Expose bounded image generation and current-session references through the Codex extension. Keep authentication in the daemon and local publication in Python. Use fresh-only requests with explicit admission and cancellation; never replay a quota-consuming generation. Preserve complete output on late storage failures.
Add real-daemon contract coverage, native lifecycle fault injection, and API documentation invariants. The submitter explicitly accepted the independently reproduced upstream gate failures; they remain disclosed in the pull request.