fix(images): bound bridge iteration buffering

[luvs01]

Motivation

• Prevent unbounded memory growth in the image bridge by bounding per-iteration semantic buffering and per-call tool-argument accumulation so a malicious or compromised upstream provider cannot exhaust proxy memory.

Description

• Enforce a per-iteration retained-event byte ceiling when buffering adapter events by adding appendBoundedIterationEvent and charging against TRANSLATOR_MAX_TURN_BYTES, which causes a typed TranslatorBudgetExceededError when exceeded.
• Enforce a per-call argument-byte ceiling while assembling streamed tool_call_delta chunks by tracking pendingArgsBytes and throwing TranslatorBudgetExceededError once TRANSLATOR_MAX_CALL_ARGUMENT_BYTES is exceeded.
• Apply the bounded append to both runTurn adapter collection and the streamed parseStreamWithProgress path so runTurn and non-runTurn adapters are both protected.
• Add focused regression tests in tests/images/loop.test.ts that assert oversized semantic output and oversized synthetic tool-argument streams produce a translation_buffer_limit failure rather than allowing the bridge to complete.

Testing

• ✅ bun test tests/images/loop.test.ts — focused image-bridge tests passed (31 tests).
• ✅ bun run typecheck — TypeScript typecheck passed.
• ✅ bun run privacy:scan — privacy scan passed for changed files.
• ❌ bun run test — full test suite encountered an unrelated timeout / auth-status mismatch in an unrelated provider validation test; focused image-bridge tests remain green.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Team

Run ID: b6eef7c7-7c1f-4b84-aa7a-3e7428381ce5

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

✅ Deterministic PR hygiene checks passed.

[github-actions]

✅ READY

• all PR quality gates passed.

Hygiene

✅ Deterministic PR hygiene checks passed.

[luvs01]

Closing this original proposal after reimplementing its useful scope with current code and executable regression coverage. Follow-up now belongs to the submitted implementation and its review/CI; this closure does not claim the change has merged.