RFC: generic plugin proxy socket (two-tier registry); image gen = first consumer #3105

Merged

core-devops merged 6 commits from rfc/image-gen-platform-metered into main 2026-06-21 05:10:53 +00:00

Conversation 0 Commits 6 Files Changed 1

+125

core-devops commented 2026-06-21 02:27:59 +00:00

Member

Copy Link

Copy Source

Draft RFC (rev 2) for your review.

Re-scoped per your direction: image gen is uncapped, consumes platform credits via the existing platform proxy (which already does platform-managed billing); the plugin is a thin adaptor to the proxy. No per-plugin caps, key-injection, or attribution — the proxy/billing owns all of it.

Real work = extend the proxy with image routes + vendor handlers (OpenAI GPT Image 2, Gemini Nano Banana) + image SKUs in the price catalog + credit-debit. The plugin is trivial.

Cost-leak guard is now intrinsic: billed via finite credits, and any unpriced image model is rejected at the proxy (never the fail-open $0 that hid the opus leak).

5 open questions in §7 need your calls (proxy image extension point; Vertex vs Gemini-Developer-API; image pricing source; BYOK in v1 or defer; output form).

Won't build until approved. Repo name confirmed: molecule-ai-plugin-image-gen.

🤖 Generated with Claude Code

Draft RFC (rev 2) for your review. **Re-scoped per your direction:** image gen is **uncapped**, consumes **platform credits** via the **existing platform proxy** (which already does platform-managed billing); the **plugin is a thin adaptor** to the proxy. No per-plugin caps, key-injection, or attribution — the proxy/billing owns all of it. **Real work = extend the proxy** with image routes + vendor handlers (OpenAI GPT Image 2, Gemini Nano Banana) + image SKUs in the price catalog + credit-debit. The plugin is trivial. **Cost-leak guard** is now intrinsic: billed via finite credits, and any **unpriced image model is rejected** at the proxy (never the fail-open $0 that hid the opus leak). **5 open questions** in §7 need your calls (proxy image extension point; Vertex vs Gemini-Developer-API; image pricing source; BYOK in v1 or defer; output form). Won't build until approved. Repo name confirmed: molecule-ai-plugin-image-gen. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

core-devops added 1 commit 2026-06-21 02:27:59 +00:00

docs(rfc): platform-metered image generation (entitlement, key injection, cap, attribution) ... bc1d530f71

Draft RFC for CTO review — the billing-sensitive half of molecule-ai-plugin-image-gen.
Applies the post-opus-cost-leak guardrails (attribution + fail-closed cap + priced models)
to a default-platform-metered, BYOK-override image-gen plugin (OpenAI GPT Image 2 + Gemini Nano Banana).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

core-devops changed title from RFC: platform-metered image generation (entitlement, key injection, cap, attribution) to RFC: image generation via the platform proxy (credits-billed, no caps; plugin = thin adaptor) 2026-06-21 02:34:18 +00:00

core-devops added 1 commit 2026-06-21 02:34:18 +00:00

docs(rfc): rev 2 — re-scope image gen to proxy-fronted + credits-billed, no caps, thin-adaptor plugin ... 1683a4131f

Per CTO: image gen is uncapped, consumes platform credits via the existing platform proxy/billing;
the plugin is just an adaptor to the proxy. Drops per-plugin caps/key-injection/attribution.
Cost-leak guard moves to the proxy price-catalog (unpriced image model = rejected, no fail-open).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

core-devops added 1 commit 2026-06-21 02:50:01 +00:00

docs(rfc): rev 3 — fold in CTO answers (price x1.5, defer BYOK, return-URL output) + proxy/Vertex findings ... 2ba7da3155

Q1: proxy is per-wire-format (add ProxyImages like /v1/responses) + image billing is count/size not tokens + needs image storage->URL.
Q2: Vertex NOT available (SA 404 on aiplatform; AI-Studio project) -> recommend Gemini Developer API key.
Q5: tool returns a download URL; agent places it; no forced /workspace write.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

core-devops added 1 commit 2026-06-21 03:24:07 +00:00

RFC image-gen: Q2 resolved + verified live (Vertex gemini-2.5-flash-image 200, 1290 tok/image); per-vendor billing-unit note ... 9463f074f8

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

core-devops added 1 commit 2026-06-21 03:55:20 +00:00

RFC image-gen: Q2 FINAL — reuse existing molecule-vertex keyless WIF (retire molecules-ai-proxy SA-key detour); reflects CP #880 ... 9accd8d5aa

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

core-devops changed title from RFC: image generation via the platform proxy (credits-billed, no caps; plugin = thin adaptor) to RFC: generic plugin proxy socket (two-tier registry); image gen = first consumer 2026-06-21 04:16:35 +00:00

core-devops added 1 commit 2026-06-21 04:16:37 +00:00

RFC rev4: re-scope to a GENERIC two-tier plugin proxy socket (capabilities = data); image gen = first Tier-A consumer; supersedes bespoke ProxyImages ... 3c83d5da7c

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

molecule-code-reviewer approved these changes 2026-06-21 05:10:50 +00:00

molecule-code-reviewer left a comment

Member

Copy Link

Copy Source

Design doc review. Generic two-tier socket is sound: capabilities=data, credential boundary stays server-side, anti-leak (fail-closed price gate + load-time fallback invariant) carried into the impl (CP #880, merged). LGTM.

Design doc review. Generic two-tier socket is sound: capabilities=data, credential boundary stays server-side, anti-leak (fail-closed price gate + load-time fallback invariant) carried into the impl (CP #880, merged). LGTM.

core-security approved these changes 2026-06-21 05:10:51 +00:00

core-security left a comment

Member

Copy Link

Copy Source

Security review of the design. Two-tier split correctly keeps platform-metered curated (no key-exfil/billing-bypass/SSRF) and BYOK isolated. Trust model (org-scoped box cred, keys in CP) is correct. LGTM.

Security review of the design. Two-tier split correctly keeps platform-metered curated (no key-exfil/billing-bypass/SSRF) and BYOK isolated. Trust model (org-scoped box cred, keys in CP) is correct. LGTM.

core-devops merged commit 917e053310 into main 2026-06-21 05:10:53 +00:00

core-devops referenced this pull request 2026-06-21 05:56:09 +00:00

install_plugin: gitea:// source on a PRIVATE repo hangs → 502 (no fast-fail; never reconciles) #3108

core-devops referenced this issue from a commit 2026-06-21 13:04:04 +00:00

fix(csp): allow generated-image R2 host in img-src so image-gen results render

core-devops referenced this pull request 2026-06-21 13:04:24 +00:00

fix(csp): allow generated-image R2 host in img-src so image-gen results render #3128

Sign in to join this conversation.

Reviewers

No Reviewers

molecule-code-reviewer

core-security

Labels

Clear labels

area/ci

CI/CD pipeline issues

do-not-auto-merge

Opt out of autonomous merge-queue merging

kind/infrastructure

Infrastructure-related issues

merge-queue

Ready for serialized Gitea merge queue

merge-queue-hold

Temporarily hold PR in merge queue

platform/go

Go platform test issues

release-blocker

Blocks the staging→main promotion / a release

release-test

security

test-label-sre

tier:high

High risk per dev-sop §SOP-6 — ceo only, 24h cooldown

tier:low

Low risk per dev-sop §SOP-6 — engineers/managers/ceo can approve

tier:medium

Medium risk per dev-sop §SOP-6 — managers/ceo can approve

triage-test

test

wip

Work in progress — do not auto-merge

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

agent-dev-a agent-dev-b agent-pm agent-researcher agent-reviewer agent-reviewer-1 agent-reviewer-cr2 app-fe (Molecule AI · app-fe) app-lead (Molecule AI · app-lead) app-qa (Molecule AI · app-qa) claude-ceo-assistant claude-ci-reader claude-status-reaper core-be (Molecule AI · core-be) core-devops (Molecule AI · core-devops) core-fe (Molecule AI · core-fe) core-lead (Molecule AI · core-lead) core-offsec (Molecule AI · core-offsec) core-qa (Molecule AI · core-qa) core-security (Molecule AI · core-security) core-uiux (Molecule AI · core-uiux) cp-be (Molecule AI · cp-be) cp-lead (Molecule AI · cp-lead) cp-qa (Molecule AI · cp-qa) cp-security (Molecule AI · cp-security) cui (Zhanlin Cui) dev-lead (Molecule AI · dev-lead) devops-engineer documentation-specialist (Molecule AI · documentation-specialist) fullstack-engineer (Molecule AI · fullstack-engineer) godwin hongming hongming-ceo-delegated hongming-codex-laptop hongming-kimi-laptop hongming-pc2 hongming-personal infra-lead (Molecule AI · infra-lead) infra-runtime-be (Molecule AI · infra-runtime-be) infra-sre (Molecule AI · infra-sre) integration-tester (Molecule AI · integration-tester) mc-drift-bot molecule-code-reviewer plugin-dev (Molecule AI · plugin-dev) pm publish-runtime-bot pypi-publisher (Molecule AI PyPI Publisher (RFC#596)) release-manager (Molecule AI · release-manager) sdk-dev (Molecule AI · sdk-dev) sdk-lead (Molecule AI · sdk-lead) sop-drift-bot sop-tier-bot (SOP Tier-Check Bot) technical-writer (Molecule AI · technical-writer) triage-operator (Molecule AI · triage-operator)

No Assignees

3 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: molecule-ai/molecule-core#3105