ai-zero-token 1.0.6 → 1.0.8

package/dist/server/admin-page.js

@@ -1498,6 +1498,7 @@ function renderAdminPage() {
             <div class="tester-tabs" id="testerTabs">
               <button class="tab-btn is-active" type="button" data-endpoint="/v1/chat/completions">Chat</button>
               <button class="tab-btn" type="button" data-endpoint="/v1/images/generations">Images</button>
+              <button class="tab-btn" type="button" data-endpoint="/v1/images/edits">Edits</button>
               <button class="tab-btn" type="button" data-endpoint="/v1/responses">Responses</button>
               <button class="tab-btn" type="button" data-endpoint="/v1/models">Models</button>
             </div>
@@ -1545,6 +1546,7 @@ function renderAdminPage() {
               <button class="btn-secondary" type="button" data-example="/v1/responses">\u793A\u4F8B Responses</button>
               <button class="btn-secondary" type="button" data-example="/v1/chat/completions">\u793A\u4F8B Chat</button>
               <button class="btn-secondary" type="button" data-example="/v1/images/generations">\u793A\u4F8B Images</button>
+              <button class="btn-secondary" type="button" data-example="/v1/images/edits">\u793A\u4F8B Edits</button>
               <button class="btn-primary" id="runTestBtn" type="button">\u53D1\u9001\u8BF7\u6C42</button>
             </div>
 
@@ -1720,6 +1722,11 @@ function renderAdminPage() {
         tab: "Images",
         description: "\u517C\u5BB9 OpenAI images.generations \u63A5\u53E3\u3002",
       },
+      "/v1/images/edits": {
+        method: "POST",
+        tab: "Edits",
+        description: "\u517C\u5BB9 OpenAI images.edits JSON \u63A5\u53E3\u3002",
+      },
     };
 
     const endpointSelect = document.getElementById("endpointSelect");
@@ -1926,12 +1933,12 @@ function renderAdminPage() {
       title.textContent = "\u53D1\u73B0\u65B0\u7248\u672C\u53EF\u66F4\u65B0";
       detail.textContent = "\u5F53\u524D\u7248\u672C " + versionStatus.currentVersion + "\uFF0C\u6700\u65B0\u7248\u672C "
         + versionStatus.latestVersion + "\u3002\u66F4\u65B0\u540E\u53EF\u83B7\u5F97\u6700\u65B0\u6A21\u578B\u5217\u8868\u903B\u8F91\u3001\u7BA1\u7406\u9875\u4F53\u9A8C\u548C\u63A5\u53E3\u4FEE\u590D\u3002";
-      command.textContent = "npm install -g " + versionStatus.packageName + "@latest";
+      command.textContent = "npm install -g " + versionStatus.packageName;
       panel.classList.add("is-visible");
     }
 
     function supportsImageGeneration(profile) {
-      return getPlanType(profile) !== "free";
+      return Boolean(profile);
     }
 
     function getImageCapability(profile) {
@@ -1947,10 +1954,10 @@ function renderAdminPage() {
       const planType = getPlanType(profile);
       if (planType === "free") {
         return {
-          supported: false,
-          label: "\u751F\u56FE\u53D7\u9650",
-          detail: "free \u5957\u9910\u8D26\u53F7\u4E0D\u652F\u6301\u56FE\u7247\u751F\u6210\uFF0C\u8BF7\u5207\u6362\u5230 Plus \u6216\u66F4\u9AD8\u5957\u9910\u8D26\u53F7\u3002",
-          badgeClass: "red",
+          supported: true,
+          label: "\u53EF\u5C1D\u8BD5\u751F\u56FE",
+          detail: "free \u8D26\u53F7\u53EF\u5C1D\u8BD5\u56FE\u7247\u751F\u6210\uFF0C\u989D\u5EA6\u548C\u53EF\u7528\u6027\u4EE5\u4E0A\u6E38\u8FD4\u56DE\u4E3A\u51C6\u3002",
+          badgeClass: "orange",
         };
       }
 
@@ -2325,6 +2332,21 @@ function renderAdminPage() {
         });
       }
 
+      if (endpoint === "/v1/images/edits") {
+        return formatJson({
+          model: "gpt-image-2",
+          prompt: "\u53C2\u8003\u8FD9\u5F20\u56FE\u7247\uFF0C\u751F\u6210\u4E00\u5F20\u66F4\u9002\u5408\u79D1\u6280\u4EA7\u54C1\u5E7F\u544A\u7684\u7248\u672C\uFF0C\u4FDD\u7559\u4E3B\u4F53\u6784\u56FE\uFF0C\u589E\u5F3A\u5149\u7EBF\u548C\u8D28\u611F\u3002",
+          images: [
+            {
+              image_url: "data:image/png;base64,\u66FF\u6362\u4E3A\u4F60\u7684\u56FE\u7247base64",
+            },
+          ],
+          size: "1024x1024",
+          quality: "low",
+          response_format: "b64_json",
+        });
+      }
+
       return formatJson({
         model: model,
         input: "\u8BF7\u53EA\u56DE\u590D OK",
@@ -2336,6 +2358,10 @@ function renderAdminPage() {
       const avg = requests.length
         ? requests.reduce(function (sum, item) { return sum + (item.durationMs || 0); }, 0) / requests.length
         : 0;
+      const codexAccountId = config.codex && config.codex.accountId ? config.codex.accountId : "";
+      const codexProfile = codexAccountId && Array.isArray(config.profiles)
+        ? config.profiles.find(function (profile) { return profile.accountId === codexAccountId; })
+        : null;
 
       return [
         {
@@ -2357,6 +2383,12 @@ function renderAdminPage() {
           detail: "\u672A\u663E\u5F0F\u6307\u5B9A model \u65F6\u751F\u6548",
           compact: true,
         },
+        {
+          label: "Codex \u5F53\u524D\u8D26\u53F7",
+          value: codexProfile ? getProfileDisplayLabel(codexProfile) : (codexAccountId ? maskIdentifier(codexAccountId) : "\u672A\u68C0\u6D4B\u5230"),
+          detail: config.codex && config.codex.exists ? "\u6765\u81EA ~/.codex/auth.json" : "\u5C1A\u672A\u5E94\u7528\u5230 Codex",
+          compact: true,
+        },
         {
           label: "\u5F53\u524D\u7248\u672C",
           value: getVersionValue(config),
@@ -2550,6 +2582,7 @@ function renderAdminPage() {
           +   "</div>"
           +   '<div class="account-actions">'
           +     actionButton
+          +     '<button class="btn-secondary" type="button" data-profile-action="apply-codex" data-profile-id="' + escapeHtml(profile.profileId) + '">\u5E94\u7528\u5230 Codex</button>'
           +     '<button class="btn-secondary" type="button" data-profile-action="export" data-profile-id="' + escapeHtml(profile.profileId) + '">\u5BFC\u51FA</button>'
           +     '<button class="btn-danger" type="button" data-profile-action="remove" data-profile-id="' + escapeHtml(profile.profileId) + '">\u5220\u9664</button>'
           +   "</div>"
@@ -2561,13 +2594,15 @@ function renderAdminPage() {
       const profiles = Array.isArray(config.profiles) ? config.profiles : [];
       const now = Date.now();
       const seeds = profiles.slice(0, 5).map(function (profile, index) {
-        const endpoint = index % 4 === 0
+        const endpoint = index % 5 === 0
           ? "/v1/chat/completions"
-          : index % 4 === 1
+          : index % 5 === 1
             ? "/v1/responses"
-            : index % 4 === 2
+            : index % 5 === 2
               ? "/v1/models"
-              : "/v1/images/generations";
+              : index % 5 === 3
+                ? "/v1/images/generations"
+                : "/v1/images/edits";
         const method = endpointMeta[endpoint].method;
         return {
           time: now - index * 15 * 60 * 1000,
@@ -2575,7 +2610,7 @@ function renderAdminPage() {
           endpoint: endpoint,
           accountEmail: profile.email || "",
           accountFallback: profile.accountId || profile.profileId || "\u672A\u547D\u540D\u8D26\u53F7",
-          model: endpoint === "/v1/images/generations" ? "gpt-image-2" : config.settings.defaultModel,
+          model: endpoint.indexOf("/v1/images/") === 0 ? "gpt-image-2" : config.settings.defaultModel,
           statusCode: 200,
           durationMs: 860 + index * 230 + getPrimaryUsage(profile) * 8,
           source: index % 2 === 0 ? "\u7BA1\u7406\u9875" : "CLI",
@@ -2806,13 +2841,13 @@ function renderAdminPage() {
 
     function syncImageCapabilityHint(config) {
       const capability = getImageCapability(config ? config.profile : null);
-      const isImageEndpoint = endpointSelect.value === "/v1/images/generations";
+      const isImageEndpoint = endpointSelect.value === "/v1/images/generations" || endpointSelect.value === "/v1/images/edits";
       imageCapabilityHint.textContent = capability.detail;
       imageCapabilityHint.className = capability.supported && !isImageEndpoint ? "hint" : "hint warn";
-      runTestBtn.disabled = isImageEndpoint && !capability.supported;
+      runTestBtn.disabled = isImageEndpoint && !config.profile;
       if (isImageEndpoint && !capability.supported) {
         testerMeta.textContent = capability.label;
-      } else if (testerMeta.textContent === capability.label || testerMeta.textContent === "\u751F\u56FE\u53D7\u9650") {
+      } else if (testerMeta.textContent === capability.label || testerMeta.textContent === "\u751F\u56FE\u53D7\u9650" || testerMeta.textContent === "\u53EF\u5C1D\u8BD5\u751F\u56FE") {
         testerMeta.textContent = "\u51C6\u5907\u5C31\u7EEA";
       }
     }
@@ -2843,7 +2878,7 @@ function renderAdminPage() {
       authStatus.textContent = config.status.loggedIn
         ? (supportsImageGeneration(config.profile)
           ? "\u7F51\u5173\u5DF2\u53EF\u76F4\u63A5\u8F6C\u53D1\u8BF7\u6C42\uFF0C\u53EF\u4EE5\u5728\u4E0B\u65B9\u5207\u6362\u9ED8\u8BA4\u6A21\u578B\u5E76\u53D1\u9001\u6D4B\u8BD5\u8BF7\u6C42\u3002"
-          : "\u5F53\u524D\u8D26\u53F7\u53EF\u7528\u4E8E\u6587\u672C\u63A5\u53E3\uFF0C\u4F46\u4E0D\u652F\u6301\u56FE\u7247\u751F\u6210\u3002\u8BF7\u5207\u6362\u5230 Plus \u6216\u66F4\u9AD8\u5957\u9910\u8D26\u53F7\u3002")
+          : "\u5F53\u524D\u8D26\u53F7\u672A\u5C31\u7EEA\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55\u540E\u518D\u6D4B\u8BD5\u63A5\u53E3\u3002")
         : "\u8BF7\u5148\u70B9\u51FB\u201C\u65B0\u589E\u8D26\u53F7\u201D\uFF0C\u5B8C\u6210 OAuth \u540E\u518D\u6D4B\u8BD5\u63A5\u53E3\u3002";
       if (!requestBody.value) {
         requestBody.value = buildExample(endpointSelect.value || "/v1/chat/completions");
@@ -2987,6 +3022,10 @@ function renderAdminPage() {
         await exportProfile(profileId, button);
         return;
       }
+      if (action === "apply-codex") {
+        await applyProfileToCodex(profileId, button);
+        return;
+      }
 
       setBusy(button, true);
       authStatus.textContent = action === "activate" ? "\u6B63\u5728\u5207\u6362\u5F53\u524D\u8D26\u53F7..." : "\u6B63\u5728\u5220\u9664\u8D26\u53F7...";
@@ -3020,6 +3059,31 @@ function renderAdminPage() {
       }
     }
 
+    async function applyProfileToCodex(profileId, button) {
+      setBusy(button, true);
+      authStatus.textContent = "\u6B63\u5728\u5E94\u7528\u8D26\u53F7\u5230 Codex...";
+      try {
+        const result = await fetchJson("/_gateway/admin/codex/apply", {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+          },
+          body: formatJson({
+            profileId: profileId,
+          }),
+        });
+        const config = result.config || await fetchJson("/_gateway/admin/config");
+        renderConfig(config);
+        const codex = result.codex || config.codex || {};
+        authStatus.textContent = "\u5DF2\u5E94\u7528\u5230 Codex\u3002\u65B0\u5F00\u7684 Codex \u4F1A\u8BDD\u5C06\u4F7F\u7528\u8BE5\u8D26\u53F7\u3002"
+          + (codex.backupPath ? " \u5DF2\u5907\u4EFD\u539F auth.json\u3002" : "");
+      } catch (error) {
+        authStatus.textContent = error.message;
+      } finally {
+        setBusy(button, false);
+      }
+    }
+
     function downloadJsonFile(fileName, value) {
       const blob = new Blob([formatJson(value) + "\\n"], { type: "application/json" });
       const url = URL.createObjectURL(blob);

package/dist/server/app.js

@@ -85,6 +85,9 @@ const profileExportSchema = z.object({
   profileIds: z.array(z.string().min(1)).optional(),
   all: z.boolean().optional()
 });
+const codexApplySchema = z.object({
+  profileId: z.string().min(1)
+});
 const imageGenerationsBodySchema = z.object({
   prompt: z.string().min(1),
   model: z.string().optional(),
@@ -98,6 +101,29 @@ const imageGenerationsBodySchema = z.object({
   response_format: z.enum(["b64_json", "url"]).optional(),
   user: z.string().optional()
 }).passthrough();
+const imageReferenceSchema = z.union([
+  z.string().min(1),
+  z.object({
+    image_url: z.string().min(1).optional(),
+    file_id: z.string().min(1).optional()
+  }).passthrough()
+]);
+const imageEditsBodySchema = z.object({
+  prompt: z.string().min(1),
+  images: z.array(imageReferenceSchema).min(1).max(16).optional(),
+  image: z.union([imageReferenceSchema, z.array(imageReferenceSchema).min(1).max(16)]).optional(),
+  mask: imageReferenceSchema.optional(),
+  model: z.string().optional(),
+  n: z.number().int().positive().optional(),
+  quality: z.enum(["low", "medium", "high", "auto"]).optional(),
+  size: z.string().min(1).optional(),
+  background: z.enum(["transparent", "opaque", "auto"]).optional(),
+  output_format: z.enum(["png", "webp", "jpeg"]).optional(),
+  output_compression: z.number().int().min(0).max(100).optional(),
+  moderation: z.enum(["auto", "low"]).optional(),
+  response_format: z.enum(["b64_json", "url"]).optional(),
+  user: z.string().optional()
+}).passthrough();
 const chatCompletionExcludedKeys = /* @__PURE__ */ new Set([
   "messages",
   "n",
@@ -205,6 +231,46 @@ function summarizeImageRequestForLog(body) {
     user: body.user ?? void 0
   };
 }
+function getImageEditReferences(data) {
+  if (Array.isArray(data.images)) {
+    return data.images;
+  }
+  if (Array.isArray(data.image)) {
+    return data.image;
+  }
+  if (data.image) {
+    return [data.image];
+  }
+  return [];
+}
+function normalizeJsonImageReference(reference) {
+  if (typeof reference === "string") {
+    return {
+      imageUrl: normalizeJsonImageUrl(reference)
+    };
+  }
+  return {
+    imageUrl: reference.image_url ? normalizeJsonImageUrl(reference.image_url) : void 0,
+    fileId: reference.file_id
+  };
+}
+function normalizeJsonImageUrl(value) {
+  const trimmed = value.trim();
+  if (/^https?:\/\//i.test(trimmed) || /^data:image\//i.test(trimmed)) {
+    return trimmed;
+  }
+  if (/^[A-Za-z0-9+/=_-]+$/.test(trimmed) && trimmed.length > 80) {
+    return `data:image/png;base64,${trimmed}`;
+  }
+  return trimmed;
+}
+function summarizeImageEditRequestForLog(body) {
+  return {
+    ...summarizeImageRequestForLog(body),
+    imageCount: getImageEditReferences(body).length,
+    hasMask: Boolean(body.mask)
+  };
+}
 function buildResponseApiBody(result, includeRaw) {
   const responseBody = {
     object: "response",
@@ -266,6 +332,30 @@ function validateImageRequest(data) {
   }
   return null;
 }
+function validateImageEditRequest(data) {
+  const generationValidationError = validateImageRequest(data);
+  if (generationValidationError) {
+    return generationValidationError;
+  }
+  if (data.mask) {
+    return "\u5F53\u524D\u7F51\u5173\u7684 JSON \u7248 images.edits \u6682\u4E0D\u652F\u6301 mask\uFF1B\u8BF7\u5148\u4F7F\u7528\u53C2\u8003\u56FE\u7F16\u8F91\u3002";
+  }
+  const references = getImageEditReferences(data);
+  if (references.length === 0) {
+    return "images.edits \u8BF7\u6C42\u7F3A\u5C11 images \u6216 image\u3002";
+  }
+  const normalized = references.map((reference) => normalizeJsonImageReference(reference));
+  if (normalized.some((reference) => reference.fileId)) {
+    return "\u5F53\u524D\u7F51\u5173\u7684 JSON \u7248 images.edits \u6682\u4E0D\u652F\u6301 file_id\uFF0C\u8BF7\u4F7F\u7528 image_url URL \u6216 base64 data URL\u3002";
+  }
+  if (normalized.some((reference) => !reference.imageUrl)) {
+    return "images.edits \u7684\u6BCF\u4E2A\u56FE\u7247\u5F15\u7528\u90FD\u9700\u8981\u63D0\u4F9B image_url\u3002";
+  }
+  if (normalized.some((reference) => reference.imageUrl && !/^https?:\/\//i.test(reference.imageUrl) && !/^data:image\//i.test(reference.imageUrl))) {
+    return "images.edits \u7684 image_url \u9700\u8981\u662F http(s) URL\u3001data:image/...;base64,...\uFF0C\u6216\u88F8 base64 \u5B57\u7B26\u4E32\u3002";
+  }
+  return null;
+}
 function maskSecret(value) {
   if (value.length <= 12) {
     return value;
@@ -326,7 +416,8 @@ function getErrorStatusCode(error) {
 }
 function createApp(params) {
   const app = Fastify({
-    logger: false
+    logger: false,
+    bodyLimit: params?.bodyLimit
   });
   const ctx = createGatewayContext();
   void app.register(cors, {
@@ -352,14 +443,15 @@ function createApp(params) {
     };
   });
   async function buildAdminConfig(request) {
-    const [status, models, modelCatalog, versionStatus, settings, profile, profiles] = await Promise.all([
+    const [status, models, modelCatalog, versionStatus, settings, profile, profiles, codexStatus] = await Promise.all([
       ctx.authService.getStatus(),
       ctx.modelService.listModels(),
       ctx.modelService.getCatalog(),
       ctx.versionService.getVersionStatus(),
       ctx.configService.getSettings(),
       ctx.authService.getActiveProfile(),
-      ctx.authService.listProfiles()
+      ctx.authService.listProfiles(),
+      ctx.authService.getCodexStatus()
     ]);
     const origin = resolveOrigin(request);
     return {
@@ -370,6 +462,7 @@ function createApp(params) {
       versionStatus,
       profile: serializeProfile(profile),
       profiles: profiles.map((item) => serializeManagedProfile(item)),
+      codex: codexStatus,
       adminUrl: `${origin}/`,
       baseUrl: `${origin}/v1`,
       supportedEndpoints: [
@@ -392,6 +485,11 @@ function createApp(params) {
           method: "POST",
           path: "/v1/images/generations",
           description: "OpenAI images.generations \u517C\u5BB9\u63A5\u53E3\u3002"
+        },
+        {
+          method: "POST",
+          path: "/v1/images/edits",
+          description: "OpenAI images.edits JSON \u517C\u5BB9\u63A5\u53E3\u3002"
         }
       ]
     };
@@ -518,6 +616,22 @@ function createApp(params) {
       profile: await ctx.authService.exportProfile(parsed.data.profileId)
     };
   });
+  app.post("/_gateway/admin/codex/apply", async (request, reply) => {
+    const parsed = codexApplySchema.safeParse(request.body);
+    if (!parsed.success) {
+      reply.code(400);
+      return {
+        error: {
+          type: "validation_error",
+          message: parsed.error.issues[0]?.message ?? "\u8BF7\u6C42\u4F53\u683C\u5F0F\u9519\u8BEF"
+        }
+      };
+    }
+    return {
+      codex: await ctx.authService.applyProfileToCodex(parsed.data.profileId),
+      config: await buildAdminConfig(request)
+    };
+  });
   app.put("/_gateway/admin/settings", async (request, reply) => {
     const parsed = settingsUpdateSchema.safeParse(request.body);
     if (!parsed.success) {
@@ -733,6 +847,96 @@ function createApp(params) {
     });
     return response;
   });
+  app.post("/v1/images/edits", async (request, reply) => {
+    const contentType = request.headers["content-type"] ?? "";
+    if (!String(contentType).toLowerCase().includes("application/json")) {
+      reply.code(415);
+      return {
+        error: {
+          type: "unsupported_media_type",
+          message: "\u5F53\u524D\u7F51\u5173\u4EC5\u652F\u6301 JSON \u7248 images.edits\uFF1B\u8BF7\u4F7F\u7528 application/json\uFF0C\u5E76\u901A\u8FC7 images[].image_url \u4F20 URL \u6216 base64 data URL\u3002"
+        }
+      };
+    }
+    const parsed = imageEditsBodySchema.safeParse(request.body);
+    if (!parsed.success) {
+      console.error("[gateway:image:edit] validation failure", {
+        method: request.method,
+        url: request.url,
+        issue: parsed.error.issues[0]?.message ?? "\u8BF7\u6C42\u4F53\u683C\u5F0F\u9519\u8BEF"
+      });
+      reply.code(400);
+      return {
+        error: {
+          type: "validation_error",
+          message: parsed.error.issues[0]?.message ?? "\u8BF7\u6C42\u4F53\u683C\u5F0F\u9519\u8BEF"
+        }
+      };
+    }
+    const validationError = validateImageEditRequest(parsed.data);
+    if (validationError) {
+      console.error("[gateway:image:edit] validation failure", {
+        method: request.method,
+        url: request.url,
+        summary: summarizeImageEditRequestForLog(parsed.data),
+        issue: validationError
+      });
+      reply.code(400);
+      return {
+        error: {
+          type: "validation_error",
+          message: validationError
+        }
+      };
+    }
+    if (typeof parsed.data.n === "number" && parsed.data.n > 1) {
+      console.error("[gateway:image:edit] not supported", {
+        method: request.method,
+        url: request.url,
+        summary: summarizeImageEditRequestForLog(parsed.data),
+        issue: "\u5F53\u524D\u7F51\u5173\u6682\u4E0D\u652F\u6301 images.edits \u4E00\u6B21\u8FD4\u56DE\u591A\u5F20\u56FE\uFF08n > 1\uFF09"
+      });
+      reply.code(501);
+      return {
+        error: {
+          type: "not_supported",
+          message: "\u5F53\u524D\u7F51\u5173\u6682\u4E0D\u652F\u6301 images.edits \u4E00\u6B21\u8FD4\u56DE\u591A\u5F20\u56FE\uFF08n > 1\uFF09"
+        }
+      };
+    }
+    const imageReferences = getImageEditReferences(parsed.data).map((reference) => normalizeJsonImageReference(reference)).map((reference) => ({
+      imageUrl: reference.imageUrl ?? ""
+    }));
+    const requestSummary = summarizeImageEditRequestForLog(parsed.data);
+    console.info("[gateway:image:edit] request accepted", {
+      method: request.method,
+      url: request.url,
+      summary: requestSummary
+    });
+    const response = await ctx.imageService.generate({
+      prompt: parsed.data.prompt,
+      inputImages: imageReferences,
+      model: parsed.data.model,
+      n: parsed.data.n,
+      size: parsed.data.size,
+      quality: parsed.data.quality,
+      background: parsed.data.background,
+      outputFormat: parsed.data.output_format,
+      outputCompression: parsed.data.output_compression,
+      moderation: parsed.data.moderation
+    });
+    console.info("[gateway:image:edit] response ready", {
+      method: request.method,
+      url: request.url,
+      summary: requestSummary,
+      created: response.created,
+      imageCount: response.data.length,
+      output_format: response.output_format,
+      quality: response.quality,
+      size: response.size
+    });
+    return response;
+  });
   return app;
 }
 export {

package/dist/server/index.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { ConfigService } from "../core/services/config-service.js";
 import { createApp } from "./app.js";
+const DEFAULT_BODY_LIMIT_MB = 32;
 function resolveCorsOrigin() {
   const raw = process.env.AZT_CORS_ORIGIN?.trim();
   if (!raw || raw === "*") {
@@ -9,9 +10,22 @@ function resolveCorsOrigin() {
   const values = raw.split(",").map((item) => item.trim()).filter(Boolean);
   return values.length <= 1 ? values[0] ?? true : values;
 }
+function resolveBodyLimitBytes() {
+  const raw = process.env.AZT_BODY_LIMIT_MB?.trim();
+  if (!raw) {
+    return DEFAULT_BODY_LIMIT_MB * 1024 * 1024;
+  }
+  const value = Number(raw);
+  if (!Number.isFinite(value) || value <= 0) {
+    return DEFAULT_BODY_LIMIT_MB * 1024 * 1024;
+  }
+  return Math.floor(value * 1024 * 1024);
+}
 async function startServer(params) {
+  const bodyLimit = resolveBodyLimitBytes();
   const app = createApp({
-    corsOrigin: resolveCorsOrigin()
+    corsOrigin: resolveCorsOrigin(),
+    bodyLimit
   });
   const configService = new ConfigService();
   const defaults = await configService.getServerConfig();
@@ -25,7 +39,8 @@ async function startServer(params) {
     app,
     host,
     port,
-    corsOrigin: process.env.AZT_CORS_ORIGIN?.trim() || "*"
+    corsOrigin: process.env.AZT_CORS_ORIGIN?.trim() || "*",
+    bodyLimit
   };
 }
 export {

package/docs/API_USAGE.md

@@ -91,6 +91,25 @@ curl http://127.0.0.1:8787/v1/images/generations \
   }'
 ```
 
+JSON image edit with a reference image URL or base64 data URL:
+
+```bash
+curl http://127.0.0.1:8787/v1/images/edits \
+  -H "Content-Type: application/json" \
+  -d '{
+    "model": "gpt-image-2",
+    "prompt": "Use this reference image and make it look like a clean product advertisement.",
+    "images": [
+      {
+        "image_url": "data:image/png;base64,REPLACE_WITH_IMAGE_BASE64"
+      }
+    ],
+    "size": "1024x1024",
+    "quality": "low",
+    "response_format": "b64_json"
+  }'
+```
+
 ## JavaScript SDK Example
 
 ```ts
@@ -117,4 +136,3 @@ console.log(response.choices[0]?.message?.content);
 - A model appearing in `/v1/models` means the local Codex cache lists it. Final availability still depends on the active account.
 - `stream=true` is not supported yet.
 - The default listener is `0.0.0.0:8787`, so local-network clients can call the gateway by using the machine IP.
-

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ai-zero-token",
-  "version": "1.0.6",
-  "description": "Local-first OpenAI-compatible AI CLI and gateway with Codex OAuth, multi-account management, and gpt-image-2 image generation.",
+  "version": "1.0.8",
+  "description": "Local-first OpenAI-compatible AI CLI and gateway with Codex OAuth, multi-account management, and gpt-image-2 image generation/editing.",
   "license": "MIT",
   "type": "module",
   "repository": {
@@ -60,6 +60,7 @@
     "CHANGELOG.md",
     "docs/API_USAGE.md",
     "README.md",
+    "README.zh-CN.md",
     "package.json"
   ]
 }