Vivian Fang 7844815bd7 Add opt-in prompt image sanitization (#61341) ...

## What changed

- Add the disabled-by-default `safe_image_decoder` feature to decode and re-encode prompt images without source metadata, with byte and decoded-pixel limits.
- Apply JPEG orientation and supported ICC color conversion to sRGB, emitting PNG for PNG/GIF inputs and JPEG for JPEG/WebP inputs.
- Use the selected decoder for image preparation, `view_image` validation, and MCP image validation. Include the decoder in image cache keys.
- Preserve original inline images in history metadata so resume and fork can regenerate prepared images without repeated JPEG encoding changing their bytes.

## Testing

Add regression tests for identical JPEG replay after history serialization and for preventing legacy cache entries from bypassing sanitization.

GitOrigin-RevId: 718cd83d0a233e2eb8efd1a64c14d8944e44c350

2026-11-13 18:44:31 +00:00

..

benches

[codex] Add image re-encoding benchmarks (#23935)

2026-05-22 22:38:40 +00:00

src

Add opt-in prompt image sanitization (#61341)

2026-11-13 18:44:31 +00:00

BUILD.bazel

feat: add support for building with Bazel (#8875)

2026-01-09 11:09:43 -08:00

Cargo.toml

Add opt-in prompt image sanitization (#61341)

2026-11-13 18:44:31 +00:00