npm - @xopcai/xopc - Versions diffs - 0.0.166 → 0.0.167 - Mend

@xopcai/xopc 0.0.166 → 0.0.167

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (136) hide show

package/dist/gateway/static/root/index.html CHANGED Viewed

@@ -10,8 +10,8 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png?v=20260713-1" />
     <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=20260713-1" />
     <link rel="manifest" href="/site.webmanifest?v=20260713-1" />
-    <title>xopc</title>
-    <script type="module" crossorigin src="/assets/index-BhQMnKH1.js"></script>
+    <title>XOPC — Turn goals into loops. Keep what matters moving.</title>
+    <script type="module" crossorigin src="/assets/index-B24B26og.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-aKtaBQYM.js">
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-zJ_50EbN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-BOUWij0V.js">
@@ -24,17 +24,17 @@
     <link rel="modulepreload" crossorigin href="/assets/check-DUBLcKHA.js">
     <link rel="modulepreload" crossorigin href="/assets/circle-alert-BEjgurr2.js">
     <link rel="modulepreload" crossorigin href="/assets/middleware-Pd0e8Igk.js">
-    <link rel="modulepreload" crossorigin href="/assets/messages-C96Zjb0V.js">
-    <link rel="modulepreload" crossorigin href="/assets/locale-store-C_ax27uc.js">
+    <link rel="modulepreload" crossorigin href="/assets/messages-B1EG4gdu.js">
+    <link rel="modulepreload" crossorigin href="/assets/locale-store-tnRLWdx2.js">
     <link rel="modulepreload" crossorigin href="/assets/cn-JdwAhgNB.js">
     <link rel="modulepreload" crossorigin href="/assets/schemas-DgQq6Z5S.js">
     <link rel="modulepreload" crossorigin href="/assets/product-delivery-BTRT9kCS.js">
     <link rel="modulepreload" crossorigin href="/assets/config-reload-event-Bjh2zoKp.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-to-clipboard-HOJ79TWv.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-ulwTJovP.js">
-    <link rel="modulepreload" crossorigin href="/assets/activity-store-DkALQFJT.js">
-    <link rel="modulepreload" crossorigin href="/assets/theme-store-D37XLD_C.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-BXtJvaQl.css">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-qnEmj-vL.js">
+    <link rel="modulepreload" crossorigin href="/assets/activity-store-DjEDu38T.js">
+    <link rel="modulepreload" crossorigin href="/assets/theme-store-H9T49Iar.js">
+    <link rel="stylesheet" crossorigin href="/assets/index-DfE2j0g8.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/package.js CHANGED Viewed

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.0.166";
+var version = "0.0.167";
 //#endregion
 export { version };

package/dist/src/agent/image/generation/custom-openai-images-provider.d.ts ADDED Viewed

@@ -0,0 +1,7 @@
+import type { ImageGenerationProviderConfig, ProviderConfig } from '../../../config/models-json.js';
+import type { ImageGenerationProvider } from './types.js';
+export declare function buildCustomOpenAiImagesProvider(params: {
+    providerId: string;
+    provider: ProviderConfig;
+    imageGeneration: ImageGenerationProviderConfig;
+}): ImageGenerationProvider;

package/dist/src/agent/image/generation/custom-openai-images-provider.js ADDED Viewed

@@ -0,0 +1,81 @@
+import { resolveAuthProfileForProvider } from "../../../providers/auth-runtime/resolve-auth.js";
+import { isProviderApiKeyConfigured } from "../../../providers/auth-runtime/is-configured.js";
+import "../../../providers/auth-runtime/index.js";
+import { createOpenAiImagesProvider } from "./openai-images-provider.js";
+//#region src/agent/image/generation/custom-openai-images-provider.ts
+function buildCustomOpenAiImagesProvider(params) {
+	const { providerId, provider, imageGeneration } = params;
+	if (!provider.baseUrl) throw new Error(`Custom image provider "${providerId}" requires baseUrl.`);
+	const models = imageGeneration.models.map((model) => model.id);
+	const modelCapabilities = Object.fromEntries(imageGeneration.models.map((model) => [model.id, model.capabilities]));
+	const defaultCapabilities = modelCapabilities[imageGeneration.defaultModel];
+	if (!defaultCapabilities) throw new Error(`Custom image provider "${providerId}" default model is not in its model catalog.`);
+	const auth = imageGeneration.auth;
+	const isConfigured = (ctx) => auth.type === "none" || isProviderApiKeyConfigured({
+		providerId,
+		cfg: ctx.cfg,
+		agentId: ctx.agentId
+	});
+	const executors = new Map(imageGeneration.models.map((model) => {
+		const executor = createOpenAiImagesProvider({
+			id: providerId,
+			label: imageGeneration.name,
+			defaultModel: model.id,
+			models: [model.id],
+			capabilities: model.capabilities,
+			isConfigured,
+			resolveApiKey: (req) => {
+				if (auth.type === "none") return null;
+				return resolveAuthProfileForProvider({
+					providerId,
+					cfg: req.cfg,
+					agentId: req.agentId,
+					store: req.authStore
+				}).apiKey;
+			},
+			resolveEndpoint: () => ({
+				baseUrl: provider.baseUrl,
+				headers: provider.headers,
+				generationsPath: imageGeneration.paths?.generations,
+				editsPath: imageGeneration.paths?.edits,
+				authorization: auth.type === "none" ? { kind: "none" } : auth.type === "header" ? {
+					kind: "header",
+					headerName: auth.headerName
+				} : { kind: "bearer" },
+				privateNetworkPolicy: imageGeneration.network ? {
+					allowPrivate: true,
+					allowHosts: imageGeneration.network.allowedHosts
+				} : {}
+			}),
+			defaultCount: model.defaults?.count,
+			defaultSize: model.defaults?.size
+		});
+		return [model.id, {
+			executor,
+			outputFormat: model.defaults?.outputFormat
+		}];
+	}));
+	return {
+		id: providerId,
+		label: imageGeneration.name,
+		source: "custom",
+		credentialMode: auth.type === "none" ? "none" : "api-key",
+		documentationUrl: imageGeneration.documentationUrl,
+		apiKeyUrl: imageGeneration.apiKeyUrl,
+		defaultModel: imageGeneration.defaultModel,
+		models,
+		capabilities: defaultCapabilities,
+		modelCapabilities,
+		isConfigured,
+		async generateImage(req) {
+			const selected = executors.get(req.model);
+			if (!selected) throw new Error(`Image model is not configured for ${providerId}: ${req.model}`);
+			return selected.executor.generateImage({
+				...req,
+				outputFormat: req.outputFormat ?? selected.outputFormat
+			});
+		}
+	};
+}
+//#endregion
+export { buildCustomOpenAiImagesProvider };

package/dist/src/agent/image/generation/{openai-compatible-image-provider.d.ts → openai-images-provider.d.ts} RENAMED Viewed

@@ -1,19 +1,8 @@
-/**
- * OpenAI-compatible image provider factory.
- *
- * Many image providers (OpenAI, Azure OpenAI, OpenAI-compatible gateways)
- * speak the same `/images/generations` and `/images/edits` REST shape.
- * This factory wraps that wire format on top of shared provider HTTP, normalization,
- * and auth-runtime so vendor modules only need to declare:
- *   - id / models / capabilities
- *   - baseUrl resolution
- *   - apiKey resolution
- *   - optional request body / response transforms
- *
- */
+/** Strict implementation of the OpenAI Images REST protocol. */
+import type { PrivateNetworkPolicy } from '../../../media-shared/http/index.js';
 import type { GeneratedImageAsset, ImageGenerationProvider, ImageGenerationProviderCapabilities, ImageGenerationProviderConfiguredContext, ImageGenerationRequest } from './types.js';
 /** Subset of the official OpenAI image response we map. */
-export interface OpenAiCompatibleImageResponse {
+export interface OpenAiImagesResponse {
     data?: Array<{
         b64_json?: string;
         revised_prompt?: string;
@@ -21,7 +10,7 @@ export interface OpenAiCompatibleImageResponse {
     }>;
     [k: string]: unknown;
 }
-export interface OpenAiCompatibleEndpointResolution {
+export interface OpenAiImagesEndpointResolution {
     /** Base URL without trailing slash, e.g. `https://api.openai.com/v1`. */
     baseUrl: string;
     /** Optional override for the generations sub-path; defaults to `/images/generations`. */
@@ -42,8 +31,10 @@ export interface OpenAiCompatibleEndpointResolution {
         kind: 'header';
         headerName: string;
     };
+    /** Explicit private-host allowlist for this endpoint. Omit to use the global policy. */
+    privateNetworkPolicy?: PrivateNetworkPolicy;
 }
-export interface OpenAiCompatibleImageProviderOptions {
+export interface OpenAiImagesProviderOptions {
     id: string;
     label: string;
     defaultModel: string;
@@ -54,24 +45,12 @@ export interface OpenAiCompatibleImageProviderOptions {
     /** Resolve API key for one request. May return null when using OAuth/header auth. */
     resolveApiKey: (req: ImageGenerationRequest) => string | null | undefined;
     /** Resolve endpoint info per-request (region, baseUrl override, Azure deployment, …). */
-    resolveEndpoint: (req: ImageGenerationRequest) => OpenAiCompatibleEndpointResolution;
+    resolveEndpoint: (req: ImageGenerationRequest) => OpenAiImagesEndpointResolution;
     /** Default per-call timeout. Combined with provider-level config in provider-http. */
     defaultTimeoutMs?: number;
-    /**
-     * Hook to enrich the JSON body sent to `/images/generations`. Mutate the
-     * returned object freely; the factory keeps standard fields stable.
-     */
-    buildGenerateRequestBody?: (req: ImageGenerationRequest, base: Record<string, unknown>) => Record<string, unknown>;
-    /** Hook to enrich the multipart form for `/images/edits`. */
-    buildEditFormFields?: (req: ImageGenerationRequest, fields: Record<string, string>) => Record<string, string>;
-    /**
-     * Optional response mapper. Default: `mapDefaultOpenAiResponse`. Vendor
-     * implementations can override to handle non-standard response shapes.
-     */
-    mapResponse?: (raw: unknown, req: ImageGenerationRequest) => GeneratedImageAsset[];
     /** Default count clamp. Provider may also enforce via `capabilities.generate.maxCount`. */
     defaultCount?: number;
     defaultSize?: string;
 }
-export declare function createOpenAiCompatibleImageProvider(options: OpenAiCompatibleImageProviderOptions): ImageGenerationProvider;
-export declare function mapDefaultOpenAiResponse(raw: unknown, req: ImageGenerationRequest): GeneratedImageAsset[];
+export declare function createOpenAiImagesProvider(options: OpenAiImagesProviderOptions): ImageGenerationProvider;
+export declare function mapOpenAiImagesResponse(raw: unknown, req: ImageGenerationRequest): GeneratedImageAsset[];

package/dist/src/agent/image/generation/{openai-compatible-image-provider.js → openai-images-provider.js} RENAMED Viewed

@@ -4,14 +4,17 @@ import { imageAssetFromBase64, imageFileExtensionForMimeType } from "./image-ass
 import { pickTimeoutMsOrFallback } from "../../../media-shared/http/deadline.js";
 import { privateNetworkPolicyToSsrfGuardOptions } from "../../../media-shared/http/private-network.js";
 import { resolveProviderHttpRequestConfig } from "../../../media-shared/http/resolve-provider-http-request-config.js";
-import { postJsonRequest, postMultipartRequest } from "../../../media-shared/http/provider-http.js";
+import { postJsonRequest, postMultipartRequest, readJsonResponseLimited } from "../../../media-shared/http/provider-http.js";
 import "../../../media-shared/http/index.js";
-//#region src/agent/image/generation/openai-compatible-image-provider.ts
+//#region src/agent/image/generation/openai-images-provider.ts
 init_logger();
-const log = createLogger("ImageGen:OpenAICompat");
+const log = createLogger("ImageGen:OpenAIImages");
 const DEFAULT_OUTPUT_MIME = "image/png";
 const DEFAULT_TIMEOUT_MS = 12e4;
-function createOpenAiCompatibleImageProvider(options) {
+const MAX_RESPONSE_BYTES = 64 * 1024 * 1024;
+const MAX_IMAGE_BYTES = 32 * 1024 * 1024;
+const MAX_TOTAL_IMAGE_BYTES = 64 * 1024 * 1024;
+function createOpenAiImagesProvider(options) {
 	const defaultMaxCount = options.capabilities.generate?.maxCount ?? 4;
 	const defaultCount = options.defaultCount ?? 1;
 	const defaultSize = options.defaultSize ?? "1024x1024";
@@ -39,6 +42,7 @@ function createOpenAiCompatibleImageProvider(options) {
 				endpoint,
 				apiKey
 			});
+			const ssrfGuardOptions = privateNetworkPolicyToSsrfGuardOptions(endpoint.privateNetworkPolicy);
 			const isEdit = (req.inputImages?.length ?? 0) > 0;
 			const count = clampCount(req.count, defaultCount, defaultMaxCount);
 			const size = req.size?.trim() || defaultSize;
@@ -49,8 +53,8 @@ function createOpenAiCompatibleImageProvider(options) {
 				phase: isEdit ? "edit_request" : "generate_request",
 				count,
 				size
-			}, `OpenAI-compatible ${isEdit ? "edit" : "generate"} request`);
-			const responseJson = isEdit ? await postEditRequest({
+			}, `OpenAI Images ${isEdit ? "edit" : "generate"} request`);
+			const mapped = mapOpenAiImagesResponse(isEdit ? await postEditRequest({
 				providerId: options.id,
 				req,
 				url,
@@ -58,7 +62,7 @@ function createOpenAiCompatibleImageProvider(options) {
 				count,
 				size,
 				httpDefaults,
-				buildEditFormFields: options.buildEditFormFields
+				ssrfGuardOptions
 			}) : await postGenerateRequest({
 				providerId: options.id,
 				req,
@@ -67,9 +71,8 @@ function createOpenAiCompatibleImageProvider(options) {
 				count,
 				size,
 				httpDefaults,
-				buildGenerateRequestBody: options.buildGenerateRequestBody
-			});
-			const mapped = (options.mapResponse ?? mapDefaultOpenAiResponse)(responseJson, req);
+				ssrfGuardOptions
+			}), req);
 			if (mapped.length === 0) throw new Error(`${options.id} returned no images.`);
 			return {
 				images: mapped,
@@ -79,24 +82,23 @@ function createOpenAiCompatibleImageProvider(options) {
 	};
 }
 async function postGenerateRequest(params) {
-	const baseBody = {
+	const body = {
 		model: params.req.model,
 		prompt: params.req.prompt,
 		n: params.count,
 		size: params.size,
 		response_format: "b64_json"
 	};
-	applyOpenAiOptions(baseBody, params.req);
-	const body = params.buildGenerateRequestBody ? params.buildGenerateRequestBody(params.req, baseBody) : baseBody;
+	applyOpenAiOptions(body, params.req);
 	const timeoutMs = pickTimeoutMsOrFallback(params.req.timeoutMs, params.httpDefaults.timeoutMs, DEFAULT_TIMEOUT_MS);
-	return await (await postJsonRequest(params.url, {
+	return await readJsonResponseLimited(await postJsonRequest(params.url, {
 		label: params.providerId,
 		timeoutMs,
 		signal: params.req.signal,
 		body,
 		headers: params.headers,
-		...privateNetworkPolicyToSsrfGuardOptions()
-	})).json();
+		...params.ssrfGuardOptions
+	}), MAX_RESPONSE_BYTES);
 }
 async function postEditRequest(params) {
 	const inputImages = params.req.inputImages ?? [];
@@ -107,9 +109,8 @@ async function postEditRequest(params) {
 		size: params.size,
 		response_format: "b64_json"
 	};
-	const merged = params.buildEditFormFields ? params.buildEditFormFields(params.req, fields) : fields;
 	const form = new FormData();
-	for (const [k, v] of Object.entries(merged)) if (typeof v === "string") form.append(k, v);
+	for (const [k, v] of Object.entries(fields)) if (typeof v === "string") form.append(k, v);
 	for (let idx = 0; idx < inputImages.length; idx++) {
 		const img = inputImages[idx];
 		const field = idx === 0 ? "image" : `image[${idx}]`;
@@ -121,24 +122,29 @@ async function postEditRequest(params) {
 	const headers = new Headers(params.headers);
 	headers.delete("content-type");
 	const timeoutMs = pickTimeoutMsOrFallback(params.req.timeoutMs, params.httpDefaults.timeoutMs, DEFAULT_TIMEOUT_MS);
-	return await (await postMultipartRequest(params.url, {
+	return await readJsonResponseLimited(await postMultipartRequest(params.url, {
 		label: params.providerId,
 		timeoutMs,
 		signal: params.req.signal,
 		body: form,
 		headers,
-		...privateNetworkPolicyToSsrfGuardOptions()
-	})).json();
+		...params.ssrfGuardOptions
+	}), MAX_RESPONSE_BYTES);
 }
-function mapDefaultOpenAiResponse(raw, req) {
+function mapOpenAiImagesResponse(raw, req) {
 	if (!raw || typeof raw !== "object") return [];
 	const data = raw.data;
 	if (!Array.isArray(data)) return [];
 	const ext = imageFileExtensionForMimeType(req.outputFormat ? `image/${req.outputFormat}` : DEFAULT_OUTPUT_MIME);
 	const out = [];
+	let totalBytes = 0;
 	data.forEach((entry, index) => {
 		const b64 = entry?.b64_json;
 		if (typeof b64 !== "string" || b64.length === 0) return;
+		const estimatedBytes = Math.ceil(b64.replace(/\s+/g, "").length * 3 / 4);
+		if (estimatedBytes > MAX_IMAGE_BYTES) throw new Error(`OpenAI Images response image exceeds ${MAX_IMAGE_BYTES} bytes.`);
+		totalBytes += estimatedBytes;
+		if (totalBytes > MAX_TOTAL_IMAGE_BYTES) throw new Error(`OpenAI Images response images exceed ${MAX_TOTAL_IMAGE_BYTES} bytes total.`);
 		const asset = imageAssetFromBase64({
 			base64: b64,
 			mimeType: req.outputFormat ? `image/${req.outputFormat}` : void 0,
@@ -155,12 +161,19 @@ function applyAuthorizationHeader(params) {
 	const auth = params.endpoint.authorization ?? { kind: "bearer" };
 	if (auth.kind === "none") return;
 	if (!params.apiKey) return;
+	assertHttpHeaderValue(params.apiKey, "API key");
 	if (auth.kind === "bearer") {
 		params.headers["authorization"] = `Bearer ${params.apiKey}`;
 		return;
 	}
 	if (auth.kind === "header") params.headers[auth.headerName.toLowerCase()] = params.apiKey;
 }
+function assertHttpHeaderValue(value, label) {
+	for (let index = 0; index < value.length; index++) {
+		const code = value.charCodeAt(index);
+		if (code > 255 || code < 32 && code !== 9 || code === 127) throw new Error(`${label} contains characters that cannot be sent in an HTTP header.`);
+	}
+}
 function applyOpenAiOptions(body, req) {
 	if (req.quality) body.quality = req.quality;
 	if (req.outputFormat) body.output_format = req.outputFormat;
@@ -186,4 +199,4 @@ function joinPath(baseUrl, subPath) {
 	return `${baseUrl.replace(/\/+$/, "")}${subPath.startsWith("/") ? subPath : `/${subPath}`}`;
 }
 //#endregion
-export { createOpenAiCompatibleImageProvider, mapDefaultOpenAiResponse };
+export { createOpenAiImagesProvider, mapOpenAiImagesResponse };

package/dist/src/agent/image/generation/provider-registry.d.ts CHANGED Viewed

@@ -1,4 +1,6 @@
+import type { ModelsJsonConfig } from '../../../config/models-json.js';
 import type { ImageGenerationProvider, ImageGenerationProviderSummary } from './types.js';
+export declare function reloadImageGenerationProviders(config?: ModelsJsonConfig): void;
 export declare function getImageGenerationProvider(providerId: string): ImageGenerationProvider | undefined;
 export declare function listImageGenerationProviders(): ImageGenerationProvider[];
 export declare function listImageGenerationProvidersSummary(): ImageGenerationProviderSummary[];

package/dist/src/agent/image/generation/provider-registry.js CHANGED Viewed

@@ -1,31 +1,77 @@
+import { createLogger } from "../../../utils/logger/index.js";
+import { init_logger } from "../../../utils/logger.js";
+import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
+import { buildCustomOpenAiImagesProvider } from "./custom-openai-images-provider.js";
 import { buildDashScopeImageGenerationProvider } from "./providers/dashscope.js";
 import { buildFalImageGenerationProvider } from "./providers/fal.js";
 import { buildGoogleImageGenerationProvider } from "./providers/google.js";
 import { buildMinimaxImageGenerationProvider } from "./providers/minimax.js";
 import { buildOpenAIImageGenerationProvider } from "./providers/openai.js";
 //#region src/agent/image/generation/provider-registry.ts
-const providers = [
+init_models_json();
+init_logger();
+const log = createLogger("ImageGenerationRegistry");
+const builtInProviders = [
 	buildOpenAIImageGenerationProvider(),
 	buildDashScopeImageGenerationProvider(),
 	buildMinimaxImageGenerationProvider(),
 	buildGoogleImageGenerationProvider(),
 	buildFalImageGenerationProvider()
 ];
-const providersById = new Map(providers.map((provider) => [provider.id, provider]));
+let providers = [...builtInProviders];
+let providersById = new Map(providers.map((provider) => [provider.id, provider]));
+let customProvidersLoaded = false;
+function ensureCustomProvidersLoaded() {
+	if (!customProvidersLoaded) reloadImageGenerationProviders();
+}
+function reloadImageGenerationProviders(config) {
+	let resolved = config;
+	if (!resolved) {
+		const loaded = loadModelsJson();
+		if (loaded.error) {
+			log.warn({ errorMessage: loaded.error }, `Custom image providers not loaded: ${loaded.error}`);
+			providers = [...builtInProviders];
+			providersById = new Map(providers.map((provider) => [provider.id, provider]));
+			customProvidersLoaded = true;
+			return;
+		}
+		resolved = loaded.config;
+	}
+	const builtInIds = new Set(builtInProviders.map((provider) => provider.id));
+	const customEntries = Object.entries(resolved.providers).filter((entry) => Boolean(entry[1].imageGeneration));
+	const conflictingId = customEntries.find(([providerId]) => builtInIds.has(providerId))?.[0];
+	if (conflictingId) throw new Error(`Custom image generation cannot override built-in provider "${conflictingId}".`);
+	const customProviders = customEntries.map(([providerId, provider]) => buildCustomOpenAiImagesProvider({
+		providerId,
+		provider,
+		imageGeneration: provider.imageGeneration
+	}));
+	providers = [...builtInProviders, ...customProviders];
+	providersById = new Map(providers.map((provider) => [provider.id, provider]));
+	customProvidersLoaded = true;
+}
 function getImageGenerationProvider(providerId) {
+	ensureCustomProvidersLoaded();
 	return providersById.get(providerId);
 }
 function listImageGenerationProviders() {
+	ensureCustomProvidersLoaded();
 	return [...providers];
 }
 function listImageGenerationProvidersSummary() {
+	ensureCustomProvidersLoaded();
 	return providers.map((provider) => ({
 		id: provider.id,
 		label: provider.label,
+		source: provider.source ?? "builtin",
+		credentialMode: provider.credentialMode ?? "api-key",
+		...provider.documentationUrl ? { documentationUrl: provider.documentationUrl } : {},
+		...provider.apiKeyUrl ? { apiKeyUrl: provider.apiKeyUrl } : {},
 		defaultModel: provider.defaultModel,
 		models: [...provider.models],
-		capabilities: provider.capabilities
+		capabilities: provider.capabilities,
+		...provider.modelCapabilities ? { modelCapabilities: structuredClone(provider.modelCapabilities) } : {}
 	}));
 }
 //#endregion
-export { getImageGenerationProvider, listImageGenerationProviders, listImageGenerationProvidersSummary };
+export { getImageGenerationProvider, listImageGenerationProviders, listImageGenerationProvidersSummary, reloadImageGenerationProviders };

package/dist/src/agent/image/generation/providers/openai.js CHANGED Viewed

@@ -1,7 +1,7 @@
 import { resolveAuthProfileForProvider } from "../../../../providers/auth-runtime/resolve-auth.js";
 import { isProviderApiKeyConfigured } from "../../../../providers/auth-runtime/is-configured.js";
 import "../../../../providers/auth-runtime/index.js";
-import { createOpenAiCompatibleImageProvider } from "../openai-compatible-image-provider.js";
+import { createOpenAiImagesProvider } from "../openai-images-provider.js";
 //#region src/agent/image/generation/providers/openai.ts
 /**
 * Built-in OpenAI image-generation provider.
@@ -93,7 +93,7 @@ function buildAzureEndpoint(azure) {
 	};
 }
 function buildOpenAIImageGenerationProvider() {
-	return createOpenAiCompatibleImageProvider({
+	return createOpenAiImagesProvider({
 		id: "openai",
 		label: "OpenAI",
 		defaultModel: OPENAI_DEFAULT_IMAGE_MODEL,

package/dist/src/agent/image/generation/runtime.js CHANGED Viewed

@@ -51,8 +51,12 @@ async function generateImage(params, deps = {}) {
 			continue;
 		}
 		try {
+			const modelCapabilities = provider.modelCapabilities?.[candidate.model];
 			const sanitized = resolveImageGenerationOverrides({
-				provider,
+				provider: modelCapabilities ? {
+					...provider,
+					capabilities: modelCapabilities
+				} : provider,
 				size: params.size,
 				aspectRatio: params.aspectRatio,
 				resolution: params.resolution,

package/dist/src/agent/image/generation/types.d.ts CHANGED Viewed

@@ -51,18 +51,29 @@ export interface ImageGenerationProviderConfiguredContext {
 export interface ImageGenerationProvider {
     id: string;
     label: string;
+    source?: 'builtin' | 'custom';
+    credentialMode?: 'api-key' | 'none';
+    documentationUrl?: string;
+    apiKeyUrl?: string;
     defaultModel: string;
     models: string[];
     capabilities: ImageGenerationProviderCapabilities;
+    /** Per-model capability declarations when models on one endpoint differ. */
+    modelCapabilities?: Record<string, ImageGenerationProviderCapabilities>;
     isConfigured(ctx: ImageGenerationProviderConfiguredContext): boolean;
     generateImage(req: ImageGenerationRequest): Promise<ImageGenerationResult>;
 }
 export interface ImageGenerationProviderSummary {
     id: string;
     label: string;
+    source: 'builtin' | 'custom';
+    credentialMode: 'api-key' | 'none';
+    documentationUrl?: string;
+    apiKeyUrl?: string;
     defaultModel: string;
     models: string[];
     capabilities: ImageGenerationProviderCapabilities;
+    modelCapabilities?: Record<string, ImageGenerationProviderCapabilities>;
 }
 export interface ImageGenerationOpenAIOptions {
     background?: ImageGenerationBackground;

package/dist/src/cli/commands/channels.js CHANGED Viewed

@@ -1,8 +1,8 @@
 import { buildChannelCatalogForConfig, init_channel_catalog_service } from "../../channels/catalog/channel-catalog-service.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
-import { formatExamples, register } from "../registry.js";
 import { listChannelPairingState } from "../../channels/pairing/pairing-service.js";
 import { approveChannelPairingFromCli } from "../../channels/pairing/approve-cli.js";
+import { formatExamples, register } from "../registry.js";
 import { colors } from "../utils/colors.js";
 import { Command } from "commander";
 //#region src/cli/commands/channels.ts

package/dist/src/cli/commands/connectors.js CHANGED Viewed

@@ -1,8 +1,8 @@
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
 import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../capabilities/store-connector.js";
 import { register } from "../registry.js";
-import { Command } from "commander";
 import { confirm } from "@inquirer/prompts";
+import { Command } from "commander";
 //#region src/cli/commands/connectors.ts
 init_loader();
 function parsePairs(values, option) {

package/dist/src/cli/commands/doctor/checks/image-providers.d.ts ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ import type { CheckResult, DoctorContext } from '../types.js';
2	+ export declare function checkImageProviders(_ctx: DoctorContext): Promise<CheckResult>;

package/dist/src/cli/commands/doctor/checks/image-providers.js ADDED Viewed

@@ -0,0 +1,68 @@
+import { resolveModelsJsonPath } from "../../../../config/paths.js";
+import { init_models_json, loadModelsJson } from "../../../../config/models-json.js";
+import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
+import { classifyHost } from "../../../../media-shared/http/private-network.js";
+import "../../../../media-shared/http/index.js";
+import { existsSync } from "node:fs";
+//#region src/cli/commands/doctor/checks/image-providers.ts
+init_credentials();
+init_models_json();
+async function checkImageProviders(_ctx) {
+	const path = resolveModelsJsonPath();
+	if (!existsSync(path)) return {
+		id: "image-providers",
+		label: "Image providers",
+		status: "skip",
+		message: "No models.json file; custom image providers are not configured.",
+		hints: []
+	};
+	const loaded = loadModelsJson(path);
+	if (loaded.error) return {
+		id: "image-providers",
+		label: "Image providers",
+		status: "fail",
+		message: "models.json image provider configuration is invalid.",
+		hints: [loaded.error, path]
+	};
+	const entries = Object.entries(loaded.config.providers).filter((entry) => Boolean(entry[1].imageGeneration));
+	if (entries.length === 0) return {
+		id: "image-providers",
+		label: "Image providers",
+		status: "skip",
+		message: "No custom image providers are configured.",
+		hints: [path]
+	};
+	const blockedEndpoints = [];
+	const missingCredentials = [];
+	const resolver = new CredentialResolver();
+	for (const [providerId, provider] of entries) {
+		const hostname = new URL(provider.baseUrl).hostname.toLowerCase();
+		const hostClass = classifyHost(hostname);
+		const allowedHosts = (provider.imageGeneration.network?.allowedHosts ?? []).map((entry) => entry.toLowerCase());
+		if (hostClass !== "public" && !allowedHosts.includes(hostname)) blockedEndpoints.push(`${providerId}: ${hostname}`);
+		if (provider.imageGeneration.auth.type !== "none" && !await resolver.resolveApiKey(providerId)) missingCredentials.push(providerId);
+	}
+	if (blockedEndpoints.length > 0) return {
+		id: "image-providers",
+		label: "Image providers",
+		status: "fail",
+		message: `${blockedEndpoints.length} custom image provider endpoint(s) are blocked by private-network policy.`,
+		hints: [...blockedEndpoints, "Add each exact private hostname to imageGeneration.network.allowedHosts only when you trust it."]
+	};
+	if (missingCredentials.length > 0) return {
+		id: "image-providers",
+		label: "Image providers",
+		status: "warn",
+		message: `${missingCredentials.length} custom image provider(s) need an API key.`,
+		hints: missingCredentials.map((providerId) => `Configure a credential for ${providerId}.`)
+	};
+	return {
+		id: "image-providers",
+		label: "Image providers",
+		status: "pass",
+		message: `${entries.length} custom image provider(s) validate and are ready.`,
+		hints: [path]
+	};
+}
+//#endregion
+export { checkImageProviders };

package/dist/src/cli/commands/doctor/flow.js CHANGED Viewed

@@ -14,6 +14,7 @@ import { checkWorkspaceStatus } from "./checks/workspace-status.js";
 import { checkVersionUpdate } from "./checks/version-check.js";
 import { checkChannelPlugins } from "./checks/channel-plugins.js";
 import { checkMigrations } from "./checks/migrations.js";
+import { checkImageProviders } from "./checks/image-providers.js";
 //#region src/cli/commands/doctor/flow.ts
 const DOCTOR_CHECKS = [
 	checkVersionUpdate,
@@ -23,6 +24,7 @@ const DOCTOR_CHECKS = [
 	checkStateIntegrity,
 	checkDatabaseSchema,
 	checkProviderAuth,
+	checkImageProviders,
 	checkChannelConfig,
 	checkChannelPairingPending,
 	checkSecurityAudit,

package/dist/src/cli/commands/extension-marketplace.js CHANGED Viewed

@@ -12,8 +12,8 @@ import { join, resolve } from "node:path";
 import { existsSync, readFileSync, rmSync, statSync } from "node:fs";
 import { execSync } from "node:child_process";
 import { createHash } from "node:crypto";
-import { Command } from "commander";
 import { confirm } from "@inquirer/prompts";
+import { Command } from "commander";
 import semver from "semver";
 //#region src/cli/commands/extension-marketplace.ts
 init_loader();

package/dist/src/cli/commands/models.js CHANGED Viewed

@@ -8,8 +8,8 @@ import "../../config/index.js";
 import { prepareUpdateGlobalDefaults } from "../../gateway/global-defaults-admin.js";
 import { colors } from "../utils/colors.js";
 import { runCliOAuthLogin } from "../utils/oauth-login.js";
-import { Command } from "commander";
 import { input } from "@inquirer/prompts";
+import { Command } from "commander";
 //#region src/cli/commands/models.ts
 init_credentials();
 init_schema();