sneakoscope 10.1.4 → 10.1.6

package/README.md

@@ -16,7 +16,7 @@
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-Current package: **SKS 10.1.4**. Install the latest stable release from npm.
+Current package: **SKS 10.1.6**. Install the latest stable release from npm.
 
 [Quick start](#install-in-one-command) · [Commands](#everyday-commands) · [SKS Center](#sks-center-macos) · [Documentation](#documentation) · [Changelog](CHANGELOG.md)
 

package/config/skills-hash-ledger.v1.json

@@ -111,6 +111,7 @@
     {
       "canonical_name": "sks-design-artifact-expert",
       "trusted_sha256": [
+        "6db9a7088e5f8d21dec9c8eed00abe665e1e89f19dcbb6d8472d77e4551cb556",
         "a09daba0a2e479a68ed81ec6fba8d70e54c8398ed86f3d1879f874b98480b97c",
         "4a28d166eaf0bc4477b566b056034f972a7034165e36d8186daa9947bf92e3cf"
       ]
@@ -118,6 +119,7 @@
     {
       "canonical_name": "sks-design-system-builder",
       "trusted_sha256": [
+        "47654c9f74317abbd0a5a75f89cd2d563708e8234e8887cc7ab39bf49030abaa",
         "0a41e6ace960abaaf6abf5e7b1e53fd39f414e1e00b59fa725f2db9e3eb05b58",
         "c4f0007cad5774510bdc55e2815ce0911c220afa8d5dd4efc327ba1231c8f3da"
       ]
@@ -125,6 +127,7 @@
     {
       "canonical_name": "sks-design-ui-editor",
       "trusted_sha256": [
+        "6c24e950a12dec52c625964069c7c21a0220a58e0f69f977d802f44fdb03a940",
         "83a806cc93a3c5342e0dccfc6a45983382d5bf74d1226c4e3288228db22b737a",
         "1b65f0028a6dcb2f7eeab0b0df411a75546bc3aefa8a76067e1818da000c2249"
       ]
@@ -243,12 +246,14 @@
     {
       "canonical_name": "sks-image-ux-review",
       "trusted_sha256": [
+        "54d4169dc7f362ac9fe2d090bd2612e41d30acbc3e883d6bd382929bdfb9459e",
         "9293346873b5fb25a9d93b630064a2c8ceede2bfdfa4c6ffe7fbb7f64da6595c"
       ]
     },
     {
       "canonical_name": "sks-imagegen",
       "trusted_sha256": [
+        "478e3d8f805eed55c3f3e6c2069142482a7dbd8fa5d9a59f03b136e0e1cb77d0",
         "a7f466ba1829a757f38432fbe8c3a672e22e91948537dafe8f8ce09561d2256e",
         "7a1f9372b03975886233a623031f41e06fd782b1e7a3409517bb428d9c6b76dd"
       ]
@@ -256,6 +261,7 @@
     {
       "canonical_name": "sks-imagegen-source-scout",
       "trusted_sha256": [
+        "95faf4358f1c6567ca6894bfb577629f14a23d623716be70325c0ff9a893d42e",
         "95e71d4431a4c1f6911f0f76eaa1c2b475c52fd22d35c0a6c241e21e090507ad",
         "d648b571c674ed3be862bc0e8b2110f88c2bee54292bb009df0b0b2dbd6d400b"
       ]
@@ -282,6 +288,7 @@
     {
       "canonical_name": "sks-naruto",
       "trusted_sha256": [
+        "b981bea4183376c6c0204941ad6c2e78782e2cdea4f8d25cc85630c609faaf95",
         "5df9c9678eb68fd79ceb998ae7a52dd54dc92336ad5169e8a01acca89f76bd60",
         "a1219f6dbad9c8c185953125ef0b8dccf081aa01efb8e8acaa543c6214ac049c",
         "d0d5968e78ac25e1d3e588735de1ddbcf149cfb3165edebca5dec1ed7c7a5c46",
@@ -316,6 +323,7 @@
     {
       "canonical_name": "sks-ppt",
       "trusted_sha256": [
+        "c9a0d90e12560dd3f04959869051370e6baf46eda6eb63f708ea1661c5c9d041",
         "1d4de05afd42ee5739c0ed925af9e0ac4785fc746e659c60d3d908d465e6386c",
         "02e8a0758ec6d056ce9851a5a4505b1d32e302e730be3eb169a41392a5d6b2e2",
         "329fc6ee24bb04478b18fb6ccd3691cd7cbb50e1b77ca7b6136383d00b3b0bb4"

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "10.1.4"
+version = "10.1.6"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "10.1.4"
+version = "10.1.6"
 edition = "2021"
 
 [dependencies]

package/dist/cli/install-helpers.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL } from '../core/imagegen/imagegen-model-policy.js';
 import path from 'node:path';
 import fsp from 'node:fs/promises';
 import { stdin as input, stdout as output } from 'node:process';
@@ -60,7 +61,7 @@ export async function postinstall({ bootstrap }) {
         console.log('Configure providers explicitly with `sks bridge provider configure codex-lb ...` or `sks bridge provider configure openrouter ...`.');
         const imagegenRepair = await ensureCodexImagegenDuringInstall();
         if (imagegenRepair.status === 'ready')
-            console.log('Codex App Image Gen: ready ($imagegen/gpt-image-2 detected).');
+            console.log(("Image generation provider capability ready (requested model: " + IMAGEGEN_MODEL + "; output not verified)."));
         else if (imagegenRepair.status === 'recovered')
             console.log('Codex App Image Gen: recovered and re-detected. Start a new Codex/Work task; restart the desktop app only if the new task still lacks $imagegen.');
         else if (imagegenRepair.status === 'blocked')

package/dist/commands/doctor.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL } from '../core/imagegen/imagegen-model-policy.js';
 import os from 'node:os';
 import path from 'node:path';
 import { projectRoot, exists, formatBytes, nowIso, readText, writeJsonAtomic } from '../core/fsx.js';
@@ -1188,7 +1189,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 blockers: ['codex_imagegen_current_task_tool_manifest_unverified', 'codex_imagegen_real_output_unverified'],
                 manual_actions: [
                     'Start a fresh Codex/Work task so $imagegen is present in its tool manifest.',
-                    'Invoke $imagegen with gpt-image-2 and bind the selected raster output path to route evidence.'
+                    ("Invoke $imagegen with " + IMAGEGEN_MODEL + " and bind the selected raster output path to route evidence.")
                 ],
                 communication_test: {
                     level: 'flag_level',

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "10.1.4",
+  "package_version": "10.1.6",
   "skills": [
     {
       "canonical_name": "sks",
@@ -138,8 +138,9 @@
     {
       "canonical_name": "sks-design-artifact-expert",
       "type": "official",
-      "content_sha256": "a09daba0a2e479a68ed81ec6fba8d70e54c8398ed86f3d1879f874b98480b97c",
+      "content_sha256": "6db9a7088e5f8d21dec9c8eed00abe665e1e89f19dcbb6d8472d77e4551cb556",
       "hash_history": [
+        "a09daba0a2e479a68ed81ec6fba8d70e54c8398ed86f3d1879f874b98480b97c",
         "4a28d166eaf0bc4477b566b056034f972a7034165e36d8186daa9947bf92e3cf"
       ],
       "deprecated_aliases": []
@@ -147,8 +148,9 @@
     {
       "canonical_name": "sks-design-system-builder",
       "type": "official",
-      "content_sha256": "0a41e6ace960abaaf6abf5e7b1e53fd39f414e1e00b59fa725f2db9e3eb05b58",
+      "content_sha256": "47654c9f74317abbd0a5a75f89cd2d563708e8234e8887cc7ab39bf49030abaa",
       "hash_history": [
+        "0a41e6ace960abaaf6abf5e7b1e53fd39f414e1e00b59fa725f2db9e3eb05b58",
         "c4f0007cad5774510bdc55e2815ce0911c220afa8d5dd4efc327ba1231c8f3da"
       ],
       "deprecated_aliases": []
@@ -156,8 +158,9 @@
     {
       "canonical_name": "sks-design-ui-editor",
       "type": "official",
-      "content_sha256": "83a806cc93a3c5342e0dccfc6a45983382d5bf74d1226c4e3288228db22b737a",
+      "content_sha256": "6c24e950a12dec52c625964069c7c21a0220a58e0f69f977d802f44fdb03a940",
       "hash_history": [
+        "83a806cc93a3c5342e0dccfc6a45983382d5bf74d1226c4e3288228db22b737a",
         "1b65f0028a6dcb2f7eeab0b0df411a75546bc3aefa8a76067e1818da000c2249"
       ],
       "deprecated_aliases": []
@@ -305,15 +308,18 @@
     {
       "canonical_name": "sks-image-ux-review",
       "type": "core",
-      "content_sha256": "9293346873b5fb25a9d93b630064a2c8ceede2bfdfa4c6ffe7fbb7f64da6595c",
-      "hash_history": [],
+      "content_sha256": "54d4169dc7f362ac9fe2d090bd2612e41d30acbc3e883d6bd382929bdfb9459e",
+      "hash_history": [
+        "9293346873b5fb25a9d93b630064a2c8ceede2bfdfa4c6ffe7fbb7f64da6595c"
+      ],
       "deprecated_aliases": []
     },
     {
       "canonical_name": "sks-imagegen",
       "type": "official",
-      "content_sha256": "a7f466ba1829a757f38432fbe8c3a672e22e91948537dafe8f8ce09561d2256e",
+      "content_sha256": "478e3d8f805eed55c3f3e6c2069142482a7dbd8fa5d9a59f03b136e0e1cb77d0",
       "hash_history": [
+        "a7f466ba1829a757f38432fbe8c3a672e22e91948537dafe8f8ce09561d2256e",
         "7a1f9372b03975886233a623031f41e06fd782b1e7a3409517bb428d9c6b76dd"
       ],
       "deprecated_aliases": []
@@ -321,8 +327,9 @@
     {
       "canonical_name": "sks-imagegen-source-scout",
       "type": "official",
-      "content_sha256": "95e71d4431a4c1f6911f0f76eaa1c2b475c52fd22d35c0a6c241e21e090507ad",
+      "content_sha256": "95faf4358f1c6567ca6894bfb577629f14a23d623716be70325c0ff9a893d42e",
       "hash_history": [
+        "95e71d4431a4c1f6911f0f76eaa1c2b475c52fd22d35c0a6c241e21e090507ad",
         "d648b571c674ed3be862bc0e8b2110f88c2bee54292bb009df0b0b2dbd6d400b"
       ],
       "deprecated_aliases": []
@@ -346,8 +353,9 @@
     {
       "canonical_name": "sks-naruto",
       "type": "core",
-      "content_sha256": "5df9c9678eb68fd79ceb998ae7a52dd54dc92336ad5169e8a01acca89f76bd60",
+      "content_sha256": "b981bea4183376c6c0204941ad6c2e78782e2cdea4f8d25cc85630c609faaf95",
       "hash_history": [
+        "5df9c9678eb68fd79ceb998ae7a52dd54dc92336ad5169e8a01acca89f76bd60",
         "a1219f6dbad9c8c185953125ef0b8dccf081aa01efb8e8acaa543c6214ac049c",
         "d0d5968e78ac25e1d3e588735de1ddbcf149cfb3165edebca5dec1ed7c7a5c46",
         "34222c72e4e1ead3584907f4d905444b7de820283ee7348018f110d5e6b04461",
@@ -388,8 +396,9 @@
     {
       "canonical_name": "sks-ppt",
       "type": "official",
-      "content_sha256": "1d4de05afd42ee5739c0ed925af9e0ac4785fc746e659c60d3d908d465e6386c",
+      "content_sha256": "c9a0d90e12560dd3f04959869051370e6baf46eda6eb63f708ea1661c5c9d041",
       "hash_history": [
+        "1d4de05afd42ee5739c0ed925af9e0ac4785fc746e659c60d3d908d465e6386c",
         "02e8a0758ec6d056ce9851a5a4505b1d32e302e730be3eb169a41392a5d6b2e2",
         "329fc6ee24bb04478b18fb6ccd3691cd7cbb50e1b77ca7b6136383d00b3b0bb4"
       ],

package/dist/core/agents/agent-effort-policy.js

@@ -43,7 +43,7 @@ export function decideOfficialSubagentModel(input = {}) {
                 'requested model/effort profile unavailable blocks instead of silently falling back'
             ],
             downshift_triggers: [
-                'ordinary UI, logic, backend, or native implementation selects Astra High',
+                'instructed UI, logic, backend, or native implementation selects Astra Low',
                 'long-context, Browser/Chrome, Computer Use, image-generation, or large search selects Astra Medium',
                 'tiny short-context mechanical search/typing/rename work selects Astra Low'
             ]
@@ -97,7 +97,7 @@ export function decideOfficialSubagentModel(input = {}) {
             'requested model/effort profile unavailable blocks instead of silently falling back'
         ],
         downshift_triggers: [
-            'ordinary UI, logic, backend, or native implementation selects Astra High',
+            'instructed UI, logic, backend, or native implementation selects Astra Low',
             'long-context, Browser/Chrome, Computer Use, or image-generation execution selects Astra Medium',
             'tiny short-context mechanical work selects Astra Low'
         ]
@@ -132,7 +132,7 @@ export function buildAgentEffortPolicy(roster = {}) {
         agent_count: roster.agent_count || decisions.length,
         concurrency: roster.concurrency || decisions.length,
         decisions,
-        rule: 'All child agents use GPT-6 Astra: Low for tiny short-context mechanical work, Medium for reads and tool execution, High for ordinary implementation, and Max for focused judgment. The parent keeps its user-selected model.'
+        rule: 'All child agents use GPT-6 Astra: Low for tiny short-context mechanical work and instructed implementation, Medium for reads and tool execution, and Max for focused judgment. The parent keeps its user-selected model, reasoning effort, and service tier; explicit Astra effort preferences may override role defaults.'
     };
 }
 export function reasoningProfileName(effort) {

package/dist/core/agents/official-subagent-helper-policy.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL } from '../imagegen/imagegen-model-policy.js';
 import path from 'node:path';
 import { nowIso, readJson, readText, writeJsonAtomic } from '../fsx.js';
 export const OFFICIAL_SUBAGENT_HELPER_POLICY_SCHEMA = 'sks.official-subagent-helper-policy.v1';
@@ -42,7 +43,7 @@ export async function writeOfficialSubagentHelperPolicy(root, input = {}) {
         built_in_agents_allowed: builtInAgentsAllowed,
         codex_app_capabilities_allowed: codexAppCapabilitiesAllowed,
         codex_builtin_imagegen_helper_allowed: true,
-        preferred_image_generation_surface: 'Codex App $imagegen/gpt-image-2',
+        preferred_image_generation_surface: ("Selected image provider: " + IMAGEGEN_MODEL + ""),
         codex_app_builtin_evidence_class: 'codex_app_builtin',
         api_fallback_evidence_class: 'api_fallback',
         provider_surface_evidence_required: true,

package/dist/core/bench.js

@@ -69,7 +69,7 @@ export const TRUST_VALIDATE_BENCH_COMMAND = 'sks trust validate bench-fixture --
 export const CORE_BENCH_WARMUP_ITERATIONS = 1;
 export const UX_REVIEW_STAGED_LATENCY_BUDGETS = Object.freeze({
     source_screenshot_ingest: 500,
-    gpt_image_2_generation: 120_000,
+    imagegen_generation: 120_000,
     callout_extraction: 120_000,
     fix_task_planning: 500,
     recapture_re_review: 120_000,

package/dist/core/codex-app.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL, CODEX_BUILTIN_IMAGEGEN_MODEL } from './imagegen/imagegen-model-policy.js';
 import path from 'node:path';
 import os from 'node:os';
 import fsp from 'node:fs/promises';
@@ -483,7 +484,7 @@ function codexNativeSksMenuStatus() {
 export function codexAppGuidance({ appInstalled, codex, mcpList, featureList, requiredFeatureFlags = {}, requiredFeatureFlagsOk = true, defaultPlugins = { ok: true, missing_enabled: [] }, productDesignPlugin = null, pluginSkillShadows = { ok: true, blocking: [] }, fastModeConfig = { ok: true, blockers: [] }, providerModelUi = null, nativeSksMenu = null, gitActions = { ok: true, blockers: [] }, imageGenerationReady, inAppBrowserReady, browserUseFeatureReady, computerUseReady, browserUseReady, browserToolReady, computerUseMcpListed, browserUseMcpListed, chromeExtension, remoteControl }) {
     const lines = [];
     if (!appInstalled) {
-        lines.push('Install and open Codex App for first-party MCP/plugin tools. Base Codex CLI flows remain available, but Codex Computer Use and imagegen/gpt-image-2 evidence will be unavailable until Codex App is ready.');
+        lines.push(("Install and open Codex App for first-party MCP/plugin tools. Base Codex CLI flows remain available, but Codex Computer Use requires the App; imagegen/" + IMAGEGEN_MODEL + " evidence will be unavailable until Codex App is ready."));
         lines.push(`Docs: ${CODEX_APP_DOCS_URL}`);
     }
     if (!codex?.bin)
@@ -571,10 +572,10 @@ export function codexAppGuidance({ appInstalled, codex, mcpList, featureList, re
         lines.push('Codex Chrome Extension is ready; SKS web/browser/webapp QA and UX review should use it before any other web surface.');
     }
     if (imageGenerationReady) {
-        lines.push('Image generation is enabled; required raster assets and generated image-review evidence must invoke $imagegen/gpt-image-2 and record real output.');
+        lines.push(("The built-in image tool is enabled. Current-model image work requires a provider that explicitly selects " + IMAGEGEN_MODEL + " and record real output."));
     }
     else if (appInstalled || codex?.bin) {
-        lines.push('Codex image_generation was not visible from `codex features list`. Required imagegen/gpt-image-2 evidence must stay blocked or unverified until $imagegen is available in Codex App.');
+        lines.push(("Codex image_generation was not visible from `codex features list`. Required imagegen/" + IMAGEGEN_MODEL + " evidence must stay blocked or unverified until $imagegen is available in Codex App."));
         lines.push('Run: sks doctor --fix to attempt Codex CLI/App image_generation repair, then rerun the blocked visual route.');
     }
     if (computerUseReady && !computerUseMcpListed) {
@@ -588,7 +589,7 @@ export function codexAppGuidance({ appInstalled, codex, mcpList, featureList, re
         lines.push('Browser Use plugin files are installed, but `codex mcp list` does not list a browser-use MCP server. Treat Browser Use as plugin-scoped, not as SKS browser verification evidence.');
     }
     if (!lines.length)
-        lines.push('Codex App, Codex CLI, Chrome Extension, native Computer Use, Browser tooling, and image generation checks look ready. Web UI E2E uses the Chrome Extension path; native non-web visual evidence uses Computer Use; generated image evidence still requires $imagegen/gpt-image-2 output.');
+        lines.push(("Codex App, Codex CLI, Chrome Extension, native Computer Use, Browser tooling, and built-in image feature checks look configured. Web UI E2E uses the Chrome Extension path; native non-web visual evidence uses Computer Use; generated image evidence still requires $imagegen/" + IMAGEGEN_MODEL + " output."));
     return lines;
 }
 export function formatCodexAppStatus(status, { includeRaw = false } = {}) {
@@ -609,7 +610,7 @@ export function formatCodexAppStatus(status, { includeRaw = false } = {}) {
         `Chrome Ext: ${status.chrome_extension?.ok ? 'ok' : `setup ${(status.chrome_extension?.blockers || []).join(', ') || 'required'}`}`,
         `Computer Use:${status.mcp.has_computer_use ? status.mcp.computer_use_source === 'plugin_cache' ? ' installed (verify @Computer in thread)' : ' ok' : ' missing'}`,
         `Browser:     ${status.features?.browser_tool_ready ? `ok (${status.features.browser_tool_source})` : status.mcp.has_browser_use ? status.mcp.browser_use_source === 'plugin_cache' ? 'installed (plugin scoped)' : 'ok' : 'missing'}`,
-        `Image Gen:   ${status.features?.image_generation ? 'ok ($imagegen/gpt-image-2)' : status.features?.checked ? 'missing' : 'not checked'}`,
+        `Image Gen:   ${status.features?.image_generation ? (`enabled (${CODEX_BUILTIN_IMAGEGEN_MODEL}; ${IMAGEGEN_MODEL} provider unverified)`) : status.features?.checked ? 'missing' : 'not checked'}`,
         `Ready:       ${status.ok ? 'yes' : 'no'}`,
         '',
         ...status.guidance.map((line) => `- ${line}`)

package/dist/core/codex-lb/desktop-bridge/http-forward.js

@@ -7,7 +7,7 @@ import { buildOfficialPassthroughHeaders, buildProviderUpstreamHeaders, rewriteR
 import { createDesktopBridgeRejectionLogger } from './rejection-log.js';
 import { ensureDesktopBridgeRemoteTarget, isUnreachableUpstreamError, refreshDesktopBridgeRemoteTarget, resolveAndBindDesktopBridgeRouteContext, resolveCodexSessionIdentity, resolveDesktopBridgeTarget, safeBridgeErrorCode, singleBridgeHeader } from './security.js';
 import { desktopBridgeListenOrigin } from './state.js';
-import { DesktopBridgeError } from './types.js';
+import { DEFAULT_DESKTOP_BRIDGE_MAX_REQUEST_BODY_BYTES, DesktopBridgeError, DesktopBridgeRequestBodyTooLargeError } from './types.js';
 const MAX_UPSTREAM_ERROR_BODY_BYTES = 1024 * 1024;
 function decodeBridgeRequestBody(body, encoding, maximum) {
     const options = { maxOutputLength: maximum };
@@ -20,7 +20,9 @@ function decodeBridgeRequestBody(body, encoding, maximum) {
                 try {
                     return zlib.inflateSync(body, options);
                 }
-                catch {
+                catch (error) {
+                    if (error.code === 'ERR_BUFFER_TOO_LARGE')
+                        throw error;
                     return zlib.inflateRawSync(body, options);
                 }
             case 'br':
@@ -38,6 +40,9 @@ function decodeBridgeRequestBody(body, encoding, maximum) {
     catch (error) {
         if (error instanceof DesktopBridgeError)
             throw error;
+        if (error.code === 'ERR_BUFFER_TOO_LARGE') {
+            throw new DesktopBridgeRequestBodyTooLargeError(maximum, 'decoded');
+        }
         throw new DesktopBridgeError('bridge_responses_body_invalid_json');
     }
 }
@@ -48,14 +53,14 @@ function bodyCarriesModel(rawUrl) {
 async function readBoundedBody(req, maximum) {
     const declared = Number(req.headers['content-length'] || 0);
     if (Number.isFinite(declared) && declared > maximum)
-        throw new DesktopBridgeError('bridge_request_body_too_large');
+        throw new DesktopBridgeRequestBodyTooLargeError(maximum, 'encoded', declared);
     const chunks = [];
     let total = 0;
-    for await (const raw of req) {
+    for await (const raw of req.iterator({ destroyOnReturn: false })) {
         const chunk = Buffer.isBuffer(raw) ? raw : Buffer.from(raw);
         total += chunk.length;
         if (total > maximum)
-            throw new DesktopBridgeError('bridge_request_body_too_large');
+            throw new DesktopBridgeRequestBodyTooLargeError(maximum, 'encoded', total);
         chunks.push(chunk);
     }
     return Buffer.concat(chunks);
@@ -79,7 +84,7 @@ export async function prepareDesktopBridgeRequest(req, config) {
     let payload = null;
     let contentEncodingStripped = false;
     if (bodyCarriesModel(req.url)) {
-        const maximum = config.maxRequestBodyBytes ?? 16 * 1024 * 1024;
+        const maximum = config.maxRequestBodyBytes ?? DEFAULT_DESKTOP_BRIDGE_MAX_REQUEST_BODY_BYTES;
         body = await readBoundedBody(req, maximum);
         const encoding = String(req.headers['content-encoding'] || '').trim().toLowerCase();
         let decoded = body;

package/dist/core/codex-lb/desktop-bridge/rejection-log.js

@@ -78,6 +78,9 @@ export function createDesktopBridgeRejectionLogger(options = {}) {
             ...(Number.isInteger(event.status) ? { status: event.status } : {}),
             ...(providerId ? { provider_id: providerId } : {}),
             ...(publicModel ? { public_model: publicModel } : {}),
+            ...(Number.isSafeInteger(event.max_request_body_bytes) && event.max_request_body_bytes > 0 ? { max_request_body_bytes: event.max_request_body_bytes } : {}),
+            ...(Number.isSafeInteger(event.request_body_bytes) && event.request_body_bytes >= 0 ? { request_body_bytes: event.request_body_bytes } : {}),
+            ...(event.request_body_stage === 'encoded' || event.request_body_stage === 'decoded' ? { request_body_stage: event.request_body_stage } : {}),
         });
     };
 }

package/dist/core/codex-lb/desktop-bridge/responses-websocket.js

@@ -5,7 +5,7 @@ import { BRIDGE_OFFICIAL_ROUTE_ID } from '../bridge-contracts.js';
 import { buildOfficialPassthroughWebSocketHeaders, buildProviderWebSocketHeaders } from './header-policy.js';
 import { createDesktopBridgeRejectionLogger } from './rejection-log.js';
 import { assertDesktopBridgeRouteContext, ensureDesktopBridgeRemoteTarget, isUnreachableUpstreamError, refreshDesktopBridgeRemoteTarget, resolveAndBindDesktopBridgeRouteContext, resolveCodexSessionIdentity, resolveDesktopBridgeTarget, safeBridgeErrorCode } from './security.js';
-import { DesktopBridgeError } from './types.js';
+import { DEFAULT_DESKTOP_BRIDGE_MAX_REQUEST_BODY_BYTES, DesktopBridgeError } from './types.js';
 const MAX_PENDING_MESSAGES = 256;
 const CLOSE_GRACE_MS = 1_000;
 const INITIAL_CREATE_TIMEOUT_MS = 60 * 60_000;
@@ -19,7 +19,7 @@ function bytes(data) {
 }
 export function forwardResponsesWebSocket(req, socket, head, config) {
     const upgradeIdentity = resolveCodexSessionIdentity(req.headers);
-    const maxBytes = config.maxRequestBodyBytes ?? 16 * 1024 * 1024;
+    const maxBytes = config.maxRequestBodyBytes ?? DEFAULT_DESKTOP_BRIDGE_MAX_REQUEST_BODY_BYTES;
     const server = new WebSocketServer({ noServer: true, clientTracking: false, perMessageDeflate: false, maxPayload: maxBytes });
     try {
         server.handleUpgrade(req, socket, head, (client) => {

package/dist/core/codex-lb/desktop-bridge/security.js

@@ -569,6 +569,10 @@ export function validateDesktopBridgeConfig(config) {
         throw new DesktopBridgeError('bridge_connect_timeout_invalid');
     if (!Number.isFinite(config.idleTimeoutMs) || config.idleTimeoutMs < 1_000 || config.idleTimeoutMs > 86_400_000)
         throw new DesktopBridgeError('bridge_idle_timeout_invalid');
+    if (config.maxRequestBodyBytes !== undefined
+        && (!Number.isSafeInteger(config.maxRequestBodyBytes) || config.maxRequestBodyBytes < 1)) {
+        throw new DesktopBridgeError('bridge_request_body_limit_invalid');
+    }
     if (config.requestTimeoutMs !== undefined
         && (!Number.isFinite(config.requestTimeoutMs) || config.requestTimeoutMs < 1_000 || config.requestTimeoutMs > 120_000)) {
         throw new DesktopBridgeError('bridge_request_timeout_invalid');

package/dist/core/codex-lb/desktop-bridge/server.js

@@ -5,7 +5,7 @@ import { destroyDesktopBridgeUpstreamAgents, forwardHttp, prepareDesktopBridgeRe
 import { createDesktopBridgeRejectionLogger } from './rejection-log.js';
 import { assertAllowedOrigin, assertAllowedPath, assertLoopbackPeer, assertLoopbackListenHost, assertWebSocketUpgrade, prepareDesktopBridgeConfig, safeBridgeErrorCode, validatePreparedDesktopBridgeConfig, } from './security.js';
 import { createDesktopBridgePublicState, desktopBridgeListenOrigin, desktopBridgeStatePath, refreshDesktopBridgeState, removeDesktopBridgeStateIfOwned, writeDesktopBridgeState, } from './state.js';
-import { DesktopBridgeError } from './types.js';
+import { DesktopBridgeError, DesktopBridgeRequestBodyTooLargeError } from './types.js';
 import { PACKAGE_VERSION } from '../../version.js';
 import { DESKTOP_BRIDGE_CLIENT_PATH_PREFIX, DESKTOP_BRIDGE_DIAGNOSTIC_HEALTH_PATH, DESKTOP_BRIDGE_DIAGNOSTIC_PATH, DESKTOP_BRIDGE_DIAGNOSTIC_PROTOCOL } from './types.js';
 import { forwardWebSocket, safeEndUpgradeSocket } from './websocket-forward.js';
@@ -84,6 +84,8 @@ function handleDiagnosticWebSocket(req, socket, head) {
     consume();
 }
 function rejectionStatus(code) {
+    if (code === 'bridge_request_body_too_large')
+        return 413;
     if (code === 'bridge_path_not_allowed')
         return 404;
     if (code === 'bridge_request_capacity_exhausted')
@@ -95,6 +97,8 @@ function rejectionStatus(code) {
     return 400;
 }
 function rejectionStatusText(status) {
+    if (status === 413)
+        return 'Payload Too Large';
     if (status === 404)
         return 'Not Found';
     if (status === 403)
@@ -114,6 +118,11 @@ function writeBridgeRejection(res, error, req) {
         method: req?.method,
         url: req?.url,
         status: rejectionStatus(rejectedCode),
+        ...(error instanceof DesktopBridgeRequestBodyTooLargeError ? {
+            max_request_body_bytes: error.maximumBytes,
+            request_body_bytes: error.observedBytes,
+            request_body_stage: error.stage,
+        } : {}),
     });
     if (res.headersSent) {
         res.destroy(error instanceof Error ? error : undefined);

package/dist/core/codex-lb/desktop-bridge/types.js

@@ -21,3 +21,15 @@ export class DesktopBridgeError extends Error {
         this.code = code;
     }
 }
+export const DEFAULT_DESKTOP_BRIDGE_MAX_REQUEST_BODY_BYTES = 128 * 1024 * 1024;
+export class DesktopBridgeRequestBodyTooLargeError extends DesktopBridgeError {
+    maximumBytes;
+    stage;
+    observedBytes;
+    constructor(maximumBytes, stage, observedBytes) {
+        super('bridge_request_body_too_large');
+        this.maximumBytes = maximumBytes;
+        this.stage = stage;
+        this.observedBytes = observedBytes;
+    }
+}

package/dist/core/codex-native/core-skill-manifest.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL } from '../imagegen/imagegen-model-policy.js';
 import { PACKAGE_VERSION, nowIso, sha256 } from '../fsx.js';
 import { coreEngineeringDirectiveReference } from '../lean-engineering-policy.js';
 import { normalizeDollarSkillName, prefixKnownSksDollarReferences, sksPrefixedDollarCommand, sksPrefixedSkillName } from '../routes/dollar-prefix.js';
@@ -14,7 +15,7 @@ const CORE_SKILL_DEFINITIONS = [
         route: '$Naruto',
         purpose: 'run a Codex official subagent workflow with official agent threads while parent integration remains owner.',
         when: 'Use when the user explicitly invokes $Naruto or the selected route requires bounded parallel delegation.',
-        workflow: 'Run sks naruto run "<task>" [--agents N] [--max-threads N] [--json] with Codex official subagent threads only. The parent owns decomposition, per-wave capacity, later root-owned waves, integration, and final verification. Automatic targets begin at 4/6/8/16 by task size: bounded, explicit parallel, large-scale, then mass mechanical or exploration fan-out on the Astra Low/Astra Medium lanes. After decomposition both lanes may expand to the SKS-owned 256-child ceiling when independent useful slices and real host capacity remain positive; max_threads defaults to a 256-child frame budget cap, never a target. A measured lower Codex host cap or explicit provider/API budget remains authoritative, and multi-wave scheduling reuses returned capacity. Use gpt-6-astra for every child, preserving parent settings and ignoring child-model overrides. Route tiny mechanical and mass shards to Astra Low, broad search and exploration shards to Astra Medium, implementation to Astra High, and judgment to Astra Max; max_depth=1 blocks nested delegation. Wait for every planned thread before final. In an active Codex App Naruto mission, commit the strict parent evidence with sks naruto parent-summary --mission <id> --stdin, then return localized Markdown without exposing the JSON.',
+        workflow: 'Run sks naruto run "<task>" [--agents N] [--max-threads N] [--json] with Codex official subagent threads only. The parent owns decomposition, per-wave capacity, later root-owned waves, integration, and final verification. Automatic targets begin at 4/6/8/16 by task size: bounded, explicit parallel, large-scale, then mass mechanical or exploration fan-out on the Astra Low/Astra Medium lanes. After decomposition both lanes may expand to the SKS-owned 256-child ceiling when independent useful slices and real host capacity remain positive; max_threads defaults to a 256-child frame budget cap, never a target. A measured lower Codex host cap or explicit provider/API budget remains authoritative, and multi-wave scheduling reuses returned capacity. Use gpt-6-astra for every child, preserving parent settings and ignoring child-model overrides. Route tiny mechanical and mass shards to Astra Low, broad search and exploration shards to Astra Medium, instructed ordinary coding execution to Astra Low, and planning, analysis, review, or other judgment to Astra Max. Keep the four task-class profiles and compatibility IDs; explicit Astra effort preferences, including High, remain supported; max_depth=1 blocks nested delegation. Wait for every planned thread before final. In an active Codex App Naruto mission, commit the strict parent evidence with sks naruto parent-summary --mission <id> --stdin, then return localized Markdown without exposing the JSON.',
         safety: 'Preserve user-authored content, inherit the parent permission mode, do not spawn nested subagents, do not inject the full pack or the full TriWiki context into every child, and do not fall back to another model, process runtime, custom scheduler, or worker pool. The historical Naruto process runtime is removed; stop with explicit blocker evidence when the official path is unavailable.',
         cli: 'sks naruto run "<task>" [--agents N] [--max-threads N] [--json]; sks naruto status|subagents|proof [--mission <id>] [--json]; sks naruto parent-summary --mission <id> --stdin [--json]',
         evidence: 'subagent-plan.json, subagent-events.jsonl, subagent-parent-summary.json, subagent-evidence.json, naruto-summary.json, and naruto-gate.json.',
@@ -60,10 +61,10 @@ const CORE_SKILL_DEFINITIONS = [
         route: '$Image-UX-Review',
         purpose: 'run one screenshot-to-generated-annotation-to-UX-report pipeline without duplicate picker skills.',
         when: 'Use for $Image-UX-Review, $UX-Review, $Visual-Review, or $UI-UX-Review requests; all aliases resolve to this one canonical skill.',
-        workflow: 'Capture or attach the real source screenshot first; web/browser/webapp capture must pass the Codex Chrome Extension readiness gate first, while Computer Use is reserved for native Mac/non-web surfaces. Send the source image as the I2I reference to the selected Codex imagegen provider with gpt-image-2 and a senior Toss UI/UX designer prompt that visibly adds numbered P0/P1/P2/P3 callouts, hierarchy, contrast, alignment, density, affordance, eye-flow arrows, and a corrected mini-comp. Then analyze the generated annotated image pixels with vision/OCR, not the source screenshot, and write the issue ledger, extraction report, and UX/UI change report with the generated image path and sha256.',
+        workflow: ("Capture or attach the real source screenshot first; web/browser/webapp capture must pass the Codex Chrome Extension readiness gate first, while Computer Use is reserved for native Mac/non-web surfaces. Send the source image as the I2I reference to the selected Codex imagegen provider with " + IMAGEGEN_MODEL + " and a senior Toss UI/UX designer prompt that visibly adds numbered P0/P1/P2/P3 callouts, hierarchy, contrast, alignment, density, affordance, eye-flow arrows, and a corrected mini-comp. Then analyze the generated annotated image pixels with vision/OCR, not the source screenshot, and write the issue ledger, extraction report, and UX/UI change report with the generated image path and sha256."),
         safety: 'Do not substitute text-only critique, a source-screenshot-only report, placeholders, partial image frames, mock evidence, or an unrelated API provider for the selected real imagegen path. Apply fixes only when requested and recheck changed screens.',
         cli: 'sks ux-review run --image <path> [--fix] --json; legacy $sks-ux-review, $sks-visual-review, and $sks-ui-ux-review inputs route here internally.',
-        evidence: 'image-ux-screen-inventory.json, image-ux-gpt-image-2-request.json, image-ux-gpt-image-2-response.json, image-ux-generated-review-ledger.json, image-ux-issue-ledger.json, image-ux-callout-extraction-report.json, image-ux-iteration-report.json, and image-ux-review-gate.json.',
+        evidence: 'image-ux-screen-inventory.json, image-ux-imagegen-request.json, image-ux-imagegen-response.json, image-ux-generated-review-ledger.json, image-ux-issue-ledger.json, image-ux-callout-extraction-report.json, image-ux-iteration-report.json, and image-ux-review-gate.json.',
         fallback: 'Block full verification if the real source screenshot, completed generated annotated image, generated-image callout extraction, or generated-image-based UX/UI report is unavailable.'
     },
     {

package/dist/core/codex-native/native-capability-repair-matrix.js

@@ -1,3 +1,4 @@
+import { IMAGEGEN_MODEL } from '../imagegen/imagegen-model-policy.js';
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { ensureDir, nowIso, writeJsonAtomic } from '../fsx.js';
@@ -79,16 +80,16 @@ async function stateForCapability(root, id, imageCapability, nativeFeatureMatrix
             repair_actions: verified
                 ? ['postcheck-imagegen-path-contract']
                 : builtInConfigured
-                    ? ['Invoke Codex App $imagegen with gpt-image-2 in a fresh task and record the selected raster output path before retrying the image route.']
-                    : ['Sign in to Codex App, enable the built-in $imagegen / gpt-image-2 surface, then verify it with a real generated raster output before retrying the image route.'],
+                    ? [("Use the selected model-capable image provider with " + IMAGEGEN_MODEL + " in a fresh task and record the selected raster output path before retrying the image route.")]
+                    : [("Select a provider supporting " + IMAGEGEN_MODEL + " surface, then verify it with a real generated raster output before retrying the image route.")],
             after: null,
             artifact_path: path.join(reports, 'native-capability-repair-matrix.json'),
             core_blockers: [],
             route_blockers: verified ? {} : { 'route-image': [routeBlocker] },
             manual_actions: verified ? [] : [
                 builtInConfigured
-                    ? 'Generate one real raster with Codex App $imagegen / gpt-image-2 and bind its output path to the route evidence.'
-                    : 'Sign in to Codex App and enable/use the built-in $imagegen / gpt-image-2 surface before image routes.'
+                    ? ("Generate one real raster with the selected model-capable provider: " + IMAGEGEN_MODEL + " and bind its output path to the route evidence.")
+                    : ("Select a provider supporting " + IMAGEGEN_MODEL + " surface before image routes.")
             ],
             blockers: [],
             warnings: verified ? [] : [