Sync third-party and MCP marketplace plugins

Constraint: Public skills are published only by explicit administrator action unless they are tracked third-party market sources.
Confidence: high
Scope-risk: narrow
Directive: Keep private/internal skills out of the public marketplace and preserve normal incremental market Git history.
Tested: Marketplace validation passed.

config/external-sources.lock.json

@@ -42,8 +42,8 @@
       "repo": "https://github.com/vercel-labs/skills.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "48dc9e8eb8aa19040e91cb90ba0b642c9cbad57e",
+      "commit": "87a266971d9460a3d2606075b8e91edc83325472",
-      "syncedAt": "2026-10-07T16:00:00Z"
+      "syncedAt": "2026-10-08T15:59:59Z"
     },
     {
       "id": "generate-agents-md",
@@ -105,8 +105,8 @@
       "repo": "https://github.com/nextlevelbuilder/ui-ux-pro-max-skill.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "477bcb28c9812b385cb51a4605ddf30d7b2266e2",
+      "commit": "1a2c459b35f26116fd165b0a0f30597f252749ff",
-      "syncedAt": "2026-10-04T16:00:00Z"
+      "syncedAt": "2026-10-08T15:59:59Z"
     },
     {
       "id": "caveman",
@@ -114,8 +114,8 @@
       "repo": "https://github.com/JuliusBrussee/caveman.git",
       "ref": "main",
       "adapter": "codex-plugin",
-      "commit": "99aafe151a1be72be783e662858e8a0955add59f",
+      "commit": "2e08b9177c07bb7249a8a2d1a6758e5db281d002",
-      "syncedAt": "2026-10-06T07:26:41Z"
+      "syncedAt": "2026-10-08T15:59:59Z"
     },
     {
       "id": "taste-skill",
@@ -132,8 +132,8 @@
       "repo": "https://github.com/shadcn-ui/ui.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "97ddbf4274ed09d02aa7fd34375f2cf1e48cbbf0",
+      "commit": "0132174664c07d41262fb51012d0cc782e458e6c",
-      "syncedAt": "2026-10-07T16:00:00Z"
+      "syncedAt": "2026-10-08T15:59:59Z"
     },
     {
       "id": "frontend-slides",
@@ -168,8 +168,8 @@
       "repo": "https://github.com/hugohe3/ppt-master.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "440557b8dc7c7257b69c04a0b014d5c50a78e6cb",
+      "commit": "b4efe3ddf237a97a42880164759162f8e2412f2f",
-      "syncedAt": "2026-10-07T16:00:00Z"
+      "syncedAt": "2026-10-08T15:59:59Z"
     },
     {
       "id": "grill-me",
@@ -177,8 +177,8 @@
       "repo": "https://github.com/mattpocock/skills.git",
       "ref": "main",
       "adapter": "skill-collection",
-      "commit": "f3fc5632f401156837ee3872f14fe33ccf1024ea",
+      "commit": "b0618bc436ad893b3c5e84e55fba86586d34a404",
-      "syncedAt": "2026-10-07T16:00:00Z"
+      "syncedAt": "2026-10-08T15:59:59Z"
     },
     {
       "id": "updating-gitea-repositories",
@@ -220,10 +220,10 @@
       "id": "artemis-automation",
       "pluginName": "artemis-automation",
       "repo": "https://git.playones.com/chenmingxuan/Artemis-Eapil.git",
-      "ref": "v1.3.0",
+      "ref": "v1.3.2",
       "adapter": "claude-skill",
-      "commit": "606ed941607c9e5482a4acd3f782d2b14acc9d06",
+      "commit": "f826bdf3b070ee5dd0c293167d6a86288ad0591e",
-      "syncedAt": "2026-10-01T16:00:00Z"
+      "syncedAt": "2026-10-08T15:59:59Z"
     },
     {
       "id": "embedded-app-pc-debug",
@@ -258,8 +258,8 @@
       "repo": "https://github.com/vercel/next.js.git",
       "ref": "canary",
       "adapter": "skill-collection",
-      "commit": "aaf0a16f530f097548a9256133f5bad0e9098794",
+      "commit": "7549879a48899af2a54e77c316d174fb6cde111e",
-      "syncedAt": "2026-10-07T16:00:00Z"
+      "syncedAt": "2026-10-08T15:59:59Z"
     },
     {
       "id": "shuorenhua",

plugins/codex/plugins/artemis-automation/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "artemis-automation",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "description": "使用 ARTEMIS MCP 完成 Android 自动化测试、批量执行、失败诊断、历史检索和报告交付。",
   "author": {
     "name": "chenmingxuan",

plugins/codex/plugins/artemis-automation/THIRD_PARTY_SOURCE.json

@@ -1,9 +1,9 @@
 {
   "sourceId": "artemis-automation",
   "repo": "https://git.playones.com/chenmingxuan/Artemis-Eapil.git",
-  "ref": "v1.3.0",
+  "ref": "v1.3.2",
-  "commit": "606ed941607c9e5482a4acd3f782d2b14acc9d06",
+  "commit": "f826bdf3b070ee5dd0c293167d6a86288ad0591e",
   "adapter": "claude-skill",
   "sourcePath": "skills/artemis-automation",
-  "syncedAt": "2026-10-01T16:00:00Z"
+  "syncedAt": "2026-10-08T15:59:59Z"
 }

plugins/codex/plugins/artemis-automation/skills/artemis-automation/SKILL.md

@@ -5,6 +5,8 @@ description: 使用 ARTEMIS MCP 在 Android 真机或模拟器上完成自然语
 
 # ARTEMIS 自动化
 
+当前仅提供 Codex MCP 配置安装与更新：`uv run artemis mcp --install codex`；模板使用 `uv run artemis mcp --generate-config codex` 查看。启动日志会打印实际 Codex 配置路径，更新后重载 MCP。
+
 使用项目提供的 MCP 工具操作 Android。报告由 ARTEMIS 自己生成，不要求宿主 AI 具备 Codex 私有工具、Word 或 Excel 插件。该 Skill 不提供桌面/浏览器自动化，也不提供历史动作脚本回放。
 
 ## 从需求到执行
@@ -35,3 +37,9 @@ description: 使用 ARTEMIS MCP 在 Android 真机或模拟器上完成自然语
 - 批次暂停只停止后续派发；当前任务等待指导时用 `mobile_manage_task(action="pause", trace_id=...)`，真正取消用 `stop`。用户明确要求删除批次记录时先 `mobile_batch(action="get")` 核对编号，再用 `delete`；执行中/排队中的批次不能删，删除会清除该批次的任务历史、报告和文件。服务重启后运行/暂停的任务标记中断，不自动重跑。停止可能保留已经产生的业务效果，不声称自动回滚。
 
 需要编写外部可执行测试代码时，先通过 ARTEMIS 实际探索目标应用，确认页面、定位器和转换。优先动态定位，框架支持时才以已验证坐标兜底；在最终脚本中明确等待条件，不将 AI 思考耗时当作确定性等待。
+
+执行保护默认总时限 1800 秒，单任务、批次和 MCP 都适用，排队及用户暂停不计时。设备观测默认 60 秒、最多 3 次，ADB 命令默认 10 秒；观测失败不会继续向模型发送占位图或旧元素索引。Flash 连续 3 次动作失败先重新观察再切换兜底，兜底仍失败则结束任务并保存原因。不能以提高步数或反复重提任务代替设备诊断。
+
+`mobile_run_task(runtime_overrides={"timeout_seconds":1800,"observation_timeout_seconds":60,"observation_max_attempts":3,"device_command_timeout_seconds":10,"action_failure_attempts":3})` 可为单任务覆盖执行保护；其中 `model` 是 API 模型名，外层 `model` 仍是 Flash/Pro 模式。相同字段也支持批次的 `task_config`。全局默认通过网页功能配置或明确授权的 `mobile_config(section="capabilities", changes={"task_timeout_seconds":1800}, persist_defaults=true)` 保存，对后续任务生效，不接受密钥。
+
+任务已经产生最终结果，但 SDK 线程或资源清理仍卡住时，默认最多再等待 30 秒后回收工作进程，避免继续占用队列。全局可用 `ARTEMIS_WORKER_CLEANUP_TIMEOUT_SECONDS` 或功能配置的 `worker_cleanup_timeout_seconds` 调整，任务 JSON 同名字段可覆盖。原有结果与截图保留，未完成保存的录屏尽力恢复。

plugins/codex/plugins/caveman/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "caveman",
-  "version": "3.1.0",
+  "version": "3.2.0",
   "description": "Caveman 是面向 Codex 的精简表达、代码工作流和上下文压缩 skill 集合。",
   "author": {
     "name": "Julius Brussee",

plugins/codex/plugins/caveman/THIRD_PARTY_SOURCE.json

@@ -2,8 +2,8 @@
   "sourceId": "caveman",
   "repo": "https://github.com/JuliusBrussee/caveman.git",
   "ref": "main",
-  "commit": "99aafe151a1be72be783e662858e8a0955add59f",
+  "commit": "2e08b9177c07bb7249a8a2d1a6758e5db281d002",
   "adapter": "codex-plugin",
   "sourcePath": "plugins/caveman",
-  "syncedAt": "2026-10-06T07:26:41Z"
+  "syncedAt": "2026-10-08T15:59:59Z"
 }

plugins/codex/plugins/caveman/agents/cavecrew-investigator.md

@@ -3,8 +3,8 @@ name: cavecrew-investigator
 description: >
   Read-only code locator. Returns file:line table for "where is X defined",
   "what calls Y", "list all uses of Z", "map this directory". Output is
-  caveman-compressed so the main thread eats ~60% fewer tokens than
+  caveman-compressed, one row per hit, to keep main-thread context small.
-  vanilla Explore. Refuses to suggest fixes.
+  Refuses to suggest fixes.
 model: haiku
 ---
 

plugins/codex/plugins/caveman/skills/cavecrew/SKILL.md

@@ -21,7 +21,7 @@ Rule of thumb: **if you'd want the subagent's output in 1/3 the tokens, pick cav
 
 ## Why this exists (the real win)
 
-Subagent tool results get injected into main context verbatim. A vanilla `Explore` that returns 2k tokens of prose costs 2k tokens of main-context budget every time. The same finding from `cavecrew-investigator` returns ~700 tokens. Across 20 delegations in one session that's the difference between context exhaustion and finishing the task.
+Subagent tool results get injected into main context verbatim. A vanilla `Explore` that returns 2k tokens of prose costs 2k tokens of main-context budget every time. The same finding from `cavecrew-investigator` comes back as a compressed `path:line` table instead. Across 20 delegations in one session that's the difference between context exhaustion and finishing the task.
 
 ## Output contracts
 

plugins/codex/plugins/caveman/skills/caveman-compress/scripts/compress.py

@@ -9,6 +9,7 @@ Usage:
 import contextlib
 import errno
 import hashlib
+import json
 import os
 import re
 import shutil
@@ -17,8 +18,10 @@ import subprocess
 import sys
 import tempfile
 import time
+import urllib.error
+import urllib.request
 from pathlib import Path
-from typing import List, Tuple
+from typing import List, Optional, Tuple
 
 _IS_WINDOWS = os.name == "nt" or sys.platform == "win32"
 _O_NOFOLLOW = getattr(os, "O_NOFOLLOW", 0)  # unix-only; refuses to open through a pre-placed symlink at the lock path
@@ -361,6 +364,52 @@ from .detect import should_compress
 from .validate import validate
 
 MAX_RETRIES = 2
+MAX_FILE_SIZE_BYTES = 500_000
+MAX_FILE_SIZE_LABEL = "500KB"
+
+ENV_ANTHROPIC_API_KEY = "ANTHROPIC_API_KEY"
+ENV_COMPRESS_PROVIDER = "CAVEMAN_COMPRESS_PROVIDER"
+ENV_COMPRESS_MODEL = "CAVEMAN_COMPRESS_MODEL"
+ENV_FALLBACK_MODEL = "CAVEMAN_MODEL"
+ENV_COMPRESS_ENDPOINT = "CAVEMAN_COMPRESS_ENDPOINT"
+ENV_COMPRESS_API_KEY = "CAVEMAN_COMPRESS_API_KEY"
+
+PROVIDER_CLAUDE = "claude"
+PROVIDER_ANTHROPIC = "anthropic"
+PROVIDER_OPENCODE = "opencode"
+PROVIDER_OPENAI_COMPAT = "openai-compat"
+SUPPORTED_PROVIDERS = frozenset({
+    PROVIDER_CLAUDE,
+    PROVIDER_ANTHROPIC,
+    PROVIDER_OPENCODE,
+    PROVIDER_OPENAI_COMPAT,
+})
+DEFAULT_OPENAI_COMPAT_ENDPOINT = "http://localhost:11434/v1"  # Ollama
+
+DEFAULT_CLAUDE_MODEL = "claude-sonnet-4-5"
+CLAUDE_CLI = "claude"
+CLAUDE_PRINT_ARG = "--print"
+CLAUDE_SETTING_SOURCES_ARG = "--setting-sources"
+CLAUDE_STRICT_MCP_ARG = "--strict-mcp-config"
+OPENCODE_CLI = "opencode"
+OPENCODE_RUN_ARG = "run"
+OPENCODE_STANDALONE_ARG = "--standalone"
+OPENCODE_FILE_ARG = "--file"
+OPENCODE_AGENT_ARG = "--agent"
+OPENCODE_AGENT = "caveman-compress"
+MODEL_ARG = "--model"
+OPENCODE_PROMPT_PREFIX = ".caveman-compress-prompt-"
+OPENCODE_PROMPT_SUFFIX = ".md"
+OPENCODE_PROMPT_MESSAGE = "Follow the attached prompt exactly. Return only the final answer."
+# The compressed file is untrusted input sent as a prompt to opencode's agent.
+# opencode 2.x allows every action not explicitly denied (bash, edit,
+# websearch, MCP tools, subagents), so deny all of them: compression needs no
+# tools. Probed on 2.0.22 --standalone: no tools are offered to the model and
+# the --file attachment is still read. A per-agent rule is applied after the
+# global one and the last match wins, so the user's own
+# `agent.build.permission` could re-allow a tool for the default agent; the
+# deny is therefore also bound to OPENCODE_AGENT, an agent only we define.
+OPENCODE_PERMISSION_DENY = {"*": "deny"}
 
 # Output ceiling for one SDK call: the max output of the default model
 # (claude-sonnet-4-5). A body that needs more is refused in call_claude(),
@@ -402,7 +451,7 @@ def _is_smaller_than_body(candidate_body: str, body: str) -> bool:
 
     The non-expansion invariant for #776. It lives in a helper because it has
     to hold for EVERY candidate, not just the first one: a candidate that fails
-    validation is sent back to Claude for repair, and the repaired text is what
+    validation is sent back to the provider for repair, and the repaired text is what
     gets written if it validates. Checking only the first candidate left the
     retry path able to write a longer file and report it as a successful
     compression — the original bug, one branch over.
@@ -428,14 +477,245 @@ def _is_smaller_than_body(candidate_body: str, body: str) -> bool:
 CLAUDE_CALL_TIMEOUT_SECONDS = LOCK_WAIT_SECONDS // (MAX_RETRIES + 1)
 
 
-# ---------- Claude Calls ----------
+# ---------- LLM Calls ----------
+
+
+class AnthropicSdkUnavailable(RuntimeError):
+    """Raised when the explicitly selected Anthropic SDK is unavailable."""
+
+
+def configured_provider() -> str:
+    provider = (
+        os.environ.get(ENV_COMPRESS_PROVIDER) or PROVIDER_CLAUDE
+    ).strip().lower()
+    if provider not in SUPPORTED_PROVIDERS:
+        supported = ", ".join(sorted(SUPPORTED_PROVIDERS))
+        raise ValueError(
+            f"Unsupported caveman-compress provider: {provider}. "
+            f"Supported providers: {supported}"
+        )
+    return provider
+
+
+def configured_model(default_model: Optional[str] = None) -> Optional[str]:
+    model = (
+        os.environ.get(ENV_COMPRESS_MODEL)
+        or os.environ.get(ENV_FALLBACK_MODEL)
+        or default_model
+    )
+    if model is None:
+        return None
+    return model.strip() or None
+
+
+def run_cli(
+    binary_name: str,
+    args: List[str],
+    stdin_prompt: Optional[str] = None,
+    env: Optional[dict] = None,
+) -> str:
+    binary = shutil.which(binary_name) or binary_name
+    command = [binary, *args]
+    run_kwargs = {
+        "text": True,
+        "capture_output": True,
+        "check": True,
+        "encoding": "utf-8",
+        "errors": "replace",
+        "timeout": CLAUDE_CALL_TIMEOUT_SECONDS,
+    }
+    if stdin_prompt is not None:
+        run_kwargs["input"] = stdin_prompt
+    if env is not None:
+        run_kwargs["env"] = env
+    try:
+        result = subprocess.run(command, **run_kwargs)
+        return strip_llm_wrapper(result.stdout.strip())
+    except FileNotFoundError as error:
+        raise RuntimeError(f"{binary_name} CLI not found on PATH") from error
+    except subprocess.CalledProcessError as error:
+        stderr = error.stderr.strip() if error.stderr else "no stderr"
+        raise RuntimeError(f"{binary_name} call failed:\n{stderr}") from error
+    except subprocess.TimeoutExpired as error:
+        raise RuntimeError(
+            f"{binary_name} CLI call timed out after "
+            f"{CLAUDE_CALL_TIMEOUT_SECONDS}s "
+            "(stalled network, or an auth prompt with no TTY to answer it)"
+        ) from error
+
+
+def call_anthropic_sdk(prompt: str) -> str:
+    api_key = os.environ.get(ENV_ANTHROPIC_API_KEY)
+    if not api_key:
+        raise RuntimeError(
+            f"{ENV_ANTHROPIC_API_KEY} is required for provider "
+            f"'{PROVIDER_ANTHROPIC}'"
+        )
+    try:
+        import anthropic
+    except ImportError as error:
+        raise AnthropicSdkUnavailable(
+            f"anthropic package is required for provider '{PROVIDER_ANTHROPIC}'"
+        ) from error
+
+    max_output_tokens = resolve_max_output_tokens()
+    client = anthropic.Anthropic(
+        api_key=api_key,
+        timeout=CLAUDE_CALL_TIMEOUT_SECONDS,
+    )
+    # Streaming, not create(): a large compression needs far more than
+    # the old 8192-token cap, and tokens that arrive as they are
+    # generated keep a long call from tripping the request timeout.
+    with client.messages.stream(
+        model=configured_model(DEFAULT_CLAUDE_MODEL),
+        max_tokens=max_output_tokens,
+        messages=[{"role": "user", "content": prompt}],
+    ) as stream:
+        message = stream.get_final_message()
+    # At the cap the tail was never generated. validate() and the fix
+    # prompt cannot recover it, so fail now instead of paying for
+    # retries that end by restoring the original anyway.
+    if message.stop_reason == "max_tokens":
+        raise RuntimeError(
+            f"Claude output hit the {max_output_tokens}-token cap, so the result is incomplete. "
+            "Split the file into smaller parts and compress each one."
+        )
+    # Tool-heavy models can put a tool_use or thinking block first.
+    text = next(
+        (
+            block.text
+            for block in message.content
+            if getattr(block, "type", None) == "text"
+        ),
+        "",
+    )
+    return strip_llm_wrapper(text.strip())
+
+
+def call_claude_cli(prompt: str) -> str:
+    args = []
+    model = configured_model()
+    if model:
+        args.extend([MODEL_ARG, model])
+    args.extend([
+        CLAUDE_PRINT_ARG,
+        CLAUDE_SETTING_SOURCES_ARG,
+        "",
+        CLAUDE_STRICT_MCP_ARG,
+    ])
+    return run_cli(CLAUDE_CLI, args, prompt)
+
+
+def call_opencode_cli(prompt: str) -> str:
+    args = [OPENCODE_RUN_ARG]
+    model = configured_model()
+    if model:
+        args.extend([MODEL_ARG, model])
+    args.extend([OPENCODE_AGENT_ARG, OPENCODE_AGENT])
+    # --standalone: the shared background service ignores this process's env
+    # (verified on opencode 2.0.22), so the deny config only binds a private
+    # server. Never pass --auto. Any inline config the user set is kept.
+    args.append(OPENCODE_STANDALONE_ARG)
+    try:
+        config = json.loads(os.environ.get("OPENCODE_CONFIG_CONTENT") or "{}")
+    except ValueError:
+        config = None
+    if not isinstance(config, dict):
+        raise RuntimeError(
+            "OPENCODE_CONFIG_CONTENT must be a strict JSON object (no comments or "
+            "trailing commas) so compress can add its tool-deny rule; fix or unset it."
+        )
+    config["permission"] = OPENCODE_PERMISSION_DENY
+    config["agent"] = {
+        **(config.get("agent") or {}),
+        OPENCODE_AGENT: {"permission": OPENCODE_PERMISSION_DENY},
+    }
+    env = {**os.environ, "OPENCODE_CONFIG_CONTENT": json.dumps(config)}
+
+    prompt_path = None
+    try:
+        with tempfile.NamedTemporaryFile(
+            "w",
+            encoding="utf-8",
+            prefix=OPENCODE_PROMPT_PREFIX,
+            suffix=OPENCODE_PROMPT_SUFFIX,
+            delete=False,
+        ) as prompt_file:
+            prompt_path = Path(prompt_file.name)
+            prompt_file.write(prompt)
+        args.extend(
+            [OPENCODE_FILE_ARG, str(prompt_path), OPENCODE_PROMPT_MESSAGE]
+        )
+        return run_cli(OPENCODE_CLI, args, env=env)
+    finally:
+        if prompt_path is not None:
+            # Warn, never raise: raising here would replace the real opencode
+            # error (or a good result) with a cleanup failure.
+            try:
+                prompt_path.unlink(missing_ok=True)
+            except OSError:
+                print(
+                    f"warning: could not delete temporary opencode prompt {prompt_path}",
+                    file=sys.stderr,
+                )
+
+
+def call_openai_compat(prompt: str) -> str:
+    """POST to any OpenAI-compatible /chat/completions (Ollama, llama.cpp,
+    vLLM, LM Studio). Standard library only, so no new dependency."""
+    model = configured_model()
+    if not model:
+        raise RuntimeError(
+            f"{ENV_COMPRESS_MODEL} is required for provider '{PROVIDER_OPENAI_COMPAT}'"
+        )
+    base = os.environ.get(ENV_COMPRESS_ENDPOINT, DEFAULT_OPENAI_COMPAT_ENDPOINT).rstrip("/")
+    body = {"model": model, "messages": [{"role": "user", "content": prompt}], "stream": False}
+    request = urllib.request.Request(
+        f"{base}/chat/completions",
+        data=json.dumps(body).encode("utf-8"),
+        headers={"Content-Type": "application/json"},
+    )
+    api_key = os.environ.get(ENV_COMPRESS_API_KEY)
+    if api_key:
+        # Unredirected: urllib copies ordinary headers onto a redirect, even
+        # one to another host.
+        request.add_unredirected_header("Authorization", f"Bearer {api_key}")
+    try:
+        with urllib.request.urlopen(request, timeout=CLAUDE_CALL_TIMEOUT_SECONDS) as response:
+            raw = response.read()
+    except urllib.error.HTTPError as error:
+        detail = error.read().decode("utf-8", "replace")[:500]
+        raise RuntimeError(
+            f"{PROVIDER_OPENAI_COMPAT} call failed: HTTP {error.code}: {detail}"
+        ) from error
+    except OSError as error:  # URLError, refused connection, timeout
+        reason = getattr(error, "reason", error)
+        raise RuntimeError(f"{PROVIDER_OPENAI_COMPAT} call to {base} failed: {reason}") from error
+    try:
+        choice = json.loads(raw)["choices"][0]
+        content = choice["message"].get("content")
+    except (ValueError, KeyError, IndexError, TypeError, AttributeError):
+        detail = raw.decode("utf-8", "replace")[:500]
+        raise RuntimeError(
+            f"{PROVIDER_OPENAI_COMPAT} call to {base} returned an unexpected response: {detail}"
+        ) from None
+    # Same rule as the SDK path: a truncated body is never returned.
+    if choice.get("finish_reason") == "length":
+        raise RuntimeError(
+            f"{PROVIDER_OPENAI_COMPAT} output hit the server's token cap, so the result is "
+            "incomplete. Split the file into smaller parts and compress each one."
+        )
+    return strip_llm_wrapper((content or "").strip())
 
 
 def call_claude(prompt: str) -> str:
-    """Send a prompt to Claude.
+    """Send a prompt to the configured compression provider.
 
     Prefers the Anthropic SDK when ANTHROPIC_API_KEY is set; otherwise falls
-    back to the ``claude --print`` CLI (which handles desktop auth).
+    back to the ``claude --print`` CLI (which handles desktop auth). Set
+    ``CAVEMAN_COMPRESS_PROVIDER=opencode`` and ``CAVEMAN_COMPRESS_MODEL`` (or
+    ``CAVEMAN_MODEL``) to route compression through opencode instead, or
+    ``openai-compat`` for an OpenAI-compatible server such as local Ollama.
 
     On Windows the CLI subprocess decoding defaults to the system codepage
     (cp1251 / cp1252) and crashes on UTF-8 output — see issue #152. Pinning
@@ -444,68 +724,19 @@ def call_claude(prompt: str) -> str:
     report. Windows users with non-ASCII content can also set
     ``ANTHROPIC_API_KEY`` to route through the SDK and skip the subprocess.
     """
-    api_key = os.environ.get("ANTHROPIC_API_KEY")
+    provider = configured_provider()
-    if api_key:
+    if provider == PROVIDER_OPENCODE:
+        return call_opencode_cli(prompt)
+    if provider == PROVIDER_OPENAI_COMPAT:
+        return call_openai_compat(prompt)
+    if provider == PROVIDER_ANTHROPIC:
+        return call_anthropic_sdk(prompt)
+    if os.environ.get(ENV_ANTHROPIC_API_KEY):
         try:
-            import anthropic
+            return call_anthropic_sdk(prompt)
-
+        except AnthropicSdkUnavailable:
-            max_output_tokens = resolve_max_output_tokens()
+            pass
-            client = anthropic.Anthropic(api_key=api_key, timeout=CLAUDE_CALL_TIMEOUT_SECONDS)
+    return call_claude_cli(prompt)
-            # Streaming, not create(): a large compression needs far more than
-            # the old 8192-token cap, and tokens that arrive as they are
-            # generated keep a long call from tripping the request timeout.
-            with client.messages.stream(
-                model=os.environ.get("CAVEMAN_MODEL", "claude-sonnet-4-5"),
-                max_tokens=max_output_tokens,
-                messages=[{"role": "user", "content": prompt}],
-            ) as stream:
-                msg = stream.get_final_message()
-            # At the cap the tail was never generated. validate() and the fix
-            # prompt cannot recover it, so fail now instead of paying for
-            # retries that end by restoring the original anyway.
-            if msg.stop_reason == "max_tokens":
-                raise RuntimeError(
-                    f"Claude output hit the {max_output_tokens}-token cap, so the result is incomplete. "
-                    "Split the file into smaller parts and compress each one."
-                )
-            # Tool-heavy models can put a tool_use or thinking block first; take
-            # the first text block instead of trusting content[0].
-            text = next((block.text for block in msg.content if getattr(block, "type", None) == "text"), "")
-            return strip_llm_wrapper(text.strip())
-        except ImportError:
-            pass  # anthropic not installed, fall back to CLI
-    # Fallback: use claude CLI (handles desktop auth).
-    # Resolve binary via shutil.which so Windows .cmd/.bat shims (e.g.
-    # %APPDATA%\npm\claude.CMD) work without shell=True. On POSIX,
-    # shutil.which returns the same absolute path as the implicit lookup,
-    # so this is a no-op there. Falls back to bare "claude" if not found
-    # on PATH so subprocess raises a clear FileNotFoundError.
-    claude_bin = shutil.which("claude") or "claude"
-    try:
-        result = subprocess.run(
-            [
-                claude_bin,
-                "--print",
-                "--setting-sources",
-                "",
-                "--strict-mcp-config",
-            ],
-            input=prompt,
-            text=True,
-            capture_output=True,
-            check=True,
-            encoding="utf-8",
-            errors="replace",
-            timeout=CLAUDE_CALL_TIMEOUT_SECONDS,
-        )
-        return strip_llm_wrapper(result.stdout.strip())
-    except subprocess.CalledProcessError as e:
-        raise RuntimeError(f"Claude call failed:\n{e.stderr}")
-    except subprocess.TimeoutExpired:
-        raise RuntimeError(
-            f"Claude CLI call timed out after {CLAUDE_CALL_TIMEOUT_SECONDS}s "
-            "(stalled network, or an auth prompt with no TTY to answer it)"
-        )
 
 
 def build_compress_prompt(original: str) -> str:
@@ -516,12 +747,15 @@ STRICT RULES:
 - Do NOT modify anything inside ``` code blocks
 - Do NOT modify anything inside a 4-space-indented code block either — those are code too, and they are validated
 - Do NOT modify anything inside inline backticks
+- Do NOT add new ``` fences around content that is not already fenced, even if it looks like code or JSON
+- Do NOT create, remove, reword or promote headings; keep existing # headings exactly
+- Do NOT convert XML-like tags (e.g. <example>, <section>) into headings or other markdown; leave them as plain text
 - Preserve ALL URLs exactly
 - Preserve ALL headings exactly
 - Preserve file paths and commands
 - Return ONLY the compressed markdown body — do NOT wrap the entire output in a ```markdown fence or any other fence. Inner code blocks from the original stay as-is; do not add a new outer fence around the whole file.
 
-Only compress natural language.
+Only compress natural language prose. Never restructure, add formatting, or improve organization.
 
 TEXT:
 {original}
@@ -559,10 +793,14 @@ Return ONLY the fixed compressed file. No explanation.
 
 CODE_MARKER_PREFIX = "@@CAVEMAN_PRESERVED_CODE_"
 FENCE_OPEN_RE = re.compile(r"^[ ]{0,3}(`{3,}|~{3,})(?:[^\r\n]*)$")
+# Whole-line tags only, at most 3 spaces in (4+ is an indented code block).
+NOCOMPRESS_OPEN_RE = re.compile(r"^[ ]{0,3}<!--\s*nocompress\s*-->\s*$", re.IGNORECASE)
+NOCOMPRESS_CLOSE_RE = re.compile(r"^[ ]{0,3}<!--\s*/nocompress\s*-->\s*$", re.IGNORECASE)
 
 
 def mask_code_blocks(text: str) -> Tuple[str, List[Tuple[str, str]]]:
-    """Replace fenced and four-space-indented code with opaque line markers."""
+    """Replace fenced and four-space-indented code, and <!-- nocompress -->
+    regions, with opaque line markers."""
     if CODE_MARKER_PREFIX in text:
         raise ValueError("Input contains reserved Caveman code-preservation marker")
     lines = text.splitlines(keepends=True)
@@ -571,17 +809,25 @@ def mask_code_blocks(text: str) -> Tuple[str, List[Tuple[str, str]]]:
     i = 0
     while i < len(lines):
         line_without_newline = lines[i].rstrip("\r\n")
-        fence = FENCE_OPEN_RE.match(line_without_newline)
+        nocompress = NOCOMPRESS_OPEN_RE.match(line_without_newline)
+        fence = not nocompress and FENCE_OPEN_RE.match(line_without_newline)
         indented = bool(line_without_newline) and (
             line_without_newline.startswith("    ") or line_without_newline.startswith("\t")
         )
-        if not fence and not indented:
+        if not nocompress and not fence and not indented:
             out.append(lines[i])
             i += 1
             continue
 
         start = i
-        if fence:
+        if nocompress:
+            i += 1
+            while i < len(lines) and not NOCOMPRESS_CLOSE_RE.match(lines[i].rstrip("\r\n")):
+                i += 1
+            if i == len(lines):
+                raise ValueError(f"unclosed <!-- nocompress --> region starting at line {start + 1}")
+            i += 1
+        elif fence:
             fence_run = fence.group(1)
             close_re = re.compile(
                 rf"^[ ]{{0,3}}{re.escape(fence_run[0])}{{{len(fence_run)},}}[ \t]*$"
@@ -615,7 +861,7 @@ def restore_code_blocks(text: str, blocks: List[Tuple[str, str]]) -> str:
     for marker, block in blocks:
         if restored.count(marker) != 1:
             raise ValueError(
-                f"Claude changed preserved code marker {marker}; refusing to write"
+                f"Provider changed preserved code marker {marker}; refusing to write"
             )
         # Masking gives marker its own transport newline. Consume that wrapper
         # when present so restoring a block that already ended in newline does
@@ -627,7 +873,7 @@ def restore_code_blocks(text: str, blocks: List[Tuple[str, str]]) -> str:
         else:
             restored = restored.replace(marker, block, 1)
     if CODE_MARKER_PREFIX in restored:
-        raise ValueError("Claude returned an unknown Caveman code-preservation marker")
+        raise ValueError("Provider returned an unknown Caveman code-preservation marker")
     return restored
 
 
@@ -638,22 +884,24 @@ def compress_file(filepath: Path) -> bool:
     # Resolve first so the lock and every check below key off the same canonical path regardless of how the caller spelled it.
     filepath = filepath.resolve()
 
-    MAX_FILE_SIZE = 500_000  # 500KB
     # None of these three checks depends on mutual exclusion, so they run before the lock is taken — a rejected input (bad path, oversized, sensitive name) shouldn't leave a permanent lock file behind in shared state.
     if not filepath.exists():
         raise FileNotFoundError(f"File not found: {filepath}")
-    if filepath.stat().st_size > MAX_FILE_SIZE:
+    if filepath.stat().st_size > MAX_FILE_SIZE_BYTES:
-        raise ValueError(f"File too large to compress safely (max 500KB): {filepath}")
+        raise ValueError(
+            f"File too large to compress safely (max {MAX_FILE_SIZE_LABEL}): "
+            f"{filepath}"
+        )
 
     # Refuse files that look like they contain secrets or PII. Compressing ships
-    # the raw bytes to the Anthropic API — a third-party boundary — so we fail
+    # the raw bytes to the configured provider — a third-party boundary — so we fail
     # loudly rather than silently exfiltrate credentials or keys. Override is
     # intentional: the user must rename the file if the heuristic is wrong.
     if is_sensitive_path(filepath):
         raise ValueError(
             f"Refusing to compress {filepath}: filename looks sensitive "
             "(credentials, keys, secrets, or known private paths). "
-            "Compression sends file contents to the Anthropic API. "
+            "Compression sends file contents to the configured LLM provider. "
             "Rename the file if this is a false positive."
         )
 
@@ -687,7 +935,7 @@ def _compress_file_locked(filepath: Path) -> bool:
         print("Aborting to prevent data loss. Please remove or rename the backup file if you want to proceed.")
         return False
 
-    # Split YAML frontmatter off before compression. Claude tends to strip or
+    # Split YAML frontmatter off before compression. LLMs tend to strip or
     # rewrite frontmatter despite preserve-structure rules; we keep it verbatim
     # by removing it from the input and re-prepending it to the output.
     frontmatter, body = split_frontmatter(original_text)
@@ -699,8 +947,13 @@ def _compress_file_locked(filepath: Path) -> bool:
         return False
 
     # Step 1: Compress (body only, frontmatter excluded)
-    print("Compressing with Claude...")
+    provider = configured_provider()
+    print(f"Compressing with {provider}...")
     masked_body, code_blocks = mask_code_blocks(body)
+    nocompress_regions = [
+        block for _, block in code_blocks
+        if NOCOMPRESS_OPEN_RE.match(block.split("\n", 1)[0])
+    ]
     masked_compressed = call_claude(build_compress_prompt(masked_body))
     try:
         compressed_body = restore_code_blocks(masked_compressed, code_blocks)
@@ -710,7 +963,7 @@ def _compress_file_locked(filepath: Path) -> bool:
         return False
 
     if compressed_body is None or not compressed_body.strip():
-        print("❌ Compression aborted: Claude returned an empty response.")
+        print(f"❌ Compression aborted: {provider} returned an empty response.")
         print("   Original file is untouched (no backup created).")
         return False
 
@@ -718,7 +971,7 @@ def _compress_file_locked(filepath: Path) -> bool:
     # and would never change, so identity must be judged on the compressible part.
     if compressed_body.strip() == body.strip():
         print("❌ Compression aborted: output is identical to input.")
-        print("   Likely causes: Claude refused, returned the prompt verbatim, or the file is")
+        print(f"   Likely causes: {provider} refused, returned the prompt verbatim, or the file is")
         print("   already in caveman form. Original file is untouched (no backup created).")
         return False
 
@@ -774,13 +1027,13 @@ def _compress_file_locked(filepath: Path) -> bool:
             print("Failed after retries: original left untouched")
             return False
 
-        print("Fixing with Claude...")
+        print(f"Fixing with {provider}...")
         fixed = call_claude(
             build_fix_prompt(original_text, compressed, result.errors)
         )
 
         if fixed is None or not fixed.strip():
-            print("❌ Fix attempt aborted: Claude returned an empty response.")
+            print(f"❌ Fix attempt aborted: {provider} returned an empty response.")
             print("   Skipping this attempt.")
             continue
 
@@ -807,6 +1060,13 @@ def _compress_file_locked(filepath: Path) -> bool:
             print("   Skipping this attempt.")
             continue
 
+        # The fix prompt carries <!-- nocompress --> regions unmasked and
+        # validate() never compares prose, so check them verbatim here.
+        if any(block.rstrip("\n") not in fixed for block in nocompress_regions):
+            print("❌ Fix attempt aborted: output changed a <!-- nocompress --> region.")
+            print("   Skipping this attempt.")
+            continue
+
         compressed = fixed
 
     return False

plugins/codex/plugins/caveman/skills/caveman-compress/scripts/validate.py

@@ -3,7 +3,7 @@ import re
 from collections import Counter
 from pathlib import Path
 
-URL_REGEX = re.compile(r"https?://[^\s)]+")
+URL_REGEX = re.compile(r"https?://[^\s)`]+")  # a backtick is never part of a URL
 FENCE_OPEN_REGEX = re.compile(r"^(\s{0,3})(`{3,}|~{3,})(.*)$")
 
 # A line that is nothing but a fence marker plus an optional info string, at ANY

plugins/codex/plugins/caveman/skills/caveman/SKILL.md

@@ -13,7 +13,7 @@ Caveman is a voice, not broken grammar. Reader pays per token and reads in a ter
 
 Every response, whole session, until user says "stop caveman" or "normal mode". Unsure if still on? It is. Confirm the switch-off in one line.
 
-`/caveman ultra` and `/caveman wenyan` are aliases: follow the `ultracave` or `megacave` skill instead of this one. `/caveman status` reports the mode and changes nothing. Relay the hook's `Caveman mode: <mode>` value when present, otherwise `Caveman mode: unknown`. Never infer a mode from the configured default.
+`/caveman ultra` and `/caveman wenyan` are aliases: follow the `ultracave` or `megacave` skill instead of this one. `/caveman status` reports the mode and changes nothing. Relay the hook's `Caveman mode: <mode>` value when present. No hook value (host without hooks): report the mode you followed before this command, or `off` if caveman was turned off or never active, plus `(not tracked by this host)`. Example: `Caveman mode: caveman (not tracked by this host)`. Loading this skill to answer status is not activation. Never infer a mode from the configured default.
 
 ## Why
 
@@ -52,7 +52,7 @@ ASD-STE100 is the floor: 20 words max, active voice, imperative for instructions
 
 ### 6. Payload verbatim
 
-Code blocks unchanged. Commands, paths, API names exact. Errors quoted exact, shortest decisive line only.
+Code blocks unchanged. Commands, paths, API names exact. Errors quoted exact, shortest decisive line only. Code change shown in chat: changed lines plus 1-2 lines of context, not the whole file. Whole file only if the user asks, the file is new, or most of it changes. Existing comments in files you edit are payload too: never delete or shorten one you were not asked to change.
 
 ### 7. Tool runs: bounded status
 
@@ -76,6 +76,7 @@ Plain prose, then resume:
 4. User confused or repeats the question.
 5. Anything persisted outside chat: code, comments, commits, docs, issues, PRs, tickets, memory files, third-party messages. `/caveman-compress` exempt.
 6. Harness asks for a status line or confirmation. Give it. Harness decides *when* you speak, caveman decides *how*.
+7. You ask the user a question or offer options. Full sentences, so the answer comes back right first time.
 
 ## Pre-send check
 

plugins/codex/plugins/caveman/skills/megacave/SKILL.md

@@ -15,11 +15,11 @@ Megacave is caveman in Classical Chinese. 文言文: subjects omitted where reco
 
 ## Persistence
 
-Every response, whole session, until "stop caveman" or "normal mode". Unsure? Still on. `/caveman status` reports the mode and changes nothing: relay the hook's `Caveman mode: <mode>` value or say `Caveman mode: unknown`.
+Every response, whole session, until "stop caveman" or "normal mode". Unsure? Still on. `/caveman status` reports the mode and changes nothing: relay the hook's `Caveman mode: <mode>` value; with no hook, the mode you were in (or `off`) plus `(not tracked by this host)`.
 
 ## Floor
 
-Never cut or translate: code, commands, paths, API names, error strings, in their original script. Negation (不, 非, 勿, 未, 毋). Numbers and units, Arabic numerals. One term per thing. A clause ambiguous in 文言 becomes 白話.
+Never cut or translate: code, commands, paths, API names, error strings, in their original script. Negation (不, 非, 勿, 未, 毋). Numbers and units, Arabic numerals. One term per thing. A clause ambiguous in 文言 becomes 白話. Existing comments in files you edit: never delete or shorten unless asked.
 
 ## Rules
 
@@ -39,6 +39,8 @@ Good: "池蓄已開之連，不逐請而新開，省握手之費。"
 
 ### 3. Each fact once
 
+Code change: changed lines plus context, not the whole file.
+
 Good: "新參照則重繪。`useMemo` 包之。"
 
 ### 4. Payload in original script
@@ -56,7 +58,7 @@ No "文言模式啟", no modern answer plus classical copy. 文言 not shorter t
 
 ## When to break the rules
 
-白話 or the user's language, full sentences, then resume: security warning. Irreversible action, confirm first. Any clause with two readings. User confused. Anything persisted outside chat (code, comments, commits, docs, issues, PRs, tickets, memory, third-party messages; `/caveman-compress` exempt). Harness asks for a status line.
+白話 or the user's language, full sentences, then resume: security warning. Irreversible action, confirm first. Any clause with two readings. User confused. Question to the user, with its options. Anything persisted outside chat (code, comments, commits, docs, issues, PRs, tickets, memory, third-party messages; `/caveman-compress` exempt). Harness asks for a status line.
 
 ## Pre-send check
 

plugins/codex/plugins/caveman/skills/ultracave/SKILL.md

@@ -15,11 +15,11 @@ Ultracave is caveman with the grammar stripped. Payload only.
 
 ## Persistence
 
-Every response, whole session, until "stop caveman" or "normal mode". Unsure? Still on. `/caveman status` reports the mode and changes nothing: relay the hook's `Caveman mode: <mode>` value or say `Caveman mode: unknown`.
+Every response, whole session, until "stop caveman" or "normal mode". Unsure? Still on. `/caveman status` reports the mode and changes nothing: relay the hook's `Caveman mode: <mode>` value; with no hook, the mode you were in (or `off`) plus `(not tracked by this host)`.
 
 ## Floor
 
-Never cut: code, commands, paths, API names, error strings (verbatim). not/never/no/only/except. Numbers and units. The user's language. One term per thing. No invented abbreviations, no arrows.
+Never cut: code, commands, paths, API names, error strings (verbatim). not/never/no/only/except. Numbers and units. The user's language. One term per thing. No invented abbreviations, no arrows. Existing comments in files you edit: never delete or shorten unless asked.
 
 ## Rules
 
@@ -37,7 +37,7 @@ Good: "Yes. Null check first."
 
 ### 3. Each fact once
 
-No restating, no summary after a list.
+No restating, no summary after a list. Code change: changed lines plus context, not the whole file.
 
 Good: "Pool reuses open DB connections. No per-request handshake."
 
@@ -56,7 +56,7 @@ No prefix, no announcement, no mangled verbs for flavor. Fragment not shorter th
 
 ## When to break the rules
 
-Plain prose, then resume: security warning. Irreversible action, confirm first. Any fragment with two readings. User confused. Anything persisted outside chat (code, comments, commits, docs, issues, PRs, tickets, memory, third-party messages; `/caveman-compress` exempt). Harness asks for a status line.
+Plain prose, then resume: security warning. Irreversible action, confirm first. Any fragment with two readings. User confused. Question to the user, with its options. Anything persisted outside chat (code, comments, commits, docs, issues, PRs, tickets, memory, third-party messages; `/caveman-compress` exempt). Harness asks for a status line.
 
 ## Pre-send check
 

plugins/codex/plugins/find-skills/THIRD_PARTY_SOURCE.json

@@ -2,8 +2,8 @@
   "sourceId": "find-skills",
   "repo": "https://github.com/vercel-labs/skills.git",
   "ref": "main",
-  "commit": "48dc9e8eb8aa19040e91cb90ba0b642c9cbad57e",
+  "commit": "87a266971d9460a3d2606075b8e91edc83325472",
   "adapter": "claude-skill",
   "sourcePath": "skills/find-skills",
-  "syncedAt": "2026-10-07T16:00:00Z"
+  "syncedAt": "2026-10-08T15:59:59Z"
 }

plugins/codex/plugins/grill-me/THIRD_PARTY_SOURCE.json

@@ -2,8 +2,8 @@
   "sourceId": "grill-me",
   "repo": "https://github.com/mattpocock/skills.git",
   "ref": "main",
-  "commit": "f3fc5632f401156837ee3872f14fe33ccf1024ea",
+  "commit": "b0618bc436ad893b3c5e84e55fba86586d34a404",
   "adapter": "skill-collection",
   "sourcePath": "skills/productivity",
-  "syncedAt": "2026-10-07T16:00:00Z"
+  "syncedAt": "2026-10-08T15:59:59Z"
 }

plugins/codex/plugins/mcp-playwright/MCP_SOURCE.json

@@ -3,5 +3,5 @@
   "name": "playwright浏览器自动化操作",
   "version": "20260605",
   "keySource": "none",
-  "syncedAt": "2026-10-07T16:02:42Z"
+  "syncedAt": "2026-10-08T16:02:46Z"
 }

plugins/codex/plugins/next-skills/THIRD_PARTY_SOURCE.json

@@ -2,8 +2,8 @@
   "sourceId": "next-skills",
   "repo": "https://github.com/vercel/next.js.git",
   "ref": "canary",
-  "commit": "aaf0a16f530f097548a9256133f5bad0e9098794",
+  "commit": "7549879a48899af2a54e77c316d174fb6cde111e",
   "adapter": "skill-collection",
   "sourcePath": "skills",
-  "syncedAt": "2026-10-07T16:00:00Z"
+  "syncedAt": "2026-10-08T15:59:59Z"
 }

plugins/codex/plugins/next-skills/skills/next-bundle-optimizer/SKILL.md

@@ -10,7 +10,7 @@ description: >
 
 ## 1. Set the scope
 
-Analyze the whole app by default, covering all routes and shared client dependencies. Narrow the scope only when the user specifies a route, dependency, feature or other subset. Choose **audit** or **fix** mode. Audit is the default: generate analyzer artifacts and report candidates while leaving application source, dependencies and lockfiles unchanged. Fix mode requires an explicit request to change the app. Ask before changing visible behavior, timing, compatibility or a trust boundary. For a route's static App Shell, use `next-cache-components-optimizer`; for navigation prefetch work, use `next-partial-prefetching-optimizer`.
+Analyze the whole app by default, covering all routes and shared client dependencies. Narrow the scope only when the user specifies a route, dependency, feature or other subset. Choose **audit** or **fix** mode. Audit is the default: generate analyzer artifacts and report candidates while leaving application source, dependencies and lockfiles unchanged. Fix mode requires an explicit request to change the app. Ask before changing visible behavior, timing, compatibility or a trust boundary. For a route's static App Shell, use [`next-cache-components-optimizer`](https://github.com/vercel/next.js/tree/canary/skills/next-cache-components-optimizer); install it first if unavailable (`npx skills add https://github.com/vercel/next.js/tree/canary/skills/next-cache-components-optimizer`). For navigation prefetch work, use [`next-partial-prefetching-optimizer`](https://github.com/vercel/next.js/tree/canary/skills/next-partial-prefetching-optimizer); install it first if unavailable (`npx skills add https://github.com/vercel/next.js/tree/canary/skills/next-partial-prefetching-optimizer`).
 
 **Done:** the whole-app or user-specified scope, mode and intended behavior are recorded. A request to capture or export data is audit mode, not permission to fix.
 
@@ -79,7 +79,7 @@ For lazy interaction features, duplicate packages, server-rendered display work
 
 ## 5. Verify one change — fix mode only
 
-Make one small, cohesive change. Capture/export an after snapshot with a new name and compare the **same analysis scope, output class and metric** with the baseline. For whole-app analysis, account for changes across all routes, including shared dependencies. Run relevant behavior tests and type-check; use `next-dev-loop` when verifying the edit in the running app.
+Make one small, cohesive change. Capture/export an after snapshot with a new name and compare the **same analysis scope, output class and metric** with the baseline. For whole-app analysis, account for changes across all routes, including shared dependencies. Run relevant behavior tests and type-check; use [`next-dev-loop`](https://github.com/vercel/next.js/tree/canary/skills/next-dev-loop) when verifying the edit in the running app, and install it first if unavailable (`npx skills add https://github.com/vercel/next.js/tree/canary/skills/next-dev-loop`).
 
 **Done:** retain the change only when the scoped metric improves and the intended behavior passes its checks. Revert a change that fails either condition. If checks are blocked, report the unverified edit and blocker rather than accepting it. Record the accepted after snapshot as the next baseline before another edit.
 

plugins/codex/plugins/ppt-master/README.md

@@ -106,7 +106,7 @@ Why you'd choose it, and where it isn't the right fit → [Why PPT Master](./doc
 
 > [!IMPORTANT]
 > ### This is a tool, not a wishing well
-> `harness + model = agent` — PPT Master only owns the workflow; the model sets the ceiling. Recommended: **Kimi K3 (or Claude) with a large context window (~1M tokens) + AI image generation (`gpt-image-2` or Google `gemini-3.1-flash-image`)**; other models can run the pipeline, with a quality gap.
+> `harness + model = agent` — PPT Master only owns the workflow; the model sets the ceiling. Recommended: **Kimi K3 (or Claude) with a large context window (~1M tokens) + AI image generation (`gpt-image-2` or Google `gemini-nano-banana-2.1`)**; other models can run the pipeline, with a quality gap.
 >
 > And don't expect a finished, perfect deck in one shot. The tool's value is taking most of the tedious work off your plate; the polishing that's left is yours — a natively editable deck exists precisely so you can keep working on it, not a flat image you can't touch. The cheaper the model, the more there is to do; if results disappoint, upgrade the model first, then check your usage against [Getting Started](./docs/getting-started.md) and the [example projects](https://hugohe3.github.io/ppt-master-examples/).
 
@@ -217,7 +217,7 @@ Never used one of these? Don't worry — in this project they play exactly one r
 | **IDE plugin / extension** | [Claude Code](https://claude.ai/code) (VS Code / JetBrains extension), [GitHub Copilot](https://github.com/features/copilot), [Cline](https://cline.bot/), etc. | Installed inside hosts like VS Code or JetBrains |
 | **CLI agent** | [Claude Code](https://claude.ai/code) CLI, [Codex CLI](https://github.com/openai/codex), Gemini CLI, etc. | Runs in the terminal; suits scripting, remote, or server use |
 
-> **Model recommendation**: for the best results, use **[Kimi K3](https://www.kimi.com/code/?aff=ppt-master)** (or Claude) to drive the pipeline, paired with AI image generation — **`gpt-image-2`** (OpenAI) or **`gemini-3.1-flash-image`** (Google). Kimi Code, the project sponsor, is a great pick for pay-as-you-go access.
+> **Model recommendation**: for the best results, use **[Kimi K3](https://www.kimi.com/code/?aff=ppt-master)** (or Claude) to drive the pipeline, paired with AI image generation — **`gpt-image-2`** (OpenAI) or **`gemini-nano-banana-2.1`** (Google). Kimi Code, the project sponsor, is a great pick for pay-as-you-go access.
 
 **🔑 Want to use Claude / GPT / Gemini but don't have access yet?** Project sponsors **[PackyCode](https://www.packyapi.ai/register?aff=ppt-master)**, **[APIKEY.FAN](https://apikey.fan/register?aff=PPT-MASTER)** and **[RunAPI](https://runapi.host/register?aff=WMLJ)** offer pay-as-you-go access to Claude, GPT, Gemini and more — no subscription required, with exclusive discounts for our users (details at the top of this page).
 

plugins/codex/plugins/ppt-master/THIRD_PARTY_SOURCE.json

@@ -2,8 +2,8 @@
   "sourceId": "ppt-master",
   "repo": "https://github.com/hugohe3/ppt-master.git",
   "ref": "main",
-  "commit": "440557b8dc7c7257b69c04a0b014d5c50a78e6cb",
+  "commit": "b4efe3ddf237a97a42880164759162f8e2412f2f",
   "adapter": "claude-skill",
   "sourcePath": "skills/ppt-master",
-  "syncedAt": "2026-10-07T16:00:00Z"
+  "syncedAt": "2026-10-08T15:59:59Z"
 }

plugins/codex/plugins/ppt-master/skills/ppt-master/.env.example

@@ -51,17 +51,23 @@
 # OpenAI-compatible 第三方平台可按需开启以下兼容参数。
 # OPENAI_SIZE_PRESET=auto
 # OPENAI_RESPONSE_FORMAT=auto
+# GPT Image: auto / omit / low / medium / high; xhigh / max only for
+# gpt-image-2.5-sunburst / gpt-image-2.5-flare and their snapshots.
+# GPT Image：auto / omit / low / medium / high；xhigh / max 仅限上述 2.5 型号及快照。
 # OPENAI_QUALITY=auto
 # Allowed values: png / jpeg / webp
 # OPENAI_OUTPUT_FORMAT=png
 # jpeg/webp only, 0-100
 # OPENAI_OUTPUT_COMPRESSION=80
-# gpt-image-2: auto / opaque
+# GPT Image: auto / opaque / transparent (png/webp only; gpt-image-2 support is in preview)
+# GPT Image：auto / opaque / transparent（透明背景仅限 png/webp；gpt-image-2 为预览支持）
 # OPENAI_BACKGROUND=auto
 # auto / low
 # OPENAI_MODERATION=auto
-# Reference edits except gpt-image-2: high / low
+# Reference edits: gpt-image-1 / gpt-image-1.5 high / low; gpt-image-1-mini low only.
-# 除 gpt-image-2 外的参考图编辑：high / low
+# Leave unset for gpt-image-2 and the two 2.5 models (including snapshots).
+# 参考图编辑：gpt-image-1 / gpt-image-1.5 支持 high / low；gpt-image-1-mini 仅支持 low。
+# gpt-image-2 与上述两种 2.5 型号（含快照）不设置此项。
 # OPENAI_INPUT_FIDELITY=high
 
 # ─────────────────────────────────────────────────────────────
@@ -69,7 +75,7 @@
 # ─────────────────────────────────────────────────────────────
 # IMAGE_BACKEND=gemini
 # GEMINI_API_KEY=your-gemini-api-key
-# GEMINI_MODEL=gemini-3.1-flash-image
+# GEMINI_MODEL=gemini-nano-banana-2.1
 # GEMINI_BASE_URL=https://your-proxy-url.com
 
 # ─────────────────────────────────────────────────────────────
@@ -106,6 +112,8 @@
 # LAS_API_KEY=your-las-key
 # VOLCENGINE_MODEL=doubao-seedream-4-5-251128
 # VOLCENGINE_BASE_URL=https://operator.las.cn-beijing.volces.com/api/v1
+# Optional Ark base URL / 可选 Ark 基址
+# VOLCENGINE_BASE_URL=https://ark.cn-beijing.volces.com/api/v3
 
 # ─────────────────────────────────────────────────────────────
 # Example: Tencent Cloud TokenHub / 腾讯云 TokenHub 生图示例
@@ -150,7 +158,7 @@
 # SILICONFLOW_BASE_URL=https://api.siliconflow.cn/v1/images/generations
 #
 # FAL_KEY=your-fal-key
-# FAL_MODEL=fal-ai/nano-banana-2
+# FAL_MODEL=google/nano-banana-2.1
 # FAL_BASE_URL=https://fal.run
 #
 # REPLICATE_API_TOKEN=r8_xxx
@@ -158,7 +166,7 @@
 # REPLICATE_BASE_URL=https://api.replicate.com/v1
 #
 # OPENROUTER_API_KEY=sk-or-v1-xxx
-# OPENROUTER_MODEL=google/gemini-3.1-flash-image
+# OPENROUTER_MODEL=google/gemini-nano-banana-2.1
 # OPENROUTER_BASE_URL=https://openrouter.ai/api/v1
 #
 # OpenAI-compatible example: Agnes AI / OpenAI-compatible 示例：Agnes AI
@@ -183,7 +191,7 @@
 # OPENAI_MODEL=gpt-image-2
 # OPENAI_OUTPUT_FORMAT=png
 # GEMINI_API_KEY=your-gemini-api-key
-# GEMINI_MODEL=gemini-3.1-flash-image
+# GEMINI_MODEL=gemini-nano-banana-2.1
 #
 # Switch providers by changing IMAGE_BACKEND only.
 # 切换提供商时，只改 IMAGE_BACKEND 即可。

plugins/codex/plugins/ppt-master/skills/ppt-master/SKILL.md

@@ -2,7 +2,7 @@
 name: ppt-master
 description: "多格式源文档到高质量 SVG 页面再导出 PPTX 的多阶段演示文稿生成工作流。"
 metadata:
-  version: "6.6.0"
+  version: "6.7.0"
   copyright: "Copyright (c) 2025-2026 Hugo He"
   license: "MIT"
   official_repository: "https://github.com/hugohe3/ppt-master"

plugins/codex/plugins/ppt-master/skills/ppt-master/SPONSORS.md

@@ -8,7 +8,7 @@ Want to support the project or discuss a partnership? See the [sponsorship guide
 
 ## Current Model Recommendation
 
-For the best results, use **[Kimi K3](https://www.kimi.com/code/?aff=ppt-master)** (or Claude) to drive the workflow, paired with **`gpt-image-2`** (OpenAI) or **`gemini-3.1-flash-image`** (Google) for AI image generation. If model capability is limiting output quality, upgrade the driving model before weakening the workflow or its quality requirements.
+For the best results, use **[Kimi K3](https://www.kimi.com/code/?aff=ppt-master)** (or Claude) to drive the workflow, paired with **`gpt-image-2`** (OpenAI) or **`gemini-nano-banana-2.1`** (Google) for AI image generation. If model capability is limiting output quality, upgrade the driving model before weakening the workflow or its quality requirements.
 
 ## Kimi
 

plugins/codex/plugins/ppt-master/skills/ppt-master/SPONSORS_CN.md

@@ -8,7 +8,7 @@ PPT Master 始终免费开源。以下赞助方共同支持项目的持续维护
 
 ## 当前模型推荐
 
-追求最佳效果，语言模型选 **[Kimi K3](https://www.kimi.com/code/?aff=ppt-master)**（或 Claude）驱动流程，搭配 AI 生图模型 **`gpt-image-2`**（OpenAI）或 **`gemini-3.1-flash-image`**（Google）。如果模型能力正在拖累产出质量，应先升级驱动模型，而不是削弱工作流或质量要求。
+追求最佳效果，语言模型选 **[Kimi K3](https://www.kimi.com/code/?aff=ppt-master)**（或 Claude）驱动流程，搭配 AI 生图模型 **`gpt-image-2`**（OpenAI）或 **`gemini-nano-banana-2.1`**（Google）。如果模型能力正在拖累产出质量，应先升级驱动模型，而不是削弱工作流或质量要求。
 
 ## Kimi
 

plugins/codex/plugins/ppt-master/skills/ppt-master/scripts/docs/image.md

@@ -49,7 +49,7 @@ python3 scripts/image_gen.py --list-backends
 
 Backends are grouped into Core / Extended / Experimental tiers. Run `python3 scripts/image_gen.py --list-backends` for the current list.
 
-Each backend accepts its own subset of `--aspect_ratio` values; the authority is the `VALID_ASPECT_RATIOS` constant in its `scripts/image_backends/backend_<name>.py`, and `--manifest` rejects an unsupported ratio before any request. Gemini 3.1 image models take `1:1 1:4 1:8 2:3 3:2 3:4 4:1 4:3 4:5 5:4 8:1 9:16 16:9 21:9` (no `3:1`); the `gemini-2.5-flash-image` models take only `1:1 2:3 3:2 3:4 4:3 4:5 5:4 9:16 16:9 21:9` at `1K`.
+Each backend accepts its own subset of `--aspect_ratio` values; the authority is the `VALID_ASPECT_RATIOS` constant in its `scripts/image_backends/backend_<name>.py`, and `--manifest` rejects an unsupported ratio before any request. The default Gemini model, `gemini-nano-banana-2.1`, takes `1:1 1:4 1:8 2:3 3:2 3:4 4:1 4:3 4:5 5:4 8:1 9:16 16:9 21:9` (including extreme ratios, no `3:1`) at `1K/2K/4K`, but not `512px`. `gemini-3.1-flash-image` retains the same ratios and also supports `512px`; `gemini-2.5-flash-image` takes only `1:1 2:3 3:2 3:4 4:3 4:5 5:4 9:16 16:9 21:9` at `1K`.
 
 Backend selection:
 
@@ -84,12 +84,13 @@ OPENAI_MODEL=gpt-image-2
 # OpenAI-compatible provider knobs:
 # OPENAI_SIZE_PRESET=auto
 # OPENAI_RESPONSE_FORMAT=auto
+# GPT Image: auto / omit / low / medium / high; xhigh / max only for the two 2.5 models
 # OPENAI_QUALITY=auto
 # Allowed values: png / jpeg / webp
 # OPENAI_OUTPUT_FORMAT=png
 # jpeg/webp only, 0-100
 # OPENAI_OUTPUT_COMPRESSION=80
-# gpt-image-2: auto / opaque
+# GPT Image: auto / opaque / transparent (png/webp only; gpt-image-2 support is in preview)
 # OPENAI_BACKGROUND=auto
 # auto / low
 # OPENAI_MODERATION=auto
@@ -111,7 +112,10 @@ OpenAI backend notes:
 - Requests are sent with plain `requests.post()` to improve compatibility with
   OpenAI-compatible proxies that block the OpenAI SDK's `httpx` transport.
 - For `gpt-image-2`, `image_size=512px` means a low-quality draft preset, not a literal 512px edge. The model requires both edges to be multiples of 16px, a long:short ratio no greater than 3:1, and total pixels between 655,360 and 8,294,400.
-- `OPENAI_BACKGROUND=transparent` is not supported by `gpt-image-2`; use `auto` or `opaque`.
+- `OPENAI_BACKGROUND=transparent` is supported by `gpt-image-2` (in preview), `gpt-image-2.5-sunburst`, and `gpt-image-2.5-flare`, including their published snapshots; use PNG (the default) or WebP, not JPEG.
+- `OPENAI_QUALITY=xhigh` and `max` are accepted only for `gpt-image-2.5-sunburst` and `gpt-image-2.5-flare`, including their published snapshots; older GPT Image models retain `auto/omit/low/medium/high`. See the [Images API parameters](https://developers.openai.com/api/reference/resources/images/methods/generate).
+- For reference edits, `OPENAI_INPUT_FIDELITY` accepts `high/low` on `gpt-image-1` and `gpt-image-1.5`, but only `low` on `gpt-image-1-mini`. Leave it unset for `gpt-image-2` and the two 2.5 models (including snapshots); this backend keeps the existing omission requirement for 2.5 because its support is not explicitly documented in the [edit API parameters](https://developers.openai.com/api/reference/resources/images/methods/edit).
+- OpenAI schedules `gpt-image-1` shutdown for 2026-10-23 and `gpt-image-1-mini` / `gpt-image-1.5` for 2026-12-01; see [deprecations](https://developers.openai.com/api/docs/deprecations).
 - If `OPENAI_OUTPUT_FORMAT=jpeg` or `webp`, generated files use `.jpg` or `.webp` extensions instead of `.png`.
 - OpenAI-compatible providers that reject OpenAI-specific fields can use `OPENAI_RESPONSE_FORMAT=omit`, `OPENAI_QUALITY=omit`, and `OPENAI_SIZE_PRESET=<preset>`. Valid response formats are `auto`, `b64_json`, `url`, and `omit`; valid size presets are `auto`, `legacy`, `gpt-image`, `gpt-image-2`, and `dall-e-2`.
 
@@ -151,7 +155,7 @@ MINIMAX_API_KEY=your-api-key
 
 ## `image_gen.py --manifest` runner and legacy manifest spellings
 
-Validates the file behind every `Generated` row before skipping it, iterates retryable rows with bounded adaptive concurrency, and writes each status atomically; a missing or corrupt file returns to `Failed`, and persistent rate limits end the run as retryable `Failed`. Options: `--concurrency` (default `IMAGE_CONCURRENCY` or 3; halves on rate limit, min 1), `--image_size`, `--output`/`-o`, `--backend`/`-b`, `--model`/`-m`, `--list-backends`. Interrupting is safe (completed items stay `Generated`); the Markdown sidecar re-renders on completion, or run `--render-md` after an interruption. Configuration: process environment first, then the first `.env` in cwd, the skill directory, the clone root, `~/.ppt-master/.env` — `IMAGE_BACKEND` (required; `--list-backends` shows the set and support tiers), `IMAGE_CONCURRENCY`, provider-specific `{PROVIDER}_API_KEY` / `_BASE_URL` / `_MODEL` (never `IMAGE_API_KEY` / `IMAGE_MODEL` / `IMAGE_BASE_URL`), and for OpenAI-compatible platforms `OPENAI_SIZE_PRESET` (`auto|legacy|gpt-image|gpt-image-2|dall-e-2`), `OPENAI_RESPONSE_FORMAT` (`auto|b64_json|url|omit`), `OPENAI_QUALITY` (`auto|omit|low|medium|high|standard|hd`) under `IMAGE_BACKEND=openai`; see `.env.example`. The single-image form `image_gen.py "prompt" --filename …` remains for ad-hoc re-rolls.
+Validates the file behind every `Generated` row before skipping it, iterates retryable rows with bounded adaptive concurrency, and writes each status atomically; a missing or corrupt file returns to `Failed`, and persistent rate limits end the run as retryable `Failed`. Options: `--concurrency` (default `IMAGE_CONCURRENCY` or 3; halves on rate limit, min 1), `--image_size`, `--output`/`-o`, `--backend`/`-b`, `--model`/`-m`, `--list-backends`. Interrupting is safe (completed items stay `Generated`); the Markdown sidecar re-renders on completion, or run `--render-md` after an interruption. Configuration: process environment first, then the first `.env` in cwd, the skill directory, the clone root, `~/.ppt-master/.env` — `IMAGE_BACKEND` (required; `--list-backends` shows the set and support tiers), `IMAGE_CONCURRENCY`, provider-specific `{PROVIDER}_API_KEY` / `_BASE_URL` / `_MODEL` (never `IMAGE_API_KEY` / `IMAGE_MODEL` / `IMAGE_BASE_URL`), and for OpenAI-compatible platforms `OPENAI_SIZE_PRESET` (`auto|legacy|gpt-image|gpt-image-2|dall-e-2`), `OPENAI_RESPONSE_FORMAT` (`auto|b64_json|url|omit`), `OPENAI_QUALITY` (`auto|omit|low|medium|high|xhigh|max|standard|hd`; `xhigh/max` only for the two 2.5 models and their snapshots) under `IMAGE_BACKEND=openai`; see `.env.example`. The single-image form `image_gen.py "prompt" --filename …` remains for ad-hoc re-rolls.
 
 **Compatibility**: legacy `type` values read as `background` → `hero_page` + no type, `hero` → `hero_page` + Primitive A, `portrait` → `local` + Primitive B, `typography` → `hero_page` + `embedded` + Primitive C; a missing `page_role` is `local`, a missing `text_policy` is `none` (one aggregate warning per manifest); an existing manifest lacking `deck_rendering` or an item lacking `type` replays its assembled `prompt` verbatim without reconstruction; a legacy `deck_style_anchor` or `deck_palette` never overrides `deck_rendering` / `color_scheme`; legacy `page_role: full_page` reads as `hero_page`.
 

plugins/codex/plugins/ppt-master/skills/ppt-master/scripts/image_backends/backend_fal.py

@@ -5,7 +5,7 @@ fal.ai image generation backend.
 Configuration keys:
   FAL_KEY / FAL_API_KEY   (required)
   FAL_BASE_URL            (optional)
-  FAL_MODEL               (optional; nano-banana-2 only)
+  FAL_MODEL               (optional; google/nano-banana-2.1 or fal-ai/nano-banana-2)
 """
 
 import sys
@@ -47,8 +47,8 @@ VALID_ASPECT_RATIOS = [
     "4:3", "4:5", "5:4", "8:1", "9:16", "16:9", "21:9",
 ]
 DEFAULT_ENDPOINT = "https://fal.run"
-DEFAULT_MODEL = "fal-ai/nano-banana-2"
+DEFAULT_MODEL = "google/nano-banana-2.1"
-SUPPORTED_MODELS = {DEFAULT_MODEL}
+SUPPORTED_MODELS = {DEFAULT_MODEL, "fal-ai/nano-banana-2"}
 
 IMAGE_SIZE_TO_RESOLUTION = {
     "512px": "0.5K",
@@ -75,6 +75,10 @@ def _resolve_request_options(
             f"Supported: {VALID_ASPECT_RATIOS}"
         )
     normalized_size = normalize_image_size(image_size)
+    if resolved_model == "google/nano-banana-2.1" and normalized_size in {"512px", "0.5K"}:
+        raise ValueError(
+            f"Unsupported image size '{image_size}' for {resolved_model}. Supported: 1K, 2K, 4K."
+        )
     resolution = IMAGE_SIZE_TO_RESOLUTION.get(normalized_size)
     if not resolution:
         raise ValueError(

plugins/codex/plugins/ppt-master/skills/ppt-master/scripts/image_backends/backend_gemini.py

@@ -58,11 +58,10 @@ VALID_ASPECT_RATIOS = [
 
 VALID_IMAGE_SIZES = ["512px", "1K", "2K", "4K"]
 
-DEFAULT_MODEL = "gemini-3.1-flash-image"
+DEFAULT_MODEL = "gemini-nano-banana-2.1"
 
 GEMINI_2_5_FLASH_IMAGE_MODELS = {
     "gemini-2.5-flash-image",
-    "gemini-2.5-flash-image-preview",
 }
 GEMINI_2_5_VALID_ASPECT_RATIOS = [
     "1:1", "2:3", "3:2", "3:4", "4:3",
@@ -71,8 +70,8 @@ GEMINI_2_5_VALID_ASPECT_RATIOS = [
 GEMINI_2_5_VALID_IMAGE_SIZES = ["1K"]
 
 MINIMAL_THINKING_MODELS = {
+    "gemini-nano-banana-2.1",
     "gemini-3.1-flash-image",
-    "gemini-3.1-flash-image-preview",
 }
 
 REFERENCE_IMAGE_MIME_TYPES = {
@@ -101,6 +100,10 @@ def _request_image_size(image_size: str) -> str:
 
 def _validate_model_options(model: str, aspect_ratio: str, image_size: str) -> None:
     """Enforce limits only for Gemini models with a known narrower contract."""
+    if _model_id(model) == "gemini-nano-banana-2.1" and image_size == "512px":
+        raise ValueError(
+            f"Invalid image size '{image_size}' for {model}. Valid: 1K, 2K, 4K."
+        )
     if _model_id(model) not in GEMINI_2_5_FLASH_IMAGE_MODELS:
         return
     if aspect_ratio not in GEMINI_2_5_VALID_ASPECT_RATIOS:
@@ -277,7 +280,7 @@ def generate(prompt: str,
         image_size: Image size ("512px", "1K", "2K", "4K", case-insensitive)
         output_dir: Output directory
         filename: Output filename (without extension)
-        model: Model name (default: gemini-3.1-flash-image)
+        model: Model name (default: gemini-nano-banana-2.1)
         max_retries: Maximum number of retries
         reference_image: Optional source image path. When set, the image and
             edit instruction are sent together as multimodal input.

plugins/codex/plugins/ppt-master/skills/ppt-master/scripts/image_backends/backend_openai.py

@@ -11,10 +11,10 @@ Configuration keys:
   OPENAI_MODEL     (optional) Model name (default: gpt-image-2)
   OPENAI_SIZE_PRESET         (optional) auto, legacy, gpt-image, gpt-image-2, or dall-e-2
   OPENAI_RESPONSE_FORMAT     (optional) auto, b64_json, url, or omit
-  OPENAI_QUALITY             (optional) auto, omit, low, medium, high, standard, or hd
+  OPENAI_QUALITY             (optional) auto, omit, low, medium, high, xhigh, max, standard, or hd
   OPENAI_OUTPUT_FORMAT       (optional) png, jpeg, or webp for GPT image models
   OPENAI_OUTPUT_COMPRESSION  (optional) 0-100, only for jpeg/webp GPT image output
-  OPENAI_BACKGROUND          (optional) auto or opaque for gpt-image-2
+  OPENAI_BACKGROUND          (optional) auto, opaque, or transparent for GPT image models
   OPENAI_MODERATION          (optional) auto or low for GPT image models
   OPENAI_INPUT_FIDELITY      (optional) high or low for supported GPT image edits
 
@@ -173,6 +173,8 @@ OPENAI_QUALITY_VALUES = {
     "low",
     "medium",
     "high",
+    "xhigh",
+    "max",
     "standard",
     "hd",
 }
@@ -206,7 +208,12 @@ def _is_gpt_image_model(model: str) -> bool:
 
 
 def _is_gpt_image_2(model: str) -> bool:
-    return _normalized_model(model).startswith("gpt-image-2")
+    normalized = _normalized_model(model)
+    return normalized.startswith("gpt-image-2") and not normalized.startswith("gpt-image-2.")
+
+
+def _is_gpt_image_2_5(model: str) -> bool:
+    return _normalized_model(model).startswith("gpt-image-2.5-")
 
 
 def _is_dall_e_2(model: str) -> bool:
@@ -251,7 +258,9 @@ def _select_size(
 ) -> str:
     """Select a model-compatible size while preserving legacy fallbacks."""
     preset = size_preset or "auto"
-    if preset in {"gpt-image-2"} or (preset == "auto" and _is_gpt_image_2(model)):
+    if preset in {"gpt-image-2"} or (
+        preset == "auto" and (_is_gpt_image_2(model) or _is_gpt_image_2_5(model))
+    ):
         size = GPT_IMAGE_2_SIZES[image_size][aspect_ratio]
         _validate_gpt_image_2_size(size)
         return size
@@ -312,8 +321,10 @@ def _gpt_image_options(model: str) -> tuple[dict, str]:
 
     background = _read_env_choice("OPENAI_BACKGROUND", GPT_IMAGE_BACKGROUNDS)
     if background:
-        if _is_gpt_image_2(model) and background == "transparent":
+        if background == "transparent" and output_format == "jpeg":
-            raise ValueError("gpt-image-2 does not support OPENAI_BACKGROUND=transparent.")
+            raise ValueError(
+                "OPENAI_BACKGROUND=transparent requires OPENAI_OUTPUT_FORMAT=png or webp, not jpeg."
+            )
         options["background"] = background
 
     moderation = _read_env_choice("OPENAI_MODERATION", GPT_IMAGE_MODERATION_VALUES)
@@ -331,15 +342,16 @@ def _read_input_fidelity(model: str) -> str | None:
     )
     if input_fidelity is None:
         return None
-    if _is_gpt_image_2(model):
+    if _is_gpt_image_2(model) or _is_gpt_image_2_5(model):
         raise ValueError(
-            "gpt-image-2 always uses high input fidelity and does not accept "
+            f"{model} does not accept OPENAI_INPUT_FIDELITY in this backend. Remove this setting."
-            "OPENAI_INPUT_FIDELITY. Remove this setting."
         )
     if not _is_gpt_image_model(model):
         raise ValueError(
             f"{model} does not support OPENAI_INPUT_FIDELITY in this backend."
         )
+    if _normalized_model(model) == "gpt-image-1-mini" and input_fidelity != "low":
+        raise ValueError(f"{model} only supports OPENAI_INPUT_FIDELITY=low.")
     return input_fidelity
 
 
@@ -375,6 +387,12 @@ def _read_quality(image_size: str, model: str) -> str | None:
     quality = _read_env_choice("OPENAI_QUALITY", OPENAI_QUALITY_VALUES)
     if quality == "omit":
         return None
+    if quality in {"xhigh", "max"} and not _is_gpt_image_2_5(model):
+        raise ValueError(
+            f"{model} does not support OPENAI_QUALITY={quality}. "
+            "Only gpt-image-2.5-sunburst and gpt-image-2.5-flare (including snapshots) "
+            "support xhigh and max."
+        )
     if quality and quality != "auto":
         if _is_gpt_image_model(model) and quality in {"standard", "hd"}:
             raise ValueError(

plugins/codex/plugins/ppt-master/skills/ppt-master/scripts/image_backends/backend_openrouter.py

@@ -55,7 +55,7 @@ VALID_ASPECT_RATIOS = [
 
 VALID_IMAGE_SIZES = ["512px", "1K", "2K", "4K"]
 
-DEFAULT_MODEL = "google/gemini-3.1-flash-image"
+DEFAULT_MODEL = "google/gemini-nano-banana-2.1"
 DEFAULT_ENDPOINT = "https://openrouter.ai/api/v1"
 
 # ╔══════════════════════════════════════════════════════════════════╗
@@ -195,6 +195,11 @@ def generate(prompt: str,
     if image_size not in VALID_IMAGE_SIZES:
         raise ValueError(f"Invalid image size '{image_size}'. Valid: {VALID_IMAGE_SIZES}")
 
+    if model.strip().lower() == "google/gemini-nano-banana-2.1" and image_size == "512px":
+        raise ValueError(
+            f"Invalid image size '{image_size}' for {model}. Valid: 1K, 2K, 4K."
+        )
+
     last_error = None
     for attempt in range(max_retries + 1):
         try:

plugins/codex/plugins/ppt-master/skills/ppt-master/scripts/image_backends/backend_qwen.py

@@ -73,8 +73,8 @@ ASPECT_RATIO_SIZE_MAP = {
     },
     "2K": {
         "1:1": "2048*2048",
-        "2:3": "1536*2048",
+        "2:3": "1664*2496",
-        "3:2": "2048*1536",
+        "3:2": "2496*1664",
         "3:4": "1728*2368",
         "4:3": "2368*1728",
         "4:5": "1792*2240",

plugins/codex/plugins/ppt-master/skills/ppt-master/scripts/image_backends/backend_replicate.py

@@ -43,7 +43,7 @@ from image_backends.backend_common import (
 )
 
 
-VALID_ASPECT_RATIOS = ["1:1", "16:9", "9:16", "3:4", "4:3", "3:2", "2:3", "4:5", "5:4", "21:9"]
+VALID_ASPECT_RATIOS = ["1:1", "16:9", "9:16", "3:4", "4:3", "3:2", "2:3", "4:5", "5:4"]
 DEFAULT_BASE_URL = "https://api.replicate.com/v1"
 DEFAULT_MODEL = "black-forest-labs/flux-1.1-pro"
 SUPPORTED_MODELS = {DEFAULT_MODEL}

plugins/codex/plugins/ppt-master/skills/ppt-master/scripts/image_backends/backend_volcengine.py

@@ -86,7 +86,7 @@ def _resolve_url(base_url: str) -> str:
     base = base_url.rstrip("/")
     if base.endswith("/images/generations"):
         return base
-    if base.endswith("/api/v1"):
+    if base.endswith(("/api/v1", "/api/v3")):
         return base + "/images/generations"
     return base + "/api/v1/images/generations"
 

plugins/codex/plugins/ppt-master/skills/ppt-master/scripts/image_gen.py

@@ -108,7 +108,7 @@ BACKEND_REGISTRY = {
         "module": "backend_gemini",
         "tier": "core",
         "label": "Google Gemini",
-        "default_model": "gemini-3.1-flash-image",
+        "default_model": "gemini-nano-banana-2.1",
         "default_image_size": "1K",
         "key_hint": "GEMINI_API_KEY",
         "aliases": ["google"],
@@ -216,7 +216,7 @@ BACKEND_REGISTRY = {
         "module": "backend_fal",
         "tier": "experimental",
         "label": "fal.ai",
-        "default_model": "fal-ai/nano-banana-2",
+        "default_model": "google/nano-banana-2.1",
         "default_image_size": "1K",
         "key_hint": "FAL_KEY / FAL_API_KEY",
         "aliases": ["fal-ai"],
@@ -233,7 +233,7 @@ BACKEND_REGISTRY = {
         "module": "backend_openrouter",
         "tier": "experimental",
         "label": "OpenRouter",
-        "default_model": "google/gemini-3.1-flash-image",
+        "default_model": "google/gemini-nano-banana-2.1",
         "default_image_size": "1K",
         "key_hint": "OPENROUTER_API_KEY",
     },

plugins/codex/plugins/shadcn/THIRD_PARTY_SOURCE.json

@@ -2,8 +2,8 @@
   "sourceId": "shadcn",
   "repo": "https://github.com/shadcn-ui/ui.git",
   "ref": "main",
-  "commit": "97ddbf4274ed09d02aa7fd34375f2cf1e48cbbf0",
+  "commit": "0132174664c07d41262fb51012d0cc782e458e6c",
   "adapter": "claude-skill",
   "sourcePath": "skills/shadcn",
-  "syncedAt": "2026-10-07T16:00:00Z"
+  "syncedAt": "2026-10-08T15:59:59Z"
 }

plugins/codex/plugins/ui-ux-pro-max/README.md

@@ -394,6 +394,14 @@ The skill provides stack-specific guidelines for:
 
 Just mention your preferred stack in the prompt, or let it default to HTML + Tailwind.
 
+## Examples
+
+### Before/after: ops dashboard
+
+A plain ops dashboard ([before](https://skill-fixture-before.theroost.dev)) restyled using only the design system UI UX Pro Max generated for it ([after](https://ui-ux-pro-max-after.theroost.dev)), from `search.py "internal operations dashboard" --design-system --density 8 --motion 3 --variance 4`.
+
+*Illustrative, community-contributed example; not an official demo, benchmark, or runtime test of the skill.*
+
 ## Design System Command (Advanced)
 
 For direct access to the design system generator:

plugins/codex/plugins/ui-ux-pro-max/THIRD_PARTY_SOURCE.json

@@ -2,8 +2,8 @@
   "sourceId": "ui-ux-pro-max",
   "repo": "https://github.com/nextlevelbuilder/ui-ux-pro-max-skill.git",
   "ref": "main",
-  "commit": "477bcb28c9812b385cb51a4605ddf30d7b2266e2",
+  "commit": "1a2c459b35f26116fd165b0a0f30597f252749ff",
   "adapter": "claude-skill",
   "sourcePath": ".claude/skills/ui-ux-pro-max",
-  "syncedAt": "2026-10-04T16:00:00Z"
+  "syncedAt": "2026-10-08T15:59:59Z"
 }