codex-copilot-dx 0.8.10 → 0.9.0

package/README.md

@@ -131,6 +131,17 @@ ccdx cache --clean --history
 
 Plain `--clean` clears only completed image transforms; the next matching request may recompute them. Adding `--history` also invalidates all process-local `previous_response_id` chains and can make a task's next continuation fail, so it requires interactive confirmation or `--yes`. Cleanup waits for active cache users to finish and never deletes Codex transcripts, generated image files, provider credentials, image edit handles, model catalogs, or usage/debug logs. A stopped or older adapter must be restarted before runtime cleanup; a saved limit applies on the next start.
 
+### Request-body limits
+
+```bash
+ccdx limits
+ccdx limits --decoded 256
+ccdx limits -256
+ccdx limits --decoded default
+```
+
+`ccdx limits` distinguishes the saved decoded request-body limit from the running adapter's active limit. The default is 128 MiB; the opt-in saved limit accepts 128–512 MiB. Changes take effect only after restarting the adapter, never restart it automatically, and do not clear conversations or caches. `CCDX_MAX_DECODED_BODY_BYTES` overrides the saved setting; unset it before changing the saved limit. The separate 64 MiB raw/compressed-body limit is not changed. Larger decoded requests can use substantially more process memory during JSON parsing and image preparation; raising this limit may enable a large thread to compact, but does not guarantee successful inference or compaction. Return to `default` after temporary use.
+
 ### Terminal animation
 
 Choose the terminal activity animation interactively:
@@ -219,6 +230,8 @@ After starting `ccdx`, open [http://127.0.0.1:2026/](http://127.0.0.1:2026/) in
 
 The dashboard loads local status, a live GitHub Copilot model directory, and a summary of local usage metadata once when opened. Each section has an explicit Refresh control; nothing polls in the background. The appearance button switches between the default dark terminal theme (sun icon) and a light theme (moon icon); the choice is stored only in that browser. The live model table uses the same fresh account validation and selectable GPT filtering as `ccdx models`, never labels cached fallback data as online, and makes no inference request. A catalog listing does not guarantee inference access. The Usage table combines the current and rotated local usage logs, shows totals and up to 100 model rows, and contains no prompt, response body, or credential fields. The animation selector previews the existing themes and saves through the same settings writer as `ccdx animation`; changes take effect on the next adapter start, and `CCDX_TERMINAL_ANIMATION=off` still disables terminal motion. Dashboard data requests require a custom header that cross-site simple requests cannot send; animation writes also require a matching same-origin `Origin`. The dashboard does not initialize the optional image handler. The overview's known-model count is the adapter's current in-memory catalog, not the live table. A missing image-generation status does not prove the feature is disabled: use `ccdx image-status` to check setup. Recent upstream error prose may contain sensitive details, so review the page before sharing screenshots.
 
+The transparent, single-color double-peak favicon follows the dashboard's saved light/dark choice without a separate network request.
+
 Inspect only the local Codex configuration:
 
 ```bash

package/bin/cli.mjs

@@ -101,6 +101,24 @@ if (CLI.command === "cache") {
     process.exit(1);
   }
 }
+if (CLI.command === "limits") {
+  try {
+    const probe = parseAdapterProbeOptions(process.env);
+    const { runLimitsCommand } = await import("../src/cli-limits.mjs");
+    await runLimitsCommand({
+      action: CLI.action,
+      limitMib: CLI.limitMib,
+      resetLimit: CLI.resetLimit,
+      host: probe.adapterHost,
+      port: probe.adapterPort,
+      timeoutMs: probe.existingAdapterTimeoutMs,
+    });
+    process.exit(0);
+  } catch (e) {
+    console.error(status("err", e.message));
+    process.exit(1);
+  }
+}
 if (CLI.command === "retired") {
   console.error(status("err", `${CLI.integration} integration was retired in ccdx 0.7.0.`));
   if (CLI.integration === "PM Studio") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-copilot-dx",
-  "version": "0.8.10",
+  "version": "0.9.0",
   "description": "Use Codex App with GitHub Copilot",
   "author": "Dale Xiao",
   "type": "module",

package/src/cli-limits.mjs

@@ -0,0 +1,55 @@
+import os from "node:os";
+import { MIB } from "./cache-limits.mjs";
+import { readAdapterStatus } from "./cli-status.mjs";
+import { loadRuntimeConfig } from "./runtime-config.mjs";
+import { decodedBodyLimitPreference, writeDecodedBodyLimitMib } from "./user-settings.mjs";
+
+function mib(bytes) {
+  const value = Number(bytes);
+  return `${(value / MIB).toFixed(value % MIB === 0 ? 0 : 1)} MiB`;
+}
+
+export async function runLimitsCommand({
+  action = "status",
+  limitMib,
+  resetLimit = false,
+  env = process.env,
+  home = os.homedir(),
+  host = "127.0.0.1",
+  port = 2026,
+  output = process.stdout,
+  fetchImpl = fetch,
+  timeoutMs = 1000,
+} = {}) {
+  if (action === "set") {
+    if (String(env.CCDX_MAX_DECODED_BODY_BYTES || "").trim()) {
+      throw new Error("CCDX_MAX_DECODED_BODY_BYTES overrides saved limits; unset it before using ccdx limits --decoded");
+    }
+    writeDecodedBodyLimitMib(resetLimit ? null : limitMib, { env, home });
+  } else if (action !== "status") {
+    throw new Error(`Unknown limits action: ${action}`);
+  }
+
+  const preference = decodedBodyLimitPreference({ env, home });
+  let runtime;
+  try {
+    runtime = await readAdapterStatus({ host, port, timeoutMs, fetchImpl });
+  } catch {
+    runtime = null;
+  }
+  const activeDecoded = Number(runtime?.data?.limits?.max_decoded_body_bytes);
+  const activeRaw = Number(runtime?.data?.limits?.max_body_bytes);
+  const lines = [
+    "ccdx limits",
+    `Configured decoded request body: ${mib(preference.bytes)} (${preference.source})`,
+    runtime && Number.isFinite(activeDecoded) && activeDecoded > 0
+      ? `Running decoded request body: ${mib(activeDecoded)}`
+      : "Running decoded request body: unavailable",
+    `Raw request body: ${mib(runtime && Number.isFinite(activeRaw) && activeRaw > 0 ? activeRaw : loadRuntimeConfig(env).maxBodyBytes)}${runtime ? " (running)" : " (configured)"}`,
+  ];
+  if (!runtime) lines.push("Running adapter status unavailable; restart ccdx to apply and verify this limit.");
+  else if (activeDecoded !== preference.bytes) lines.push("Restart ccdx to apply the configured decoded-body limit.");
+  if (action === "set") lines.push("Existing conversations and caches were not modified.");
+  output.write(`${lines.join("\n")}\n`);
+  return { preference, runtime };
+}

package/src/cli-options.mjs

@@ -21,6 +21,7 @@ const HELP_TOPICS = new Set([
   "models",
   "usage",
   "cache",
+  "limits",
   "animation",
   "enable-image",
   "disable-image",
@@ -187,6 +188,21 @@ export function parseCliArgs(args = []) {
       yes: Boolean(options["--yes"]),
     });
   }
+  if (command === "limits") {
+    const limitArgs = rest.length === 1 && /^-\d+$/.test(rest[0])
+      ? ["--decoded", rest[0].slice(1)]
+      : rest;
+    const options = parseOptions(limitArgs, new Map([["--decoded", "value"]]));
+    const rawLimit = options["--decoded"];
+    if (rawLimit && rawLimit !== "default" && !/^\d+$/.test(rawLimit)) {
+      throw new Error(`Decoded request-body limit must be an integer MiB value or default: ${rawLimit}`);
+    }
+    return baseCommand("limits", {
+      action: rawLimit ? "set" : "status",
+      limitMib: rawLimit && rawLimit !== "default" ? Number(rawLimit) : undefined,
+      resetLimit: rawLimit === "default",
+    });
+  }
   if (PM_COMMANDS.has(command)) {
     return baseCommand("retired", { integration: "PM Studio" });
   }
@@ -334,6 +350,7 @@ function topicHelp(name, topic) {
     models: `Usage:\n  ${name} models [--format table|plain]\n\nPerforms a fresh, read-only Copilot model-directory lookup for the saved account. Interactive terminals use a table by default.`,
     usage: `Usage:\n  ${name} usage [--format table|plain]\n\nSummarizes local token usage metadata without reading prompt or completion content. Interactive terminals use a table by default.`,
     cache: `Usage:\n  ${name} cache\n  ${name} cache --limit <MiB|default>\n  ${name} cache --clean [--history] [--yes]\n\nShows runtime cache use, saves and applies the shared response-history limit, or clears the rebuildable image-transform cache. --history also clears in-memory response history for all tasks and can make their next continuation fail, so interactive confirmation or --yes is required. Generated image files and saved Codex transcripts are never deleted. Short aliases: -128 sets 128 MiB and -clean equals --clean.`,
+    limits: `Usage:\n  ${name} limits\n  ${name} limits --decoded <MiB|default>\n\nShows configured and running request-body limits, or saves a decoded request-body limit from 128 to 512 MiB. The raw-body limit is unchanged. Restart ccdx to apply a saved change; no conversation or cache is cleared. Short alias: -256 sets 256 MiB.`,
     animation: `Usage:\n  ${name} animation\n\nPreviews all terminal activity animations together and selects the theme used the next time the adapter starts.`,
     "enable-image": `Usage:\n  ${name} enable-image\n\nInteractively configures an HTTPS image API endpoint (base URLs are also accepted) and API key, detects its supported image model and protocol, installs CCDX image guidance, and checks the local image tool for Codex App without generating an image. A blank key preserves the saved key only for the same origin; a new origin requires explicit key entry. Concurrent unrelated config edits are preserved.`,
     "disable-image": `Usage:\n  ${name} disable-image\n\nDisables the local CCDX image tool and removes its stored API credential and unmodified CCDX image guidance.`,
@@ -358,6 +375,7 @@ export function cliHelp(commandName = "ccdx", topic = "") {
   ${name} models [--format table|plain]
   ${name} usage [--format table|plain]
   ${name} cache [--limit <MiB|default> | --clean [--history] [--yes]]
+  ${name} limits [--decoded <MiB|default>]
   ${name} animation
   ${name} enable-image
   ${name} disable-image
@@ -375,6 +393,7 @@ Commands:
   models             Query a saved account's live Copilot model catalog
   usage              Summarize locally recorded token usage
   cache              Inspect, size, or clear bounded runtime caches
+  limits             Inspect or configure the decoded request-body limit
   animation          Select the terminal activity animation
   enable-image       Configure and enable the optional image provider
   disable-image      Disable the image provider and remove its credential

package/src/dashboard/index.html

@@ -4,7 +4,7 @@
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <meta name="color-scheme" content="dark light">
-    <link rel="icon" href="data:,">
+    <link id="favicon" rel="icon" type="image/svg+xml" href="data:,">
     <script src="/theme.js"></script>
     <link rel="stylesheet" href="/ui.css">
     <script src="/ui.js" defer></script>

package/src/dashboard/theme.js

@@ -4,7 +4,13 @@
   try {
     if (localStorage.getItem(key) === "light") theme = "light";
   } catch { /* Private browsing may disable storage. */ }
-  document.documentElement.dataset.theme = theme;
+  const applyTheme = () => {
+    document.documentElement.dataset.theme = theme;
+    const color = theme === "dark" ? "#a6f5a8" : "#176b3a";
+    const svg = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64"><path d="M7 27v10M12 22v20M17 14v36M22 19v26M27 25v14M32 28v8M37 25v14M42 19v26M47 14v36M52 22v20M57 27v10" fill="none" stroke="${color}" stroke-width="3.5" stroke-linecap="round"/></svg>`;
+    document.getElementById("favicon").href = `data:image/svg+xml,${encodeURIComponent(svg)}`;
+  };
+  applyTheme();
 
   document.addEventListener("DOMContentLoaded", () => {
     const button = document.getElementById("theme-toggle");
@@ -16,7 +22,7 @@
     updateLabel();
     button.addEventListener("click", () => {
       theme = theme === "dark" ? "light" : "dark";
-      document.documentElement.dataset.theme = theme;
+      applyTheme();
       try { localStorage.setItem(key, theme); } catch { /* Keep the current selection. */ }
       updateLabel();
     });

package/src/http-transport.mjs

@@ -1,6 +1,7 @@
 import { promisify } from "node:util";
 import * as zlib from "node:zlib";
 import { loadRuntimeConfig, parsePositiveInteger } from "./runtime-config.mjs";
+import { decodedBodyLimitPreference } from "./user-settings.mjs";
 import { status } from "./status.mjs";
 import { safeUpstreamResponseHeaders } from "./upstream-headers.mjs";
 import { redactDiagnosticText } from "./diagnostic-text.mjs";
@@ -13,7 +14,7 @@ const zstdDecompressAsync = zlib.zstdDecompress ? promisify(zlib.zstdDecompress)
 
 const HTTP_RUNTIME_CONFIG = loadRuntimeConfig();
 const MAX_BODY_BYTES = HTTP_RUNTIME_CONFIG.maxBodyBytes;
-const MAX_DECODED_BODY_BYTES = HTTP_RUNTIME_CONFIG.maxDecodedBodyBytes;
+const MAX_DECODED_BODY_BYTES = decodedBodyLimitPreference().bytes;
 const MAX_INFLIGHT_BODY_BYTES = HTTP_RUNTIME_CONFIG.maxInflightBodyBytes;
 const MAX_QUEUED_REQUESTS = HTTP_RUNTIME_CONFIG.maxQueuedRequests;
 const REQUEST_QUEUE_TIMEOUT_MS = HTTP_RUNTIME_CONFIG.requestQueueTimeoutMs;

package/src/observability.mjs

@@ -4,12 +4,14 @@ import { copilotRuntimeStatus } from "./copilot.mjs";
 import { imageOptimizationStats } from "./image-optimization.mjs";
 import { responseHistoryStats } from "./response-history.mjs";
 import { loadRuntimeConfig } from "./runtime-config.mjs";
+import { decodedBodyLimitPreference } from "./user-settings.mjs";
 import { profileRouting } from "./profile-routing.mjs";
 import { usageLoggingStats } from "./usage.mjs";
 import { debugLoggingStats } from "./log.mjs";
 
 export { ADAPTER_STATUS_PATH };
 const OBSERVABILITY_RUNTIME_CONFIG = loadRuntimeConfig();
+const OBSERVABILITY_DECODED_BODY_BYTES = decodedBodyLimitPreference().bytes;
 
 const ROUTE_NAMES = Object.freeze([
   "responses",
@@ -208,7 +210,7 @@ export function runtimeStatusPayload({
     routing: profileRouting(),
     limits: {
       max_body_bytes: OBSERVABILITY_RUNTIME_CONFIG.maxBodyBytes,
-      max_decoded_body_bytes: OBSERVABILITY_RUNTIME_CONFIG.maxDecodedBodyBytes,
+      max_decoded_body_bytes: OBSERVABILITY_DECODED_BODY_BYTES,
       max_sse_buffer_bytes: OBSERVABILITY_RUNTIME_CONFIG.maxSseBufferBytes,
       response_history_max_bytes: history.maxBytes,
       response_history_max_entries: history.maxEntries,

package/src/user-settings.mjs

@@ -3,7 +3,7 @@ import os from "node:os";
 import path from "node:path";
 import { atomicWriteFileIfChangedSync } from "./atomic-file.mjs";
 import { DEFAULT_CODEX_AUTO_REVIEW_MODEL } from "./models.mjs";
-import { loadRuntimeConfig } from "./runtime-config.mjs";
+import { loadRuntimeConfig, RUNTIME_DEFAULTS } from "./runtime-config.mjs";
 import {
   MIB,
   RESPONSE_HISTORY_DEFAULT_MIB,
@@ -19,6 +19,9 @@ import {
 const AUTO_REVIEW_MODEL_KEY = "auto_review_model";
 const TERMINAL_ANIMATION_KEY = "terminal_animation";
 const RESPONSE_HISTORY_MAX_MIB_KEY = "response_history_max_mib";
+const DECODED_BODY_LIMIT_MIB_KEY = "decoded_body_limit_mib";
+export const DECODED_BODY_LIMIT_MIN_MIB = RUNTIME_DEFAULTS.maxDecodedBodyBytes / MIB;
+export const DECODED_BODY_LIMIT_MAX_MIB = 512;
 export { RESPONSE_HISTORY_MAX_MIB, RESPONSE_HISTORY_MIN_MIB };
 
 export function userSettingsPath({ env = process.env, home = os.homedir() } = {}) {
@@ -66,6 +69,17 @@ export function readUserSettings({ env = process.env, home = os.homedir(), stric
         delete parsed[RESPONSE_HISTORY_MAX_MIB_KEY];
       }
     }
+    if (Object.hasOwn(parsed, DECODED_BODY_LIMIT_MIB_KEY)) {
+      const value = parsed[DECODED_BODY_LIMIT_MIB_KEY];
+      if (!Number.isSafeInteger(value)
+        || value < DECODED_BODY_LIMIT_MIN_MIB
+        || value > DECODED_BODY_LIMIT_MAX_MIB) {
+        if (strict) {
+          throw invalidSettings(filePath, `${DECODED_BODY_LIMIT_MIB_KEY} must be an integer from ${DECODED_BODY_LIMIT_MIN_MIB} to ${DECODED_BODY_LIMIT_MAX_MIB}`);
+        }
+        delete parsed[DECODED_BODY_LIMIT_MIB_KEY];
+      }
+    }
     return parsed;
   } catch (error) {
     if (error?.code === "ENOENT") return {};
@@ -114,6 +128,39 @@ export function responseHistoryLimitPreference({ env = process.env, home = os.ho
   return { bytes: RESPONSE_HISTORY_DEFAULT_MIB * MIB, mib: RESPONSE_HISTORY_DEFAULT_MIB, source: "default" };
 }
 
+export function decodedBodyLimitPreference({ env = process.env, home = os.homedir() } = {}) {
+  const environment = String(env.CCDX_MAX_DECODED_BODY_BYTES || "").trim();
+  if (environment) {
+    return { bytes: loadRuntimeConfig(env).maxDecodedBodyBytes, source: "environment" };
+  }
+  const settings = readUserSettings({ env, home });
+  const mib = settings[DECODED_BODY_LIMIT_MIB_KEY];
+  if (Number.isSafeInteger(mib)) return { bytes: mib * MIB, mib, source: "settings" };
+  return { bytes: RUNTIME_DEFAULTS.maxDecodedBodyBytes, mib: DECODED_BODY_LIMIT_MIN_MIB, source: "default" };
+}
+
+export function writeDecodedBodyLimitMib(mib, { env = process.env, home = os.homedir() } = {}) {
+  const filePath = userSettingsPath({ env, home });
+  const settings = readUserSettings({ env, home, strict: true });
+  const next = { ...settings };
+  if (mib === null || mib === undefined || mib === "") {
+    if (!Object.hasOwn(next, DECODED_BODY_LIMIT_MIB_KEY)) {
+      return { changed: false, filePath, ...decodedBodyLimitPreference({ env, home }) };
+    }
+    delete next[DECODED_BODY_LIMIT_MIB_KEY];
+  } else {
+    const parsed = Number(mib);
+    if (!Number.isSafeInteger(parsed)
+      || parsed < DECODED_BODY_LIMIT_MIN_MIB
+      || parsed > DECODED_BODY_LIMIT_MAX_MIB) {
+      throw new Error(`Decoded request-body limit must be an integer from ${DECODED_BODY_LIMIT_MIN_MIB} to ${DECODED_BODY_LIMIT_MAX_MIB} MiB`);
+    }
+    next[DECODED_BODY_LIMIT_MIB_KEY] = parsed;
+  }
+  const changed = atomicWriteFileIfChangedSync(filePath, `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600 });
+  return { changed, filePath, ...decodedBodyLimitPreference({ env, home }) };
+}
+
 export function writeResponseHistoryLimitMib(mib, { env = process.env, home = os.homedir() } = {}) {
   const filePath = userSettingsPath({ env, home });
   const settings = readUserSettings({ env, home, strict: true });