dsh-codex-subscription 0.2.8 → 0.3.1

package/AGENTS.md

@@ -6,7 +6,7 @@ Use this guide when a user asks an Agent to install, update, verify, or remove
 ## Safety
 
 - Confirm the target DSH profile; use `web` only when it is the user's target.
-- Use the pinned `v0.2.8` release assets for a first install, never a moving branch.
+- Use the pinned `v0.3.1` release assets for a first install, never a moving branch.
 - Never print OAuth credentials, account IDs, authorization callbacks, or the
   credential store.
 - Do not start, stop, or restart DSH without explicit permission.
@@ -51,7 +51,7 @@ the user which installation is the target.
 Download the fixed release asset to a visible file, then invoke the requested action:
 
 ```powershell
-curl.exe -fL https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex.ps1 -o "$env:TEMP\dsh-codex.ps1"
+curl.exe -fL https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.3.1/dsh-codex.ps1 -o "$env:TEMP\dsh-codex.ps1"
 powershell.exe -NoProfile -ExecutionPolicy Bypass -File "$env:TEMP\dsh-codex.ps1" Install
 ```
 
@@ -59,7 +59,7 @@ If `curl.exe` is unavailable, download the same pinned asset without executing
 remote text in memory:
 
 ```powershell
-Invoke-WebRequest -UseBasicParsing -Uri 'https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex.ps1' -OutFile "$env:TEMP\dsh-codex.ps1"
+Invoke-WebRequest -UseBasicParsing -Uri 'https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.3.1/dsh-codex.ps1' -OutFile "$env:TEMP\dsh-codex.ps1"
 powershell.exe -NoProfile -ExecutionPolicy Bypass -File "$env:TEMP\dsh-codex.ps1" Install
 ```
 
@@ -89,17 +89,18 @@ profile and saved login.
 
 ## Existing DSH CLI
 
-When `dsh`, Node.js, and pnpm are already available, install the fixed package
-asset directly:
+When `dsh`, Node.js, and pnpm are already available, install the pinned npm
+package directly:
 
 ```sh
-dsh plugin --profile web add https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex-subscription.tgz
+dsh plugin --profile web add dsh-codex-subscription@0.3.1
 ```
 
-Update by running the same `add` command again. When migrating from v0.2.1 by
-hand, remove `@wsl043/dsh-codex-subscription` only after the new package passes
-verification. The Windows manager performs this migration automatically and
-preserves the stored login. Uninstall the current package with:
+Update with `dsh plugin --profile web update dsh-codex-subscription`. When
+migrating from v0.2.1 by hand, remove `@wsl043/dsh-codex-subscription` only
+after the new package passes verification. The Windows manager performs this
+migration automatically and preserves the stored login. Uninstall the current
+package with:
 
 ```sh
 dsh plugin --profile web remove dsh-codex-subscription
@@ -127,8 +128,9 @@ If the user authorizes a live check, restart DSH manually, open
 **Settings -> Codex**, and verify the page loads. Confirm that Web
 search offers both **DSH default** and **Codex subscription**, and that the Beta
 composer quota switch starts off. Weekly-only usage is valid; Spark remains a
-separate bucket. Do not run a quota-consuming model turn unless the user
-explicitly asks.
+separate bucket. Confirm that `codex_image_generate` is available. Only when the
+user explicitly requests a quota-consuming live check, ask the Agent to generate
+one simple image and confirm that it appears in the conversation.
 
 ## Failure handling
 

package/README.en.md

@@ -1,6 +1,7 @@
 # DSH Codex Subscription
 
 [![CI](https://github.com/WSL043/dsh-codex-subscription/actions/workflows/ci.yml/badge.svg)](https://github.com/WSL043/dsh-codex-subscription/actions/workflows/ci.yml)
+[![npm version](https://img.shields.io/npm/v/dsh-codex-subscription?logo=npm&label=npm)](https://www.npmjs.com/package/dsh-codex-subscription)
 [![License: MIT](https://img.shields.io/badge/license-MIT-111111.svg)](LICENSE)
 [![GitHub stars](https://img.shields.io/github/stars/WSL043/dsh-codex-subscription?style=flat&logo=github&label=stars)](https://github.com/WSL043/dsh-codex-subscription/stargazers)
 
@@ -8,7 +9,7 @@
 
 Sign in to ChatGPT and use a Codex subscription directly in DeepSeek Harness.
 No OpenAI API key or Codex CLI installation is required. DSH conversations,
-tools, permissions, search choice, and quota stay in one place.
+tools, permissions, image generation, search choice, and quota stay in one place.
 
 [Agent install](#let-an-agent-install-it-recommended) · [Windows install](#manual-windows-install) · [Update or uninstall](#update-and-uninstall)
 
@@ -23,6 +24,7 @@ If this helps, open the [GitHub repository](https://github.com/WSL043/dsh-codex-
 
 - Uses your ChatGPT / Codex subscription directly inside DSH, with no OpenAI API key or Codex CLI required;
 - Signs in to ChatGPT from Settings and keeps credentials on the host;
+- Supports Codex image generation and shows the result directly in the DSH conversation;
 - Switches between DSH's default search and Codex subscription search;
 - Shows the quota, reset time, and freshness actually returned by the backend;
 - Can show the selected Codex model's remaining quota before the model name (Beta, off by default);
@@ -79,7 +81,7 @@ once and install again. Restart DSH manually after installation.
 <summary>macOS, Linux, or an existing <code>dsh</code> command</summary>
 
 ```sh
-dsh plugin --profile web add https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex-subscription.tgz
+dsh plugin --profile web add dsh-codex-subscription
 dsh plugin --profile web list dsh-codex-subscription --depth 0
 dsh --profile web --dump-config
 ```
@@ -96,6 +98,8 @@ contain one `codex-subscription` entry.
 3. Choose DSH default search or Codex subscription search.
 4. Choose a Codex model from the model selector.
 
+Describe the image you want. The Agent can generate it through Codex and show the result in the conversation.
+
 Codex subscription search reuses the same ChatGPT sign-in and does not need an
 OpenAI API key. Changing the search source does not change the conversation
 model, and a failed source never silently falls back to another paid service.
@@ -136,7 +140,7 @@ the two Windows first-install commands above once.
 Update and verify:
 
 ```sh
-dsh plugin --profile web add https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex-subscription.tgz
+dsh plugin --profile web update dsh-codex-subscription
 dsh plugin --profile web list dsh-codex-subscription --depth 0
 dsh --profile web --dump-config
 ```

package/README.md

@@ -1,13 +1,14 @@
 # DSH Codex Subscription
 
 [![CI](https://github.com/WSL043/dsh-codex-subscription/actions/workflows/ci.yml/badge.svg)](https://github.com/WSL043/dsh-codex-subscription/actions/workflows/ci.yml)
+[![npm version](https://img.shields.io/npm/v/dsh-codex-subscription?logo=npm&label=npm)](https://www.npmjs.com/package/dsh-codex-subscription)
 [![License: MIT](https://img.shields.io/badge/license-MIT-111111.svg)](LICENSE)
 [![GitHub stars](https://img.shields.io/github/stars/WSL043/dsh-codex-subscription?style=flat&logo=github&label=stars)](https://github.com/WSL043/dsh-codex-subscription/stargazers)
 
 [English](README.en.md)
 
 在 DeepSeek Harness 中直接登录 ChatGPT 并使用 Codex 订阅，不需要 OpenAI API Key，
-也不依赖 Codex CLI。保留 DSH 原有的会话、工具和权限，还能切换联网搜索来源并查看额度。
+也不依赖 Codex CLI。保留 DSH 原有的会话、工具和权限，还能生成图片、切换联网搜索来源并查看额度。
 
 [交给 Agent 安装](#交给-agent推荐) · [Windows 手动安装](#windows-手动安装) · [更新与卸载](#更新与卸载)
 
@@ -21,6 +22,7 @@
 
 - 在 DSH 中直接使用 ChatGPT / Codex 订阅，不需要 OpenAI API Key 或 Codex CLI；
 - 在设置页登录 ChatGPT，凭据保留在本机；
+- 支持 Codex 图片生成，结果直接显示在 DSH 会话中；
 - 可在 DSH 默认搜索与 Codex 订阅搜索之间切换；
 - 展示服务端实际返回的额度、重置时间和更新时间；
 - 可在模型名称左侧显示当前 Codex 模型的剩余额度（Beta，默认关闭）；
@@ -70,7 +72,7 @@ powershell.exe -NoProfile -ExecutionPolicy Bypass -File "$env:TEMP\dsh-codex.ps1
 <summary>macOS、Linux，或已有 <code>dsh</code> 命令</summary>
 
 ```sh
-dsh plugin --profile web add https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex-subscription.tgz
+dsh plugin --profile web add dsh-codex-subscription
 dsh plugin --profile web list dsh-codex-subscription --depth 0
 dsh --profile web --dump-config
 ```
@@ -87,6 +89,8 @@ dsh --profile web --dump-config
 3. 选择使用 DSH 默认搜索，或使用 Codex 订阅搜索；
 4. 在模型选择器中选择 Codex 模型。
 
+需要图片时直接描述想要的画面，Agent 会调用 Codex 图片生成并在会话中显示结果。
+
 Codex 订阅搜索复用同一份 ChatGPT 登录，不需要 OpenAI API Key。切换搜索来源不会改变
 当前对话模型，也不会在失败时自动改走另一个付费服务。升级后默认保留 DSH 原有搜索，
 需要使用 Codex 订阅搜索时再主动切换。
@@ -124,7 +128,7 @@ Windows 首次安装命令即可。
 更新并检查：
 
 ```sh
-dsh plugin --profile web add https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex-subscription.tgz
+dsh plugin --profile web update dsh-codex-subscription
 dsh plugin --profile web list dsh-codex-subscription --depth 0
 dsh --profile web --dump-config
 ```

package/dsh-codex.ps1

@@ -32,8 +32,8 @@ if ($Managed -and -not $PSBoundParameters.ContainsKey('Action')) {
 
 $PackageName = 'dsh-codex-subscription'
 $LegacyPackageName = '@wsl043/dsh-codex-subscription'
-$PackageVersion = '0.2.8'
-$PackageSpec = 'https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex-subscription.tgz'
+$PackageVersion = '0.3.1'
+$PackageSpec = 'https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.3.1/dsh-codex-subscription.tgz'
 $PnpmVersion = '11.19.0'
 $PnpmUrl = 'https://registry.npmjs.org/pnpm/-/pnpm-11.19.0.tgz'
 $PnpmSha512 = '7881F3ED590D472C4A955E2B88B2121791116066DCC88CBCA3849EC9B60F1BBAA6D2CCB221FA91DA4E1C65BEF2BCBE379365AEA7AC539C7BF86DEDC3A1B22DCE'
@@ -71,8 +71,12 @@ function Invoke-LatestManager {
     param([Parameter(Mandatory = $true)][string] $InstalledCommandRoot)
 
     Write-Host 'Checking the latest immutable release...'
-    $releaseResponse = Invoke-WebRequest -UseBasicParsing -Uri $ReleaseApi -Headers @{
+    $releaseSeparator = if ($ReleaseApi.Contains('?')) { '&' } else { '?' }
+    $releaseUri = $ReleaseApi + $releaseSeparator + 'cache_bust=' + [DateTime]::UtcNow.Ticks
+    $releaseResponse = Invoke-WebRequest -UseBasicParsing -Uri $releaseUri -Headers @{
         Accept = 'application/vnd.github+json'
+        'Cache-Control' = 'no-cache'
+        Pragma = 'no-cache'
         'User-Agent' = 'dsh-codex'
     }
     try {
@@ -599,7 +603,7 @@ function Invoke-DshCommand {
     if ($LASTEXITCODE -ne 0) { throw "dsh failed with exit code $LASTEXITCODE." }
 }
 
-function Get-InstalledPackageNames {
+function Get-InstalledPackages {
     param([Parameter(Mandatory = $true)] $Target)
 
     $json = Invoke-DshCommand -Target $Target -Arguments @(
@@ -618,7 +622,17 @@ function Get-InstalledPackageNames {
         $dependenciesProperty = $project.PSObject.Properties['dependencies']
         if ($null -eq $dependenciesProperty -or $null -eq $dependenciesProperty.Value) { continue }
         foreach ($property in $dependenciesProperty.Value.PSObject.Properties) {
-            Write-Output ([string] $property.Name)
+            $version = $null
+            if ($null -ne $property.Value) {
+                $versionProperty = $property.Value.PSObject.Properties['version']
+                if ($null -ne $versionProperty -and $null -ne $versionProperty.Value) {
+                    $version = [string] $versionProperty.Value
+                }
+            }
+            Write-Output ([pscustomobject]@{
+                Name = [string] $property.Name
+                Version = $version
+            })
         }
     }
 }
@@ -686,9 +700,10 @@ try {
         $env:npm_config_store_dir = $pnpmStore
     }
 
-    $installedBefore = @(Get-InstalledPackageNames -Target $target)
-    $hadPackage = $installedBefore -contains $PackageName
-    $hadLegacyPackage = $installedBefore -contains $LegacyPackageName
+    $installedBefore = @(Get-InstalledPackages -Target $target)
+    $installedBeforeNames = @($installedBefore | ForEach-Object { $_.Name })
+    $hadPackage = $installedBeforeNames -contains $PackageName
+    $hadLegacyPackage = $installedBeforeNames -contains $LegacyPackageName
 
     if ($Action -eq 'Uninstall') {
         if ($hadPackage) {
@@ -726,9 +741,10 @@ try {
     $config = Invoke-DshCommand -Target $target -Arguments @('--profile', $Profile, '--dump-config') -Capture
     $entryCount = ([regex]::Matches($config, '(?<![A-Za-z0-9_-])codex-subscription(?![A-Za-z0-9_-])')).Count
     $legacyEntryCount = ([regex]::Matches($config, '(?<![A-Za-z0-9_-])wsl043-codex-subscription(?![A-Za-z0-9_-])')).Count
-    $installedAfter = @(Get-InstalledPackageNames -Target $target)
+    $installedAfter = @(Get-InstalledPackages -Target $target)
+    $installedAfterNames = @($installedAfter | ForEach-Object { $_.Name })
     if ($Action -eq 'Uninstall') {
-        if (($installedAfter -contains $PackageName) -or ($installedAfter -contains $LegacyPackageName)) {
+        if (($installedAfterNames -contains $PackageName) -or ($installedAfterNames -contains $LegacyPackageName)) {
             throw 'The plugin package is still present after uninstall.'
         }
         if ($entryCount -ne 0 -or $legacyEntryCount -ne 0) {
@@ -737,8 +753,13 @@ try {
         Remove-ManagerCommand -Directory $managerCommandRoot
         Write-Host 'Uninstalled. The DSH profile and saved credentials were kept.'
     } else {
-        if (-not ($installedAfter -contains $PackageName)) { throw 'The installed package did not appear in the DSH plugin list.' }
-        if ($installedAfter -contains $LegacyPackageName) { throw 'The legacy package is still present after migration.' }
+        $installedPackage = @($installedAfter | Where-Object { $_.Name -eq $PackageName } | Select-Object -First 1)
+        if ($installedPackage.Count -eq 0) { throw 'The installed package did not appear in the DSH plugin list.' }
+        if ($installedPackage[0].Version -ne $PackageVersion) {
+            $foundVersion = if ($installedPackage[0].Version) { $installedPackage[0].Version } else { 'unknown' }
+            throw "DSH did not install the requested package version: expected $PackageVersion, found $foundVersion."
+        }
+        if ($installedAfterNames -contains $LegacyPackageName) { throw 'The legacy package is still present after migration.' }
         if ($entryCount -ne 1) { throw "Expected one plugin profile entry, found $entryCount." }
         if ($legacyEntryCount -ne 0) { throw 'The legacy plugin profile entry is still present after migration.' }
         Install-ManagerCommand -Directory $managerCommandRoot

package/lib/client.js

@@ -6,6 +6,7 @@ window.__ModuleLoader__.load({
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 		let react = require("react");
 		let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
+		let _deepseek_ai_dsh_client_ui_attachment = require("@deepseek-ai/dsh-client-ui-attachment");
 		let react_jsx_runtime = require("react/jsx-runtime");
 		//#region src/settings-contract.js
 		const QUICK_QUOTA_FIELD = "quickQuotaVisible";
@@ -36,7 +37,8 @@ window.__ModuleLoader__.load({
 			"slots",
 			"locale",
 			"connection",
-			"modelDirectories"
+			"modelDirectories",
+			"conversation"
 		];
 		const NS = "settings.codexSubscription";
 		const CHANNEL = "/codex-subscription";
@@ -94,7 +96,18 @@ window.__ModuleLoader__.load({
 			unavailable: "暂无数据",
 			quickQuotaSetting: "输入框额度",
 			quickQuotaBeta: "Beta",
-			quickQuotaStatus: "Codex 剩余额度 {value}%"
+			quickQuotaStatus: "Codex 剩余额度 {value}%",
+			imageGenerate: "生成图片",
+			imageGenerating: "正在生成…",
+			imageGenerated: "已生成",
+			imageFailed: "生成失败",
+			imageLabel: "生成的图片",
+			imageOpen: "查看原图",
+			imageOpenNamed: "查看 {value}",
+			imageLoading: "正在加载图片…",
+			imageLoadFailed: "图片加载失败，点击重试",
+			imagePreview: "图片预览",
+			imageClosePreview: "关闭预览"
 		};
 		const en = {
 			nav: "Codex",
@@ -148,7 +161,18 @@ window.__ModuleLoader__.load({
 			unavailable: "No data yet",
 			quickQuotaSetting: "Composer quota",
 			quickQuotaBeta: "Beta",
-			quickQuotaStatus: "Codex quota: {value}% remaining"
+			quickQuotaStatus: "Codex quota: {value}% remaining",
+			imageGenerate: "Generate image",
+			imageGenerating: "Generating…",
+			imageGenerated: "Generated",
+			imageFailed: "Generation failed",
+			imageLabel: "Generated image",
+			imageOpen: "View original",
+			imageOpenNamed: "View {value}",
+			imageLoading: "Loading image…",
+			imageLoadFailed: "Image failed to load. Click to retry",
+			imagePreview: "Image preview",
+			imageClosePreview: "Close preview"
 		};
 		const STYLE = `
 .codexSubscription{display:flex;flex-direction:column;gap:10px;max-width:720px;color:var(--dsw-alias-label-primary);container-type:inline-size}
@@ -176,6 +200,7 @@ window.__ModuleLoader__.load({
 .codexSubscriptionCreditBalance{display:flex;flex-direction:column;gap:6px}.codexSubscriptionCreditBalance span,.codexSubscriptionCreditLabel{font-size:12px;line-height:18px;color:var(--dsw-alias-label-secondary)}.codexSubscriptionCreditBalance strong{font:600 18px/24px ui-monospace,SFMono-Regular,Consolas,monospace;font-variant-numeric:tabular-nums;overflow-wrap:anywhere}
 .codexSubscriptionSpendLimit{display:flex;flex-direction:column;gap:8px}.codexSubscriptionSpendTop{display:flex;align-items:baseline;justify-content:space-between;gap:12px}.codexSubscriptionSpendTop strong{font:600 16px/22px ui-monospace,SFMono-Regular,Consolas,monospace;font-variant-numeric:tabular-nums}.codexSubscriptionSpendLimit progress{width:100%;height:6px;border:0;border-radius:999px;overflow:hidden;background:var(--dsw-alias-border-l3);accent-color:var(--dsw-alias-brand-primary,#3964fe);-webkit-appearance:none;appearance:none}.codexSubscriptionSpendLimit progress::-webkit-progress-bar{background:var(--dsw-alias-border-l3);border-radius:999px}.codexSubscriptionSpendLimit progress::-webkit-progress-value{background:var(--dsw-alias-brand-primary,#3964fe);border-radius:999px}.codexSubscriptionSpendLimit progress::-moz-progress-bar{background:var(--dsw-alias-brand-primary,#3964fe);border-radius:999px}
 .codexComposerQuota{display:inline-flex;align-items:center;flex:0 0 auto;height:28px;box-sizing:border-box;margin-right:-4px;padding:0;color:var(--dsw-alias-label-secondary);font-family:inherit;font-size:12px;line-height:20px;font-weight:500;font-variant-numeric:tabular-nums;white-space:nowrap;user-select:none}
+.codexImageTool{display:flex;flex-direction:column;gap:8px;margin:4px 0;color:var(--dsw-alias-label-primary)}.codexImageToolRow{display:flex;align-items:center;min-height:24px;gap:8px;font-size:13px;line-height:20px}.codexImageToolIcon{display:inline-flex;align-items:center;justify-content:center;width:16px;height:16px;color:var(--dsw-alias-label-secondary)}.codexImageToolIcon::before{content:'';width:8px;height:8px;border:1.5px solid currentColor;border-radius:3px}.codexImageTool[data-state=running] .codexImageToolIcon::before{border-radius:50%;border-right-color:transparent;animation:codexImageSpin 800ms linear infinite}.codexImageTool[data-state=error] .codexImageToolIcon::before{border-color:var(--dsw-alias-state-error-primary);background:var(--dsw-alias-state-error-primary)}.codexImageToolTitle{font-weight:500}.codexImageToolState{color:var(--dsw-alias-label-tertiary)}.codexImageToolError{margin:0 0 0 24px;font-size:12px;line-height:18px;color:var(--dsw-alias-state-error-primary)}.codexImageToolGallery{margin-left:24px}@keyframes codexImageSpin{to{transform:rotate(360deg)}}
 @container (max-width:560px){.codexSubscriptionCreditRows{grid-template-columns:1fr}}
 @container (max-width:480px){.codexSubscriptionAccountRow,.codexSubscriptionSectionHead{align-items:flex-start;flex-direction:column}.codexSubscriptionActions{width:100%}.codexSubscriptionSearchChoices{grid-template-columns:1fr}}
 @media(max-width:640px){.codexSubscriptionCard{padding:14px}}
@@ -200,6 +225,61 @@ window.__ModuleLoader__.load({
 			const date = new Date(value);
 			return Number.isFinite(date.getTime()) ? date : void 0;
 		};
+		const imageGalleryLabels = (t) => ({
+			image: t("imageLabel"),
+			open: t("imageOpen"),
+			openNamed: (value) => fill(t("imageOpenNamed"), { value }),
+			loading: t("imageLoading"),
+			loadFailed: t("imageLoadFailed"),
+			lightbox: {
+				dialog: t("imagePreview"),
+				close: t("imageClosePreview")
+			}
+		});
+		function CodexImageToolRow({ block, loadImage, t }) {
+			const settled = block?.kind === "tool-result";
+			const image = settled ? block.content.find((item) => item?.type === "image" && item.attachment !== void 0) : void 0;
+			const failed = settled && block.isError === true;
+			const state = !settled ? "running" : failed ? "error" : "done";
+			const status = !settled ? t("imageGenerating") : failed ? t("imageFailed") : t("imageGenerated");
+			const error = failed ? block.content.find((item) => item?.type === "text" && typeof item.text === "string")?.text : void 0;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "codexImageTool",
+				"data-state": state,
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "codexImageToolRow",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "codexImageToolIcon",
+								"aria-hidden": "true"
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "codexImageToolTitle",
+								children: t("imageGenerate")
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "codexImageToolState",
+								children: status
+							})
+						]
+					}),
+					image === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "codexImageToolGallery",
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_attachment.ImageGallery, {
+							images: [{ attachment: image.attachment }],
+							load: loadImage,
+							align: "start",
+							labels: imageGalleryLabels(t)
+						})
+					}),
+					error === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "codexImageToolError",
+						children: error
+					})
+				]
+			});
+		}
 		function createPreferenceController(rpc) {
 			let snapshot = Object.freeze({
 				status: "loading",
@@ -854,6 +934,16 @@ window.__ModuleLoader__.load({
 					directory: ctx.modelDirectories.directoryFor(sessionId).store
 				})
 			}, CodexComposerQuota));
+			const conversation = ctx.get("conversation");
+			ctx.slots.inject("tool.call.toolview", () => ctx.slots.register({
+				name: "tool.call.toolview",
+				key: "codex_image_generate",
+				locale: NS,
+				inject: (sessionId) => ({
+					t,
+					loadImage: (attachment) => conversation.resolveImage(sessionId, attachment)
+				})
+			}, CodexImageToolRow));
 		}
 		//#endregion
 		exports.apply = apply;

package/lib/index.js

@@ -1,5 +1,5 @@
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
-import { LlmError } from "@deepseek-ai/dsh-llm";
+import { LlmError, createUserMessage } from "@deepseek-ai/dsh-llm";
 import { PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
 import { settingsNamespace } from "@deepseek-ai/dsh-settings";
 import z from "@deepseek-ai/schemastery";
@@ -8,6 +8,7 @@ import { openaiCodexProvider as createOpenAICodexProvider } from "@earendil-work
 import { createModels } from "@earendil-works/pi-ai";
 import { randomUUID } from "node:crypto";
 import { WebError } from "@deepseek-ai/dsh-web";
+import { defineTool } from "@deepseek-ai/dsh-tools";
 //#region src/credential-store.js
 const PROVIDER$1 = "openai-codex";
 const abortIfNeeded = (options) => options?.signal?.throwIfAborted();
@@ -466,10 +467,10 @@ const CODEX_SEARCH_URL = "https://chatgpt.com/backend-api/codex/alpha/search";
 const DEFAULT_MODEL = "gpt-5.6-luna";
 const MAX_OUTPUT_TOKENS = 4096;
 const MAX_SOURCE_DATE = 64;
-const record$1 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-const nonEmpty = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
+const record$2 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+const nonEmpty$1 = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
 const displayText = (value) => {
-	const text = nonEmpty(value)?.replace(/\s+/gu, " ").trim();
+	const text = nonEmpty$1(value)?.replace(/\s+/gu, " ").trim();
 	if (text === void 0 || text.length === 0) return void 0;
 	return text;
 };
@@ -479,8 +480,8 @@ const boundedDisplayText = (value, maximum) => {
 	return `${text.slice(0, maximum - 1)}…`;
 };
 function sourceOf(value) {
-	if (!record$1(value)) return void 0;
-	const url = nonEmpty(value.url);
+	if (!record$2(value)) return void 0;
+	const url = nonEmpty$1(value.url);
 	if (url === void 0) return void 0;
 	let parsed;
 	try {
@@ -500,7 +501,7 @@ function sourceOf(value) {
 	};
 }
 function parseSearchResponse(value) {
-	if (!record$1(value) || !Array.isArray(value.results)) throw new Error("Codex returned a malformed search response");
+	if (!record$2(value) || !Array.isArray(value.results)) throw new Error("Codex returned a malformed search response");
 	const seen = /* @__PURE__ */ new Set();
 	const sources = [];
 	for (const result of value.results ?? []) {
@@ -526,8 +527,8 @@ function createCodexSearchProvider(options) {
 			const access = auth?.auth?.apiKey;
 			const accountId = credential?.type === "oauth" ? credential.accountId : void 0;
 			if (typeof access !== "string" || access.length === 0 || typeof accountId !== "string" || accountId.length === 0) throw new WebError("ChatGPT subscription is not signed in", "WEB_PROVIDER_CREDENTIAL_MISSING");
-			const model = nonEmpty(options.resolveModel?.()) ?? DEFAULT_MODEL;
-			const id = nonEmpty(options.resolveSessionId?.()) ?? randomUUID();
+			const model = nonEmpty$1(options.resolveModel?.()) ?? DEFAULT_MODEL;
+			const id = nonEmpty$1(options.resolveSessionId?.()) ?? randomUUID();
 			let response;
 			try {
 				response = await fetchSearch(CODEX_SEARCH_URL, {
@@ -539,7 +540,7 @@ function createCodexSearchProvider(options) {
 						accept: "application/json",
 						"content-type": "application/json",
 						originator: "pi",
-						"user-agent": "dsh-codex-subscription/0.2.8"
+						"user-agent": "dsh-codex-subscription/0.3.1"
 					},
 					body: JSON.stringify({
 						id,
@@ -577,6 +578,215 @@ function createCodexSearchProvider(options) {
 	});
 }
 //#endregion
+//#region src/codex-images.js
+const CODEX_IMAGE_TOOL_NAME = "codex_image_generate";
+const CODEX_IMAGE_GENERATION_URL = "https://chatgpt.com/backend-api/codex/images/generations";
+const IMAGE_MODEL = "gpt-image-2";
+const RESPONSE_ENVELOPE_BYTES = 1024 * 1024;
+const PNG_SIGNATURE = Buffer.from([
+	137,
+	80,
+	78,
+	71,
+	13,
+	10,
+	26,
+	10
+]);
+const record$1 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+const nonEmpty = (value) => typeof value === "string" && value.trim().length > 0 ? value.trim() : void 0;
+function encodedLimit(decodedBytes) {
+	return Math.ceil(decodedBytes / 3) * 4;
+}
+async function readJsonWithin(response, maximumBytes) {
+	const contentLength = Number(response.headers.get("content-length"));
+	if (Number.isFinite(contentLength) && contentLength > maximumBytes) throw new Error("Codex image response exceeds the image size limit");
+	if (response.body === null) throw new Error("Codex returned an unreadable image response");
+	const reader = response.body.getReader();
+	const chunks = [];
+	let bytes = 0;
+	while (true) {
+		const { done, value } = await reader.read();
+		if (done) break;
+		bytes += value.byteLength;
+		if (bytes > maximumBytes) {
+			await reader.cancel();
+			throw new Error("Codex image response exceeds the image size limit");
+		}
+		chunks.push(value);
+	}
+	const body = Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)), bytes).toString("utf8");
+	try {
+		return JSON.parse(body);
+	} catch {
+		throw new Error("Codex returned an unreadable image response");
+	}
+}
+/** Strictly decode one PNG returned by the subscription backend. */
+function decodeCodexPng(value, maximumBytes) {
+	const encoded = nonEmpty(value);
+	if (encoded === void 0 || encoded.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u.test(encoded)) throw new Error("Codex returned an invalid base64 PNG");
+	const padding = encoded.endsWith("==") ? 2 : encoded.endsWith("=") ? 1 : 0;
+	const decodedBytes = encoded.length / 4 * 3 - padding;
+	if (decodedBytes > maximumBytes) throw new Error("Codex image exceeds the image size limit");
+	const data = Buffer.from(encoded, "base64");
+	if (data.length !== decodedBytes || data.length < PNG_SIGNATURE.length || !data.subarray(0, PNG_SIGNATURE.length).equals(PNG_SIGNATURE)) throw new Error("Codex returned an invalid PNG");
+	return new Uint8Array(data);
+}
+function imageReference(value) {
+	return {
+		attachmentId: value.attachmentId,
+		mediaType: value.mediaType,
+		bytes: value.bytes,
+		width: value.width,
+		height: value.height,
+		...value.name === void 0 ? {} : { name: value.name }
+	};
+}
+function imageContent(value) {
+	return [{
+		type: "text",
+		text: typeof value.size === "string" && value.size.length > 0 ? `Generated a ${value.size} image.` : "Generated an image."
+	}, {
+		type: "image",
+		attachment: imageReference(value.image)
+	}];
+}
+function imageOutputSchema() {
+	return {
+		type: "object",
+		additionalProperties: false,
+		properties: {
+			image: {
+				type: "object",
+				required: true,
+				additionalProperties: false,
+				properties: {
+					attachmentId: {
+						type: "string",
+						required: true
+					},
+					mediaType: {
+						type: "string",
+						enum: ["image/png"],
+						required: true
+					},
+					bytes: {
+						type: "integer",
+						required: true
+					},
+					width: {
+						type: "integer",
+						required: true
+					},
+					height: {
+						type: "integer",
+						required: true
+					},
+					name: { type: "string" }
+				}
+			},
+			background: { type: "string" },
+			quality: { type: "string" },
+			size: { type: "string" }
+		}
+	};
+}
+function responseMetadata(value) {
+	const data = Array.isArray(value?.data) ? value.data[0] : void 0;
+	const encoded = record$1(data) ? data.b64_json : void 0;
+	if (typeof encoded !== "string") throw new Error("Codex returned no image data");
+	return {
+		encoded,
+		background: nonEmpty(value.background),
+		quality: nonEmpty(value.quality),
+		size: nonEmpty(value.size)
+	};
+}
+/** Create the DSH-native image-generation tool backed only by the ChatGPT subscription. */
+function createCodexImageTool(options) {
+	const fetchImage = options.fetch ?? fetch;
+	const attachments = options.attachments;
+	return defineTool({
+		name: CODEX_IMAGE_TOOL_NAME,
+		description: "Generate an image from a detailed description using the signed-in Codex subscription. Use this whenever the user asks to create an image.",
+		parameters: { prompt: {
+			type: "string",
+			required: true,
+			description: "A complete, production-ready description of the image to generate."
+		} },
+		output: {
+			schema: imageOutputSchema(),
+			render: (_args, value) => imageContent(value)
+		},
+		timeoutMs: 300 * 1e3,
+		isConcurrencySafe: () => false,
+		async execute(args, exec) {
+			const prompt = nonEmpty(args.prompt);
+			if (prompt === void 0) throw new Error("prompt must be a non-empty string");
+			const auth = await options.getAuth({ signal: exec.signal });
+			const credential = await options.readCredential({ signal: exec.signal });
+			const access = auth?.auth?.apiKey;
+			const accountId = credential?.type === "oauth" ? credential.accountId : void 0;
+			if (typeof access !== "string" || access.length === 0 || typeof accountId !== "string" || accountId.length === 0) throw new Error("ChatGPT subscription is not signed in");
+			if (!attachments.imageLimits.mediaTypes.includes("image/png")) throw new Error("This DSH installation does not accept PNG image attachments");
+			const maximumBytes = Math.min(attachments.imageLimits.maxImageBytes, attachments.imageLimits.maxMessageImageBytes);
+			let response;
+			try {
+				response = await fetchImage(CODEX_IMAGE_GENERATION_URL, {
+					method: "POST",
+					redirect: "error",
+					headers: {
+						authorization: `Bearer ${access}`,
+						"chatgpt-account-id": accountId,
+						accept: "application/json",
+						"content-type": "application/json",
+						originator: "pi",
+						"x-codex-image-turn-id": String(exec.callId),
+						"user-agent": "dsh-codex-subscription"
+					},
+					body: JSON.stringify({
+						prompt,
+						background: "auto",
+						model: IMAGE_MODEL,
+						quality: "auto",
+						size: "auto"
+					}),
+					signal: exec.signal
+				});
+			} catch (error) {
+				if (exec.signal.aborted) throw exec.signal.reason;
+				throw new Error("Codex image generation request failed", { cause: error });
+			}
+			if (!response.ok) {
+				if (response.status === 401 || response.status === 403) throw new Error("ChatGPT sign-in needs to be renewed");
+				if (response.status === 429) throw new Error("Codex image generation quota is unavailable");
+				throw new Error(`Codex image generation failed (HTTP ${response.status})`);
+			}
+			const metadata = responseMetadata(await readJsonWithin(response, encodedLimit(maximumBytes) + RESPONSE_ENVELOPE_BYTES));
+			const data = decodeCodexPng(metadata.encoded, maximumBytes);
+			const result = {
+				image: imageReference(await attachments.saveImage({
+					data,
+					mediaType: "image/png",
+					name: "codex-generated.png"
+				})),
+				...metadata.background === void 0 ? {} : { background: metadata.background },
+				...metadata.quality === void 0 ? {} : { quality: metadata.quality },
+				...metadata.size === void 0 ? {} : { size: metadata.size }
+			};
+			if (exec.parent !== void 0) exec.deferContext(createUserMessage({
+				content: imageContent(result),
+				source: {
+					kind: "plugin",
+					plugin: "codex-subscription"
+				}
+			}));
+			return result;
+		}
+	});
+}
+//#endregion
 //#region src/settings-contract.js
 const SETTINGS_NAMESPACE = "codex-subscription";
 const QUICK_QUOTA_FIELD = "quickQuotaVisible";
@@ -719,7 +929,7 @@ function createCodexUsageReader(options) {
 				"chatgpt-account-id": accountId,
 				accept: "application/json",
 				"cache-control": "no-store",
-				"user-agent": "dsh-codex-subscription/0.2.8"
+				"user-agent": "dsh-codex-subscription/0.3.1"
 			},
 			signal: requestSignal(signal, timeoutMs)
 		});
@@ -762,7 +972,9 @@ const inject = [
 	"connection",
 	"settings",
 	"web",
-	"loader"
+	"loader",
+	"tools",
+	"attachments"
 ];
 const PROVIDER = "openai-codex";
 const CREDENTIAL_REF = credentialRef("OPENAI_CODEX_SUBSCRIPTION_OAUTH");
@@ -879,6 +1091,11 @@ function apply(ctx) {
 	});
 	const profiles = /* @__PURE__ */ new Map([[PROVIDER, profile]]);
 	const resolveAuth = () => authModels.getAuth(PROVIDER);
+	ctx.tools.register(createCodexImageTool({
+		getAuth: resolveAuth,
+		readCredential: (options) => store.read(PROVIDER, options),
+		attachments: ctx.attachments
+	}));
 	const adapter = new PiAiAdapter({
 		profiles: () => profiles,
 		resolveApiKey: async () => {
@@ -922,4 +1139,4 @@ function apply(ctx) {
 	ctx.effect(() => ctx.connection.rpc.handle(CHANNEL, handler, { authority: "loopback" }), "codex-subscription: loopback account RPC");
 }
 //#endregion
-export { CODEX_USAGE_URL, CodexLoginCoordinator, DshOAuthCredentialStore, apply, assertCodexAuthUrl, commandForCodexAuthUrl, createCodexAuthService, createCodexRpcHandler, createCodexUsageReader, createSearchProviderSwitcher, createSubscriptionRpcHandler, inject, name, openCodexAuthUrl, parseCodexUsage };
+export { CODEX_IMAGE_GENERATION_URL, CODEX_IMAGE_TOOL_NAME, CODEX_USAGE_URL, CodexLoginCoordinator, DshOAuthCredentialStore, apply, assertCodexAuthUrl, commandForCodexAuthUrl, createCodexAuthService, createCodexImageTool, createCodexRpcHandler, createCodexUsageReader, createSearchProviderSwitcher, createSubscriptionRpcHandler, decodeCodexPng, inject, name, openCodexAuthUrl, parseCodexUsage };

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "dsh-codex-subscription",
-  "version": "0.2.8",
+  "version": "0.3.1",
   "packageManager": "pnpm@11.19.0",
-  "description": "ChatGPT and Codex subscriptions for DeepSeek Harness with OAuth login, quota, and subscription web search",
+  "description": "ChatGPT and Codex subscriptions for DeepSeek Harness with OAuth login, image generation, quota, and subscription web search",
   "type": "module",
   "main": "./lib/index.js",
   "exports": {
@@ -34,7 +34,8 @@
         "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-client-ui-conversation",
         "@deepseek-ai/dsh-client-ui-model-selection",
-        "@deepseek-ai/dsh-client-ui-settings"
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-tool"
       ],
       "platform": "web"
     }
@@ -57,7 +58,8 @@
     "quota",
     "usage",
     "oauth",
-    "web-search"
+    "web-search",
+    "image-generation"
   ],
   "author": "WSL043",
   "license": "MIT",
@@ -80,15 +82,18 @@
     "@deepseek-ai/dsh-client-connection": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-locale": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-runtime": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-client-ui-attachment": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-conversation": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-model-selection": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-primitives": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-settings": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-client-ui-tool": "0.1.0-rc.6",
     "@deepseek-ai/dsh-credentials": "0.1.0-rc.6",
     "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
     "@deepseek-ai/dsh-llm-pi-ai": "0.1.0-rc.6",
     "@deepseek-ai/dsh-settings": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-tools": "0.1.0-rc.6",
     "@deepseek-ai/dsh-web": "0.1.0-rc.6",
     "@deepseek-ai/schemastery": "3.18.1",
     "@earendil-works/pi-ai": "0.82.1",
@@ -99,15 +104,18 @@
     "@deepseek-ai/dsh-client-connection": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-locale": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-runtime": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-client-ui-attachment": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-conversation": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-model-selection": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-primitives": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-settings": "0.1.0-rc.6",
     "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-client-ui-tool": "0.1.0-rc.6",
     "@deepseek-ai/dsh-credentials": "0.1.0-rc.6",
     "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
     "@deepseek-ai/dsh-llm-pi-ai": "0.1.0-rc.6",
     "@deepseek-ai/dsh-settings": "0.1.0-rc.6",
+    "@deepseek-ai/dsh-tools": "0.1.0-rc.6",
     "@deepseek-ai/dsh-web": "0.1.0-rc.6",
     "@deepseek-ai/schemastery": "3.18.1",
     "@earendil-works/pi-ai": "0.82.1",