pi-codex-image-gen 0.1.4 → 0.1.6

package/CHANGELOG.md

@@ -0,0 +1,67 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+This project follows the spirit of [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and uses semantic versioning for releases.
+
+## [Unreleased]
+
+## [0.1.6] - 2026-05-09
+
+### Changed
+
+- Switched development, CI, and publish workflows from Bun to npm with `package-lock.json` for better Pi package consistency.
+
+## [0.1.5] - 2026-05-07
+
+### Added
+
+- CI workflow running type-check and `pack:dry-run` on every push and PR.
+- `CHANGELOG.md`, `CONTRIBUTING.md`, `CODE_OF_CONDUCT.md`, `SECURITY.md`.
+- GitHub PR template and issue templates (bug report, feature request).
+- `.editorconfig` for consistent editor settings.
+
+### Changed
+
+- `peerDependencies` relaxed to `"*"`; pinned versions moved to `devDependencies`.
+- `tsconfig.json` module resolution updated from `Node16` to `NodeNext`.
+- `package.json`: added `author`, `bugs`, `homepage`, `publishConfig.access`, `engines`, `pi-extension` keyword; community docs included in published `files`.
+
+## [0.1.4] - 2026-05-07
+
+### Fixed
+
+- Added `repository.url` to `package.json`, required by npm provenance (sigstore) verification.
+
+## [0.1.3] - 2026-05-07
+
+### Changed
+
+- Migrated peer dependencies from `@mariozechner` to `@earendil-works` scope (`@earendil-works/pi-ai`, `@earendil-works/pi-coding-agent` v0.74.0).
+
+### Added
+
+- `.github/workflows/publish.yml`: OIDC-based npm publish triggered on GitHub release.
+- `scripts.check` and `scripts.pack:dry-run` in `package.json`.
+
+## [0.1.2] - 2025
+
+### Changed
+
+- Moved extension entry point to `index.ts` at the package root for a cleaner npm package name display in Pi.
+
+## [0.1.1] - 2025
+
+### Fixed
+
+- Fixed extension identifier to use the package name instead of `package:file`.
+
+## [0.1.0] - 2025
+
+### Added
+
+- Initial release.
+- `codex_generate_image` Pi extension using the OpenAI Codex ChatGPT backend (`gpt-image-2`). Piggybacks on Pi's `openai-codex` login — no `OPENAI_API_KEY` required.
+- `skills/imagegen` Pi skill with prompting playbook, chroma-key transparency workflow, and Python CLI fallback (`image_gen.py`).
+- Save-mode configuration (`none`, `project`, `global`, `custom`) with env and config-file overrides.
+- SSE stream parsing with exponential backoff retry on transient errors.

package/CODE_OF_CONDUCT.md

@@ -0,0 +1,35 @@
+# Code of Conduct
+
+This project follows the Contributor Covenant Code of Conduct, version 2.1.
+
+## Our pledge
+
+We pledge to make participation in this project a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation.
+
+## Our standards
+
+Examples of behavior that contributes to a positive environment include:
+
+- demonstrating empathy and kindness toward other people;
+- being respectful of differing opinions, viewpoints, and experiences;
+- giving and gracefully accepting constructive feedback;
+- accepting responsibility and apologizing to those affected by mistakes;
+- focusing on what is best for the overall community.
+
+Examples of unacceptable behavior include:
+
+- sexualized language or imagery, and sexual attention or advances;
+- trolling, insulting or derogatory comments, and personal or political attacks;
+- public or private harassment;
+- publishing others' private information without explicit permission;
+- other conduct that could reasonably be considered inappropriate in a professional setting.
+
+## Enforcement
+
+Project maintainers are responsible for clarifying and enforcing standards of acceptable behavior and may remove, edit, or reject comments, commits, code, issues, and other contributions that are not aligned with this Code of Conduct.
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the project maintainer through GitHub. All reports will be reviewed and investigated promptly and fairly.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant](https://www.contributor-covenant.org/), version 2.1.

package/CONTRIBUTING.md

@@ -0,0 +1,61 @@
+# Contributing
+
+Thanks for your interest in contributing to `pi-codex-image-gen`.
+
+## Development setup
+
+```bash
+npm install
+npm run check
+```
+
+The package is source-distributed: Pi loads the TypeScript extension file directly. There is no build step for runtime use.
+
+## Local testing
+
+Install this checkout into a temporary Pi project:
+
+```bash
+mkdir -p <test-project>
+cd <test-project>
+pi package add -l /path/to/pi-codex-image-gen
+pi
+```
+
+Then run `/login` for `openai-codex` and ask Pi to generate an image.
+
+For a one-off run without changing settings:
+
+```bash
+pi -e /path/to/pi-codex-image-gen/index.ts
+```
+
+To validate the Python CLI fallback without an API key:
+
+```bash
+python3 skills/imagegen/scripts/image_gen.py generate --prompt "Test" --out /tmp/test.png --dry-run
+python3 skills/imagegen/scripts/remove_chroma_key.py --help
+```
+
+## Pull request checklist
+
+Before opening a pull request:
+
+- Run `npm run check`.
+- Run `npm run pack:dry-run` and confirm the package contents are intentional.
+- Update `README.md` if user-facing behavior changes.
+- Update `CHANGELOG.md` for notable changes.
+- Keep examples and paths generic; do not commit machine-specific paths or credentials.
+
+## Coding guidelines
+
+- Keep extension logic in `index.ts` unless there is a clear reason to split.
+- When changing tool parameters, update both the Typebox `TOOL_PARAMS` schema and the `promptGuidelines` strings — Pi surfaces both to the model.
+- Treat save-mode names, config file keys, and auth flow as public interface; changes to defaults or precedence are breaking changes.
+- Do not modify `skills/imagegen/scripts/image_gen.py` without a documented reason; it is a vendored fallback.
+- The Codex Responses SSE contract is undocumented and may change. If generation breaks, log raw events before assuming a code bug.
+- Avoid requiring `OPENAI_API_KEY` for the normal Pi tool path; auth piggybacks on Pi's `openai-codex` login.
+
+## Code of conduct
+
+This project follows the [Contributor Covenant Code of Conduct](CODE_OF_CONDUCT.md).

package/SECURITY.md

@@ -0,0 +1,24 @@
+# Security Policy
+
+## Supported versions
+
+Security fixes are provided for the latest released version of `pi-codex-image-gen`.
+
+## Reporting a vulnerability
+
+Please do not open a public issue for suspected security vulnerabilities.
+
+Report privately by contacting the repository maintainer through GitHub. Include:
+
+- a description of the issue;
+- steps to reproduce;
+- affected versions or commits, if known;
+- any suggested mitigation.
+
+The maintainer will acknowledge reports as soon as practical and coordinate disclosure once a fix or mitigation is available.
+
+## Security model
+
+`pi-codex-image-gen` is a Pi package. Pi extensions execute with the same permissions as the local user running Pi. Users should review installed Pi packages and only install packages from sources they trust.
+
+The extension uses Pi's existing `openai-codex` login to obtain a short-lived JWT. The token is used only for requests to the Codex Responses API and is never written to disk or logged. Do not commit API keys, tokens, or decoded JWT payloads.

package/package.json

@@ -1,30 +1,60 @@
 {
   "name": "pi-codex-image-gen",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Image generation for Pi using the ChatGPT Images 2.0 model.",
+  "type": "module",
   "license": "Apache-2.0",
-  "files": ["index.ts", "skills", "README.md", "LICENSE"],
-  "keywords": ["pi-package", "pi", "codex", "image-generation", "gpt-image-2"],
+  "author": "jvm",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/jvm/pi-codex-image-gen.git"
   },
-  "type": "module",
+  "bugs": {
+    "url": "https://github.com/jvm/pi-codex-image-gen/issues"
+  },
+  "homepage": "https://github.com/jvm/pi-codex-image-gen#readme",
+  "keywords": [
+    "pi-package",
+    "pi-extension",
+    "pi",
+    "codex",
+    "image-generation",
+    "gpt-image-2"
+  ],
+  "files": [
+    "index.ts",
+    "skills",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md",
+    "SECURITY.md",
+    "CONTRIBUTING.md",
+    "CODE_OF_CONDUCT.md"
+  ],
   "scripts": {
     "check": "tsc --noEmit",
     "pack:dry-run": "npm pack --dry-run"
   },
-  "peerDependencies": {
-    "@earendil-works/pi-ai": "^0.74.0",
-    "@earendil-works/pi-coding-agent": "^0.74.0",
-    "typebox": "^1.1.33"
-  },
   "pi": {
     "extensions": ["./index.ts"],
     "skills": ["./skills"]
   },
+  "peerDependencies": {
+    "@earendil-works/pi-ai": "*",
+    "@earendil-works/pi-coding-agent": "*",
+    "typebox": "*"
+  },
   "devDependencies": {
+    "@earendil-works/pi-ai": "^0.74.0",
+    "@earendil-works/pi-coding-agent": "^0.74.0",
+    "typebox": "^1.1.33",
     "@types/node": "^25.6.0",
     "typescript": "^6.0.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=20.6.0"
   }
 }