sneakoscope 10.1.4 → 10.1.5

package/README.md

@@ -16,7 +16,7 @@
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-Current package: **SKS 10.1.4**. Install the latest stable release from npm.
+Current package: **SKS 10.1.5**. Install the latest stable release from npm.
 
 [Quick start](#install-in-one-command) · [Commands](#everyday-commands) · [SKS Center](#sks-center-macos) · [Documentation](#documentation) · [Changelog](CHANGELOG.md)
 

package/config/skills-hash-ledger.v1.json

@@ -111,6 +111,7 @@
     {
       "canonical_name": "sks-design-artifact-expert",
       "trusted_sha256": [
+        "6db9a7088e5f8d21dec9c8eed00abe665e1e89f19dcbb6d8472d77e4551cb556",
         "a09daba0a2e479a68ed81ec6fba8d70e54c8398ed86f3d1879f874b98480b97c",
         "4a28d166eaf0bc4477b566b056034f972a7034165e36d8186daa9947bf92e3cf"
       ]
@@ -118,6 +119,7 @@
     {
       "canonical_name": "sks-design-system-builder",
       "trusted_sha256": [
+        "47654c9f74317abbd0a5a75f89cd2d563708e8234e8887cc7ab39bf49030abaa",
         "0a41e6ace960abaaf6abf5e7b1e53fd39f414e1e00b59fa725f2db9e3eb05b58",
         "c4f0007cad5774510bdc55e2815ce0911c220afa8d5dd4efc327ba1231c8f3da"
       ]
@@ -125,6 +127,7 @@
     {
       "canonical_name": "sks-design-ui-editor",
       "trusted_sha256": [
+        "6c24e950a12dec52c625964069c7c21a0220a58e0f69f977d802f44fdb03a940",
         "83a806cc93a3c5342e0dccfc6a45983382d5bf74d1226c4e3288228db22b737a",
         "1b65f0028a6dcb2f7eeab0b0df411a75546bc3aefa8a76067e1818da000c2249"
       ]
@@ -243,12 +246,14 @@
     {
       "canonical_name": "sks-image-ux-review",
       "trusted_sha256": [
+        "54d4169dc7f362ac9fe2d090bd2612e41d30acbc3e883d6bd382929bdfb9459e",
         "9293346873b5fb25a9d93b630064a2c8ceede2bfdfa4c6ffe7fbb7f64da6595c"
       ]
     },
     {
       "canonical_name": "sks-imagegen",
       "trusted_sha256": [
+        "478e3d8f805eed55c3f3e6c2069142482a7dbd8fa5d9a59f03b136e0e1cb77d0",
         "a7f466ba1829a757f38432fbe8c3a672e22e91948537dafe8f8ce09561d2256e",
         "7a1f9372b03975886233a623031f41e06fd782b1e7a3409517bb428d9c6b76dd"
       ]
@@ -256,6 +261,7 @@
     {
       "canonical_name": "sks-imagegen-source-scout",
       "trusted_sha256": [
+        "95faf4358f1c6567ca6894bfb577629f14a23d623716be70325c0ff9a893d42e",
         "95e71d4431a4c1f6911f0f76eaa1c2b475c52fd22d35c0a6c241e21e090507ad",
         "d648b571c674ed3be862bc0e8b2110f88c2bee54292bb009df0b0b2dbd6d400b"
       ]
@@ -316,6 +322,7 @@
     {
       "canonical_name": "sks-ppt",
       "trusted_sha256": [
+        "c9a0d90e12560dd3f04959869051370e6baf46eda6eb63f708ea1661c5c9d041",
         "1d4de05afd42ee5739c0ed925af9e0ac4785fc746e659c60d3d908d465e6386c",
         "02e8a0758ec6d056ce9851a5a4505b1d32e302e730be3eb169a41392a5d6b2e2",
         "329fc6ee24bb04478b18fb6ccd3691cd7cbb50e1b77ca7b6136383d00b3b0bb4"

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "10.1.4"
+version = "10.1.5"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "10.1.4"
+version = "10.1.5"
 edition = "2021"
 
 [dependencies]

package/dist/cli/install-helpers.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL } from '../core/imagegen/imagegen-model-policy.js';
 import path from 'node:path';
 import fsp from 'node:fs/promises';
 import { stdin as input, stdout as output } from 'node:process';
@@ -60,7 +61,7 @@ export async function postinstall({ bootstrap }) {
         console.log('Configure providers explicitly with `sks bridge provider configure codex-lb ...` or `sks bridge provider configure openrouter ...`.');
         const imagegenRepair = await ensureCodexImagegenDuringInstall();
         if (imagegenRepair.status === 'ready')
-            console.log('Codex App Image Gen: ready ($imagegen/gpt-image-2 detected).');
+            console.log(("Image generation provider capability ready (requested model: " + IMAGEGEN_MODEL + "; output not verified)."));
         else if (imagegenRepair.status === 'recovered')
             console.log('Codex App Image Gen: recovered and re-detected. Start a new Codex/Work task; restart the desktop app only if the new task still lacks $imagegen.');
         else if (imagegenRepair.status === 'blocked')

package/dist/commands/doctor.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL } from '../core/imagegen/imagegen-model-policy.js';
 import os from 'node:os';
 import path from 'node:path';
 import { projectRoot, exists, formatBytes, nowIso, readText, writeJsonAtomic } from '../core/fsx.js';
@@ -1188,7 +1189,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 blockers: ['codex_imagegen_current_task_tool_manifest_unverified', 'codex_imagegen_real_output_unverified'],
                 manual_actions: [
                     'Start a fresh Codex/Work task so $imagegen is present in its tool manifest.',
-                    'Invoke $imagegen with gpt-image-2 and bind the selected raster output path to route evidence.'
+                    ("Invoke $imagegen with " + IMAGEGEN_MODEL + " and bind the selected raster output path to route evidence.")
                 ],
                 communication_test: {
                     level: 'flag_level',

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "10.1.4",
+  "package_version": "10.1.5",
   "skills": [
     {
       "canonical_name": "sks",
@@ -138,8 +138,9 @@
     {
       "canonical_name": "sks-design-artifact-expert",
       "type": "official",
-      "content_sha256": "a09daba0a2e479a68ed81ec6fba8d70e54c8398ed86f3d1879f874b98480b97c",
+      "content_sha256": "6db9a7088e5f8d21dec9c8eed00abe665e1e89f19dcbb6d8472d77e4551cb556",
       "hash_history": [
+        "a09daba0a2e479a68ed81ec6fba8d70e54c8398ed86f3d1879f874b98480b97c",
         "4a28d166eaf0bc4477b566b056034f972a7034165e36d8186daa9947bf92e3cf"
       ],
       "deprecated_aliases": []
@@ -147,8 +148,9 @@
     {
       "canonical_name": "sks-design-system-builder",
       "type": "official",
-      "content_sha256": "0a41e6ace960abaaf6abf5e7b1e53fd39f414e1e00b59fa725f2db9e3eb05b58",
+      "content_sha256": "47654c9f74317abbd0a5a75f89cd2d563708e8234e8887cc7ab39bf49030abaa",
       "hash_history": [
+        "0a41e6ace960abaaf6abf5e7b1e53fd39f414e1e00b59fa725f2db9e3eb05b58",
         "c4f0007cad5774510bdc55e2815ce0911c220afa8d5dd4efc327ba1231c8f3da"
       ],
       "deprecated_aliases": []
@@ -156,8 +158,9 @@
     {
       "canonical_name": "sks-design-ui-editor",
       "type": "official",
-      "content_sha256": "83a806cc93a3c5342e0dccfc6a45983382d5bf74d1226c4e3288228db22b737a",
+      "content_sha256": "6c24e950a12dec52c625964069c7c21a0220a58e0f69f977d802f44fdb03a940",
       "hash_history": [
+        "83a806cc93a3c5342e0dccfc6a45983382d5bf74d1226c4e3288228db22b737a",
         "1b65f0028a6dcb2f7eeab0b0df411a75546bc3aefa8a76067e1818da000c2249"
       ],
       "deprecated_aliases": []
@@ -305,15 +308,18 @@
     {
       "canonical_name": "sks-image-ux-review",
       "type": "core",
-      "content_sha256": "9293346873b5fb25a9d93b630064a2c8ceede2bfdfa4c6ffe7fbb7f64da6595c",
-      "hash_history": [],
+      "content_sha256": "54d4169dc7f362ac9fe2d090bd2612e41d30acbc3e883d6bd382929bdfb9459e",
+      "hash_history": [
+        "9293346873b5fb25a9d93b630064a2c8ceede2bfdfa4c6ffe7fbb7f64da6595c"
+      ],
       "deprecated_aliases": []
     },
     {
       "canonical_name": "sks-imagegen",
       "type": "official",
-      "content_sha256": "a7f466ba1829a757f38432fbe8c3a672e22e91948537dafe8f8ce09561d2256e",
+      "content_sha256": "478e3d8f805eed55c3f3e6c2069142482a7dbd8fa5d9a59f03b136e0e1cb77d0",
       "hash_history": [
+        "a7f466ba1829a757f38432fbe8c3a672e22e91948537dafe8f8ce09561d2256e",
         "7a1f9372b03975886233a623031f41e06fd782b1e7a3409517bb428d9c6b76dd"
       ],
       "deprecated_aliases": []
@@ -321,8 +327,9 @@
     {
       "canonical_name": "sks-imagegen-source-scout",
       "type": "official",
-      "content_sha256": "95e71d4431a4c1f6911f0f76eaa1c2b475c52fd22d35c0a6c241e21e090507ad",
+      "content_sha256": "95faf4358f1c6567ca6894bfb577629f14a23d623716be70325c0ff9a893d42e",
       "hash_history": [
+        "95e71d4431a4c1f6911f0f76eaa1c2b475c52fd22d35c0a6c241e21e090507ad",
         "d648b571c674ed3be862bc0e8b2110f88c2bee54292bb009df0b0b2dbd6d400b"
       ],
       "deprecated_aliases": []
@@ -388,8 +395,9 @@
     {
       "canonical_name": "sks-ppt",
       "type": "official",
-      "content_sha256": "1d4de05afd42ee5739c0ed925af9e0ac4785fc746e659c60d3d908d465e6386c",
+      "content_sha256": "c9a0d90e12560dd3f04959869051370e6baf46eda6eb63f708ea1661c5c9d041",
       "hash_history": [
+        "1d4de05afd42ee5739c0ed925af9e0ac4785fc746e659c60d3d908d465e6386c",
         "02e8a0758ec6d056ce9851a5a4505b1d32e302e730be3eb169a41392a5d6b2e2",
         "329fc6ee24bb04478b18fb6ccd3691cd7cbb50e1b77ca7b6136383d00b3b0bb4"
       ],

package/dist/core/agents/official-subagent-helper-policy.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL } from '../imagegen/imagegen-model-policy.js';
 import path from 'node:path';
 import { nowIso, readJson, readText, writeJsonAtomic } from '../fsx.js';
 export const OFFICIAL_SUBAGENT_HELPER_POLICY_SCHEMA = 'sks.official-subagent-helper-policy.v1';
@@ -42,7 +43,7 @@ export async function writeOfficialSubagentHelperPolicy(root, input = {}) {
         built_in_agents_allowed: builtInAgentsAllowed,
         codex_app_capabilities_allowed: codexAppCapabilitiesAllowed,
         codex_builtin_imagegen_helper_allowed: true,
-        preferred_image_generation_surface: 'Codex App $imagegen/gpt-image-2',
+        preferred_image_generation_surface: ("Selected image provider: " + IMAGEGEN_MODEL + ""),
         codex_app_builtin_evidence_class: 'codex_app_builtin',
         api_fallback_evidence_class: 'api_fallback',
         provider_surface_evidence_required: true,

package/dist/core/bench.js

@@ -69,7 +69,7 @@ export const TRUST_VALIDATE_BENCH_COMMAND = 'sks trust validate bench-fixture --
 export const CORE_BENCH_WARMUP_ITERATIONS = 1;
 export const UX_REVIEW_STAGED_LATENCY_BUDGETS = Object.freeze({
     source_screenshot_ingest: 500,
-    gpt_image_2_generation: 120_000,
+    imagegen_generation: 120_000,
     callout_extraction: 120_000,
     fix_task_planning: 500,
     recapture_re_review: 120_000,

package/dist/core/codex-app.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL, CODEX_BUILTIN_IMAGEGEN_MODEL } from './imagegen/imagegen-model-policy.js';
 import path from 'node:path';
 import os from 'node:os';
 import fsp from 'node:fs/promises';
@@ -483,7 +484,7 @@ function codexNativeSksMenuStatus() {
 export function codexAppGuidance({ appInstalled, codex, mcpList, featureList, requiredFeatureFlags = {}, requiredFeatureFlagsOk = true, defaultPlugins = { ok: true, missing_enabled: [] }, productDesignPlugin = null, pluginSkillShadows = { ok: true, blocking: [] }, fastModeConfig = { ok: true, blockers: [] }, providerModelUi = null, nativeSksMenu = null, gitActions = { ok: true, blockers: [] }, imageGenerationReady, inAppBrowserReady, browserUseFeatureReady, computerUseReady, browserUseReady, browserToolReady, computerUseMcpListed, browserUseMcpListed, chromeExtension, remoteControl }) {
     const lines = [];
     if (!appInstalled) {
-        lines.push('Install and open Codex App for first-party MCP/plugin tools. Base Codex CLI flows remain available, but Codex Computer Use and imagegen/gpt-image-2 evidence will be unavailable until Codex App is ready.');
+        lines.push(("Install and open Codex App for first-party MCP/plugin tools. Base Codex CLI flows remain available, but Codex Computer Use requires the App; imagegen/" + IMAGEGEN_MODEL + " evidence will be unavailable until Codex App is ready."));
         lines.push(`Docs: ${CODEX_APP_DOCS_URL}`);
     }
     if (!codex?.bin)
@@ -571,10 +572,10 @@ export function codexAppGuidance({ appInstalled, codex, mcpList, featureList, re
         lines.push('Codex Chrome Extension is ready; SKS web/browser/webapp QA and UX review should use it before any other web surface.');
     }
     if (imageGenerationReady) {
-        lines.push('Image generation is enabled; required raster assets and generated image-review evidence must invoke $imagegen/gpt-image-2 and record real output.');
+        lines.push(("The built-in image tool is enabled. Current-model image work requires a provider that explicitly selects " + IMAGEGEN_MODEL + " and record real output."));
     }
     else if (appInstalled || codex?.bin) {
-        lines.push('Codex image_generation was not visible from `codex features list`. Required imagegen/gpt-image-2 evidence must stay blocked or unverified until $imagegen is available in Codex App.');
+        lines.push(("Codex image_generation was not visible from `codex features list`. Required imagegen/" + IMAGEGEN_MODEL + " evidence must stay blocked or unverified until $imagegen is available in Codex App."));
         lines.push('Run: sks doctor --fix to attempt Codex CLI/App image_generation repair, then rerun the blocked visual route.');
     }
     if (computerUseReady && !computerUseMcpListed) {
@@ -588,7 +589,7 @@ export function codexAppGuidance({ appInstalled, codex, mcpList, featureList, re
         lines.push('Browser Use plugin files are installed, but `codex mcp list` does not list a browser-use MCP server. Treat Browser Use as plugin-scoped, not as SKS browser verification evidence.');
     }
     if (!lines.length)
-        lines.push('Codex App, Codex CLI, Chrome Extension, native Computer Use, Browser tooling, and image generation checks look ready. Web UI E2E uses the Chrome Extension path; native non-web visual evidence uses Computer Use; generated image evidence still requires $imagegen/gpt-image-2 output.');
+        lines.push(("Codex App, Codex CLI, Chrome Extension, native Computer Use, Browser tooling, and built-in image feature checks look configured. Web UI E2E uses the Chrome Extension path; native non-web visual evidence uses Computer Use; generated image evidence still requires $imagegen/" + IMAGEGEN_MODEL + " output."));
     return lines;
 }
 export function formatCodexAppStatus(status, { includeRaw = false } = {}) {
@@ -609,7 +610,7 @@ export function formatCodexAppStatus(status, { includeRaw = false } = {}) {
         `Chrome Ext: ${status.chrome_extension?.ok ? 'ok' : `setup ${(status.chrome_extension?.blockers || []).join(', ') || 'required'}`}`,
         `Computer Use:${status.mcp.has_computer_use ? status.mcp.computer_use_source === 'plugin_cache' ? ' installed (verify @Computer in thread)' : ' ok' : ' missing'}`,
         `Browser:     ${status.features?.browser_tool_ready ? `ok (${status.features.browser_tool_source})` : status.mcp.has_browser_use ? status.mcp.browser_use_source === 'plugin_cache' ? 'installed (plugin scoped)' : 'ok' : 'missing'}`,
-        `Image Gen:   ${status.features?.image_generation ? 'ok ($imagegen/gpt-image-2)' : status.features?.checked ? 'missing' : 'not checked'}`,
+        `Image Gen:   ${status.features?.image_generation ? (`enabled (${CODEX_BUILTIN_IMAGEGEN_MODEL}; ${IMAGEGEN_MODEL} provider unverified)`) : status.features?.checked ? 'missing' : 'not checked'}`,
         `Ready:       ${status.ok ? 'yes' : 'no'}`,
         '',
         ...status.guidance.map((line) => `- ${line}`)

package/dist/core/codex-lb/desktop-bridge/http-forward.js

@@ -7,7 +7,7 @@ import { buildOfficialPassthroughHeaders, buildProviderUpstreamHeaders, rewriteR
 import { createDesktopBridgeRejectionLogger } from './rejection-log.js';
 import { ensureDesktopBridgeRemoteTarget, isUnreachableUpstreamError, refreshDesktopBridgeRemoteTarget, resolveAndBindDesktopBridgeRouteContext, resolveCodexSessionIdentity, resolveDesktopBridgeTarget, safeBridgeErrorCode, singleBridgeHeader } from './security.js';
 import { desktopBridgeListenOrigin } from './state.js';
-import { DesktopBridgeError } from './types.js';
+import { DEFAULT_DESKTOP_BRIDGE_MAX_REQUEST_BODY_BYTES, DesktopBridgeError, DesktopBridgeRequestBodyTooLargeError } from './types.js';
 const MAX_UPSTREAM_ERROR_BODY_BYTES = 1024 * 1024;
 function decodeBridgeRequestBody(body, encoding, maximum) {
     const options = { maxOutputLength: maximum };
@@ -20,7 +20,9 @@ function decodeBridgeRequestBody(body, encoding, maximum) {
                 try {
                     return zlib.inflateSync(body, options);
                 }
-                catch {
+                catch (error) {
+                    if (error.code === 'ERR_BUFFER_TOO_LARGE')
+                        throw error;
                     return zlib.inflateRawSync(body, options);
                 }
             case 'br':
@@ -38,6 +40,9 @@ function decodeBridgeRequestBody(body, encoding, maximum) {
     catch (error) {
         if (error instanceof DesktopBridgeError)
             throw error;
+        if (error.code === 'ERR_BUFFER_TOO_LARGE') {
+            throw new DesktopBridgeRequestBodyTooLargeError(maximum, 'decoded');
+        }
         throw new DesktopBridgeError('bridge_responses_body_invalid_json');
     }
 }
@@ -48,14 +53,14 @@ function bodyCarriesModel(rawUrl) {
 async function readBoundedBody(req, maximum) {
     const declared = Number(req.headers['content-length'] || 0);
     if (Number.isFinite(declared) && declared > maximum)
-        throw new DesktopBridgeError('bridge_request_body_too_large');
+        throw new DesktopBridgeRequestBodyTooLargeError(maximum, 'encoded', declared);
     const chunks = [];
     let total = 0;
-    for await (const raw of req) {
+    for await (const raw of req.iterator({ destroyOnReturn: false })) {
         const chunk = Buffer.isBuffer(raw) ? raw : Buffer.from(raw);
         total += chunk.length;
         if (total > maximum)
-            throw new DesktopBridgeError('bridge_request_body_too_large');
+            throw new DesktopBridgeRequestBodyTooLargeError(maximum, 'encoded', total);
         chunks.push(chunk);
     }
     return Buffer.concat(chunks);
@@ -79,7 +84,7 @@ export async function prepareDesktopBridgeRequest(req, config) {
     let payload = null;
     let contentEncodingStripped = false;
     if (bodyCarriesModel(req.url)) {
-        const maximum = config.maxRequestBodyBytes ?? 16 * 1024 * 1024;
+        const maximum = config.maxRequestBodyBytes ?? DEFAULT_DESKTOP_BRIDGE_MAX_REQUEST_BODY_BYTES;
         body = await readBoundedBody(req, maximum);
         const encoding = String(req.headers['content-encoding'] || '').trim().toLowerCase();
         let decoded = body;

package/dist/core/codex-lb/desktop-bridge/rejection-log.js

@@ -78,6 +78,9 @@ export function createDesktopBridgeRejectionLogger(options = {}) {
             ...(Number.isInteger(event.status) ? { status: event.status } : {}),
             ...(providerId ? { provider_id: providerId } : {}),
             ...(publicModel ? { public_model: publicModel } : {}),
+            ...(Number.isSafeInteger(event.max_request_body_bytes) && event.max_request_body_bytes > 0 ? { max_request_body_bytes: event.max_request_body_bytes } : {}),
+            ...(Number.isSafeInteger(event.request_body_bytes) && event.request_body_bytes >= 0 ? { request_body_bytes: event.request_body_bytes } : {}),
+            ...(event.request_body_stage === 'encoded' || event.request_body_stage === 'decoded' ? { request_body_stage: event.request_body_stage } : {}),
         });
     };
 }

package/dist/core/codex-lb/desktop-bridge/responses-websocket.js

@@ -5,7 +5,7 @@ import { BRIDGE_OFFICIAL_ROUTE_ID } from '../bridge-contracts.js';
 import { buildOfficialPassthroughWebSocketHeaders, buildProviderWebSocketHeaders } from './header-policy.js';
 import { createDesktopBridgeRejectionLogger } from './rejection-log.js';
 import { assertDesktopBridgeRouteContext, ensureDesktopBridgeRemoteTarget, isUnreachableUpstreamError, refreshDesktopBridgeRemoteTarget, resolveAndBindDesktopBridgeRouteContext, resolveCodexSessionIdentity, resolveDesktopBridgeTarget, safeBridgeErrorCode } from './security.js';
-import { DesktopBridgeError } from './types.js';
+import { DEFAULT_DESKTOP_BRIDGE_MAX_REQUEST_BODY_BYTES, DesktopBridgeError } from './types.js';
 const MAX_PENDING_MESSAGES = 256;
 const CLOSE_GRACE_MS = 1_000;
 const INITIAL_CREATE_TIMEOUT_MS = 60 * 60_000;
@@ -19,7 +19,7 @@ function bytes(data) {
 }
 export function forwardResponsesWebSocket(req, socket, head, config) {
     const upgradeIdentity = resolveCodexSessionIdentity(req.headers);
-    const maxBytes = config.maxRequestBodyBytes ?? 16 * 1024 * 1024;
+    const maxBytes = config.maxRequestBodyBytes ?? DEFAULT_DESKTOP_BRIDGE_MAX_REQUEST_BODY_BYTES;
     const server = new WebSocketServer({ noServer: true, clientTracking: false, perMessageDeflate: false, maxPayload: maxBytes });
     try {
         server.handleUpgrade(req, socket, head, (client) => {

package/dist/core/codex-lb/desktop-bridge/security.js

@@ -569,6 +569,10 @@ export function validateDesktopBridgeConfig(config) {
         throw new DesktopBridgeError('bridge_connect_timeout_invalid');
     if (!Number.isFinite(config.idleTimeoutMs) || config.idleTimeoutMs < 1_000 || config.idleTimeoutMs > 86_400_000)
         throw new DesktopBridgeError('bridge_idle_timeout_invalid');
+    if (config.maxRequestBodyBytes !== undefined
+        && (!Number.isSafeInteger(config.maxRequestBodyBytes) || config.maxRequestBodyBytes < 1)) {
+        throw new DesktopBridgeError('bridge_request_body_limit_invalid');
+    }
     if (config.requestTimeoutMs !== undefined
         && (!Number.isFinite(config.requestTimeoutMs) || config.requestTimeoutMs < 1_000 || config.requestTimeoutMs > 120_000)) {
         throw new DesktopBridgeError('bridge_request_timeout_invalid');

package/dist/core/codex-lb/desktop-bridge/server.js

@@ -5,7 +5,7 @@ import { destroyDesktopBridgeUpstreamAgents, forwardHttp, prepareDesktopBridgeRe
 import { createDesktopBridgeRejectionLogger } from './rejection-log.js';
 import { assertAllowedOrigin, assertAllowedPath, assertLoopbackPeer, assertLoopbackListenHost, assertWebSocketUpgrade, prepareDesktopBridgeConfig, safeBridgeErrorCode, validatePreparedDesktopBridgeConfig, } from './security.js';
 import { createDesktopBridgePublicState, desktopBridgeListenOrigin, desktopBridgeStatePath, refreshDesktopBridgeState, removeDesktopBridgeStateIfOwned, writeDesktopBridgeState, } from './state.js';
-import { DesktopBridgeError } from './types.js';
+import { DesktopBridgeError, DesktopBridgeRequestBodyTooLargeError } from './types.js';
 import { PACKAGE_VERSION } from '../../version.js';
 import { DESKTOP_BRIDGE_CLIENT_PATH_PREFIX, DESKTOP_BRIDGE_DIAGNOSTIC_HEALTH_PATH, DESKTOP_BRIDGE_DIAGNOSTIC_PATH, DESKTOP_BRIDGE_DIAGNOSTIC_PROTOCOL } from './types.js';
 import { forwardWebSocket, safeEndUpgradeSocket } from './websocket-forward.js';
@@ -84,6 +84,8 @@ function handleDiagnosticWebSocket(req, socket, head) {
     consume();
 }
 function rejectionStatus(code) {
+    if (code === 'bridge_request_body_too_large')
+        return 413;
     if (code === 'bridge_path_not_allowed')
         return 404;
     if (code === 'bridge_request_capacity_exhausted')
@@ -95,6 +97,8 @@ function rejectionStatus(code) {
     return 400;
 }
 function rejectionStatusText(status) {
+    if (status === 413)
+        return 'Payload Too Large';
     if (status === 404)
         return 'Not Found';
     if (status === 403)
@@ -114,6 +118,11 @@ function writeBridgeRejection(res, error, req) {
         method: req?.method,
         url: req?.url,
         status: rejectionStatus(rejectedCode),
+        ...(error instanceof DesktopBridgeRequestBodyTooLargeError ? {
+            max_request_body_bytes: error.maximumBytes,
+            request_body_bytes: error.observedBytes,
+            request_body_stage: error.stage,
+        } : {}),
     });
     if (res.headersSent) {
         res.destroy(error instanceof Error ? error : undefined);

package/dist/core/codex-lb/desktop-bridge/types.js

@@ -21,3 +21,15 @@ export class DesktopBridgeError extends Error {
         this.code = code;
     }
 }
+export const DEFAULT_DESKTOP_BRIDGE_MAX_REQUEST_BODY_BYTES = 128 * 1024 * 1024;
+export class DesktopBridgeRequestBodyTooLargeError extends DesktopBridgeError {
+    maximumBytes;
+    stage;
+    observedBytes;
+    constructor(maximumBytes, stage, observedBytes) {
+        super('bridge_request_body_too_large');
+        this.maximumBytes = maximumBytes;
+        this.stage = stage;
+        this.observedBytes = observedBytes;
+    }
+}

package/dist/core/codex-native/core-skill-manifest.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL } from '../imagegen/imagegen-model-policy.js';
 import { PACKAGE_VERSION, nowIso, sha256 } from '../fsx.js';
 import { coreEngineeringDirectiveReference } from '../lean-engineering-policy.js';
 import { normalizeDollarSkillName, prefixKnownSksDollarReferences, sksPrefixedDollarCommand, sksPrefixedSkillName } from '../routes/dollar-prefix.js';
@@ -60,10 +61,10 @@ const CORE_SKILL_DEFINITIONS = [
         route: '$Image-UX-Review',
         purpose: 'run one screenshot-to-generated-annotation-to-UX-report pipeline without duplicate picker skills.',
         when: 'Use for $Image-UX-Review, $UX-Review, $Visual-Review, or $UI-UX-Review requests; all aliases resolve to this one canonical skill.',
-        workflow: 'Capture or attach the real source screenshot first; web/browser/webapp capture must pass the Codex Chrome Extension readiness gate first, while Computer Use is reserved for native Mac/non-web surfaces. Send the source image as the I2I reference to the selected Codex imagegen provider with gpt-image-2 and a senior Toss UI/UX designer prompt that visibly adds numbered P0/P1/P2/P3 callouts, hierarchy, contrast, alignment, density, affordance, eye-flow arrows, and a corrected mini-comp. Then analyze the generated annotated image pixels with vision/OCR, not the source screenshot, and write the issue ledger, extraction report, and UX/UI change report with the generated image path and sha256.',
+        workflow: ("Capture or attach the real source screenshot first; web/browser/webapp capture must pass the Codex Chrome Extension readiness gate first, while Computer Use is reserved for native Mac/non-web surfaces. Send the source image as the I2I reference to the selected Codex imagegen provider with " + IMAGEGEN_MODEL + " and a senior Toss UI/UX designer prompt that visibly adds numbered P0/P1/P2/P3 callouts, hierarchy, contrast, alignment, density, affordance, eye-flow arrows, and a corrected mini-comp. Then analyze the generated annotated image pixels with vision/OCR, not the source screenshot, and write the issue ledger, extraction report, and UX/UI change report with the generated image path and sha256."),
         safety: 'Do not substitute text-only critique, a source-screenshot-only report, placeholders, partial image frames, mock evidence, or an unrelated API provider for the selected real imagegen path. Apply fixes only when requested and recheck changed screens.',
         cli: 'sks ux-review run --image <path> [--fix] --json; legacy $sks-ux-review, $sks-visual-review, and $sks-ui-ux-review inputs route here internally.',
-        evidence: 'image-ux-screen-inventory.json, image-ux-gpt-image-2-request.json, image-ux-gpt-image-2-response.json, image-ux-generated-review-ledger.json, image-ux-issue-ledger.json, image-ux-callout-extraction-report.json, image-ux-iteration-report.json, and image-ux-review-gate.json.',
+        evidence: 'image-ux-screen-inventory.json, image-ux-imagegen-request.json, image-ux-imagegen-response.json, image-ux-generated-review-ledger.json, image-ux-issue-ledger.json, image-ux-callout-extraction-report.json, image-ux-iteration-report.json, and image-ux-review-gate.json.',
         fallback: 'Block full verification if the real source screenshot, completed generated annotated image, generated-image callout extraction, or generated-image-based UX/UI report is unavailable.'
     },
     {

package/dist/core/codex-native/native-capability-repair-matrix.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL } from '../imagegen/imagegen-model-policy.js';
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { ensureDir, nowIso, writeJsonAtomic } from '../fsx.js';
@@ -79,16 +80,16 @@ async function stateForCapability(root, id, imageCapability, nativeFeatureMatrix
             repair_actions: verified
                 ? ['postcheck-imagegen-path-contract']
                 : builtInConfigured
-                    ? ['Invoke Codex App $imagegen with gpt-image-2 in a fresh task and record the selected raster output path before retrying the image route.']
-                    : ['Sign in to Codex App, enable the built-in $imagegen / gpt-image-2 surface, then verify it with a real generated raster output before retrying the image route.'],
+                    ? [("Use the selected model-capable image provider with " + IMAGEGEN_MODEL + " in a fresh task and record the selected raster output path before retrying the image route.")]
+                    : [("Select a provider supporting " + IMAGEGEN_MODEL + " surface, then verify it with a real generated raster output before retrying the image route.")],
             after: null,
             artifact_path: path.join(reports, 'native-capability-repair-matrix.json'),
             core_blockers: [],
             route_blockers: verified ? {} : { 'route-image': [routeBlocker] },
             manual_actions: verified ? [] : [
                 builtInConfigured
-                    ? 'Generate one real raster with Codex App $imagegen / gpt-image-2 and bind its output path to the route evidence.'
-                    : 'Sign in to Codex App and enable/use the built-in $imagegen / gpt-image-2 surface before image routes.'
+                    ? ("Generate one real raster with the selected model-capable provider: " + IMAGEGEN_MODEL + " and bind its output path to the route evidence.")
+                    : ("Select a provider supporting " + IMAGEGEN_MODEL + " surface before image routes.")
             ],
             blockers: [],
             warnings: verified ? [] : [