@duckmind/dm-windows-x64 0.60.6 → 0.60.9

package/extensions/dm-image2/src/image-lib.mjs

@@ -1,8 +1,1275 @@
-import{randomUUID as l}from"node:crypto";import{existsSync as F,mkdirSync as x,readFileSync as S,unlinkSync as XZ,writeFileSync as d}from"node:fs";import{dirname as R,join as L,resolve as f}from"node:path";import{spawn as YZ,spawnSync as JZ}from"node:child_process";import{homedir as p}from"node:os";import{getAgentDir as n}from"@duckmind/dm-coding-agent";var QZ="https://chatgpt.com/backend-api/codex/responses",zZ="https://openrouter.ai/api/v1/chat/completions",A="1:1",KZ="png",y=900000,VZ="DM_IMAGE_TEST_DELAY_MS",i="DM_IMAGE_ALLOW_LEGACY_FALLBACK",I="@preset/image2",jZ=I,E="gpt-5.5",GZ=new Set(["image2",I,"duckmind/image2","duckmind/@preset/image2","openrouter/image2","openrouter/@preset/image2"]),qZ=new Set([E,`openai-codex/${E}`,`codex/${E}`]),b={"1:1":{width:1024,height:1024},"4:5":{width:1024,height:1280},"16:9":{width:1600,height:900}},s=f(R(new URL(import.meta.url).pathname),"..","vendor","imagen"),P=L(s,"imagen.py");function BZ(Z){return String(Z??"").trim().toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,48)||"image"}function UZ(Z){return typeof Z==="string"&&Z in b?Z:A}function NZ(Z){return Z==="svg"?"svg":KZ}function o(Z){let $=String(Z??"").trim();if(qZ.has($))return E;return GZ.has($)?I:jZ}function OZ(Z){return o(Z)===I}function _Z(Z=process.env[i]){return typeof Z==="string"&&/^(1|true|yes|on)$/i.test(Z.trim())}function w(Z="Request was aborted"){let $=Error(Z);return $.name="AbortError",$}function C(Z){if(!Z)return!1;if(Z instanceof Error&&Z.name==="AbortError")return!0;let $=Z instanceof Error?Z.message:String(Z);return $==="Request was aborted"||$==="This operation was aborted"}function k(Z){if(!Z?.aborted)return;if(Z.reason instanceof Error)throw Z.reason;throw w()}function LZ(Z,$=y){let H=new AbortController,W=setTimeout(()=>H.abort(w(`Image request timed out after ${Math.round($/1000)}s`)),$),X=()=>{H.abort(Z?.reason instanceof Error?Z.reason:w())};if(Z?.aborted)X();else if(Z)Z.addEventListener("abort",X,{once:!0});return{signal:H.signal,cleanup(){clearTimeout(W),Z?.removeEventListener("abort",X)}}}function MZ(Z,$){if(!Number.isFinite(Z)||Z<=0)return Promise.resolve();return k($),new Promise((H,W)=>{let X=setTimeout(()=>{$?.removeEventListener("abort",Y),H()},Z),Y=()=>{clearTimeout(X),$?.removeEventListener("abort",Y),W(w())};$?.addEventListener("abort",Y,{once:!0})})}function DZ(){let Z=String(process.env[VZ]??"").trim();if(!Z)return 0;let $=Number.parseInt(Z,10);if(!Number.isFinite($)||$<=0)return 0;return Math.min($,300000)}function r(Z){return L(n(),Z)}function v(Z){try{return JSON.parse(S(Z,"utf-8"))}catch{return}}function Q0(Z,$=Date.now()){let H=typeof Z?.expiresAt==="number"?Z.expiresAt:typeof Z?.expires_at==="number"?Z.expires_at:void 0,W=typeof H!=="number"||H>$;return!!(Z&&Z.accessToken&&Z.accountId&&(!Z.needsReauth||W))}function fZ(Z){if(!Z||typeof Z!=="object")return;let $=Object.keys(Z).filter((Y)=>Y==="openai-codex"||/^openai-codex-account-\d+$/.test(Y)).sort((Y,J)=>{if(Y==="openai-codex")return-1;if(J==="openai-codex")return 1;return Y.localeCompare(J,void 0,{numeric:!0})}).find((Y)=>{let J=Z[Y];return J&&typeof J==="object"&&!Array.isArray(J)}),H=$?Z[$]:void 0;if(!H||typeof H!=="object"||Array.isArray(H))return;let W=typeof H.access==="string"?H.access:void 0,X=typeof H.accountId==="string"?H.accountId:typeof H.account_id==="string"?H.account_id:void 0;if(!W||!X)return;return{accessToken:W,accountId:X,email:typeof H.email==="string"?H.email:void 0}}function TZ(Z){try{let $=String(Z??"").split(".");if($.length!==3)return;let W=JSON.parse(Buffer.from($[1],"base64url").toString("utf8"))?.["https://api.openai.com/auth"]?.chatgpt_account_id;return typeof W==="string"&&W.trim()?W.trim():void 0}catch{return}}function m(Z,$){if(!Z||typeof Z!=="object")return;let H=$.toLowerCase();for(let[W,X]of Object.entries(Z)){if(String(W).toLowerCase()!==H)continue;if(typeof X==="string"&&X.trim())return X.trim()}return}function FZ(Z){let $=Z?.modelRegistry,H=[],W=new Set,X=(Y)=>{if(!Y||typeof Y!=="object")return;if(Y.provider!=="openai-codex")return;let J=`${Y.provider}/${Y.id}`;if(W.has(J))return;W.add(J),H.push(Y)};if(X(Z?.model),$&&typeof $.find==="function")X($.find("openai-codex",E));if($&&typeof $.getAvailable==="function")for(let Y of $.getAvailable())X(Y);return H}async function SZ(Z){let $=Z?.modelRegistry;if(!$||typeof $.getApiKeyAndHeaders!=="function")return;for(let H of FZ(Z)){let W=await $.getApiKeyAndHeaders(H);if(!W?.ok||!W.apiKey)continue;let X=TZ(W.apiKey)||m(W.headers,"ChatGPT-Account-Id")||m(W.headers,"chatgpt-account-id");if(!X)continue;return{accessToken:W.apiKey,accountId:X,email:void 0,source:`model-registry:${H.provider}/${H.id}`}}return}function a(){let Z=v(r("auth.json")),$=fZ(Z);if($)return{...$,source:"auth.json"};throw Error("Missing active Codex credentials. Ensure ~/.dm/agent/auth.json contains an openai-codex or openai-codex-account-N account.")}function bZ(){return["You are a focused image-generation assistant.","Finish by calling image_generation for the final answer.","Do not stop at plain text when the user asked for an image.","Follow the requested visual direction, aspect ratio, and subject details closely."].join(" ")}function wZ(){return["You are a vector illustrator.","Return exactly one standalone SVG image and no prose.","Do not wrap the SVG in markdown fences.","Do not return a data URI unless absolutely necessary.","Do not mention limitations, policies, or explanations in the answer."].join(" ")}function kZ(Z,$){let H=b[$]??b[A];return[`Create one polished self-contained SVG illustration for this brief: ${Z}`,`Use a ${$} aspect ratio with a ${H.width}x${H.height} canvas and a matching viewBox.`,"Return only raw <svg>...</svg> markup.","Use simple shapes, gradients, paths, and fills; avoid external fonts, scripts, or remote URLs.","If the request is a portrait, make it respectful, stylized, and presentation-ready."].join(`
-`)}function CZ(Z,$){let H=b[$]??b[A];return[Z,`Output in exactly ${H.width}px x ${H.height}px (${$}).`,"Prefer production-ready composition, grounded local detail when relevant, and the strongest final image_generation call."].join(`
-`)}function t(Z,$){let H=b[$]??b[A];return[Z,`Target aspect ratio: ${$}.`,`Compose for roughly ${H.width}x${H.height} output.`,"Generate the final answer by calling the image_generation tool.","If the prompt is a portrait or public person, keep it respectful and presentation-ready."].join(`
-`)}function EZ(Z){let $=String(Z??"").trim();if(!$)throw Error("Codex returned an empty image response.");let H=$.match(/!\[[^\]]*]\((data:image\/svg\+xml[^)]+)\)/i);if(H?.[1]){let Q=H[1],z=Q.indexOf(",");if(z!==-1)return decodeURIComponent(Q.slice(z+1)).trim()}let W=$.match(/data:image\/svg\+xml[^,]*,(.+)$/is);if(W?.[1])return decodeURIComponent(W[1]).trim();let Y=$.match(/```(?:svg)?\s*([\s\S]*?)```/i)?.[1]?.trim();if(Y?.startsWith("<svg"))return Y;let J=$.match(/<svg[\s\S]*<\/svg>/i);if(J?.[0])return J[0].trim();throw Error(`Expected SVG markup from Codex, received: ${$.slice(0,240)}`)}async function c(Z,$,H){let W=LZ(H,y),X;try{X=await fetch(QZ,{method:"POST",signal:W.signal,headers:{"Content-Type":"application/json",Authorization:`Bearer ${$.accessToken}`,Accept:"text/event-stream","Cache-Control":"no-cache",originator:"Codex Desktop","User-Agent":"Codex Desktop/26.212.1823 (darwin; arm64)","ChatGPT-Account-Id":$.accountId},body:JSON.stringify(Z)})}catch(K){if(W.cleanup(),C(K)||W.signal.aborted)throw w();throw K}if(!X.ok){W.cleanup();let K=await X.text().catch(()=>"");throw Error(`Codex image request failed: HTTP ${X.status} ${K.slice(0,240)}`)}if(!X.body)throw W.cleanup(),Error("Codex image request returned no response body.");let Y=new TextDecoder,J=X.body.getReader(),Q="",z=null,q=[],B="",G,N=[],U=()=>{if(!z||q.length===0)return z=null,q=[],!1;let K=JSON.parse(q.join(`
-`));if(z==="response.output_text.delta"&&typeof K.delta==="string")B+=K.delta;if(z==="response.output_item.done"&&K.item&&typeof K.item==="object")N.push(K.item);if(z==="response.completed"||z==="response.done")return G=K.response?.id??G,z=null,q=[],!0;if(z==="response.failed"||z==="response.incomplete"){let j=K.response?.error?.message||K.response?.incomplete_details?.reason||"Codex image request did not complete.";throw Error(String(j))}return z=null,q=[],!1};try{while(!0){k(W.signal);let{value:K,done:j}=await J.read();Q+=Y.decode(K??new Uint8Array,{stream:!j});while(!0){let O=Q.indexOf(`
-`);if(O===-1)break;let V=Q.slice(0,O);if(Q=Q.slice(O+1),V.endsWith("\r"))V=V.slice(0,-1);if(!V){if(U())return{assistantText:B.trim(),outputItems:N,responseId:G};continue}if(V.startsWith("event: "))z=V.slice(7).trim();else if(V.startsWith("data: "))q.push(V.slice(6))}if(j)break}if(q.length>0)U();return{assistantText:B.trim(),outputItems:N,responseId:G}}catch(K){if(await J.cancel().catch(()=>{}),C(K)||W.signal.aborted)throw w();throw K}finally{W.cleanup(),J.releaseLock()}}function IZ(Z,$,H){switch($){case"global":return f(L(n(),"generated-images"));case"custom":if(!H||!String(H).trim())throw Error("save=custom requires saveDir.");return f(String(H).trim());case"project":default:return f(Z,".dm","generated-images")}}function xZ(Z,$,H,W){let X=W||`run-${l().slice(0,8)}`;return f("/tmp","dm-imagen-runs",X)}function h(Z,$){x(R(Z),{recursive:!0}),d(Z,$,"utf-8")}function g(Z,$){x(R(Z),{recursive:!0}),d(Z,$)}function RZ(Z,$){let H=JZ("sips",["-s","format","png",Z,"--out",$],{encoding:"utf-8"});if(H.status===0&&F($))return;let W=(H.stderr||H.stdout||`exit ${H.status??"unknown"}`).trim();throw Error(`Failed to convert SVG to PNG via sips: ${W}`)}function e(Z,$="png"){let H=String(Z??"").trim();if(!H)throw Error("image_generation.result is empty");let W=H,X="";if(H.startsWith("data:")){let Q=H.indexOf(",");if(Q===-1)throw Error("image_generation.result data URL is malformed");let z=H.slice(5,Q);X=String(z.split(";",1)[0]??"").trim(),W=H.slice(Q+1)}let Y=Buffer.from(W,"base64");if(!Y.length)throw Error("image_generation.result decoded to empty bytes");let J=String($||"png").trim().toLowerCase().replace(/^\./,"")||"png";if(X==="image/jpeg")J="jpg";else if(X==="image/webp")J="webp";else if(X==="image/gif")J="gif";else if(X==="image/png")J="png";return{bytes:Y,mimeType:X||(J==="jpg"?"image/jpeg":`image/${J}`),extension:J}}function AZ(Z){return String(Z??"").trim().replace(/^['"]|['"]$/g,"")}function PZ(Z){if(!Z||!F(Z))return;try{for(let $ of S(Z,"utf-8").split(/\r?\n/)){let H=$.trim();if(!H||H.startsWith("#")||!H.includes("="))continue;if(H.startsWith("export "))H=H.slice(7).trim();let[W,...X]=H.split("="),Y=W.trim(),J=AZ(X.join("="));if((Y==="OPENROUTER_API_KEY"||Y==="OPENROUTER_KEY")&&J)return{apiKey:J,source:`config:${Z}`}}}catch{return}return}function u(Z){let $=[],H=f(Z||process.cwd());while(!0){$.push(L(H,"config","openrouter.cnf"));let W=R(H);if(W===H)break;H=W}return $}function yZ(Z){let $=process.env.OPENROUTER_API_KEY||process.env.OPENROUTER_KEY;if($)return{apiKey:$,source:"env:OPENROUTER_API_KEY"};let H=[...u(Z),...u(process.cwd()),L(p(),".dm","openrouter.cnf"),L(p(),".config","dm","openrouter.cnf")],W=new Set;for(let X of H){if(W.has(X))continue;W.add(X);let Y=PZ(X);if(Y)return Y}return}async function vZ(Z){let $=Z?.modelRegistry;if(!$||typeof $!=="object")return;if(typeof $.getApiKeyForProvider==="function")for(let Y of["openrouter","duckmind"]){let J=await $.getApiKeyForProvider(Y);if(typeof J==="string"&&J.trim())return{apiKey:J.trim(),source:`model-registry:${Y}`}}if(typeof $.getApiKeyAndHeaders!=="function")return;let H=[],W=new Set,X=(Y)=>{if(!Y||typeof Y!=="object")return;let J=String(Y.provider??"").toLowerCase();if(J!=="openrouter"&&J!=="duckmind")return;let Q=String(Y.id??Y.modelId??""),z=`${J}/${Q}`;if(W.has(z))return;W.add(z),H.push(Y)};if(X(Z?.model),typeof $.find==="function")X($.find("openrouter",I)),X($.find("openrouter","@preset/free"));if(typeof $.getAvailable==="function")for(let Y of $.getAvailable())X(Y);for(let Y of H){let J=await $.getApiKeyAndHeaders(Y);if(J?.ok&&typeof J.apiKey==="string"&&J.apiKey.trim())return{apiKey:J.apiKey.trim(),source:`model-registry:${Y.provider}/${Y.id??Y.modelId??""}`}}return}async function hZ(Z,$){return await vZ($)??yZ(Z)}function gZ(Z){let $=Z?.content;if(typeof $==="string")return $.trim();if(!Array.isArray($))return"";return $.map((H)=>{if(!H||typeof H!=="object")return"";return typeof H.text==="string"?H.text:""}).join("").trim()}function pZ(Z){for(let $ of Array.isArray(Z?.choices)?Z.choices:[]){let H=$?.message;for(let W of Array.isArray(H?.images)?H.images:[]){let X=W?.image_url,Y=typeof X==="string"?X:X?.url??W?.url;if(typeof Y==="string"&&Y.trim())return Y.trim()}for(let W of Array.isArray(H?.content)?H.content:[]){let X=W?.image_url,Y=typeof X==="string"?X:X?.url??W?.url;if(typeof Y==="string"&&Y.trim())return Y.trim()}}return""}async function mZ({prompt:Z,aspectRatio:$,outputFormat:H,model:W,outputRoot:X,baseName:Y,cwd:J,signal:Q,runtimeAuthContext:z}){if(H!=="png")throw Error("DuckMind image2 currently supports PNG output only.");if(typeof fetch!=="function")throw Error("DuckMind image2 requires a runtime with global fetch support.");let q=await hZ(J,z);if(!q?.apiKey)throw Error("Missing DuckMind API key for image2. Set OPENROUTER_API_KEY, paste a DuckMind API key via /login, or provide a local DuckMind image service config.");let B={model:W,modalities:["image","text"],messages:[{role:"user",content:[{type:"text",text:t(Z,$)}]}]},G=await fetch(zZ,{method:"POST",headers:{Authorization:`Bearer ${q.apiKey}`,"Content-Type":"application/json"},body:JSON.stringify(B),signal:Q}),N=await G.text(),U;try{U=N?JSON.parse(N):{}}catch{U={}}if(!G.ok){let _=U?.error?.message||U?.message||N.slice(0,400)||G.statusText;throw Error(`DuckMind image_generation failed (${G.status}): ${_}`)}let K=pZ(U);if(!K)throw Error("DuckMind image_generation returned no image data.");let j=e(K,H),O=L(X,`${Y}.${j.extension}`);g(O,j.bytes);let V=U?.choices?.[0]?.message;return{status:"ok",imagePath:O,svgPath:"",imageBase64:j.bytes.toString("base64"),mimeType:j.mimeType,prompt:Z,aspectRatio:$,model:W,source:q.source,responseId:typeof U?.id==="string"?U.id:"",revisedPrompt:"",backendMode:"openrouter-image-generation",requestedBackend:"openrouter:image2",authSource:q.source,assistantText:gZ(V),openRouterModel:typeof U?.model==="string"?U.model:""}}function cZ(Z){return Array.isArray(Z)?Z.filter(($)=>$&&typeof $==="object"&&$.type==="image_generation_call"):[]}function uZ(){let Z=a();return{tokens:{access_token:Z.accessToken,account_id:Z.accountId}}}function lZ(Z){let $=L(Z,"auth.json");return h($,JSON.stringify(uZ(),null,2)+`
-`),$}function ZZ(){let Z=[],$=new Set;for(let[H,W]of[["env:auth_file",process.env.auth_file],["env:M_AUTH_FILE",process.env.M_AUTH_FILE]]){if(typeof W!=="string"||!W.trim())continue;let X=f(W);if(!F(X)||$.has(X))continue;$.add(X),Z.push({kind:"file",authSource:H,authFile:X})}return Z}function $Z(){let Z=v(r("auth.json"));if(!Z||typeof Z!=="object")return[];return Object.keys(Z).filter(($)=>$==="openai-codex"||/^openai-codex-account-\d+$/.test($)).sort(($,H)=>{if($==="openai-codex")return-1;if(H==="openai-codex")return 1;return $.localeCompare(H,void 0,{numeric:!0})}).map(($)=>{let H=Z[$],W=typeof H?.access==="string"?H.access:"",X=typeof H?.accountId==="string"?H.accountId:typeof H?.account_id==="string"?H.account_id:"";if(!W||!X)return;return{kind:"managed",authSource:`auth.json:${$}`,email:typeof H?.email==="string"?H.email:$,authData:{tokens:{access_token:W,account_id:X}}}}).filter(Boolean)}function dZ(Z,$){let H=[],W=new Set,X=(Q,z)=>{let q=z?.tokens?.access_token,B=z?.tokens?.account_id;if(typeof q!=="string"||!q.trim())return;if(typeof B!=="string"||!B.trim())return;let G=`inline:${Q}:${B}`;if(W.has(G))return;W.add(G),H.push({kind:"managed",authSource:Q,email:Q,authData:z})},Y=(Q,z)=>{if(!z)return;let q=f(z);if(!F(q))return;let B=`file:${q}`;if(W.has(B))return;W.add(B),H.push({kind:"file",authSource:Q,authFile:q})},J=$?.liveCodexCredentials;if(J?.accessToken&&J?.accountId)X(J.source||"model-registry",{tokens:{access_token:J.accessToken,account_id:J.accountId}});for(let Q of ZZ())Y(Q.authSource,Q.authFile);for(let Q of $Z()){let z=`managed:${Q.email}`;if(W.has(z))continue;W.add(z),H.push(Q)}if(H.length===0)H.push({kind:"file",authSource:"dm-auth-shim",authFile:lZ(Z)});return H}function nZ(Z){let H=v(Z)?.tokens,W=typeof H?.access_token==="string"?H.access_token.trim():"",X=typeof H?.account_id==="string"?H.account_id.trim():"";if(!W||!X)return;return{accessToken:W,accountId:X,email:void 0,source:Z}}function iZ(Z){let $=Z?.tokens,H=typeof $?.access_token==="string"?$.access_token.trim():"",W=typeof $?.account_id==="string"?$.account_id.trim():"";if(!H||!W)return;return{accessToken:H,accountId:W,email:void 0,source:"managed-inline"}}function sZ(){for(let Z of ZZ()){let $=nZ(Z.authFile);if($)return{...$,source:Z.authSource}}for(let Z of $Z()){let $=iZ(Z.authData);if($)return{...$,source:Z.authSource}}return a()}function HZ(Z){return String(Z??"").split(/\r?\n/).map(($)=>$.trim()).filter(Boolean).map(($)=>f($))}function oZ(Z){if(!F(Z))return[];return S(Z,"utf-8").split(/\r?\n/).map(($)=>$.trim()).filter(Boolean).map(($)=>{try{return JSON.parse($)}catch{return null}}).filter(Boolean)}function rZ(Z){let $=oZ(Z),H="",W="";for(let X of $)if(X?.type==="image_generation_call"&&typeof X.saved_path==="string"&&X.saved_path){if(H=X.saved_path,typeof X.revised_prompt==="string"&&X.revised_prompt)W=X.revised_prompt}return{savedPath:H,revisedPrompt:W}}async function aZ({prompt:Z,aspectRatio:$,model:H,outputFormat:W,cwd:X,signal:Y,sessionRoot:J,candidate:Q,index:z}){let q=L(J,`session-${z}.jsonl`),B=Q.authFile;if(Q.kind==="managed")B=L(J,`auth-${z}.json`),h(B,JSON.stringify(Q.authData,null,2)+`
-`);let G={...process.env,PYTHONPATH:s+(process.env.PYTHONPATH?`:${process.env.PYTHONPATH}`:""),auth_file:B,model:H,quiet:"1",no_session_lock:"1",session:`new:${q}`},N=y;return await new Promise((U,K)=>{let j=!1,O="",V="",_=YZ("python3",[P,CZ(Z,$)],{cwd:X,env:G,stdio:["ignore","pipe","pipe"]}),T=setTimeout(()=>{_.kill("SIGTERM")},N),M=()=>{_.kill("SIGTERM")};Y?.addEventListener("abort",M,{once:!0}),_.stdout.on("data",(D)=>{O+=D.toString("utf-8")}),_.stderr.on("data",(D)=>{V+=D.toString("utf-8")}),_.on("error",(D)=>{if(j)return;j=!0,clearTimeout(T),Y?.removeEventListener("abort",M),K(D)}),_.on("close",(D,WZ)=>{if(j)return;if(j=!0,clearTimeout(T),Y?.removeEventListener("abort",M),Y?.aborted){K(w());return}if(WZ==="SIGTERM"){K(Error(`imagen.py timed out after ${Math.round(N/1000)}s`));return}if(D!==0){K(Error(V.trim()||O.trim()||`imagen.py exited ${D}`));return}U({stdout:O,stderr:V,sessionFile:q,sessionRoot:J,authSource:Q.authSource})})})}async function tZ({prompt:Z,aspectRatio:$,model:H,outputFormat:W,cwd:X,save:Y,saveDir:J,signal:Q,runId:z,runtimeAuthContext:q}){if(W!=="png")throw Error("The bundled imagen.py lane only supports PNG output.");if(!F(P))throw Error(`Bundled imagen.py is missing: ${P}`);let B=xZ(X,Y,J,z);x(B,{recursive:!0});let G=dZ(B,q),N=[];for(let[U,K]of G.entries())try{let j=await aZ({prompt:Z,aspectRatio:$,model:H,outputFormat:W,cwd:X,signal:Q,sessionRoot:B,candidate:K,index:U});if(HZ(j.stdout).length>0)return j;N.push(`${K.authSource}: no saved image path`)}catch(j){if(C(j))throw j;N.push(`${K.authSource}: ${j instanceof Error?j.message:String(j)}`)}throw Error(`imagen.py candidates exhausted: ${N.slice(-5).join(" | ")}`)}function eZ(Z,$,H){let W=f(Z);if(!F(W))throw Error(`imagen.py reported a missing artifact: ${W}`);let X=W.split(".").pop()||"png",Y=L($,`${H}.${X}`);return g(Y,S(W)),Y}async function Z0({prompt:Z,aspectRatio:$,outputFormat:H,model:W,outputRoot:X,baseName:Y,credentials:J,signal:Q,imagenError:z,requestedBackend:q}){let B="",G="",N="",U="image/png";try{if(H==="png"){let V=await c({model:W,instructions:bZ(),input:[{type:"message",role:"user",content:[{type:"input_text",text:t(Z,$)}]}],reasoning:{effort:"medium",summary:"detailed"},tools:[{type:"image_generation",output_format:"png"}],tool_choice:"auto",parallel_tool_calls:!1,store:!1,stream:!0,include:["reasoning.encrypted_content"]},J,Q),_=cZ(V.outputItems);if(_.length>0){let T=_[0],M=e(T.result,"png");return G=L(X,`${Y}.${M.extension}`),g(G,M.bytes),N=S(G).toString("base64"),{status:"ok",imagePath:G,svgPath:"",imageBase64:N,mimeType:M.mimeType,prompt:Z,aspectRatio:$,model:W,source:J.source,responseId:V.responseId,revisedPrompt:typeof T.revised_prompt==="string"?T.revised_prompt:"",backendMode:"native-image-generation",requestedBackend:q,imagenError:z,assistantText:V.assistantText}}}let{assistantText:K,responseId:j}=await c({model:W,instructions:wZ(),input:[{type:"message",role:"user",content:[{type:"input_text",text:kZ(Z,$)}]}],reasoning:{effort:"medium",summary:"detailed"},tool_choice:"auto",parallel_tool_calls:!1,store:!1,stream:!0,include:["reasoning.encrypted_content"]},J,Q);k(Q);let O=EZ(K);if(B=L(X,`${Y}.svg`),h(B,O),G=B,U="image/svg+xml",H==="png"){let V=L(X,`${Y}.png`);k(Q),RZ(B,V),k(Q),G=V,N=S(V).toString("base64"),U="image/png"}return{status:"ok",imagePath:G,svgPath:B,imageBase64:N,mimeType:U,prompt:Z,aspectRatio:$,model:W,source:J.source,responseId:j,backendMode:"svg-fallback",requestedBackend:q,imagenError:z,assistantText:K}}catch(K){if(C(K))for(let j of[G,B]){if(!j||!F(j))continue;try{XZ(j)}catch{}}throw K}}async function z0(Z,$,H,W=void 0){let X=String(Z.prompt??"").trim();if(!X)throw Error("image_generation.prompt is required.");k(H);let Y=UZ(Z.aspectRatio),J=NZ(Z.outputFormat),Q=o(Z.model),z=IZ($,Z.save??"project",Z.saveDir);x(z,{recursive:!0});let q=new Date().toISOString().replace(/[:.]/g,"-"),B=BZ(X),G=`image-${q}-${B}-${l().slice(0,8)}`;if(OZ(Q))return await mZ({prompt:X,aspectRatio:Y,outputFormat:J,model:Q,outputRoot:z,baseName:G,cwd:$,signal:H,runtimeAuthContext:W});let N=await SZ(W),U=N??sZ();try{let K=DZ();if(K>0)await MZ(K,H);let j="",O=_Z();if(J==="png"){try{let V=await tZ({prompt:X,aspectRatio:Y,model:Q,outputFormat:J,cwd:$,save:Z.save??"project",saveDir:Z.saveDir,signal:H,runId:G,runtimeAuthContext:N?{liveCodexCredentials:N}:W}),_=HZ(V.stdout);if(_.length>0){let T=rZ(V.sessionFile),M=eZ(T.savedPath||_[0],z,G),D=S(M).toString("base64");return{status:"ok",imagePath:M,svgPath:"",imageBase64:D,mimeType:"image/png",prompt:X,aspectRatio:Y,model:Q,source:U.source,responseId:"",revisedPrompt:T.revisedPrompt||"",backendMode:"imagen-py",requestedBackend:"imagen-py",authSource:V.authSource,assistantText:String(V.stderr??"").trim(),sessionFile:V.sessionFile,imagenSavedPaths:_}}j=`imagen.py produced no saved image path. stderr=${V.stderr.trim().slice(0,400)}`}catch(V){if(C(V))throw V;j=V instanceof Error?V.message:String(V)}if(!O)throw Error(`Bundled imagen.py is required for PNG image_generation, but it failed: ${j}. Provide a healthy DM Codex credential source or set ${i}=1 only for emergency legacy fallback debugging.`)}return await Z0({prompt:X,aspectRatio:Y,outputFormat:J,model:Q,outputRoot:z,baseName:G,credentials:U,signal:H,imagenError:j,requestedBackend:"legacy-fallback"})}catch(K){if(C(K))throw K;throw K}}export{MZ as sleepWithSignal,NZ as resolveOutputFormat,SZ as resolveLiveSessionCodexCredentials,o as resolveImageGenerationModel,sZ as resolveCustomFallbackCredentials,UZ as normalizeAspectRatio,a as loadActiveCodexCredentials,Q0 as isManagedCodexAccountUsable,_Z as isLegacyFallbackEnabled,C as isAbortError,z0 as generateVectorImage,EZ as extractSvgMarkup,TZ as extractAccountIdFromAccessToken,e as decodeGeneratedImageData,w as createAbortError,kZ as buildVectorPrompt};
+import { randomUUID } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { spawn, spawnSync } from "node:child_process";
+import { homedir } from "node:os";
+import { getAgentDir } from "@duckmind/dm-coding-agent";
+const CODEX_RESPONSES_URL = "https://chatgpt.com/backend-api/codex/responses";
+const OPENROUTER_CHAT_COMPLETIONS_URL = "https://openrouter.ai/api/v1/chat/completions";
+const DEFAULT_ASPECT_RATIO = "1:1";
+const DEFAULT_OUTPUT_FORMAT = "png";
+const REQUEST_TIMEOUT_MS = 900000;
+const TEST_DELAY_ENV = "DM_IMAGE_TEST_DELAY_MS";
+const LEGACY_FALLBACK_ENV = "DM_IMAGE_ALLOW_LEGACY_FALLBACK";
+const IMAGE2_MODEL = "@preset/image2";
+const DEFAULT_IMAGE_MODEL = IMAGE2_MODEL;
+const LEGACY_CODEX_MODEL = "gpt-5.5";
+const IMAGE2_ALIASES = new Set([
+  "image2",
+  IMAGE2_MODEL,
+  "duckmind/image2",
+  "duckmind/@preset/image2",
+  "openrouter/image2",
+  "openrouter/@preset/image2"
+]);
+const LEGACY_CODEX_ALIASES = new Set([
+  LEGACY_CODEX_MODEL,
+  `openai-codex/${LEGACY_CODEX_MODEL}`,
+  `codex/${LEGACY_CODEX_MODEL}`
+]);
+const ASPECT_RATIOS = {
+  "1:1": { width: 1024, height: 1024 },
+  "4:5": { width: 1024, height: 1280 },
+  "16:9": { width: 1600, height: 900 }
+};
+const VENDOR_DIR = resolve(dirname(new URL(import.meta.url).pathname), "..", "vendor", "imagen");
+const IMAGEN_SCRIPT = join(VENDOR_DIR, "imagen.py");
+function slugify(value) {
+  const text = String(value ?? "").trim().toLowerCase();
+  const slug = text.replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
+  return slug || "image";
+}
+export function normalizeAspectRatio(value) {
+  return typeof value === "string" && value in ASPECT_RATIOS ? value : DEFAULT_ASPECT_RATIO;
+}
+export function resolveOutputFormat(value) {
+  return value === "svg" ? "svg" : DEFAULT_OUTPUT_FORMAT;
+}
+export function resolveImageGenerationModel(value) {
+  const raw = String(value ?? "").trim();
+  if (LEGACY_CODEX_ALIASES.has(raw))
+    return LEGACY_CODEX_MODEL;
+  return IMAGE2_ALIASES.has(raw) ? IMAGE2_MODEL : DEFAULT_IMAGE_MODEL;
+}
+function isOpenRouterImageModel(value) {
+  return resolveImageGenerationModel(value) === IMAGE2_MODEL;
+}
+export function isLegacyFallbackEnabled(value = process.env[LEGACY_FALLBACK_ENV]) {
+  return typeof value === "string" && /^(1|true|yes|on)$/i.test(value.trim());
+}
+export function createAbortError(message = "Request was aborted") {
+  const error = new Error(message);
+  error.name = "AbortError";
+  return error;
+}
+export function isAbortError(error) {
+  if (!error)
+    return false;
+  if (error instanceof Error && error.name === "AbortError")
+    return true;
+  const message = error instanceof Error ? error.message : String(error);
+  return message === "Request was aborted" || message === "This operation was aborted";
+}
+function throwIfAborted(signal) {
+  if (!signal?.aborted)
+    return;
+  if (signal.reason instanceof Error) {
+    throw signal.reason;
+  }
+  throw createAbortError();
+}
+function createRequestAbortScope(signal, timeoutMs = REQUEST_TIMEOUT_MS) {
+  const controller = new AbortController;
+  const timeoutId = setTimeout(() => controller.abort(createAbortError(`Image request timed out after ${Math.round(timeoutMs / 1000)}s`)), timeoutMs);
+  const onAbort = () => {
+    controller.abort(signal?.reason instanceof Error ? signal.reason : createAbortError());
+  };
+  if (signal?.aborted) {
+    onAbort();
+  } else if (signal) {
+    signal.addEventListener("abort", onAbort, { once: true });
+  }
+  return {
+    signal: controller.signal,
+    cleanup() {
+      clearTimeout(timeoutId);
+      signal?.removeEventListener("abort", onAbort);
+    }
+  };
+}
+export function sleepWithSignal(ms, signal) {
+  if (!Number.isFinite(ms) || ms <= 0)
+    return Promise.resolve();
+  throwIfAborted(signal);
+  return new Promise((resolvePromise, rejectPromise) => {
+    const timeoutId = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolvePromise();
+    }, ms);
+    const onAbort = () => {
+      clearTimeout(timeoutId);
+      signal?.removeEventListener("abort", onAbort);
+      rejectPromise(createAbortError());
+    };
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
+function getTestDelayMs() {
+  const raw = String(process.env[TEST_DELAY_ENV] ?? "").trim();
+  if (!raw)
+    return 0;
+  const parsed = Number.parseInt(raw, 10);
+  if (!Number.isFinite(parsed) || parsed <= 0)
+    return 0;
+  return Math.min(parsed, 300000);
+}
+function getAgentPath(fileName) {
+  return join(getAgentDir(), fileName);
+}
+function parseJsonFile(filePath) {
+  try {
+    return JSON.parse(readFileSync(filePath, "utf-8"));
+  } catch {
+    return;
+  }
+}
+function isPlaceholderAccountEmail(value) {
+  const email = String(value ?? "").trim().toLowerCase();
+  return !email || email === "select";
+}
+export function isManagedCodexAccountUsable(account, nowMs = Date.now()) {
+  const expiresAt = typeof account?.expiresAt === "number" ? account.expiresAt : typeof account?.expires_at === "number" ? account.expires_at : undefined;
+  const tokenStillFresh = typeof expiresAt !== "number" || expiresAt > nowMs;
+  return !!(account && account.accessToken && account.accountId && (!account.needsReauth || tokenStillFresh));
+}
+function selectActiveManagedAccount(storage) {
+  if (!storage || typeof storage !== "object")
+    return;
+  const accounts = Array.isArray(storage.accounts) ? storage.accounts : [];
+  const activeEmail = typeof storage.activeEmail === "string" ? storage.activeEmail : undefined;
+  for (const account of accounts) {
+    if (activeEmail && account?.email === activeEmail && isManagedCodexAccountUsable(account)) {
+      return account;
+    }
+  }
+  return accounts.find((account) => isManagedCodexAccountUsable(account));
+}
+function selectFallbackAuth(auth) {
+  if (!auth || typeof auth !== "object")
+    return;
+  const key = Object.keys(auth).filter((candidate) => candidate === "openai-codex" || /^openai-codex-account-\d+$/.test(candidate)).sort((left, right) => {
+    if (left === "openai-codex")
+      return -1;
+    if (right === "openai-codex")
+      return 1;
+    return left.localeCompare(right, undefined, { numeric: true });
+  }).find((candidate) => {
+    const value = auth[candidate];
+    return value && typeof value === "object" && !Array.isArray(value);
+  });
+  const entry = key ? auth[key] : undefined;
+  if (!entry || typeof entry !== "object" || Array.isArray(entry))
+    return;
+  const accessToken = typeof entry.access === "string" ? entry.access : undefined;
+  const accountId = typeof entry.accountId === "string" ? entry.accountId : typeof entry.account_id === "string" ? entry.account_id : undefined;
+  if (!accessToken || !accountId)
+    return;
+  return {
+    accessToken,
+    accountId,
+    email: typeof entry.email === "string" ? entry.email : undefined
+  };
+}
+export function extractAccountIdFromAccessToken(token) {
+  try {
+    const parts = String(token ?? "").split(".");
+    if (parts.length !== 3)
+      return;
+    const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
+    const accountId = payload?.["https://api.openai.com/auth"]?.chatgpt_account_id;
+    return typeof accountId === "string" && accountId.trim() ? accountId.trim() : undefined;
+  } catch {
+    return;
+  }
+}
+function getHeaderValue(headers, key) {
+  if (!headers || typeof headers !== "object")
+    return;
+  const lower = key.toLowerCase();
+  for (const [headerKey, headerValue] of Object.entries(headers)) {
+    if (String(headerKey).toLowerCase() !== lower)
+      continue;
+    if (typeof headerValue === "string" && headerValue.trim()) {
+      return headerValue.trim();
+    }
+  }
+  return;
+}
+function listLiveCodexModels(runtimeAuthContext) {
+  const registry = runtimeAuthContext?.modelRegistry;
+  const models = [];
+  const seen = new Set;
+  const push = (model) => {
+    if (!model || typeof model !== "object")
+      return;
+    if (model.provider !== "openai-codex")
+      return;
+    const key = `${model.provider}/${model.id}`;
+    if (seen.has(key))
+      return;
+    seen.add(key);
+    models.push(model);
+  };
+  push(runtimeAuthContext?.model);
+  if (registry && typeof registry.find === "function") {
+    push(registry.find("openai-codex", LEGACY_CODEX_MODEL));
+  }
+  if (registry && typeof registry.getAvailable === "function") {
+    for (const model of registry.getAvailable()) {
+      push(model);
+    }
+  }
+  return models;
+}
+export async function resolveLiveSessionCodexCredentials(runtimeAuthContext) {
+  const registry = runtimeAuthContext?.modelRegistry;
+  if (!registry || typeof registry.getApiKeyAndHeaders !== "function") {
+    return;
+  }
+  for (const model of listLiveCodexModels(runtimeAuthContext)) {
+    const auth = await registry.getApiKeyAndHeaders(model);
+    if (!auth?.ok || !auth.apiKey)
+      continue;
+    const accountId = extractAccountIdFromAccessToken(auth.apiKey) || getHeaderValue(auth.headers, "ChatGPT-Account-Id") || getHeaderValue(auth.headers, "chatgpt-account-id");
+    if (!accountId)
+      continue;
+    return {
+      accessToken: auth.apiKey,
+      accountId,
+      email: undefined,
+      source: `model-registry:${model.provider}/${model.id}`
+    };
+  }
+  return;
+}
+export function loadActiveCodexCredentials() {
+  const auth = parseJsonFile(getAgentPath("auth.json"));
+  const fallback = selectFallbackAuth(auth);
+  if (fallback) {
+    return {
+      ...fallback,
+      source: "auth.json"
+    };
+  }
+  throw new Error("Missing active Codex credentials. Ensure ~/.dm/agent/auth.json contains an openai-codex or openai-codex-account-N account.");
+}
+function buildNativeImageInstructions() {
+  return [
+    "You are a focused image-generation assistant.",
+    "Finish by calling image_generation for the final answer.",
+    "Do not stop at plain text when the user asked for an image.",
+    "Follow the requested visual direction, aspect ratio, and subject details closely."
+  ].join(" ");
+}
+function buildImageInstructions() {
+  return [
+    "You are a vector illustrator.",
+    "Return exactly one standalone SVG image and no prose.",
+    "Do not wrap the SVG in markdown fences.",
+    "Do not return a data URI unless absolutely necessary.",
+    "Do not mention limitations, policies, or explanations in the answer."
+  ].join(" ");
+}
+export function buildVectorPrompt(prompt, aspectRatio) {
+  const size = ASPECT_RATIOS[aspectRatio] ?? ASPECT_RATIOS[DEFAULT_ASPECT_RATIO];
+  return [
+    `Create one polished self-contained SVG illustration for this brief: ${prompt}`,
+    `Use a ${aspectRatio} aspect ratio with a ${size.width}x${size.height} canvas and a matching viewBox.`,
+    "Return only raw <svg>...</svg> markup.",
+    "Use simple shapes, gradients, paths, and fills; avoid external fonts, scripts, or remote URLs.",
+    "If the request is a portrait, make it respectful, stylized, and presentation-ready."
+  ].join(`
+`);
+}
+function buildImagenPrompt(prompt, aspectRatio) {
+  const size = ASPECT_RATIOS[aspectRatio] ?? ASPECT_RATIOS[DEFAULT_ASPECT_RATIO];
+  return [
+    prompt,
+    `Output in exactly ${size.width}px x ${size.height}px (${aspectRatio}).`,
+    "Prefer production-ready composition, grounded local detail when relevant, and the strongest final image_generation call."
+  ].join(`
+`);
+}
+function buildNativeImagePrompt(prompt, aspectRatio) {
+  const size = ASPECT_RATIOS[aspectRatio] ?? ASPECT_RATIOS[DEFAULT_ASPECT_RATIO];
+  return [
+    prompt,
+    `Target aspect ratio: ${aspectRatio}.`,
+    `Compose for roughly ${size.width}x${size.height} output.`,
+    "Generate the final answer by calling the image_generation tool.",
+    "If the prompt is a portrait or public person, keep it respectful and presentation-ready."
+  ].join(`
+`);
+}
+export function extractSvgMarkup(text) {
+  const raw = String(text ?? "").trim();
+  if (!raw) {
+    throw new Error("Codex returned an empty image response.");
+  }
+  const markdownDataUri = raw.match(/!\[[^\]]*]\((data:image\/svg\+xml[^)]+)\)/i);
+  if (markdownDataUri?.[1]) {
+    const uri = markdownDataUri[1];
+    const commaIndex = uri.indexOf(",");
+    if (commaIndex !== -1) {
+      return decodeURIComponent(uri.slice(commaIndex + 1)).trim();
+    }
+  }
+  const plainDataUri = raw.match(/data:image\/svg\+xml[^,]*,(.+)$/is);
+  if (plainDataUri?.[1]) {
+    return decodeURIComponent(plainDataUri[1]).trim();
+  }
+  const fenced = raw.match(/```(?:svg)?\s*([\s\S]*?)```/i);
+  const fencedCandidate = fenced?.[1]?.trim();
+  if (fencedCandidate?.startsWith("<svg")) {
+    return fencedCandidate;
+  }
+  const inline = raw.match(/<svg[\s\S]*<\/svg>/i);
+  if (inline?.[0]) {
+    return inline[0].trim();
+  }
+  throw new Error(`Expected SVG markup from Codex, received: ${raw.slice(0, 240)}`);
+}
+async function streamCodexResponse(requestBody, credentials, signal) {
+  const requestScope = createRequestAbortScope(signal, REQUEST_TIMEOUT_MS);
+  let response;
+  try {
+    response = await fetch(CODEX_RESPONSES_URL, {
+      method: "POST",
+      signal: requestScope.signal,
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${credentials.accessToken}`,
+        Accept: "text/event-stream",
+        "Cache-Control": "no-cache",
+        originator: "Codex Desktop",
+        "User-Agent": "Codex Desktop/26.212.1823 (darwin; arm64)",
+        "ChatGPT-Account-Id": credentials.accountId
+      },
+      body: JSON.stringify(requestBody)
+    });
+  } catch (error) {
+    requestScope.cleanup();
+    if (isAbortError(error) || requestScope.signal.aborted) {
+      throw createAbortError();
+    }
+    throw error;
+  }
+  if (!response.ok) {
+    requestScope.cleanup();
+    const body = await response.text().catch(() => "");
+    throw new Error(`Codex image request failed: HTTP ${response.status} ${body.slice(0, 240)}`);
+  }
+  if (!response.body) {
+    requestScope.cleanup();
+    throw new Error("Codex image request returned no response body.");
+  }
+  const decoder = new TextDecoder;
+  const reader = response.body.getReader();
+  let buffer = "";
+  let currentEvent = null;
+  let dataLines = [];
+  let assistantText = "";
+  let responseId;
+  const outputItems = [];
+  const flushEvent = () => {
+    if (!currentEvent || dataLines.length === 0) {
+      currentEvent = null;
+      dataLines = [];
+      return false;
+    }
+    const payload = JSON.parse(dataLines.join(`
+`));
+    if (currentEvent === "response.output_text.delta" && typeof payload.delta === "string") {
+      assistantText += payload.delta;
+    }
+    if (currentEvent === "response.output_item.done" && payload.item && typeof payload.item === "object") {
+      outputItems.push(payload.item);
+    }
+    if (currentEvent === "response.completed" || currentEvent === "response.done") {
+      responseId = payload.response?.id ?? responseId;
+      currentEvent = null;
+      dataLines = [];
+      return true;
+    }
+    if (currentEvent === "response.failed" || currentEvent === "response.incomplete") {
+      const message = payload.response?.error?.message || payload.response?.incomplete_details?.reason || "Codex image request did not complete.";
+      throw new Error(String(message));
+    }
+    currentEvent = null;
+    dataLines = [];
+    return false;
+  };
+  try {
+    while (true) {
+      throwIfAborted(requestScope.signal);
+      const { value, done } = await reader.read();
+      buffer += decoder.decode(value ?? new Uint8Array, { stream: !done });
+      while (true) {
+        const lineEnd = buffer.indexOf(`
+`);
+        if (lineEnd === -1)
+          break;
+        let line = buffer.slice(0, lineEnd);
+        buffer = buffer.slice(lineEnd + 1);
+        if (line.endsWith("\r"))
+          line = line.slice(0, -1);
+        if (!line) {
+          if (flushEvent()) {
+            return { assistantText: assistantText.trim(), outputItems, responseId };
+          }
+          continue;
+        }
+        if (line.startsWith("event: ")) {
+          currentEvent = line.slice(7).trim();
+        } else if (line.startsWith("data: ")) {
+          dataLines.push(line.slice(6));
+        }
+      }
+      if (done)
+        break;
+    }
+    if (dataLines.length > 0) {
+      flushEvent();
+    }
+    return { assistantText: assistantText.trim(), outputItems, responseId };
+  } catch (error) {
+    await reader.cancel().catch(() => {});
+    if (isAbortError(error) || requestScope.signal.aborted) {
+      throw createAbortError();
+    }
+    throw error;
+  } finally {
+    requestScope.cleanup();
+    reader.releaseLock();
+  }
+}
+function resolveOutputRoot(cwd, save, saveDir) {
+  switch (save) {
+    case "global":
+      return resolve(join(getAgentDir(), "generated-images"));
+    case "custom":
+      if (!saveDir || !String(saveDir).trim()) {
+        throw new Error("save=custom requires saveDir.");
+      }
+      return resolve(String(saveDir).trim());
+    case "project":
+    default:
+      return resolve(cwd, ".dm", "generated-images");
+  }
+}
+function buildImagenSessionRoot(cwd, save, saveDir, runId) {
+  const suffix = runId || `run-${randomUUID().slice(0, 8)}`;
+  return resolve("/tmp", "dm-imagen-runs", suffix);
+}
+function writeTextFile(filePath, content) {
+  mkdirSync(dirname(filePath), { recursive: true });
+  writeFileSync(filePath, content, "utf-8");
+}
+function writeBinaryFile(filePath, content) {
+  mkdirSync(dirname(filePath), { recursive: true });
+  writeFileSync(filePath, content);
+}
+function renderSvgToPng(svgPath, pngPath) {
+  const sips = spawnSync("sips", ["-s", "format", "png", svgPath, "--out", pngPath], {
+    encoding: "utf-8"
+  });
+  if (sips.status === 0 && existsSync(pngPath)) {
+    return;
+  }
+  const detail = (sips.stderr || sips.stdout || `exit ${sips.status ?? "unknown"}`).trim();
+  throw new Error(`Failed to convert SVG to PNG via sips: ${detail}`);
+}
+export function decodeGeneratedImageData(imageData, outputFormat = "png") {
+  const raw = String(imageData ?? "").trim();
+  if (!raw) {
+    throw new Error("image_generation.result is empty");
+  }
+  let encoded = raw;
+  let mimeType = "";
+  if (raw.startsWith("data:")) {
+    const commaIndex = raw.indexOf(",");
+    if (commaIndex === -1) {
+      throw new Error("image_generation.result data URL is malformed");
+    }
+    const header = raw.slice(5, commaIndex);
+    mimeType = String(header.split(";", 1)[0] ?? "").trim();
+    encoded = raw.slice(commaIndex + 1);
+  }
+  const bytes = Buffer.from(encoded, "base64");
+  if (!bytes.length) {
+    throw new Error("image_generation.result decoded to empty bytes");
+  }
+  let extension = String(outputFormat || "png").trim().toLowerCase().replace(/^\./, "") || "png";
+  if (mimeType === "image/jpeg")
+    extension = "jpg";
+  else if (mimeType === "image/webp")
+    extension = "webp";
+  else if (mimeType === "image/gif")
+    extension = "gif";
+  else if (mimeType === "image/png")
+    extension = "png";
+  return {
+    bytes,
+    mimeType: mimeType || (extension === "jpg" ? "image/jpeg" : `image/${extension}`),
+    extension
+  };
+}
+function stripConfigQuotes(value) {
+  return String(value ?? "").trim().replace(/^['"]|['"]$/g, "");
+}
+function readOpenRouterKeyFile(filePath) {
+  if (!filePath || !existsSync(filePath))
+    return;
+  try {
+    for (const raw of readFileSync(filePath, "utf-8").split(/\r?\n/)) {
+      let line = raw.trim();
+      if (!line || line.startsWith("#") || !line.includes("="))
+        continue;
+      if (line.startsWith("export "))
+        line = line.slice("export ".length).trim();
+      const [key, ...rest] = line.split("=");
+      const name = key.trim();
+      const value = stripConfigQuotes(rest.join("="));
+      if ((name === "OPENROUTER_API_KEY" || name === "OPENROUTER_KEY") && value) {
+        return { apiKey: value, source: `config:${filePath}` };
+      }
+    }
+  } catch {
+    return;
+  }
+  return;
+}
+function walkConfigCandidates(startDir) {
+  const candidates = [];
+  let current = resolve(startDir || process.cwd());
+  while (true) {
+    candidates.push(join(current, "config", "openrouter.cnf"));
+    const parent = dirname(current);
+    if (parent === current)
+      break;
+    current = parent;
+  }
+  return candidates;
+}
+function resolveOpenRouterKey(cwd) {
+  const envKey = process.env.OPENROUTER_API_KEY || process.env.OPENROUTER_KEY;
+  if (envKey)
+    return { apiKey: envKey, source: "env:OPENROUTER_API_KEY" };
+  const candidates = [
+    ...walkConfigCandidates(cwd),
+    ...walkConfigCandidates(process.cwd()),
+    join(homedir(), ".dm", "openrouter.cnf"),
+    join(homedir(), ".config", "dm", "openrouter.cnf")
+  ];
+  const seen = new Set;
+  for (const candidate of candidates) {
+    if (seen.has(candidate))
+      continue;
+    seen.add(candidate);
+    const config = readOpenRouterKeyFile(candidate);
+    if (config)
+      return config;
+  }
+  return;
+}
+async function resolveRuntimeDuckMindKey(runtimeAuthContext) {
+  const registry = runtimeAuthContext?.modelRegistry;
+  if (!registry || typeof registry !== "object")
+    return;
+  if (typeof registry.getApiKeyForProvider === "function") {
+    for (const provider of ["openrouter", "duckmind"]) {
+      const apiKey = await registry.getApiKeyForProvider(provider);
+      if (typeof apiKey === "string" && apiKey.trim()) {
+        return { apiKey: apiKey.trim(), source: `model-registry:${provider}` };
+      }
+    }
+  }
+  if (typeof registry.getApiKeyAndHeaders !== "function")
+    return;
+  const candidates = [];
+  const seen = new Set;
+  const push = (model) => {
+    if (!model || typeof model !== "object")
+      return;
+    const provider = String(model.provider ?? "").toLowerCase();
+    if (provider !== "openrouter" && provider !== "duckmind")
+      return;
+    const id = String(model.id ?? model.modelId ?? "");
+    const key = `${provider}/${id}`;
+    if (seen.has(key))
+      return;
+    seen.add(key);
+    candidates.push(model);
+  };
+  push(runtimeAuthContext?.model);
+  if (typeof registry.find === "function") {
+    push(registry.find("openrouter", IMAGE2_MODEL));
+    push(registry.find("openrouter", "@preset/free"));
+  }
+  if (typeof registry.getAvailable === "function") {
+    for (const model of registry.getAvailable())
+      push(model);
+  }
+  for (const model of candidates) {
+    const auth = await registry.getApiKeyAndHeaders(model);
+    if (auth?.ok && typeof auth.apiKey === "string" && auth.apiKey.trim()) {
+      return { apiKey: auth.apiKey.trim(), source: `model-registry:${model.provider}/${model.id ?? model.modelId ?? ""}` };
+    }
+  }
+  return;
+}
+async function resolveDuckMindImage2Key(cwd, runtimeAuthContext) {
+  return await resolveRuntimeDuckMindKey(runtimeAuthContext) ?? resolveOpenRouterKey(cwd);
+}
+function openRouterResponseText(message) {
+  const content = message?.content;
+  if (typeof content === "string")
+    return content.trim();
+  if (!Array.isArray(content))
+    return "";
+  return content.map((item) => {
+    if (!item || typeof item !== "object")
+      return "";
+    return typeof item.text === "string" ? item.text : "";
+  }).join("").trim();
+}
+function firstOpenRouterImageData(response) {
+  for (const choice of Array.isArray(response?.choices) ? response.choices : []) {
+    const message = choice?.message;
+    for (const item of Array.isArray(message?.images) ? message.images : []) {
+      const imageUrl = item?.image_url;
+      const value = typeof imageUrl === "string" ? imageUrl : imageUrl?.url ?? item?.url;
+      if (typeof value === "string" && value.trim())
+        return value.trim();
+    }
+    for (const item of Array.isArray(message?.content) ? message.content : []) {
+      const imageUrl = item?.image_url;
+      const value = typeof imageUrl === "string" ? imageUrl : imageUrl?.url ?? item?.url;
+      if (typeof value === "string" && value.trim())
+        return value.trim();
+    }
+  }
+  return "";
+}
+async function generateViaOpenRouterImage({ prompt, aspectRatio, outputFormat, model, outputRoot, baseName, cwd, signal, runtimeAuthContext }) {
+  if (outputFormat !== "png") {
+    throw new Error("DuckMind image2 currently supports PNG output only.");
+  }
+  if (typeof fetch !== "function") {
+    throw new Error("DuckMind image2 requires a runtime with global fetch support.");
+  }
+  const key = await resolveDuckMindImage2Key(cwd, runtimeAuthContext);
+  if (!key?.apiKey) {
+    throw new Error("Missing DuckMind API key for image2. Set OPENROUTER_API_KEY, paste a DuckMind API key via /login, or provide a local DuckMind image service config.");
+  }
+  const body = {
+    model,
+    modalities: ["image", "text"],
+    messages: [
+      {
+        role: "user",
+        content: [{ type: "text", text: buildNativeImagePrompt(prompt, aspectRatio) }]
+      }
+    ]
+  };
+  const response = await fetch(OPENROUTER_CHAT_COMPLETIONS_URL, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${key.apiKey}`,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify(body),
+    signal
+  });
+  const responseText = await response.text();
+  let payload;
+  try {
+    payload = responseText ? JSON.parse(responseText) : {};
+  } catch {
+    payload = {};
+  }
+  if (!response.ok) {
+    const detail = payload?.error?.message || payload?.message || responseText.slice(0, 400) || response.statusText;
+    throw new Error(`DuckMind image_generation failed (${response.status}): ${detail}`);
+  }
+  const imageData = firstOpenRouterImageData(payload);
+  if (!imageData) {
+    throw new Error("DuckMind image_generation returned no image data.");
+  }
+  const decoded = decodeGeneratedImageData(imageData, outputFormat);
+  const imagePath = join(outputRoot, `${baseName}.${decoded.extension}`);
+  writeBinaryFile(imagePath, decoded.bytes);
+  const message = payload?.choices?.[0]?.message;
+  return {
+    status: "ok",
+    imagePath,
+    svgPath: "",
+    imageBase64: decoded.bytes.toString("base64"),
+    mimeType: decoded.mimeType,
+    prompt,
+    aspectRatio,
+    model,
+    source: key.source,
+    responseId: typeof payload?.id === "string" ? payload.id : "",
+    revisedPrompt: "",
+    backendMode: "openrouter-image-generation",
+    requestedBackend: "openrouter:image2",
+    authSource: key.source,
+    assistantText: openRouterResponseText(message),
+    openRouterModel: typeof payload?.model === "string" ? payload.model : ""
+  };
+}
+function nativeImageItems(outputItems) {
+  return Array.isArray(outputItems) ? outputItems.filter((item) => item && typeof item === "object" && item.type === "image_generation_call") : [];
+}
+function loadDmCodexAuthEntry() {
+  const active = loadActiveCodexCredentials();
+  return {
+    tokens: {
+      access_token: active.accessToken,
+      account_id: active.accountId
+    }
+  };
+}
+function writeImagenAuthFile(sessionRoot) {
+  const authFile = join(sessionRoot, "auth.json");
+  writeTextFile(authFile, JSON.stringify(loadDmCodexAuthEntry(), null, 2) + `
+`);
+  return authFile;
+}
+function listExplicitAuthFileCandidates() {
+  const candidates = [];
+  const seen = new Set;
+  for (const [authSource, rawPath] of [
+    ["env:auth_file", process.env.auth_file],
+    ["env:M_AUTH_FILE", process.env.M_AUTH_FILE]
+  ]) {
+    if (typeof rawPath !== "string" || !rawPath.trim())
+      continue;
+    const authFile = resolve(rawPath);
+    if (!existsSync(authFile) || seen.has(authFile))
+      continue;
+    seen.add(authFile);
+    candidates.push({ kind: "file", authSource, authFile });
+  }
+  return candidates;
+}
+function listAuthJsonImagenAuthCandidates() {
+  const auth = parseJsonFile(getAgentPath("auth.json"));
+  if (!auth || typeof auth !== "object")
+    return [];
+  return Object.keys(auth).filter((key) => key === "openai-codex" || /^openai-codex-account-\d+$/.test(key)).sort((left, right) => {
+    if (left === "openai-codex")
+      return -1;
+    if (right === "openai-codex")
+      return 1;
+    return left.localeCompare(right, undefined, { numeric: true });
+  }).map((key) => {
+    const account = auth[key];
+    const accessToken = typeof account?.access === "string" ? account.access : "";
+    const accountId = typeof account?.accountId === "string" ? account.accountId : typeof account?.account_id === "string" ? account.account_id : "";
+    if (!accessToken || !accountId)
+      return;
+    return {
+      kind: "managed",
+      authSource: `auth.json:${key}`,
+      email: typeof account?.email === "string" ? account.email : key,
+      authData: {
+        tokens: {
+          access_token: accessToken,
+          account_id: accountId
+        }
+      }
+    };
+  }).filter(Boolean);
+}
+function resolveImagenAuthFile(sessionRoot) {
+  return { authFile: writeImagenAuthFile(sessionRoot), authSource: "dm-auth-shim" };
+}
+function resolveImagenAuthCandidates(sessionRoot, runtimeAuthContext) {
+  const candidates = [];
+  const seen = new Set;
+  const pushInlineCandidate = (sourceLabel, authData) => {
+    const accessToken = authData?.tokens?.access_token;
+    const accountId = authData?.tokens?.account_id;
+    if (typeof accessToken !== "string" || !accessToken.trim())
+      return;
+    if (typeof accountId !== "string" || !accountId.trim())
+      return;
+    const key = `inline:${sourceLabel}:${accountId}`;
+    if (seen.has(key))
+      return;
+    seen.add(key);
+    candidates.push({ kind: "managed", authSource: sourceLabel, email: sourceLabel, authData });
+  };
+  const pushFileCandidate = (sourceLabel, rawPath) => {
+    if (!rawPath)
+      return;
+    const path = resolve(rawPath);
+    if (!existsSync(path))
+      return;
+    const key = `file:${path}`;
+    if (seen.has(key))
+      return;
+    seen.add(key);
+    candidates.push({ kind: "file", authSource: sourceLabel, authFile: path });
+  };
+  const live = runtimeAuthContext?.liveCodexCredentials;
+  if (live?.accessToken && live?.accountId) {
+    pushInlineCandidate(live.source || "model-registry", {
+      tokens: {
+        access_token: live.accessToken,
+        account_id: live.accountId
+      }
+    });
+  }
+  for (const candidate of listExplicitAuthFileCandidates()) {
+    pushFileCandidate(candidate.authSource, candidate.authFile);
+  }
+  for (const candidate of listAuthJsonImagenAuthCandidates()) {
+    const key = `managed:${candidate.email}`;
+    if (seen.has(key))
+      continue;
+    seen.add(key);
+    candidates.push(candidate);
+  }
+  if (candidates.length === 0) {
+    candidates.push({ kind: "file", authSource: "dm-auth-shim", authFile: writeImagenAuthFile(sessionRoot) });
+  }
+  return candidates;
+}
+function loadCodexAuthFileCredentials(filePath) {
+  const raw = parseJsonFile(filePath);
+  const tokens = raw?.tokens;
+  const accessToken = typeof tokens?.access_token === "string" ? tokens.access_token.trim() : "";
+  const accountId = typeof tokens?.account_id === "string" ? tokens.account_id.trim() : "";
+  if (!accessToken || !accountId)
+    return;
+  return {
+    accessToken,
+    accountId,
+    email: undefined,
+    source: filePath
+  };
+}
+function loadCodexAuthFileCredentialsFromData(raw) {
+  const tokens = raw?.tokens;
+  const accessToken = typeof tokens?.access_token === "string" ? tokens.access_token.trim() : "";
+  const accountId = typeof tokens?.account_id === "string" ? tokens.account_id.trim() : "";
+  if (!accessToken || !accountId)
+    return;
+  return {
+    accessToken,
+    accountId,
+    email: undefined,
+    source: "managed-inline"
+  };
+}
+export function resolveCustomFallbackCredentials() {
+  for (const candidate of listExplicitAuthFileCandidates()) {
+    const creds = loadCodexAuthFileCredentials(candidate.authFile);
+    if (creds)
+      return { ...creds, source: candidate.authSource };
+  }
+  for (const candidate of listAuthJsonImagenAuthCandidates()) {
+    const creds = loadCodexAuthFileCredentialsFromData(candidate.authData);
+    if (creds)
+      return { ...creds, source: candidate.authSource };
+  }
+  return loadActiveCodexCredentials();
+}
+async function resolvePreferredCodexCredentials(runtimeAuthContext) {
+  const live = await resolveLiveSessionCodexCredentials(runtimeAuthContext);
+  if (live)
+    return live;
+  return resolveCustomFallbackCredentials();
+}
+function collectSavedPaths(stdout) {
+  return String(stdout ?? "").split(/\r?\n/).map((line) => line.trim()).filter(Boolean).map((line) => resolve(line));
+}
+function readImagenJsonSession(sessionFile) {
+  if (!existsSync(sessionFile))
+    return [];
+  return readFileSync(sessionFile, "utf-8").split(/\r?\n/).map((line) => line.trim()).filter(Boolean).map((line) => {
+    try {
+      return JSON.parse(line);
+    } catch {
+      return null;
+    }
+  }).filter(Boolean);
+}
+function latestGeneratedImageMeta(sessionFile) {
+  const rows = readImagenJsonSession(sessionFile);
+  let savedPath = "";
+  let revisedPrompt = "";
+  for (const row of rows) {
+    if (row?.type === "image_generation_call" && typeof row.saved_path === "string" && row.saved_path) {
+      savedPath = row.saved_path;
+      if (typeof row.revised_prompt === "string" && row.revised_prompt) {
+        revisedPrompt = row.revised_prompt;
+      }
+    }
+  }
+  return { savedPath, revisedPrompt };
+}
+async function runImagenCliWithCandidate({ prompt, aspectRatio, model, outputFormat, cwd, signal, sessionRoot, candidate, index }) {
+  const sessionFile = join(sessionRoot, `session-${index}.jsonl`);
+  let authFile = candidate.authFile;
+  if (candidate.kind === "managed") {
+    authFile = join(sessionRoot, `auth-${index}.json`);
+    writeTextFile(authFile, JSON.stringify(candidate.authData, null, 2) + `
+`);
+  }
+  const env = {
+    ...process.env,
+    PYTHONPATH: VENDOR_DIR + (process.env.PYTHONPATH ? `:${process.env.PYTHONPATH}` : ""),
+    auth_file: authFile,
+    model,
+    quiet: "1",
+    no_session_lock: "1",
+    session: `new:${sessionFile}`
+  };
+  const timeoutMs = REQUEST_TIMEOUT_MS;
+  return await new Promise((resolvePromise, rejectPromise) => {
+    let settled = false;
+    let stdout = "";
+    let stderr = "";
+    const child = spawn("python3", [IMAGEN_SCRIPT, buildImagenPrompt(prompt, aspectRatio)], {
+      cwd,
+      env,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    const timer = setTimeout(() => {
+      child.kill("SIGTERM");
+    }, timeoutMs);
+    const onAbort = () => {
+      child.kill("SIGTERM");
+    };
+    signal?.addEventListener("abort", onAbort, { once: true });
+    child.stdout.on("data", (chunk) => {
+      stdout += chunk.toString("utf-8");
+    });
+    child.stderr.on("data", (chunk) => {
+      stderr += chunk.toString("utf-8");
+    });
+    child.on("error", (error) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+      rejectPromise(error);
+    });
+    child.on("close", (code, sig) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+      if (signal?.aborted) {
+        rejectPromise(createAbortError());
+        return;
+      }
+      if (sig === "SIGTERM") {
+        rejectPromise(new Error(`imagen.py timed out after ${Math.round(timeoutMs / 1000)}s`));
+        return;
+      }
+      if (code !== 0) {
+        rejectPromise(new Error(stderr.trim() || stdout.trim() || `imagen.py exited ${code}`));
+        return;
+      }
+      resolvePromise({
+        stdout,
+        stderr,
+        sessionFile,
+        sessionRoot,
+        authSource: candidate.authSource
+      });
+    });
+  });
+}
+async function runImagenCli({ prompt, aspectRatio, model, outputFormat, cwd, save, saveDir, signal, runId, runtimeAuthContext }) {
+  if (outputFormat !== "png") {
+    throw new Error("The bundled imagen.py lane only supports PNG output.");
+  }
+  if (!existsSync(IMAGEN_SCRIPT)) {
+    throw new Error(`Bundled imagen.py is missing: ${IMAGEN_SCRIPT}`);
+  }
+  const sessionRoot = buildImagenSessionRoot(cwd, save, saveDir, runId);
+  mkdirSync(sessionRoot, { recursive: true });
+  const candidates = resolveImagenAuthCandidates(sessionRoot, runtimeAuthContext);
+  const errors = [];
+  for (const [index, candidate] of candidates.entries()) {
+    try {
+      const run = await runImagenCliWithCandidate({
+        prompt,
+        aspectRatio,
+        model,
+        outputFormat,
+        cwd,
+        signal,
+        sessionRoot,
+        candidate,
+        index
+      });
+      const savedPaths = collectSavedPaths(run.stdout);
+      if (savedPaths.length > 0) {
+        return run;
+      }
+      errors.push(`${candidate.authSource}: no saved image path`);
+    } catch (error) {
+      if (isAbortError(error))
+        throw error;
+      errors.push(`${candidate.authSource}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+  }
+  throw new Error(`imagen.py candidates exhausted: ${errors.slice(-5).join(" | ")}`);
+}
+function stageImagenArtifact(savedPath, outputRoot, baseName) {
+  const resolvedSavedPath = resolve(savedPath);
+  if (!existsSync(resolvedSavedPath)) {
+    throw new Error(`imagen.py reported a missing artifact: ${resolvedSavedPath}`);
+  }
+  const extension = resolvedSavedPath.split(".").pop() || "png";
+  const imagePath = join(outputRoot, `${baseName}.${extension}`);
+  writeBinaryFile(imagePath, readFileSync(resolvedSavedPath));
+  return imagePath;
+}
+async function generateViaCustomFallback({
+  prompt,
+  aspectRatio,
+  outputFormat,
+  model,
+  outputRoot,
+  baseName,
+  credentials,
+  signal,
+  imagenError,
+  requestedBackend
+}) {
+  let svgPath = "";
+  let imagePath = "";
+  let imageBase64 = "";
+  let mimeType = "image/png";
+  try {
+    if (outputFormat === "png") {
+      const nativeResponse = await streamCodexResponse({
+        model,
+        instructions: buildNativeImageInstructions(),
+        input: [
+          {
+            type: "message",
+            role: "user",
+            content: [{ type: "input_text", text: buildNativeImagePrompt(prompt, aspectRatio) }]
+          }
+        ],
+        reasoning: { effort: "medium", summary: "detailed" },
+        tools: [{ type: "image_generation", output_format: "png" }],
+        tool_choice: "auto",
+        parallel_tool_calls: false,
+        store: false,
+        stream: true,
+        include: ["reasoning.encrypted_content"]
+      }, credentials, signal);
+      const imageItems = nativeImageItems(nativeResponse.outputItems);
+      if (imageItems.length > 0) {
+        const imageItem = imageItems[0];
+        const decoded = decodeGeneratedImageData(imageItem.result, "png");
+        imagePath = join(outputRoot, `${baseName}.${decoded.extension}`);
+        writeBinaryFile(imagePath, decoded.bytes);
+        imageBase64 = readFileSync(imagePath).toString("base64");
+        return {
+          status: "ok",
+          imagePath,
+          svgPath: "",
+          imageBase64,
+          mimeType: decoded.mimeType,
+          prompt,
+          aspectRatio,
+          model,
+          source: credentials.source,
+          responseId: nativeResponse.responseId,
+          revisedPrompt: typeof imageItem.revised_prompt === "string" ? imageItem.revised_prompt : "",
+          backendMode: "native-image-generation",
+          requestedBackend,
+          imagenError,
+          assistantText: nativeResponse.assistantText
+        };
+      }
+    }
+    const { assistantText, responseId } = await streamCodexResponse({
+      model,
+      instructions: buildImageInstructions(),
+      input: [
+        {
+          type: "message",
+          role: "user",
+          content: [{ type: "input_text", text: buildVectorPrompt(prompt, aspectRatio) }]
+        }
+      ],
+      reasoning: { effort: "medium", summary: "detailed" },
+      tool_choice: "auto",
+      parallel_tool_calls: false,
+      store: false,
+      stream: true,
+      include: ["reasoning.encrypted_content"]
+    }, credentials, signal);
+    throwIfAborted(signal);
+    const svgMarkup = extractSvgMarkup(assistantText);
+    svgPath = join(outputRoot, `${baseName}.svg`);
+    writeTextFile(svgPath, svgMarkup);
+    imagePath = svgPath;
+    mimeType = "image/svg+xml";
+    if (outputFormat === "png") {
+      const pngPath = join(outputRoot, `${baseName}.png`);
+      throwIfAborted(signal);
+      renderSvgToPng(svgPath, pngPath);
+      throwIfAborted(signal);
+      imagePath = pngPath;
+      imageBase64 = readFileSync(pngPath).toString("base64");
+      mimeType = "image/png";
+    }
+    return {
+      status: "ok",
+      imagePath,
+      svgPath,
+      imageBase64,
+      mimeType,
+      prompt,
+      aspectRatio,
+      model,
+      source: credentials.source,
+      responseId,
+      backendMode: "svg-fallback",
+      requestedBackend,
+      imagenError,
+      assistantText
+    };
+  } catch (error) {
+    if (isAbortError(error)) {
+      for (const artifactPath of [imagePath, svgPath]) {
+        if (!artifactPath || !existsSync(artifactPath))
+          continue;
+        try {
+          unlinkSync(artifactPath);
+        } catch {}
+      }
+    }
+    throw error;
+  }
+}
+export async function generateVectorImage(params, cwd, signal, runtimeAuthContext = undefined) {
+  const prompt = String(params.prompt ?? "").trim();
+  if (!prompt) {
+    throw new Error("image_generation.prompt is required.");
+  }
+  throwIfAborted(signal);
+  const aspectRatio = normalizeAspectRatio(params.aspectRatio);
+  const outputFormat = resolveOutputFormat(params.outputFormat);
+  const model = resolveImageGenerationModel(params.model);
+  const outputRoot = resolveOutputRoot(cwd, params.save ?? "project", params.saveDir);
+  mkdirSync(outputRoot, { recursive: true });
+  const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
+  const slug = slugify(prompt);
+  const baseName = `image-${timestamp}-${slug}-${randomUUID().slice(0, 8)}`;
+  if (isOpenRouterImageModel(model)) {
+    return await generateViaOpenRouterImage({
+      prompt,
+      aspectRatio,
+      outputFormat,
+      model,
+      outputRoot,
+      baseName,
+      cwd,
+      signal,
+      runtimeAuthContext
+    });
+  }
+  const liveCodexCredentials = await resolveLiveSessionCodexCredentials(runtimeAuthContext);
+  const credentials = liveCodexCredentials ?? resolveCustomFallbackCredentials();
+  try {
+    const testDelayMs = getTestDelayMs();
+    if (testDelayMs > 0) {
+      await sleepWithSignal(testDelayMs, signal);
+    }
+    let imagenError = "";
+    const allowLegacyFallback = isLegacyFallbackEnabled();
+    if (outputFormat === "png") {
+      try {
+        const run = await runImagenCli({
+          prompt,
+          aspectRatio,
+          model,
+          outputFormat,
+          cwd,
+          save: params.save ?? "project",
+          saveDir: params.saveDir,
+          signal,
+          runId: baseName,
+          runtimeAuthContext: liveCodexCredentials ? { liveCodexCredentials } : runtimeAuthContext
+        });
+        const savedPaths = collectSavedPaths(run.stdout);
+        if (savedPaths.length > 0) {
+          const meta = latestGeneratedImageMeta(run.sessionFile);
+          const imagePath = stageImagenArtifact(meta.savedPath || savedPaths[0], outputRoot, baseName);
+          const imageBase64 = readFileSync(imagePath).toString("base64");
+          return {
+            status: "ok",
+            imagePath,
+            svgPath: "",
+            imageBase64,
+            mimeType: "image/png",
+            prompt,
+            aspectRatio,
+            model,
+            source: credentials.source,
+            responseId: "",
+            revisedPrompt: meta.revisedPrompt || "",
+            backendMode: "imagen-py",
+            requestedBackend: "imagen-py",
+            authSource: run.authSource,
+            assistantText: String(run.stderr ?? "").trim(),
+            sessionFile: run.sessionFile,
+            imagenSavedPaths: savedPaths
+          };
+        }
+        imagenError = `imagen.py produced no saved image path. stderr=${run.stderr.trim().slice(0, 400)}`;
+      } catch (error) {
+        if (isAbortError(error)) {
+          throw error;
+        }
+        imagenError = error instanceof Error ? error.message : String(error);
+      }
+      if (!allowLegacyFallback) {
+        throw new Error(`Bundled imagen.py is required for PNG image_generation, but it failed: ${imagenError}. ` + `Provide a healthy DM Codex credential source or set ${LEGACY_FALLBACK_ENV}=1 only for emergency legacy fallback debugging.`);
+      }
+    }
+    return await generateViaCustomFallback({
+      prompt,
+      aspectRatio,
+      outputFormat,
+      model,
+      outputRoot,
+      baseName,
+      credentials,
+      signal,
+      imagenError,
+      requestedBackend: "legacy-fallback"
+    });
+  } catch (error) {
+    if (isAbortError(error)) {
+      throw error;
+    }
+    throw error;
+  }
+}