dsh-codex-connect 0.1.0-alpha.4.19 → 0.1.0-alpha.4.21

package/lib/client.js

@@ -11,8 +11,35 @@ window.__ModuleLoader__.load({
 		/** Node-free settings contract shared by the Host plugin and browser card. */
 		/** Stable Harness settings namespace owned by this plugin. */
 		const OPENAI_CODEX_SETTINGS_NAMESPACE = "llm-openai-codex";
+		/** Suggested local HTTP proxy shown by the settings UI; it is never enabled by default. */
+		const DEFAULT_OPENAI_CODEX_PROXY_URL = "http://127.0.0.1:7890";
+		/**
+		* Normalize the credential-free HTTP proxy URL accepted by Codex Connect.
+		* Paths, query strings, fragments, and embedded credentials are rejected so
+		* the value remains an origin rather than an opaque request target.
+		*/
+		function normalizeOpenAICodexProxyUrl(value) {
+			if (typeof value !== "string" || value.trim().length === 0) return void 0;
+			try {
+				const parsed = new URL(value.trim());
+				if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return void 0;
+				if (parsed.username !== "" || parsed.password !== "") return void 0;
+				if (parsed.pathname !== "/" || parsed.search !== "" || parsed.hash !== "") return void 0;
+				if (parsed.hostname.length === 0) return void 0;
+				if (parsed.port !== "" && (!/^\d+$/u.test(parsed.port) || Number(parsed.port) < 1 || Number(parsed.port) > 65535)) return void 0;
+				return parsed.origin;
+			} catch {
+				return;
+			}
+		}
+		/** Whether a value is a supported, canonical HTTP(S) proxy origin. */
+		function isValidOpenAICodexProxyUrl(value) {
+			return normalizeOpenAICodexProxyUrl(value) !== void 0;
+		}
 		Object.freeze({
 			models: void 0,
+			enableProxy: false,
+			proxyUrl: DEFAULT_OPENAI_CODEX_PROXY_URL,
 			enableSearch: false,
 			enableImageTool: false,
 			enableImageGeneration: false,
@@ -28,6 +55,8 @@ window.__ModuleLoader__.load({
 		function decodeOpenAICodexSettings(value) {
 			if (!isRecord$2(value)) return void 0;
 			const models = value["models"];
+			const enableProxy = value["enableProxy"];
+			const proxyUrl = value["proxyUrl"];
 			const enableSearch = value["enableSearch"];
 			const enableImageTool = value["enableImageTool"];
 			const enableImageGeneration = value["enableImageGeneration"];
@@ -36,6 +65,8 @@ window.__ModuleLoader__.load({
 			const searchContextSize = value["searchContextSize"];
 			const searchMaxOutputTokens = value["searchMaxOutputTokens"];
 			if (models !== void 0 && (!Array.isArray(models) || models.some((model) => typeof model !== "string"))) return void 0;
+			if (enableProxy !== void 0 && typeof enableProxy !== "boolean") return void 0;
+			if (proxyUrl !== void 0 && (typeof proxyUrl !== "string" || !isValidOpenAICodexProxyUrl(proxyUrl))) return void 0;
 			if (typeof enableSearch !== "boolean" || typeof enableImageTool !== "boolean") return void 0;
 			if (enableImageGeneration !== void 0 && typeof enableImageGeneration !== "boolean") return void 0;
 			if (typeof searchModel !== "string" || searchModel.trim().length === 0) return void 0;
@@ -44,6 +75,8 @@ window.__ModuleLoader__.load({
 			if (typeof searchMaxOutputTokens !== "number" || !Number.isInteger(searchMaxOutputTokens) || searchMaxOutputTokens < 1) return void 0;
 			return {
 				models: models === void 0 ? void 0 : [...new Set(models)],
+				enableProxy: enableProxy ?? false,
+				proxyUrl: proxyUrl === void 0 ? DEFAULT_OPENAI_CODEX_PROXY_URL : normalizeOpenAICodexProxyUrl(proxyUrl),
 				enableSearch,
 				enableImageTool,
 				enableImageGeneration: enableImageGeneration ?? false,
@@ -87,6 +120,13 @@ window.__ModuleLoader__.load({
 			return catalog;
 		}
 		//#endregion
+		//#region src/proxy-paths.ts
+		/** Node-free route constants shared by the Host and browser plugin halves. */
+		/** Detect bounded local/environment proxy candidates without changing settings. */
+		const OPENAI_CODEX_PROXY_DETECT_PATH = "/plugins/dsh-openai-codex/proxy/detect";
+		/** Test one manually entered proxy origin without changing settings. */
+		const OPENAI_CODEX_PROXY_TEST_PATH = "/plugins/dsh-openai-codex/proxy/test";
+		//#endregion
 		//#region src/client/OpenAICodexConfiguration.tsx
 		/** Staged optional-capability editor inside the OpenAI Codex plugin card. */
 		const sectionStyle$1 = {
@@ -223,6 +263,8 @@ window.__ModuleLoader__.load({
 		};
 		const CONFIG_FIELDS = [
 			"models",
+			"enableProxy",
+			"proxyUrl",
 			"enableSearch",
 			"enableImageTool",
 			"enableImageGeneration",
@@ -250,6 +292,10 @@ window.__ModuleLoader__.load({
 			const [feedback, setFeedback] = (0, react.useState)("idle");
 			const [modelCatalog, setModelCatalog] = (0, react.useState)();
 			const [modelCatalogError, setModelCatalogError] = (0, react.useState)(false);
+			const [proxyDetection, setProxyDetection] = (0, react.useState)({ status: "idle" });
+			const [manualProxy, setManualProxy] = (0, react.useState)(false);
+			const [manualProbe, setManualProbe] = (0, react.useState)();
+			const [manualProbeBusy, setManualProbeBusy] = (0, react.useState)(false);
 			(0, react.useEffect)(() => {
 				if (scope === void 0) return;
 				const controller = new AbortController();
@@ -291,10 +337,73 @@ window.__ModuleLoader__.load({
 				setDraft(scope?.getSnapshot().value);
 				setDirty(false);
 				setFeedback("idle");
+				setProxyDetection({ status: "idle" });
+				setManualProbe(void 0);
+			};
+			const detectProxy = async () => {
+				setProxyDetection({ status: "detecting" });
+				try {
+					const response = await fetch(OPENAI_CODEX_PROXY_DETECT_PATH, {
+						method: "POST",
+						credentials: "same-origin",
+						headers: { accept: "application/json" }
+					});
+					if (!response.ok) throw new Error(`proxy detection failed: ${String(response.status)}`);
+					const value = await response.json();
+					if (!Array.isArray(value.candidates) || !Array.isArray(value.results)) throw new Error("proxy detection response was invalid");
+					setProxyDetection(value.candidates.length > 0 ? {
+						status: "candidate",
+						candidates: value.candidates
+					} : {
+						status: "failed",
+						results: value.results
+					});
+				} catch {
+					setProxyDetection({
+						status: "failed",
+						results: []
+					});
+				}
+			};
+			const useProxy = (proxyUrl) => {
+				if (draft === void 0 || !isValidOpenAICodexProxyUrl(proxyUrl)) return;
+				setDraft({
+					...draft,
+					proxyUrl,
+					enableProxy: true
+				});
+				setDirty(true);
+				setFeedback("idle");
+				setManualProxy(true);
+				setManualProbe(void 0);
+				setProxyDetection({ status: "idle" });
+			};
+			const testManualProxy = async () => {
+				if (draft === void 0 || !isValidOpenAICodexProxyUrl(draft.proxyUrl)) return;
+				setManualProbeBusy(true);
+				try {
+					const path = `${OPENAI_CODEX_PROXY_TEST_PATH}?proxyUrl=${encodeURIComponent(draft.proxyUrl)}`;
+					const response = await fetch(path, {
+						method: "POST",
+						credentials: "same-origin",
+						headers: { accept: "application/json" }
+					});
+					if (!response.ok) throw new Error(`proxy test failed: ${String(response.status)}`);
+					setManualProbe(await response.json());
+				} catch {
+					setManualProbe({
+						proxyUrl: draft.proxyUrl,
+						reachable: false,
+						classification: "connect-failure"
+					});
+				} finally {
+					setManualProbeBusy(false);
+				}
 			};
 			const validModel = draft !== void 0 && draft.searchModel.trim().length > 0;
 			const validTokens = draft !== void 0 && Number.isInteger(draft.searchMaxOutputTokens) && draft.searchMaxOutputTokens > 0;
-			const valid = validModel && validTokens;
+			const validProxy = draft !== void 0 && isValidOpenAICodexProxyUrl(draft.proxyUrl);
+			const valid = validModel && validTokens && validProxy;
 			const save = async () => {
 				if (scope === void 0 || draft === void 0 || !snapshot.writable || !valid) return;
 				const desired = {
@@ -398,6 +507,135 @@ window.__ModuleLoader__.load({
 									}, model.id);
 								})
 							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: { paddingTop: 4 },
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+									style: headingStyle,
+									children: t("networkHeading")
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: {
+										...bodyStyle$2,
+										marginTop: 4
+									},
+									children: t("networkIntro")
+								})]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: bodyStyle$2,
+								role: "status",
+								children: draft.enableProxy ? t("customProxyActive", { proxyUrl: draft.proxyUrl }) : t("directConnection")
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: buttonsStyle,
+								children: [
+									!draft.enableProxy ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										style: buttonStyle$2,
+										onClick: () => {
+											detectProxy();
+										},
+										disabled: proxyDetection.status === "detecting",
+										children: proxyDetection.status === "detecting" ? t("detectingProxy") : t("detectProxy")
+									}) : null,
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										style: buttonStyle$2,
+										onClick: () => {
+											setManualProxy(true);
+										},
+										children: t("configureProxyManually")
+									}),
+									draft.enableProxy ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										style: buttonStyle$2,
+										onClick: () => {
+											update("enableProxy", false);
+										},
+										children: t("disableProxy")
+									}) : null
+								]
+							}),
+							proxyDetection.status === "candidate" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: fieldsetStyle,
+								role: "status",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: bodyStyle$2,
+										children: t("proxyCandidatesFound")
+									}),
+									proxyDetection.candidates.map((candidate) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										style: actionsStyle,
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+											style: modelIdStyle,
+											children: candidate.proxyUrl
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											style: primaryButtonStyle$2,
+											onClick: () => {
+												useProxy(candidate.proxyUrl);
+											},
+											children: t("useThisProxy")
+										})]
+									}, candidate.proxyUrl)),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										style: buttonStyle$2,
+										onClick: () => {
+											setProxyDetection({ status: "idle" });
+										},
+										children: t("keepDirectConnection")
+									})
+								]
+							}) : null,
+							proxyDetection.status === "failed" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: errorStyle$2,
+								role: "alert",
+								children: t("proxyDetectionFailed")
+							}) : null,
+							manualProxy ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: fieldsetStyle,
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+										style: formFieldStyle,
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											style: labelStyle,
+											children: t("proxyAddress")
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											style: controlStyle,
+											value: draft.proxyUrl,
+											"aria-invalid": !isValidOpenAICodexProxyUrl(draft.proxyUrl),
+											onChange: (event) => {
+												update("proxyUrl", event.currentTarget.value);
+											}
+										})]
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										style: buttonsStyle,
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											style: buttonStyle$2,
+											disabled: !isValidOpenAICodexProxyUrl(draft.proxyUrl) || manualProbeBusy,
+											onClick: () => {
+												testManualProxy();
+											},
+											children: manualProbeBusy ? t("testingProxy") : t("testProxy")
+										}), !draft.enableProxy ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											style: primaryButtonStyle$2,
+											disabled: !isValidOpenAICodexProxyUrl(draft.proxyUrl),
+											onClick: () => {
+												useProxy(draft.proxyUrl);
+											},
+											children: t("useThisProxy")
+										}) : null]
+									}),
+									manualProbe === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: manualProbe.reachable ? successStyle : errorStyle$2,
+										role: "status",
+										children: manualProbe.reachable ? t("proxyTestSucceeded", { status: manualProbe.status ?? manualProbe.classification }) : t("proxyTestFailed", { reason: manualProbe.classification })
+									})
+								]
+							}) : null,
 							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: { paddingTop: 4 },
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
@@ -575,6 +813,11 @@ window.__ModuleLoader__.load({
 						role: "alert",
 						children: t("invalidSearchTokens")
 					}) : null,
+					!validProxy && draft !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: errorStyle$2,
+						role: "alert",
+						children: t("invalidProxyUrl")
+					}) : null,
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						style: bodyStyle$2,
 						children: t("routingNote")
@@ -621,7 +864,8 @@ window.__ModuleLoader__.load({
 			"search-stability",
 			"image-generation",
 			"oauth-history",
-			"model-visibility"
+			"model-visibility",
+			"proxy-connection"
 		];
 		function isHighlightKind(value) {
 			return typeof value === "string" && HIGHLIGHT_KINDS.includes(value);
@@ -1125,7 +1369,8 @@ window.__ModuleLoader__.load({
 			"search-stability": "updateHighlightSearchStability",
 			"image-generation": "updateHighlightImageGeneration",
 			"oauth-history": "updateHighlightOauthHistory",
-			"model-visibility": "updateHighlightModelVisibility"
+			"model-visibility": "updateHighlightModelVisibility",
+			"proxy-connection": "updateHighlightProxyConnection"
 		};
 		const compatibilityTitleKeys = {
 			compatible: "compatibilityCompatibleTitle",
@@ -2567,6 +2812,24 @@ window.__ModuleLoader__.load({
 			modelCatalogFailed: "Available models could not be loaded.",
 			capabilitiesHeading: "Optional capabilities",
 			capabilitiesIntro: "Choose which extra Codex capabilities this dsh profile may register.",
+			networkHeading: "Network connection",
+			networkIntro: "Direct connection is the default. Proxy detection only tests a bounded set of local and environment candidates; nothing is saved until you choose Use this proxy and save.",
+			directConnection: "Direct connection",
+			customProxyActive: "Custom proxy selected: {proxyUrl}",
+			detectProxy: "Detect proxy",
+			detectingProxy: "Detecting…",
+			configureProxyManually: "Configure manually",
+			disableProxy: "Disable proxy",
+			proxyCandidatesFound: "Working proxy candidates found. Choose one to stage it for activation.",
+			keepDirectConnection: "Keep direct connection",
+			useThisProxy: "Use this proxy",
+			proxyDetectionFailed: "No working proxy candidate was found. Check DNS, connection refused, timeout, TLS, or proxy authentication errors, then try again.",
+			proxyAddress: "Custom proxy address",
+			testProxy: "Test proxy",
+			testingProxy: "Testing…",
+			proxyTestSucceeded: "Proxy reached the Codex endpoint (HTTP {status}).",
+			proxyTestFailed: "Proxy test failed: {reason}.",
+			invalidProxyUrl: "Enter an HTTP(S) proxy origin without credentials or a path.",
 			enableSearch: "Enable Codex search provider",
 			enableSearchHelp: "Makes OpenAI Codex available as a search provider. It does not select the global search route.",
 			searchModel: "Search model",
@@ -2606,12 +2869,18 @@ window.__ModuleLoader__.load({
 			unknownResult: "The image result could not be displayed safely.",
 			imageDetails: "Image details",
 			imageDetail: "{name}: {format} · {width} × {height} · {size}",
+			originalImageDetail: "Original {name}: {format} · {width} × {height} · {size}",
+			previewImageDetail: "Conversation preview: {format} · {width} × {height} · {size}",
 			download: "Download",
 			downloadNamed: "Download {name}",
+			downloadOriginal: "Download original",
+			downloadOriginalNamed: "Download original {name}",
+			downloadPreview: "Download preview",
+			downloadPreviewNamed: "Download preview {name}",
 			downloading: "Downloading…",
 			downloadFailed: "Download failed. Retry",
 			image: "Generated image",
-			open: "Open original image",
+			open: "Open image preview",
 			openNamed: "Open {name}",
 			loading: "Loading image",
 			loadFailed: "Image could not be loaded. Retry",
@@ -2675,6 +2944,7 @@ window.__ModuleLoader__.load({
 			updateHighlightImageGeneration: "Added optional GPT Image generation in the Codex Connect settings and a preview card in the conversation.",
 			updateHighlightOauthHistory: "Added safer session-history migration and a sign-in fallback when the account needs to reconnect.",
 			updateHighlightModelVisibility: "You can now choose which Codex models appear in model selectors.",
+			updateHighlightProxyConnection: "Added opt-in Codex proxy detection with explicit confirmation and a visible direct-connection fallback.",
 			viewTechnicalDetails: "View technical details",
 			hideTechnicalDetails: "Hide technical details",
 			technicalDetailsHeading: "Technical changes",
@@ -2751,6 +3021,24 @@ window.__ModuleLoader__.load({
 			modelCatalogFailed: "无法加载可用模型。",
 			capabilitiesHeading: "可选能力",
 			capabilitiesIntro: "选择允许此 dsh profile 注册哪些额外的 Codex 能力。",
+			networkHeading: "网络连接",
+			networkIntro: "默认使用直连。代理检测只测试有限的本机和环境变量候选地址；只有你选择“使用此代理”并保存后才会写入设置。",
+			directConnection: "直连",
+			customProxyActive: "已选择自定义代理：{proxyUrl}",
+			detectProxy: "检测代理",
+			detectingProxy: "正在检测…",
+			configureProxyManually: "手动配置",
+			disableProxy: "停用代理",
+			proxyCandidatesFound: "找到了可用的代理候选地址。请选择一个，将其暂存以便启用。",
+			keepDirectConnection: "保持直连",
+			useThisProxy: "使用此代理",
+			proxyDetectionFailed: "没有找到可用代理。请检查 DNS、连接被拒绝、超时、TLS 或代理认证错误后重试。",
+			proxyAddress: "自定义代理地址",
+			testProxy: "测试代理",
+			testingProxy: "正在测试…",
+			proxyTestSucceeded: "代理已到达 Codex 端点（HTTP {status}）。",
+			proxyTestFailed: "代理测试失败：{reason}。",
+			invalidProxyUrl: "请输入不含凭据或路径的 HTTP(S) 代理 origin。",
 			enableSearch: "启用 Codex 搜索提供方",
 			enableSearchHelp: "让 OpenAI Codex 可被选作搜索提供方，但不会自动改动全局搜索路由。",
 			searchModel: "搜索模型",
@@ -2790,12 +3078,18 @@ window.__ModuleLoader__.load({
 			unknownResult: "无法安全显示这次图片结果。",
 			imageDetails: "图片详情",
 			imageDetail: "{name}：{format} · {width} × {height} · {size}",
+			originalImageDetail: "原图 {name}：{format} · {width} × {height} · {size}",
+			previewImageDetail: "对话预览：{format} · {width} × {height} · {size}",
 			download: "下载",
 			downloadNamed: "下载 {name}",
+			downloadOriginal: "下载原图",
+			downloadOriginalNamed: "下载原图 {name}",
+			downloadPreview: "下载预览图",
+			downloadPreviewNamed: "下载预览图 {name}",
 			downloading: "正在下载…",
 			downloadFailed: "下载失败，重试",
 			image: "生成的图片",
-			open: "打开原图",
+			open: "打开图片预览",
 			openNamed: "打开 {name}",
 			loading: "正在加载图片",
 			loadFailed: "图片加载失败，重试",
@@ -2859,6 +3153,7 @@ window.__ModuleLoader__.load({
 			updateHighlightImageGeneration: "在 Codex Connect 设置中加入可选的 GPT Image 生图，并在对话里展示生成结果卡片。",
 			updateHighlightOauthHistory: "增加更安全的会话历史迁移，并在账号需要重新登录时提供备用登录路径。",
 			updateHighlightModelVisibility: "现在可以选择哪些 Codex 模型显示在模型选择菜单中。",
+			updateHighlightProxyConnection: "增加可选的 Codex 代理检测，启用前需要明确确认，并始终保留直连回退入口。",
 			viewTechnicalDetails: "查看完整技术说明",
 			hideTechnicalDetails: "收起技术说明",
 			technicalDetailsHeading: "技术变更",
@@ -2882,6 +3177,38 @@ window.__ModuleLoader__.load({
 			dismissUpdate: "稍后提醒"
 		};
 		//#endregion
+		//#region src/image-assets-contract.ts
+		/** Same-origin endpoint serving one session-owned original generated image. */
+		const OPENAI_CODEX_ORIGINAL_IMAGE_PATH = "/plugins/dsh-codex-connect/images/original";
+		/** Opaque identifier format for one plugin-owned original image. */
+		const OPENAI_CODEX_IMAGE_ASSET_ID_PATTERN = /^img_[0-9a-f]{32}$/u;
+		function positiveSafeInteger$1(value) {
+			return typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+		}
+		/** Decode session-log metadata without trusting an asset id, filename, or media type. */
+		function decodeOpenAICodexOriginalImageRef(value) {
+			if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+			const candidate = value;
+			if (typeof candidate.assetId !== "string" || !OPENAI_CODEX_IMAGE_ASSET_ID_PATTERN.test(candidate.assetId) || candidate.mediaType !== "image/png" && candidate.mediaType !== "image/jpeg" && candidate.mediaType !== "image/webp" || !positiveSafeInteger$1(candidate.width) || !positiveSafeInteger$1(candidate.height) || !positiveSafeInteger$1(candidate.bytes) || candidate.bytes > 50331648 || typeof candidate.name !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u.test(candidate.name) || typeof candidate.sha256 !== "string" || !/^[0-9a-f]{64}$/u.test(candidate.sha256)) return void 0;
+			return {
+				assetId: candidate.assetId,
+				mediaType: candidate.mediaType,
+				width: candidate.width,
+				height: candidate.height,
+				bytes: candidate.bytes,
+				name: candidate.name,
+				sha256: candidate.sha256
+			};
+		}
+		/** Build a same-origin URL without allowing either opaque id to become a path segment. */
+		function openAICodexOriginalImageUrl(sessionId, assetId) {
+			const query = new URLSearchParams({
+				sessionId,
+				assetId
+			});
+			return `${OPENAI_CODEX_ORIGINAL_IMAGE_PATH}?${query.toString()}`;
+		}
+		//#endregion
 		//#region src/image-presentation.ts
 		/** Stable metadata marker for generated image result views. */
 		const IMAGE_PRESENTATION_KIND = "codex-connect-images";
@@ -2909,10 +3236,32 @@ window.__ModuleLoader__.load({
 			if (typeof value !== "object" || value === null) return void 0;
 			const candidate = value;
 			if (candidate.kind !== "codex-connect-images" || typeof candidate.prompt !== "string" || candidate.prompt.length < 1 || candidate.prompt.length > 32e3 || !Array.isArray(candidate.images) || candidate.images.length < 1 || candidate.images.length > 4) return void 0;
-			const images = candidate.images.map(imageRef);
-			if (images.some((image) => image === void 0)) return void 0;
+			if (candidate.schemaVersion === void 0) {
+				const previews = candidate.images.map(imageRef);
+				if (previews.some((image) => image === void 0)) return void 0;
+				return {
+					kind: IMAGE_PRESENTATION_KIND,
+					schemaVersion: 1,
+					prompt: candidate.prompt,
+					images: previews.map((preview) => ({ preview }))
+				};
+			}
+			if (candidate.schemaVersion !== 1) return void 0;
+			const images = [];
+			for (const value of candidate.images) {
+				if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+				const entry = value;
+				const preview = imageRef(entry.preview);
+				const original = decodeOpenAICodexOriginalImageRef(entry.original);
+				if (preview === void 0 || original === void 0) return void 0;
+				images.push({
+					preview,
+					original
+				});
+			}
 			return {
 				kind: IMAGE_PRESENTATION_KIND,
+				schemaVersion: 1,
 				prompt: candidate.prompt,
 				images
 			};
@@ -3508,7 +3857,19 @@ window.__ModuleLoader__.load({
 				children: t("actionFailed")
 			}) : null;
 		}
-		function DownloadButton({ image, label, load, t }) {
+		function triggerDownload(url, name) {
+			const anchor = document.createElement("a");
+			anchor.href = url;
+			anchor.download = name;
+			anchor.rel = "noopener";
+			document.body.append(anchor);
+			try {
+				anchor.click();
+			} finally {
+				anchor.remove();
+			}
+		}
+		function DownloadButton({ label, onDownload, t }) {
 			const [state, setState] = (0, react.useState)("idle");
 			const alive = (0, react.useRef)(true);
 			(0, react.useEffect)(() => () => {
@@ -3518,17 +3879,7 @@ window.__ModuleLoader__.load({
 				if (state === "pending") return;
 				setState("pending");
 				try {
-					const url = await load(image);
-					const anchor = document.createElement("a");
-					anchor.href = url;
-					anchor.download = image.name ?? t("image");
-					anchor.rel = "noopener";
-					document.body.append(anchor);
-					try {
-						anchor.click();
-					} finally {
-						anchor.remove();
-					}
+					await onDownload();
 					if (alive.current) setState("idle");
 				} catch {
 					if (alive.current) setState("failed");
@@ -3552,6 +3903,22 @@ window.__ModuleLoader__.load({
 				children: status
 			})] });
 		}
+		async function downloadOriginal(sessionId, original) {
+			const response = await fetch(openAICodexOriginalImageUrl(sessionId, original.assetId), {
+				method: "GET",
+				headers: { accept: original.mediaType },
+				credentials: "same-origin"
+			});
+			if (!response.ok) throw new Error("Original image download failed");
+			const blob = await response.blob();
+			if (blob.size !== original.bytes) throw new Error("Original image download was incomplete");
+			const url = URL.createObjectURL(blob);
+			try {
+				triggerDownload(url, original.name);
+			} finally {
+				URL.revokeObjectURL(url);
+			}
+		}
 		function PromptPanel({ prompt, t }) {
 			const [copyState, setCopyState] = (0, react.useState)("idle");
 			const [hovered, setHovered] = (0, react.useState)(false);
@@ -3868,7 +4235,7 @@ window.__ModuleLoader__.load({
 					style: header,
 					children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("completed") })
 				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CodexImageGallery, {
-					images: decoded.images.map((attachment) => ({ attachment })),
+					images: decoded.images.map((image) => ({ attachment: image.preview })),
 					load,
 					align: "start",
 					labels: galleryLabels
@@ -3913,12 +4280,21 @@ window.__ModuleLoader__.load({
 							flexWrap: "wrap",
 							gap: 8
 						},
-						children: decoded.images.map((image, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(DownloadButton, {
-							image,
-							load,
-							t,
-							label: decoded.images.length === 1 ? t("download") : t("downloadNamed", { name: image.name ?? String(index + 1) })
-						}, image.attachmentId))
+						children: decoded.images.flatMap((image, index) => {
+							const suffix = image.preview.name ?? String(index + 1);
+							const exactOriginal = image.original;
+							return [...exactOriginal === void 0 ? [] : [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(DownloadButton, {
+								onDownload: () => downloadOriginal(sessionId, exactOriginal),
+								t,
+								label: decoded.images.length === 1 ? t("downloadOriginal") : t("downloadOriginalNamed", { name: exactOriginal.name })
+							}, `${image.preview.attachmentId}:original`)], /* @__PURE__ */ (0, react_jsx_runtime.jsx)(DownloadButton, {
+								onDownload: async () => {
+									triggerDownload(await load(image.preview), image.preview.name ?? t("image"));
+								},
+								t,
+								label: image.original === void 0 ? decoded.images.length === 1 ? t("download") : t("downloadNamed", { name: suffix }) : decoded.images.length === 1 ? t("downloadPreview") : t("downloadPreviewNamed", { name: suffix })
+							}, `${image.preview.attachmentId}:preview`)];
+						})
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("summary", {
 						style: {
@@ -3934,20 +4310,37 @@ window.__ModuleLoader__.load({
 							gap: 4,
 							marginTop: 6
 						},
-						children: decoded.images.map((image, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("imageDetail", {
-							name: image.name ?? String(index + 1),
-							format: formatMediaType(image.mediaType),
-							width: image.width,
-							height: image.height,
-							size: formatBytes(image.bytes)
-						}) }, image.attachmentId))
+						children: decoded.images.flatMap((image, index) => {
+							const preview = image.preview;
+							const original = image.original;
+							const name = preview.name ?? String(index + 1);
+							if (original === void 0) return [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("imageDetail", {
+								name,
+								format: formatMediaType(preview.mediaType),
+								width: preview.width,
+								height: preview.height,
+								size: formatBytes(preview.bytes)
+							}) }, preview.attachmentId)];
+							return [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("originalImageDetail", {
+								name: original.name,
+								format: formatMediaType(original.mediaType),
+								width: original.width,
+								height: original.height,
+								size: formatBytes(original.bytes)
+							}) }, `${preview.attachmentId}:original`), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("previewImageDetail", {
+								format: formatMediaType(preview.mediaType),
+								width: preview.width,
+								height: preview.height,
+								size: formatBytes(preview.bytes)
+							}) }, `${preview.attachmentId}:preview`)];
+						})
 					})] })
 				] })
 			});
 		}
 		//#endregion
 		//#region src/version.ts
-		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.19";
+		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.21";
 		//#endregion
 		//#region src/client/index.tsx
 		/** Stable browser-plugin name. */