@pure01fx/dsh-openai-codex-auth 0.10.1 → 0.11.1

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 ## Unreleased
 
+## 0.11.1
+
+- Adds live network status and process-wide request, retry, and received-payload statistics to the quota panel, distinguishing network activity from model output.
+- Shows a breathing quota indicator during unbounded connection recovery, including while the panel is closed; respects reduced-motion preferences and clears the indicator after recovery, cancellation, or stale status updates.
+- Exposes bounded, content-free telemetry through the protected local network endpoint without additional upstream quota requests or changes to timeout and retry behavior.
+
+## 0.11.0
+
+- Removes plugin payload byte ceilings for native and cloud requests, SSE events, WebSocket messages and queues, response accumulation, encrypted replay state, model catalogs, and image data; removes the corresponding transport options, including `maxRequestBodyBytes`. WebSocket disables the underlying `ws` message-size ceiling explicitly.
+- Keeps WebSocket incremental request preparation separate from HTTP serialization, preserving image history across incremental reuse, reconnects, and HTTP fallback.
+- Preserves complete search output and result arrays, processes all inline result images, forwards selected human search context in full, and removes search batch/domain count ceilings and image-tool prompt length ceilings. Protocol validation, service errors, cancellation, retry/session lifecycle controls, and DSH attachment/file policies still apply.
+
 ## 0.10.1
 
 - Targets DSH 0.1.5-rc.1 with exact SDK peers and runtime helpers; migrates Responses tool calls to ToolCallId.

package/README.md

@@ -17,10 +17,12 @@
 
 ## 快速开始
 
-版本 `0.10.1` 明确适配 DeepSeek Harness `0.1.5-rc.1`，SDK peers/runtime helpers 精确锁定该版本；不声明兼容旧 SDK。旧 DSH `0.1.1-rc.2` profile 应保留原插件 `0.10.0`，升级时在独立 profile 安装新版插件并保留原 profile/锁文件以便回滚。无需迁移账号文件或浏览器隐藏列表；`dsh.engines` 仅作兼容性说明，不当作宿主硬门禁。
+版本 `0.11.1` 明确适配 DeepSeek Harness `0.1.5-rc.1`，SDK peers/runtime helpers 精确锁定该版本；不声明兼容旧 SDK。旧 DSH `0.1.1-rc.2` profile 应保留原插件 `0.10.0`，升级时在独立 profile 安装新版插件并保留原 profile/锁文件以便回滚。无需迁移账号文件或浏览器隐藏列表；`dsh.engines` 仅作兼容性说明，不当作宿主硬门禁。
 
 本版本通过真实目标 LLM/tools 服务与本地 HTTP/SSE/WebSocket 回放、错误/取消回归；模型隐藏覆盖真实目录/catalog/store 的投影更新、重连和重新加载。验证命令为 `pnpm typecheck && pnpm build && pnpm test`；当前版本未执行线上 OAuth/付费模型验收。
 
+`0.11.0` 移除了插件额外设置的请求、响应、SSE/WebSocket、图片和重放状态大小上限，以及相应的 transport 选项（含 `maxRequestBodyBytes`）；旧配置中的该字段应删除。搜索结果完整保留，WebSocket 继续优先复用增量上下文。服务端限制、协议校验及 DSH 文件/附件策略仍生效。
+
 将插件安装到 DSH 的 `web` profile：
 
 ```sh

package/client.js

@@ -225,6 +225,8 @@ window.__ModuleLoader__.load({
       .codexQuotaTrack{fill:none;stroke:var(--dsw-alias-border-l3);stroke-width:2px}.codexQuotaAvailable{fill:none;stroke:var(--dsw-alias-state-success-primary);stroke-width:2px;stroke-linecap:round;transition:stroke .25s ease,stroke-dasharray .25s ease,stroke-dashoffset .25s ease}.codexQuotaAvailable.high{stroke:var(--dsw-alias-state-warn-label)}.codexQuotaAvailable.critical{stroke:var(--dsw-alias-state-error-primary)}.codexQuotaLoading{animation:codexQuotaPulse .8s ease-in-out infinite alternate}
       .codexQuotaPanel{z-index:100;box-sizing:border-box;width:272px;border:1px solid var(--dsw-alias-border-inverted);border-radius:12px;padding:12px;background:var(--dsw-specific-menu);box-shadow:var(--dsw-shadow-lv3);color:var(--dsw-alias-label-secondary);cursor:default;font-size:12px;line-height:20px;position:absolute;right:0;bottom:calc(100% + 8px)}.codexQuotaPanelHead{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:8px}.codexQuotaPanelHead strong{color:var(--dsw-alias-label-primary);font-size:13px;font-weight:500}.codexQuotaPanelHead span{color:var(--dsw-alias-label-tertiary)}
       .codexQuotaWindow{padding:7px 0}.codexQuotaWindow+.codexQuotaWindow{border-top:1px solid var(--dsw-alias-border-l2)}.codexQuotaWindowHead{display:flex;align-items:center;justify-content:space-between;gap:10px}.codexQuotaWindowHead strong{font-weight:500;color:var(--dsw-alias-label-secondary)}.codexQuotaWindowHead span{font-variant-numeric:tabular-nums;color:var(--dsw-alias-label-primary)}.codexQuotaBar{height:4px;margin:6px 0;border-radius:999px;overflow:hidden;background:var(--dsw-alias-interactive-bg-hover)}.codexQuotaBarFill{height:100%;border-radius:inherit;background:var(--dsw-alias-state-success-primary)}.codexQuotaBarFill.high{background:var(--dsw-alias-state-warn-label)}.codexQuotaBarFill.critical{background:var(--dsw-alias-state-error-primary)}.codexQuotaReset{color:var(--dsw-alias-label-tertiary)}.codexQuotaMessage{margin:4px 0;color:var(--dsw-alias-label-tertiary)}.codexQuotaMessage.error{color:var(--dsw-alias-state-error-primary)}
+      .codexNetwork{margin-top:8px;padding-top:10px;border-top:1px solid var(--dsw-alias-border-l2)}.codexNetworkHead,.codexNetworkRow{display:flex;align-items:baseline;justify-content:space-between;gap:12px}.codexNetworkHead{margin-bottom:5px}.codexNetworkHead strong{font-weight:500;color:var(--dsw-alias-label-primary)}.codexNetworkRow>span:first-child,.codexNetworkScope{color:var(--dsw-alias-label-tertiary)}.codexNetworkRow>span:last-child{font-variant-numeric:tabular-nums;text-align:right}.codexNetworkScope{margin:6px 0 0;font-size:11px;line-height:16px}.codexNetworkWarning{color:var(--dsw-alias-state-warn-label)}.codexQuotaPanel{max-height:min(680px,75vh);overflow-y:auto;width:min(300px,calc(100vw - 24px))}
+      .codexQuotaReconnecting .codexQuotaTrigger svg,.codexQuotaReconnecting .codexQuotaBarFill{animation:codexReconnectBreath 2s ease-in-out infinite}.codexQuotaReconnecting .codexQuotaTrack,.codexQuotaReconnecting .codexQuotaAvailable{stroke:var(--dsw-alias-state-warn-label)}@keyframes codexReconnectBreath{0%,100%{opacity:1}50%{opacity:.3}}@media(prefers-reduced-motion:reduce){.codexQuotaReconnecting .codexQuotaTrigger svg,.codexQuotaReconnecting .codexQuotaBarFill{animation:none}}
       @keyframes codexPulse{to{background-position:-200% 0}}@keyframes codexQuotaPulse{to{opacity:.35}}@media(prefers-reduced-motion:reduce){.codexSkeleton,.codexQuotaLoading{animation:none}}@media(max-width:620px){.codexHero{padding:14px;flex-direction:column}.codexBody{padding:14px}.codexGrid,.codexModelVisibilityList{grid-template-columns:1fr}.codexAccountOption{align-items:stretch;flex-direction:column;gap:10px}.codexAccountActions{align-self:flex-start}.codexCode{font-size:20px}}
     `
     if (typeof document !== 'undefined' && document.querySelector('style[data-plugin="' + PLUGIN_ID + '"]') === null) {
@@ -408,10 +410,120 @@ window.__ModuleLoader__.load({
       )
     }
 
+    function networkDuration(ms) {
+      const seconds = Math.max(0, Math.floor(ms / 1000))
+      if (seconds < 60) return seconds + ' 秒'
+      return Math.floor(seconds / 60) + ' 分 ' + seconds % 60 + ' 秒'
+    }
+
+    function networkBytes(bytes) {
+      if (bytes < 1024) return Math.round(bytes) + ' B'
+      if (bytes < 1048576) return (bytes / 1024).toFixed(1) + ' KB'
+      return (bytes / 1048576).toFixed(1) + ' MB'
+    }
+
+    function networkSummary(snapshot) {
+      const active = snapshot.requests.filter((request) => !['completed', 'failed', 'cancelled'].includes(request.state))
+      const priority = { retrying: 0, waiting: 1, connecting: 2, preparing: 3, streaming: 4 }
+      const current = active.sort((a, b) => priority[a.state] - priority[b.state] || a.startedAt - b.startedAt)[0]
+        || snapshot.requests.slice().sort((a, b) => b.startedAt - a.startedAt)[0]
+      const labels = { preparing: '准备请求', connecting: '连接中', waiting: '等待响应', streaming: '接收中', retrying: '等待重试', completed: '最近请求已完成', failed: '最近请求失败', cancelled: '最近请求已取消' }
+      const stalled = current && current.state === 'streaming' && snapshot.updatedAt - (current.lastActivityAt || current.startedAt) >= 10000
+      return { current, label: stalled ? '等待后续数据' : current ? labels[current.state] || '状态未知' : '尚无请求', active: active.length > 0 }
+    }
+
+    function useNetworkStats(enabled) {
+      const [sample, setSample] = useState(null)
+      const [error, setError] = useState('')
+      useEffect(() => {
+        if (!enabled) return undefined
+        let disposed = false
+        let timer
+        let controller
+        let timeout
+        let previous
+        const poll = async () => {
+          if (disposed || document.visibilityState === 'hidden') return
+          controller = new AbortController()
+          timeout = window.setTimeout(() => controller.abort(), 5000)
+          try {
+            const response = await fetch(BASE + '/network', { cache: 'no-store', signal: controller.signal })
+            if (!response.ok) throw new Error('HTTP ' + response.status)
+            const snapshot = await response.json()
+            if (!snapshot.totals || !Array.isArray(snapshot.requests)) throw new Error('网络统计暂不可用')
+            const elapsed = previous && snapshot.updatedAt - previous.updatedAt
+            const delta = previous && snapshot.totals.receivedBytes - previous.totals.receivedBytes
+            const rate = previous && previous.startedAt === snapshot.startedAt && elapsed > 0 && delta >= 0
+              ? delta * 1000 / elapsed : null
+            previous = snapshot
+            if (!disposed) { setSample({ snapshot, rate }); setError('') }
+          } catch (failure) {
+            if (!disposed) setError('网络状态更新失败（' + messageOf(failure) + '）')
+          } finally {
+            window.clearTimeout(timeout)
+            controller = null
+            if (!disposed) timer = window.setTimeout(poll, 2000)
+          }
+        }
+        const onVisibility = () => {
+          if (document.visibilityState !== 'hidden' && !controller) {
+            window.clearTimeout(timer)
+            previous = null
+            void poll()
+          }
+        }
+        void poll()
+        document.addEventListener('visibilitychange', onVisibility)
+        return () => {
+          disposed = true
+          window.clearTimeout(timer)
+          window.clearTimeout(timeout)
+          if (controller) controller.abort()
+          document.removeEventListener('visibilitychange', onVisibility)
+        }
+      }, [enabled])
+      return { sample, error }
+    }
+
+    function networkReconnecting(network) {
+      return !network.error && network.sample && network.sample.snapshot.requests.some((request) =>
+        request.retryKind === 'connection' && ['retrying', 'preparing', 'connecting'].includes(request.state))
+    }
+
+    function CodexNetworkStats({ sample, error }) {
+      const snapshot = sample && sample.snapshot
+      const summary = snapshot && networkSummary(snapshot)
+      const current = summary && summary.current
+      const row = (label, value) => h('div', { className: 'codexNetworkRow', key: label }, h('span', null, label), h('span', null, value))
+      return h('section', { className: 'codexNetwork', 'aria-label': 'Codex 网络状态' },
+        h('div', { className: 'codexNetworkHead' }, h('strong', null, '网络'),
+          h('span', { className: error ? 'codexNetworkWarning' : '' }, error ? sample ? '数据已过期' : '读取失败' : summary ? summary.label : '读取中…')),
+        error ? h('p', { className: 'codexQuotaMessage error', role: 'status' }, error) : null,
+        snapshot ? h(React.Fragment, null,
+          row('进行中', snapshot.activeCount + ' 个请求'),
+          current ? row('传输', current.transport === 'websocket' ? 'WebSocket' : 'HTTP / SSE') : null,
+          summary.active && current ? h(React.Fragment, null,
+            row('本次已等待', networkDuration(snapshot.updatedAt - current.startedAt)),
+            row('最近收包', current.lastActivityAt === null ? '尚未收到' : networkDuration(snapshot.updatedAt - current.lastActivityAt) + '前'),
+            row('最近输出', current.lastOutputAt === null ? '尚无输出' : networkDuration(snapshot.updatedAt - current.lastOutputAt) + '前'),
+            current.state === 'retrying' && current.retryAt !== null ? row('下次重试', networkDuration(current.retryAt - snapshot.updatedAt) + '后') : null,
+            row('本次尝试 / 重试', current.attempts + ' / ' + current.retries),
+          ) : null,
+          row('接收速率', error || sample.rate === null ? '—' : networkBytes(sample.rate) + '/s'),
+          row('累计接收', networkBytes(snapshot.totals.receivedBytes)),
+          row('请求 / 成功 / 失败', snapshot.totals.requests + ' / ' + snapshot.totals.succeeded + ' / ' + snapshot.totals.failed),
+          row('累计重试 / 取消', snapshot.totals.retries + ' / ' + snapshot.totals.cancelled),
+          h('p', { className: 'codexNetworkScope' }, '本次加载以来 · 所有会话的原生 Codex 请求。接收量为响应及心跳载荷，不含协议开销。' + (snapshot.activeCount > 1 ? '上方显示优先等待的请求。' : '') + (snapshot.truncated ? '仅保留最近请求明细。' : '')),
+        ) : null,
+      )
+    }
+
     function CodexQuotaRing(props) {
       const running = props.useSession((snapshot) => snapshot.running)
       const status = useSharedStatus()
       const [open, setOpen] = useState(false)
+      const network = useNetworkStats(Boolean(status && status.loggedIn))
+      const reconnecting = networkReconnecting(network)
       const [loading, setLoading] = useState(false)
       const [error, setError] = useState('')
       const rootRef = useRef(null)
@@ -462,7 +574,7 @@ window.__ModuleLoader__.load({
       const used = meter ? Math.max(0, Math.min(100, Number(meter.usedPercent) || 0)) : 0
       const remaining = Math.max(0, 100 - used)
       const reading = meter ? Math.round(remaining) + '%' : '待更新'
-      const title = loading ? '正在刷新 Codex 额度' : 'Codex 额度剩余 ' + reading + '；点击刷新'
+      const title = reconnecting ? 'Codex 网络不可用，正在持续重连' : loading ? '正在刷新 Codex 额度' : 'Codex 额度剩余 ' + reading + '；点击刷新'
       const circumference = 2 * Math.PI * 5.5
       const usedLength = circumference * used / 100
       const remainingLength = circumference - usedLength
@@ -472,7 +584,7 @@ window.__ModuleLoader__.load({
 
       return h('span', {
         ref: rootRef,
-        className: 'codexQuotaRoot',
+        className: 'codexQuotaRoot' + (reconnecting ? ' codexQuotaReconnecting' : ''),
         onMouseEnter: () => { setOpen(true) },
         onMouseLeave: () => { setOpen(false) },
       },
@@ -510,6 +622,7 @@ window.__ModuleLoader__.load({
           windows.length > 0
             ? windows.map((row) => h(QuotaWindow, { key: row.name, name: row.name, window: row.window }))
             : h('p', { className: 'codexQuotaMessage' }, '点击圆圈刷新最新额度。'),
+          h(CodexNetworkStats, network),
           status.usageError ? h('p', { className: 'codexQuotaMessage error', role: 'status' }, '额度读取失败：' + status.usageError) : null,
           error ? h('p', { className: 'codexQuotaMessage error', role: 'status' }, '无法连接额度接口：' + error) : null,
         ) : null,

package/lib/catalog.js

@@ -8,7 +8,6 @@ export const CODEX_MODELS_URL = 'https://chatgpt.com/backend-api/codex/models';
 export const CODEX_CATALOG_CACHE_TTL_MS = 5 * 60_000;
 const CODEX_CATALOG_MAX_STALE_MS = 7 * 24 * 60 * 60_000;
 const CODEX_CATALOG_TIMEOUT_MS = 5_000;
-const MAX_CATALOG_BODY_LENGTH = 2 * 1024 * 1024;
 const ORIGINATOR = 'dsh';
 class CatalogFetchError extends LlmError {
     allowsStale;
@@ -92,7 +91,7 @@ function parseServiceTiers(value) {
     }
     return tiers;
 }
-async function boundedResponseText(response) {
+async function responseText(response) {
     if (response.body === null)
         return '';
     const reader = response.body.getReader();
@@ -104,10 +103,6 @@ async function boundedResponseText(response) {
             if (done)
                 break;
             total += value.byteLength;
-            if (total > MAX_CATALOG_BODY_LENGTH) {
-                await reader.cancel();
-                throw new CatalogFetchError('native Codex catalog response exceeded the size limit', 'CATALOG_INVALID_RESPONSE', true);
-            }
             chunks.push(value);
         }
     }
@@ -366,7 +361,7 @@ export class NativeCodexCatalog {
             }
             let body;
             try {
-                body = await boundedResponseText(response);
+                body = await responseText(response);
             }
             catch (error) {
                 if (error instanceof CatalogFetchError)

package/lib/cloud-context.d.ts

@@ -13,7 +13,7 @@ export declare function chooseCloudModel(params: {
 export declare function visibleCloudImages(messages: readonly Message[]): ImageAttachmentRef[];
 /** Last two human texts plus intervening visible assistant text. UTF-8 bytes conservatively
  * upper-bound byte-level tokenizer tokens; a single 1000-byte assistant budget avoids
- * relying on an unavailable model tokenizer. User text has a separate 64 KiB cap. */
+ * relying on an unavailable model tokenizer. The selected human texts are preserved in full. */
 export declare function recentSearchInput(messages: readonly Message[]): {
     role: 'user' | 'assistant';
     content: string;

package/lib/cloud-context.js

@@ -61,14 +61,13 @@ function boundedText(text, bytes, tail = false) {
 }
 /** Last two human texts plus intervening visible assistant text. UTF-8 bytes conservatively
  * upper-bound byte-level tokenizer tokens; a single 1000-byte assistant budget avoids
- * relying on an unavailable model tokenizer. User text has a separate 64 KiB cap. */
+ * relying on an unavailable model tokenizer. The selected human texts are preserved in full. */
 export function recentSearchInput(messages) {
     const users = messages.map((message, i) => message.role === 'user' && message.source.kind === 'user' && message.content.some(block => block.type === 'text') ? i : -1).filter(i => i >= 0).slice(-2);
     if (!users.length)
         return [];
     const selected = [];
     let assistantBytes = 1000;
-    let userBytes = 64 * 1024;
     // Budget newest text first, then restore chronology.
     for (let i = messages.length - 1; i >= users[0]; i--) {
         const message = messages[i];
@@ -76,12 +75,10 @@ export function recentSearchInput(messages) {
         if (!user && (message.role !== 'assistant' || message.source.kind !== 'model'))
             continue;
         const text = message.content.filter(block => block.type === 'text').map(block => block.text).join('\n');
-        const content = boundedText(text, user ? userBytes : assistantBytes, true);
+        const content = user ? text : boundedText(text, assistantBytes, true);
         if (!content)
             continue;
-        if (user)
-            userBytes -= Buffer.byteLength(content);
-        else
+        if (!user)
             assistantBytes -= Buffer.byteLength(content);
         selected.push({ role: user ? 'user' : 'assistant', content });
     }

package/lib/cloud-http.d.ts

@@ -5,15 +5,12 @@ export interface NativeCodexCloudOptions {
     fetch?: typeof fetch;
     endpoint?: string;
     requestTimeoutMs?: number;
-    maxRequestBodyBytes?: number;
-    maxResponseBytes?: number;
 }
 export interface NativeCodexCloudPostOptions {
     credential: NativeCodexCredential;
     signal: AbortSignal;
     headers?: Record<string, string>;
     timeoutMs?: number;
-    maxResponseBytes?: number;
 }
 export type NativeCodexCloudPath = 'alpha/search' | 'images/generations' | 'images/edits';
 export declare class NativeCodexCloudClient {

package/lib/cloud-http.js

@@ -1,4 +1,4 @@
-/** Bounded, nonstreaming Codex cloud requests. Never retry ambiguous POST failures. */
+/** Nonstreaming Codex cloud requests. Never retry ambiguous POST failures. */
 import { attributionHeaders, LlmError } from '@deepseek-ai/dsh-llm';
 import { nativeCodexEndpoint } from './endpoint.js';
 const fail = (message, code = 'CODEX_CLOUD_FAILED') => new LlmError(message, code);
@@ -54,8 +54,6 @@ export class NativeCodexCloudClient {
         if (!['alpha/search', 'images/generations', 'images/edits'].includes(path))
             throw fail('Invalid Codex cloud path', 'INVALID_ARGS');
         const timeoutMs = positive(options.timeoutMs ?? this.options.requestTimeoutMs, 120_000);
-        const maxBytes = positive(options.maxResponseBytes ?? this.options.maxResponseBytes, 48 * 1024 * 1024);
-        const requestLimit = positive(this.options.maxRequestBodyBytes, 48 * 1024 * 1024);
         let encoded;
         try {
             encoded = JSON.stringify(body);
@@ -63,8 +61,8 @@ export class NativeCodexCloudClient {
         catch {
             throw fail('Invalid cloud JSON request', 'INVALID_ARGS');
         }
-        if (typeof encoded !== 'string' || Buffer.byteLength(encoded) > requestLimit)
-            throw fail('Cloud request exceeds byte limit', 'INVALID_ARGS');
+        if (typeof encoded !== 'string')
+            throw fail('Invalid cloud JSON request', 'INVALID_ARGS');
         let credential = credentialCopy(options.credential);
         const accountId = credential.accountId;
         const controller = new AbortController();
@@ -118,11 +116,7 @@ export class NativeCodexCloudClient {
                 if (!reader)
                     throw fail('Codex cloud response is empty');
                 const chunks = [];
-                let size = 0;
                 try {
-                    const declared = response.headers.get('content-length');
-                    if (declared !== null && Number(declared) > maxBytes)
-                        throw fail('Codex cloud response exceeds byte limit');
                     while (true) {
                         let part;
                         try {
@@ -133,9 +127,6 @@ export class NativeCodexCloudClient {
                         }
                         if (part.done)
                             break;
-                        size += part.value.byteLength;
-                        if (size > maxBytes)
-                            throw fail('Codex cloud response exceeds byte limit');
                         chunks.push(part.value);
                     }
                 }

package/lib/cloud-images.d.ts

@@ -1,6 +1,5 @@
-/** Pure image endpoint validation and bounded decoding. */
+/** Pure image endpoint validation and decoding. */
 import type { ImageMediaType } from '@deepseek-ai/dsh-attachment';
-export declare const MAX_IMAGE_BYTES: number;
 export type ImageSource = {
     attachment_id: string;
 } | {
@@ -36,7 +35,7 @@ export declare function buildImageEditRequest(value: unknown, images: readonly {
     size: string;
     n?: number;
 };
-export declare function decodeImageBase64(value: unknown, maxBytes?: number): Uint8Array;
+export declare function decodeImageBase64(value: unknown): Uint8Array;
 export declare function imageMediaType(data: Uint8Array): ImageMediaType;
 export interface ParsedCloudImage {
     data: Uint8Array;

package/lib/cloud-images.js

@@ -1,12 +1,11 @@
-export const MAX_IMAGE_BYTES = 32 * 1024 * 1024;
 function object(value, label) {
     if (!value || typeof value !== 'object' || Array.isArray(value))
         throw new Error(label + ' must be an object');
     return value;
 }
-function text(value, label, max = 32_000) {
-    if (typeof value !== 'string' || !value.trim() || value.length > max)
-        throw new Error(label + ' must be a nonempty bounded string');
+function text(value, label, max) {
+    if (typeof value !== 'string' || !value.trim() || (max !== undefined && value.length > max))
+        throw new Error(label + ' must be a valid nonempty string');
     return value;
 }
 function count(value, label, max) {
@@ -68,16 +67,14 @@ export function buildImageEditRequest(value, images, defaultModel) {
     }
     return { ...validateImageGenerateArgs(value, defaultModel), images: images.map(({ image_url }) => ({ image_url })) };
 }
-export function decodeImageBase64(value, maxBytes = MAX_IMAGE_BYTES) {
-    const cap = Math.min(maxBytes, MAX_IMAGE_BYTES);
-    if (typeof value !== 'string' || !value.length || value.length > 4 * Math.ceil(cap / 3))
-        throw new Error('Image base64 is empty or exceeds byte limit');
-    // Check length before scanning or allocating the decoded payload.
+export function decodeImageBase64(value) {
+    if (typeof value !== 'string' || !value.length)
+        throw new Error('Image base64 is empty');
     if (value.length % 4 !== 0 || /[^A-Za-z0-9+/=]/.test(value) || !/^[A-Za-z0-9+/]*={0,2}$/.test(value))
         throw new Error('Invalid image base64');
     const data = Buffer.from(value, 'base64');
-    if (!data.length || data.length > cap || data.toString('base64') !== value)
-        throw new Error('Invalid image base64 or byte limit exceeded');
+    if (!data.length || data.toString('base64') !== value)
+        throw new Error('Invalid image base64');
     return data;
 }
 export function imageMediaType(data) {
@@ -108,11 +105,9 @@ export function parseImageResponse(value, requestId) {
         metadata.size = text(response.size, 'response size', 64);
     if (requestId !== undefined)
         metadata.request_id = text(requestId, 'request_id', 512);
-    let total = 0;
     const images = response.data.map((entry) => {
         const item = object(entry, 'Image response data');
-        const data = decodeImageBase64(item.b64_json, MAX_IMAGE_BYTES - total);
-        total += data.length;
+        const data = decodeImageBase64(item.b64_json);
         const generation_id = item.generation_id == null ? undefined : text(item.generation_id, 'generation_id', 512);
         // Unknown fields may contain payloads or private service state; never copy them to history.
         return { data, mediaType: imageMediaType(data), metadata: generation_id === undefined ? {} : { generation_id },

package/lib/cloud-media.js

@@ -2,7 +2,7 @@
 import { randomUUID } from 'node:crypto';
 import { posix, win32 } from 'node:path';
 import { imageSize } from 'image-size';
-import { MAX_IMAGE_BYTES, imageMediaType, validateImageSelection } from './cloud-images.js';
+import { imageMediaType, validateImageSelection } from './cloud-images.js';
 // Check both process-world grammars without resolving against the plugin host OS.
 function absoluteWorldPath(path) {
     return !path.includes('\0') && (posix.isAbsolute(path) || (win32.isAbsolute(path) && /^[A-Za-z]:|^\\\\[^\\]+\\[^\\]+/.test(path)));
@@ -25,7 +25,6 @@ export async function resolveImageSources(value, deps) {
         if ('attachment_id' in source && !refs.has(source.attachment_id))
             throw new Error('Image attachment is not visible in this session: ' + source.attachment_id);
     const result = [];
-    let total = 0;
     for (const source of sources) {
         deps.signal?.throwIfAborted();
         let data;
@@ -33,8 +32,8 @@ export async function resolveImageSources(value, deps) {
         let path;
         if ('attachment_id' in source) {
             attachment = refs.get(source.attachment_id);
-            if (!Number.isSafeInteger(attachment.bytes) || attachment.bytes <= 0 || attachment.bytes > MAX_IMAGE_BYTES - total)
-                throw new Error('Image inputs exceed byte limit');
+            if (!Number.isSafeInteger(attachment.bytes) || attachment.bytes <= 0)
+                throw new Error('Invalid image byte count');
             const stored = await deps.attachments.readImage(attachment, deps.signal);
             data = stored.data;
             if (stored.ref.attachmentId !== attachment.attachmentId || stored.ref.bytes !== attachment.bytes ||
@@ -46,12 +45,12 @@ export async function resolveImageSources(value, deps) {
             if (!absoluteWorldPath(source.path))
                 throw new Error('Image path must be absolute');
             const target = await deps.fs.resolve(source.path, { cwd: deps.workspace, ...(deps.signal ? { signal: deps.signal } : {}) });
-            data = await deps.fs.readBytes(target, deps.signal, MAX_IMAGE_BYTES - total);
+            // The filesystem API requires a numeric bound; impose no plugin-specific byte ceiling.
+            data = await deps.fs.readBytes(target, deps.signal, Number.MAX_SAFE_INTEGER);
             path = deps.fs.processPath(target);
         }
-        total += data.length;
-        if (!data.length || total > MAX_IMAGE_BYTES)
-            throw new Error('Image inputs are empty or exceed byte limit');
+        if (!data.length)
+            throw new Error('Image inputs are empty');
         const mediaType = imageMediaType(data);
         await deps.attachments.validateImage({ data, mediaType });
         const dimensions = encodedDimensions(data);
@@ -74,13 +73,11 @@ export async function saveImageOutputs(response, deps) {
         throw new Error('Caller workspace must be absolute');
     if (!deps.policy || !deps.shell.sandboxMode)
         throw new Error('Original image writes require a policy-enforcing DSH shell');
-    let total = 0;
     const dimensions = [];
     for (const image of response.images) {
         deps.signal?.throwIfAborted();
-        total += image.data.length;
-        if (!image.data.length || total > MAX_IMAGE_BYTES)
-            throw new Error('Image outputs exceed byte limit');
+        if (!image.data.length)
+            throw new Error('Image outputs are empty');
         if (imageMediaType(image.data) !== image.mediaType)
             throw new Error('Output media type does not match bytes');
         await deps.attachments.validateImage({ data: image.data, mediaType: image.mediaType });

package/lib/cloud-search.d.ts

@@ -22,7 +22,7 @@ export declare function buildCloudSearchRequest(args: CloudSearchArgs, context:
     model: string;
     input?: unknown;
 }): Record<string, unknown>;
-/** Keep whole opaque result entries and identify any omitted data explicitly. */
+/** Preserve complete output and opaque result entries. */
 export declare function parseCloudSearchResponse(body: unknown): {
     output: string;
     results?: unknown[];

package/lib/cloud-search.js

@@ -1,9 +1,6 @@
 /** Wire contract: Codex b348fc26674189f758d5941cdab3f78f258b2aa7, codex-api/src/search.rs. */
 import { createHash } from 'node:crypto';
 import { LlmError } from '@deepseek-ai/dsh-llm';
-const MAX_REQUEST_BYTES = 256 * 1024;
-const MAX_OUTPUT_BYTES = 128 * 1024;
-const MAX_RESULTS_BYTES = 256 * 1024;
 const invalid = () => new LlmError('Invalid codex_web arguments; check command fields and limits', 'INVALID_ARGS');
 function object(value) {
     if (!value || typeof value !== 'object' || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype)
@@ -11,7 +8,7 @@ function object(value) {
     return value;
 }
 function text(value, empty = false) {
-    if (typeof value !== 'string' || (!empty && !value.trim()) || value.length > MAX_REQUEST_BYTES)
+    if (typeof value !== 'string' || (!empty && !value.trim()))
         throw invalid();
     return value;
 }
@@ -22,7 +19,7 @@ const uint = value => {
     return value;
 };
 const strings = value => {
-    if (!Array.isArray(value) || value.length > 100)
+    if (!Array.isArray(value))
         throw invalid();
     return value.map(item => text(item));
 };
@@ -67,10 +64,9 @@ const operations = {
                 return s;
             } }, required: ['utc_offset'] },
 };
-function boundedRequest(value) {
+function validateRequestJson(value) {
     try {
-        if (Buffer.byteLength(JSON.stringify(value)) > MAX_REQUEST_BYTES)
-            throw invalid();
+        JSON.stringify(value);
     }
     catch {
         throw invalid();
@@ -88,13 +84,13 @@ export function parseCloudSearchArgs(value) {
                     result[key] = choice('short', 'medium', 'long')(items);
                     continue;
                 }
-                if (!Object.hasOwn(operations, key) || !Array.isArray(items) || items.length === 0 || items.length > 100)
+                if (!Object.hasOwn(operations, key) || !Array.isArray(items) || items.length === 0)
                     throw invalid();
                 const operation = operations[key];
                 count += items.length;
                 result[key] = items.map(item => fields(item, operation.rules, operation.required));
             }
-            if (count === 0 || count > 100)
+            if (count === 0)
                 throw invalid();
             return result;
         },
@@ -104,7 +100,7 @@ export function parseCloudSearchArgs(value) {
         filters: value => fields(value, { allowed_domains: strings, blocked_domains: strings }),
         image_settings: value => fields(value, { max_results: uint, caption: bool }),
     }, ['commands']);
-    boundedRequest(parsed);
+    validateRequestJson(parsed);
     return parsed;
 }
 /** The caller selects the model and visible context using the same request credential. */
@@ -122,10 +118,10 @@ export function buildCloudSearchRequest(args, context) {
     if (input !== undefined && typeof input !== 'string' && !Array.isArray(input))
         throw invalid();
     const result = { id, model: text(context.model), commands: parsed.commands, settings, ...(input === undefined ? {} : { input }) };
-    boundedRequest(result);
+    validateRequestJson(result);
     return result;
 }
-/** Keep whole opaque result entries and identify any omitted data explicitly. */
+/** Preserve complete output and opaque result entries. */
 export function parseCloudSearchResponse(body) {
     let data;
     try {
@@ -136,17 +132,10 @@ export function parseCloudSearchResponse(body) {
     }
     if (typeof data.output !== 'string' || (data.results != null && !Array.isArray(data.results)))
         throw new LlmError('Invalid Codex search response', 'CODEX_CLOUD_FAILED');
-    let output = data.output;
-    let truncated = false;
-    if (Buffer.byteLength(output) > MAX_OUTPUT_BYTES) {
-        // Truncate only at complete UTF-8 boundaries; the notice warns that references may be omitted.
-        output = new TextDecoder().decode(Buffer.from(output).subarray(0, MAX_OUTPUT_BYTES)).replace(/\uFFFD$/, '');
-        truncated = true;
-    }
+    const output = data.output;
     let results;
     if (Array.isArray(data.results)) {
         results = [];
-        let bytes = 2;
         for (const item of data.results) {
             let serialized;
             try {
@@ -157,16 +146,8 @@ export function parseCloudSearchResponse(body) {
             }
             if (serialized === undefined)
                 throw new LlmError('Invalid Codex search results', 'CODEX_CLOUD_FAILED');
-            const size = Buffer.byteLength(serialized) + 1;
-            if (results.length >= 100 || bytes + size > MAX_RESULTS_BYTES) {
-                truncated = true;
-                continue;
-            }
             results.push(JSON.parse(serialized));
-            bytes += size;
         }
     }
-    if (truncated)
-        output += '\n[Search response truncated; some content or references were omitted. Narrow the request to retrieve them.]';
-    return { output, ...(results === undefined ? {} : { results }), truncated };
+    return { output, ...(results === undefined ? {} : { results }), truncated: false };
 }

package/lib/cloud-tools.js

@@ -10,7 +10,7 @@ const imageRefs = { type: 'array', minItems: 1, maxItems: 5, description: 'Image
         ],
     } };
 const common = {
-    prompt: { type: 'string', description: 'Describe the image to generate or the edits to perform.', minLength: 1, maxLength: 32000 },
+    prompt: { type: 'string', description: 'Describe the image to generate or the edits to perform.', minLength: 1 },
     model: { type: 'string', description: 'Optional Codex image model; defaults to configured imageModel or gpt-image-2.' },
     quality: { type: 'string', enum: ['auto', 'low', 'medium', 'high'] },
     background: { type: 'string', enum: ['auto', 'transparent', 'opaque'] },
@@ -105,7 +105,7 @@ export function registerCodexImageTools(ctx, deps) {
             name: 'codex_image_inspect',
             description: 'Ask a Codex vision model to analyze images, OCR, screenshots or charts. This makes one additional cloud inference call, without recursive tools. Use explicit model or configured visionModel for non-Codex callers. Reports effective detail and actual dimensions.',
             parameters: { type: 'object', additionalProperties: false, required: ['prompt', 'images'], properties: {
-                    prompt: { type: 'string', minLength: 1, maxLength: 32000 }, images: imageRefs,
+                    prompt: { type: 'string', minLength: 1 }, images: imageRefs,
                     model: { type: 'string' }, detail: { type: 'string', enum: ['auto', 'low', 'high', 'original'] }, reasoning_effort: { type: 'string' },
                 } },
             output, timeoutMs: 120_000, isConcurrencySafe: () => true,