@pure01fx/dsh-openai-codex-auth 0.10.0 → 0.11.0

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## Unreleased
 
+## 0.11.0
+
+- Removes plugin payload byte ceilings for native and cloud requests, SSE events, WebSocket messages and queues, response accumulation, encrypted replay state, model catalogs, and image data; removes the corresponding transport options, including `maxRequestBodyBytes`. WebSocket disables the underlying `ws` message-size ceiling explicitly.
+- Keeps WebSocket incremental request preparation separate from HTTP serialization, preserving image history across incremental reuse, reconnects, and HTTP fallback.
+- Preserves complete search output and result arrays, processes all inline result images, forwards selected human search context in full, and removes search batch/domain count ceilings and image-tool prompt length ceilings. Protocol validation, service errors, cancellation, retry/session lifecycle controls, and DSH attachment/file policies still apply.
+
+## 0.10.1
+
+- Targets DSH 0.1.5-rc.1 with exact SDK peers and runtime helpers; migrates Responses tool calls to ToolCallId.
+- Keeps browser-local model hiding active during catalog, selection projection, and reconnection updates, filtering before subscribers receive snapshots.
+- Accepts the real Node/ws successful send callback (`null`), avoiding false WebSocket send failures and unintended HTTP fallback; replaces the local ws declaration with official types and handles bounded RawData variants.
+- Adds actual target directory and LLM/tools service protocol regression coverage. Older DSH releases are not claimed by this candidate.
+
 ## 0.10.0
 
 ### Codex cloud tools

package/CODEX-COMPATIBILITY.md

@@ -1,6 +1,12 @@
 # Codex 云端能力兼容性跟踪
 
-## 当前实现与验证边界
+## DSH 0.1.5-rc.1 版本适配
+
+`0.10.1` 迁移 ToolCallId、精确 SDK 依赖和客户端服务提供包，隐藏策略在目录发布投影之前执行。`tests/target-directory.spec.ts` 执行官方 shell 的真实 store/Zustand/Immer 与目标目录/catalog 类，使用合成 Remote 响应和投影输入；这不是浏览器联合验收。`tests/target-services.spec.ts` 使用真实 Cordis/LlmRuntime/ToolRuntime、真实 loopback HTTP/SSE/WebSocket，验证工具 ID、工具执行、含加密 reasoning 的历史回放、永久错误和取消，并确认 WS 没有偷偷回退 HTTP。实际 socket 测试也修复了 ws 成功回调为 null 时的误判。
+
+该版本不运行真实 OAuth、账号刷新或付费请求，不改写既有用户数据；旧版兼容性不在声明范围。下面的线上账号结果来自原 0.10.0 验证，不能视作本版本的新验证。升级/回滚建议见 README。
+
+## 原 0.10.0 实现与验证边界
 
 本次范围为已确认的非语音 Codex 云端服务。参考上游 b348fc26674189f758d5941cdab3f78f258b2aa7（cloud 专用跟踪常量在 src/upstream.ts）；原 Provider 协议基线仍单独保留。四个工具是普通 DSH function 工具，不依赖专用模式，不覆盖现有工具。
 

package/README.md

@@ -17,7 +17,11 @@
 
 ## 快速开始
 
-当前 `0.10.0` 版本要求 DeepSeek Harness `0.1.1-rc.2`；仍运行 DSH `0.1.0-rc.6` 的 profile 应继续使用插件 `0.6.1`。
+版本 `0.11.0` 明确适配 DeepSeek Harness `0.1.5-rc.1`，SDK peers/runtime helpers 精确锁定该版本；不声明兼容旧 SDK。旧 DSH `0.1.1-rc.2` profile 应保留原插件 `0.10.0`，升级时在独立 profile 安装新版插件并保留原 profile/锁文件以便回滚。无需迁移账号文件或浏览器隐藏列表；`dsh.engines` 仅作兼容性说明，不当作宿主硬门禁。
+
+本版本通过真实目标 LLM/tools 服务与本地 HTTP/SSE/WebSocket 回放、错误/取消回归；模型隐藏覆盖真实目录/catalog/store 的投影更新、重连和重新加载。验证命令为 `pnpm typecheck && pnpm build && pnpm test`；当前版本未执行线上 OAuth/付费模型验收。
+
+`0.11.0` 移除了插件额外设置的请求、响应、SSE/WebSocket、图片和重放状态大小上限，以及相应的 transport 选项（含 `maxRequestBodyBytes`）；旧配置中的该字段应删除。搜索结果完整保留，WebSocket 继续优先复用增量上下文。服务端限制、协议校验及 DSH 文件/附件策略仍生效。
 
 将插件安装到 DSH 的 `web` profile：
 

package/client.js

@@ -112,6 +112,9 @@ window.__ModuleLoader__.load({
           dispose: directory.dispose,
           wrappedLoad: undefined,
           wrappedDispose: undefined,
+          set: directory.store && directory.store.set,
+          wrappedSet: undefined,
+          visibleGroups: undefined,
           generation: 0,
           rawGroups: directory.store && typeof directory.store.getSnapshot === 'function'
             ? directory.store.getSnapshot().groups : [],
@@ -124,15 +127,30 @@ window.__ModuleLoader__.load({
             const groups = visibleModelGroups(rawGroups)
             return value && typeof value === 'object' ? { ...value, groups } : value
           }
-          record.rawGroups = rawGroups
+          if (rawGroups !== record.visibleGroups) record.rawGroups = rawGroups
           const groups = render(directory, record.rawGroups)
+          record.visibleGroups = groups
           return value && typeof value === 'object' ? { ...value, groups } : value
         }
         record.wrappedDispose = function (...args) {
           ++record.generation
           tracked.delete(directory)
+          if (directory.store.set === record.wrappedSet) directory.store.set = record.set
           return record.dispose.apply(this, args)
         }
+        // Target ModelDirectory publishes catalog/selection/reconnect snapshots through set.
+        // Filter before publication so no subscriber can observe a hidden row.
+        if (typeof record.set === 'function') {
+          record.wrappedSet = function (state) {
+            if (state.groups !== record.visibleGroups) record.rawGroups = state.groups
+            const available = codexModels(record.rawGroups)
+            if (available.length > 0) writeAvailableModels(available)
+            const groups = visibleModelGroups(record.rawGroups)
+            record.visibleGroups = groups
+            return record.set.call(this, { ...state, groups })
+          }
+          directory.store.set = record.wrappedSet
+        }
         directory.load = record.wrappedLoad
         directory.dispose = record.wrappedDispose
         tracked.set(directory, record)
@@ -148,7 +166,9 @@ window.__ModuleLoader__.load({
         for (const directory of resolver.live.directories.values()) track(directory)
       }
       const refresh = () => {
-        for (const [directory, record] of tracked) render(directory, record.rawGroups)
+        for (const [directory, record] of tracked) {
+          record.visibleGroups = render(directory, record.rawGroups)
+        }
       }
       window.addEventListener(MODEL_VISIBILITY_EVENT, refresh)
 
@@ -159,6 +179,7 @@ window.__ModuleLoader__.load({
           ++record.generation
           if (directory.load === record.wrappedLoad) directory.load = record.load
           if (directory.dispose === record.wrappedDispose) directory.dispose = record.dispose
+          if (directory.store.set === record.wrappedSet) directory.store.set = record.set
         }
         tracked.clear()
       }

package/lib/catalog.js

@@ -8,7 +8,6 @@ export const CODEX_MODELS_URL = 'https://chatgpt.com/backend-api/codex/models';
 export const CODEX_CATALOG_CACHE_TTL_MS = 5 * 60_000;
 const CODEX_CATALOG_MAX_STALE_MS = 7 * 24 * 60 * 60_000;
 const CODEX_CATALOG_TIMEOUT_MS = 5_000;
-const MAX_CATALOG_BODY_LENGTH = 2 * 1024 * 1024;
 const ORIGINATOR = 'dsh';
 class CatalogFetchError extends LlmError {
     allowsStale;
@@ -92,7 +91,7 @@ function parseServiceTiers(value) {
     }
     return tiers;
 }
-async function boundedResponseText(response) {
+async function responseText(response) {
     if (response.body === null)
         return '';
     const reader = response.body.getReader();
@@ -104,10 +103,6 @@ async function boundedResponseText(response) {
             if (done)
                 break;
             total += value.byteLength;
-            if (total > MAX_CATALOG_BODY_LENGTH) {
-                await reader.cancel();
-                throw new CatalogFetchError('native Codex catalog response exceeded the size limit', 'CATALOG_INVALID_RESPONSE', true);
-            }
             chunks.push(value);
         }
     }
@@ -366,7 +361,7 @@ export class NativeCodexCatalog {
             }
             let body;
             try {
-                body = await boundedResponseText(response);
+                body = await responseText(response);
             }
             catch (error) {
                 if (error instanceof CatalogFetchError)

package/lib/cloud-context.d.ts

@@ -13,7 +13,7 @@ export declare function chooseCloudModel(params: {
 export declare function visibleCloudImages(messages: readonly Message[]): ImageAttachmentRef[];
 /** Last two human texts plus intervening visible assistant text. UTF-8 bytes conservatively
  * upper-bound byte-level tokenizer tokens; a single 1000-byte assistant budget avoids
- * relying on an unavailable model tokenizer. User text has a separate 64 KiB cap. */
+ * relying on an unavailable model tokenizer. The selected human texts are preserved in full. */
 export declare function recentSearchInput(messages: readonly Message[]): {
     role: 'user' | 'assistant';
     content: string;

package/lib/cloud-context.js

@@ -61,14 +61,13 @@ function boundedText(text, bytes, tail = false) {
 }
 /** Last two human texts plus intervening visible assistant text. UTF-8 bytes conservatively
  * upper-bound byte-level tokenizer tokens; a single 1000-byte assistant budget avoids
- * relying on an unavailable model tokenizer. User text has a separate 64 KiB cap. */
+ * relying on an unavailable model tokenizer. The selected human texts are preserved in full. */
 export function recentSearchInput(messages) {
     const users = messages.map((message, i) => message.role === 'user' && message.source.kind === 'user' && message.content.some(block => block.type === 'text') ? i : -1).filter(i => i >= 0).slice(-2);
     if (!users.length)
         return [];
     const selected = [];
     let assistantBytes = 1000;
-    let userBytes = 64 * 1024;
     // Budget newest text first, then restore chronology.
     for (let i = messages.length - 1; i >= users[0]; i--) {
         const message = messages[i];
@@ -76,12 +75,10 @@ export function recentSearchInput(messages) {
         if (!user && (message.role !== 'assistant' || message.source.kind !== 'model'))
             continue;
         const text = message.content.filter(block => block.type === 'text').map(block => block.text).join('\n');
-        const content = boundedText(text, user ? userBytes : assistantBytes, true);
+        const content = user ? text : boundedText(text, assistantBytes, true);
         if (!content)
             continue;
-        if (user)
-            userBytes -= Buffer.byteLength(content);
-        else
+        if (!user)
             assistantBytes -= Buffer.byteLength(content);
         selected.push({ role: user ? 'user' : 'assistant', content });
     }

package/lib/cloud-http.d.ts

@@ -5,15 +5,12 @@ export interface NativeCodexCloudOptions {
     fetch?: typeof fetch;
     endpoint?: string;
     requestTimeoutMs?: number;
-    maxRequestBodyBytes?: number;
-    maxResponseBytes?: number;
 }
 export interface NativeCodexCloudPostOptions {
     credential: NativeCodexCredential;
     signal: AbortSignal;
     headers?: Record<string, string>;
     timeoutMs?: number;
-    maxResponseBytes?: number;
 }
 export type NativeCodexCloudPath = 'alpha/search' | 'images/generations' | 'images/edits';
 export declare class NativeCodexCloudClient {

package/lib/cloud-http.js

@@ -1,4 +1,4 @@
-/** Bounded, nonstreaming Codex cloud requests. Never retry ambiguous POST failures. */
+/** Nonstreaming Codex cloud requests. Never retry ambiguous POST failures. */
 import { attributionHeaders, LlmError } from '@deepseek-ai/dsh-llm';
 import { nativeCodexEndpoint } from './endpoint.js';
 const fail = (message, code = 'CODEX_CLOUD_FAILED') => new LlmError(message, code);
@@ -54,8 +54,6 @@ export class NativeCodexCloudClient {
         if (!['alpha/search', 'images/generations', 'images/edits'].includes(path))
             throw fail('Invalid Codex cloud path', 'INVALID_ARGS');
         const timeoutMs = positive(options.timeoutMs ?? this.options.requestTimeoutMs, 120_000);
-        const maxBytes = positive(options.maxResponseBytes ?? this.options.maxResponseBytes, 48 * 1024 * 1024);
-        const requestLimit = positive(this.options.maxRequestBodyBytes, 48 * 1024 * 1024);
         let encoded;
         try {
             encoded = JSON.stringify(body);
@@ -63,8 +61,8 @@ export class NativeCodexCloudClient {
         catch {
             throw fail('Invalid cloud JSON request', 'INVALID_ARGS');
         }
-        if (typeof encoded !== 'string' || Buffer.byteLength(encoded) > requestLimit)
-            throw fail('Cloud request exceeds byte limit', 'INVALID_ARGS');
+        if (typeof encoded !== 'string')
+            throw fail('Invalid cloud JSON request', 'INVALID_ARGS');
         let credential = credentialCopy(options.credential);
         const accountId = credential.accountId;
         const controller = new AbortController();
@@ -118,11 +116,7 @@ export class NativeCodexCloudClient {
                 if (!reader)
                     throw fail('Codex cloud response is empty');
                 const chunks = [];
-                let size = 0;
                 try {
-                    const declared = response.headers.get('content-length');
-                    if (declared !== null && Number(declared) > maxBytes)
-                        throw fail('Codex cloud response exceeds byte limit');
                     while (true) {
                         let part;
                         try {
@@ -133,9 +127,6 @@ export class NativeCodexCloudClient {
                         }
                         if (part.done)
                             break;
-                        size += part.value.byteLength;
-                        if (size > maxBytes)
-                            throw fail('Codex cloud response exceeds byte limit');
                         chunks.push(part.value);
                     }
                 }

package/lib/cloud-images.d.ts

@@ -1,6 +1,5 @@
-/** Pure image endpoint validation and bounded decoding. */
+/** Pure image endpoint validation and decoding. */
 import type { ImageMediaType } from '@deepseek-ai/dsh-attachment';
-export declare const MAX_IMAGE_BYTES: number;
 export type ImageSource = {
     attachment_id: string;
 } | {
@@ -36,7 +35,7 @@ export declare function buildImageEditRequest(value: unknown, images: readonly {
     size: string;
     n?: number;
 };
-export declare function decodeImageBase64(value: unknown, maxBytes?: number): Uint8Array;
+export declare function decodeImageBase64(value: unknown): Uint8Array;
 export declare function imageMediaType(data: Uint8Array): ImageMediaType;
 export interface ParsedCloudImage {
     data: Uint8Array;

package/lib/cloud-images.js

@@ -1,12 +1,11 @@
-export const MAX_IMAGE_BYTES = 32 * 1024 * 1024;
 function object(value, label) {
     if (!value || typeof value !== 'object' || Array.isArray(value))
         throw new Error(label + ' must be an object');
     return value;
 }
-function text(value, label, max = 32_000) {
-    if (typeof value !== 'string' || !value.trim() || value.length > max)
-        throw new Error(label + ' must be a nonempty bounded string');
+function text(value, label, max) {
+    if (typeof value !== 'string' || !value.trim() || (max !== undefined && value.length > max))
+        throw new Error(label + ' must be a valid nonempty string');
     return value;
 }
 function count(value, label, max) {
@@ -68,16 +67,14 @@ export function buildImageEditRequest(value, images, defaultModel) {
     }
     return { ...validateImageGenerateArgs(value, defaultModel), images: images.map(({ image_url }) => ({ image_url })) };
 }
-export function decodeImageBase64(value, maxBytes = MAX_IMAGE_BYTES) {
-    const cap = Math.min(maxBytes, MAX_IMAGE_BYTES);
-    if (typeof value !== 'string' || !value.length || value.length > 4 * Math.ceil(cap / 3))
-        throw new Error('Image base64 is empty or exceeds byte limit');
-    // Check length before scanning or allocating the decoded payload.
+export function decodeImageBase64(value) {
+    if (typeof value !== 'string' || !value.length)
+        throw new Error('Image base64 is empty');
     if (value.length % 4 !== 0 || /[^A-Za-z0-9+/=]/.test(value) || !/^[A-Za-z0-9+/]*={0,2}$/.test(value))
         throw new Error('Invalid image base64');
     const data = Buffer.from(value, 'base64');
-    if (!data.length || data.length > cap || data.toString('base64') !== value)
-        throw new Error('Invalid image base64 or byte limit exceeded');
+    if (!data.length || data.toString('base64') !== value)
+        throw new Error('Invalid image base64');
     return data;
 }
 export function imageMediaType(data) {
@@ -108,11 +105,9 @@ export function parseImageResponse(value, requestId) {
         metadata.size = text(response.size, 'response size', 64);
     if (requestId !== undefined)
         metadata.request_id = text(requestId, 'request_id', 512);
-    let total = 0;
     const images = response.data.map((entry) => {
         const item = object(entry, 'Image response data');
-        const data = decodeImageBase64(item.b64_json, MAX_IMAGE_BYTES - total);
-        total += data.length;
+        const data = decodeImageBase64(item.b64_json);
         const generation_id = item.generation_id == null ? undefined : text(item.generation_id, 'generation_id', 512);
         // Unknown fields may contain payloads or private service state; never copy them to history.
         return { data, mediaType: imageMediaType(data), metadata: generation_id === undefined ? {} : { generation_id },

package/lib/cloud-media.js

@@ -2,7 +2,7 @@
 import { randomUUID } from 'node:crypto';
 import { posix, win32 } from 'node:path';
 import { imageSize } from 'image-size';
-import { MAX_IMAGE_BYTES, imageMediaType, validateImageSelection } from './cloud-images.js';
+import { imageMediaType, validateImageSelection } from './cloud-images.js';
 // Check both process-world grammars without resolving against the plugin host OS.
 function absoluteWorldPath(path) {
     return !path.includes('\0') && (posix.isAbsolute(path) || (win32.isAbsolute(path) && /^[A-Za-z]:|^\\\\[^\\]+\\[^\\]+/.test(path)));
@@ -25,7 +25,6 @@ export async function resolveImageSources(value, deps) {
         if ('attachment_id' in source && !refs.has(source.attachment_id))
             throw new Error('Image attachment is not visible in this session: ' + source.attachment_id);
     const result = [];
-    let total = 0;
     for (const source of sources) {
         deps.signal?.throwIfAborted();
         let data;
@@ -33,8 +32,8 @@ export async function resolveImageSources(value, deps) {
         let path;
         if ('attachment_id' in source) {
             attachment = refs.get(source.attachment_id);
-            if (!Number.isSafeInteger(attachment.bytes) || attachment.bytes <= 0 || attachment.bytes > MAX_IMAGE_BYTES - total)
-                throw new Error('Image inputs exceed byte limit');
+            if (!Number.isSafeInteger(attachment.bytes) || attachment.bytes <= 0)
+                throw new Error('Invalid image byte count');
             const stored = await deps.attachments.readImage(attachment, deps.signal);
             data = stored.data;
             if (stored.ref.attachmentId !== attachment.attachmentId || stored.ref.bytes !== attachment.bytes ||
@@ -46,12 +45,12 @@ export async function resolveImageSources(value, deps) {
             if (!absoluteWorldPath(source.path))
                 throw new Error('Image path must be absolute');
             const target = await deps.fs.resolve(source.path, { cwd: deps.workspace, ...(deps.signal ? { signal: deps.signal } : {}) });
-            data = await deps.fs.readBytes(target, deps.signal, MAX_IMAGE_BYTES - total);
+            // The filesystem API requires a numeric bound; impose no plugin-specific byte ceiling.
+            data = await deps.fs.readBytes(target, deps.signal, Number.MAX_SAFE_INTEGER);
             path = deps.fs.processPath(target);
         }
-        total += data.length;
-        if (!data.length || total > MAX_IMAGE_BYTES)
-            throw new Error('Image inputs are empty or exceed byte limit');
+        if (!data.length)
+            throw new Error('Image inputs are empty');
         const mediaType = imageMediaType(data);
         await deps.attachments.validateImage({ data, mediaType });
         const dimensions = encodedDimensions(data);
@@ -74,13 +73,11 @@ export async function saveImageOutputs(response, deps) {
         throw new Error('Caller workspace must be absolute');
     if (!deps.policy || !deps.shell.sandboxMode)
         throw new Error('Original image writes require a policy-enforcing DSH shell');
-    let total = 0;
     const dimensions = [];
     for (const image of response.images) {
         deps.signal?.throwIfAborted();
-        total += image.data.length;
-        if (!image.data.length || total > MAX_IMAGE_BYTES)
-            throw new Error('Image outputs exceed byte limit');
+        if (!image.data.length)
+            throw new Error('Image outputs are empty');
         if (imageMediaType(image.data) !== image.mediaType)
             throw new Error('Output media type does not match bytes');
         await deps.attachments.validateImage({ data: image.data, mediaType: image.mediaType });

package/lib/cloud-search.d.ts

@@ -22,7 +22,7 @@ export declare function buildCloudSearchRequest(args: CloudSearchArgs, context:
     model: string;
     input?: unknown;
 }): Record<string, unknown>;
-/** Keep whole opaque result entries and identify any omitted data explicitly. */
+/** Preserve complete output and opaque result entries. */
 export declare function parseCloudSearchResponse(body: unknown): {
     output: string;
     results?: unknown[];

package/lib/cloud-search.js

@@ -1,9 +1,6 @@
 /** Wire contract: Codex b348fc26674189f758d5941cdab3f78f258b2aa7, codex-api/src/search.rs. */
 import { createHash } from 'node:crypto';
 import { LlmError } from '@deepseek-ai/dsh-llm';
-const MAX_REQUEST_BYTES = 256 * 1024;
-const MAX_OUTPUT_BYTES = 128 * 1024;
-const MAX_RESULTS_BYTES = 256 * 1024;
 const invalid = () => new LlmError('Invalid codex_web arguments; check command fields and limits', 'INVALID_ARGS');
 function object(value) {
     if (!value || typeof value !== 'object' || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype)
@@ -11,7 +8,7 @@ function object(value) {
     return value;
 }
 function text(value, empty = false) {
-    if (typeof value !== 'string' || (!empty && !value.trim()) || value.length > MAX_REQUEST_BYTES)
+    if (typeof value !== 'string' || (!empty && !value.trim()))
         throw invalid();
     return value;
 }
@@ -22,7 +19,7 @@ const uint = value => {
     return value;
 };
 const strings = value => {
-    if (!Array.isArray(value) || value.length > 100)
+    if (!Array.isArray(value))
         throw invalid();
     return value.map(item => text(item));
 };
@@ -67,10 +64,9 @@ const operations = {
                 return s;
             } }, required: ['utc_offset'] },
 };
-function boundedRequest(value) {
+function validateRequestJson(value) {
     try {
-        if (Buffer.byteLength(JSON.stringify(value)) > MAX_REQUEST_BYTES)
-            throw invalid();
+        JSON.stringify(value);
     }
     catch {
         throw invalid();
@@ -88,13 +84,13 @@ export function parseCloudSearchArgs(value) {
                     result[key] = choice('short', 'medium', 'long')(items);
                     continue;
                 }
-                if (!Object.hasOwn(operations, key) || !Array.isArray(items) || items.length === 0 || items.length > 100)
+                if (!Object.hasOwn(operations, key) || !Array.isArray(items) || items.length === 0)
                     throw invalid();
                 const operation = operations[key];
                 count += items.length;
                 result[key] = items.map(item => fields(item, operation.rules, operation.required));
             }
-            if (count === 0 || count > 100)
+            if (count === 0)
                 throw invalid();
             return result;
         },
@@ -104,7 +100,7 @@ export function parseCloudSearchArgs(value) {
         filters: value => fields(value, { allowed_domains: strings, blocked_domains: strings }),
         image_settings: value => fields(value, { max_results: uint, caption: bool }),
     }, ['commands']);
-    boundedRequest(parsed);
+    validateRequestJson(parsed);
     return parsed;
 }
 /** The caller selects the model and visible context using the same request credential. */
@@ -122,10 +118,10 @@ export function buildCloudSearchRequest(args, context) {
     if (input !== undefined && typeof input !== 'string' && !Array.isArray(input))
         throw invalid();
     const result = { id, model: text(context.model), commands: parsed.commands, settings, ...(input === undefined ? {} : { input }) };
-    boundedRequest(result);
+    validateRequestJson(result);
     return result;
 }
-/** Keep whole opaque result entries and identify any omitted data explicitly. */
+/** Preserve complete output and opaque result entries. */
 export function parseCloudSearchResponse(body) {
     let data;
     try {
@@ -136,17 +132,10 @@ export function parseCloudSearchResponse(body) {
     }
     if (typeof data.output !== 'string' || (data.results != null && !Array.isArray(data.results)))
         throw new LlmError('Invalid Codex search response', 'CODEX_CLOUD_FAILED');
-    let output = data.output;
-    let truncated = false;
-    if (Buffer.byteLength(output) > MAX_OUTPUT_BYTES) {
-        // Truncate only at complete UTF-8 boundaries; the notice warns that references may be omitted.
-        output = new TextDecoder().decode(Buffer.from(output).subarray(0, MAX_OUTPUT_BYTES)).replace(/\uFFFD$/, '');
-        truncated = true;
-    }
+    const output = data.output;
     let results;
     if (Array.isArray(data.results)) {
         results = [];
-        let bytes = 2;
         for (const item of data.results) {
             let serialized;
             try {
@@ -157,16 +146,8 @@ export function parseCloudSearchResponse(body) {
             }
             if (serialized === undefined)
                 throw new LlmError('Invalid Codex search results', 'CODEX_CLOUD_FAILED');
-            const size = Buffer.byteLength(serialized) + 1;
-            if (results.length >= 100 || bytes + size > MAX_RESULTS_BYTES) {
-                truncated = true;
-                continue;
-            }
             results.push(JSON.parse(serialized));
-            bytes += size;
         }
     }
-    if (truncated)
-        output += '\n[Search response truncated; some content or references were omitted. Narrow the request to retrieve them.]';
-    return { output, ...(results === undefined ? {} : { results }), truncated };
+    return { output, ...(results === undefined ? {} : { results }), truncated: false };
 }

package/lib/cloud-tools.js

@@ -10,7 +10,7 @@ const imageRefs = { type: 'array', minItems: 1, maxItems: 5, description: 'Image
         ],
     } };
 const common = {
-    prompt: { type: 'string', description: 'Describe the image to generate or the edits to perform.', minLength: 1, maxLength: 32000 },
+    prompt: { type: 'string', description: 'Describe the image to generate or the edits to perform.', minLength: 1 },
     model: { type: 'string', description: 'Optional Codex image model; defaults to configured imageModel or gpt-image-2.' },
     quality: { type: 'string', enum: ['auto', 'low', 'medium', 'high'] },
     background: { type: 'string', enum: ['auto', 'transparent', 'opaque'] },
@@ -105,7 +105,7 @@ export function registerCodexImageTools(ctx, deps) {
             name: 'codex_image_inspect',
             description: 'Ask a Codex vision model to analyze images, OCR, screenshots or charts. This makes one additional cloud inference call, without recursive tools. Use explicit model or configured visionModel for non-Codex callers. Reports effective detail and actual dimensions.',
             parameters: { type: 'object', additionalProperties: false, required: ['prompt', 'images'], properties: {
-                    prompt: { type: 'string', minLength: 1, maxLength: 32000 }, images: imageRefs,
+                    prompt: { type: 'string', minLength: 1 }, images: imageRefs,
                     model: { type: 'string' }, detail: { type: 'string', enum: ['auto', 'low', 'high', 'original'] }, reasoning_effort: { type: 'string' },
                 } },
             output, timeoutMs: 120_000, isConcurrencySafe: () => true,

package/lib/cloud-vision.js

@@ -10,8 +10,8 @@ export function parseCloudVisionArgs(value) {
     const row = value;
     if (Object.keys(row).some(key => !['prompt', 'images', 'model', 'detail', 'reasoning_effort'].includes(key)))
         throw new Error('Unknown vision argument');
-    if (typeof row.prompt !== 'string' || !row.prompt.trim() || Buffer.byteLength(row.prompt) > 32_000)
-        throw new Error('Vision prompt must be a nonempty bounded string');
+    if (typeof row.prompt !== 'string' || !row.prompt.trim())
+        throw new Error('Vision prompt must be a nonempty string');
     const selection = validateImageSelection(row);
     if (!selection.images)
         throw new Error('Vision requires explicit images');
@@ -73,21 +73,13 @@ export async function inspectCloudImages(args, deps) {
                 ...(model.instructionsTemplate === undefined ? {} : { instructionsTemplate: model.instructionsTemplate }),
             } } : {}) });
     const texts = new Map();
-    let visibleBytes = 0;
     let usage;
     let finished = false;
     for await (const chunk of chunks) {
         if (chunk.type === 'tool-call-delta' || (chunk.type === 'block-start' && chunk.blockType === 'tool-call'))
             throw new LlmError('Image inspection returned an unexpected tool call', 'UNSUPPORTED');
-        if (chunk.type === 'text-delta') {
-            visibleBytes += Buffer.byteLength(chunk.text);
-            if (visibleBytes > 128 * 1024)
-                throw new LlmError('Image inspection output exceeded limit', 'RESPONSE_TOO_LARGE');
-        }
         if (chunk.type === 'block-end' && chunk.block.type === 'text') {
             texts.set(chunk.index, chunk.block.text);
-            if ([...texts.values()].reduce((bytes, text) => bytes + Buffer.byteLength(text), 0) > 128 * 1024)
-                throw new LlmError('Image inspection output exceeded limit', 'RESPONSE_TOO_LARGE');
         }
         if (chunk.type === 'usage')
             usage = chunk.usage;

package/lib/cloud-web-tool.js

@@ -22,7 +22,7 @@ const operations = {
     response_length: enumeration('short', 'medium', 'long'),
 };
 const parameters = object({
-    commands: { ...object(operations), description: 'One or more nonempty command arrays; at most 100 operations total. Dependent actions require separate calls. screenshot only supports zero-indexed PDF pages.' },
+    commands: { ...object(operations), description: 'One or more nonempty command arrays. Dependent actions require separate calls. screenshot only supports zero-indexed PDF pages.' },
     model: { ...str, description: 'Explicit Codex catalog model; otherwise cloudTools.searchModel, then current openai-codex model. No guessed fallback.' },
     context: { ...str, description: 'Optional explicit text. Default includes last two visible human texts and at most 1000 UTF-8 bytes of visible assistant text.' },
     mode: enumeration('cached', 'indexed', 'live'), search_context_size: enumeration('low', 'medium', 'high'),
@@ -51,12 +51,8 @@ function inputImage(value) {
 async function admitSearchImages(body, attachments, signal) {
     const images = [];
     const notes = new Set();
-    let seen = 0;
-    let bytes = 0;
-    const visit = async (item, depth) => {
+    const visit = async (item) => {
         signal.throwIfAborted();
-        if (depth > 8)
-            return item;
         if (inputImage(item)) {
             if (publicUrl(item.image_url)) {
                 notes.add('Remote image unavailable: the public DSH web boundary has no binary image retrieval. Image and source links are preserved.');
@@ -69,12 +65,9 @@ async function admitSearchImages(body, attachments, signal) {
             try {
                 if (!attachments)
                     throw new Error('Attachment service unavailable');
-                if (++seen > 4 || match[2].length > 12 * 1024 * 1024)
-                    throw new Error('Image count or byte limit');
                 const data = Buffer.from(match[2], 'base64');
-                bytes += data.length;
-                if (!data.length || bytes > 8 * 1024 * 1024 || data.toString('base64') !== match[2])
-                    throw new Error('Invalid or oversized inline image');
+                if (!data.length || data.toString('base64') !== match[2])
+                    throw new Error('Invalid inline image');
                 signal.throwIfAborted();
                 ref = await attachments.saveImage({ data, mediaType: match[1] });
                 signal.throwIfAborted();
@@ -87,26 +80,23 @@ async function admitSearchImages(body, attachments, signal) {
             // Binary transfer data must not become historical text; unknown fields remain opaque.
             return { ...item, image_url: ref ? '[DSH attachment ' + ref.attachmentId + ']' : '[inline image unavailable]' };
         }
-        // Bounded structural walk permits known content blocks nested in evolving result DTOs.
+        // Visit known content blocks while keeping unknown object fields opaque.
         if (Array.isArray(item)) {
-            if (item.length > 100)
-                return item; // Unknown large arrays stay opaque for bounded parsing.
             const result = [];
             for (const value of item)
-                result.push(await visit(value, depth + 1));
+                result.push(await visit(value));
             return result;
         }
-        if (record(item) && Array.isArray(item.content) && item.content.length <= 100) {
-            return { ...item, content: await visit(item.content, depth + 1) };
+        if (record(item) && Array.isArray(item.content)) {
+            return { ...item, content: await visit(item.content) };
         }
         return item;
     };
     if (!record(body) || !Array.isArray(body.results))
         return { body, images, notes };
-    // Leave excess entries for the response parser to mark explicitly as truncated.
     const results = [];
-    for (let i = 0; i < body.results.length; i++)
-        results.push(i < 100 ? await visit(body.results[i], 0) : body.results[i]);
+    for (const item of body.results)
+        results.push(await visit(item));
     return { body: { ...body, results }, images, notes };
 }
 const markerPrefix = '[codex_web context: ';
@@ -208,7 +198,7 @@ export function registerCodexWeb(ctx, deps) {
             checkReferences(args, messages, id, recent);
             const response = await deps.client.post('alpha/search', body, { credential, signal: exec.signal });
             // Validate the envelope before any attachment write; image bytes are replaced
-            // before the final bounded result projection so large valid images can attach.
+            // before the final result projection so inline images become attachments.
             if (!record(response.body) || typeof response.body.output !== 'string' || (response.body.results != null && !Array.isArray(response.body.results)))
                 throw new LlmError('Invalid Codex search response', 'CODEX_CLOUD_FAILED');
             const media = await admitSearchImages(response.body, agent.ctx.attachments, exec.signal);