diff --git a/docs/openapi/genarrative-external-v1.openapi.json b/docs/openapi/genarrative-external-v1.openapi.json
index ff13717ab..b388f0845 100644
--- a/docs/openapi/genarrative-external-v1.openapi.json
+++ b/docs/openapi/genarrative-external-v1.openapi.json
@@ -2293,12 +2293,6 @@
               "null"
             ]
           },
-          "provider": {
-            "type": [
-              "string",
-              "null"
-            ]
-          },
           "taskId": {
             "type": [
               "string",
@@ -2476,12 +2470,6 @@
               "null"
             ]
           },
-          "provider": {
-            "type": [
-              "string",
-              "null"
-            ]
-          },
           "taskId": {
             "type": [
               "string",
@@ -2852,7 +2840,6 @@
           "sourceType",
           "prompt",
           "model",
-          "provider",
           "taskId"
         ],
         "properties": {
@@ -2895,9 +2882,6 @@
           "model": {
             "type": "string"
           },
-          "provider": {
-            "type": "string"
-          },
           "taskId": {
             "type": "string"
           },
@@ -3231,7 +3215,6 @@
           "spritesheetHeight",
           "prompt",
           "model",
-          "provider",
           "taskId",
           "priceMudPoints"
         ],
@@ -3277,9 +3260,6 @@
           "model": {
             "type": "string"
           },
-          "provider": {
-            "type": "string"
-          },
           "taskId": {
             "type": "string"
           },
@@ -3718,7 +3698,6 @@
           "sourceType",
           "prompt",
           "model",
-          "provider",
           "taskId",
           "durationSeconds",
           "resolution",
@@ -3767,9 +3746,6 @@
           "model": {
             "type": "string"
           },
-          "provider": {
-            "type": "string"
-          },
           "taskId": {
             "type": "string"
           },
@@ -3955,7 +3931,6 @@
           "sourceType",
           "prompt",
           "model",
-          "provider",
           "taskId",
           "priceMudPoints",
           "audioKind"
@@ -4003,9 +3978,6 @@
           "model": {
             "type": "string"
           },
-          "provider": {
-            "type": "string"
-          },
           "taskId": {
             "type": "string"
           },
diff --git a/docs/project-memory/shared-memory/decision-log.md b/docs/project-memory/shared-memory/decision-log.md
index c28d9948e..5b79a6fdd 100644
--- a/docs/project-memory/shared-memory/decision-log.md
+++ b/docs/project-memory/shared-memory/decision-log.md
@@ -26,6 +26,17 @@
 
 ---
 
+## 2026-07-31 修正抠图内部元数据的普通用户读取边界
+
+- 背景：2026-07-30 的记录误把素材 owner 与后台审计并列为原始抠图执行信息的读取方。owner 是普通用户，前端不展示字段不能阻止其从项目资源、素材库、精选提交 / 点赞回包、画布布局或任务完成响应的网络 payload 读取 BgFilter、阿里云、本地键色、具体分割模型或背景色。
+- 决策：本条取代 2026-07-30 决策中“素材 owner、精选提交响应仍可读取原始值”的表述。普通用户（包括素材 owner）和匿名公开读取必须共同过滤素材顶层 `provider`、内部处理 `model`，以及 `generationInputs` 顶层 `screenColorHex`、`mattingProvider`、`mattingModel`；正常用户可见生成 `model` 和其他合法功能性顶层字段（例如 `characterAnimation`）保持不变。User/Owner mapper 先完成该清理，public mapper 在其基础上叠加公开字段规则；后台管理与服务端审计继续使用 raw mapper 和持久化原值。历史数据不迁移，统一在读取边界清理。
+- 入站与持久化：客户端提交的 `generationInputs` 不得伪造上述内部键，服务端在实际处理完成后才写入可信值。手动去背景的正式素材 `model` 必须继承经服务端验证的正常源生图模型；若来源或祖先链不存在正常模型则为 `null`，不得写入 `BgFilter complex` 等内部处理模型。内部抠图 provider / model 可继续持久化供后台审计，普通用户完成响应和用户可见错误文本均不得暴露它们；手动去背景与角色动作透明化失败在 Owner HTTP / 任务状态边界统一替换为稳定业务文案，原始错误只留在任务记录、tracing 和后台审计。
+- 影响范围：项目资源、素材库、精选提交 / 点赞、图片 / 图标 / 视频 / 音频 / 角色动画生成完成、Agent 紧凑结果和识别出的画布资源 / 图层快照的 User/Public mapper；手动去背景持久化和完成响应；External Editor API 创建素材 / 资源时的保留键入站清理；相应 API / OpenAPI 契约、前端搜索 / 详情 / ZIP 过滤测试与后台 raw 审计测试。不修改 SpacetimeDB schema、迁移或 bindings。
+- 验证方式：Owner 和匿名响应覆盖无 `provider`、无内部 `model`、无三个内部 `generationInputs` 键，且正常 `model` 与 `characterAnimation` 仍保留；Admin raw payload 保持完整。覆盖历史 `BgFilter complex`、三类入站伪造键、手动去背景源模型回溯和用户错误文本过滤；运行 api-server 定向测试、前端定向测试、`cargo check -p api-server --manifest-path server-rs/Cargo.toml`、`npm run typecheck`、`npm run check:encoding` 与 `git diff --check`。
+- 关联文档：`docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md`、`docs/technical/【前端架构】图片画布编辑器MVP接入方案-2026-06-11.md`。
+
+---
+
 ## 2026-07-30 图片画布搜索不得索引内部模型和 Provider
 
 - 背景：素材和图层详情虽已把内部处理模型显示为 `-`，搜索仍索引原始 `model` 与 `provider`，导致 `BgFilter complex`、`segment-common-image`、`BgFilter` 或 `Aliyun Matting` 等隐藏信息可被查询命中，并出现“命中但无可见匹配字段”的异常体验。
diff --git a/docs/technical/【前端架构】图片画布编辑器MVP接入方案-2026-06-11.md b/docs/technical/【前端架构】图片画布编辑器MVP接入方案-2026-06-11.md
index e6e1161da..995b55582 100644
--- a/docs/technical/【前端架构】图片画布编辑器MVP接入方案-2026-06-11.md
+++ b/docs/technical/【前端架构】图片画布编辑器MVP接入方案-2026-06-11.md
@@ -23,6 +23,9 @@
 - 图片生成 / 修改统一经 api-server BFF 接入 VectorEngine。普通生成、生成规范和重绘保留既有 `gpt-image-2` 路径；图片快速编辑统一打开框选区域 + 单提示词 + 模型选择面板，默认沿用原图模型，不展示参考图或比例 / 尺寸控件；其中生成规范类图片固定 `16:9`、`2K`、`gpt-image-2`，面板底部用与可编辑面板一致的比例 / 尺寸 / 模型胶囊按钮展示固定参数，但按钮为禁用态，不允许在该面板改比例、尺寸或模型。`生成角色形象` 与 `生成图标素材` 支持 `nanobanana2`（`gemini-3.1-flash-image-preview`）和 `gpt-image-2`，默认 `nanobanana2`，并在两类面板之间沿用用户上次选择的模型；两类面板不展示抠图背景色或抠图模型选择；前端用户路径固定提交 `screenColor=auto` 和 `segModel=birefnet`，由后端自动决策具体抠图背景色，`anime-seg` 作为内部保留能力不在用户界面暴露。`nanobanana2` 走 `/v1beta/models/{model}:generateContent`，请求体写入 `generationConfig.imageConfig.aspectRatio/imageSize`；`gpt-image-2` 走 `/v1/images/generations` 或 `/v1/images/edits`，请求体按 VectorEngine 文档映射 `size`。宣发素材三个工作流（游戏首图、详情五图、运营海报）固定使用 `gpt-image-2`，面板模型胶囊为禁用态，不提供 `nanobanana2` 入口；前端按 workflow 同时提交 `outputSize`、`aspectRatio` 和 `imageSize`，其中游戏首图为 `720x540 / 4:3`、详情单图为 `720x1280 / 9:16`、运营海报为 `1280x720 / 16:9`；后端收到 `kind: "publication-material"` 时也强制归一为 `gpt-image-2` 生成和计费，生成回填图层优先使用生成占位的 `originalWidth/originalHeight`，即使上游回包尺寸漂移也不得把宣发素材卡片变成随机 `1:1` 或 `4:3`。纯文本生成走 `/api/editor/images/generations`，重绘在前端优先复用当前图层 objectKey；尚未登记的本地图片先上传 OSS，再把 objectKey 交给同一图片生成 BFF，并在原图右侧生成一张新图；普通图层重绘作为 `quick-edit` 参考图提交，角色图层重绘必须按 `kind: "character"` 提交，继续套用角色生成器提示词限定、透明 PNG 后处理和角色资产持久化。`生成视频` 走 `/api/editor/videos/generations`，前端模型入口仅展示 Seedance 2.0 Fast / Seedance 2.0 / Kling 3.0 / Kling 3.0 Omni，不展示 Veo 入口，默认 Seedance 2.0 Fast；视频参数按当前正式面板支持的比例、时长、清晰度和声音开关提交，且 Seedance Fast 与 Seedance 标准版必须按各自真实模型 ID 独立映射，不得混用。生成结果以视频图层加入画布。纯文本生成入口采用 Lovart 式画布内占位图 + 锚定生成输入框：点击生成图片后以当前视口世界中心为目标，经统一 placement 避让后创建选中的灰色占位框，输入框跟随占位框显示；普通图片、角色、图标图集、UI 设计图及其重绘 / 改造入口必须在比例或清晰度恢复、切换时同步把占位框 `width/height/originalWidth/originalHeight` 更新为目标像素尺寸，生成中不得继续显示默认 1K 框；UI 素材提取的 1K / 2K 图集占位和旧图片修改入口也分别使用本次目标尺寸与源图真实尺寸。待生成、生成中和失败后保留的占位图都必须继续支持拖动，生成完成时真实生成图或视频落在最新占位框位置，输入框继续跟随新生成图层；占位图失焦时隐藏高亮边框、左上角生成器名称和右上角原始尺寸，重新聚焦时再显示，且名称 / 尺寸在画布缩小时按 viewport 反向缩放保持屏幕尺寸稳定；点击所有图片 / 视频生成入口并确认请求开始后，必须隐藏对应设置面板，只保留画布内占位图或原图预览，并在预览上显示 Lovart 式生成中遮罩，避免“面板仍占屏”或“预览一起消失”。图片快速编辑和重绘在调用图片 BFF 前必须把当前图层图片解析为已上传的 objectKey 或资源 ID；浏览器临时图片需先上传 OSS；视频素材快速编辑走视频生成 BFF，不允许走图片模型；角色动作的 `生成动画` 仍固定使用 `seedance2.0-fast` 动作 / 视频模型，角色动作素材的 `快速编辑` 按当前帧图片走图片编辑。前端不持有 provider 密钥；上游失败或配置缺失时恢复当前生成设置面板展示失败，不创建 mock 成功图。
 - 图片画布抠图统一通过唯一、只监听 loopback 的 `bgfilter-worker` 调用 BgFilter provider。手动去除背景面向用户任意图片，仍走登录态同源 BFF `POST /api/editor/images/background-removals` 和外部生成队列；API 在入队前拒绝 `data:` / `blob:` 内联媒体，父流程将稳定引用解析为当前账号已登记且归属已校验的私有 OSS object key，只通过一次内部 HTTP RPC 传递 object key、排队预算 `maxQueueWaitMs`、调用预算 `callBudgetMs` 和固定的 `background_mode=complex`、`seg_model=birefnet`、`cross_check=off`，不传源图字节、签名 URL、`file` 或 `screen_color`。子 worker 在每次真实 provider attempt 前签发 600 秒 URL，承担默认 `Q=2048` admission 保险丝、provider 并发 `N=16`、严格最多两次顺序 attempt、响应字节与图片尺寸校验，并把成功图片作为内部 HTTP 二进制 body 直接返回；父流程同步等待该响应且不重试已被 worker 接收的内部 RPC（连接从未建立时按调度方案 §5.1 有界重连）。排队只消耗 `maxQueueWaitMs`，取得 provider permit 后才启动 `callBudgetMs`；attempt 按 `N × est × 2`、调用预算按 `2 × attempt + 1s` 派生，冻结 `est=5000ms` 时分别为 `160s / 321s`。complex 的真实 provider 失败会累计并打开自身熔断，但与 flat 状态隔离；complex 任意失败或熔断仍直接返回父流程失败，不接入阿里云 / 本地键色降级。provider 配置继续统一使用 `GENARRATIVE_EDITOR_BGFILTER_BASE_URL` 和 `GENARRATIVE_EDITOR_BGFILTER_TOKEN`，父子共同使用 `GENARRATIVE_BGFILTER_WORKER_CONCURRENCY` 与 `GENARRATIVE_EDITOR_BGFILTER_SINGLE_IMAGE_ESTIMATE_MS` 派生预算；旧 `GENARRATIVE_EDITOR_BACKGROUND_REMOVAL_TOKEN` 只作为 provider token 兼容别名；内部调用另使用 `GENARRATIVE_BGFILTER_WORKER_BASE_URL` 和独立内部 Token。所有令牌只在服务端注入，前端不持有令牌。成功字节返回父流程后，仍由父流程完成最终处理、OSS / asset object 持久化、结果图层与最新项目快照写回；接口只向前端返回 `queueState`，有项目上下文时前端同时创建去背景生成占位并把 `canvasCompletion` 交给后端。
 - 编辑器自己生成的标准纯色背景抠图资产在保存源图后统一以 `background_mode=flat` 调用内部 `bgfilter-worker`。角色形象生成、图标 spritesheet 生成、UI 设计图素材提取和角色动作的前端用户路径都固定把 `screenColor=auto` 注入请求体，但用户可见 `generationInputs.fields` 不再记录 `抠图背景色` 或 `抠图模型`；api-server 在组装 prompt 前调用背景决策模块，从 12 个候选色中选择具体 hex，最多重试 3 次，失败后兜底 `#CFEFFF`。后端仍保留手动 hex 解析能力供内部兼容。最终生图 prompt、动作视频实色背景和子 worker 发往 provider 的 `screen_color` multipart 字段只接收解析后的具体 hex，不透传 `auto`。四条 flat 路径同时把默认 `segModel=birefnet` 传为 `seg_model`，并显式传 `cross_check`：角色形象生成、图标 spritesheet 和角色动作逐帧去背传 `on`，UI 设计图素材提取传 `off`，不依赖 BgFilter 服务端默认值；后端仍保留识别 `anime-seg` 的内部兼容能力，但前端用户入口不展示也不提交 `seg_model`、`background_mode` 或 `cross_check`。子 worker 为 flat / complex 分别维护独立进程级熔断，并对一次逻辑调用严格最多执行两次顺序 provider attempt；两种模式共享 `GENARRATIVE_EDITOR_BGFILTER_CIRCUIT_FAILURE_THRESHOLD=3` 和 `GENARRATIVE_EDITOR_BGFILTER_CIRCUIT_COOLDOWN_SECONDS=120` 默认值，但失败和成功只更新当前模式；父侧至多让 worker 接收一次内部 RPC（连接从未建立时按调度方案 §5.1 有界重连）。flat 两次失败、熔断、overload、内部 deadline 或断连后，只要父业务预算仍有效，父流程才按同一 object key 进入“阿里云通用抠图 → 本地 `editor_green_screen` 键色”降级；阿里云 fallback 不属于 `bgfilter-worker`。角色动作生成的序列帧背景色已与生图统一：后端把源角色图合成到视觉决策出的具体 hex 后再图生视频；抽帧后逐帧进入同一条 `内部 bgfilter-worker（background_mode=flat，cross_check=on）→ 父侧阿里云 → 父侧本地键色` 链路。
+- 公开请求契约校正（取代本节与下文旧 `segModel` 表述）：普通前端只提交 `screenColor=auto`，不提交也不声明 `segModel`；公开 request DTO 不含 `segModel`、`background_mode` 或 `cross_check`。角色、图标 spritesheet、UI 设计图素材提取和角色动作四条 flat 路径均由 api-server 固定内部 `seg_model` 策略，并连同固定 `background_mode=flat`、按链路决定的 `cross_check` 通过 loopback RPC 传给 worker；手动去背景的 complex 参数同样只属于后端内部调用。
+- 普通用户生成结果不携带生成 provider：图片、图标图集、视频、音频和角色动画完成响应的公开类型均无 `provider`，前端也不得把 provider 写入新建结果图层；项目资源、素材和历史画布快照中的 provider 由后端 User/Public mapper 统一省略。真实 provider 仅留在服务端持久化、tracking / tracing 与后台原始审计。
+- 手动去背景与角色动作透明化失败时，前端只消费后端按任务类型返回的稳定业务文案；不得从队列 `lastErrorMessage`、HTTP error details 或图层状态恢复和展示 BgFilter、分割模型、provider 等内部诊断。
 - BgFilter 单次真实 provider attempt 不再使用独立固定 timeout，而由父子共同按 `attempt = N × est × 2` 运行时派生；一次逻辑调用的 `callBudgetMs = 2 × attempt + 1s`，从子 worker 取得 provider permit 后才开始计时。当前冻结 `N=16 / est=5000ms` 时为 `160s / 321s`。父侧继续管理父 job / request 总预算，为每个内部 RPC 单独派生 `maxQueueWaitMs`；排队只消耗该字段，不侵蚀 `callBudgetMs`，flat 还需预留阿里云和本地键色 fallback 时间。角色动作不再按本次实际帧数增加 attempt，`32 / 40 / 48` 帧使用同一公式。角色动画继续用 `buffer_unordered(frame_count.max(1))` 同时提交单帧逻辑调用，由唯一子 worker 保证健康进程内实际在飞的 provider 请求不超过 `N`、admission 不超过默认保险丝 `Q=2048`；父流程仍按“对应绿幕源图上传 OSS 并释放原帧字节 → 以 object key 调内部 worker / 按 object key 降级 → 父侧完成透明帧处理并落 OSS”连续组成无序在途流水线，允许响应乱序，并在收口时 collect / drain 全部已提交 frame future、按 `frameIndex` 恢复顺序。任一帧最终失败时仍先排空全部已启动请求，再使整个动作任务失败退款，不发布缺帧动画；最终图片处理、OSS、画布写回和计费始终属于父流程。
 - 多产物生成以后端项目快照为唯一画布真相：同一任务实际产生的原始产物、抠图 / 透明化结果和拆分结果都要先登记为 `editor_project_resource`，再通过一次 `canvasCompletion` 原子写入画布。角色形象、图标 spritesheet 和 UI 素材提取的纯色背景原图不能只留在 OSS。透明后处理成功时，处理结果保持主图层和 `generatedLayerId` 锚点，三类任务同时把 provider 原图作为第二个图层放在透明主结果右侧，图标和 UI 的实际拆分素材从 provider 原图右侧开始放置。透明背景处理最终失败时，只把已保存的原图作为唯一主图完成占位，不放透明处理图，图标和 UI 不继续拆分。source-only fallback 的前端只消费后端返回的 `project` / `resource` 快照，不按缺失字段自行构造透明图、切片或图层；任务以 `completed + warning` 收口。该收口只捕获透明背景处理本身的最终失败；phase 上报、provider 原图持久化、透明处理图持久化和 `canvasCompletion` 写回错误仍正常传播，不能被原图降级吞掉。通用 `warning.reason` 是可直接展示的完整原因。它与 `sliceWarning` 只在 `postprocess-failed-source-preserved` 这一条上互斥（透明背景最终失败不会进入拆分）；风格归一化和像素规整产生的通用 `warning` 可与 `sliceWarning` 并存，此时 inline 与队列两条链路都必须按“通用在前、拆分在后”拼成同一条提示展示，不得只取其一。既有 `sliceWarning.reason` 只表示透明图成功后的自动拆分失败，保留后端原始诊断，inline 前端仅在展示时补充“图集已生成，但自动拆分未完成：”提示，queue worker 则把归一后的字符串交给 BFF `warning` 由前端直接展示。无项目上下文时不创建项目资源或画布图层。
 - 图片快速编辑面板只保留一个提示词输入框和模型选择，不展示额外参考图或比例 / 尺寸控件；原图 / 原素材作为 `/api/editor/images/edits` 的 `sourceImageSrc` 直接提交，不作为 `referenceImageSrcs`。完整图标图集 `icon-spritesheet` 支持快速编辑，拆分后的单个 `icon` 不提供该入口，前后端必须使用同一素材类型规则。打开快速编辑时画布必须自动平移缩放，让原素材完整落在可视区上半部分，底部面板固定出现在素材下方且不遮挡内容，竖屏 UI 素材也必须完整展示。快速编辑右侧显示矩形、椭圆、画笔框选工具，但进入时不默认启用；点击工具后显示选中态，再点同一工具取消启用。完成框选后，画布红色细框显示连续序号，提示词可按这些编号填写每个区域怎么改。点击 `修改` 后仍停留在当前快速编辑面板显示修改中，不创建独立 `Quick Edit Generator` 画布占位；生成成功后直接用结果覆盖原图图层，失败时保留当前面板并在错误红框中显示具体错误文案。
@@ -112,6 +115,7 @@
 - `POST /api/editor/icon-spritesheets/generations`：按图标规范图和完整用户需求生成 spritesheet；为兼容现有契约，画布前端把完整文本作为 `iconDescriptions` 的唯一数组元素提交，不按分隔符或语义枚举解析数量。api-server 先保存带纯色背景 spritesheet 源图，透明处理成功后再保存透明 spritesheet，并与手动 `POST /api/editor/icon-spritesheets/slices` 复用同一套全连通域识别：识别多少个有效素材就拆多少个，按视觉阅读顺序命名为 `素材 N`，不读取 `iconDescriptions` 数量决定切片数。两条拆分路径共同限制单边 `4096`、总像素 `2048×2048`、最多 `64` 个切片。请求支持 `model`、`screenColor`、`segModel`、`aspectRatio`、`imageSize`、`priceMudPoints`、`projectId`、`assetFolderId` 和 `generationInputs`；`priceMudPoints` 必须来自编辑器生成计费配置中对应生图模型的尺寸档位（如 `nanobanana2` 的 `0.5K / 1K / 2K` 或 `gpt-image-2` 的 `1K / 2K`），后端用 `editor_generation_config` 校验后才调用上游；`nanobanana2` 走原生 `generateContent` 并写入 `generationConfig.imageConfig.aspectRatio/imageSize`，`0.5K` 传 `"512"`；`gpt-image-2` 走 `/v1/images/edits`。透明处理最终失败时只保存并返回原图主结果，不生成透明图或切片；透明图成功但自动拆分失败时保留整张透明图并返回非阻断 `sliceWarning`，手动拆分失败时返回接口错误。响应只返回实际产物对应的 project / resource / asset 快照及可选通用 `warning`。
 - `POST /api/editor/images/generations` 与 `POST /api/editor/icon-spritesheets/generations` 还可携带可选 `style`；公开合法字符串为 `none / pixelArt`，兼容归一化、支持的 `kind`、非阻断告警和零新增持久化规则以“静态图片风格与像素规整边界”为准。`POST /api/editor/ui-designs/assets/extractions` 不接受该字段。
 - `POST /api/editor/ui-designs/assets/extractions`：前端把红色框选轮廓绘入本地临时图后，先将该图上传 OSS 并确认 asset object，再以返回的 `objectKey` 作为参考图入队；Data URL / Blob URL 只允许停留在上传前的浏览器临时态。接口固定 `gpt-image-2` 和自动决策纯色背景素材提取提示词生成素材 spritesheet；api-server 先保存带纯色背景 spritesheet 源图，透明处理成功后再保存透明 spritesheet 并按连通域尝试拆分为 `素材 1..N`，返回结构复用图标 spritesheet 响应。请求必须携带 `screenColor`、`segModel`、`aspectRatio: "1:1"`、`imageSize: "1K" | "2K"` 和 `priceMudPoints`；框选数量不超过 6 个时前端按 `1:1·1K` 与 gpt-image-2 1K 价格提交，超过 6 个时按 `1:1·2K` 与 2K 价格提交。后端必须在调用上游前校验比例、尺寸和泥点价格，只允许 `1:1 / 1K / 2K`。透明处理最终失败时只保存并返回原图主结果，不生成透明图或切片；透明图成功但拆分失败时保留整张透明图并返回 `sliceWarning`。请求可携带 `projectId`、`assetFolderId`、`generationInputs` 和 `spritesheetLabel`，响应只返回实际产物对应的 project / resource / asset 快照及可选通用 `warning`；前端按后端快照落画布，不补造缺失产物。
+- 图片生成接口公开请求契约校正（取代第 23、110、112、114 条中旧 `segModel` 字段枚举）：角色生成、图标 spritesheet 和 UI 素材提取只允许普通前端提交 `screenColor=auto`（以及各接口其余用户业务字段）；`segModel`、`background_mode`、`cross_check` 一律不是公开 DTO 字段。后端负责选择并固定四条 flat 路径的内部 `seg_model`，并在 loopback worker RPC 中传递该参数及每条链路的 `background_mode` / `cross_check`。
 - `POST /api/editor/images/edits`：按提示词和当前图片的已登记 `objectKey` / `resourceId` 修改图片，返回新的生成图片元数据；图片快速编辑当前只提交 `sourceImageSrc`，不提交隐藏的 `referenceImageSrcs`，并随用户当前选择提交 `model / aspectRatio / imageSize / size`。api-server 必须先归一模型再选择 VectorEngine 协议：`nanobanana2` 调用 `/v1beta/models/{model}:generateContent` 并把原图作为 `inline_data`、比例和清晰度写入 `generationConfig.imageConfig`；`gpt-image-2` 调用 `/v1/images/edits` multipart。gpt-image-2 路径在 provider 边界把目标尺寸和所有 multipart 参考图临时补齐到 16 的倍数；nanobanana2 路径保留 provider 的比例 / 清晰度请求，但两条路径回图后都以统一业务目标尺寸尝试归一。只允许缩小和轻微裁切；回图任意一边小于目标或比例偏差过大时保留 provider 实际回图及尺寸，并返回通用 `warning`，不得放大伪造所选档位。无论是否发生尺寸恢复都只创建一个 project resource / 账号素材，不显示重复“原始输出”。provider 对齐尺寸或原生 K 档像素不得泄漏到正常完成的最终响应、资源或图层 Resolution；变换失败降级时以实际 provider 原图尺寸为准。本地红框标记图必须先上传再提交 objectKey；请求携带 project / asset 上下文时由后端创建新 resource / asset，前端只消费响应快照。
 - `POST /api/editor/videos/generations`：按视频描述、模型、比例、时长、分辨率、模式、声音、默认联网搜索标记和泥点价格生成视频。前端可选模型为 `seedance2.0-fast`、`seedance2.0`、`kling3.0`、`kling3.0-omni`，默认 `seedance2.0-fast`；后端必须将 `seedance2.0-fast` 映射到 `doubao-seedance-2-0-fast-260128`，将 `seedance2.0` 映射到 `doubao-seedance-2-0-260128`，两者不得混用。后端允许 6 类比例、4 到 15 秒整数、`480p / 720p / 1080p`，并拒绝 `seedance2.0-fast + 1080p`；`sound=on/off` 映射 Ark `generate_audio=true/false`。后端复用 Ark / VectorEngine content generation task 轮询链路，下载最终视频并持久化到 OSS；请求携带 `projectId` / `assetFolderId` 时同步创建 project resource / 账号素材并返回 `project` / `asset` 快照，基础响应返回 `videoSrc`、尺寸、prompt、model、provider、taskId、durationSeconds、resolution 和 `priceMudPoints`。
 - `POST /api/editor/audios/sound-effects/generations` 与 `POST /api/editor/audios/background-music/generations`：按音效 / 背景音乐参数生成音频并持久化到 OSS；请求携带 `projectId` / `assetFolderId` 时同步创建 project resource / 账号素材并返回 `project` / `resource` / `asset` 快照，基础响应返回 `audioSrc`、prompt、model、provider、taskId、duration、歌词和 `priceMudPoints`。
@@ -164,15 +168,15 @@
 - 音频 / 视频素材卡和画布媒体图层必须提供稳定的非文字视觉预览：优先使用 `thumbnailSrc` / 视频 `poster`，没有真实首帧或音频封面时使用由媒体类型、素材名和地址派生的确定性视觉底图。视频图层使用原生 `<video controls preload="metadata" playsInline>` 播放，外层图层仍承接选择和拖拽语义；音频图层播放前继续通过 `/api/assets/read-url` 换签。画布素材导出按 `mediaType` 保留真实媒体格式：图片进入 `images/`，音频 / 视频进入 `media/`，文件扩展名从响应 MIME、`objectKey` 或源 URL 推断，不得把音频 / 视频导出成 PNG。
 - 画布素材 ZIP 的 `metadata.json` 只保存前端信息弹窗和导出文件列表可见的展示快照：项目标题、导出时间、图层标题、文件路径、类型、生成输入、模型显示名、Task 短 ID、Object 显示值、Resolution / 时长和导出错误。导出的生成输入只保留用户实际填写或选择的内容；系统默认兜底提示词、固定工作流提示词、内置图标描述、UI 提取素材固定提示词等内置提示词即使存在于历史 `generationInputs`，也不得写入导出元数据。不得把 `projectId`、`layerId`、`resourceId`、`sourceAssetId`、`sourceResourceId`、原始 `prompt` / `actualPrompt` / `provider` 或画布坐标、锁定、隐藏等布局状态写入导出元数据；Object 字段仅沿用信息弹窗当前可见值。
 - `生成角色动作` 的完成结果按序列帧素材处理：图层主 `src` 使用 `frames[0].imageSrc`，`mediaType` 固定为 `image-sequence`，`assetKind` 固定为 `character-animation`，完整帧列表写入 `imageSequenceFrames`；`previewVideoPath` 只保留为上游预览视频来源，不作为画布主媒体。下载和 ZIP 导出必须因此得到序列帧 ZIP / frames 目录，不能回退为预览视频或首帧 PNG；后端抽帧后逐帧保存带绿幕源图，上传时消费并释放原帧字节，再用该对象的 600 秒 OSS URL 完成透明化并落盘透明帧素材。
-- 素材面板支持按素材名、文件夹名、生成信息、用户可见模型、任务和媒体类型搜索，并支持选择模式框选，一次选中多个素材，并可批量移动或删除上传素材。Provider 与 `isEditorInternalProcessingModel(...)` 识别的内部处理模型不得进入搜索索引，避免出现隐藏字段可命中或命中但无可见匹配字段；停止索引不删除素材上供 owner / 后台审计使用的原始元数据。
-- 图层面板支持按图层名、生成信息、用户可见模型、任务和媒体类型搜索；Provider 与内部处理模型同样不得进入搜索索引。支持选择多个图层后创建图层组，组名和 groupId 随画布布局保存。
+- 素材面板支持按素材名、文件夹名、生成信息、用户可见模型、任务和媒体类型搜索，并支持选择模式框选，一次选中多个素材，并可批量移动或删除上传素材。Provider 与 `isEditorInternalProcessingModel(...)` 识别的内部处理模型不得进入搜索索引，避免出现隐藏字段可命中或命中但无可见匹配字段；原始审计元数据只保留给服务端和后台管理读取，普通用户（包括素材 owner）不得通过响应取得。
+- 图层面板支持按图层名、生成信息、用户可见模型、任务和媒体类型搜索；Provider 与内部处理模型同样不得进入搜索索引。普通用户图层快照也不得携带这些内部字段。支持选择多个图层后创建图层组，组名和 groupId 随画布布局保存。
 - 小地图支持拖拽视口框，拖动时画布 viewport 跟随移动；`pointermove` 更新必须通过 `requestAnimationFrame` 合帧，结束拖拽时 flush 最后一帧，避免高频 pointermove 直接压垮 React 渲染和项目持久化链路。
 - 鼠标滚轮默认按设备原始 `deltaX / deltaY` 二维平移画布视口；当按住 Shift 且设备上报 `deltaX = 0` 时，视口输入适配层把 `deltaY` 映射为横向位移并将纵向位移置零，核心平移模型仍只消费归一化后的 X / Y。按住 Ctrl / Cmd 滚轮才缩放画布，并阻止浏览器页面缩放。缩放比例显示保持现有换算口径，最低可缩小到 `5%`。
 - 工程刷新后能从后端恢复资源、图层布局和 viewport。
 - “我的”页项目入口能进入 `/project`；项目页能列出工程、重命名 / 删除单个工程、批量选择和批量删除；点击工程后进入 `/editor/canvas?projectid=<projectId>` 并按 query 加载该工程。
 
 - 用户可见的 `generationInputs.fields` 不得写入或展示“处理模型”；角色抠图、图标 / UI 图集抠图及自动拆分形成的派生资产，其 `Model` 继续继承并展示源生图模型，不得改写为 `birefnet`、`anime-seg`、`connected-components`、阿里云抠图或本地键色等内部后处理模型。前端同时过滤历史项目中已持久化的“处理模型”字段；历史资源若只剩内部处理模型而无法恢复源生图模型，保留 `Model` 行并显示 `-`。画布 ZIP 的用户可见导出元数据使用同一过滤口径且保持既有结构。
-- `generationInputs` 整体是可扩展 JSON 包络，不等同于全量用户可见快照；图片信息只消费 `fields` / `references`。后端可仿照 `screenColorHex` 在顶层保存 `mattingProvider` / `mattingModel`，记录角色、图标图集和 UI 图集抠图实际成功的 BgFilter、阿里云或本地键色结果；前端规范化和图片信息展示不得把这些顶层内部字段映射成可见字段，正式 `Model` 仍取源生图模型。匿名精选资源响应不返回素材顶层 `provider`，也不返回 `screenColorHex`、`mattingProvider`、`mattingModel`；owner 与后台审计读取不受影响。
+- `generationInputs` 整体是可扩展 JSON 包络，不等同于全量用户可见快照；图片信息只消费 `fields` / `references`。后端可仿照 `screenColorHex` 在顶层保存 `mattingProvider` / `mattingModel`，记录角色、图标图集和 UI 图集抠图实际成功的 BgFilter、阿里云或本地键色结果；前端规范化和图片信息展示不得把这些顶层内部字段映射成可见字段，正式 `Model` 仍取源生图模型。普通用户（包括 owner）与匿名精选资源响应均不返回素材顶层 `provider`、内部处理 `model`、`screenColorHex`、`mattingProvider` 或 `mattingModel`；正常用户可见 `model` 与合法功能性顶层字段继续保留。只有后台管理和服务端审计读取原始值。
 
 ## 后续扩展点
 
diff --git a/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md b/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md
index 81668b304..f1df3caf1 100644
--- a/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md
+++ b/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md
@@ -295,6 +295,7 @@ Responses 的终态载荷既是工具调用的恢复源，也是正文的恢复
 - 角色动作抠图输入像素边界：仅图片画布角色动作链路在 FFmpeg 抽帧后、源帧上传 OSS 前，把帧解码为 RGB8，并按最终 `frameWidth × frameHeight` 的 contain 比例使用 `Triangle` 只缩放到内容尺寸；该阶段不得创建最终目标尺寸画布、不得引入 Alpha 通道，也不得插入任何 padding。BgFilter、阿里云通用抠图和本地键色降级共享这个无补边源帧 object key。抠图返回后才统一转为 RGBA8，按相同比例居中放入最终目标尺寸画布，并用 `RGBA(0,0,0,0)` 补齐透明 padding。以 `560×752 → 323×480` 为例，抠图输入固定为无 Alpha、无补边的 `323×434 RGB8 PNG`，最终输出为上下各 `23px` 透明补边的 `323×480 RGBA8 PNG`。旧 `/api/assets/character-animation/*` 动作发布链路继续保留原有帧 finalizer，不适用该输入规则。抽帧解码后若携带 Alpha 通道，必须先把像素按白底合成为不透明再转 RGB8，禁止直接丢弃 Alpha——全透明像素下未定义的 RGB 值会以杂色进入抠图输入，重新引入杂色边缘；共享 FFmpeg 抽帧命令保持不固定 `-pix_fmt`，白底合成只属于该链路的 BgFilter 输入准备阶段。
 - 阿里云通用抠图的非上海地域输入不得使用 `viapiutils/GetOssStsToken`、固定 `viapi-customer-temp` 或 OSS V1 PUT。`platform-matting` 必须按官方新版 SDK Advance 协议调用 `AuthorizeFileUpload`，使用动态返回的单对象 Policy 执行 multipart POST，再把临时上海 OSS URL 交给 `SegmentCommonImage`；输入归一化、结果下载与原尺寸 Alpha 回贴继续留在同一适配器内。该协议仍上传图片字节，不等同于阿里云服务端直接抓取任意公网 URL，也不改变上层 BgFilter → 阿里云 → 本地降级顺序。
 - 编辑器抠图服务：手动 `POST /api/editor/images/background-removals` 与角色形象生成、图标 spritesheet 生成、UI 设计图素材提取、角色动作抽帧后的透明化统一通过唯一 loopback `bgfilter-worker` 调用 BgFilter provider。provider 配置继续使用 `GENARRATIVE_EDITOR_BGFILTER_BASE_URL` 与 `GENARRATIVE_EDITOR_BGFILTER_TOKEN`，默认 base URL 为 `http://58.87.105.82/bgfilter`；单次 provider attempt 上限不再独立配置，由公式 `N × est × 2` 运行时派生，其中 `est = GENARRATIVE_EDITOR_BGFILTER_SINGLE_IMAGE_ESTIMATE_MS`（默认 `5000`，依据为服务端高并发单图处理约 1-3s、网络约 3-5s），旧 `GENARRATIVE_EDITOR_BGFILTER_REQUEST_TIMEOUT_MS` 已删除；旧 `GENARRATIVE_EDITOR_BACKGROUND_REMOVAL_TOKEN` 只作为 provider token 的兼容回退别名，原手动去背景专用 base URL / timeout 配置已经删除。父流程先把候选 `objectKey`、`resourceId` 或 `assetId` 解析为当前 owner 已登记的私有 OSS object key；BFF 入队前统一拒绝 `data:` / `blob:`，底层 resolver 在解析引用前再次拒绝内联媒体并完成登记状态与 owner 校验。父流程只通过一次内部 HTTP RPC 传递 object key、排队预算 `maxQueueWaitMs`、调用预算 `callBudgetMs` 与模式参数，不传图片字节或签名 URL，并同步等待子 worker 返回的受限图片二进制 body。子 worker 在每次真实 provider attempt 前签发短期 OSS URL，承担 admission 保险丝 `Q`（默认 `2048`，仅防连接风暴）、provider 并发 `N`（生产 `16`）；排队 deadline 从 `Q` admission 时刻起算，完成 JSON 校验并进入 provider permit 等待队列时再取得队长快照，按 `min((队长+5)×est×2, maxQueueWaitMs)` 约束排队等待。子 worker 还负责严格最多两次顺序 attempt、结果校验和按 flat / complex 隔离的进程级熔断；两种模式共享 `GENARRATIVE_EDITOR_BGFILTER_CIRCUIT_FAILURE_THRESHOLD=3` 和 `GENARRATIVE_EDITOR_BGFILTER_CIRCUIT_COOLDOWN_SECONDS=120` 默认值，但失败和成功只更新当前模式，且只由子 worker 读写。手动去背景固定使用 `background_mode=complex`、`seg_model=birefnet`、`cross_check=off`，不传 `file` 或 `screen_color`；complex provider 失败累计自身熔断，任意失败或自身熔断都直接返回父流程失败，不接 flat fallback，也不影响 flat 熔断。标准纯色背景四条链路固定使用 `background_mode=flat`、`screen_color=<screenColor>`、`seg_model=<segModel>` 和 `cross_check=<on|off>`，其中角色形象生成、图标 spritesheet 生成和角色动作逐帧去背传 `cross_check=on`，UI 设计图素材提取传 `cross_check=off`。前端用户路径不展示抠图模型、模式或 cross-check，固定提交默认 `birefnet`，后端仍识别内部保留的 `anime-seg`；这些参数只属于后端内部供应商策略，不进入前端或外部 OpenAPI。父侧不重试已建立连接的内部 RPC，仅对 TCP 连接从未建立的失败按父预算有界退避重试（跨过 worker 重启与开机排序窗口，收到任何 HTTP 响应即停止）；flat 两次 provider attempt 失败、熔断、overload、内部 deadline 或断连后，只要父业务预算仍有效，父流程才继续“阿里云通用抠图 → 本地 `editor_green_screen` 键色扣除”，熔断期不得直接退化到本地兜底。角色动作视频生成的背景色已与生图链路统一：`screenColor=auto` 时由视觉 LLM（`gpt-5-mini`，Responses 协议、low 推理档）读源角色图自动决策，并经硬过滤器剔除与前景 / 皮肤撞色的候选，手动 hex 则尊重用户选择；透明源角色图在提交 Ark 图生视频前先合成到选定背景色实色，使视频背景等于抠图键色；抽帧后每帧先上传私有 OSS 并释放原帧缓冲，再以 object key 固定使用 `seg_model=birefnet`、`cross_check=on` 进入上述三段式链路。阿里云通用抠图配置为 `GENARRATIVE_ALIYUN_MATTING_ENABLED`、`GENARRATIVE_ALIYUN_MATTING_ENDPOINT`、`GENARRATIVE_ALIYUN_MATTING_ACCESS_KEY_ID`、`GENARRATIVE_ALIYUN_MATTING_ACCESS_KEY_SECRET` 和 `GENARRATIVE_ALIYUN_MATTING_REQUEST_TIMEOUT_MS`；未配置专用 AK/SK 时可复用 `ALIBABA_CLOUD_ACCESS_KEY_ID` / `ALIBABA_CLOUD_ACCESS_KEY_SECRET`，默认 endpoint 为 `imageseg.cn-shanghai.aliyuncs.com`。标准纯色背景链路中，子 worker 已发出的 BgFilter provider 失败（含被剩余预算截短后发生的 timeout 与 response 阶段超时，这类失败不计入熔断但仍是审计候选）由进程级 `1024` 个审计任务硬上限保护，获准任务写入共享 tracking outbox 根目录下独立的 `bgfilter-worker/` 子目录并批量落库；满载、outbox 缺失、达到磁盘保护阈值或写盘失败时允许丢弃并记录指标，不回退逐条同步直写 SpacetimeDB。父侧阿里云抠图链路已开始后的失败（包括源 OSS GET 成功后的解码、尺寸校验和归一化失败）继续按通用外部 API 审计策略处理。真正开始外部调用前的本地预检不写该审计，并在 `failureStage` 中保留 `source_decode`、`source_validate` 等阶段。成功图片字节返回后，最终 Alpha / 尺寸恢复、OSS / asset object、画布写回、计费和父任务终态仍全部由父流程负责。
+- 公开请求契约校正（取代上段“前端固定提交默认 `birefnet`”及 `seg_model=<segModel>` 的旧表述）：前端只提交 `screenColor=auto`，公开 DTO / OpenAPI 均不含 `segModel`、`background_mode` 或 `cross_check`。api-server 对角色、图标、UI、角色动作四条 flat 链路固定内部 `seg_model`，并按链路固定 `background_mode=flat` 与 `cross_check` 后再调用 loopback worker；这些参数及其历史兼容识别均是服务端供应商策略。
 - BgFilter 连接复用、超时与动作帧流水线：`AppState` 分别复用父侧内部 worker HTTP Client 和子 worker 专用 BgFilter provider HTTP Client；父侧对一次逻辑调用至多让 worker 接收一次内部 RPC，不重试已建立连接后的失败；仅 TCP 连接从未建立时（worker 重启 / 开机排序窗口）按每轮重算 `maxQueueWaitMs` 的有界退避序列重连——增加的只是连接尝试次数，不产生第二次被接收的 RPC。重连配额按本进程是否已连通过 worker 分档：首连前（冷启动）flat 22.5s / complex 约 62.5s，首连后 flat ≤1.5s / complex 22.5s；每次重连计 `bgfilter_internal_connect_retry_total` 指标。子 worker 在同一个 `N` permit 内严格最多执行两次顺序 provider attempt。唯一子 worker 使用 `GENARRATIVE_BGFILTER_WORKER_CONCURRENCY=N`（生产 `16`）限制真实 provider 在途数；`GENARRATIVE_BGFILTER_WORKER_MAX_REQUESTS=Q` 降级为可选 admission 保险丝（默认 `2048`，仅防连接风暴，显式配置时必须 `>= N`）。超时全部由 `N` 与 `est` 运行时派生：单 attempt 上限 `N × est × 2`、调用预算 `callBudgetMs = 2 × attempt + 1s`（自取得 `N` permit 起算）、排队等待受 `min((provider 等待队列队长+5)×est×2, maxQueueWaitMs)` 双重上界（动态项充当自适应过载探测，超时带 `bound = estimate | parent` 标记），排队不侵蚀调用预算；`N` 与 `est` 必须同放共享 API 基础环境；请求携带的 `callBudgetMs` 只是父侧配置指纹，worker 比对后不一致只告警并计 `bgfilter_internal_call_budget_drift_total` 指标、始终以本进程公式值执行——发布调优 N / est 的新旧进程共存窗口不得误伤在途任务，持久漂移由部署脚本共享 env 对齐校验在启动前拦截。角色动作不再增加 `2000ms × 本次实际帧数`，`32 / 40 / 48` 帧使用相同公式。父侧按剩余绝对预算派生 `maxQueueWaitMs`（flat 扣除 `39s` 父侧预留（`37s` fallback + `2s` 传输窗），complex 只留 `2s` 传输窗；`<= 0` 时不发请求直接降级 / 失败），client timeout 取 `maxQueueWaitMs + callBudgetMs + 2s`；每次 attempt 前重新签发短期 OSS URL，剩余时间不足时不开始新的 attempt。父侧成功响应解码槽 `P = 8`。角色动作继续以 `buffer_unordered(frame_count.max(1))` 将全部单帧逻辑调用加入无序在途集合；返回结果携带原始帧序并在最终 collect / drain 全部已提交 Future 后排序，任一帧最终失败时必须先排空全部已启动 Future，再让整个动作任务失败退款，不能发布缺帧动画。单帧按“绿幕源图 owned 上传 OSS 并释放原帧 → 以 object key 调内部 worker / 按 object key 由父侧降级 → 父侧处理透明帧并落 OSS”流水化。角色动画源帧 PUT、透明帧 PUT 和最终帧 HEAD 仍统一复用 `AppState` 内初始化一次的 OSS HTTP Client（连接池参数为 connect 30 秒、request 60 秒、idle 300 秒、每 host 8 个 idle 连接、TCP keepalive 60 秒），并受进程级 8 路 OSS semaphore 限制；BgFilter provider 的 `N` 不占该 OSS permit，阿里云和本地处理既不占 OSS permit，也不受 `N / Q` 限制。每个 OSS 网络 attempt 单独获取 permit，退避期间释放；PUT/HEAD 动画帧请求最多 3 次（250ms、500ms 退避），只重试无 HTTP 响应的传输错误、timeout、OSS PutObject 的 `400 + RequestTimeout`、PUT `400` 错误体读取失败（未解析出 `Code`，按 timeout/transport 归类）、408、429 和 5xx。动作帧 PUT 只在 400 响应中有界读取最多 16 KiB OSS 错误 XML，并保留 `Code` 与响应头优先的 `x-oss-request-id`；错误体读取超时/断流时保留已读字节，已解析出的 `Code` 优先生效，未解析出 `Code` 则按 timeout/transport 归类重试；除 `RequestTimeout` 与该错误体读取失败情形外的其他 400、401/403/404、配置、URL/签名和空请求体错误不重试。最终帧 HEAD 失败只重试 HEAD，不重复 PUT。
 - Match3D 物品 sheet：关卡整图完成后走 VectorEngine `/v1/images/edits` multipart `image`，模型为 `gpt-image-2`，`2K 1:1` 输出 `10*10` spritesheet；物品 sheet prompt 固定要求单一纯绿色 `#00FF00 / RGB(0,255,0)` 绿幕背景，后端上传 OSS 前必须把绿幕扣成透明 PNG，并把透明整图写入 `itemSpritesheetImageSrc/itemSpritesheetImageObjectKey`。后端优先按透明 alpha 连通域从该 sheet 识别真实素材矩形并持久化 20 个物品、每个 5 个形态；识别数量不足时才回退 `10*10` 固定网格。通用系列素材图集的行列索引按每行 2 个物品计算，必须落在 `1..=10`，难度只决定运行态加载 3 / 9 / 15 / 20 种。
 - Match3D UI spritesheet 和背景派生图：关卡整图作为参考图并发生成 `1K 1:1` UI spritesheet 与 `1K 9:16` 背景图，模型均为 `gpt-image-2`。UI spritesheet prompt 固定要求单一纯绿色 `#00FF00 / RGB(0,255,0)` 绿幕背景，后端上传 OSS 前必须把绿幕扣成透明 PNG；背景图必须合成为全画幅不透明 PNG。
@@ -618,7 +619,9 @@ Responses 的终态载荷既是工具调用的恢复源，也是正文的恢复
 - Rust 结构体：`EditorProjectResource`
 - 源码：`server-rs/crates/spacetime-module/src/editor_project_storage.rs`
 - 说明：图片画布工程资源元数据表，保存已经放入某个 project 画布的上传 / 生成图片资源快照、OSS 引用、尺寸、来源类型、prompt、provider、task、源资源关系、`asset_kind`、`generation_inputs_json` 和历史 `public_showcase_enabled`。`asset_kind` 标记角色、图标、UI 设计图、视频、音频等素材类别；`generation_inputs_json` 保存用户可见生成输入快照，供图片信息页刷新后恢复。`public_showcase_enabled` 只保留旧接口兼容，不再作为 `/creation` 的 `陶泥儿精选` 事实源；精选公开改由账号级生成素材提交 `editor_showcase_asset` 审核决定。图片 / 图标 / UI 提取等生成 BFF 在请求携带 `project_id` 时负责创建该表记录并把 resource 快照返回前端；前端只保存稳定 `resource_id` 布局引用，不能把同一生成结果再次作为正式业务真相写入。项目封面快照也落在该表，使用 `asset_kind = project-cover-snapshot`、`source_type = uploaded` 和私有 OSS / asset object 引用，代表画布当前视口栅格化后的静态封面；项目列表和创作主页最近项目只读取最新封面快照资源，不在列表页根据 layout 临时拼画布。从账号级素材库把同一生成素材拖回同一项目画布时，后端优先复用同项目内同源同媒体资源，避免每个图层实例都插入新的资源行。账号级素材删除不级联删除该表，避免历史画布丢图。结构化 canvas 的几何、层级、分组和资源引用以 `editor_canvas_layer` 为权威，生成器对象以 `editor_canvas_generation_dialog` 为权威；legacy canvas 才在 2 MiB 上限内从 `editor_canvas.layers_json` 兼容读取。新写入不再把素材生成输入快照作为图层布局真相保存。历史普通图层缺资源只能由 migration operator 调用 `repair_editor_canvas_resources_and_return` 定向修复：procedure 每次只处理一个尚无迁移记录的 legacy canvas，校验 owner/project、revision、canvas/project 两份 raw layout SHA-256、精确 layer/resource/sourceResourceId、同工程替换资源与 private asset_object 谱系；图片只替换引用，音频只恢复经核验的 `420x120` 项目资源行。运维入口 `npm run spacetime:editor-canvas-resources:repair` 默认 dry-run，apply 必须绑定 plan SHA-256 并在成功后自动复核 already-repaired，禁止手工 SQL 绕过事务 guard。
-- `generation_inputs_json` 包络契约：`fields` / `references` 是图片信息读取的用户可见生成输入快照；顶层允许保存后端内部结果扩展。现有 `screenColorHex` 保存实际背景色，角色、图标图集和 UI 图集抠图派生资产使用 `mattingProvider` / `mattingModel` 保存实际成功的处理后端与模型。BgFilter 保存本次 `seg_model`，阿里云通用抠图保存 `Aliyun Matting / segment-common-image`，本地键色保存 `Genarrative Local / screen-color-keying`。这些顶层字段不写入 `fields`、不在图片信息展示，原始素材 owner、精选提交响应和后台管理接口按既有权限仍可读取；匿名 `GET /api/editor/showcase/resources` 必须在 public payload 边界删除 `screenColorHex`、`mattingProvider`、`mattingModel`，同时省略素材顶层 `provider`。过滤只作用于公开响应，不修改素材或精选快照，因此历史数据无需迁移。
+- `generation_inputs_json` 包络契约：`fields` / `references` 是图片信息读取的用户可见生成输入快照；顶层允许保存后端内部结果扩展。现有 `screenColorHex` 保存实际背景色，角色、图标图集和 UI 图集抠图派生资产使用 `mattingProvider` / `mattingModel` 保存实际成功的处理后端与模型。BgFilter 保存本次 `seg_model`，阿里云通用抠图保存 `Aliyun Matting / segment-common-image`，本地键色保存 `Genarrative Local / screen-color-keying`。公开生成请求只允许把 `screenColor=auto` 作为用户可见抠图输入；`segModel`、`background_mode` 和 `cross_check` 不属于公开 DTO，服务端完成实际策略选择。上述内部结果字段不写入 `fields`，普通用户（包括素材 owner）与匿名公开读取均不得取得；普通用户响应还必须省略素材顶层 `provider` 和内部处理 `model`，但保留正常用户可见 `model` 与其他合法的顶层功能字段。后台管理和服务端审计可读取原始值。过滤只作用于普通用户 / 公开响应边界，不修改素材或精选快照，因此历史数据无需迁移。
+- 普通用户生成结果契约：图片、图标图集、视频、音频和角色动画的完成响应与新建画布图层均不返回或写入生成 provider；项目资源、素材、精选和 Agent 紧凑结果使用同一读取边界。真实 provider 只保留在持久化、tracking / tracing 和后台管理原始审计中。该规则针对生成供应商元数据，不改变直传票据等必须由客户端执行的存储协议字段。
+- 普通用户错误契约：手动去背景和角色动作透明化的原始服务端错误可能包含 BgFilter、分割模型或 provider 细节；Owner HTTP 响应与外部任务状态必须按 job kind 返回稳定业务文案，原始错误只保留在任务记录、tracing 与后台审计。
 - 索引：`by_editor_project_resource_project_id`、`by_editor_project_resource_owner_user_id`。
 
 ### `editor_asset_folder`
diff --git a/server-rs/crates/api-server/src/admin.rs b/server-rs/crates/api-server/src/admin.rs
index 66e21f696..6ebcc50cb 100644
--- a/server-rs/crates/api-server/src/admin.rs
+++ b/server-rs/crates/api-server/src/admin.rs
@@ -4043,10 +4043,11 @@ mod tests {
     use super::{
         AdminDashboardGranularity, AdminDisplayNameDirectory, EditorShowcaseAssetRecord,
         admin_dashboard_user_stats_from_record, admin_dashboard_user_stats_from_result,
-        admin_editor_asset_group_payload, admin_editor_showcase_asset_payload_from_record,
-        append_spacetime_sql_response_chunk, apply_admin_database_table_filters,
-        build_admin_asset_read_url_audit, build_admin_dashboard_chart,
-        build_admin_database_table_row, build_admin_editor_showcase_campaign_image_confirm_request,
+        admin_editor_asset_group_payload, admin_editor_asset_payload_from_record,
+        admin_editor_showcase_asset_payload_from_record, append_spacetime_sql_response_chunk,
+        apply_admin_database_table_filters, build_admin_asset_read_url_audit,
+        build_admin_dashboard_chart, build_admin_database_table_row,
+        build_admin_editor_showcase_campaign_image_confirm_request,
         build_admin_tracking_event_keys_sql, build_admin_tracking_events_sql, build_body_preview,
         build_debug_base_url, build_spacetime_schema_url, clamp_admin_database_table_limit,
         clamp_admin_tracking_event_limit, enforce_admin_request_permission,
@@ -4154,6 +4155,42 @@ mod tests {
         }
     }
 
+    #[test]
+    fn admin_editor_asset_payload_keeps_internal_matting_audit_metadata() {
+        let state = AppState::new(AppConfig::default()).expect("state should build");
+        let mut record = test_admin_editor_asset_record(
+            "asset-matting",
+            "task-matting",
+            "抠图结果",
+            "generated-character-drafts/editor/matting.png",
+            0,
+        );
+        record.model = Some("BgFilter complex".to_string());
+        record.provider = Some("BgFilter".to_string());
+        record.generation_inputs = Some(json!({
+            "fields": [],
+            "references": [],
+            "screenColorHex": "#CFEFFF",
+            "mattingProvider": "BgFilter",
+            "mattingModel": "birefnet"
+        }));
+
+        let payload = admin_editor_asset_payload_from_record(&state, record);
+        let value = serde_json::to_value(payload).expect("admin payload should serialize");
+
+        assert_eq!(value["model"], json!("BgFilter complex"));
+        assert_eq!(value["provider"], json!("BgFilter"));
+        assert_eq!(
+            value["generationInputs"]["screenColorHex"],
+            json!("#CFEFFF")
+        );
+        assert_eq!(
+            value["generationInputs"]["mattingProvider"],
+            json!("BgFilter")
+        );
+        assert_eq!(value["generationInputs"]["mattingModel"], json!("birefnet"));
+    }
+
     #[test]
     fn admin_asset_read_url_audit_keeps_actor_and_target_without_signed_url() {
         let draft = build_admin_asset_read_url_audit(
diff --git a/server-rs/crates/api-server/src/character_animation_assets.rs b/server-rs/crates/api-server/src/character_animation_assets.rs
index de5452fa0..b44a66496 100644
--- a/server-rs/crates/api-server/src/character_animation_assets.rs
+++ b/server-rs/crates/api-server/src/character_animation_assets.rs
@@ -1164,7 +1164,6 @@ pub(crate) async fn generate_editor_video_for_owner(
             prompt: normalized.prompt,
             actual_prompt: Some(generated.submitted_prompt),
             model: normalized.model,
-            provider: "VectorEngine".to_string(),
             task_id,
             duration_seconds: normalized.duration_seconds,
             resolution: normalized.resolution,
@@ -5827,7 +5826,22 @@ fn character_animation_error_response(
     request_context: &RequestContext,
     error: AppError,
 ) -> Response {
-    error.into_response_with_context(Some(request_context))
+    user_visible_character_animation_error(error).into_response_with_context(Some(request_context))
+}
+
+fn user_visible_character_animation_error(error: AppError) -> AppError {
+    if !error.status_code().is_server_error() {
+        return error;
+    }
+
+    tracing::error!(
+        status = %error.status_code(),
+        error = %error,
+        "editor_character_animation_internal_error_hidden_from_user"
+    );
+    AppError::from_status(error.status_code()).with_details(json!({
+        "message": "角色动作生成失败，请稍后重试。",
+    }))
 }
 
 fn editor_video_error_response(request_context: &RequestContext, error: AppError) -> Response {
@@ -5985,6 +5999,23 @@ mod tests {
     use super::*;
     use crate::AppConfig;
 
+    #[test]
+    fn character_animation_server_error_hides_internal_matting_details() {
+        let error = AppError::from_status(StatusCode::BAD_GATEWAY).with_details(json!({
+            "provider": "BgFilter",
+            "message": "BgFilter birefnet provider 调用失败",
+        }));
+        let sanitized = user_visible_character_animation_error(error);
+
+        assert_eq!(sanitized.status_code(), StatusCode::BAD_GATEWAY);
+        assert_eq!(sanitized.body_text(), "角色动作生成失败，请稍后重试。");
+        let details = sanitized.details().expect("稳定错误应保留用户文案");
+        assert!(details.get("provider").is_none());
+        let lower = details.to_string().to_ascii_lowercase();
+        assert!(!lower.contains("bgfilter"));
+        assert!(!lower.contains("birefnet"));
+    }
+
     #[test]
     fn parse_video_data_url_accepts_mp4_payload() {
         let parsed =
diff --git a/server-rs/crates/api-server/src/editor_agent/tool.rs b/server-rs/crates/api-server/src/editor_agent/tool.rs
index a14b96efd..8e9199453 100644
--- a/server-rs/crates/api-server/src/editor_agent/tool.rs
+++ b/server-rs/crates/api-server/src/editor_agent/tool.rs
@@ -333,7 +333,6 @@ impl EditorAgentTool for GenerateImageTool {
             style: None,
             model: Some(args.model),
             screen_color: None,
-            seg_model: None,
             aspect_ratio: Some(args.aspect_ratio),
             image_size: Some(args.image_size),
             reference_image_srcs: Some(reference_image_srcs),
@@ -441,7 +440,6 @@ impl EditorAgentTool for GenerateCharacterTool {
             style: None,
             model: Some(args.model),
             screen_color: Some("auto".to_string()),
-            seg_model: Some("birefnet".to_string()),
             aspect_ratio: Some(args.aspect_ratio),
             image_size: Some(args.image_size),
             reference_image_srcs: Some(reference_image_srcs),
@@ -551,7 +549,6 @@ impl EditorAgentTool for GenerateUiDesignTool {
             style: None,
             model: Some(args.model),
             screen_color: None,
-            seg_model: None,
             aspect_ratio: Some(args.aspect_ratio),
             image_size: Some(args.image_size),
             reference_image_srcs: Some(reference_image_srcs),
@@ -805,7 +802,6 @@ impl EditorAgentTool for GenerateIconSpritesheetTool {
             style: None,
             model: Some(args.model),
             screen_color: Some("auto".to_string()),
-            seg_model: Some("birefnet".to_string()),
             aspect_ratio: Some(args.aspect_ratio),
             image_size: Some(args.image_size),
             project_id: Some(context.conversation.project_id.clone()),
diff --git a/server-rs/crates/api-server/src/editor_project.rs b/server-rs/crates/api-server/src/editor_project.rs
index 306f84447..2227cb190 100644
--- a/server-rs/crates/api-server/src/editor_project.rs
+++ b/server-rs/crates/api-server/src/editor_project.rs
@@ -1,6 +1,6 @@
 use std::{
     borrow::Cow,
-    collections::BTreeMap,
+    collections::{BTreeMap, HashSet},
     io::Cursor,
     sync::{Arc, LazyLock},
     time::{Duration, Instant},
@@ -151,6 +151,7 @@ const EDITOR_UI_DESIGN_ASSET_IMAGE_KIND: &str = "editor_ui_design_asset";
 const EDITOR_LEGACY_GREEN_SCREEN_SOURCE_ASSET_KIND: &str = "editor_green_screen_source";
 const EDITOR_PROVIDER_SOURCE_SLOT: &str = "provider_source";
 pub(crate) const EDITOR_BGFILTER_DEFAULT_SEG_MODEL: &str = "birefnet";
+#[cfg(test)]
 const EDITOR_BGFILTER_SEG_MODEL_ANIME_SEG: &str = "anime-seg";
 const EDITOR_BGFILTER_MATTING_PROVIDER: &str = "BgFilter";
 const EDITOR_ALIYUN_MATTING_PROVIDER: &str = "Aliyun Matting";
@@ -269,7 +270,6 @@ pub struct EditorImageGenerationRequest {
     pub(crate) style: Option<String>,
     pub(crate) model: Option<String>,
     pub(crate) screen_color: Option<String>,
-    pub(crate) seg_model: Option<String>,
     pub(crate) aspect_ratio: Option<String>,
     pub(crate) image_size: Option<String>,
     pub(crate) reference_image_srcs: Option<Vec<String>>,
@@ -327,7 +327,6 @@ pub struct EditorIconSpritesheetGenerationRequest {
     pub(crate) style: Option<String>,
     pub(crate) model: Option<String>,
     pub(crate) screen_color: Option<String>,
-    pub(crate) seg_model: Option<String>,
     pub(crate) aspect_ratio: Option<String>,
     pub(crate) image_size: Option<String>,
     pub(crate) project_id: Option<String>,
@@ -352,7 +351,6 @@ pub struct EditorUiDesignAssetExtractionRequest {
     pub(crate) source_image_src: String,
     pub(crate) model: Option<String>,
     pub(crate) screen_color: Option<String>,
-    pub(crate) seg_model: Option<String>,
     pub(crate) reference_image_srcs: Option<Vec<String>>,
     pub(crate) aspect_ratio: String,
     pub(crate) image_size: String,
@@ -773,7 +771,6 @@ pub struct EditorImageGenerationResponse {
     prompt: String,
     actual_prompt: Option<String>,
     model: String,
-    provider: &'static str,
     task_id: String,
     resource: Option<EditorProjectResourcePayload>,
     asset: Option<EditorAssetPayload>,
@@ -793,7 +790,6 @@ pub struct EditorBackgroundRemovalResponse {
     source_type: &'static str,
     task_id: String,
     elapsed_ms: u64,
-    provider: &'static str,
     resource: Option<EditorProjectResourcePayload>,
     asset: Option<EditorAssetPayload>,
     project: Option<EditorProjectPayload>,
@@ -829,7 +825,6 @@ pub struct EditorIconSpritesheetGenerationResponse {
     prompt: String,
     actual_prompt: Option<String>,
     model: String,
-    provider: &'static str,
     task_id: String,
     price_mud_points: u32,
     spritesheet_resource: Option<EditorProjectResourcePayload>,
@@ -898,6 +893,7 @@ pub struct EditorProjectResourcePayload {
     source_type: String,
     prompt: Option<String>,
     actual_prompt: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
     model: Option<String>,
     #[serde(skip_serializing_if = "Option::is_none")]
     provider: Option<String>,
@@ -969,7 +965,9 @@ pub struct EditorAssetPayload {
     source_type: String,
     prompt: Option<String>,
     actual_prompt: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
     model: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
     provider: Option<String>,
     task_id: Option<String>,
     asset_kind: Option<String>,
@@ -1259,8 +1257,9 @@ pub async fn create_editor_project_resource(
     Extension(authenticated): Extension<AuthenticatedAccessToken>,
     Json(payload): Json<EditorProjectResourceCreateRequest>,
 ) -> Result<Json<Value>, AppError> {
-    let generation_inputs_json =
-        serialize_editor_asset_metadata(payload.generation_inputs.clone())?;
+    let generation_inputs_json = serialize_editor_asset_metadata(
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.clone()),
+    )?;
     let object_key = normalize_editor_object_key(payload.object_key);
     let image_src = normalize_editor_persisted_media_src(payload.image_src, object_key.as_deref())?;
     let resource = state
@@ -1427,8 +1426,9 @@ pub async fn create_editor_asset(
     Extension(authenticated): Extension<AuthenticatedAccessToken>,
     Json(payload): Json<EditorAssetCreateRequest>,
 ) -> Result<Json<Value>, AppError> {
-    let generation_inputs_json =
-        serialize_editor_asset_metadata(payload.generation_inputs.clone())?;
+    let generation_inputs_json = serialize_editor_asset_metadata(
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.clone()),
+    )?;
     let object_key = normalize_editor_object_key(payload.object_key);
     let image_src = normalize_editor_persisted_media_src(payload.image_src, object_key.as_deref())?;
     let asset = state
@@ -1575,7 +1575,9 @@ pub async fn generate_editor_image(
     Extension(authenticated): Extension<AuthenticatedAccessToken>,
     payload: Result<Json<EditorImageGenerationRequest>, JsonRejection>,
 ) -> Result<Json<Value>, AppError> {
-    let Json(payload) = parse_editor_generation_json_payload(payload)?;
+    let Json(mut payload) = parse_editor_generation_json_payload(payload)?;
+    payload.generation_inputs =
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.take());
     let caller = EditorGenerationCaller::from_authenticated(&authenticated);
     if !state.config.external_generation_mode.is_inline() {
         ensure_editor_reference_image_sources_are_stable(
@@ -1642,8 +1644,10 @@ pub(crate) async fn generate_editor_image_for_owner(
     state: &AppState,
     request_context: &RequestContext,
     caller: EditorGenerationCaller,
-    payload: EditorImageGenerationRequest,
+    mut payload: EditorImageGenerationRequest,
 ) -> Result<Json<Value>, AppError> {
+    payload.generation_inputs =
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.take());
     ensure_editor_reference_image_sources_are_stable(
         payload.reference_image_srcs.as_deref(),
         "editor-image-generation",
@@ -1669,13 +1673,7 @@ pub(crate) async fn generate_editor_image_for_owner(
     // 仍白发一次 gpt-5-mini 决策。这里先固化决策需要、但随后会被 payload 消费掉的输入。
     let requested_screen_color = payload.screen_color.clone();
     let reference_count = payload.reference_image_srcs.as_ref().map_or(0, Vec::len);
-    let seg_model = if is_character_generation {
-        Some(parse_editor_bgfilter_seg_model(
-            payload.seg_model.as_deref(),
-        )?)
-    } else {
-        None
-    };
+    let seg_model = is_character_generation.then_some(EDITOR_BGFILTER_DEFAULT_SEG_MODEL);
     let is_ui_design_generation = matches!(normalized_kind, Some("ui-design"));
     let is_publication_material_generation =
         matches!(normalized_kind, Some("publication-material"));
@@ -2027,7 +2025,6 @@ pub(crate) async fn generate_editor_image_for_owner(
                         prompt: role_setting,
                         actual_prompt: generated.actual_prompt,
                         model: generation_options.model.to_string(),
-                        provider: "VectorEngine",
                         task_id: generated.task_id,
                         resource: source_record.resource,
                         asset: source_record.asset,
@@ -2097,7 +2094,6 @@ pub(crate) async fn generate_editor_image_for_owner(
                     prompt: role_setting,
                     actual_prompt: generated.actual_prompt,
                     model: generation_options.model.to_string(),
-                    provider: "VectorEngine",
                     task_id: generated.task_id,
                     resource: source_record.resource,
                     asset: source_record.asset,
@@ -2241,7 +2237,6 @@ pub(crate) async fn generate_editor_image_for_owner(
             prompt: role_setting,
             actual_prompt: generated.actual_prompt,
             model: generation_options.model.to_string(),
-            provider: "VectorEngine",
             task_id: generated.task_id,
             resource: generated_asset.resource,
             asset: generated_asset.asset,
@@ -3553,8 +3548,10 @@ pub async fn edit_editor_image(
     State(state): State<AppState>,
     Extension(request_context): Extension<RequestContext>,
     Extension(authenticated): Extension<AuthenticatedAccessToken>,
-    Json(payload): Json<EditorImageEditRequest>,
+    Json(mut payload): Json<EditorImageEditRequest>,
 ) -> Result<Json<Value>, AppError> {
+    payload.generation_inputs =
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.take());
     let caller = EditorGenerationCaller::from_authenticated(&authenticated);
     if !state.config.external_generation_mode.is_inline() {
         ensure_editor_reference_image_source_is_stable(
@@ -3614,8 +3611,10 @@ pub(crate) async fn edit_editor_image_for_owner(
     state: &AppState,
     request_context: &RequestContext,
     caller: EditorGenerationCaller,
-    payload: EditorImageEditRequest,
+    mut payload: EditorImageEditRequest,
 ) -> Result<Json<Value>, AppError> {
+    payload.generation_inputs =
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.take());
     ensure_editor_reference_image_source_is_stable(
         payload.source_image_src.as_str(),
         "editor-image-edit",
@@ -3871,7 +3870,6 @@ pub(crate) async fn edit_editor_image_for_owner(
             prompt,
             actual_prompt: generated.actual_prompt,
             model: generation_options.model.to_string(),
-            provider: "VectorEngine",
             task_id: generated.task_id,
             resource: generated_asset.resource,
             asset: generated_asset.asset,
@@ -3885,8 +3883,10 @@ pub async fn remove_editor_image_background(
     State(state): State<AppState>,
     Extension(request_context): Extension<RequestContext>,
     Extension(authenticated): Extension<AuthenticatedAccessToken>,
-    Json(payload): Json<EditorBackgroundRemovalRequest>,
+    Json(mut payload): Json<EditorBackgroundRemovalRequest>,
 ) -> Result<Json<Value>, AppError> {
+    payload.generation_inputs =
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.take());
     let caller = EditorGenerationCaller::from_authenticated(&authenticated);
     ensure_editor_reference_image_source_is_stable(
         payload.source_image_src.as_str(),
@@ -3921,8 +3921,10 @@ pub(crate) async fn remove_editor_image_background_for_owner(
     state: &AppState,
     request_context: &RequestContext,
     caller: EditorGenerationCaller,
-    payload: EditorBackgroundRemovalRequest,
+    mut payload: EditorBackgroundRemovalRequest,
 ) -> Result<Json<Value>, AppError> {
+    payload.generation_inputs =
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.take());
     let started_at = Instant::now();
     caller.report_processing_phase(state).await?;
     let source_object_key = resolve_editor_reference_object_key_for_owner(
@@ -3931,6 +3933,15 @@ pub(crate) async fn remove_editor_image_background_for_owner(
         payload.source_image_src.as_str(),
     )
     .await?;
+    let source_model = resolve_editor_background_removal_source_model(
+        state,
+        caller.owner_user_id.as_str(),
+        payload.project_id.as_deref(),
+        payload.source_resource_id.as_deref(),
+        payload.source_image_src.as_str(),
+        source_object_key.as_str(),
+    )
+    .await?;
     validate_editor_background_removal_source(state, source_object_key.as_str()).await?;
     let matting_audit = crate::external_api_audit::ExternalApiAuditContext {
         user_id: caller.audit_subject_user_id.clone(),
@@ -3966,6 +3977,11 @@ pub(crate) async fn remove_editor_image_background_for_owner(
     let image_src = editor_media_src_from_object_key(persisted.object_key.as_str());
     let asset_label =
         resolve_editor_generated_asset_label(payload.asset_label.clone(), "去背景结果");
+    let generation_inputs = apply_editor_matting_metadata_to_generation_inputs(
+        payload.generation_inputs,
+        EDITOR_BGFILTER_MATTING_PROVIDER,
+        EDITOR_BGFILTER_DEFAULT_SEG_MODEL,
+    );
     let generated_asset = persist_editor_generated_asset(
         state,
         PersistEditorGeneratedAssetInput {
@@ -3980,14 +3996,14 @@ pub(crate) async fn remove_editor_image_background_for_owner(
             height: removed.height,
             prompt: "remove background".to_string(),
             actual_prompt: None,
-            model: "BgFilter complex".to_string(),
+            model: source_model.unwrap_or_default(),
             provider: "BgFilter".to_string(),
             task_id: task_id.clone(),
             group_task_id: None,
             group_task_expected_asset_count: None,
             source_resource_id: payload.source_resource_id,
             asset_kind: payload.asset_kind,
-            generation_inputs: payload.generation_inputs,
+            generation_inputs,
             thumbnail_src: None,
             generation_cost_mud_points: 0,
         },
@@ -4026,7 +4042,6 @@ pub(crate) async fn remove_editor_image_background_for_owner(
             source_type: "generated",
             task_id,
             elapsed_ms: u64::try_from(started_at.elapsed().as_millis()).unwrap_or(u64::MAX),
-            provider: "BgFilter",
             resource: generated_asset.resource,
             asset: generated_asset.asset,
             project: completed_project,
@@ -4365,26 +4380,6 @@ fn sign_editor_private_object_read_url(
         .map_err(|error| map_oss_error(error, "aliyun-oss"))
 }
 
-fn parse_editor_bgfilter_seg_model(value: Option<&str>) -> Result<&'static str, AppError> {
-    let Some(value) = value.map(str::trim).filter(|value| !value.is_empty()) else {
-        return Ok(EDITOR_BGFILTER_DEFAULT_SEG_MODEL);
-    };
-    match value.to_ascii_lowercase().as_str() {
-        EDITOR_BGFILTER_DEFAULT_SEG_MODEL => Ok(EDITOR_BGFILTER_DEFAULT_SEG_MODEL),
-        EDITOR_BGFILTER_SEG_MODEL_ANIME_SEG => Ok(EDITOR_BGFILTER_SEG_MODEL_ANIME_SEG),
-        _ => Err(
-            AppError::from_status(StatusCode::BAD_REQUEST).with_details(json!({
-                "provider": "bgfilter",
-                "message": "segModel 必须是 birefnet 或 anime-seg。",
-                "allowed": [
-                    EDITOR_BGFILTER_DEFAULT_SEG_MODEL,
-                    EDITOR_BGFILTER_SEG_MODEL_ANIME_SEG,
-                ],
-            })),
-        ),
-    }
-}
-
 struct PersistEditorSpritesheetSlicesInput {
     owner_user_id: String,
     project_id: Option<String>,
@@ -4511,7 +4506,9 @@ pub async fn generate_editor_icon_spritesheet(
     Extension(authenticated): Extension<AuthenticatedAccessToken>,
     payload: Result<Json<EditorIconSpritesheetGenerationRequest>, JsonRejection>,
 ) -> Result<Json<Value>, AppError> {
-    let Json(payload) = parse_editor_generation_json_payload(payload)?;
+    let Json(mut payload) = parse_editor_generation_json_payload(payload)?;
+    payload.generation_inputs =
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.take());
     let caller = EditorGenerationCaller::from_authenticated(&authenticated);
     if !state.config.external_generation_mode.is_inline() {
         ensure_editor_reference_image_source_is_stable(
@@ -4568,8 +4565,10 @@ pub(crate) async fn generate_editor_icon_spritesheet_for_owner(
     state: &AppState,
     request_context: &RequestContext,
     caller: EditorGenerationCaller,
-    payload: EditorIconSpritesheetGenerationRequest,
+    mut payload: EditorIconSpritesheetGenerationRequest,
 ) -> Result<Json<Value>, AppError> {
+    payload.generation_inputs =
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.take());
     ensure_editor_reference_image_source_is_stable(
         payload.reference_image_src.as_str(),
         "editor-icon-spritesheet",
@@ -4589,7 +4588,7 @@ pub(crate) async fn generate_editor_icon_spritesheet_for_owner(
     // 仍白发一次 gpt-5-mini 决策。这里先固化决策需要的输入。
     let requested_screen_color = payload.screen_color.clone();
     let reference_count = 1 + payload.reference_image_srcs.as_ref().map_or(0, Vec::len);
-    let seg_model = parse_editor_bgfilter_seg_model(payload.seg_model.as_deref())?;
+    let seg_model = EDITOR_BGFILTER_DEFAULT_SEG_MODEL;
     let mut reference_images =
         Vec::with_capacity(1 + payload.reference_image_srcs.as_ref().map_or(0, Vec::len));
     reference_images.push(
@@ -4819,7 +4818,6 @@ pub(crate) async fn generate_editor_icon_spritesheet_for_owner(
                     prompt,
                     actual_prompt: generated.actual_prompt,
                     model: generation_options.model.to_string(),
-                    provider: "VectorEngine",
                     task_id: generated.task_id,
                     price_mud_points: expected_price_mud_points,
                     spritesheet_resource: source_record.resource,
@@ -4887,7 +4885,6 @@ pub(crate) async fn generate_editor_icon_spritesheet_for_owner(
                 prompt,
                 actual_prompt: generated.actual_prompt,
                 model: generation_options.model.to_string(),
-                provider: "VectorEngine",
                 task_id: generated.task_id,
                 price_mud_points: expected_price_mud_points,
                 spritesheet_resource: source_record.resource,
@@ -5071,7 +5068,6 @@ pub(crate) async fn generate_editor_icon_spritesheet_for_owner(
             prompt,
             actual_prompt: generated.actual_prompt,
             model: generation_options.model.to_string(),
-            provider: "VectorEngine",
             task_id: generated.task_id,
             price_mud_points: expected_price_mud_points,
             spritesheet_resource: spritesheet_record.resource,
@@ -5439,8 +5435,10 @@ pub async fn extract_editor_ui_design_assets(
     State(state): State<AppState>,
     Extension(request_context): Extension<RequestContext>,
     Extension(authenticated): Extension<AuthenticatedAccessToken>,
-    Json(payload): Json<EditorUiDesignAssetExtractionRequest>,
+    Json(mut payload): Json<EditorUiDesignAssetExtractionRequest>,
 ) -> Result<Json<Value>, AppError> {
+    payload.generation_inputs =
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.take());
     let caller = EditorGenerationCaller::from_authenticated(&authenticated);
     if !state.config.external_generation_mode.is_inline() {
         ensure_editor_reference_image_source_is_stable(
@@ -5497,8 +5495,10 @@ pub(crate) async fn extract_editor_ui_design_assets_for_owner(
     state: &AppState,
     request_context: &RequestContext,
     caller: EditorGenerationCaller,
-    payload: EditorUiDesignAssetExtractionRequest,
+    mut payload: EditorUiDesignAssetExtractionRequest,
 ) -> Result<Json<Value>, AppError> {
+    payload.generation_inputs =
+        sanitize_editor_client_generation_inputs(payload.generation_inputs.take());
     ensure_editor_reference_image_source_is_stable(
         payload.source_image_src.as_str(),
         "editor-ui-design-asset-extraction",
@@ -5519,7 +5519,7 @@ pub(crate) async fn extract_editor_ui_design_assets_for_owner(
         "从 UI 设计图提取被红色框选的素材，输出 spritesheet。目标规格 {} {}。",
         payload.aspect_ratio, payload.image_size
     );
-    let seg_model = parse_editor_bgfilter_seg_model(payload.seg_model.as_deref())?;
+    let seg_model = EDITOR_BGFILTER_DEFAULT_SEG_MODEL;
     let reference_image = parse_editor_reference_image(
         state,
         caller.owner_user_id.as_str(),
@@ -5745,7 +5745,6 @@ pub(crate) async fn extract_editor_ui_design_assets_for_owner(
                     prompt,
                     actual_prompt: generated.actual_prompt,
                     model: generation_options.model.to_string(),
-                    provider: "VectorEngine",
                     task_id: generated.task_id,
                     price_mud_points: expected_price_mud_points,
                     spritesheet_resource: source_record.resource,
@@ -5798,7 +5797,6 @@ pub(crate) async fn extract_editor_ui_design_assets_for_owner(
                 prompt,
                 actual_prompt: generated.actual_prompt,
                 model: generation_options.model.to_string(),
-                provider: "VectorEngine",
                 task_id: generated.task_id,
                 price_mud_points: expected_price_mud_points,
                 spritesheet_resource: source_record.resource,
@@ -5970,7 +5968,6 @@ pub(crate) async fn extract_editor_ui_design_assets_for_owner(
             prompt,
             actual_prompt: generated.actual_prompt,
             model: generation_options.model.to_string(),
-            provider: "VectorEngine",
             task_id: generated.task_id,
             price_mud_points: expected_price_mud_points,
             spritesheet_resource: spritesheet_record.resource,
@@ -6268,15 +6265,15 @@ pub(crate) fn editor_project_resource_payload_from_record(
         source_type: record.source_type,
         prompt: record.prompt,
         actual_prompt: record.actual_prompt,
-        model: record.model,
-        provider: record.provider,
+        model: sanitize_editor_user_model(record.model),
+        provider: None,
         task_id: record.task_id,
         source_resource_id: record.source_resource_id,
         asset_kind: record.asset_kind,
         showcase_category: None,
         generation_inputs: record
             .generation_inputs
-            .map(sanitize_editor_payload_inline_media),
+            .map(sanitize_editor_user_generation_inputs),
         public_showcase_enabled: record.public_showcase_enabled,
         review_status: None,
         display_enabled: None,
@@ -6310,15 +6307,15 @@ fn editor_project_resource_payload_from_showcase_record(
         source_type: record.source_type,
         prompt: record.prompt,
         actual_prompt: record.actual_prompt,
-        model: record.model,
-        provider: record.provider,
+        model: sanitize_editor_user_model(record.model),
+        provider: None,
         task_id: record.task_id,
         source_resource_id: record.source_resource_id,
         asset_kind: record.asset_kind,
         showcase_category: record.showcase_category,
         generation_inputs: record
             .generation_inputs
-            .map(sanitize_editor_payload_inline_media),
+            .map(sanitize_editor_user_generation_inputs),
         public_showcase_enabled: record.display_enabled,
         review_status: Some(record.review_status),
         display_enabled: Some(record.display_enabled),
@@ -6339,14 +6336,26 @@ fn editor_project_resource_public_payload_from_record(
         resolve_editor_project_resource_public_author(state, payload.owner_user_id.as_str());
     payload.author_display_name = display_name;
     payload.author_public_user_code = public_user_code;
-    payload.provider = None;
-    payload.generation_inputs = payload
-        .generation_inputs
-        .map(sanitize_editor_public_generation_inputs);
     payload
 }
 
-fn sanitize_editor_public_generation_inputs(mut value: Value) -> Value {
+fn is_editor_internal_processing_model(model: &str) -> bool {
+    matches!(
+        model.trim().to_ascii_lowercase().as_str(),
+        "anime-seg"
+            | "bgfilter complex"
+            | "birefnet"
+            | "connected-components"
+            | "screen-color-keying"
+            | "segment-common-image"
+    )
+}
+
+fn sanitize_editor_user_model(model: Option<String>) -> Option<String> {
+    normalize_optional_string(model).filter(|model| !is_editor_internal_processing_model(model))
+}
+
+fn sanitize_editor_reserved_generation_inputs(mut value: Value) -> Value {
     if let Some(object) = value.as_object_mut() {
         for field in ["screenColorHex", "mattingProvider", "mattingModel"] {
             object.remove(field);
@@ -6355,6 +6364,14 @@ fn sanitize_editor_public_generation_inputs(mut value: Value) -> Value {
     value
 }
 
+pub(crate) fn sanitize_editor_client_generation_inputs(value: Option<Value>) -> Option<Value> {
+    value.map(sanitize_editor_reserved_generation_inputs)
+}
+
+fn sanitize_editor_user_generation_inputs(value: Value) -> Value {
+    sanitize_editor_reserved_generation_inputs(sanitize_editor_payload_inline_media(value))
+}
+
 fn resolve_editor_project_resource_public_author(
     state: &AppState,
     owner_user_id: &str,
@@ -6421,13 +6438,13 @@ pub(crate) fn editor_asset_payload_from_record(record: EditorAssetRecord) -> Edi
         source_type: record.source_type,
         prompt: record.prompt,
         actual_prompt: record.actual_prompt,
-        model: record.model,
-        provider: record.provider,
+        model: sanitize_editor_user_model(record.model),
+        provider: None,
         task_id: record.task_id,
         asset_kind: record.asset_kind,
         generation_inputs: record
             .generation_inputs
-            .map(sanitize_editor_payload_inline_media),
+            .map(sanitize_editor_user_generation_inputs),
         source_resource_id: record.source_resource_id,
         public_showcase_enabled: record.public_showcase_enabled,
         thumbnail_src: normalize_optional_string(record.thumbnail_src),
@@ -6523,6 +6540,21 @@ fn sanitize_editor_payload_media_value(
                     set_optional_json_string_field(object, "assetKind", media.asset_kind.as_ref());
                 }
             }
+            if is_editor_canvas_resource_layer(object) {
+                object.remove("provider");
+                if object
+                    .get("model")
+                    .and_then(Value::as_str)
+                    .is_some_and(is_editor_internal_processing_model)
+                {
+                    object.remove("model");
+                }
+                if let Some(generation_inputs) = object.get_mut("generationInputs") {
+                    let sanitized =
+                        sanitize_editor_reserved_generation_inputs(generation_inputs.take());
+                    *generation_inputs = sanitized;
+                }
+            }
             for child in object.values_mut() {
                 sanitize_editor_payload_media_value(child, current_media.as_ref(), resource_media);
             }
@@ -6541,6 +6573,19 @@ fn sanitize_editor_payload_media_value(
     }
 }
 
+fn is_editor_canvas_resource_layer(object: &serde_json::Map<String, Value>) -> bool {
+    if object.get("itemType").and_then(Value::as_str) == Some("generation-dialog") {
+        return false;
+    }
+    object
+        .get("layerId")
+        .and_then(Value::as_str)
+        .is_some_and(|layer_id| !layer_id.trim().is_empty())
+        && ["resourceId", "sourceAssetId"]
+            .iter()
+            .any(|field| object.get(*field).and_then(Value::as_str).is_some())
+}
+
 fn rewrite_or_remove_inline_media_field(
     object: &mut serde_json::Map<String, Value>,
     field: &str,
@@ -6589,6 +6634,7 @@ pub(crate) async fn persist_editor_generated_asset(
     let generation_inputs_json = serialize_editor_asset_metadata(input.generation_inputs.clone())?;
     let object_key = normalize_editor_object_key(input.object_key);
     let asset_object_id = normalize_optional_string(input.asset_object_id);
+    let model = normalize_optional_string(Some(input.model));
     let image_src = normalize_editor_persisted_media_src(input.image_src, object_key.as_deref())?;
     let now_micros = current_utc_micros();
     let resource = if let Some(project_id) = normalize_optional_string(input.project_id.clone()) {
@@ -6606,7 +6652,7 @@ pub(crate) async fn persist_editor_generated_asset(
                 source_type: "generated".to_string(),
                 prompt: Some(input.prompt.clone()),
                 actual_prompt: input.actual_prompt.clone(),
-                model: Some(input.model.clone()),
+                model: model.clone(),
                 provider: Some(input.provider.clone()),
                 task_id: Some(input.task_id.clone()),
                 source_resource_id: normalize_optional_string(input.source_resource_id.clone()),
@@ -6643,7 +6689,7 @@ pub(crate) async fn persist_editor_generated_asset(
                 source_type: "generated".to_string(),
                 prompt: Some(input.prompt),
                 actual_prompt: input.actual_prompt,
-                model: Some(input.model),
+                model,
                 provider: Some(input.provider),
                 task_id: Some(input.task_id),
                 asset_kind: normalize_optional_string(input.asset_kind),
@@ -6667,7 +6713,7 @@ pub(crate) async fn persist_editor_generated_asset(
 
 pub(crate) async fn persist_editor_generated_media_asset(
     state: &AppState,
-    input: PersistEditorGeneratedAssetRequest,
+    mut input: PersistEditorGeneratedAssetRequest,
 ) -> Result<
     (
         Option<EditorProjectResourcePayload>,
@@ -6675,6 +6721,8 @@ pub(crate) async fn persist_editor_generated_media_asset(
     ),
     AppError,
 > {
+    input.generation_inputs =
+        sanitize_editor_client_generation_inputs(input.generation_inputs.take());
     let persisted = persist_editor_generated_asset(
         state,
         PersistEditorGeneratedAssetInput {
@@ -8172,6 +8220,183 @@ pub(crate) async fn resolve_editor_reference_object_key_for_owner(
     Ok(object_key)
 }
 
+async fn resolve_editor_background_removal_source_model(
+    state: &AppState,
+    owner_user_id: &str,
+    project_id: Option<&str>,
+    source_resource_id: Option<&str>,
+    source_reference: &str,
+    source_object_key: &str,
+) -> Result<Option<String>, AppError> {
+    let projects = state
+        .spacetime_client()
+        .list_editor_projects(owner_user_id.to_string())
+        .await
+        .map_err(map_editor_project_error)?;
+    let library = state
+        .spacetime_client()
+        .get_editor_asset_library(owner_user_id.to_string(), current_utc_micros())
+        .await
+        .map_err(map_editor_project_error)?;
+    resolve_editor_background_removal_source_model_from_records(
+        projects.as_slice(),
+        library.assets.as_slice(),
+        project_id,
+        source_resource_id,
+        source_reference,
+        source_object_key,
+    )
+}
+
+fn resolve_editor_background_removal_source_model_from_records(
+    projects: &[EditorProjectRecord],
+    assets: &[EditorAssetRecord],
+    project_id: Option<&str>,
+    source_resource_id: Option<&str>,
+    source_reference: &str,
+    source_object_key: &str,
+) -> Result<Option<String>, AppError> {
+    let project_id = project_id.map(str::trim).filter(|value| !value.is_empty());
+    let source_resource_id = source_resource_id
+        .map(str::trim)
+        .filter(|value| !value.is_empty());
+    let source_reference = source_reference.trim();
+
+    if let Some(source_resource_id) = source_resource_id {
+        let resource = if let Some(project_id) = project_id {
+            projects
+                .iter()
+                .find(|project| project.project_id.trim() == project_id)
+                .and_then(|project| {
+                    project
+                        .resources
+                        .iter()
+                        .find(|resource| resource.resource_id.trim() == source_resource_id)
+                })
+        } else {
+            find_editor_background_removal_resource(projects, None, source_resource_id)
+        }
+        .ok_or_else(|| editor_reference_image_forbidden(source_object_key))?;
+        if !editor_record_object_key_matches(
+            resource.object_key.as_deref(),
+            resource.image_src.as_str(),
+            source_object_key,
+        ) {
+            return Err(editor_reference_image_forbidden(source_object_key));
+        }
+        return Ok(resolve_editor_background_removal_resource_model(
+            projects, resource, project_id,
+        ));
+    }
+
+    let resource = project_id
+        .and_then(|project_id| {
+            projects
+                .iter()
+                .find(|project| project.project_id.trim() == project_id)
+        })
+        .and_then(|project| {
+            project.resources.iter().find(|resource| {
+                resource.resource_id.trim() == source_reference
+                    || editor_record_object_key_matches(
+                        resource.object_key.as_deref(),
+                        resource.image_src.as_str(),
+                        source_object_key,
+                    )
+            })
+        })
+        .or_else(|| {
+            projects
+                .iter()
+                .flat_map(|project| project.resources.iter())
+                .find(|resource| {
+                    resource.resource_id.trim() == source_reference
+                        || editor_record_object_key_matches(
+                            resource.object_key.as_deref(),
+                            resource.image_src.as_str(),
+                            source_object_key,
+                        )
+                })
+        });
+    if let Some(resource) = resource {
+        return Ok(resolve_editor_background_removal_resource_model(
+            projects, resource, project_id,
+        ));
+    }
+
+    let asset = assets.iter().find(|asset| {
+        asset.asset_id.trim() == source_reference
+            || editor_record_object_key_matches(
+                asset.object_key.as_deref(),
+                asset.image_src.as_str(),
+                source_object_key,
+            )
+    });
+    Ok(asset.and_then(|asset| {
+        sanitize_editor_user_model(asset.model.clone()).or_else(|| {
+            asset.source_resource_id.as_deref().and_then(|resource_id| {
+                find_editor_background_removal_resource(projects, project_id, resource_id).and_then(
+                    |resource| {
+                        resolve_editor_background_removal_resource_model(
+                            projects, resource, project_id,
+                        )
+                    },
+                )
+            })
+        })
+    }))
+}
+
+fn find_editor_background_removal_resource<'a>(
+    projects: &'a [EditorProjectRecord],
+    project_id: Option<&str>,
+    resource_id: &str,
+) -> Option<&'a EditorProjectResourceRecord> {
+    let resource_id = resource_id.trim();
+    project_id
+        .and_then(|project_id| {
+            projects
+                .iter()
+                .find(|project| project.project_id.trim() == project_id)
+        })
+        .and_then(|project| {
+            project
+                .resources
+                .iter()
+                .find(|resource| resource.resource_id.trim() == resource_id)
+        })
+        .or_else(|| {
+            projects
+                .iter()
+                .flat_map(|project| project.resources.iter())
+                .find(|resource| resource.resource_id.trim() == resource_id)
+        })
+}
+
+fn resolve_editor_background_removal_resource_model(
+    projects: &[EditorProjectRecord],
+    starting_resource: &EditorProjectResourceRecord,
+    preferred_project_id: Option<&str>,
+) -> Option<String> {
+    let mut current = Some(starting_resource);
+    let mut visited_resource_ids = HashSet::new();
+    while let Some(resource) = current {
+        if !visited_resource_ids.insert(resource.resource_id.trim().to_string()) {
+            return None;
+        }
+        if let Some(model) = sanitize_editor_user_model(resource.model.clone()) {
+            return Some(model);
+        }
+        current = resource
+            .source_resource_id
+            .as_deref()
+            .and_then(|resource_id| {
+                find_editor_background_removal_resource(projects, preferred_project_id, resource_id)
+            });
+    }
+    None
+}
+
 fn normalize_editor_reference_image_sources(sources: Option<&[String]>, limit: usize) -> Vec<&str> {
     sources
         .unwrap_or(&[])
@@ -9027,6 +9252,106 @@ mod tests {
         }
     }
 
+    fn test_editor_project_resource_record(
+        resource_id: &str,
+        project_id: &str,
+        object_key: &str,
+        model: Option<&str>,
+        source_resource_id: Option<&str>,
+    ) -> EditorProjectResourceRecord {
+        EditorProjectResourceRecord {
+            resource_id: resource_id.to_string(),
+            project_id: project_id.to_string(),
+            owner_user_id: "user-1".to_string(),
+            asset_object_id: None,
+            image_src: format!("/{object_key}"),
+            object_key: Some(object_key.to_string()),
+            width: 512,
+            height: 512,
+            source_type: "generated".to_string(),
+            prompt: None,
+            actual_prompt: None,
+            model: model.map(ToOwned::to_owned),
+            provider: Some("internal-provider".to_string()),
+            task_id: None,
+            source_resource_id: source_resource_id.map(ToOwned::to_owned),
+            asset_kind: None,
+            generation_inputs: None,
+            public_showcase_enabled: false,
+            created_at: "2026-07-31T00:00:00.000Z".to_string(),
+            updated_at: "2026-07-31T00:00:00.000Z".to_string(),
+        }
+    }
+
+    fn test_editor_project_record(
+        project_id: &str,
+        resources: Vec<EditorProjectResourceRecord>,
+    ) -> EditorProjectRecord {
+        let viewport = EditorCanvasViewportRecord {
+            x: 0.0,
+            y: 0.0,
+            scale: 1.0,
+        };
+        EditorProjectRecord {
+            project_id: project_id.to_string(),
+            owner_user_id: "user-1".to_string(),
+            title: "测试项目".to_string(),
+            canvas: EditorCanvasRecord {
+                canvas_id: format!("canvas-{project_id}"),
+                project_id: project_id.to_string(),
+                title: "测试画布".to_string(),
+                viewport: viewport.clone(),
+                layers: json!([]),
+                revision: 1,
+                layout_storage_version: 2,
+                background_color: None,
+                created_at: "2026-07-31T00:00:00.000Z".to_string(),
+                updated_at: "2026-07-31T00:00:00.000Z".to_string(),
+            },
+            viewport,
+            layers: json!([]),
+            resources,
+            created_at: "2026-07-31T00:00:00.000Z".to_string(),
+            updated_at: "2026-07-31T00:00:00.000Z".to_string(),
+        }
+    }
+
+    fn test_editor_asset_record(
+        asset_id: &str,
+        object_key: &str,
+        model: Option<&str>,
+        source_resource_id: Option<&str>,
+    ) -> EditorAssetRecord {
+        EditorAssetRecord {
+            asset_id: asset_id.to_string(),
+            folder_id: "project".to_string(),
+            label: "测试素材".to_string(),
+            asset_object_id: None,
+            image_src: format!("/{object_key}"),
+            object_key: Some(object_key.to_string()),
+            width: 512,
+            height: 512,
+            source_type: "generated".to_string(),
+            prompt: None,
+            actual_prompt: None,
+            model: model.map(ToOwned::to_owned),
+            provider: Some("internal-provider".to_string()),
+            task_id: None,
+            asset_kind: None,
+            generation_inputs: None,
+            source_resource_id: source_resource_id.map(ToOwned::to_owned),
+            public_showcase_enabled: Some(false),
+            thumbnail_src: None,
+            generation_cost_mud_points: 0,
+            showcase_id: None,
+            showcase_review_status: None,
+            showcase_display_enabled: None,
+            showcase_like_count: None,
+            created_at: "2026-07-31T00:00:00.000Z".to_string(),
+            updated_at: "2026-07-31T00:00:00.000Z".to_string(),
+        }
+    }
+
     #[test]
     fn editor_project_resource_payload_includes_owner_user_id() {
         let payload = editor_project_resource_payload_from_record(EditorProjectResourceRecord {
@@ -9097,10 +9422,12 @@ mod tests {
     fn editor_project_resource_public_payload_removes_internal_generation_metadata() {
         let state = AppState::new(AppConfig::default()).expect("state should build");
         let record = EditorShowcaseAssetRecord {
+            model: Some("BgFilter complex".to_string()),
             provider: Some("BgFilter".to_string()),
             generation_inputs: Some(json!({
                 "fields": [{"title": "处理阶段", "value": "角色抠图"}],
                 "references": [{"refType": "asset", "refId": "asset-source"}],
+                "characterAnimation": {"action": "idle"},
                 "screenColorHex": "#CFEFFF",
                 "mattingProvider": "BgFilter",
                 "mattingModel": "birefnet"
@@ -9112,18 +9439,17 @@ mod tests {
             editor_project_resource_payload_from_showcase_record(record.clone()),
         )
         .expect("owner payload should serialize");
-        assert_eq!(owner_payload["provider"], json!("BgFilter"));
+        assert!(owner_payload.get("provider").is_none());
+        assert!(owner_payload.get("model").is_none());
+        let owner_generation_inputs = owner_payload["generationInputs"]
+            .as_object()
+            .expect("owner generation inputs should stay object");
+        assert!(!owner_generation_inputs.contains_key("screenColorHex"));
+        assert!(!owner_generation_inputs.contains_key("mattingProvider"));
+        assert!(!owner_generation_inputs.contains_key("mattingModel"));
         assert_eq!(
-            owner_payload["generationInputs"]["screenColorHex"],
-            json!("#CFEFFF")
-        );
-        assert_eq!(
-            owner_payload["generationInputs"]["mattingProvider"],
-            json!("BgFilter")
-        );
-        assert_eq!(
-            owner_payload["generationInputs"]["mattingModel"],
-            json!("birefnet")
+            owner_generation_inputs["characterAnimation"],
+            json!({"action": "idle"})
         );
 
         let public_payload = serde_json::to_value(
@@ -9131,6 +9457,7 @@ mod tests {
         )
         .expect("public payload should serialize");
         assert!(public_payload.get("provider").is_none());
+        assert!(public_payload.get("model").is_none());
         let generation_inputs = public_payload["generationInputs"]
             .as_object()
             .expect("generation inputs should stay object");
@@ -9145,6 +9472,194 @@ mod tests {
             generation_inputs["references"],
             json!([{"refType": "asset", "refId": "asset-source"}])
         );
+        assert_eq!(
+            generation_inputs["characterAnimation"],
+            json!({"action": "idle"})
+        );
+    }
+
+    #[test]
+    fn editor_owner_payload_keeps_normal_model_and_sanitizes_asset_metadata() {
+        let mut asset = test_editor_asset_record(
+            "asset-1",
+            "generated-character-drafts/editor/asset-1.png",
+            Some("gpt-image-2"),
+            None,
+        );
+        asset.generation_inputs = Some(json!({
+            "fields": [],
+            "references": [],
+            "characterAnimation": {"action": "idle"},
+            "screenColorHex": "#CFEFFF",
+            "mattingProvider": "BgFilter",
+            "mattingModel": "birefnet"
+        }));
+
+        let value = serde_json::to_value(editor_asset_payload_from_record(asset))
+            .expect("asset serializes");
+
+        assert_eq!(value["model"], json!("gpt-image-2"));
+        assert!(value.get("provider").is_none());
+        assert!(value["generationInputs"].get("screenColorHex").is_none());
+        assert!(value["generationInputs"].get("mattingProvider").is_none());
+        assert!(value["generationInputs"].get("mattingModel").is_none());
+        assert_eq!(
+            value["generationInputs"]["characterAnimation"],
+            json!({"action": "idle"})
+        );
+    }
+
+    #[test]
+    fn editor_client_generation_inputs_cannot_forge_internal_audit_fields() {
+        let sanitized = sanitize_editor_client_generation_inputs(Some(json!({
+            "fields": [{"title": "角色设定", "value": "红发骑士"}],
+            "references": [],
+            "characterAnimation": {"action": "idle"},
+            "screenColorHex": "#000000",
+            "mattingProvider": "forged-provider",
+            "mattingModel": "forged-model"
+        })))
+        .expect("generation inputs should stay present");
+
+        assert!(sanitized.get("screenColorHex").is_none());
+        assert!(sanitized.get("mattingProvider").is_none());
+        assert!(sanitized.get("mattingModel").is_none());
+        assert_eq!(sanitized["characterAnimation"], json!({"action": "idle"}));
+        assert_eq!(
+            sanitized["fields"],
+            json!([{"title": "角色设定", "value": "红发骑士"}])
+        );
+    }
+
+    #[test]
+    fn background_removal_source_model_recovers_normal_ancestor() {
+        let source_key = "generated-character-drafts/editor/result.png";
+        let projects = vec![test_editor_project_record(
+            "project-1",
+            vec![
+                test_editor_project_resource_record(
+                    "resource-original",
+                    "project-1",
+                    "generated-character-drafts/editor/original.png",
+                    Some("gpt-image-2"),
+                    None,
+                ),
+                test_editor_project_resource_record(
+                    "resource-internal",
+                    "project-1",
+                    "generated-character-drafts/editor/internal.png",
+                    Some("birefnet"),
+                    Some("resource-original"),
+                ),
+                test_editor_project_resource_record(
+                    "resource-result",
+                    "project-1",
+                    source_key,
+                    Some("BgFilter complex"),
+                    Some("resource-internal"),
+                ),
+            ],
+        )];
+
+        let model = resolve_editor_background_removal_source_model_from_records(
+            projects.as_slice(),
+            &[],
+            Some("project-1"),
+            Some("resource-result"),
+            "resource-result",
+            source_key,
+        )
+        .expect("matching resource should resolve");
+
+        assert_eq!(model.as_deref(), Some("gpt-image-2"));
+    }
+
+    #[test]
+    fn background_removal_source_model_is_none_without_normal_ancestor() {
+        let source_key = "generated-character-drafts/editor/result.png";
+        let projects = vec![test_editor_project_record(
+            "project-1",
+            vec![test_editor_project_resource_record(
+                "resource-result",
+                "project-1",
+                source_key,
+                Some("BgFilter complex"),
+                None,
+            )],
+        )];
+
+        let model = resolve_editor_background_removal_source_model_from_records(
+            projects.as_slice(),
+            &[],
+            Some("project-1"),
+            Some("resource-result"),
+            source_key,
+            source_key,
+        )
+        .expect("matching resource should resolve");
+
+        assert_eq!(model, None);
+    }
+
+    #[test]
+    fn background_removal_source_model_resolves_owned_asset_model() {
+        let source_key = "generated-character-drafts/editor/asset.png";
+        let assets = vec![test_editor_asset_record(
+            "asset-1",
+            source_key,
+            Some("nanobanana2"),
+            None,
+        )];
+
+        let model = resolve_editor_background_removal_source_model_from_records(
+            &[],
+            assets.as_slice(),
+            None,
+            None,
+            "asset-1",
+            source_key,
+        )
+        .expect("owned asset should resolve");
+
+        assert_eq!(model.as_deref(), Some("nanobanana2"));
+    }
+
+    #[test]
+    fn background_removal_source_model_rejects_mismatched_project_resource() {
+        let projects = vec![
+            test_editor_project_record(
+                "project-1",
+                vec![test_editor_project_resource_record(
+                    "resource-1",
+                    "project-1",
+                    "generated-character-drafts/editor/project-1.png",
+                    Some("gpt-image-2"),
+                    None,
+                )],
+            ),
+            test_editor_project_record(
+                "project-2",
+                vec![test_editor_project_resource_record(
+                    "resource-2",
+                    "project-2",
+                    "generated-character-drafts/editor/project-2.png",
+                    Some("gpt-image-2"),
+                    None,
+                )],
+            ),
+        ];
+
+        let error = resolve_editor_background_removal_source_model_from_records(
+            projects.as_slice(),
+            &[],
+            Some("project-1"),
+            Some("resource-2"),
+            "resource-2",
+            "generated-character-drafts/editor/project-2.png",
+        )
+        .expect_err("project and resource must belong to the same source record");
+
+        assert_eq!(error.status_code(), StatusCode::FORBIDDEN);
     }
 
     #[test]
@@ -9245,6 +9760,62 @@ mod tests {
         );
     }
 
+    #[test]
+    fn editor_payload_sanitizer_removes_internal_layer_metadata_without_touching_dialog() {
+        let sanitized = sanitize_editor_payload_media(
+            json!([
+                {
+                    "layerId": "layer-1",
+                    "resourceId": "resource-1",
+                    "model": "BgFilter complex",
+                    "provider": "BgFilter",
+                    "generationInputs": {
+                        "fields": [],
+                        "references": [],
+                        "characterAnimation": {"action": "idle"},
+                        "screenColorHex": "#CFEFFF",
+                        "mattingProvider": "BgFilter",
+                        "mattingModel": "birefnet"
+                    }
+                },
+                {
+                    "layerId": "generation-dialog:dialog-1",
+                    "resourceId": "generation-dialog:dialog-1",
+                    "itemType": "generation-dialog",
+                    "dialog": {
+                        "model": "gpt-image-2",
+                        "provider": "dialog-provider"
+                    }
+                }
+            ]),
+            &[],
+        );
+
+        assert!(sanitized[0].get("model").is_none());
+        assert!(sanitized[0].get("provider").is_none());
+        assert!(
+            sanitized[0]["generationInputs"]
+                .get("screenColorHex")
+                .is_none()
+        );
+        assert!(
+            sanitized[0]["generationInputs"]
+                .get("mattingProvider")
+                .is_none()
+        );
+        assert!(
+            sanitized[0]["generationInputs"]
+                .get("mattingModel")
+                .is_none()
+        );
+        assert_eq!(
+            sanitized[0]["generationInputs"]["characterAnimation"],
+            json!({"action": "idle"})
+        );
+        assert_eq!(sanitized[1]["dialog"]["model"], json!("gpt-image-2"));
+        assert_eq!(sanitized[1]["dialog"]["provider"], json!("dialog-provider"));
+    }
+
     #[test]
     fn editor_canvas_generation_completion_saves_after_sanitizing_legacy_inline_layers() {
         let existing_resources = vec![EditorProjectResourcePayload {
@@ -11683,7 +12254,6 @@ mod tests {
             prompt: "角色形象".to_string(),
             actual_prompt: Some("角色形象 actual".to_string()),
             model: GPT_IMAGE_2_MODEL.to_string(),
-            provider: "VectorEngine",
             task_id: "task-character-source".to_string(),
             resource: None,
             asset: None,
@@ -11747,7 +12317,6 @@ mod tests {
             prompt: "图标 prompt".to_string(),
             actual_prompt: Some("图标 prompt".to_string()),
             model: "gemini-3.1-flash-image-preview".to_string(),
-            provider: "VectorEngine",
             task_id: "task-icons".to_string(),
             price_mud_points: crate::editor_generation_config::editor_image_generation_mud_points(
                 Some("icon"),
@@ -11786,7 +12355,12 @@ mod tests {
         }))
         .expect("UI extraction request should deserialize dimensions");
         assert_eq!(request.screen_color.as_deref(), Some("#E6D8FF"));
-        assert_eq!(request.seg_model.as_deref(), Some("anime-seg"));
+        assert!(
+            serde_json::to_value(&request)
+                .expect("request should serialize")
+                .get("segModel")
+                .is_none()
+        );
         let generation_options = normalize_editor_ui_design_asset_extraction_options(
             request.model.as_deref(),
             request.aspect_ratio.as_str(),
@@ -11852,7 +12426,12 @@ mod tests {
 
         assert_eq!(request.prompt, "生成图片");
         assert_eq!(request.screen_color.as_deref(), Some("#CFEFFF"));
-        assert_eq!(request.seg_model.as_deref(), Some("anime-seg"));
+        assert!(
+            serde_json::to_value(&request)
+                .expect("request should serialize")
+                .get("segModel")
+                .is_none()
+        );
         assert_eq!(request.style, None);
     }
 
@@ -12119,7 +12698,12 @@ mod tests {
             Some(vec!["/generated-images/editor/style.png".to_string()])
         );
         assert_eq!(request.screen_color.as_deref(), Some("#7FB3FF"));
-        assert_eq!(request.seg_model.as_deref(), Some("anime-seg"));
+        assert!(
+            serde_json::to_value(&request)
+                .expect("request should serialize")
+                .get("segModel")
+                .is_none()
+        );
         assert_eq!(request.asset_label.as_deref(), Some(" 冒险界面图标 "));
         assert_eq!(request.style, None);
 
@@ -12227,19 +12811,6 @@ mod tests {
         );
     }
 
-    #[test]
-    fn editor_bgfilter_seg_model_parser_defaults_and_rejects_unknown() {
-        assert_eq!(
-            parse_editor_bgfilter_seg_model(None).expect("default should parse"),
-            EDITOR_BGFILTER_DEFAULT_SEG_MODEL
-        );
-        assert_eq!(
-            parse_editor_bgfilter_seg_model(Some("Anime-Seg")).expect("anime seg should parse"),
-            EDITOR_BGFILTER_SEG_MODEL_ANIME_SEG
-        );
-        assert!(parse_editor_bgfilter_seg_model(Some("u2net")).is_err());
-    }
-
     #[test]
     fn editor_bgfilter_worker_budget_covers_two_attempts_and_parent_reserves() {
         let config = AppConfig::default();
diff --git a/server-rs/crates/api-server/src/external_editor_api.rs b/server-rs/crates/api-server/src/external_editor_api.rs
index 4f9d6664c..583203d07 100644
--- a/server-rs/crates/api-server/src/external_editor_api.rs
+++ b/server-rs/crates/api-server/src/external_editor_api.rs
@@ -32,8 +32,8 @@ use crate::{
         editor_project_resource_payload_from_record, extract_editor_ui_design_assets_for_owner,
         generate_editor_icon_spritesheet_for_owner, generate_editor_image_for_owner,
         map_editor_project_error, normalize_editor_persisted_media_src, normalize_optional_string,
-        parse_editor_generation_json_payload, save_editor_project_layout_with_revision_and_get,
-        serialize_editor_asset_metadata,
+        parse_editor_generation_json_payload, sanitize_editor_client_generation_inputs,
+        save_editor_project_layout_with_revision_and_get, serialize_editor_asset_metadata,
     },
     external_api_auth::ExternalApiPrincipal,
     http_error::AppError,
@@ -467,7 +467,7 @@ pub async fn create_external_editor_asset(
 ) -> Result<Json<Value>, AppError> {
     require_scope(&principal, SCOPE_EDITOR_ASSET)?;
     let generation_inputs_json =
-        serialize_editor_asset_metadata(payload.generation_inputs.clone())?;
+        serialize_external_editor_generation_inputs(payload.generation_inputs.clone())?;
     let object_key = normalize_optional_string(payload.object_key);
     let image_src = normalize_editor_persisted_media_src(payload.image_src, object_key.as_deref())?;
     let asset = state
@@ -569,7 +569,7 @@ pub async fn create_external_editor_project_resource(
 ) -> Result<Json<Value>, AppError> {
     require_scope(&principal, SCOPE_EDITOR_ASSET)?;
     let generation_inputs_json =
-        serialize_editor_asset_metadata(payload.generation_inputs.clone())?;
+        serialize_external_editor_generation_inputs(payload.generation_inputs.clone())?;
     let object_key = normalize_optional_string(payload.object_key);
     let image_src = normalize_editor_persisted_media_src(payload.image_src, object_key.as_deref())?;
     let resource = state
@@ -787,6 +787,12 @@ fn normalize_project_title(title: Option<String>) -> String {
         .unwrap_or_else(|| EDITOR_PROJECT_DEFAULT_TITLE.to_string())
 }
 
+fn serialize_external_editor_generation_inputs(
+    generation_inputs: Option<Value>,
+) -> Result<Option<String>, AppError> {
+    serialize_editor_asset_metadata(sanitize_editor_client_generation_inputs(generation_inputs))
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
@@ -809,6 +815,26 @@ mod tests {
         assert_eq!(request.expected_revision, 7);
     }
 
+    #[test]
+    fn external_editor_generation_inputs_cannot_forge_internal_audit_fields() {
+        let serialized = serialize_external_editor_generation_inputs(Some(json!({
+            "fields": [{"label": "角色设定", "value": "骑士"}],
+            "screenColorHex": "#00FF00",
+            "mattingProvider": "forged-provider",
+            "mattingModel": "forged-model",
+            "characterAnimation": {"durationSeconds": 4}
+        })))
+        .expect("外部编辑器生成输入应可序列化")
+        .expect("非空生成输入应保留");
+        let parsed: Value = serde_json::from_str(&serialized).expect("生成输入应为合法 JSON");
+
+        assert_eq!(parsed["fields"][0]["value"], "骑士");
+        assert_eq!(parsed["characterAnimation"]["durationSeconds"], 4);
+        assert!(parsed.get("screenColorHex").is_none());
+        assert!(parsed.get("mattingProvider").is_none());
+        assert!(parsed.get("mattingModel").is_none());
+    }
+
     #[test]
     fn exported_openapi_json_contains_external_editor_routes_and_security() {
         let parsed: Value = serde_json::from_str(OPENAPI_JSON).expect("openapi json should parse");
@@ -1025,5 +1051,25 @@ mod tests {
             parsed["components"]["securitySchemes"]["ExternalApiKey"]["scheme"],
             "bearer"
         );
+        for schema_name in [
+            "EditorProjectResource",
+            "EditorAsset",
+            "EditorImageGenerationResponse",
+            "EditorIconSpritesheetGenerationResponse",
+            "EditorVideoGenerationResponse",
+            "EditorAudioGenerationResponse",
+        ] {
+            let schema = &parsed["components"]["schemas"][schema_name];
+            assert!(
+                schema["properties"].get("provider").is_none(),
+                "{schema_name} 不应向普通用户公开 provider"
+            );
+            assert!(
+                schema["required"]
+                    .as_array()
+                    .is_some_and(|required| !required.contains(&json!("provider"))),
+                "{schema_name} 不应要求 provider"
+            );
+        }
     }
 }
diff --git a/server-rs/crates/api-server/src/external_generation.rs b/server-rs/crates/api-server/src/external_generation.rs
index 2b83d7296..b3ad859d3 100644
--- a/server-rs/crates/api-server/src/external_generation.rs
+++ b/server-rs/crates/api-server/src/external_generation.rs
@@ -19,6 +19,9 @@ use spacetime_client::{
     ExternalGenerationJobSummaryRecord, SpacetimeClientError,
 };
 
+use crate::editor_generation_queue::{
+    EDITOR_BACKGROUND_REMOVAL_JOB_KIND, EDITOR_CHARACTER_ANIMATION_GENERATION_JOB_KIND,
+};
 use crate::{
     api_response::json_success_body, auth::AuthenticatedAccessToken, http_error::AppError,
     request_context::RequestContext, state::AppState,
@@ -180,7 +183,10 @@ fn map_external_generation_job_status(
             ExternalGenerationJobStatus::Failed,
             "生成失败。",
             0,
-            job.last_error_message.clone(),
+            user_visible_external_generation_error(
+                job.job_kind.as_str(),
+                job.last_error_message.clone(),
+            ),
         ),
         _ => (ExternalGenerationJobStatus::Queued, "排队中。", 8, None),
     };
@@ -196,6 +202,21 @@ fn map_external_generation_job_status(
     }
 }
 
+/// 外部任务表保存的失败文本同时服务于 worker 诊断和用户通知。抠图及角色动作透明化任务的
+/// 原始失败文本可能包含内部 provider、分割模型或实现细节，因此只能在普通用户读取边界
+/// 替换成稳定文案。
+/// 原始值仍留在任务记录、tracing 和后台审计路径中。
+fn user_visible_external_generation_error(job_kind: &str, error: Option<String>) -> Option<String> {
+    if job_kind == EDITOR_BACKGROUND_REMOVAL_JOB_KIND && error.is_some() {
+        return Some("去除背景失败，请稍后重试。".to_string());
+    }
+    if job_kind == EDITOR_CHARACTER_ANIMATION_GENERATION_JOB_KIND && error.is_some() {
+        return Some("角色动作生成失败，请稍后重试。".to_string());
+    }
+
+    error
+}
+
 fn map_external_generation_job_status_detail(
     job: ExternalGenerationJobSummaryRecord,
 ) -> ExternalGenerationJobStatusDetailRecord {
@@ -392,4 +413,70 @@ mod tests {
         let generating = map_external_generation_job_status(job);
         assert_eq!(generating.phase_detail, "正在生成。");
     }
+
+    #[test]
+    fn background_removal_failure_hides_internal_processing_details_from_owner() {
+        let job = ExternalGenerationJobSummaryRecord {
+            job_id: "task-matting-failed".to_string(),
+            job_kind: EDITOR_BACKGROUND_REMOVAL_JOB_KIND.to_string(),
+            owner_user_id: "user-1".to_string(),
+            source_module: "editor-canvas".to_string(),
+            source_entity_id: "project-1".to_string(),
+            request_label: "去除背景".to_string(),
+            request_prompt: None,
+            status: "failed".to_string(),
+            last_error_message: Some(
+                "BgFilter birefnet provider 返回失败，model=segment-common-image".to_string(),
+            ),
+            created_at: "2026-07-31T08:00:00Z".to_string(),
+            started_at: Some("2026-07-31T08:00:01Z".to_string()),
+            completed_at: Some("2026-07-31T08:00:10Z".to_string()),
+            updated_at: "2026-07-31T08:00:10Z".to_string(),
+            updated_at_micros: 1_000,
+            price_mud_points: 0,
+            refund_ledger_id: None,
+            notification_acknowledged_at: None,
+            notification_acknowledged_at_micros: None,
+            phase: None,
+            warning_message: None,
+        };
+
+        let status = map_external_generation_job_status(job.clone());
+        let task = map_external_generation_task_record(job);
+
+        assert_eq!(status.error.as_deref(), Some("去除背景失败，请稍后重试。"));
+        assert_eq!(task.error.as_deref(), Some("去除背景失败，请稍后重试。"));
+        for value in [status.error, task.error].into_iter().flatten() {
+            let lower = value.to_ascii_lowercase();
+            assert!(!lower.contains("bgfilter"));
+            assert!(!lower.contains("birefnet"));
+            assert!(!lower.contains("segment-common-image"));
+        }
+    }
+
+    #[test]
+    fn character_animation_failure_hides_internal_matting_details_from_owner() {
+        let message = user_visible_external_generation_error(
+            EDITOR_CHARACTER_ANIMATION_GENERATION_JOB_KIND,
+            Some("解析 BgFilter 输入动作帧失败，seg_model=birefnet，provider=BgFilter".to_string()),
+        );
+
+        assert_eq!(message.as_deref(), Some("角色动作生成失败，请稍后重试。"));
+        let lower = message
+            .expect("失败任务应返回稳定文案")
+            .to_ascii_lowercase();
+        assert!(!lower.contains("bgfilter"));
+        assert!(!lower.contains("birefnet"));
+        assert!(!lower.contains("provider"));
+    }
+
+    #[test]
+    fn unrelated_generation_failure_keeps_its_user_visible_message() {
+        let message = user_visible_external_generation_error(
+            "editor_image_generation",
+            Some("生成服务暂时不可用。".to_string()),
+        );
+
+        assert_eq!(message.as_deref(), Some("生成服务暂时不可用。"));
+    }
 }
diff --git a/server-rs/crates/api-server/src/external_generation_worker.rs b/server-rs/crates/api-server/src/external_generation_worker.rs
index 15e9ad98d..2c3db1624 100644
--- a/server-rs/crates/api-server/src/external_generation_worker.rs
+++ b/server-rs/crates/api-server/src/external_generation_worker.rs
@@ -1237,6 +1237,24 @@ fn compact_editor_generation_result(mut result: Value) -> Value {
     let Some(object) = result.as_object_mut() else {
         return result;
     };
+    // 紧凑结果会回传给普通用户的 Agent 工具调用卡片，不能把供应商或内部后处理实现
+    // 当作可见生成信息下发。正常的用户可见模型仍然保留，以便卡片恢复原有展示。
+    object.remove("provider");
+    if object
+        .get("model")
+        .and_then(Value::as_str)
+        .is_some_and(is_editor_internal_processing_model)
+    {
+        object.remove("model");
+    }
+    if let Some(generation_inputs) = object
+        .get_mut("generationInputs")
+        .and_then(Value::as_object_mut)
+    {
+        for field in ["screenColorHex", "mattingProvider", "mattingModel"] {
+            generation_inputs.remove(field);
+        }
+    }
     object.remove("project");
     object.remove("asset");
     object.remove("spritesheetAsset");
@@ -1271,6 +1289,18 @@ fn compact_editor_generation_result(mut result: Value) -> Value {
     result
 }
 
+fn is_editor_internal_processing_model(model: &str) -> bool {
+    matches!(
+        model.trim().to_ascii_lowercase().as_str(),
+        "anime-seg"
+            | "bgfilter complex"
+            | "birefnet"
+            | "connected-components"
+            | "screen-color-keying"
+            | "segment-common-image"
+    )
+}
+
 fn extract_editor_generation_warning_fields(
     warning: Option<&Value>,
     is_slice_warning: bool,
@@ -1757,6 +1787,13 @@ mod tests {
             "actualPrompt": null,
             "model": "gpt-image-2",
             "provider": "VectorEngine",
+            "generationInputs": {
+                "fields": { "prompt": "castle" },
+                "characterAnimation": { "frameCount": 8 },
+                "screenColorHex": "#CFEFFF",
+                "mattingProvider": "BgFilter",
+                "mattingModel": "birefnet",
+            },
             "taskId": "provider-task-1",
             "resource": {
                 "resourceId": "resource-1",
@@ -1794,9 +1831,45 @@ mod tests {
                 .get("project")
                 .is_none()
         );
+        assert_eq!(
+            payload["editor-agent-tool-call-result"]["model"],
+            json!("gpt-image-2")
+        );
+        assert!(
+            payload["editor-agent-tool-call-result"]
+                .get("provider")
+                .is_none()
+        );
+        assert_eq!(
+            payload["editor-agent-tool-call-result"]["generationInputs"],
+            json!({
+                "fields": { "prompt": "castle" },
+                "characterAnimation": { "frameCount": 8 },
+            })
+        );
         assert!(!payload.to_string().contains("data:image"));
     }
 
+    #[test]
+    fn compact_editor_generation_result_removes_internal_models_case_insensitively() {
+        for model in [
+            "anime-seg",
+            " BgFilter Complex ",
+            "BIREFNET",
+            "connected-components",
+            "screen-color-keying",
+            "segment-common-image",
+        ] {
+            let compact = compact_editor_generation_result(json!({
+                "model": model,
+                "provider": "internal-provider",
+            }));
+
+            assert!(compact.get("model").is_none(), "model={model}");
+            assert!(compact.get("provider").is_none(), "model={model}");
+        }
+    }
+
     #[test]
     fn editor_agent_spritesheet_result_keeps_all_persisted_slices() {
         let mut job = external_generation_job_record_fixture(Some("lease-1"));
diff --git a/server-rs/crates/api-server/src/vector_engine_audio_generation/generation.rs b/server-rs/crates/api-server/src/vector_engine_audio_generation/generation.rs
index 3c854074d..d02ffca32 100644
--- a/server-rs/crates/api-server/src/vector_engine_audio_generation/generation.rs
+++ b/server-rs/crates/api-server/src/vector_engine_audio_generation/generation.rs
@@ -338,7 +338,6 @@ pub(crate) async fn generate_editor_sound_effect_for_owner(
             prompt: normalized.prompt.clone(),
             actual_prompt: Some(normalized.prompt),
             model: normalized.model,
-            provider: generated.provider,
             task_id: generated.task_id,
             price_mud_points: normalized.price_mud_points,
             audio_kind: "sound-effect".to_string(),
@@ -562,7 +561,6 @@ pub(crate) async fn generate_editor_background_music_for_owner(
             prompt: normalized.gpt_description_prompt.clone(),
             actual_prompt: Some(normalized.gpt_description_prompt),
             model: platform_audio::SUNO_DEFAULT_MODEL.to_string(),
-            provider: generated.provider,
             task_id: generated.task_id,
             price_mud_points: normalized.price_mud_points,
             audio_kind: "background-music".to_string(),
diff --git a/server-rs/crates/shared-contracts/src/assets.rs b/server-rs/crates/shared-contracts/src/assets.rs
index 27ca2036d..6186d6253 100644
--- a/server-rs/crates/shared-contracts/src/assets.rs
+++ b/server-rs/crates/shared-contracts/src/assets.rs
@@ -424,7 +424,6 @@ pub struct EditorVideoGenerateResponse {
     #[serde(skip_serializing_if = "Option::is_none")]
     pub actual_prompt: Option<String>,
     pub model: String,
-    pub provider: String,
     pub task_id: String,
     pub duration_seconds: u32,
     pub resolution: String,
@@ -503,7 +502,6 @@ pub struct EditorIconSpritesheetGenerateResponse {
     #[serde(skip_serializing_if = "Option::is_none")]
     pub actual_prompt: Option<String>,
     pub model: String,
-    pub provider: String,
     pub task_id: String,
     pub price_mud_points: u32,
 }
@@ -560,7 +558,6 @@ pub struct EditorAudioGenerateResponse {
     #[serde(skip_serializing_if = "Option::is_none")]
     pub actual_prompt: Option<String>,
     pub model: String,
-    pub provider: String,
     pub task_id: String,
     pub price_mud_points: u32,
     pub audio_kind: String,
@@ -1260,7 +1257,6 @@ mod tests {
             prompt: "让角色向镜头挥手".to_string(),
             actual_prompt: Some("让角色向镜头挥手".to_string()),
             model: "kling3.0-omni".to_string(),
-            provider: "VectorEngine".to_string(),
             task_id: "task-1".to_string(),
             duration_seconds: 5,
             resolution: "480p".to_string(),
@@ -1287,6 +1283,7 @@ mod tests {
         assert_eq!(payload["assetObjectId"], json!("assetobj_video_1"));
         assert_eq!(payload["sourceType"], json!("generated"));
         assert_eq!(payload["durationSeconds"], json!(5));
+        assert!(payload.get("provider").is_none());
     }
 
     #[test]
@@ -1323,7 +1320,6 @@ mod tests {
             prompt: "图标 prompt".to_string(),
             actual_prompt: Some("图标 prompt".to_string()),
             model: "gemini-3.1-flash-image-preview".to_string(),
-            provider: "VectorEngine".to_string(),
             task_id: "task-icons".to_string(),
             price_mud_points: 12,
         })
@@ -1331,6 +1327,7 @@ mod tests {
 
         assert_eq!(response_payload["priceMudPoints"], json!(12));
         assert_eq!(response_payload["iconImageSrcs"], json!([]));
+        assert!(response_payload.get("provider").is_none());
         assert_eq!(
             response_payload["sliceWarning"],
             json!({
@@ -1410,7 +1407,6 @@ mod tests {
             prompt: "金币掉落叮当声".to_string(),
             actual_prompt: Some("金币掉落叮当声".to_string()),
             model: "audio1.0".to_string(),
-            provider: "VectorEngine".to_string(),
             task_id: "sound-task-1".to_string(),
             price_mud_points: 10,
             audio_kind: "sound-effect".to_string(),
@@ -1439,6 +1435,7 @@ mod tests {
         );
         assert_eq!(response_payload["assetObjectId"], json!("assetobj_audio_1"));
         assert_eq!(response_payload["audioKind"], json!("sound-effect"));
+        assert!(response_payload.get("provider").is_none());
         assert_eq!(
             response_payload["asset"]["assetKind"],
             json!("sound-effect")
diff --git a/src/components/image-editor/ImageCanvasEditorGenerationIntegration.test.tsx b/src/components/image-editor/ImageCanvasEditorGenerationIntegration.test.tsx
index c307a36ee..833e6e3d0 100644
--- a/src/components/image-editor/ImageCanvasEditorGenerationIntegration.test.tsx
+++ b/src/components/image-editor/ImageCanvasEditorGenerationIntegration.test.tsx
@@ -3529,7 +3529,6 @@ describe('ImageCanvasEditorView generation integration', () => {
           sourceImageSrc:
             'generated-character-drafts/editor/generation-references/marked-ui-design.png',
           screenColor: 'auto',
-          segModel: 'birefnet',
           aspectRatio: '1:1',
           imageSize: '1K',
           projectId: 'editor-project-ui-extract',
diff --git a/src/components/image-editor/ImageCanvasGenerationLayerModel.test.ts b/src/components/image-editor/ImageCanvasGenerationLayerModel.test.ts
index 248cbd2c9..c601d498c 100644
--- a/src/components/image-editor/ImageCanvasGenerationLayerModel.test.ts
+++ b/src/components/image-editor/ImageCanvasGenerationLayerModel.test.ts
@@ -341,7 +341,6 @@ describe('ImageCanvasGenerationLayerModel', () => {
         prompt: '图标 prompt',
         actualPrompt: '图标 actual prompt',
         model: 'gpt-image-2',
-        provider: 'VectorEngine',
         taskId: 'task-icons',
         priceMudPoints: 20,
       },
@@ -432,7 +431,6 @@ describe('ImageCanvasGenerationLayerModel', () => {
         prompt: '图标 prompt',
         actualPrompt: '图标 actual prompt',
         model: 'gpt-image-2',
-        provider: 'VectorEngine',
         taskId: 'task-icons',
         priceMudPoints: 20,
       },
@@ -464,7 +462,6 @@ describe('ImageCanvasGenerationLayerModel', () => {
         prompt: '金币掉落叮当声',
         actualPrompt: '金币掉落叮当声',
         model: 'audio1.0',
-        provider: 'VectorEngine',
         taskId: 'sound-task-1',
         priceMudPoints: 10,
         audioKind: 'sound-effect',
@@ -525,7 +522,6 @@ describe('ImageCanvasGenerationLayerModel', () => {
       sourceType: 'generated',
       prompt: '金币掉落叮当声',
       model: 'audio1.0',
-      provider: 'VectorEngine',
       taskId: 'sound-task-1',
       objectKey: 'generated-character-drafts/editor-audios/sfx.mp3',
       assetObjectId: 'assetobj-audio-1',
@@ -535,6 +531,7 @@ describe('ImageCanvasGenerationLayerModel', () => {
         assetId: 'asset-audio-bff',
       }),
     });
+    expect(layer.provider).toBeUndefined();
   });
 
   it('creates video result layers with OSS asset identity', () => {
@@ -549,7 +546,6 @@ describe('ImageCanvasGenerationLayerModel', () => {
         prompt: '开场动画',
         actualPrompt: '开场动画',
         model: 'seedance2.0-fast',
-        provider: 'VectorEngine',
         taskId: 'video-task-1',
         priceMudPoints: 40,
         durationSeconds: 5,
@@ -586,6 +582,7 @@ describe('ImageCanvasGenerationLayerModel', () => {
       durationSeconds: 5,
     });
     expect(layer.generatedAssetSnapshot?.assetId).toBe('asset-video-bff');
+    expect(layer.provider).toBeUndefined();
   });
 
   it('creates character animation result layers as playable image sequences', () => {
@@ -653,11 +650,11 @@ describe('ImageCanvasGenerationLayerModel', () => {
       prompt: '待机动作',
       actualPrompt: '待机动作',
       model: 'seedance2.0-fast',
-      provider: 'ark',
       taskId: 'character-animation-task-1',
       assetKind: 'character-animation',
       durationSeconds: 4,
     });
     expect(layer?.generationInputs?.fields[0]?.value).toBe('待机动作');
+    expect(layer?.provider).toBeUndefined();
   });
 });
diff --git a/src/components/image-editor/ImageCanvasGenerationLayerModel.ts b/src/components/image-editor/ImageCanvasGenerationLayerModel.ts
index 612678189..04351d897 100644
--- a/src/components/image-editor/ImageCanvasGenerationLayerModel.ts
+++ b/src/components/image-editor/ImageCanvasGenerationLayerModel.ts
@@ -114,7 +114,6 @@ function applyGeneratedMetadata(
     prompt: generated.prompt,
     actualPrompt: generated.actualPrompt ?? generated.prompt,
     model: generated.model,
-    provider: generated.provider,
     taskId: generated.taskId,
     objectKey: resource?.objectKey ?? generated.objectKey,
     assetObjectId: resource?.assetObjectId ?? generated.assetObjectId,
@@ -333,7 +332,6 @@ export function createIconSpritesheetResultLayers({
     prompt: generated.prompt,
     actualPrompt: generated.actualPrompt ?? generated.prompt,
     model: generated.model,
-    provider: generated.provider,
     taskId: generated.taskId,
     assetKind: 'icon-spritesheet',
     sourceAssetId: spritesheetAsset?.assetId,
@@ -382,7 +380,6 @@ export function createIconSpritesheetResultLayers({
       prompt: generated.prompt,
       actualPrompt: generated.actualPrompt ?? generated.prompt,
       model: generated.model,
-      provider: generated.provider,
       taskId: generated.taskId,
       assetKind: 'icon',
       sourceAssetId: asset?.assetId,
@@ -451,7 +448,6 @@ export function createVideoResultLayer({
     prompt: generated.prompt,
     actualPrompt: generated.actualPrompt ?? generated.prompt,
     model: generated.model,
-    provider: generated.provider,
     taskId: generated.taskId,
     objectKey: resource?.objectKey ?? generated.objectKey,
     assetObjectId: resource?.assetObjectId ?? generated.assetObjectId,
@@ -513,7 +509,6 @@ export function createAudioResultLayer({
     prompt: generated.prompt,
     actualPrompt: generated.actualPrompt ?? generated.prompt,
     model: generated.model,
-    provider: generated.provider,
     taskId: generated.taskId,
     objectKey: resource?.objectKey ?? generated.objectKey,
     assetObjectId: resource?.assetObjectId ?? generated.assetObjectId,
@@ -575,7 +570,6 @@ export function createCharacterAnimationResultLayer({
     prompt: generated.prompt,
     actualPrompt: generated.prompt,
     model: generated.model,
-    provider: 'ark',
     taskId: generated.taskId,
     assetKind: 'character-animation',
     durationSeconds: generated.durationSeconds,
diff --git a/src/components/image-editor/ImageCanvasGenerationModel.ts b/src/components/image-editor/ImageCanvasGenerationModel.ts
index 396d10029..069ed6b6f 100644
--- a/src/components/image-editor/ImageCanvasGenerationModel.ts
+++ b/src/components/image-editor/ImageCanvasGenerationModel.ts
@@ -100,7 +100,6 @@ export const DEFAULT_ICON_DESCRIPTIONS = [
   '冻结按钮',
 ];
 export const DEFAULT_EDITOR_GENERATION_BACKGROUND_COLOR = 'auto';
-export const DEFAULT_EDITOR_BGFILTER_SEG_MODEL = 'birefnet';
 export const UI_DESIGN_ASSET_EXTRACTION_PROMPT =
   '仅提取被红色框框选的素材并整理成spritesheet，图集背景必须使用所选单一纯色抠图背景。纯色背景必须平整无纹理、无渐变、无阴影、无地面、无环境、无道具，方便后续扣除背景；素材自身不要出现与背景色相同或相近的描边、底板、投影或反光。';
 export const QUICK_EDIT_SIZE_PRESETS = [
diff --git a/src/components/image-editor/ImageCanvasGenerationSubmissionModel.test.ts b/src/components/image-editor/ImageCanvasGenerationSubmissionModel.test.ts
index 1784b7056..12f2a4548 100644
--- a/src/components/image-editor/ImageCanvasGenerationSubmissionModel.test.ts
+++ b/src/components/image-editor/ImageCanvasGenerationSubmissionModel.test.ts
@@ -343,7 +343,6 @@ describe('ImageCanvasGenerationSubmissionModel', () => {
         kind: 'character',
         model: 'gpt-image-2',
         screenColor: 'auto',
-        segModel: 'birefnet',
         style: 'pixelArt',
         aspectRatio: '2:3',
         imageSize: '2K',
@@ -717,7 +716,6 @@ describe('ImageCanvasGenerationSubmissionModel', () => {
         iconDescriptions: ['返回按钮\n\n设置按钮'],
         model: 'gpt-image-2',
         screenColor: 'auto',
-        segModel: 'birefnet',
         style: 'pixelArt',
         aspectRatio: '3:2',
         imageSize: '2K',
diff --git a/src/components/image-editor/ImageCanvasGenerationSubmissionModel.ts b/src/components/image-editor/ImageCanvasGenerationSubmissionModel.ts
index f33d4f55f..89f83d817 100644
--- a/src/components/image-editor/ImageCanvasGenerationSubmissionModel.ts
+++ b/src/components/image-editor/ImageCanvasGenerationSubmissionModel.ts
@@ -29,7 +29,6 @@ import {
   buildUiDesignGenerationInputs,
   buildVideoGenerationInputs,
   CHARACTER_ANIMATION_MODEL,
-  DEFAULT_EDITOR_BGFILTER_SEG_MODEL,
   DEFAULT_EDITOR_GENERATION_BACKGROUND_COLOR,
   DEFAULT_SOUND_EFFECT_DURATION_SECONDS,
   DEFAULT_SOUND_EFFECT_MODEL,
@@ -343,7 +342,6 @@ export function buildImageGenerationSubmissionPlan({
     ].filter((src): src is string => Boolean(src));
     const imageModel = normalizeEditorImageModel(dialog.imageModel);
     const screenColor = DEFAULT_EDITOR_GENERATION_BACKGROUND_COLOR;
-    const segModel = DEFAULT_EDITOR_BGFILTER_SEG_MODEL;
     return {
       kind: 'image',
       normalizedPrompt,
@@ -352,7 +350,6 @@ export function buildImageGenerationSubmissionPlan({
         kind: 'character',
         model: imageModel,
         screenColor,
-        segModel,
         style: dialog.style === 'pixelArt' ? 'pixelArt' : 'none',
         aspectRatio: dialog.aspectRatio ?? '1:1',
         imageSize: dialog.imageSize ?? '1K',
@@ -619,7 +616,6 @@ export function buildIconSpritesheetGenerationSubmissionPlan(
 
   const rememberImageModel = normalizeEditorImageModel(dialog.imageModel);
   const screenColor = DEFAULT_EDITOR_GENERATION_BACKGROUND_COLOR;
-  const segModel = DEFAULT_EDITOR_BGFILTER_SEG_MODEL;
   return {
     ok: true,
     iconDescriptions,
@@ -637,7 +633,6 @@ export function buildIconSpritesheetGenerationSubmissionPlan(
       iconDescriptions,
       model: rememberImageModel,
       screenColor,
-      segModel,
       style: dialog.style === 'pixelArt' ? 'pixelArt' : 'none',
       aspectRatio: dialog.aspectRatio ?? '1:1',
       imageSize: dialog.imageSize ?? '1K',
diff --git a/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.test.tsx b/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.test.tsx
index 038ecf126..cff9acb33 100644
--- a/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.test.tsx
+++ b/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.test.tsx
@@ -2573,7 +2573,6 @@ describe('useImageCanvasGenerationSubmissionWorkflow', () => {
           sourceImageSrc: 'generated/ui-design.png',
           model: 'gemini-3.1-flash-image-preview',
           screenColor: 'auto',
-          segModel: 'birefnet',
         }),
       );
     });
@@ -2710,7 +2709,6 @@ describe('useImageCanvasGenerationSubmissionWorkflow', () => {
             'generated-character-drafts/editor/generation-references/reference.png',
           model: 'gemini-3.1-flash-image-preview',
           screenColor: 'auto',
-          segModel: 'birefnet',
           aspectRatio: '1:1',
           imageSize: '2K',
           canvasCompletion: expect.objectContaining({
@@ -2772,7 +2770,6 @@ describe('useImageCanvasGenerationSubmissionWorkflow', () => {
       expect(extractEditorUiDesignAssetsMock).toHaveBeenCalledWith(
         expect.objectContaining({
           screenColor: 'auto',
-          segModel: 'birefnet',
           referenceImageSrcs: ['generated/ref-style.png'],
           generationInputs: expect.objectContaining({
             references: expect.arrayContaining([
diff --git a/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.ts b/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.ts
index ff4df781d..e98227ad5 100644
--- a/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.ts
+++ b/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.ts
@@ -58,7 +58,6 @@ import {
   buildQuickEditGenerationInputs,
   buildUiDesignAssetExtractionGenerationInputs,
   buildVideoGenerationInputs,
-  DEFAULT_EDITOR_BGFILTER_SEG_MODEL,
   DEFAULT_EDITOR_GENERATION_BACKGROUND_COLOR,
   DEFAULT_IMAGE_MODEL,
   DEFAULT_VIDEO_MODEL,
@@ -1086,7 +1085,6 @@ export function useImageCanvasGenerationSubmissionWorkflow({
           );
         }
         const screenColor = DEFAULT_EDITOR_GENERATION_BACKGROUND_COLOR;
-        const segModel = DEFAULT_EDITOR_BGFILTER_SEG_MODEL;
         const generationInputs = buildUiDesignAssetExtractionGenerationInputs(
           sourceLayer,
           options.references,
@@ -1123,7 +1121,6 @@ export function useImageCanvasGenerationSubmissionWorkflow({
               options.model ?? DEFAULT_IMAGE_MODEL,
             ),
             screenColor,
-            segModel,
             ...(referenceImageSrcs.length ? { referenceImageSrcs } : {}),
             projectId,
             generationInputs,
diff --git a/src/services/image-editor/editorProjectClient.test.ts b/src/services/image-editor/editorProjectClient.test.ts
index ce9133c08..9d4ef9952 100644
--- a/src/services/image-editor/editorProjectClient.test.ts
+++ b/src/services/image-editor/editorProjectClient.test.ts
@@ -837,7 +837,6 @@ describe('editorProjectClient', () => {
       kind: 'character',
       model: 'gpt-image-2',
       screenColor: '#FFD6C2',
-      segModel: 'anime-seg',
       style: 'pixelArt',
       aspectRatio: '2:3',
       imageSize: '1K',
@@ -862,7 +861,6 @@ describe('editorProjectClient', () => {
           kind: 'character',
           model: 'gpt-image-2',
           screenColor: '#FFD6C2',
-          segModel: 'anime-seg',
           style: 'pixelArt',
           aspectRatio: '2:3',
           imageSize: '1K',
@@ -1016,7 +1014,6 @@ describe('editorProjectClient', () => {
       iconDescriptions: ['返回按钮'],
       model: 'gpt-image-2',
       screenColor: '#E6D8FF',
-      segModel: 'anime-seg',
       style: 'none',
       aspectRatio: '1:1',
       imageSize: '2K',
@@ -1038,7 +1035,6 @@ describe('editorProjectClient', () => {
           iconDescriptions: ['返回按钮'],
           model: 'gpt-image-2',
           screenColor: '#E6D8FF',
-          segModel: 'anime-seg',
           style: 'none',
           aspectRatio: '1:1',
           imageSize: '2K',
@@ -1157,7 +1153,6 @@ describe('editorProjectClient', () => {
       sourceImageSrc: '/generated-images/editor/ui-design.png',
       model: 'gpt-image-2',
       screenColor: '#7FB3FF',
-      segModel: 'anime-seg',
       referenceImageSrcs: ['/generated-images/editor/ui-ref.png'],
       projectId: 'editor-project-1',
       assetFolderId: 'project',
@@ -1180,7 +1175,6 @@ describe('editorProjectClient', () => {
           sourceImageSrc: '/generated-images/editor/ui-design.png',
           model: 'gpt-image-2',
           screenColor: '#7FB3FF',
-          segModel: 'anime-seg',
           referenceImageSrcs: ['/generated-images/editor/ui-ref.png'],
           projectId: 'editor-project-1',
           generationInputs: {
diff --git a/src/services/image-editor/editorProjectClient.ts b/src/services/image-editor/editorProjectClient.ts
index 76294f98a..8c03182fa 100644
--- a/src/services/image-editor/editorProjectClient.ts
+++ b/src/services/image-editor/editorProjectClient.ts
@@ -197,7 +197,6 @@ export type EditorImageGenerationInput = {
     | 'publication-material';
   model?: string;
   screenColor?: string;
-  segModel?: string;
   style?: EditorImageGenerationStyle;
   aspectRatio?: string;
   imageSize?: string;
@@ -230,7 +229,6 @@ export type EditorIconSpritesheetGenerationInput = {
   iconDescriptions: string[];
   model?: string;
   screenColor?: string;
-  segModel?: string;
   style?: EditorImageGenerationStyle;
   aspectRatio?: string;
   imageSize?: string;
@@ -252,7 +250,6 @@ export type EditorUiDesignAssetExtractionInput = {
   sourceImageSrc: string;
   model?: string;
   screenColor?: string;
-  segModel?: string;
   referenceImageSrcs?: string[];
   aspectRatio?: string;
   imageSize?: string;
@@ -304,7 +301,6 @@ export type EditorImageGenerationResult = {
   prompt: string;
   actualPrompt?: string | null;
   model: string;
-  provider: string;
   taskId: string;
   resource?: EditorProjectResourceSnapshot | null;
   asset?: EditorAssetSnapshot | null;
@@ -342,7 +338,6 @@ export type EditorIconSpritesheetGenerationResult = {
   prompt: string;
   actualPrompt?: string | null;
   model: string;
-  provider: string;
   taskId: string;
   priceMudPoints: number;
   spritesheetResource?: EditorProjectResourceSnapshot | null;
@@ -465,7 +460,6 @@ export type EditorVideoGenerationResult = {
   prompt: string;
   actualPrompt?: string | null;
   model: string;
-  provider: string;
   taskId: string;
   durationSeconds: number;
   priceMudPoints?: number;
@@ -506,7 +500,6 @@ export type EditorAudioGenerationResult = {
   prompt: string;
   actualPrompt?: string | null;
   model: string;
-  provider: string;
   taskId: string;
   priceMudPoints: number;
   audioKind: 'sound-effect' | 'background-music';
@@ -923,7 +916,6 @@ export async function generateEditorImage(input: EditorImageGenerationInput) {
       ...(input.kind ? { kind: input.kind } : {}),
       ...(input.model ? { model: input.model } : {}),
       ...(input.screenColor ? { screenColor: input.screenColor } : {}),
-      ...(input.segModel ? { segModel: input.segModel } : {}),
       ...(input.style ? { style: input.style } : {}),
       ...(input.aspectRatio ? { aspectRatio: input.aspectRatio } : {}),
       ...(input.imageSize ? { imageSize: input.imageSize } : {}),
@@ -970,7 +962,6 @@ export async function generateEditorIconSpritesheet(
       iconDescriptions: input.iconDescriptions,
       model: input.model?.trim() || EDITOR_IMAGE_MODEL_NANOBANANA2,
       ...(input.screenColor ? { screenColor: input.screenColor } : {}),
-      ...(input.segModel ? { segModel: input.segModel } : {}),
       ...(input.style ? { style: input.style } : {}),
       ...(input.aspectRatio ? { aspectRatio: input.aspectRatio } : {}),
       ...(input.imageSize ? { imageSize: input.imageSize } : {}),
@@ -1018,7 +1009,6 @@ export async function extractEditorUiDesignAssets(
       sourceImageSrc: input.sourceImageSrc,
       ...(input.model ? { model: input.model } : {}),
       ...(input.screenColor ? { screenColor: input.screenColor } : {}),
-      ...(input.segModel ? { segModel: input.segModel } : {}),
       ...(input.referenceImageSrcs?.length
         ? { referenceImageSrcs: input.referenceImageSrcs }
         : {}),