v0.2.0 — credential storage, workspace guard, job cleanup

Adds optional system credential storage, workspace output protection, and job history cleanup. Existing file-based configurations remain compatible.

• init can store the API key in macOS Keychain, Windows Credential Manager, or Linux Secret Service. MCP caches the credential; detached workers receive it through a private pipe. The OS may request authorization when a new process first accesses a locked or protected credential store.
• init can restrict output files to an existing absolute workspace root, including checks against existing symlink/junction escapes. This is an output guard, not an OS sandbox; reference-image reads are not restricted.
• MCP startup removes succeeded/failed job records older than 7 days. jobRetentionDays: 0 disables automatic cleanup. jobs clean --days 30 --dry-run previews manual cleanup. Generated images and active jobs are preserved.
• Recommended Codex personalization instructions are now one sentence in Chinese and English.

Validation: TypeScript checks, builds, command smoke checks, and packaging passed on Windows/macOS/Linux with Node.js 22 and 24. Actual OS credential-store authorization behavior was not tested, and this release validation made no paid generation requests.

Upgrade:

npm install -g https://github.com/Anti2077/codex-image-gen-plus-plus/releases/latest/download/codex-image-gen-plus-plus.tgz
codex-image-gen-plus-plus init

SHA-256 of the attached package: 2de6ad8652c94d74b4b4b98ea786ee513ccfa45582f1cfeb1395026e640ab464