v0.3.6 — Image consent and portable imports

New image slots now use native stock search by default. Before using Codex's built-in image generation, the design skill requires an explanation of quota use, the intended assets and number of calls, followed by explicit permission for that task and count. Generation unavailable or failed uses scoped stock fallback; search failure never authorizes generation. No canvas toggle or extra prompt form is added.

The model-only canvas_import_image embeds local PNG/JPEG/WebP bytes into an existing image node, preserving its layout and checking the current page and document version. Generated originals stay in the project, and the workflow inspects the native preview, saves and verifies reopen. The bridge does not invoke providers or manage quota; consent is guided by the skill rather than enforced as a host accounting gate.

Validation:

• Package checks, skill validation and all 66 regression tests passed.
• The actual bundled Codex host loads the installed plugin with 185 tools.
• Local native stock search resolved one requested slot; import, native rendering, save and independent reopen passed after deleting the original asset.
• The verified pinned public runtime passed import/render/save/reopen. Its stock search failed for two independent test queries; this is recorded separately and no public-runtime stock-search success is claimed.
• No quota-consuming image-generation call was made during testing.

Reconnect the plugin or start a new chat after updating to load the new tool and workflow. See docs/validation.md for evidence and limitations.