codex-copilot-dx 0.8.0 → 0.8.2

package/README.md

@@ -145,11 +145,13 @@ Image generation is disabled by default. Configure it interactively only when yo
 ccdx enable-image
 ```
 
-The command asks for an HTTPS `/images/generations` endpoint and an API key without echoing the key. It reads the endpoint's `/models` catalog and asks for a numeric model selection only when multiple image models are available. It then detects either the standard OpenAI Images request format or the supported `input.messages` format for the selected model only. Its single validation request omits the prompt and does not generate an image.
+The command accepts an HTTPS base URL or a full `/images/generations` endpoint, then asks for an API key without echoing the key. A bare origin such as `https://api.example` expands to `/v1/images/generations`; `https://api.example/v1` expands to the same endpoint. Custom base paths are retained, and existing full endpoints remain unchanged. CCDX uses GET for the corresponding `/models` catalog and POST for image requests; there is no endpoint-search or automatic fallback. It asks for a numeric model selection only when multiple image models are available, then detects either the standard OpenAI Images request format or the supported `input.messages` format for the selected model only. Its single validation request omits the prompt and does not generate an image.
 
-The provider credential is stored in `~/.config/codex-copilot-dx/image-provider.json`, or under `XDG_CONFIG_HOME`, with mode `0600`. The API key is never written to `~/.codex/config.toml`; that file receives only a marked local MCP entry pointing to the running CCDX adapter with a 210-second tool timeout. Enabling also installs CCDX-owned `ccdx-image` guidance under `~/.codex/skills`, with a self-contained Node helper. Codex uses the MCP tool directly, including through deferred tool search; an already-open task without that tool can use the helper to call the same local service and display the saved image. Neither route requires Python, an OpenAI SDK, or copying credentials. The original built-in imagegen skill remains available for capabilities such as editing uploaded images and other reference-image workflows.
+The provider credential is stored in `~/.config/codex-copilot-dx/image-provider.json`, or under `XDG_CONFIG_HOME`, with mode `0600`. The API key is never written to `~/.codex/config.toml`; that file receives only a marked local MCP entry pointing to the running CCDX adapter with a 210-second tool timeout. Only after enabling, CCDX installs `ccdx-image` guidance under `~/.codex/skills`, with a self-contained Node helper. The concise `SKILL.md` keeps operation selection, safety, and final-image delivery rules; editing details and helper instructions live in references read only for those operations. Codex uses the MCP tool directly, including through deferred tool search; an already-open task without that tool can use the helper to call the same local service and display the saved image. Neither route requires Python, an OpenAI SDK, or copying credentials. Built-in skills and unrelated tools are not modified.
 
-The enable command verifies the local MCP handshake and generation-tool directory without generating an image. It reports provider configuration separately from local service readiness; it cannot assert that every running Codex task has refreshed its catalog. Codex normally detects changed skills; restart Codex App once if an open task has not refreshed them. Normal CCDX startup installs or updates this guidance for providers already enabled in 0.7.8, without repeating API setup. Unchanged guidance is not rewritten. The existing adapter can remain running because provider settings are loaded when the tool is invoked.
+The enable command verifies the local MCP handshake and generation-tool directory without generating an image. It reports provider configuration separately from local service readiness; it cannot assert that every running Codex task has refreshed its catalog. Codex normally detects changed skills; restart Codex App once if an open task has not refreshed them. Normal CCDX startup installs or updates this guidance only for an already-enabled provider, without repeating API setup. Without `enable-image`, it installs neither this skill nor the MCP registration. Unchanged guidance is not rewritten. The existing adapter can remain running because provider settings are loaded when the tool is invoked.
+
+Direct MCP generations and edits retain their original inline image content and editing ID, and also save the exact image bytes privately under `~/.local/share/codex-copilot-dx/images`. The result includes ready-to-use image Markdown for Codex's final chat reply, so the image appears as a clickable thumbnail instead of only inside a tool result. Files use unique names and are not overwritten or removed on adapter restart. Asking to show the same image again reuses its existing Markdown, not a new generation or edit. If saving fails, CCDX still returns the generated image content, reports the delivery failure, and does not retry the provider or invent a file path. The bundled helper continues saving once at its existing output location, without a second adapter-side copy. Existing enabled users receive updated, unmodified CCDX-owned guidance on the next CCDX startup; no new setup command is needed.
 
 Inspect or disable the optional provider with:
 
@@ -158,7 +160,7 @@ ccdx image-status
 ccdx disable-image
 ```
 
-`image-status` never prints the API key and performs only a local, non-generating tool-readiness check. Disabling removes the stored provider credential, the CCDX-owned MCP block, and unmodified CCDX image guidance; user-modified skill files are preserved. Cached tool calls then fail closed. The Node helper creates a new file under the task's `output/imagegen` directory by default and reports its absolute path; it never overwrites an existing file or automatically repeats a failed generation. The image endpoint is contacted only by `enable-image` validation and by explicit `generate_image` tool calls. Ordinary Responses, models, authentication, Fast, Auto-review, compaction, and image-input paths remain on their existing routes.
+`image-status` never prints the API key and performs only a local, non-generating tool-readiness check. Disabling removes the stored provider credential, the CCDX-owned MCP block, and unmodified skill, reference, and helper files; user-modified files are preserved. Cached tool calls then fail closed. The Node helper creates a new file under the task's `output/imagegen` directory by default and reports its absolute path; it never overwrites an existing file or automatically repeats a failed generation. The image endpoint is contacted only by `enable-image` validation and by explicit `generate_image` or `edit_image` tool calls. Ordinary Responses, models, authentication, Fast, Auto-review, compaction, and image-input paths remain on their existing routes.
 
 Generated image downloads must use public HTTPS addresses, do not follow redirects, are DNS-checked against private and reserved addresses, and are capped at 32 MiB. DNS resolution and downloading share one deadline and respond to cancellation; a late DNS result cannot start a cancelled download. The local MCP route accepts calls only from the same device and permits at most two concurrent image operations. It requires `application/json` and rejects browser `Origin` headers; native Codex and Node clients do not send an Origin. The tool supports new-image generation at `1024x1024`, `1536x1024`, or `1024x1536`.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-copilot-dx",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "Use Codex App with GitHub Copilot",
   "author": "Dale Xiao",
   "type": "module",

package/src/cli-image.mjs

@@ -201,9 +201,10 @@ export async function runImageCommand({
   const ask = prompt || ((question) => visibleQuestion(input, output, question));
   const askSecret = promptSecret || ((question) => hiddenQuestion(input, output, question));
   output.write(`${commandName} enable-image\n`);
-  const endpointAnswer = String(await ask(`API endpoint${current ? ` [${current.endpoint}]` : ""}: `) || "").trim();
+  output.write("Enter an HTTPS base URL (for example, https://api.example/v1) or a full /images/generations endpoint.\n");
+  const endpointAnswer = String(await ask(`API base URL or endpoint${current ? ` [${current.endpoint}]` : ""}: `) || "").trim();
   const endpoint = endpointAnswer || current?.endpoint;
-  if (!endpoint) throw new Error("Image API endpoint is required");
+  if (!endpoint) throw new Error("Image API base URL or endpoint is required");
   const keyAnswer = String(await askSecret(`API key${current ? " [Enter to keep current]" : ""}: `) || "").trim();
   const apiKey = keyAnswer || current?.api_key;
   if (!apiKey) throw new Error("Image API key is required");

package/src/cli-options.mjs

@@ -302,7 +302,7 @@ function topicHelp(name, topic) {
     models: `Usage:\n  ${name} models [--format table|plain]\n\nPerforms a fresh, read-only Copilot model-directory lookup for the saved account. Interactive terminals use a table by default.`,
     usage: `Usage:\n  ${name} usage [--format table|plain]\n\nSummarizes local token usage metadata without reading prompt or completion content. Interactive terminals use a table by default.`,
     animation: `Usage:\n  ${name} animation\n\nPreviews all terminal activity animations together and selects the theme used the next time the adapter starts.`,
-    "enable-image": `Usage:\n  ${name} enable-image\n\nInteractively configures an HTTPS image API endpoint and API key, detects its supported image model and protocol, installs CCDX image guidance, and checks the local image tool for Codex App without generating an image.`,
+    "enable-image": `Usage:\n  ${name} enable-image\n\nInteractively configures an HTTPS image API endpoint (base URLs are also accepted) and API key, detects its supported image model and protocol, installs CCDX image guidance, and checks the local image tool for Codex App without generating an image.`,
     "disable-image": `Usage:\n  ${name} disable-image\n\nDisables the local CCDX image tool and removes its stored API credential and unmodified CCDX image guidance.`,
     "image-status": `Usage:\n  ${name} image-status\n\nShows provider configuration and probes local image-tool readiness without generating an image or exposing its API key.`,
     "auto-review-model": `Usage:\n  ${name} auto-review-model\n\nInteractively selects an advertised Responses model for Codex Auto-review.`,

package/src/image-mcp.mjs

@@ -1,5 +1,9 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
 import { isLoopbackAddress } from "./observability.mjs";
-import { generateImage, supportsImageEditing } from "./image-provider.mjs";
+import { generateImage, supportsImageEditing, IMAGE_MAX_BYTES } from "./image-provider.mjs";
 import { readImageProviderConfig } from "./image-provider-config.mjs";
 import { createImageReferenceStore } from "./image-references.mjs";
 
@@ -8,6 +12,36 @@ const MCP_PROTOCOL_VERSIONS = new Set(["2025-06-18", "2025-03-26", "2024-11-05"]
 const MCP_MAX_BODY_BYTES = 256 * 1024;
 const IMAGE_TOOL_NAME = "generate_image";
 const EDIT_TOOL_NAME = "edit_image";
+const IMAGE_EXTENSIONS = new Map([["image/png", ".png"], ["image/jpeg", ".jpg"], ["image/webp", ".webp"]]);
+
+async function saveChatImage(image, directory, signal) {
+  const extension = IMAGE_EXTENSIONS.get(image.mimeType);
+  if (!extension || typeof image.data !== "string" || !image.data
+    || image.data.length > 4 * Math.ceil(IMAGE_MAX_BYTES / 3)
+    || !/^[A-Za-z0-9+/]+={0,2}$/.test(image.data)) throw new Error("Invalid image data for chat display");
+  const bytes = Buffer.from(image.data, "base64");
+  if (!bytes.length || bytes.length > IMAGE_MAX_BYTES || bytes.toString("base64") !== image.data) {
+    throw new Error("Invalid image data for chat display");
+  }
+  signal.throwIfAborted();
+  await fs.mkdir(directory, { recursive: true, mode: 0o700 });
+  if (!(await fs.lstat(directory)).isDirectory()) throw new Error("Image output path is not a regular directory");
+  const filePath = path.join(await fs.realpath(directory), `image-${randomUUID()}${extension}`);
+  signal.throwIfAborted();
+  const file = await fs.open(filePath, "wx", 0o600);
+  try {
+    await file.writeFile(bytes, { signal });
+    signal.throwIfAborted();
+    await file.close();
+  } catch (error) {
+    await file.close().catch(() => {});
+    await fs.unlink(filePath).catch(() => {});
+    throw error;
+  }
+  const displayPath = encodeURI(filePath.replaceAll("\\", "/"))
+    .replace(/[?#()[\]]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+  return { filePath, markdown: `![Generated image](<${displayPath}>)` };
+}
 
 function sameHostSocket(socket) {
   const remote = String(socket?.remoteAddress || "").replace(/^::ffff:/, "");
@@ -44,7 +78,7 @@ function imageTool() {
   return {
     name: IMAGE_TOOL_NAME,
     title: "Generate image",
-    description: "Generate a new image with the image provider the user enabled in CCDX. Call directly for text-to-image requests; returns the image inline. Credentials and generation are handled by CCDX, with no Python or OpenAI SDK setup. Does not edit or take reference images.",
+    description: "Generate a raster image with the user's enabled CCDX provider. Input: text prompt and optional size; no source images. Returns image content, saved-image Markdown for the final chat reply, and an edit ID when supported. For changes to an earlier CCDX image use edit_image; for redisplay reuse its Markdown without a tool call.",
     inputSchema: {
       type: "object",
       properties: {
@@ -74,7 +108,7 @@ function editTool() {
     ...tool,
     name: EDIT_TOOL_NAME,
     title: "Edit image",
-    description: "Edit a previously generated CCDX image using its exact image_id and a change instruction. Preserve the source and return a new image with a new ID for further edits. Source images must still be retained by this running adapter. Does not accept file paths, URLs, masks, or arbitrary uploads.",
+    description: "Edit a retained CCDX image using its exact image_id and a change prompt. Preserves the source and returns a new image, saved-image Markdown for the final chat reply, and a new edit ID when retained. Omit size to preserve source dimensions. Does not accept paths, URLs, masks, or arbitrary uploads. Redisplay requires no tool call.",
     inputSchema: {
       ...tool.inputSchema,
       properties: {
@@ -101,6 +135,7 @@ export function createImageMcpHandler({
   generateImageFn = generateImage,
   maxConcurrent = 2,
   imageReferences = createImageReferenceStore(),
+  imageDirectory = path.join(os.homedir(), ".local", "share", "codex-copilot-dx", "images"),
 } = {}) {
   let active = 0;
   return async function imageMcpHandler(req, res) {
@@ -149,7 +184,7 @@ export function createImageMcpHandler({
         capabilities: { tools: { listChanged: false } },
         serverInfo: { name: "ccdx-image", version: "1" },
         instructions: config
-          ? `The user enabled CCDX as their image provider. Call generate_image for new images.${supportsImageEditing(config) ? " For changes to a CCDX image, call edit_image with that image's returned image_id. Keep each returned ID with its image; there is no global last image." : " Editing is not supported by this configured provider."} Display the returned image. CCDX handles credentials and the API; no Python, SDK installation, extra API key or alternate endpoint is needed. Do not automatically retry failed generations or edits.`
+          ? `CCDX handles the configured image API and credentials; no Python or SDK setup. Embed returned image Markdown in the final reply. Redisplay reuses it without tool calls. Keep each image_id with its own image. Do not automatically retry failed/timed-out requests or switch providers.${supportsImageEditing(config) ? " Use generate_image for new images; edit_image requires the exact retained source ID." : " Use generate_image for new images. Editing is unsupported; do not substitute generation."}`
           : "Image generation is disabled. Enable it with ccdx enable-image before requesting images.",
       });
       return;
@@ -205,12 +240,25 @@ export function createImageMcpHandler({
       }
       const note = imageId ? ` Image ID: ${imageId}. Use this ID for further edits while retained by this adapter.`
         : supportsImageEditing(config) ? " The image is available, but an editing reference could not be retained." : "";
+      let saved;
+      let delivery;
+      // The bundled helper already saves once at its caller-selected output path.
+      if (request.params?._meta?.["ccdx/client_saves_image"] === true) {
+        delivery = "\nThe calling helper will save this image and return its local path. Embed the saved image in the final chat reply; do not generate or edit again just to display it.";
+      } else {
+        try {
+          saved = await saveChatImage(image, imageDirectory, abort.signal);
+          delivery = `\nInclude this image Markdown in your final chat reply to show its thumbnail:\n${saved.markdown}\nTo display this same image again, reuse this Markdown; do not call generate_image or edit_image.`;
+        } catch {
+          delivery = "\nThe image was generated, but its chat-preview file could not be saved. Image content is still returned. Do not claim it was displayed, invent a file path, or generate/edit again to retry delivery.";
+        }
+      }
       reply({
         // Codex prioritizes structuredContent over image blocks. Keep IDs in metadata/text.
-        ...(imageId ? { _meta: { "ccdx/image_id": imageId } } : {}),
+        ...(imageId || saved ? { _meta: { ...(imageId ? { "ccdx/image_id": imageId } : {}), ...(saved ? { "ccdx/image_path": saved.filePath } : {}) } } : {}),
         content: [
           { type: "image", data: image.data, mimeType: image.mimeType },
-          { type: "text", text: `${editing ? "Edited" : "Generated"} ${image.width || ""}${image.width && image.height ? "×" : ""}${image.height || image.size} image with ${image.model}.${note}` },
+          { type: "text", text: `${editing ? "Edited" : "Generated"} ${image.width || ""}${image.width && image.height ? "×" : ""}${image.height || image.size} image with ${image.model}.${note}${delivery}` },
         ],
       });
     } catch (error) {

package/src/image-provider-config.mjs

@@ -21,7 +21,7 @@ export function normalizeImageEndpoint(value) {
   try {
     url = new URL(String(value || "").trim());
   } catch {
-    throw new Error("Image API endpoint must be a valid HTTPS URL");
+    throw new Error("Image API base URL or endpoint must be a valid HTTPS URL");
   }
   if (url.protocol !== "https:"
     || !url.hostname
@@ -29,13 +29,14 @@ export function normalizeImageEndpoint(value) {
     || url.password
     || url.search
     || url.hash) {
-    throw new Error("Image API endpoint must be an HTTPS URL without credentials, query, or fragment");
+    throw new Error("Image API base URL or endpoint must be an HTTPS URL without credentials, query, or fragment");
   }
   const pathname = url.pathname.replace(/\/+$/, "");
-  if (!pathname.endsWith("/images/generations")) {
-    throw new Error("Image API endpoint path must end with /images/generations");
+  if (pathname.endsWith("/images/generations")) return `${url.origin}${pathname}`;
+  if (/\/(?:images(?:\/(?:edits|variations))?|chat\/completions|completions|responses|embeddings|models)$/i.test(pathname)) {
+    throw new Error("Image API URL must be a base URL or an endpoint ending with /images/generations");
   }
-  return `${url.origin}${pathname}`;
+  return `${url.origin}${pathname || "/v1"}/images/generations`;
 }
 
 export function imageModelsEndpoint(endpoint) {

package/src/image-skill/SKILL.md

@@ -0,0 +1,28 @@
+---
+name: ccdx-image
+description: Generate raster images with the user's enabled CCDX provider, edit earlier CCDX results, or redisplay their saved images. Not for arbitrary uploaded-image edits, masks, transparent output, or code-native SVG/HTML assets.
+---
+
+# CCDX image generation
+
+Use the user's enabled CCDX provider for supported image requests. Respect an explicitly requested different provider. CCDX supplies credentials and execution; no additional API key, Python, or SDK setup is needed.
+
+## Select the operation
+
+- **Generate:** Call `ccdx_image.generate_image` with a complete prompt. Supported sizes are `1024x1024`, `1536x1024`, and `1024x1536`; the default is square.
+- **Edit:** Read [editing.md](references/editing.md) before calling `ccdx_image.edit_image`. Use the exact source `image_id` from this conversation; never substitute a different image or a fresh generation.
+- **Redisplay:** Reuse the requested image's existing Markdown. Do not call generation or editing tools.
+
+Use the MCP tool directly when callable. Otherwise, if tool search is available, make one targeted search for the relevant `ccdx_image` tool. Only if the MCP tool remains unavailable, read [helper.md](references/helper.md) for the bundled fallback. An explicitly unsupported edit or a failed tool call is not a reason to use the fallback.
+
+## Deliver the result
+
+Embed the returned saved-image Markdown unchanged in the final chat reply to display a clickable thumbnail. Image content in a tool result or a viewer call alone is not final delivery. Do not use a code block or replace the image with a download-only link.
+
+Retain the image's Markdown/path together with its returned `image_id`, when present. Reuse that artifact for later redisplay. If saving failed, distinguish generation success from delivery failure: do not invent a path, claim display succeeded, or generate/edit again to repair delivery.
+
+## Execution boundaries
+
+- Do not automatically retry a failed or timed-out image request, switch providers, or run the helper afterward; the request may already have been processed.
+- Preserve the host's approval policy. A user request to generate an image does not bypass execution permissions.
+- Arbitrary uploaded-image edits, masks, reference-image inputs, and transparent output are outside this integration. Explain the limitation without substituting a different operation. Use another available workflow only when consistent with the user's request.

package/src/image-skill/references/editing.md

@@ -0,0 +1,15 @@
+# Edit a CCDX result
+
+## Select the source
+
+Use the specific image's returned `image_id` from this conversation, not a global last image. Resolve an ambiguous source before submitting the edit.
+
+A file path is not an edit ID. Handles can expire after cache eviction, provider changes, or adapter restart while saved files remain viewable. For missing or expired handles, explain that this source is unavailable for editing; do not replace it.
+
+## Submit and deliver
+
+Call `ccdx_image.edit_image` with the exact ID and a prompt specifying changes and what to preserve. Omit `size` to preserve source dimensions unless another supported size was requested.
+
+An explicitly unsupported edit must stop. Only an unavailable MCP tool may use [helper.md](helper.md), not a failed or timed-out edit.
+
+Each edit preserves the source. Keep the new image/ID mapping alongside the original, and apply `SKILL.md`'s final-image delivery rules.

package/src/image-skill/references/helper.md

@@ -0,0 +1,27 @@
+# MCP-unavailable fallback
+
+Use only when MCP is unavailable, never after a failed, timed-out, or unsupported image operation. The helper calls the same local CCDX service at most once per execution.
+
+## Invoke
+
+Generate:
+
+```sh
+{{NODE}} {{HELPER}} --prompt 'A complete image prompt' --size 1024x1024
+```
+
+Edit an identified CCDX result:
+
+```sh
+{{NODE}} {{HELPER}} --image-id 'EXACT_SOURCE_IMAGE_ID' --prompt 'Requested changes and what to preserve'
+```
+
+For edits, follow [editing.md](editing.md); omitting `--size` preserves source dimensions. Replace the examples and quote actual arguments safely. Optional `--out` selects a new file; existing files are never overwritten.
+
+Loopback HTTP can be restricted. If networking is restricted, request normal execution permission for this exact command before running it. Keep the host's approval policy unchanged.
+
+## Interpret the result
+
+- **Success:** stdout is the saved absolute path; stderr includes `CCDX image_id` when retained. Embed an absolute-path Markdown image in the final reply and retain its ID.
+- **Explicitly not started:** No image operation was submitted. Resolve the reported connection/permission issue before another attempt.
+- **Other failure or timeout:** Dispatch may have completed. Report without retrying, switching providers, or installing dependencies. Saving/display failure must not trigger regeneration.

package/src/image-skill.mjs

@@ -6,6 +6,8 @@ import { adapterBaseUrl } from "./running-adapter.mjs";
 
 const SKILL_MARKER = /<!-- ccdx:image-skill:([a-f0-9]{64}) -->\n/;
 const HELPER_MARKER = /^\/\/ ccdx:image-helper:([a-f0-9]{64})\n/;
+const REFERENCE_MARKER = /^<!-- ccdx:image-reference:([a-f0-9]{64}) -->\n/;
+const REFERENCE_FILES = ["editing.md", "helper.md"];
 
 function digest(content) {
   return createHash("sha256").update(content).digest("hex");
@@ -50,7 +52,7 @@ function removeFile(filePath) {
 }
 
 function removeEmptyDirectories(skillDirectory) {
-  for (const directory of [path.join(skillDirectory, "scripts"), skillDirectory]) {
+  for (const directory of [path.join(skillDirectory, "scripts"), path.join(skillDirectory, "references"), skillDirectory]) {
     try { fs.rmdirSync(directory); }
     catch (error) { if (!["ENOENT", "ENOTEMPTY", "EEXIST"].includes(error?.code)) throw error; }
   }
@@ -66,9 +68,11 @@ export function updateImageSkill({
   const skillDirectory = path.join(path.dirname(codexPath), "skills", "ccdx-image");
   const skillPath = path.join(skillDirectory, "SKILL.md");
   const helperPath = path.join(skillDirectory, "scripts", "generate.mjs");
+  const references = REFERENCE_FILES.map((name) => ({ name, filePath: path.join(skillDirectory, "references", name) }));
   try {
     directoryCheck(skillDirectory);
     directoryCheck(path.dirname(helperPath));
+    directoryCheck(path.join(skillDirectory, "references"));
   } catch (error) {
     if (!enabled && error?.code === "CCDX_IMAGE_SKILL_CONFLICT") {
       return { changed: false, preserved: true, skillPath, rollback: () => {} };
@@ -77,6 +81,8 @@ export function updateImageSkill({
   }
   const previousSkill = ownedSnapshot(skillPath, SKILL_MARKER, !enabled);
   const previousHelper = ownedSnapshot(helperPath, HELPER_MARKER, !enabled);
+  for (const reference of references) reference.previous = ownedSnapshot(reference.filePath, REFERENCE_MARKER, !enabled);
+  const snapshots = [[skillPath, previousSkill], [helperPath, previousHelper], ...references.map(({ filePath, previous }) => [filePath, previous])];
   const touched = [];
   let rolledBack = false;
   const rollback = () => {
@@ -89,10 +95,10 @@ export function updateImageSkill({
     rolledBack = true;
   };
   if (!enabled) {
-    const preserved = Boolean(previousSkill?.unowned || previousHelper?.unowned);
-    if (!previousSkill?.content && !previousHelper?.content) return { changed: false, preserved, skillPath, rollback: () => {} };
+    const preserved = snapshots.some(([, snapshot]) => snapshot?.unowned);
+    if (!snapshots.some(([, snapshot]) => snapshot?.content)) return { changed: false, preserved, skillPath, rollback: () => {} };
     try {
-      for (const [filePath, snapshot] of [[skillPath, previousSkill], [helperPath, previousHelper]]) {
+      for (const [filePath, snapshot] of snapshots) {
         if (!snapshot?.content) continue;
         touched.push([filePath, snapshot]);
         removeFile(filePath);
@@ -106,42 +112,31 @@ export function updateImageSkill({
   }
   const host = ["0.0.0.0", "::", "[::]"].includes(adapterHost) ? (adapterHost === "0.0.0.0" ? "127.0.0.1" : "::1") : adapterHost;
   const endpoint = `${adapterBaseUrl(host, adapterPort)}/mcp/image`;
-  const skillBody = `---
-name: ccdx-image
-description: Generate images from text and edit previously generated CCDX images using the user's configured provider. Use for drawing a new image or modifying a CCDX result identified in the conversation. Excludes arbitrary image uploads, masks, transparent output, and code-native SVG or diagrams.
----
-
-# CCDX image generation
-
-The user enabled this provider through ccdx enable-image. Use the configured CCDX provider directly for text-to-image requests and supported edits of its previous results.
-
-For a new image, use the ccdx_image server's generate_image tool. Supply a complete prompt and one size: 1024x1024 (square), 1536x1024 (landscape), or 1024x1536 (portrait). Display its returned image and retain the returned image_id in the conversation for later edits. No Python, SDK installation, extra API key, or provider discovery is needed.
-
-For an edit, use edit_image with the image_id of the specific CCDX result the user wants to change and a prompt describing the changes and what to preserve. Omit size to keep the source dimensions unless the user requests another size. Select the ID from this conversation; never assume a global last image or substitute a different result. Each edit returns a new image and image_id and preserves the source. IDs belong to the running CCDX process and can expire after cache eviction or restart. If the source ID is missing or expired, explain that the original image is unavailable for this edit. The provider must support edit_image; an unsupported edit is not permission to generate a replacement.
-
-If the desired tool is not directly callable and the host provides tool search, make one targeted search for ccdx_image generate_image or ccdx_image edit_image as appropriate and use that tool if it becomes callable. If it is still unavailable, run the bundled Node helper once. To generate:
-
-\`\`\`sh
-${quote(nodePath)} ${quote(helperPath)} --prompt 'A complete image prompt' --size 1024x1024
-\`\`\`
-
-To edit, add --image-id with the exact source ID returned earlier and supply the editing prompt. Omit --size to preserve the source dimensions. This sends one edit_image call to the same service.
-
-Quote the actual prompt safely for the shell. The helper uses the same local CCDX service and prints only the saved absolute image path to stdout; stderr reports CCDX image_id for subsequent edits. An optional --out argument selects a new output file; existing files are never overwritten. Inspect and display the saved image with the available image viewer or an absolute-path Markdown image, and retain its new ID.
-
-The helper needs loopback HTTP access. If the task reports restricted network access, use the execution tool's normal permission-request mechanism for this exact command before running it; localhost is also restricted. Keep the host's approval policy unchanged.
-
-Only use the helper when the MCP tool is absent, not after generation or editing fails or times out: the first request may already have consumed a generation or edit. A helper error explicitly saying generation or editing has not started means no image request was submitted; resolve its stated local connection or permission issue before trying again. Otherwise report the failure once without switching providers, installing dependencies, or repeating the image request.
-
-For arbitrary uploaded images, reference-image workflows, masks, transparent output, or explicitly requested other providers, keep the relevant native tools and skills; do not substitute a fresh CCDX generation.
-`;
+  const skillBody = fs.readFileSync(new URL("./image-skill/SKILL.md", import.meta.url), "utf8");
+  for (const reference of references) {
+    const body = fs.readFileSync(new URL(`./image-skill/references/${reference.name}`, import.meta.url), "utf8")
+      .replaceAll("{{NODE}}", () => quote(nodePath)).replaceAll("{{HELPER}}", () => quote(helperPath));
+    reference.content = `<!-- ccdx:image-reference:${digest(body)} -->\n${body}`;
+  }
   const skillContent = skillBody.replace("# CCDX image generation", `<!-- ccdx:image-skill:${digest(skillBody)} -->\n# CCDX image generation`);
   const helperBody = `${fs.readFileSync(new URL("./image-tool-client.mjs", import.meta.url), "utf8")}\ntry {\n  await runImageToolClient({ endpoint: ${JSON.stringify(endpoint)} });\n} catch (error) {\n  console.error(String(error?.message || "Image generation failed").replace(/[\\u0000-\\u001f\\u007f-\\u009f]/g, " ").slice(0, 1000));\n  process.exitCode = 1;\n}\n`;
   const helperContent = `// ccdx:image-helper:${digest(helperBody)}\n${helperBody}`;
-  if (previousSkill?.content === skillContent && previousHelper?.content === helperContent) {
+  if (previousSkill?.content === skillContent && previousHelper?.content === helperContent
+    && references.every(({ previous, content }) => previous?.content === content)) {
     return { changed: false, skillPath, rollback: () => {} };
   }
-  atomicWriteFilePairSync(helperPath, helperContent, skillPath, skillContent, { mode: 0o600 });
-  touched.push([helperPath, previousHelper], [skillPath, previousSkill]);
+  try {
+    // Install conditional resources before publishing the skill entrypoint.
+    for (const { filePath, previous, content } of references) {
+      if (previous?.content === content) continue;
+      touched.push([filePath, previous]);
+      atomicWriteFileSync(filePath, content, { mode: 0o600, preserveMode: false });
+    }
+    atomicWriteFilePairSync(helperPath, helperContent, skillPath, skillContent, { mode: 0o600 });
+    touched.push([helperPath, previousHelper], [skillPath, previousSkill]);
+  } catch (error) {
+    rollback();
+    throw error;
+  }
   return { changed: true, skillPath, rollback };
 }

package/src/image-tool-client.mjs

@@ -125,7 +125,7 @@ export async function runImageToolClient({
   if (options.imageId) argumentsValue.image_id = options.imageId;
   const result = await readRpcResponse(await post({
     jsonrpc: "2.0", id: 2, method: "tools/call",
-    params: { name: options.imageId ? "edit_image" : "generate_image", arguments: argumentsValue },
+    params: { name: options.imageId ? "edit_image" : "generate_image", arguments: argumentsValue, _meta: { "ccdx/client_saves_image": true } },
   }), 2);
   if (result.isError) {
     throw new Error(cleanError(result.content?.find((part) => part.type === "text")?.text));