pi2dsh 0.12.4 → 0.13.0

package/README.md

@@ -170,6 +170,7 @@ it work. **This is the list to trust.**
 | Plugin | What was exercised | Where | Example |
 |---|---|---|---|
 | [`@kassing/pi-vision`](https://www.npmjs.com/package/@kassing/pi-vision) | Image analysis delegated to a vision model; image-admission companion route; analysis injected into a text-only model's turn | CLI + web | [`vision-bridge`](examples/vision-bridge/) |
+| [`@crazygit/pi-codex-image-gen`](https://www.npmjs.com/package/@crazygit/pi-codex-image-gen) | ChatGPT/Codex OAuth → `gpt-image-2` generation; local reference-image upload through DSH approval; image edit; native attachment storage and inline Web rendering | CLI + web | [`codex-image-gen`](examples/codex-image-gen/) |
 | [`pi-btw`](https://www.npmjs.com/package/pi-btw) | `/btw <question>` as a real child session in DSH's subagent UI; `/btw-inject`; `/btw --save`; main thread stays clean | CLI + web | [`side-conversation`](examples/side-conversation/) |
 | [`pi-powerline-footer`](https://www.npmjs.com/package/pi-powerline-footer) | A terminal status line — model, thinking level, project, context usage — drawn into DSH's widget dock, colour included | web | [`presentation-surfaces`](examples/presentation-surfaces/) |
 | [`pi-vision-tool`](https://www.npmjs.com/package/pi-vision-tool) | Tool registration through a JSON-Schema shape DSH had to convert (`anyOf` → `oneOf`) | CLI + web | — |
@@ -306,23 +307,71 @@ The rules that keep it honest:
 - **Verified, not asserted.** Every capability has a public-API contract test,
   and ships only after running end to end on a real DSH loop — CLI *and* web.
 
+## What this is teaching us about DSH
+
+pi2dsh is also an executable stress test of DSH's plugin architecture. Pi gives
+that test a useful workload: a large, already-used public plugin ABI rather than
+a set of examples invented to fit the host.
+
+The result so far is specific, not a thumbs-up/thumbs-down verdict:
+
+- DSH's public seams successfully carry whole capabilities: tools, commands,
+  model adapters, user questions, native child sessions and browser slots.
+- The pressure points appear when an out-of-repo plugin needs to extend an
+  existing capability *from the inside*: add a durable session-event type,
+  intercept the real provider request/response, control compaction before it
+  happens, or participate in trust before project resources load.
+- A working pi2dsh sidecar or alternate adapter is useful product behaviour,
+  but it is **not** counted as proof that the native DSH seam is complete.
+
+For example, a `pi-btw` answer is a real DSH child session — visible, resumable
+and continuable by the host. Pi custom entries are different: they still need a
+pi2dsh sidecar because an out-of-repo plugin cannot safely add a new event type
+to DSH's durable log. Likewise, a transport-owning Pi provider can register a
+native DSH route with its full compatibility profile, while the hand-configured
+`llm-pi-ai` schema still drops some wire-compatibility fields.
+
+The project follows one **[Pi → DSH architecture mapping standard](docs/architecture-mapping-standard.md)**.
+All 111 Pi surfaces belong to capability contracts, all 45 DSH subsystems belong
+to carrying mechanisms, and each capability contract maps to concrete public
+DSH seams. Real plugin runs reference those mappings and record the five-layer
+trace and five-grade result. The structured source of truth is
+[`architecture-ledger.json`](docs/architecture-ledger.json); it produces the
+**[theoretical architecture matrix](docs/architecture-mapping-matrix.md)**,
+**[real-plugin validation matrix](docs/plugin-validation-matrix.md)** and
+**[current architecture conclusions](docs/dsh-architecture-conformance.md)**.
+That makes both top-down status and per-plugin drill-down answerable from the
+same ledger. The current five DSH gap IDs are confirmed findings, not a claim
+of complete coverage. Current
+upstream reports include
+[#2708 — durable events for out-of-repo plugins](https://github.com/deepseek-ai/deepseek-harness/discussions/2708)
+and
+[#3076 — provider compat fields dropped by `llm-pi-ai`](https://github.com/deepseek-ai/deepseek-harness/discussions/3076).
+
 ## Pi capabilities on DSH
 
 Every surface a Pi package can touch, and what it maps onto. These tables are
 generated from the rules the bridge consults at runtime, so they cannot drift
 from the code.
 
+For pinned Pi 0.84.1, the generated catalog has **111 upstream-shaped rule
+rows**. The bridge also keeps one
+documented compatibility extension, `unregisterTool`; it appears on the tools
+detail page but is deliberately outside that total. Nested objects such as the
+session manager can expose several methods behind one row; the architecture
+audit states this boundary explicitly.
+
 <!-- capability-table:start -->
 | Area | Pi surfaces | Status |
 |---|---|---|
-| [Tools](docs/capabilities/tools.md) | 12 | 3 same semantics · 9 mapped, difference stated |
-| [Commands, flags, editor input](docs/capabilities/commands.md) | 13 | 13 mapped, difference stated |
+| [Tools](docs/capabilities/tools.md) | 11 | 2 same semantics · 9 mapped, difference stated |
+| [Commands, flags, editor input](docs/capabilities/commands.md) | 6 | 6 mapped, difference stated |
 | [Messages, context, agent loop](docs/capabilities/conversation.md) | 20 | 9 same semantics · 11 mapped, difference stated |
-| [Sessions & side conversations](docs/capabilities/sessions.md) | 24 | 6 same semantics · 18 mapped, difference stated |
+| [Sessions & side conversations](docs/capabilities/sessions.md) | 23 | 5 same semantics · 18 mapped, difference stated |
 | [Models, providers, credentials](docs/capabilities/models.md) | 15 | 1 same semantics · 11 mapped, difference stated · 3 not available |
-| [Asking the user, rendering](docs/capabilities/interaction.md) | 24 | 4 same semantics · 20 mapped, difference stated |
+| [Asking the user, rendering](docs/capabilities/interaction.md) | 32 | 5 same semantics · 27 mapped, difference stated |
 | [Project environment & resources](docs/capabilities/environment.md) | 4 | 1 same semantics · 1 mapped, difference stated · 2 not available |
-| **Total** | **112** | **24 same semantics · 83 mapped, difference stated · 5 not available** |
+| **Total** | **111** | **23 same semantics · 83 mapped, difference stated · 5 not available** |
 <!-- capability-table:end -->
 
 Plus **202 imported symbols** from Pi's three runtime packages
@@ -330,9 +379,10 @@ Plus **202 imported symbols** from Pi's three runtime packages
 shims — so a plugin's own Pi version pins never load. They are listed in
 [Imported Pi runtime symbols](docs/capabilities/imports.md).
 
-Each area page states two things for every surface: what it does on DSH, and
-**how it is built** — the DSH seam, service or waterfall the mapping runs on,
-so a claim here can be checked against the harness instead of trusted.
+Each area page states the Pi capability contract, the theoretical DSH mechanism
+and public seam, and the current implementation for every surface. Adding a
+surface without a capability assignment or theoretical mapping fails the docs
+check.
 
 Start at the [capability index](docs/capabilities/README.md). Machine-readable:
 `pi2dsh matrix --json`.
@@ -369,8 +419,10 @@ in one has actually been executed against a real DSH loop before landing.
 | Example | What you get |
 |---|---|
 | [`vision-bridge`](examples/vision-bridge/) | A text-only model answers questions about images — CLI and web, probe images included |
+| [`codex-image-gen`](examples/codex-image-gen/) | Generate and edit images with a ChatGPT/Codex subscription; DSH approval and inline result included |
 | [`side-conversation`](examples/side-conversation/) | `/btw <question>` runs a side thread in DSH's native subagent UI; your main conversation stays clean |
 | [`presentation-surfaces`](examples/presentation-surfaces/) | A real plugin's terminal chrome (`pi-powerline-footer`) in DSH's web seats, plus which of the top-50 Pi plugins draw at all |
+| [`subscription-login`](examples/subscription-login/) | Use a ChatGPT / Claude / Copilot / Kimi subscription as a DSH model: `/login`, then the route and credential appear on their own |
 | [`gateway-compat`](examples/gateway-compat/) | Private / domestic / proxy gateways that reject the `developer` role: why reasoning 400s, and how a Pi provider plugin gets past it (recording proxy included, so you can read the exact request body we send) |
 | [`custom-gateways`](examples/custom-gateways/) | Add any OpenAI-compatible gateway the official DSH way, and every Pi plugin sees it |
 
@@ -391,6 +443,7 @@ pnpm verify                 # typecheck + contract tests + packaging
 pnpm audit:community        # static screening over the top-50 corpus
 pnpm test:community         # deep runtime + official plugin-manager + e2e
 DEEPSEEK_API_KEY=… pnpm test:live    # real-model acceptance (key from env only)
+CODEX_AUTH_FILE=… pnpm test:codex-image # real OAuth generation + reference edit + Web pixels
 ```
 
 Acceptance evidence per capability: [docs/acceptance.md](docs/acceptance.md).

package/README.zh.md

@@ -152,6 +152,7 @@ Web 里**直接粘图**——哪怕你的主模型是纯文本的。DSH 正常
 | 插件 | 验证了什么 | 在哪验的 | 示例 |
 |---|---|---|---|
 | [`@kassing/pi-vision`](https://www.npmjs.com/package/@kassing/pi-vision) | 图片委托给视觉模型；贴图伴生路由；分析结果注入纯文本模型的这一轮 | CLI + Web | [`vision-bridge`](examples/vision-bridge/) |
+| [`@crazygit/pi-codex-image-gen`](https://www.npmjs.com/package/@crazygit/pi-codex-image-gen) | ChatGPT/Codex OAuth 调 `gpt-image-2` 生图；本地参考图走 DSH 审批后上传；编辑图片；原生附件存储并在 Web 内直接显示 | CLI + Web | [`codex-image-gen`](examples/codex-image-gen/) |
 | [`pi-btw`](https://www.npmjs.com/package/pi-btw) | `/btw <问题>` 跑成 DSH 子代理界面里的真子会话；`/btw-inject`；`/btw --save`；主会话保持干净 | CLI + Web | [`side-conversation`](examples/side-conversation/) |
 | [`pi-powerline-footer`](https://www.npmjs.com/package/pi-powerline-footer) | 终端状态条（模型、思考档位、项目、上下文用量）画进 DSH 的 widget dock，带颜色 | Web | [`presentation-surfaces`](examples/presentation-surfaces/) |
 | [`pi-vision-tool`](https://www.npmjs.com/package/pi-vision-tool) | 工具注册，且带一个 DSH 需要转换的 JSON Schema 形状（`anyOf` → `oneOf`） | CLI + Web | — |
@@ -265,31 +266,70 @@ footer、title、working/thinking 类），都画在宿主自己的 slot 座位
 - **验证过才算数。** 每项能力都有公开 API 契约测试，并且必须在真实 DSH loop 上
   端到端跑通——CLI **和** Web 双端——才会发布。
 
+## 这件事正在检验 DSH 什么
+
+pi2dsh 同时也是一套会执行的 DSH 插件架构压力测试。Pi 提供的不是为了迎合 DSH
+现编的几个 demo，而是一套已经被大量真实插件用过的公开 ABI，所以它很适合回答：
+DSH 所说的“能力由插件自由组合”，到底走到了哪一步。
+
+目前的结论不是简单的“好”或“不好”，而是边界已经很清楚：
+
+- DSH 对**替换一整项能力**的公开 seam 是成立的：工具、命令、模型 adapter、用户
+  提问、原生子会话和浏览器 slot 都已经承接住真实 Pi 能力。
+- 压力集中在**从内部扩展已有能力**：仓外插件新增一种持久会话事件、拦截真正发出的
+  provider 请求/响应、在压缩发生前改变决定、在项目资源加载前参与 trust。
+- pi2dsh 用 sidecar 或另一条 adapter 把功能绕通，对用户有价值，但**不能算 DSH
+  原生架构已经承接成功**。我们会把“功能可用”和“宿主 seam 完整”分开记。
+
+一个容易说错的例子：`pi-btw` 的回答已经是真正的 DSH child session，宿主能打开、
+续聊和恢复；sidecar 存的是 Pi 自定义 entry 等 DSH 仓外插件目前无法写进原生日志的
+事实，不是把整个子会话伪造了一遍。模型侧也一样：自带 transport 的 Pi provider
+可以注册成原生 DSH route，并保留完整 compat；但手写 `llm-pi-ai` 配置时，部分
+wire 兼容字段仍会被 schema 丢掉。
+
+项目采用一套统一的 **[Pi → DSH 架构映射标准](docs/architecture-mapping-standard.md)**：
+111 条 Pi 接口先归入能力契约，DSH 的 45 个模块归入承载机制，再建立到具体公开 seam
+的理论映射；真实插件只引用这些映射，记录五层流转和五级结果。结构化事实保存在
+[`architecture-ledger.json`](docs/architecture-ledger.json)，由同一份总账生成
+**[理论架构矩阵](docs/architecture-mapping-matrix.md)**、
+**[真实插件验证矩阵](docs/plugin-validation-matrix.md)** 和
+**[当前架构结论](docs/dsh-architecture-conformance.md)**。这样既能从总体看到已经适配的
+能力，也能从任一插件下钻到它用了哪些 Pi 能力、落到哪些 DSH 机制、实际达到哪一级。
+当前 5 个 DSH 缺口是已经坐实的发现，**不是已经完成全覆盖**。
+当前已向上游提交的实证包括
+[#2708：让仓外插件安全写持久事件](https://github.com/deepseek-ai/deepseek-harness/discussions/2708)
+和
+[#3076：`llm-pi-ai` 丢 provider compat 字段](https://github.com/deepseek-ai/deepseek-harness/discussions/3076)。
+
 ## Pi 的开放能力在 DSH 上怎么落
 
 Pi 包能碰到的每一个面，以及它落到 DSH 的什么位置。下面这些表是从桥在运行时真正
 查的那份规则生成的，所以不会和代码脱节。
 
+针对固定的 Pi 0.84.1，当前生成目录有 **111** 条上游形状的规则行。桥另外保留了一个
+兼容扩展 `unregisterTool`；它会出现在工具细表中，但明确不计入这个总数。
+`sessionManager` 等嵌套对象仍可能用一行代表多个方法，架构审计会明确写出这层边界。
+
 <!-- capability-table:start -->
 | 能力域 | Pi 面数 | 状态 |
 |---|---|---|
-| [工具](docs/capabilities/tools.md) | 12 | 3 语义一致 · 9 已映射并写明差异 |
-| [命令、flag、编辑器输入](docs/capabilities/commands.md) | 13 | 13 已映射并写明差异 |
+| [工具](docs/capabilities/tools.md) | 11 | 2 语义一致 · 9 已映射并写明差异 |
+| [命令、flag、编辑器输入](docs/capabilities/commands.md) | 6 | 6 已映射并写明差异 |
 | [消息、上下文、agent 循环](docs/capabilities/conversation.md) | 20 | 9 语义一致 · 11 已映射并写明差异 |
-| [会话与侧边对话](docs/capabilities/sessions.md) | 24 | 6 语义一致 · 18 已映射并写明差异 |
+| [会话与侧边对话](docs/capabilities/sessions.md) | 23 | 5 语义一致 · 18 已映射并写明差异 |
 | [模型、provider、凭证](docs/capabilities/models.md) | 15 | 1 语义一致 · 11 已映射并写明差异 · 3 不提供 |
-| [向用户提问与渲染](docs/capabilities/interaction.md) | 24 | 4 语义一致 · 20 已映射并写明差异 |
+| [向用户提问与渲染](docs/capabilities/interaction.md) | 32 | 5 语义一致 · 27 已映射并写明差异 |
 | [项目环境与资源](docs/capabilities/environment.md) | 4 | 1 语义一致 · 1 已映射并写明差异 · 2 不提供 |
-| **合计** | **112** | **24 语义一致 · 83 已映射并写明差异 · 5 不提供** |
+| **合计** | **111** | **23 语义一致 · 83 已映射并写明差异 · 5 不提供** |
 <!-- capability-table:end -->
 
 另外还有 Pi 三个运行时包（`pi-coding-agent`、`pi-tui`、`pi-ai`）的 **202 个
 导入符号**，由 vendored 或 headless shim 提供——所以插件自己钉的 Pi 版本永远不会
 被加载，清单见[导入的 Pi 运行时符号](docs/capabilities/imports.md)。
 
-每个能力域页面对每一个面都写两件事：它在 DSH 上做什么，以及**它是怎么实现的**
-——这条映射落在哪个 DSH seam、服务或 waterfall 上，好让读者能对着 harness 核实，
-而不是只能选择相信。
+每个能力域页面对每一个面都写清它属于哪个 Pi 能力契约、理论上应落到哪个 DSH 承载
+机制与公开 seam、当前代码实际上如何实现。新增接口如果没有能力归属或理论映射，文档
+检查会直接失败。
 
 从[能力索引](docs/capabilities/README.md)开始看。机器可读版：`pi2dsh matrix --json`。
 
@@ -318,8 +358,10 @@ loop 上实际跑过才会进来。
 | 示例 | 你能得到什么 |
 |---|---|
 | [`vision-bridge`](examples/vision-bridge/) | 纯文本模型回答图片问题——CLI 与 Web 双端，附探针图 |
+| [`codex-image-gen`](examples/codex-image-gen/) | 用 ChatGPT/Codex 订阅生图和改图，包含 DSH 上传审批与 Web 内直接显示结果 |
 | [`side-conversation`](examples/side-conversation/) | `/btw <问题>` 在 DSH 原生子代理界面里开一条侧边线程，主会话保持干净 |
 | [`presentation-surfaces`](examples/presentation-surfaces/) | 真插件（`pi-powerline-footer`）的终端界面画进 DSH Web 座位，附 top50 里哪些 Pi 插件会画界面 |
+| [`subscription-login`](examples/subscription-login/) | 用 ChatGPT / Claude / Copilot / Kimi 订阅账号当 DSH 的模型：`/login`、登录后自动建路由与凭证 |
 | [`gateway-compat`](examples/gateway-compat/) | 私有 / 国内 / 代理网关拒收 `developer` 角色：为什么一开推理就 400，以及用 Pi provider 插件怎么绕过去（附透传录制代理，能看到我们真正发出去的请求体） |
 | [`custom-gateways`](examples/custom-gateways/) | 按 DSH 官方方式接任何 OpenAI 兼容网关，每个 Pi 插件都能看到它 |
 
@@ -340,6 +382,7 @@ pnpm verify                 # 类型检查 + 契约测试 + 打包检查
 pnpm audit:community        # 前 50 静态筛查
 pnpm test:community         # 深度运行时 + 官方插件管理器 + e2e
 DEEPSEEK_API_KEY=… pnpm test:live    # 真实模型验收（key 只从环境读）
+CODEX_AUTH_FILE=… pnpm test:codex-image # 真 OAuth 生图 + 参考图编辑 + Web 像素显示
 ```
 
 逐项能力的验收证据：[docs/acceptance.md](docs/acceptance.md)。

package/dist/client.js

@@ -316,8 +316,194 @@ window.__ModuleLoader__.load({
 				flexDirection: "column",
 				gap: "4px",
 				padding: "4px 2px"
+			},
+			imageTool: {
+				margin: "4px 0",
+				overflow: "hidden",
+				borderRadius: "8px",
+				border: "1px solid rgba(120,120,130,0.22)",
+				background: "var(--dsh-color-bg-subtle, rgba(120,120,130,0.06))",
+				color: "var(--dsh-color-text, inherit)",
+				font: "400 12px/1.5 system-ui, sans-serif"
+			},
+			imageToolToggle: {
+				width: "100%",
+				display: "flex",
+				alignItems: "center",
+				gap: "8px",
+				padding: "8px 10px",
+				cursor: "pointer",
+				border: "none",
+				background: "transparent",
+				color: "inherit",
+				textAlign: "left",
+				font: "500 12px/1.5 system-ui, sans-serif"
+			},
+			imageToolStatus: {
+				color: "#2FBC44",
+				fontSize: "10px"
+			},
+			imageToolSummary: {
+				opacity: .62,
+				overflow: "hidden",
+				textOverflow: "ellipsis",
+				whiteSpace: "nowrap"
+			},
+			imageToolBody: {
+				display: "flex",
+				flexDirection: "column",
+				gap: "8px",
+				padding: "0 10px 10px",
+				borderTop: "1px solid rgba(120,120,130,0.14)"
+			},
+			imageToolText: {
+				margin: "8px 0 0",
+				whiteSpace: "pre-wrap",
+				wordBreak: "break-word",
+				opacity: .82
+			},
+			imageGrid: {
+				display: "flex",
+				flexWrap: "wrap",
+				gap: "8px"
+			},
+			imageFrame: {
+				display: "block",
+				maxWidth: "min(320px, 100%)",
+				maxHeight: "320px",
+				borderRadius: "8px",
+				objectFit: "contain",
+				background: "rgba(0,0,0,0.08)"
+			},
+			imageError: {
+				padding: "12px",
+				color: "#F63218"
 			}
 		};
+		/** Pull one image through DSH's own session-authorized attachment RPC. */
+		function AuthorizedToolImage({ sessionId, attachment }) {
+			const [url, setUrl] = (0, react.useState)(void 0);
+			const [failed, setFailed] = (0, react.useState)(false);
+			(0, react.useEffect)(() => {
+				const controller = new AbortController();
+				let objectUrl;
+				(async () => {
+					try {
+						const response = await fetch("/api/session.attachment", {
+							method: "POST",
+							headers: { "content-type": "application/json" },
+							signal: controller.signal,
+							body: JSON.stringify({
+								type: "client-request",
+								rpcId: `pi2dsh-image-${Date.now()}-${Math.random().toString(36).slice(2)}`,
+								method: "session.attachment",
+								payload: {
+									sessionId,
+									attachmentId: attachment.attachmentId
+								}
+							})
+						});
+						const envelope = await response.json();
+						const data = envelope.result?.ok === true ? envelope.result.value?.data : void 0;
+						if (!response.ok || typeof data !== "string") throw new Error("attachment unavailable");
+						const binary = atob(data);
+						const bytes = Uint8Array.from(binary, (char) => char.charCodeAt(0));
+						objectUrl = URL.createObjectURL(new Blob([bytes], { type: attachment.mediaType }));
+						if (!controller.signal.aborted) setUrl(objectUrl);
+					} catch {
+						if (!controller.signal.aborted) setFailed(true);
+					}
+				})();
+				return () => {
+					controller.abort();
+					if (objectUrl !== void 0) URL.revokeObjectURL(objectUrl);
+				};
+			}, [
+				sessionId,
+				attachment.attachmentId,
+				attachment.mediaType
+			]);
+			if (failed) return (0, react.createElement)("div", { style: styles.imageError }, "Image attachment could not be loaded.");
+			if (url === void 0) return (0, react.createElement)("div", { style: styles.imageToolText }, "Loading image…");
+			return (0, react.createElement)("img", {
+				src: url,
+				alt: attachment.name ?? "Image returned by Pi tool",
+				style: styles.imageFrame,
+				"data-pi2dsh": "tool-image"
+			});
+		}
+		function firstArgumentSummary(raw) {
+			try {
+				const parsed = JSON.parse(raw);
+				const preferred = parsed.prompt ?? parsed.description;
+				if (typeof preferred === "string") return preferred;
+				const first = Object.values(parsed).find((value) => typeof value === "string");
+				return typeof first === "string" ? first : "";
+			} catch {
+				return raw;
+			}
+		}
+		/** Browser row shared by the explicitly supported Pi image tools. */
+		function PiImageToolView({ toolName, block, sessionId }) {
+			const [expanded, setExpanded] = (0, react.useState)(true);
+			const settled = block.kind === "tool-result";
+			const argsRaw = settled ? block.call?.argsRaw ?? "" : block.argsRaw ?? "";
+			const content = settled && Array.isArray(block.content) ? block.content : [];
+			const images = content.flatMap((item) => item.type === "image" && item.attachment !== void 0 ? [item.attachment] : []);
+			const text = content.filter((item) => item.type === "text" && typeof item.text === "string").map((item) => item.text).join("\n");
+			const summary = firstArgumentSummary(argsRaw);
+			return (0, react.createElement)("div", {
+				style: styles.imageTool,
+				"data-pi2dsh": "image-tool-result",
+				"data-tool": toolName
+			}, (0, react.createElement)("button", {
+				type: "button",
+				style: styles.imageToolToggle,
+				"aria-expanded": expanded,
+				onClick: () => setExpanded((value) => !value)
+			}, (0, react.createElement)("span", { style: styles.imageToolStatus }, block.isError === true ? "●" : settled ? "●" : "◌"), (0, react.createElement)("span", null, toolName), summary === "" ? null : (0, react.createElement)("span", { style: styles.imageToolSummary }, `· ${summary}`)), !expanded ? null : (0, react.createElement)("div", { style: styles.imageToolBody }, text === "" ? null : (0, react.createElement)("div", { style: styles.imageToolText }, text), sessionId === void 0 || images.length === 0 ? null : (0, react.createElement)("div", { style: styles.imageGrid }, ...images.map((attachment) => (0, react.createElement)(AuthorizedToolImage, {
+				key: attachment.attachmentId,
+				sessionId,
+				attachment
+			})))));
+		}
+		/**
+		* Register the image row under exact tool names published at package mount.
+		* Only known image tools appear in that list, so text-only and native tools
+		* retain DSH's existing cards.
+		*/
+		function installImageToolViews(scope) {
+			const installed = /* @__PURE__ */ new Set();
+			const start = () => {
+				let live = true;
+				const sync = async () => {
+					try {
+						const response = await fetch("/pi2dsh/image-tool-names");
+						if (!response.ok || !live) return;
+						const payload = await response.json();
+						if (!Array.isArray(payload.names)) return;
+						for (const value of payload.names) {
+							if (typeof value !== "string" || value === "" || installed.has(value)) continue;
+							installed.add(value);
+							scope.slots.inject("tool.call.toolview", () => scope.slots.register({
+								name: "tool.call.toolview",
+								key: value
+							}, PiImageToolView));
+						}
+					} catch {}
+				};
+				sync();
+				const timer = window.setInterval(() => {
+					sync();
+				}, POLL_MS);
+				return () => {
+					live = false;
+					window.clearInterval(timer);
+				};
+			};
+			if (scope.effect !== void 0) scope.effect(start, "pi2dsh: image tool views");
+			else start();
+		}
 		/**
 		* The frame-wide seat: the side-conversation panel, plus whatever packages
 		* pinned frame-wide — transient title and Pi's status entries, as pills.
@@ -479,6 +665,7 @@ window.__ModuleLoader__.load({
 				});
 			});
 			ctx.inject(["slots"], (scope) => {
+				installImageToolViews(scope);
 				scope.slots.inject("shell.overlay", () => scope.slots.register({
 					name: "shell.overlay",
 					id: "pi2dsh-overlay",

package/dist/host.mjs

@@ -1,5 +1,5 @@
 
-import { r as registerVisionCompanions, t as applyPiPackage } from "./runtime-DH0zEUpu.mjs";
+import { r as registerVisionCompanions, t as applyPiPackage } from "./runtime-B-SlR8mJ.mjs";
 import { t as resolvePiPackage } from "./source-0sA5z08z.mjs";
 import { createRequire } from "node:module";
 import { readFile } from "node:fs/promises";

package/dist/index.mjs

@@ -1,5 +1,5 @@
 
-import { r as registerVisionCompanions } from "./runtime-DH0zEUpu.mjs";
+import { r as registerVisionCompanions } from "./runtime-B-SlR8mJ.mjs";
 import { t as resolvePiPackage } from "./source-0sA5z08z.mjs";
 import { applyPiHost, manifestForInstalled } from "./host.mjs";
 import { a as CONTEXT_RULES, c as PI_AI_PACKAGES, d as UI_CONTEXT_RULES, f as ruleForApi, g as ruleForUiContextProperty, h as ruleForHostImport, i as API_RULES, l as PI_CODING_AGENT_PACKAGES, m as ruleForEvent, n as convertPiMcpConfig, o as EVENT_RULES, p as ruleForContextProperty, r as renderMcpPatch, s as HOST_IMPORT_RULES, t as collectPiMcpServers, u as PI_TUI_PACKAGES } from "./mcp-config-CZepacin.mjs";

package/dist/{runtime-DH0zEUpu.mjs → runtime-B-SlR8mJ.mjs}

@@ -786,6 +786,15 @@ var BrowserSurfaces = class {
 	#draftRequests = /* @__PURE__ */ new Map();
 	#liveDrafts = /* @__PURE__ */ new Map();
 	#completionSources = /* @__PURE__ */ new Map();
+	#imageToolNames = /* @__PURE__ */ new Set();
+	/** Register one known image tool's exact DSH wire name. */
+	registerImageTool(name) {
+		if (name.length > 0) this.#imageToolNames.add(name);
+	}
+	/** Exact wire names needing the generic Pi image-result browser view. */
+	imageToolNames() {
+		return [...this.#imageToolNames];
+	}
 	/**
 	* Track one child session under its parent.
 	* @param parentSessionId - the session the panel floats over.
@@ -1158,6 +1167,14 @@ function registerBrowserSurfaceRoute(ctx, registry) {
 				response.end(JSON.stringify({ items }));
 				return;
 			}
+			if (url.pathname === "/pi2dsh/image-tool-names") {
+				response.writeHead(200, {
+					"content-type": "application/json; charset=utf-8",
+					"cache-control": "no-store"
+				});
+				response.end(method === "HEAD" ? void 0 : JSON.stringify({ names: registry.imageToolNames() }));
+				return;
+			}
 			if (url.pathname !== "/pi2dsh/browser-state") {
 				response.writeHead(404);
 				response.end();
@@ -2549,6 +2566,10 @@ function registerPiProviderRoute(options) {
 //#region src/runtime.ts
 /** Fallback thread ids when a child session reports none. */
 let sidePanelSerial = 0;
+const KNOWN_IMAGE_TOOLS_BY_PACKAGE = /* @__PURE__ */ new Map([["@crazygit/pi-codex-image-gen", /* @__PURE__ */ new Set(["codex_generate_image"])]]);
+function isKnownImageTool(packageName, toolName) {
+	return KNOWN_IMAGE_TOOLS_BY_PACKAGE.get(packageName)?.has(toolName) === true;
+}
 function logger(ctx) {
 	const candidate = ctx.logger;
 	return {
@@ -4204,16 +4225,17 @@ async function supersedeActiveLogin(state) {
 async function ensureLoggedInProviderRoute(ctx, state, name, config) {
 	if (!providerSupportsOAuth(config)) return false;
 	if (providerCarriesTransport(config) || state.providerRouteDisposers.has(name)) return false;
-	if (llmOf(ctx)?.listProviders().some((provider) => provider.id === name) === true) return false;
+	const alreadyRouted = llmOf(ctx)?.listProviders().some((provider) => provider.id === name) === true;
 	if (await storedOAuthCredential(oauthStoreOf(state), name).catch(() => void 0) === void 0) return false;
+	const published = await publishOAuthCredential(ctx, state, name, config);
+	if (!published.ok) return false;
+	keepOAuthCredentialFresh(ctx, state);
+	if (alreadyRouted) return false;
 	const settings = optionalService(ctx, "settings");
 	if (settings === void 0) {
 		logger(ctx).warn(`[pi2dsh] logged in to ${JSON.stringify(name)}, but this composition has no settings service to declare its model route in`);
 		return false;
 	}
-	const published = await publishOAuthCredential(ctx, state, name, config);
-	if (!published.ok) return false;
-	keepOAuthCredentialFresh(ctx, state);
 	await settings.update("llm-pi-ai", { providers: { [name]: {
 		...typeof config.name === "string" ? { displayName: config.name } : {},
 		...published.baseUrl === void 0 ? {} : { baseURL: published.baseUrl },
@@ -4460,6 +4482,7 @@ function registerTool(ctx, state, tool) {
 	};
 	const dispose = ctx.tools.register(definition);
 	state.toolDisposers.set(tool.name, dispose);
+	if (isKnownImageTool(state.packageName, tool.name)) state.shared.browserSurfaces?.registerImageTool(tool.name);
 }
 function unregisterTool(state, name) {
 	const dispose = state.toolDisposers.get(name);
@@ -5176,7 +5199,11 @@ async function applyPiPackage(ctx, options) {
 		oauth: provider.auth.oauth
 	});
 	ensureLoginCommand(ctx, state);
-	for (const [name, config] of [...state.providers]) ensureLoggedInProviderRoute(ctx, state, name, config).catch((error) => logger(ctx).warn(`[pi2dsh] could not restore the route for logged-in provider ${JSON.stringify(name)}: ${error instanceof Error ? error.message : String(error)}`));
+	for (const [name, config] of [...state.providers]) try {
+		await ensureLoggedInProviderRoute(ctx, state, name, config);
+	} catch (error) {
+		logger(ctx).warn(`[pi2dsh] could not restore the route for logged-in provider ${JSON.stringify(name)}: ${error instanceof Error ? error.message : String(error)}`);
+	}
 	if (options.manifest.skillDirs.length > 0) {
 		if (ctx.get("skills") === void 0) logger(ctx).warn("[pi2dsh] migrated skills were not mounted because this DSH composition has no ctx.skills");
 		else {
@@ -5335,6 +5362,7 @@ const runtimeInternals = {
 	resolveOfferedChoice,
 	dshToPiContent,
 	expandPrompt,
+	isKnownImageTool,
 	isSubagentOrigin,
 	normalizeToolResult,
 	splitArguments,
@@ -5344,4 +5372,4 @@ const runtimeInternals = {
 //#endregion
 export { runtimeInternals as i, normalizeToolSchema as n, registerVisionCompanions as r, applyPiPackage as t };
 
-//# sourceMappingURL=runtime-DH0zEUpu.mjs.map
+//# sourceMappingURL=runtime-B-SlR8mJ.mjs.map