(GjPUdZddlmZddlZddlZddlZddlZddlmZddl m Z m Z m Z m Z mZddlmZmZmZmZmZmZmZejeZdZdd d d d d dddd ddddd dZded<dZddddZdZdZ dZ!d Z"d!Z#e$hd"Z%dId%Z&dJd'Z'dKd)Z(dLd,Z)dMd/Z*dMd0Z+dNd2Z,dOd7Z-dd8dPd>Z.dQd@Z/dRdBZ0dd8dSdDZ1GdEdFeZ2dTdHZ3dS)UuOpenAI image generation backend — ChatGPT/Codex OAuth variant. Identical model catalog and tier semantics to the ``openai`` image-gen plugin (``gpt-image-2`` at low/medium/high quality), but routes the request through the Codex Responses API ``image_generation`` tool instead of the ``images.generate`` REST endpoint. This lets users who are already authenticated with Codex/ChatGPT generate images without configuring a separate ``OPENAI_API_KEY``. Selection precedence for the tier (first hit wins): 1. ``OPENAI_IMAGE_MODEL`` env var (escape hatch for scripts / tests) 2. ``image_gen.openai-codex.model`` in ``config.yaml`` 3. ``image_gen.model`` in ``config.yaml`` (when it's one of our tier IDs) 4. :data:`DEFAULT_MODEL` — ``gpt-image-2-medium`` Output is saved as PNG under ``$HERMES_HOME/cache/images/``. Source images for image-to-image/editing are sent as Responses ``input_image`` content parts. ) annotationsN)Path)AnyDictListOptionalTuple)DEFAULT_ASPECT_RATIOImageGenProvidererror_responsenormalize_reference_imagesresolve_aspect_ratiosave_b64_imagesuccess_responsez gpt-image-2zGPT Image 2 (Low)z~15szFast iteration, lowest costlow)displayspeed strengthsqualityzGPT Image 2 (Medium)z~40suBalanced — defaultmediumzGPT Image 2 (High)z~2minz,Highest fidelity, strongest prompt adherencehigh)zgpt-image-2-lowgpt-image-2-mediumzgpt-image-2-highzDict[str, Dict[str, Any]]_MODELSr 1536x1024 1024x1024 1024x1536) landscapesquareportraitzgpt-5.5z%https://chatgpt.com/backend-api/codexzYou are an assistant that must fulfill image generation and image editing requests by using the image_generation tool when provided.i> image/gif image/png image/jpeg image/webpreturnDict[str, Any]c ddlm}|}t|tr|dnd}t|tr|niS#t $r'}t d|icYd}~Sd}~wwxYw)z@Read ``image_gen`` from config.yaml (returns {} on any failure).r) load_config image_genNz#Could not load image_gen config: %s)hermes_cli.configr( isinstancedictget Exceptionloggerdebug)r(cfgsectionexcs M/home/rurouni/.hermes/hermes-agent/plugins/image_gen/openai-codex/__init__.py_load_image_gen_configr5hs111111kmm*4S$*?*?I#''+&&&T$Wd33;ww;  :C@@@ sAA B!B=BBTuple[str, Dict[str, Any]]cfddl}|jd}|r|tvr|t|fSt }t |dt r|dni}d}t |t r5|d}t |tr |tvr|}|5|d}t |tr |tvr|}||t|fStttfS)z9Decide which tier to use and return ``(model_id, meta)``.rNOPENAI_IMAGE_MODEL openai-codexmodel) osenvironr-rr5r+r,str DEFAULT_MODEL)r; env_overrider1sub candidatevaluetops r4_resolve_modelrDus# III:>>"677L3 //W\222 " "C%/0G0G%N%N V#''. ! ! !TVC#I#t   eS ! ! ew&6&6Iggg c3   C7NNI'),,, '-0 00 Optional[str]c ddlm}|}t|tr(|r|SdS#t $r&}t d|Yd}~dSd}~wwxYw)zReturn a usable Codex OAuth token, or None. Delegates to the canonical reader in ``agent.auxiliary_client`` so token expiry, credential pool selection, and JWT decoding stay in one place. r)_read_codex_access_tokenNz(Could not resolve Codex access token: %s)agent.auxiliary_clientrHr+r=stripr.r/r0)_readertokenr3s r4rHrHs NNNNNN  eS ! ! !ekkmm !;;== t  ?EEEtttttsA A BA<<Brawbytesc>ddlm}||}|tvr|SdS)uReturn a safe raster image MIME from magic bytes (not filename labels). Delegates magic-byte detection to the shared sniffer in ``agent.image_routing`` (single source of truth), then gates the result to :data:`_ACCEPTED_INPUT_MIME` — the raster formats gpt-image-2's ``input_image`` actually accepts. SVG/TIFF/ICO (which the shared sniffer also recognizes) are rejected here so they fail locally with a clear error instead of an opaque server-side HTTP 400. r)_sniff_mime_from_bytesN)agent.image_routingrP_ACCEPTED_INPUT_MIME)rMrPmimes r4_sniff_image_mimerTs<;::::: ! !# & &D ### 4rErBr=cd|vrtd|dd\}}|}|drd|vrtdt j|d}t |tkrtd t|}|td t j | d }d |d|S)zEValidate and canonicalize a data:image URL for Responses input_image.,z+Image data URL is missing a comma separatorz data:image/z;base64z?Only base64 data:image URLs are supported as Codex image inputsT)validatezImage data URL exceeds 25MB capNz5Image data URL does not contain supported image bytesasciidata:;base64,) ValueErrorsplitlower startswithbase64 b64decodelen_MAX_INPUT_IMAGE_BYTESrT b64encodedecode)rBheaderdata header_lcrMrSencodeds r4_data_url_to_input_image_urlrjs %FGGG;;sA&&LFD I    . .\)92L2LZ[[[  4$ / / /C 3xx(((:;;; S ! !D |PQQQs##**733G *4 * * * **rEc ddlm}||}|rt|n<#t$rt$r%}td|Yd}~nd}~wwxYwt tj | }| std|| j }|dkrtd||tkrtd||}t!|}|td|t#j|d }d |d |S) z>Read a local image path and return a validated data:image URL.r)get_read_block_errorz,Codex image input read guard unavailable: %sNz2Image input path does not exist or is not a file: zImage input path is empty: z#Image input path exceeds 25MB cap: z+Image input path is not a supported image: rYrZr[)agent.file_safetyrlr\r.r/r0rr;path expanduserresolveis_filestatst_sizerc read_bytesrTr`rdre) rBrlblockedr3rnsizerMrSris r4_local_image_to_data_urlrws J::::::&&u--  &W%% % &  JJJ CSIIIIIIIIJ ""5)) * * 2 2 4 4D <<>>WUeUUVVV 99;; D qyy>u>>??? $$$FuFFGGG //  C S ! !D |NuNNOOOs##**733G *4 * * * **s"%AAADict[str, str]cD|pd}|std|}|ds|dr|}n4|drt |}nt |}d|dS)zDConvert a URL/data URL/local path into a Responses input_image part.zBlank image inputzhttp://zhttps://rZ input_image)type image_url)rJr\r^r_rjrw)rBrAloweredr}s r4_to_input_image_partrs"##%%I .,---ooG)$$8(:(::(F(F8   G $ $80;; ,Y77 ! : ::rEr}reference_image_urlsOptional[List[str]]List[Dict[str, str]]c.g}t|tr;|r'||t |pgD]}|||dt }d|DS)zFCollect primary + reference images as ordered Responses content parts.Nc,g|]}t|S)r).0rBs r4 z+_normalize_input_images..s! < < .flushFs J4ii ##))++   cXoo4*S// gt $ $ $ $63H3H#GFOrEzutf-8replace)errorsrz:zevent:rZ) iter_linesr+rNrer=r_rbrJrlstrip)rrlinerrrs @@r4_iter_sse_jsonr<s^!%JJ ##%%<< dE " " :;;wy;99D4yy 2::eggG"  ??3     ??8 $ $ <c(mmnn-3355JJ __W % % <   d3w<<==188:: ; ; ;eggG rErLc ddl}ddlm}||}|dd|ddt ||||}|d d d d d } d} || | 5} | d td|5} | n_#|j $rR} | j | j j dd}td| j jd|| d} ~ wwxYwt!| D]}t#|}|r|}  dddn #1swxYwYdddn #1swxYwY| S)zHStream a Codex Responses image_generation call and return the b64 image.rN)_codex_cloudflare_headersztext/event-streamzBearer zapplication/json)Accept Authorizationz Content-Typerrvrrgr@g>@)connectreadwritepool)timeoutheadersPOSTz /responses)riz"Codex Responses API returned HTTP z: )httpxrIrupdaterTimeoutClientr_CODEX_BASE_URLraise_for_statusHTTPStatusErrorrrr RuntimeError status_coderr)rLrrvrrrrrrr image_b64httprr3bodyrrs r4_collect_image_b64rksRLLL@@@@@@''..G NN%*5*** ' ! G mmE4e4dmSSG#I gw 7 7 &4 [[O!?!?!?g[ N N &RZ ))++++(    !!###|(#."[9Q[[UY[[  (11 & &*511& %I & & & & & & & & & & & & & & & & & & & & & & & & & & & & & & & s[8!EEB0/E0 D :A DD  (E5 EE EE EEEc~eZdZdZeddZeddZddZdd Zdd Z dd Z ddZ e fdddddZ dS)OpenAICodexImageGenProviderzEgpt-image-2 routed through ChatGPT/Codex OAuth instead of an API key.r%r=cdS)Nr9rselfs r4namez OpenAICodexImageGenProvider.names~rEcdS)NOpenAI (Codex auth)rrs r4 display_namez(OpenAICodexImageGenProvider.display_names$$rEboolcTtsdS ddl}n#t$rYdSwxYwdS)NFrT)rHr ImportError)rrs r4 is_availablez(OpenAICodexImageGenProvider.is_availablesL')) 5  LLLL   55 ts  %%List[Dict[str, Any]]cHdtDS)NcHg|]\}}||d|d|ddd S)rrrvaries)idrrrpricer)rmodel_idmetas r4rz;OpenAICodexImageGenProvider.list_models..sQ    $  ?g!+.!       rE)ritemsrs r4 list_modelsz'OpenAICodexImageGenProvider.list_modelss-   #*--//    rErFctS)N)r>rs r4 default_modelz)OpenAICodexImageGenProvider.default_modelsrEr&cdddgddS)Nrfreeu[gpt-image-2 via ChatGPT/Codex OAuth — no API key required; supports text and image inputsuiSign in with `hermes auth codex` (or `hermes setup` → Codex) if you haven't already. No API key needed.)rbadgetagenv_varspost_setup_hintrrs r4get_setup_schemaz,OpenAICodexImageGenProvider.get_setup_schemas")p=   rEcddgtdS)Nrimage) modalitiesmax_reference_images)rrs r4 capabilitiesz(OpenAICodexImageGenProvider.capabilitiess &w/I^___rEN)r}rr aspect_ratior}rrkwargsrc J|pd}t|}|stddd|Ststddd|S ddl}n##t $rtd d d|cYSwxYwt \}} t|td } t} | stddd||| S t||} n/#t$r"} td | dd||| cYd} ~ Sd} ~ wwxYw t| || | d| pd}nK#t$r>} t ddtd| dd||| cYd} ~ Sd} ~ wwxYw|stddd||| S t|d|}n/#t$r"} td| dd||| cYd} ~ Sd} ~ wwxYwtt!||||d| rdnd| | dt#| dS) Nrzz1Prompt is required and must be a non-empty stringinvalid_argumentr9)error error_typeproviderruoNo Codex/ChatGPT OAuth credentials available. Run `hermes auth codex` (or `hermes setup` → Codex) to sign in. auth_requiredrz6httpx Python package not installed (pip install httpx)missing_dependencyr)r r r r:rrz-Invalid image input for Codex image editing: invalid_image_inputrrzCodex image generation failedT)exc_infoz/OpenAI image generation via Codex auth failed: api_errorz8Codex response contained no image_generation_call resultempty_response openai_codex_)prefixzCould not save image to cache: io_errorrr)rvrinput_image_count)rr:rrr modalityextra)rJrr rHrrrD_SIZESr-rr.rr/r0rrr=rb)rrrr}rraspectrtier_idrrvrLrr3b64 saved_paths r4generatez$OpenAICodexImageGenProvider.generates,B%%''%l33 !I-'#  ()) !T+'#   LLLL   !N/'#     '(( zz&&"233(** !T+'#     29>RSSLL   !KcKK0'#         $Y)1T CC    LL84L H H H!MMM&'#         !P+'#   '4MG4M4MNNNJJ   !===%'#         j//# ,8WW&DORUVbRcRcdd    slA""BB"C33 D=DDD#E F 3F=FF#F88 G$GG$G$)r%r=)r%r)r%rr%rFr%r&) rr=rr=r}rFrrrrr%r&)__name__ __module__ __qualname____doc__propertyrrrrrrrr rrrEr4rrsOO X%%%X%          ````1w $(48 w w w w w w w w rErNonecH|tdS)uDPlugin entry point — register the Codex-backed image-gen provider.N)register_image_gen_providerr)ctxs r4registerr*Rs###$?$A$ABBBBBrEr )r%r6r)rMrNr%rF)rBr=r%r=)rBr=r%rx)r}rFrrr%r) rr=rvr=rr=rrr%r&)rBrr%rF)rr) rLr=rr=rvr=rr=rrr%rF)r%r&)4r$ __future__rr`rloggingr;pathlibrtypingrrrrr agent.image_gen_providerr r r r rrr getLoggerr!r/rr__annotations__r>rrrrrrc frozensetrRr5rDrHrTrjrwrrrrrrrr*rrEr4r3s/(#"""""  33333333333333  8 $ $  '2 *+ (C &&*%   9A ) !y:::    11114$$++++$++++: ; ; ; ; = = = =&48 ######L.,,,,j48 ******dm m m m m "2m m m jCCCCCCrE