omp packages

pi-codex-images0.1.1

Pi / Gentle Shell extension for a self-hosted codex-images-mcp server: generate and edit images with your ChatGPT plan, with verified local artifacts.

jl.moreno Published 3 days ago MIT ~301 downloads/mo

Untested on omp

This is a pi package. No one has reported whether it works on omp yet. If you try it, add your result below.

Did it work for you?

Result

One report per person. A new report replaces your old one.

Reports 0

No reports yet.

Readme

pi-codex-images

A Pi / Gentle Shell extension that lets your agent generate and edit images through a self-hosted codex-images-mcp server, using the ChatGPT plan you already pay for.

The extension registers one tool, codex_images. Before each remote call it reads the local reference images and instruction files you authorized, sends them inline, and strips local paths from the request. When the server returns artifacts, it downloads them, verifies SHA-256, byte count, MIME type and image dimensions, and writes them atomically to client_destination.

Unofficial. This project is not affiliated with or endorsed by OpenAI. It talks to a server that uses your own ChatGPT/Codex sign-in; you are bound by OpenAI's terms for your account.

Requirements

  • Pi or Gentle Shell with extension support.
  • A running codex-images-mcp HTTP server reachable over HTTPS (or on localhost), protected by a bearer token. See the main repository for deployment.

Install

pi install npm:pi-codex-images

Or from a local checkout: pi install ./packages/pi-codex-images.

Configure

Create config.json next to the installed index.ts, or point PI_CODEX_IMAGES_CONFIG at a file elsewhere. Start from config.remote.example.json:

Field Meaning
endpoint Streamable HTTP MCP URL. Must be HTTPS unless it is localhost, 127.0.0.1 or ::1. Must not contain credentials.
allowedInputRoots Directories the agent may read reference images and instruction files from. Required.
allowedOutputRoots Directories the agent may write generated images to. Required.
maxFileBytes Per-file limit (default 8 MiB).
maxRequestBytes Total inline payload limit per request.
requestTimeoutMs Timeout for each remote call (image generation can take minutes).
tokenFile / tokenEnv Where the bearer token comes from. Pick one.

Store the token in a regular file with mode 0600:

mkdir -p ~/.config/codex-images
printf '%s' "$TOKEN" > ~/.config/codex-images/token
chmod 600 ~/.config/codex-images/token

Do not also register the raw server through an MCP adapter: the raw tool cannot read your local paths or write to client_destination.

Security model

  • Input and output paths must resolve inside the configured roots. Symlink escapes and non-regular files are rejected.
  • Local paths never reach the server; only file contents within the size limits do.
  • Token files must be regular, non-symlink files readable only by you.
  • Writes go to a private temporary file followed by an atomic rename.

The checks reject unauthorized paths and static symlink escapes. They do not protect against a concurrent process running as the same user that swaps directory ancestors between validation and write (Node's filesystem API has no openat/mkdirat). Do not use output roots that untrusted processes can write to.

Development

npm install
npm test
npm run typecheck

License

MIT. See LICENSE.