(childSchema);
 		if (object === null) return invalidProperty(childKey, index, context, path);
 		return compileField(childKey, `${path}/${escapePointerToken$1(childKey)}`, object, nestedRequired.has(childKey), context, depth + 1, index);
 	}).filter((field) => field !== null));
-	const itemSchema = asRecord$1(schema.items);
+	const itemSchema = asRecord$2(schema.items);
 	const item = itemSchema === null ? null : compileField("items", `${path}/*`, itemSchema, false, context, depth + 1);
 	const variants = compileVariants(key, path, schema, required, context, depth);
 	const defaultValue = jsonCompatible(schema.default);
@@ -3035,7 +3196,7 @@ function compileVariants(key, path, schema, required, context, depth) {
 		const candidates = schema[combinator];
 		if (!Array.isArray(candidates)) continue;
 		candidates.forEach((candidate, index) => {
-			const branch = asRecord$1(candidate);
+			const branch = asRecord$2(candidate);
 			if (branch === null) {
 				context.diagnostics.push({
 					code: "INVALID_KEYWORD",
@@ -3106,7 +3267,7 @@ function expandSchema(rawSchema, path, context, refStack, depth) {
 	if (Array.isArray(schema.allOf)) {
 		let merged = omitKeys(schema, ["allOf"]);
 		schema.allOf.forEach((candidate, index) => {
-			const branch = asRecord$1(candidate);
+			const branch = asRecord$2(candidate);
 			if (branch === null) {
 				context.diagnostics.push({
 					code: "INVALID_KEYWORD",
@@ -3144,12 +3305,12 @@ function detectReferenceCycles(schema, path, context, refStack, depth) {
 			if (target !== null) detectReferenceCycles(target, reference, context, [...refStack, reference], depth + 1);
 		}
 	}
-	const properties = asRecord$1(schema.properties);
+	const properties = asRecord$2(schema.properties);
 	for (const [key, value] of Object.entries(properties ?? {})) {
-		const child = asRecord$1(value);
+		const child = asRecord$2(value);
 		if (child !== null) detectReferenceCycles(child, `${path}/properties/${escapePointerToken$1(key)}`, context, refStack, depth + 1);
 	}
-	const item = asRecord$1(schema.items);
+	const item = asRecord$2(schema.items);
 	if (item !== null) detectReferenceCycles(item, `${path}/items`, context, refStack, depth + 1);
 	for (const combinator of [
 		"allOf",
@@ -3159,7 +3320,7 @@ function detectReferenceCycles(schema, path, context, refStack, depth) {
 		const candidates = schema[combinator];
 		if (!Array.isArray(candidates)) continue;
 		candidates.forEach((candidate, index) => {
-			const child = asRecord$1(candidate);
+			const child = asRecord$2(candidate);
 			if (child !== null) detectReferenceCycles(child, `${path}/${combinator}/${index}`, context, refStack, depth + 1);
 		});
 	}
@@ -3178,13 +3339,13 @@ function mergeSchemas(left, right, path, context) {
 		...left,
 		...right
 	};
-	const leftProperties = asRecord$1(left.properties);
-	const rightProperties = asRecord$1(right.properties);
+	const leftProperties = asRecord$2(left.properties);
+	const rightProperties = asRecord$2(right.properties);
 	if (leftProperties !== null || rightProperties !== null) {
 		const properties = Object.assign(Object.create(null), leftProperties ?? {});
 		for (const [key, value] of Object.entries(rightProperties ?? {})) {
-			const existing = asRecord$1(properties[key]);
-			const incoming = asRecord$1(value);
+			const existing = asRecord$2(properties[key]);
+			const incoming = asRecord$2(value);
 			properties[key] = existing !== null && incoming !== null ? { allOf: [existing, incoming] } : value;
 		}
 		result.properties = properties;
@@ -3229,12 +3390,12 @@ function resolvePointer(root, reference) {
 			if (!/^(?:0|[1-9]\d*)$/.test(token)) return null;
 			current = current[Number(token)];
 		} else {
-			const object = asRecord$1(current);
+			const object = asRecord$2(current);
 			if (object === null || !Object.hasOwn(object, token)) return null;
 			current = object[token];
 		}
 	}
-	return asRecord$1(current);
+	return asRecord$2(current);
 }
 function decodePointerToken(value) {
 	if (/~(?:[^01]|$)/.test(value)) return null;
@@ -3267,8 +3428,8 @@ function inferKind(schema, key) {
 	if (detectMediaKind(schema) !== null) return "media";
 	const type = schemaTypes(schema).filter((type) => type !== "null")[0];
 	if (type === "string" || type === "number" || type === "integer" || type === "boolean" || type === "object" || type === "array") return type;
-	if (asRecord$1(schema.properties) !== null) return "object";
-	if (asRecord$1(schema.items) !== null) return "array";
+	if (asRecord$2(schema.properties) !== null) return "object";
+	if (asRecord$2(schema.items) !== null) return "array";
 	if (Object.hasOwn(schema, "default")) {
 		const defaultKind = scalarKind(schema.default);
 		if (defaultKind !== null) return defaultKind;
@@ -3330,6 +3491,7 @@ function safePattern(value) {
 	return typeof value === "string" && value.length <= 512 ? value : null;
 }
 function isSafeRegularExpression(pattern) {
+	if (pattern === "^\\d+\\*\\d+$") return true;
 	if (!pattern.startsWith("^") || !pattern.endsWith("$") || pattern.length < 2) return false;
 	let index = 1;
 	let variableQuantifiers = 0;
@@ -3504,7 +3666,7 @@ function jsonCompatible(value) {
 		const items = value.map(jsonCompatible);
 		return items.every((item) => item !== void 0) ? items : void 0;
 	}
-	const object = asRecord$1(value);
+	const object = asRecord$2(value);
 	if (object === null) return;
 	const result = Object.create(null);
 	for (const [key, item] of Object.entries(object)) {
@@ -3519,7 +3681,7 @@ function stableStringify(value) {
 }
 function sortJson(value) {
 	if (Array.isArray(value)) return value.map(sortJson);
-	const object = asRecord$1(value);
+	const object = asRecord$2(value);
 	if (object === null) {
 		if (value === null || typeof value === "string" || typeof value === "boolean" || typeof value === "number" && Number.isFinite(value)) return value;
 		throw new TypeError("Value is not JSON-compatible");
@@ -3529,7 +3691,7 @@ function sortJson(value) {
 function sha256(value) {
 	return createHash("sha256").update(value, "utf8").digest("hex");
 }
-function asRecord$1(value) {
+function asRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 function boundedText(value) {
@@ -3571,9 +3733,10 @@ var DesignTaskRepository = class {
 		this.#maxEvents = boundedInteger(options.maxEvents ?? DEFAULT_MAX_EVENTS, 1, 1e5, "maxEvents");
 		this.#maxBytes = boundedInteger(options.maxBytes ?? DEFAULT_MAX_BYTES, 1024, 32 * 1024 * 1024, "maxBytes");
 	}
-	async recordSubmitIntent(requestId, modelSlug, credentialEpoch) {
+	async recordSubmitIntent(requestId, modelSlug, sessionId, credentialEpoch) {
 		requireId(requestId, "requestId");
 		requireModelSlug(modelSlug);
+		requireId(sessionId, "sessionId");
 		requireEpoch(credentialEpoch);
 		const wal = await this.#loadWal();
 		if (replayDesignWal(wal.events).some((record) => record.requestId === requestId)) throw new DesignError("STORAGE_INVALID", "requestId already exists in the Design WAL");
@@ -3583,6 +3746,7 @@ var DesignTaskRepository = class {
 			timestamp: this.#clock.now(),
 			requestId,
 			modelSlug,
+			sessionId,
 			credentialEpoch
 		});
 	}
@@ -3715,11 +3879,13 @@ function replayDesignWal(events) {
 			case "submit-intent":
 				requireId(event.requestId, "requestId");
 				requireModelSlug(event.modelSlug);
+				if (event.sessionId !== void 0) requireId(event.sessionId, "sessionId");
 				if (event.credentialEpoch !== void 0) requireEpoch(event.credentialEpoch);
 				if (records.has(event.requestId)) throw new DesignError("STORAGE_INVALID", "Design WAL has a duplicate requestId");
 				records.set(event.requestId, {
 					requestId: event.requestId,
 					modelSlug: event.modelSlug,
+					sessionId: event.sessionId ?? null,
 					credentialEpoch: event.credentialEpoch ?? null,
 					taskId: null,
 					state: "submitting",
@@ -3863,6 +4029,7 @@ function checkpointRecords(records, now) {
 			timestamp: record.createdAt,
 			requestId: record.requestId,
 			modelSlug: record.modelSlug,
+			...record.sessionId === null ? {} : { sessionId: record.sessionId },
 			...record.credentialEpoch === null ? {} : { credentialEpoch: record.credentialEpoch }
 		});
 		if (record.taskId !== null) {
@@ -3913,7 +4080,7 @@ function shouldRetainCheckpoint(record, now) {
 	return record.updatedAt + DEFAULT_RESULT_TTL_MS > now;
 }
 function parseWal(value, maxEvents) {
-	const root = asRecord(value);
+	const root = asRecord$1(value);
 	if (root?.version !== 1 || !Array.isArray(root.events) || root.events.length > maxEvents) throw new DesignError("STORAGE_INVALID", "Stored Design WAL has an invalid envelope");
 	return {
 		version: 1,
@@ -3998,7 +4165,7 @@ function boundedInteger(value, minimum, maximum, field) {
 	if (!Number.isInteger(value) || value < minimum || value > maximum) throw new DesignError("INVALID_ARGUMENT", `${field} must be an integer from ${minimum} through ${maximum}`);
 	return value;
 }
-function asRecord(value) {
+function asRecord$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 //#endregion
@@ -4913,7 +5080,10 @@ function createModellixWebProviders(options) {
 }
 /** Registers only providers; the Harness-owned web_search/web_fetch Tools remain untouched. */
 function registerModellixWebProviders(registry, options) {
-	const providers = createModellixWebProviders(options);
+	return registerModellixWebProviderInstances(registry, createModellixWebProviders(options));
+}
+/** Register already-created providers so Host tools can share the exact same instances. */
+function registerModellixWebProviderInstances(registry, providers) {
 	const disposeSearch = registry.registerSearchProvider(providers.search);
 	let disposeFetch;
 	try {
@@ -5138,14 +5308,14 @@ function redactedCause(error) {
 function messageFor(contract) {
 	switch (contract.code) {
 		case "MODELLIX_API_KEY_INVALID": return "Modellix rejected the configured API Key";
-		case "MODELLIX_BILLING_BLOCKED": return "The Modellix account cannot run this paid Web request";
+		case "MODELLIX_BILLING_BLOCKED": return "The Modellix account cannot run this Web request";
 		case "MODELLIX_RATE_LIMITED": return "The Modellix Web request was rate limited";
 		case "MODELLIX_CANCELED": return "The Modellix Web request was canceled";
 		case "MODELLIX_OFFLINE": return "The Modellix Web service could not be reached";
 		case "MODELLIX_TIMEOUT": return "The Modellix Web request timed out";
 		case "MODELLIX_SERVER_ERROR": return "The Modellix Web service is temporarily unavailable";
 		case "MODELLIX_BAD_REQUEST": return "The Modellix Web request is invalid";
-		case "MODELLIX_SUBMIT_UNKNOWN": return "The paid Modellix Web request outcome is unknown; it was not retried";
+		case "MODELLIX_SUBMIT_UNKNOWN": return "The Modellix Web request outcome is unknown; it was not retried";
 		default: return "The Modellix Web request failed";
 	}
 }
@@ -5508,7 +5678,7 @@ var DesignHostController = class {
 		const body = buildInvocationBody(schema, parameters);
 		const requestId = `request_${randomUUID().replaceAll("-", "")}`;
 		signal?.throwIfAborted();
-		await this.#repository.recordSubmitIntent(requestId, input.modelId, credential.credentialEpoch);
+		await this.#repository.recordSubmitIntent(requestId, input.modelId, input.sessionId, credential.credentialEpoch);
 		session.draft = {
 			modelId: input.modelId,
 			revision: draft.revision + 1,
@@ -5548,7 +5718,7 @@ var DesignHostController = class {
 				try {
 					await this.#repository.markSubmitUnknown(requestId);
 				} catch {}
-				throw new DesignError("SUBMIT_UNKNOWN", "The paid request succeeded but its task could not be persisted", { cause: firstPersistenceError });
+				throw new DesignError("SUBMIT_UNKNOWN", "The generation request succeeded but its task could not be persisted", { cause: firstPersistenceError });
 			}
 		}
 		return this.#snapshot(session, await this.#loadModelsSafely(signal));
@@ -5620,6 +5790,8 @@ var DesignHostController = class {
 				id: model.slug,
 				label: model.displayName,
 				kind: model.categories[0] ?? "unknown",
+				...model.taskType === void 0 ? {} : { taskType: model.taskType },
+				...model.description === void 0 ? {} : { description: model.description },
 				featured: featuredSlugs.has(model.slug),
 				available: true,
 				unavailableReason: null
@@ -5633,7 +5805,7 @@ var DesignHostController = class {
 		const credential = await this.#resolveCredential();
 		const credentialReady = credential !== void 0;
 		const models = ensureSelectedModel(currentModels, session.selectedModelId);
-		const tasks = [...await this.#repository.listTasks()].sort((left, right) => right.updatedAt - left.updatedAt);
+		const tasks = [...await this.#repository.listTasks()].filter((task) => task.sessionId === session.sessionId).sort((left, right) => right.updatedAt - left.updatedAt);
 		return {
 			version: 1,
 			enabled: this.#isEnabled(),
@@ -5657,6 +5829,7 @@ var DesignHostController = class {
 			if (oldest !== void 0) this.#sessions.delete(oldest[0]);
 		}
 		const created = {
+			sessionId,
 			selectedModelId: null,
 			draft: null,
 			proposal: null,
@@ -6038,6 +6211,32 @@ function stableJson(value) {
 	const object = value;
 	return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${stableJson(object[key])}`).join(",")}}`;
 }
+//#endregion
+//#region src/host/agent-routing-context.ts
+function createModellixRoutingMessage(state) {
+	const sections = [];
+	if (state.webEnabled) sections.push({
+		name: "Web routing",
+		text: "Use modellix_web_search automatically for current, changing, external, or source-verification questions. Use modellix_web_fetch automatically when the user supplies a public URL or a Modellix search result needs full-page reading. Prefer these explicit Modellix tools over the native web_search and web_fetch tools, and never call both tool families for the same operation. Do not wait for the user to name a tool, do not browse when the user explicitly says not to, and never automatically repeat a failed or unknown Modellix Web request."
+	});
+	if (state.mediaEnabled) sections.push({
+		name: "Media routing",
+		text: "Use Modellix media tools automatically only when the user intends to create, edit, transform, animate, upload, or inspect generated image, video, or audio work. Do not use media tools for documentation, pricing, general model-capability, or public API-reference questions; use the Modellix Web tools for those questions unless the user explicitly requests a live Modellix Design model Schema. For media work, use modellix_media_list then modellix_media_schema when a compatible model is not already known. Treat every returned field description and allowed value as authoritative; do not guess, translate, or replace a published parameter format, and omit optional fields when the user did not request them. A request that refers to the previous/current work, conversation attachments, or prior Modellix result URLs, asks to change or animate it, or asks to preserve its composition, subject, identity, or structure is not a new text-to-media request: select an image-edit/image-to-image, image-to-video, or video-to-video model as appropriate, inspect its schema, and place the latest relevant Modellix result URL in the declared media input field. Never replace that source-dependent operation with text-to-image or text-to-video. Reuse usable URLs and upload local inputs with modellix_media_upload_file. After submitting, inspect the task at most once in the same turn. Hard response rule: while a task is nonterminal, ordinary assistant text may say only that the submission was accepted and that the result card and Modellix Design own the current status. It must not say that the task is queued, running, generating, processing, pending, or any equivalent current-state wording, because ordinary assistant text is immutable and becomes stale. Never launch a replacement or parallel generation while a matching task is active unless the user explicitly requests another result, and never repeat an unknown generation or upload outcome."
+	});
+	if (sections.length === 0) return null;
+	return createUserMessage({
+		content: [{
+			type: "text",
+			text: sections.map((section) => `${section.name}: ${section.text}`).join("\n")
+		}],
+		source: {
+			kind: "plugin",
+			plugin: "dsh-modellix",
+			form: "snapshot",
+			sections
+		}
+	});
+}
 /** One atomic singleton keeps the Design WAL independent of Settings. */
 const modellixDesignDomainSpec = defineDomain({
 	name: "modellix_design",
@@ -6083,10 +6282,12 @@ function assertStorageKey(key) {
 }
 //#endregion
 //#region src/host/design-tool.ts
-const MODELLIX_DESIGN_MODELS_TOOL = "modellix_design_models";
-const MODELLIX_DESIGN_PREPARE_TOOL = "modellix_design_prepare";
-const MODELLIX_DESIGN_GENERATE_TOOL = "modellix_design_generate";
-const MODELLIX_DESIGN_TASK_TOOL = "modellix_design_task";
+const MODELLIX_MEDIA_LIST_TOOL = "modellix_media_list";
+const MODELLIX_MEDIA_SCHEMA_TOOL = "modellix_media_schema";
+const MODELLIX_MEDIA_PREPARE_TOOL = "modellix_media_prepare";
+const MODELLIX_MEDIA_UPLOAD_FILE_TOOL = "modellix_media_upload_file";
+const MODELLIX_MEDIA_GENERATE_TOOL = "modellix_media_generate";
+const MODELLIX_MEDIA_GET_RESULT_TOOL = "modellix_media_get_result";
 const MODEL_SLUG = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}\/[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u;
 const SAFE_SESSION_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/u;
 const MAX_QUERY_LENGTH = 512;
@@ -6096,54 +6297,43 @@ const DEFAULT_MODEL_LIMIT = 20;
 const MAX_MODEL_LIMIT = 50;
 const MAX_SCHEMA_FIELDS = 128;
 /**
-* Build the four stable, namespaced Modellix Design tools. The caller owns
+* Build the six stable, namespaced Modellix media tools. The caller owns
 * visibility and must only register these definitions while Design is enabled.
 */
-function createModellixDesignToolDefinitions(controller) {
+function createModellixDesignToolDefinitions(controller, uploadClient) {
+	const uploads = uploadClient ?? new MediaUploadClient();
 	return [
-		createModelsTool(controller),
+		createListTool(controller),
+		createSchemaTool(controller),
 		createPrepareTool(controller),
+		createUploadFileTool(uploads, controller.resolveCredential),
 		createGenerateTool(controller),
-		createTaskTool(controller)
+		createGetResultTool(controller)
 	];
 }
 /**
-* Register Design tools plus explicit LLM-proposal and paid-generate approval gates. The returned
-* disposer removes both definitions and the gate, allowing the runtime to
+* Register media tools. The returned disposer removes every definition, allowing the runtime to
 * mirror the live Design toggle without leaving model-visible stale tools.
 */
 function registerModellixDesignTools(ctx, controller) {
 	const disposers = [];
 	try {
-		disposers.push(ctx.on("tools/pre-execute", async (exec, next) => {
-			if (exec.name !== "modellix_design_prepare" && exec.name !== "modellix_design_generate") return next();
-			const downstream = await next();
-			if (downstream.kind !== "allow") return downstream;
-			return {
-				kind: "ask",
-				reason: exec.name === "modellix_design_prepare" ? "This sends one Modellix LLM request to prepare a parameter proposal and may consume balance. Review the instruction and allow it once to continue. It will not generate media." : "This submits one paid Modellix Design generation request. Review the arguments and allow it once to confirm."
-			};
-		}));
 		for (const definition of createModellixDesignToolDefinitions(controller)) disposers.push(ctx.tools.register(definition));
 	} catch (error) {
-		disposeAll(disposers);
+		disposeAll$1(disposers);
 		throw error;
 	}
-	return () => disposeAll(disposers);
+	return () => disposeAll$1(disposers);
 }
-function createModelsTool(controller) {
+function createListTool(controller) {
 	return defineTool({
-		name: MODELLIX_DESIGN_MODELS_TOOL,
-		description: "Search the live Modellix Design model catalog. Optionally select one model to inspect its compact, schema-derived field summary. This read-only tool never accepts credentials.",
+		name: MODELLIX_MEDIA_LIST_TOOL,
+		description: "List and search the live Modellix media model catalog. Use this before generation when no compatible provider/model slug is already known. This read-only tool never accepts credentials.",
 		parameters: {
 			query: {
 				type: "string",
 				description: "Optional case-insensitive model, provider, or media-kind search."
 			},
-			model: {
-				type: "string",
-				description: "Optional exact provider/model slug whose current schema should be summarized."
-			},
 			limit: {
 				type: "integer",
 				description: `Maximum models to return (default ${String(DEFAULT_MODEL_LIMIT)}, maximum ${String(MAX_MODEL_LIMIT)}).`
@@ -6161,12 +6351,12 @@ function createModelsTool(controller) {
 					},
 					service: {
 						type: "string",
-						const: "design",
+						const: "media",
 						required: true
 					},
 					operation: {
 						type: "string",
-						const: "models",
+						const: "list",
 						required: true
 					},
 					models: {
@@ -6194,6 +6384,8 @@ function createModelsTool(controller) {
 									],
 									required: true
 								},
+								taskType: { type: "string" },
+								description: { type: "string" },
 								featured: {
 									type: "boolean",
 									required: true
@@ -6209,8 +6401,74 @@ function createModelsTool(controller) {
 					truncated: {
 						type: "boolean",
 						required: true
+					}
+				}
+			},
+			render: (_args, value) => [{
+				type: "text",
+				text: formatModels(value)
+			}]
+		},
+		async execute(args, exec) {
+			assertOnlyKeys$1(args, ["query", "limit"]);
+			throwIfAborted(exec.signal);
+			const sessionId = sessionIdFrom(exec);
+			const query = optionalBoundedText(args.query, "query", MAX_QUERY_LENGTH)?.toLowerCase() ?? "";
+			const limit = boundedLimit(args.limit);
+			const snapshot = await controller.handle("design/read", {
+				version: 1,
+				sessionId
+			}, exec.signal);
+			requireReady(snapshot);
+			throwIfAborted(exec.signal);
+			return projectModels(snapshot, query, limit);
+		},
+		presentCall: (args) => ({
+			card: "generic",
+			title: "Browse Modellix media models",
+			kind: "search",
+			...args.query === void 0 ? {} : { rawInput: args.query }
+		})
+	});
+}
+function createSchemaTool(controller) {
+	return defineTool({
+		name: MODELLIX_MEDIA_SCHEMA_TOOL,
+		description: "Get the current Modellix API schema for one exact media model. Use the returned field paths and contract hash before prepare or generate; do not guess model parameters.",
+		parameters: { model: {
+			type: "string",
+			required: true,
+			description: "Exact provider/model slug returned by modellix_media_list."
+		} },
+		output: {
+			schema: {
+				type: "object",
+				additionalProperties: false,
+				properties: {
+					version: {
+						type: "integer",
+						const: 1,
+						required: true
+					},
+					service: {
+						type: "string",
+						const: "media",
+						required: true
 					},
-					selectedModelId: { type: "string" },
+					operation: {
+						type: "string",
+						const: "schema",
+						required: true
+					},
+					modelId: {
+						type: "string",
+						required: true
+					},
+					available: {
+						type: "boolean",
+						required: true
+					},
+					unavailableReason: { type: "string" },
 					schema: {
 						type: "object",
 						additionalProperties: false,
@@ -6269,54 +6527,148 @@ function createModelsTool(controller) {
 			},
 			render: (_args, value) => [{
 				type: "text",
-				text: formatModels(value)
+				text: formatSchema(value)
 			}]
 		},
 		async execute(args, exec) {
-			assertOnlyKeys(args, [
-				"query",
-				"model",
-				"limit"
-			]);
-			throwIfAborted(exec.signal);
+			assertOnlyKeys$1(args, ["model"]);
+			const modelId = requireModel(args.model);
 			const sessionId = sessionIdFrom(exec);
-			const query = optionalBoundedText(args.query, "query", MAX_QUERY_LENGTH)?.toLowerCase() ?? "";
-			const limit = boundedLimit(args.limit);
-			const requestedModel = args.model === void 0 ? void 0 : requireModel(args.model);
-			let snapshot = await controller.handle("design/read", {
+			const read = await controller.handle("design/read", {
 				version: 1,
 				sessionId
 			}, exec.signal);
-			requireReady(snapshot);
-			if (requestedModel !== void 0) {
-				requireCatalogModel(snapshot, requestedModel);
-				throwIfAborted(exec.signal);
-				snapshot = await controller.handle("design/select-model", {
+			requireReady(read);
+			requireCatalogModel(read, modelId);
+			throwIfAborted(exec.signal);
+			try {
+				return projectSchema(requireDraft(await controller.handle("design/select-model", {
 					version: 1,
 					sessionId,
-					modelId: requestedModel
-				}, exec.signal);
+					modelId
+				}, exec.signal), modelId));
+			} catch (error) {
+				if (!isUnsupportedSchema(error)) throw error;
+				return projectUnsupportedSchema(modelId);
 			}
-			throwIfAborted(exec.signal);
-			return projectModels(snapshot, query, limit, requestedModel);
 		},
 		presentCall: (args) => ({
 			card: "generic",
-			title: args.model === void 0 ? "Browse Modellix Design models" : `Inspect ${args.model}`,
-			kind: "search",
-			...args.query === void 0 ? {} : { rawInput: args.query }
+			title: `Inspect ${args.model} schema`,
+			kind: "read"
+		})
+	});
+}
+function createUploadFileTool(client, resolveCredential) {
+	return defineTool({
+		name: MODELLIX_MEDIA_UPLOAD_FILE_TOOL,
+		description: "Upload one image from the current conversation or session workspace to Modellix and return a temporary URL for media model inputs. Supply exactly one of attachment_id or path. Reuse returned URLs and never retry an unknown upload outcome automatically.",
+		parameters: {
+			attachment_id: {
+				type: "string",
+				description: "Attachment ID from an image in this conversation."
+			},
+			path: {
+				type: "string",
+				description: "Image path inside the current session workspace."
+			}
+		},
+		output: {
+			schema: {
+				type: "object",
+				additionalProperties: false,
+				properties: {
+					version: {
+						type: "integer",
+						const: 1,
+						required: true
+					},
+					service: {
+						type: "string",
+						const: "media",
+						required: true
+					},
+					operation: {
+						type: "string",
+						const: "upload_file",
+						required: true
+					},
+					fileId: {
+						type: "string",
+						required: true
+					},
+					type: {
+						type: "string",
+						required: true
+					},
+					url: {
+						type: "string",
+						required: true
+					},
+					filename: {
+						type: "string",
+						required: true
+					},
+					size: {
+						type: "integer",
+						required: true
+					},
+					createdAt: { type: "string" },
+					noAutomaticRetry: {
+						type: "boolean",
+						const: true,
+						required: true
+					}
+				}
+			},
+			render: (_args, value) => [{
+				type: "text",
+				text: `Uploaded ${value.filename} for Modellix media input: ${value.url}\nReuse this URL; do not upload the same file again unless the URL is no longer usable.`
+			}]
+		},
+		async execute(args, exec) {
+			assertOnlyKeys$1(args, ["attachment_id", "path"]);
+			const attachmentId = optionalBoundedText(args.attachment_id, "attachment_id", 512);
+			const path = optionalBoundedText(args.path, "path", 32767);
+			if (attachmentId === void 0 === (path === void 0)) throw new DesignError("INVALID_ARGUMENT", "Provide exactly one of attachment_id or path");
+			const prepared = attachmentId === void 0 ? await prepareMediaUploadFromPath(exec.agent?.session.header.cwd, path) : await prepareMediaUploadFromSession(exec.agent, attachmentId, exec.signal);
+			throwIfAborted(exec.signal);
+			const apiKey = await resolveCredential?.();
+			if (apiKey === void 0) throw new DesignError("MISSING_API_KEY", "A Modellix API key is required");
+			const uploaded = await client.upload({
+				...prepared,
+				apiKey,
+				signal: exec.signal
+			});
+			return {
+				version: 1,
+				service: "media",
+				operation: "upload_file",
+				fileId: uploaded.fileId,
+				type: uploaded.type,
+				url: uploaded.url,
+				filename: uploaded.filename,
+				size: uploaded.size,
+				...uploaded.createdAt === null ? {} : { createdAt: uploaded.createdAt },
+				noAutomaticRetry: true
+			};
+		},
+		presentCall: () => ({
+			card: "generic",
+			title: "Upload media to Modellix",
+			kind: "execute"
 		})
 	});
 }
 function createPrepareTool(controller) {
 	return defineTool({
-		name: MODELLIX_DESIGN_PREPARE_TOOL,
-		description: "Use one Modellix LLM request to prepare a schema-constrained Design parameter proposal for one provider/model slug. This may consume balance but never submits a media generation. The returned diff still requires explicit acceptance or a separately approved generate call.",
+		name: MODELLIX_MEDIA_PREPARE_TOOL,
+		description: "Convert a natural-language media request into a schema-constrained parameter proposal for one exact provider/model slug. Use this for Modellix Design parameter editing; it never submits media generation.",
 		parameters: {
 			model: {
 				type: "string",
 				required: true,
-				description: "Exact provider/model slug from modellix_design_models."
+				description: "Exact provider/model slug from modellix_media_list."
 			},
 			instruction: {
 				type: "string",
@@ -6336,7 +6688,7 @@ function createPrepareTool(controller) {
 					},
 					service: {
 						type: "string",
-						const: "design",
+						const: "media",
 						required: true
 					},
 					operation: {
@@ -6402,7 +6754,7 @@ function createPrepareTool(controller) {
 			}]
 		},
 		async execute(args, exec) {
-			assertOnlyKeys(args, ["model", "instruction"]);
+			assertOnlyKeys$1(args, ["model", "instruction"]);
 			throwIfAborted(exec.signal);
 			const modelId = requireModel(args.model);
 			const instruction = requiredBoundedText(args.instruction, "instruction", MAX_INSTRUCTION_LENGTH);
@@ -6434,7 +6786,7 @@ function createPrepareTool(controller) {
 			if (proposal === null) throw new DesignError("UNEXPECTED_RESPONSE", "Design did not return a parameter proposal");
 			return {
 				version: 1,
-				service: "design",
+				service: "media",
 				operation: "prepare",
 				modelId,
 				irContractHash: draft.irContractHash,
@@ -6460,8 +6812,8 @@ function createPrepareTool(controller) {
 }
 function createGenerateTool(controller) {
 	return defineTool({
-		name: MODELLIX_DESIGN_GENERATE_TOOL,
-		description: "Submit exactly one paid Modellix Design generation after the Harness asks the user to allow it once. Use an exact provider/model slug and schema field names or RFC 6901 paths from modellix_design_models. Never include an API key. Unknown outcomes must not be retried automatically.",
+		name: MODELLIX_MEDIA_GENERATE_TOOL,
+		description: "Generate or edit image, video, or audio with one exact Modellix media model. Choose text-to-media for a new work; reuse the latest relevant media URL or uploaded file for edit/image-to-video/video-to-video requests. Use schema fields from modellix_media_schema. Never include an API key, never retry an unknown submission outcome, and never start a replacement or parallel generation while a matching task is queued or running unless the user explicitly asks for another result.",
 		parameters: {
 			model: {
 				type: "string",
@@ -6490,7 +6842,7 @@ function createGenerateTool(controller) {
 					},
 					service: {
 						type: "string",
-						const: "design",
+						const: "media",
 						required: true
 					},
 					operation: {
@@ -6568,10 +6920,11 @@ function createGenerateTool(controller) {
 			render: (_args, value) => [{
 				type: "text",
 				text: formatGeneration(value)
-			}]
+			}],
+			presentationMeta: (_args, value) => value
 		},
 		async execute(args, exec) {
-			assertOnlyKeys(args, [
+			assertOnlyKeys$1(args, [
 				"model",
 				"prompt",
 				"input"
@@ -6609,7 +6962,7 @@ function createGenerateTool(controller) {
 				if (!(error instanceof DesignError) || error.code !== "SUBMIT_UNKNOWN") throw error;
 				return {
 					version: 1,
-					service: "design",
+					service: "media",
 					operation: "generate",
 					modelId,
 					submitted: true,
@@ -6618,7 +6971,7 @@ function createGenerateTool(controller) {
 					resources: [],
 					diagnostic: {
 						code: "submit-unknown",
-						message: "The paid generation outcome is unknown. Do not retry automatically; inspect Design results or the Modellix console."
+						message: "The generation outcome is unknown. Do not retry automatically; inspect Modellix Design results or the Modellix console."
 					}
 				};
 			}
@@ -6630,10 +6983,10 @@ function createGenerateTool(controller) {
 		})
 	});
 }
-function createTaskTool(controller) {
+function createGetResultTool(controller) {
 	return defineTool({
-		name: MODELLIX_DESIGN_TASK_TOOL,
-		description: "Refresh and inspect a Design job already present in this plugin's persistent repository. Accepts a remote task ID or local submit-unknown request ID. This read-only tool never submits or retries a generation.",
+		name: MODELLIX_MEDIA_GET_RESULT_TOOL,
+		description: "Refresh and inspect an existing Modellix media generation at most once per Agent turn. For a nonterminal result, the assistant may only confirm submission and direct the user to the live result card or Modellix Design; it must not write queued, running, generating, processing, pending, or equivalent status wording in ordinary assistant text. Accepts a remote task ID or local submit-unknown request ID and never resubmits or replaces generation.",
 		parameters: { task_id: {
 			type: "string",
 			required: true,
@@ -6651,12 +7004,12 @@ function createTaskTool(controller) {
 					},
 					service: {
 						type: "string",
-						const: "design",
+						const: "media",
 						required: true
 					},
 					operation: {
 						type: "string",
-						const: "task",
+						const: "get_result",
 						required: true
 					},
 					found: {
@@ -6740,10 +7093,11 @@ function createTaskTool(controller) {
 			render: (_args, value) => [{
 				type: "text",
 				text: formatTask(value)
-			}]
+			}],
+			presentationMeta: (_args, value) => value
 		},
 		async execute(args, exec) {
-			assertOnlyKeys(args, ["task_id"]);
+			assertOnlyKeys$1(args, ["task_id"]);
 			throwIfAborted(exec.signal);
 			const taskId = requiredBoundedText(args.task_id, "task_id", 256);
 			if (!/^[A-Za-z0-9._:-]{1,256}$/u.test(taskId)) throw new DesignError("INVALID_ARGUMENT", "task_id is malformed");
@@ -6756,13 +7110,13 @@ function createTaskTool(controller) {
 			const job = snapshot.jobs.find((candidate) => candidate.jobId === taskId);
 			return job === void 0 ? {
 				version: 1,
-				service: "design",
-				operation: "task",
+				service: "media",
+				operation: "get_result",
 				found: false
 			} : {
 				version: 1,
-				service: "design",
-				operation: "task",
+				service: "media",
+				operation: "get_result",
 				found: true,
 				job: projectJob(job)
 			};
@@ -6774,29 +7128,40 @@ function createTaskTool(controller) {
 		})
 	});
 }
-function projectModels(snapshot, query, limit, requestedModel) {
+function projectModels(snapshot, query, limit) {
 	const matches = snapshot.models.filter((model) => query === "" || [
 		model.id,
 		model.label,
-		model.kind
-	].some((value) => value.toLowerCase().includes(query)));
+		model.kind,
+		model.taskType,
+		model.description
+	].some((value) => value?.toLowerCase().includes(query) === true));
 	const models = matches.slice(0, limit).map((model) => ({
 		modelId: model.id,
 		label: model.label,
 		kind: model.kind,
+		...model.taskType === void 0 ? {} : { taskType: model.taskType },
+		...model.description === void 0 ? {} : { description: model.description },
 		featured: model.featured,
 		available: model.available,
 		...model.unavailableReason === null ? {} : { unavailableReason: modelUnavailableMessage(model.unavailableReason) }
 	}));
-	const draft = requestedModel === void 0 ? void 0 : snapshot.draft;
 	return {
 		version: 1,
-		service: "design",
-		operation: "models",
+		service: "media",
+		operation: "list",
 		models,
-		truncated: matches.length > models.length,
-		...snapshot.selectedModelId === null ? {} : { selectedModelId: snapshot.selectedModelId },
-		...draft === null || draft === void 0 ? {} : { schema: {
+		truncated: matches.length > models.length
+	};
+}
+function projectSchema(draft) {
+	return {
+		version: 1,
+		service: "media",
+		operation: "schema",
+		modelId: draft.modelId,
+		available: true,
+		schema: {
 			modelId: draft.modelId,
 			irContractHash: draft.irContractHash,
 			primaryInputPath: draft.primaryInputPath,
@@ -6809,7 +7174,17 @@ function projectModels(snapshot, query, limit, requestedModel) {
 				...field.description === null ? {} : { description: field.description }
 			})),
 			truncated: draft.fields.length > MAX_SCHEMA_FIELDS
-		} }
+		}
+	};
+}
+function projectUnsupportedSchema(modelId) {
+	return {
+		version: 1,
+		service: "media",
+		operation: "schema",
+		modelId,
+		available: false,
+		unavailableReason: "This model's API schema is not compatible with Modellix Design. Choose another model from the live catalog."
 	};
 }
 function normalizeGenerationInput(draft, prompt, input) {
@@ -6837,7 +7212,7 @@ function normalizeGenerationInput(draft, prompt, input) {
 function projectGeneration(modelId, job) {
 	if (job === void 0) return {
 		version: 1,
-		service: "design",
+		service: "media",
 		operation: "generate",
 		modelId,
 		submitted: true,
@@ -6846,12 +7221,12 @@ function projectGeneration(modelId, job) {
 		resources: [],
 		diagnostic: {
 			code: "job-record-unavailable",
-			message: "The paid request returned without a readable local job record. Do not retry automatically."
+			message: "The generation returned without a readable local job record. Do not retry automatically."
 		}
 	};
 	return {
 		version: 1,
-		service: "design",
+		service: "media",
 		operation: "generate",
 		modelId,
 		submitted: true,
@@ -6926,7 +7301,7 @@ function requiredBoundedText(value, field, maximum) {
 	if (value.trim() === "" || value.length > maximum) throw new DesignError("INVALID_ARGUMENT", `${field} must be non-empty and at most ${String(maximum)} characters`);
 	return value;
 }
-function assertOnlyKeys(value, allowed) {
+function assertOnlyKeys$1(value, allowed) {
 	const extra = Object.keys(value).find((key) => !allowed.includes(key));
 	if (extra !== void 0) throw new DesignError("INVALID_ARGUMENT", `Unknown tool argument: ${extra}`);
 }
@@ -6945,9 +7320,27 @@ function toToolJson(value) {
 	return value;
 }
 function formatModels(value) {
-	const lines = value.models.map((model) => `- ${model.modelId} (${model.kind})${model.available ? "" : " — unavailable"}`);
-	const schema = value.schema === void 0 ? "" : `\n\nSchema for ${value.schema.modelId}: primary input ${value.schema.primaryInputPath}; fields ${value.schema.fields.map((field) => field.path).join(", ") || "none"}${value.schema.truncated ? " (truncated)" : ""}.`;
-	return `${lines.length === 0 ? "No matching Modellix Design models." : lines.join("\n")}${value.truncated ? "\n(Results truncated; refine the query.)" : ""}${schema}`;
+	const lines = value.models.map((model) => `- ${model.modelId} (${model.taskType ?? model.kind})${model.available ? "" : " — unavailable"}${model.description === void 0 ? "" : `: ${model.description}`}`);
+	return `${lines.length === 0 ? "No matching Modellix media models." : lines.join("\n")}${value.truncated ? "\n(Results truncated; refine the query.)" : ""}`;
+}
+function formatSchema(value) {
+	if (!value.available || value.schema === void 0) return `Schema for ${value.modelId} is unavailable to Modellix Design. ${value.unavailableReason ?? "Choose another model from the live catalog."}`;
+	const fields = value.schema.fields.map((field) => {
+		const qualifiers = [
+			field.kind,
+			field.required ? "required" : "optional",
+			field.options.length === 0 ? null : `allowed values: ${field.options.map((option) => JSON.stringify(option)).join(", ")}`
+		].filter((qualifier) => qualifier !== null);
+		return `- ${field.path} (${qualifiers.join("; ")})${field.description === void 0 ? "" : ` — ${field.description}`}`;
+	});
+	return [
+		`Schema for ${value.schema.modelId}. Primary input: ${value.schema.primaryInputPath}. Use the exact field descriptions and allowed values below; do not infer a different format.`,
+		fields.length === 0 ? "No input fields." : fields.join("\n"),
+		value.schema.truncated ? "The field list is truncated." : null
+	].filter((line) => line !== null).join("\n");
+}
+function isUnsupportedSchema(error) {
+	return error instanceof DesignError && (error.code === "SCHEMA_INVALID" || error.code === "ENDPOINT_NOT_ALLOWED");
 }
 function formatPreparation(value) {
 	const changes = value.changes.map((change) => `- ${change.path} (${change.label})`).join("\n");
@@ -6975,12 +7368,399 @@ function diagnosticMessage(code) {
 function formatGeneration(value) {
 	const resources = value.resources.map((resource) => `- ${resource.kind}: ${resource.url}`).join("\n");
 	const diagnostic = value.diagnostic === void 0 ? "" : `\n${value.diagnostic.message}`;
-	return `Modellix Design status: ${value.status}${value.jobId === void 0 ? "" : ` (${value.jobId})`}.${diagnostic}${resources === "" ? "" : `\n${resources}`}\nDo not automatically repeat this paid submission.`;
+	if (value.status === "running") return `Modellix media submission accepted${value.jobId === void 0 ? "" : ` (${value.jobId})`}.${diagnostic}\nThe result card and Modellix Design now own the current status. Do not inspect it repeatedly or start a replacement in this turn. In ordinary assistant text, say only that submission was accepted and point to those live surfaces; do not use queued, running, generating, processing, pending, or equivalent current-state wording.`;
+	return `Modellix media status: ${value.status}${value.jobId === void 0 ? "" : ` (${value.jobId})`}.${diagnostic}${resources === "" ? "" : `\n${resources}`}\nDo not automatically repeat this submission.`;
 }
 function formatTask(value) {
-	if (!value.found || value.job === void 0) return "No persisted Modellix Design task matched that identifier.";
+	if (!value.found || value.job === void 0) return "No persisted Modellix media task matched that identifier.";
 	const resources = value.job.resources.map((resource) => `- ${resource.kind}: ${resource.url}`).join("\n");
-	return `Modellix Design task ${value.job.jobId}: ${value.job.status}.${resources === "" ? "" : `\n${resources}`}`;
+	if (value.job.status === "running") return `Modellix media submission ${value.job.jobId} remains assigned to the live result card and Modellix Design. Do not inspect it again or start a replacement in this turn. In ordinary assistant text, say only that submission was accepted and point to those live surfaces; do not use queued, running, generating, processing, pending, or equivalent current-state wording.`;
+	return `Modellix media task ${value.job.jobId}: ${value.job.status}.${resources === "" ? "" : `\n${resources}`}`;
+}
+function disposeAll$1(disposers) {
+	for (const dispose of [...disposers].reverse()) try {
+		dispose();
+	} catch {}
+}
+//#endregion
+//#region src/host/web-tool.ts
+const MODELLIX_WEB_SEARCH_TOOL = "modellix_web_search";
+const MODELLIX_WEB_FETCH_TOOL = "modellix_web_fetch";
+const WEB_TOOL_TIMEOUT_MS = 3e4;
+const MAX_FETCH_OUTPUT_CHARS = 2e5;
+/** Build the two explicit Modellix Web tools over the concrete Modellix providers. */
+function createModellixWebToolDefinitions(providers) {
+	return [createSearchTool(providers), createFetchTool(providers)];
+}
+/** Register the explicit tools and roll back atomically if either name conflicts. */
+function registerModellixWebTools(ctx, providers) {
+	const disposers = [];
+	try {
+		for (const definition of createModellixWebToolDefinitions(providers)) disposers.push(ctx.tools.register(definition));
+	} catch (error) {
+		disposeAll(disposers);
+		throw error;
+	}
+	return () => disposeAll(disposers);
+}
+function createSearchTool(providers) {
+	return defineTool({
+		name: MODELLIX_WEB_SEARCH_TOOL,
+		description: "Search current public web information through the Modellix Web Search API. Use automatically when current or externally verified information is needed, even when the user did not name a tool. One invocation sends exactly one Modellix search request and never retries it automatically.",
+		parameters: {
+			query: {
+				type: "string",
+				required: true,
+				description: "One non-empty web search query."
+			},
+			max_results: {
+				type: "integer",
+				description: `Maximum sources to return (default ${String(5)}, maximum ${String(20)}).`
+			}
+		},
+		output: {
+			schema: {
+				type: "object",
+				additionalProperties: false,
+				properties: {
+					version: {
+						type: "integer",
+						const: 1,
+						required: true
+					},
+					service: {
+						type: "string",
+						const: "web",
+						required: true
+					},
+					provider: {
+						type: "string",
+						const: "modellix",
+						required: true
+					},
+					operation: {
+						type: "string",
+						const: "search",
+						required: true
+					},
+					endpoint: {
+						type: "string",
+						const: MODELLIX_WEB_SEARCH_ENDPOINT,
+						required: true
+					},
+					query: {
+						type: "string",
+						required: true
+					},
+					content: { type: "string" },
+					sources: {
+						type: "array",
+						required: true,
+						items: {
+							type: "object",
+							additionalProperties: false,
+							properties: {
+								url: {
+									type: "string",
+									required: true
+								},
+								title: { type: "string" },
+								snippet: { type: "string" },
+								publishedAt: { type: "string" }
+							}
+						}
+					},
+					truncated: {
+						type: "boolean",
+						required: true
+					},
+					noAutomaticRetry: {
+						type: "boolean",
+						const: true,
+						required: true
+					}
+				}
+			},
+			render: (_args, value) => [{
+				type: "text",
+				text: formatSearchOutput(value)
+			}],
+			presentationMeta: (_args, value) => searchPresentationMeta(value)
+		},
+		timeoutMs: WEB_TOOL_TIMEOUT_MS,
+		async execute(args, exec) {
+			assertOnlyKeys(args, ["query", "max_results"]);
+			const query = requireNonBlank(args.query, "query");
+			const maxResults = boundedResultCount(args.max_results);
+			return projectSearchResult(query, await providers.search.search({
+				query,
+				maxResults
+			}, exec.signal));
+		},
+		presentCall: (args) => ({
+			card: "generic",
+			title: `Modellix Web Search · ${args.query}`,
+			kind: "search",
+			rawInput: args.query
+		}),
+		presentResult: (args, result) => presentSearchResult(args.query, result)
+	});
+}
+function createFetchTool(providers) {
+	return defineTool({
+		name: MODELLIX_WEB_FETCH_TOOL,
+		description: "Fetch one specific public HTTP(S) page through the Modellix Web Fetch API. Use automatically for a user-supplied URL or when a Modellix search source needs full-page reading. One invocation sends exactly one Modellix fetch request and never retries it automatically.",
+		parameters: { url: {
+			type: "string",
+			required: true,
+			description: "The public HTTP(S) URL to retrieve."
+		} },
+		output: {
+			schema: {
+				type: "object",
+				additionalProperties: false,
+				properties: {
+					version: {
+						type: "integer",
+						const: 1,
+						required: true
+					},
+					service: {
+						type: "string",
+						const: "web",
+						required: true
+					},
+					provider: {
+						type: "string",
+						const: "modellix",
+						required: true
+					},
+					operation: {
+						type: "string",
+						const: "fetch",
+						required: true
+					},
+					endpoint: {
+						type: "string",
+						const: MODELLIX_WEB_FETCH_ENDPOINT,
+						required: true
+					},
+					requestedUrl: {
+						type: "string",
+						required: true
+					},
+					url: {
+						type: "string",
+						required: true
+					},
+					statusCode: {
+						type: "integer",
+						required: true
+					},
+					body: {
+						required: true,
+						oneOf: [{
+							type: "object",
+							additionalProperties: false,
+							properties: {
+								kind: {
+									type: "string",
+									const: "html",
+									required: true
+								},
+								content: {
+									type: "string",
+									required: true
+								}
+							}
+						}, {
+							type: "object",
+							additionalProperties: false,
+							properties: {
+								kind: {
+									type: "string",
+									const: "text",
+									required: true
+								},
+								content: {
+									type: "string",
+									required: true
+								}
+							}
+						}]
+					},
+					truncated: {
+						type: "boolean",
+						required: true
+					},
+					noAutomaticRetry: {
+						type: "boolean",
+						const: true,
+						required: true
+					}
+				}
+			},
+			render: (_args, value) => [{
+				type: "text",
+				text: formatFetchOutput(value)
+			}],
+			presentationMeta: (_args, value) => fetchPresentationMeta(value)
+		},
+		timeoutMs: WEB_TOOL_TIMEOUT_MS,
+		async execute(args, exec) {
+			assertOnlyKeys(args, ["url"]);
+			const requestedUrl = requireNonBlank(args.url, "url");
+			return projectFetchResult(requestedUrl, await providers.fetch.fetch({ url: requestedUrl }, exec.signal));
+		},
+		presentCall: (args) => ({
+			card: "generic",
+			title: `Modellix Web Fetch · ${args.url}`,
+			kind: "fetch",
+			rawInput: args.url
+		}),
+		presentResult: (args, result) => presentFetchResult(args.url, result)
+	});
+}
+function projectSearchResult(query, result) {
+	return {
+		version: 1,
+		service: "web",
+		provider: "modellix",
+		operation: "search",
+		endpoint: MODELLIX_WEB_SEARCH_ENDPOINT,
+		query,
+		...result.content === void 0 ? {} : { content: result.content },
+		sources: result.sources.map(projectSource),
+		truncated: result.truncated,
+		noAutomaticRetry: true
+	};
+}
+function projectFetchResult(requestedUrl, result) {
+	const content = result.body.content.slice(0, MAX_FETCH_OUTPUT_CHARS);
+	return {
+		version: 1,
+		service: "web",
+		provider: "modellix",
+		operation: "fetch",
+		endpoint: MODELLIX_WEB_FETCH_ENDPOINT,
+		requestedUrl,
+		url: result.url,
+		statusCode: result.statusCode,
+		body: {
+			kind: result.body.kind,
+			content
+		},
+		truncated: result.truncated || content.length !== result.body.content.length,
+		noAutomaticRetry: true
+	};
+}
+function projectSource(source) {
+	return {
+		url: source.url,
+		...source.title === void 0 ? {} : { title: source.title },
+		...source.snippet === void 0 ? {} : { snippet: source.snippet },
+		...source.publishedAt === void 0 ? {} : { publishedAt: source.publishedAt }
+	};
+}
+function formatSearchOutput(value) {
+	const parts = [`Modellix Web Search completed for: ${value.query}`, `Provider endpoint: ${value.endpoint}`];
+	if (value.content !== void 0 && value.content.length > 0) parts.push(value.content);
+	if (value.sources.length === 0) parts.push("No sources found.");
+	else parts.push(`Sources:\n${value.sources.map(formatSource).join("\n")}`);
+	if (value.truncated) parts.push("The source list was truncated; refine the query if needed.");
+	parts.push("Cite the relevant source URLs as markdown links in the answer.");
+	return parts.join("\n\n");
+}
+function formatSource(source) {
+	const label = source.title === void 0 || source.title.length === 0 ? source.url : source.title;
+	const details = [source.snippet, source.publishedAt].filter((value) => value !== void 0 && value.length > 0);
+	return `- ${label}\n  URL: ${source.url}${details.length === 0 ? "" : `\n  ${details.join(" · ")}`}`;
+}
+function formatFetchOutput(value) {
+	const header = [`Modellix Web Fetch completed: ${value.url} (HTTP ${String(value.statusCode)})`, `Provider endpoint: ${value.endpoint}`].join("\n");
+	const footer = value.truncated ? "\n\n(Content truncated. Fetch a more specific public URL if more detail is required.)" : "";
+	return `${header}\n\n${value.body.content}${footer}`;
+}
+function searchPresentationMeta(value) {
+	return {
+		sources: value.sources.map((source) => ({
+			url: source.url,
+			...source.title === void 0 ? {} : { title: source.title },
+			...source.snippet === void 0 ? {} : { snippet: source.snippet },
+			...source.publishedAt === void 0 ? {} : { publishedAt: source.publishedAt }
+		})),
+		truncated: value.truncated,
+		...value.content === void 0 ? {} : { answer: value.content }
+	};
+}
+function fetchPresentationMeta(value) {
+	return {
+		url: value.url,
+		statusCode: value.statusCode,
+		truncated: value.truncated
+	};
+}
+function presentSearchResult(query, result) {
+	if (result.isError) return void 0;
+	const meta = asRecord(result.meta);
+	if (meta === void 0 || !Array.isArray(meta.sources) || typeof meta.truncated !== "boolean") return void 0;
+	const sources = [];
+	for (const candidate of meta.sources) {
+		const source = asRecord(candidate);
+		if (source === void 0 || typeof source.url !== "string" || !optionalStrings(source, [
+			"title",
+			"snippet",
+			"publishedAt"
+		])) return void 0;
+		sources.push({
+			url: source.url,
+			...typeof source.title === "string" ? { title: source.title } : {},
+			...typeof source.snippet === "string" ? { snippet: source.snippet } : {},
+			...typeof source.publishedAt === "string" ? { publishedAt: source.publishedAt } : {}
+		});
+	}
+	if (meta.answer !== void 0 && typeof meta.answer !== "string") return void 0;
+	return {
+		card: "web",
+		kind: "search",
+		title: `Modellix Web Search · ${query}`,
+		sources,
+		truncated: meta.truncated,
+		...typeof meta.answer === "string" ? { answer: meta.answer } : {}
+	};
+}
+function presentFetchResult(requestedUrl, result) {
+	if (result.isError) return void 0;
+	const meta = asRecord(result.meta);
+	if (meta === void 0 || typeof meta.url !== "string" || typeof meta.statusCode !== "number" || !Number.isInteger(meta.statusCode) || typeof meta.truncated !== "boolean") return void 0;
+	return {
+		card: "web",
+		kind: "fetch",
+		title: `Modellix Web Fetch · ${requestedUrl}`,
+		url: meta.url,
+		statusCode: meta.statusCode,
+		truncated: meta.truncated
+	};
+}
+function boundedResultCount(value) {
+	const resolved = value ?? 5;
+	if (!Number.isSafeInteger(resolved) || resolved < 1 || resolved > 20) throw new TypeError(`max_results must be an integer from 1 through ${String(20)}`);
+	return resolved;
+}
+function requireNonBlank(value, name) {
+	if (value.trim().length === 0) throw new TypeError(`${name} must contain non-whitespace text`);
+	return value;
+}
+function assertOnlyKeys(value, allowed) {
+	const accepted = new Set(allowed);
+	const unexpected = Object.keys(value).find((key) => !accepted.has(key));
+	if (unexpected !== void 0) throw new TypeError(`Unexpected tool argument: ${unexpected}`);
+}
+function optionalStrings(value, keys) {
+	return keys.every((key) => value[key] === void 0 || typeof value[key] === "string");
+}
+function asRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function disposeAll(disposers) {
 	for (const dispose of [...disposers].reverse()) try {
@@ -7227,24 +8007,44 @@ var ModellixRuntime = class ModellixRuntime {
 				this.scheduleDesignPoll(0);
 			});
 		});
-		this.#ctx.effect(() => registerModellixWebProviders(this.#ctx.web, {
-			isEnabled: () => this.#config.services.web.enabled,
-			hasCredential: () => this.credentialIsUsable(),
-			resolveCredential: async () => {
-				const hit = await this.resolveUsableCredential();
-				if (hit === void 0) this.requestCredentialRecovery();
-				return hit === void 0 ? null : {
-					apiKey: hit.value,
-					credentialEpoch: hit.credentialEpoch
+		this.#ctx.effect(() => {
+			const providers = createModellixWebProviders({
+				isEnabled: () => this.#config.services.web.enabled,
+				hasCredential: () => this.credentialIsUsable(),
+				resolveCredential: async () => {
+					const hit = await this.resolveUsableCredential();
+					if (hit === void 0) this.requestCredentialRecovery();
+					return hit === void 0 ? null : {
+						apiKey: hit.value,
+						credentialEpoch: hit.credentialEpoch
+					};
+				},
+				getUserId: () => this.#userId,
+				isCredentialEpochCurrent: (epoch) => epoch === this.#config.credentialEpoch,
+				onCredentialRejected: async (epoch) => {
+					if (epoch !== this.#config.credentialEpoch) return;
+					this.markCredentialRejected(epoch);
+				}
+			});
+			const disposeProviders = registerModellixWebProviderInstances(this.#ctx.web, providers);
+			try {
+				const disposeTools = registerModellixWebTools(this.#ctx, providers);
+				return () => {
+					disposeTools();
+					disposeProviders();
 				};
-			},
-			getUserId: () => this.#userId,
-			isCredentialEpochCurrent: (epoch) => epoch === this.#config.credentialEpoch,
-			onCredentialRejected: async (epoch) => {
-				if (epoch !== this.#config.credentialEpoch) return;
-				this.markCredentialRejected(epoch);
+			} catch (error) {
+				disposeProviders();
+				throw error;
 			}
-		}), "dsh-modellix: native Web providers");
+		}, "dsh-modellix: Web providers and explicit Modellix tools");
+		this.#ctx.on("agent/session-start", ({ agent }) => {
+			const message = createModellixRoutingMessage({
+				mediaEnabled: this.#config.services.design.enabled && this.credentialIsUsable(),
+				webEnabled: this.#config.services.web.enabled && this.credentialIsUsable()
+			});
+			if (message !== null) agent.inject(message);
+		});
 		this.#ctx.effect(() => this.#ctx.connection.rpc.handle(RPC_CHANNEL, (endpoint, payload, signal) => this.handleRpc(endpoint, payload, signal), { authority: "loopback" }), "dsh-modellix: loopback configuration and Design RPC");
 		this.#ctx.effect(() => {
 			this.scheduleDesignPoll(2e3);
@@ -7904,11 +8704,14 @@ var ModellixRuntime = class ModellixRuntime {
 	}
 	syncDesignTools(enabled) {
 		if (enabled && this.#disposeDesignTools === void 0) {
-			this.#disposeDesignTools = registerModellixDesignTools(this.#ctx, { handle: (endpoint, payload, signal) => {
-				const operationSignal = signal === void 0 ? this.#lifecycleAbort.signal : AbortSignal.any([signal, this.#lifecycleAbort.signal]);
-				if (designEndpointRequestsCredential(endpoint) && !this.credentialIsUsable()) this.requestCredentialRecovery();
-				return this.enqueueDesignWrite(() => this.#design.handle(endpoint, payload, operationSignal));
-			} });
+			this.#disposeDesignTools = registerModellixDesignTools(this.#ctx, {
+				resolveCredential: async () => (await this.resolveUsableCredential())?.value,
+				handle: (endpoint, payload, signal) => {
+					const operationSignal = signal === void 0 ? this.#lifecycleAbort.signal : AbortSignal.any([signal, this.#lifecycleAbort.signal]);
+					if (designEndpointRequestsCredential(endpoint) && !this.credentialIsUsable()) this.requestCredentialRecovery();
+					return this.enqueueDesignWrite(() => this.#design.handle(endpoint, payload, operationSignal));
+				}
+			});
 			return;
 		}
 		if (!enabled && this.#disposeDesignTools !== void 0) {
@@ -8075,6 +8878,6 @@ async function apply(ctx) {
 	await ModellixRuntime.create(ctx);
 }
 //#endregion
-export { AUTHENTICATED_CATALOG_URL, CURRENT_CONFIG_SCHEMA_VERSION, Config, CredentialBroker, CredentialEpochConflictError, CredentialMutationCoordinator, CredentialValidationError, DEFAULT_DESIGN_WAL_KEY, DEFAULT_RESULT_TTL_MS, DEFAULT_WEB_RESPONSE_BYTES, DEFAULT_WEB_SEARCH_MAX_RESULTS, DESIGN_PLANNER_ENDPOINT, DESIGN_PLANNER_MODEL, DesignError, DesignHostController, DesignPlannerClient, DesignTaskRepository, EMPTY_LLM_ROUTE_LEDGER, HttpPolicyError, HttpResponseBoundaryError, LlmCatalogCache, LlmCatalogClient, LlmCatalogRequestError, LlmMaterializationConflictError, LlmMaterializationRollbackError, LlmRegistryBackreadError, LlmRouteConflictError, LlmSettingsMaterializer, MAX_WEB_QUERY_CHARS, MAX_WEB_SEARCH_RESULTS, MAX_WEB_URL_CHARS, MODELLIX_CREDENTIAL_REF, MODELLIX_DESIGN_GENERATE_TOOL, MODELLIX_DESIGN_MODELS_TOOL, MODELLIX_DESIGN_PREPARE_TOOL, MODELLIX_DESIGN_TASK_TOOL, MODELLIX_LLM_BASE_URL, MODELLIX_LLM_MODELS_URL, MODELLIX_LLM_PROVENANCE_FIELD, MODELLIX_LLM_PROVIDER_ID, MODELLIX_ORIGINS, MODELLIX_SETTINGS_NAMESPACE, MODELLIX_WEB_FETCH_ENDPOINT, MODELLIX_WEB_PROVIDER_ID, MODELLIX_WEB_SEARCH_ENDPOINT, ModelCatalogClient, ModelSchemaClient, ModellixRuntime, ModellixWebContractError, ModellixWebFetchFailedError, ModellixWebFetchProvider, ModellixWebProviderError, ModellixWebSearchProvider, OnboardingSaveConflictError, PUBLIC_PORTAL_CATALOG_URL, PluginSettingsController, PluginSettingsSchema, PredictionClient, REDACTED, StaleLlmCatalogError, UnsupportedConfigVersionError, abandonLlmMaterialization, advanceCredentialEpoch, apply, applyCredentialDescriptor, applyExactPatch, applyNaturalLanguage, applyRuntimeUnauthorized, applyVerificationResult, approveHttpRequest, approveRedirect, beginLlmMaterialization, beginOnboardingSave, buildFetchRequest, buildInvocationBody, buildSearchRequest, completeLlmMaterialization, completeOnboardingSave, computeRetryDelay, createCredentialState, createDefaultConfig, createModellixDesignToolDefinitions, createModellixWebProviders, deferOnboarding, deriveModellixSessionId, deriveModellixUserId, executeWithRetry, extractAllowedSubmitUrl, getServiceToggles, inject, isAllowedModellixOrigin, isCredentialInvalidError, isPublicHostname, isRetryableError, isRetryableReadFailure, isValidModellixIdentity, markOnboardingCredentialSaved, materializeDefaults, migrateConfig, missingCredentialDescriptor, modellixDesignDomainSpec, name, normalizeCredentialDescriptor, openDesignStorage, parseCatalogPage, parseDesignSchema, parseFetchResponse, parsePredictionTask, parseResources, parseRetryAfter, parseSearchResponse, planLlmRouteMaterialization, planLlmRouteRemoval, preserveStoredCredentialAfterCandidateFailure, preserveVerificationAfterTransientFailure, readBoundedResponseJson, readBoundedResponseText, reconcileLlmRouteLedgerAfterInterruption, reconcileOnboardingSave, redactForLog, redactHeaders, redactUrl, registerModellixDesignTools, registerModellixWebProviders, replayDesignWal, requestDeadline, retryAfterFromFailure, selectAvailableResults, setServiceToggles, systemClock, systemSleep, toModellixError, validatePublicHttpUrl, validateSubmitEndpoint, verifyLlmRegistryBackread };
+export { AUTHENTICATED_CATALOG_URL, CURRENT_CONFIG_SCHEMA_VERSION, Config, CredentialBroker, CredentialEpochConflictError, CredentialMutationCoordinator, CredentialValidationError, DEFAULT_DESIGN_WAL_KEY, DEFAULT_RESULT_TTL_MS, DEFAULT_WEB_RESPONSE_BYTES, DEFAULT_WEB_SEARCH_MAX_RESULTS, DESIGN_PLANNER_ENDPOINT, DESIGN_PLANNER_MODEL, DesignError, DesignHostController, DesignPlannerClient, DesignTaskRepository, EMPTY_LLM_ROUTE_LEDGER, HttpPolicyError, HttpResponseBoundaryError, LlmCatalogCache, LlmCatalogClient, LlmCatalogRequestError, LlmMaterializationConflictError, LlmMaterializationRollbackError, LlmRegistryBackreadError, LlmRouteConflictError, LlmSettingsMaterializer, MAX_WEB_QUERY_CHARS, MAX_WEB_SEARCH_RESULTS, MAX_WEB_URL_CHARS, MODELLIX_CREDENTIAL_REF, MODELLIX_LLM_BASE_URL, MODELLIX_LLM_MODELS_URL, MODELLIX_LLM_PROVENANCE_FIELD, MODELLIX_LLM_PROVIDER_ID, MODELLIX_MEDIA_GENERATE_TOOL, MODELLIX_MEDIA_GET_RESULT_TOOL, MODELLIX_MEDIA_LIST_TOOL, MODELLIX_MEDIA_PREPARE_TOOL, MODELLIX_MEDIA_SCHEMA_TOOL, MODELLIX_MEDIA_UPLOAD_FILE_TOOL, MODELLIX_ORIGINS, MODELLIX_SETTINGS_NAMESPACE, MODELLIX_WEB_FETCH_ENDPOINT, MODELLIX_WEB_FETCH_TOOL, MODELLIX_WEB_PROVIDER_ID, MODELLIX_WEB_SEARCH_ENDPOINT, MODELLIX_WEB_SEARCH_TOOL, MediaUploadClient, ModelCatalogClient, ModelSchemaClient, ModellixRuntime, ModellixWebContractError, ModellixWebFetchFailedError, ModellixWebFetchProvider, ModellixWebProviderError, ModellixWebSearchProvider, OnboardingSaveConflictError, PUBLIC_PORTAL_CATALOG_URL, PluginSettingsController, PluginSettingsSchema, PredictionClient, REDACTED, StaleLlmCatalogError, UnsupportedConfigVersionError, abandonLlmMaterialization, advanceCredentialEpoch, apply, applyCredentialDescriptor, applyExactPatch, applyNaturalLanguage, applyRuntimeUnauthorized, applyVerificationResult, approveHttpRequest, approveRedirect, beginLlmMaterialization, beginOnboardingSave, buildFetchRequest, buildInvocationBody, buildSearchRequest, completeLlmMaterialization, completeOnboardingSave, computeRetryDelay, createCredentialState, createDefaultConfig, createModellixDesignToolDefinitions, createModellixWebProviders, createModellixWebToolDefinitions, deferOnboarding, deriveModellixSessionId, deriveModellixUserId, executeWithRetry, extractAllowedSubmitUrl, getServiceToggles, inject, isAllowedModellixOrigin, isCredentialInvalidError, isPublicHostname, isRetryableError, isRetryableReadFailure, isValidModellixIdentity, markOnboardingCredentialSaved, materializeDefaults, migrateConfig, missingCredentialDescriptor, modellixDesignDomainSpec, name, normalizeCredentialDescriptor, openDesignStorage, parseCatalogPage, parseDesignSchema, parseFetchResponse, parsePredictionTask, parseResources, parseRetryAfter, parseSearchResponse, planLlmRouteMaterialization, planLlmRouteRemoval, prepareMediaUploadFromPath, prepareMediaUploadFromSession, preserveStoredCredentialAfterCandidateFailure, preserveVerificationAfterTransientFailure, readBoundedResponseJson, readBoundedResponseText, reconcileLlmRouteLedgerAfterInterruption, reconcileOnboardingSave, redactForLog, redactHeaders, redactUrl, registerModellixDesignTools, registerModellixWebProviderInstances, registerModellixWebProviders, registerModellixWebTools, replayDesignWal, requestDeadline, retryAfterFromFailure, selectAvailableResults, setServiceToggles, systemClock, systemSleep, toModellixError, validatePublicHttpUrl, validateSubmitEndpoint, verifyLlmRegistryBackread };
 
 //# sourceMappingURL=index.js.map