codex-copilot-dx 0.9.0 → 0.9.1

package/README.md

@@ -184,6 +184,8 @@ The provider credential is stored in `~/.config/codex-copilot-dx/image-provider.
 
 The enable command verifies the local MCP handshake and generation-tool directory without generating an image. It reports provider configuration separately from local service readiness; it cannot assert that every running Codex task has refreshed its catalog. Codex normally detects changed skills; restart Codex App once if an open task has not refreshed them. Normal CCDX startup installs or updates this guidance only for an already-enabled provider, without repeating API setup. Without `enable-image`, it installs neither this skill nor the MCP registration. Unchanged guidance is not rewritten. The existing adapter can remain running because provider settings are loaded when the tool is invoked.
 
+For Qwen-style image responses, CCDX accepts canonical PNG, JPEG, or WebP `data:image/...;base64,` output within the existing 32 MiB image limit. Public HTTPS image URLs still use the same pinned-DNS download checks; HTTP, private-network targets, and URLs with embedded credentials remain rejected.
+
 Existing compatible `ccdx_image` registrations are reused without requiring CCDX's comment markers or resetting user timeouts/tool policies. Missing or damaged markers alone do not block startup. Core GPT configuration is committed independently before optional image maintenance: image configuration conflicts, image-only write failures, or Skill maintenance failures warn without aborting the core service. No new image guidance is installed after failed image configuration. With images disabled or their provider configuration invalid/unreadable, normal startup performs no image configuration maintenance, Skill installation, or image-network probe; explicit `disable-image` owns cleanup. Automatic updates/removal are limited to recognizable CCDX defaults and isolated TOML declarations, never everything between two comments. Ambiguous shared-inline or customized registrations are left intact; `disable-image` still disables the CCDX provider and removes its owned guidance. Invalid TOML/UTF-8 in the shared Codex config or a failed essential core configuration write remains an explicit error rather than a silent success.
 
 Direct MCP generations and edits retain their original inline image content and editing ID, and also save the exact image bytes privately under `~/.local/share/codex-copilot-dx/images`. The result includes ready-to-use image Markdown for Codex's final chat reply, so the image appears as a clickable thumbnail instead of only inside a tool result. Files use unique names and are not overwritten or removed on adapter restart. Asking to show the same image again reuses its existing Markdown, not a new generation or edit. If saving fails, CCDX still returns the generated image content, reports the delivery failure, and does not retry the provider or invent a file path. The bundled helper continues saving once at its existing output location, without a second adapter-side copy. Existing enabled users receive updated, unmodified CCDX-owned guidance on the next CCDX startup; no new setup command is needed.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-copilot-dx",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Use Codex App with GitHub Copilot",
   "author": "Dale Xiao",
   "type": "module",

package/src/image-provider.mjs

@@ -73,6 +73,29 @@ function checkedImage(config, value) {
   return value;
 }
 
+function decodeGeneratedImageDataUri(value, signal) {
+  if (signal?.aborted) throw providerError("Image generation timed out or was cancelled", "ccdx_image_timeout");
+  const maxEncodedLength = 4 * Math.ceil(IMAGE_MAX_BYTES / 3);
+  if (value.length > maxEncodedLength + 32) {
+    throw providerError("Generated image exceeds the size limit", "ccdx_image_too_large");
+  }
+  const match = /^data:(image\/(?:png|jpeg|webp));base64,/.exec(value);
+  if (!match) throw providerError("Image API returned an unsupported image data URI", "ccdx_image_format_unsupported");
+  const encoded = value.slice(match[0].length);
+  if (!encoded || encoded.length > maxEncodedLength || encoded.length % 4 !== 0
+    || !/^[A-Za-z0-9+/]+={0,2}$/.test(encoded)) {
+    throw providerError("Image API returned invalid image data", "ccdx_image_data_invalid");
+  }
+  const bytes = Buffer.from(encoded, "base64");
+  if (bytes.length > IMAGE_MAX_BYTES) throw providerError("Generated image exceeds the size limit", "ccdx_image_too_large");
+  if (bytes.toString("base64") !== encoded) throw providerError("Image API returned invalid image data", "ccdx_image_data_invalid");
+  if (imageMetadata(bytes).mimeType !== match[1]) {
+    throw providerError("Image API returned image data with a mismatched format", "ccdx_image_format_unsupported");
+  }
+  if (signal?.aborted) throw providerError("Image generation timed out or was cancelled", "ccdx_image_timeout");
+  return bytes;
+}
+
 function generationBody(config, prompt, size, image) {
   if (config.protocol === "qwen-messages") {
     return {
@@ -306,9 +329,9 @@ export async function generateImage(config, {
   if (!source) throw providerError("Image API response did not contain an image");
   let bytes;
   try {
-    bytes = source.type === "base64"
-      ? Buffer.from(source.value, "base64")
-      : await downloadImage(source.value, { signal: requestSignal, maxBytes: IMAGE_MAX_BYTES });
+    if (source.type === "base64") bytes = Buffer.from(source.value, "base64");
+    else if (source.value.startsWith("data:")) bytes = decodeGeneratedImageDataUri(source.value, requestSignal);
+    else bytes = await downloadImage(source.value, { signal: requestSignal, maxBytes: IMAGE_MAX_BYTES });
   } catch (error) {
     if (error?.code?.startsWith?.("ccdx_")) throw error;
     const code = String(error?.cause?.code || error?.code || "").replace(/[^A-Z0-9_-]/gi, "").slice(0, 64);