- Open Customize right panel in the right-panel tab bar.
- Expand Extensions below the separator.
- Use Search extensions to search the single list of installed addons and the official online catalogue. Hover or focus an entry for its metadata.
The disclosure starts collapsed each time the customization popup opens. Installed and online entries are combined by extension ID; there is no separate manager window or installed/online mode. Browsing catalogue metadata does not download or execute the author's panel code. The catalogue is maintained in CodeNomad Extensions; inclusion and claimed author names are not signatures or proof of trust.
If the catalogue is unavailable, installed extensions and Install from ZIP… remain available. Refresh to retry discovery. Collapsing or dismissing the popup abandons its pending review/confirmation UI; it does not silently install anything.
- Choose Install… on a catalogue entry, or Install from ZIP… for a package you obtained separately.
- Review the package ID, author, repository, version, API/permissions and SHA-256 digest. Expand technical details when needed.
- Verify the publisher and, where available, compare the digest through a trusted channel.
- Only if you trust the code, select I trust this package and its author, then Install disabled.
Inspection downloads/revalidates the selected package; author code is not executed by inspection. A digest identifies exact bytes, not the author's identity. Catalogue packages come from the exact declared GitHub release asset, not an arbitrary URL. Manual packages are ZIPs containing only manifest.json and self-contained panel.html; invalid or unsupported packages are rejected.
Installation needs no OpenCode restart and never grants activation automatically. A failed validation, conflict or storage operation does not authorize a retry with different bytes. Reinspect the package before a new installation attempt.
- Return to the addon row above the Extensions disclosure in Customize right panel. Installed disabled addons remain in that list.
- Select its checkbox to activate it. Clear that same checkbox to disable it.
That checkbox is the only activation control: there is no extra manager switch or per-window visibility gate. Activation is configuration-wide across projects, not per folder. On a remote connection it affects the server's installed extension store, not just your viewing device.
The extension store is panel-extensions/ beside the selected CodeNomad configuration. Separate desktop data profiles do not isolate extensions when those profiles use the same configuration directory. Conversely, opening a different configuration is not a grant to run an addon installed elsewhere. See Desktop windows and data for the distinction.
An enabled panel can mount when selected; hiding it can dispose its temporary UI state. Disabling revokes its activation. Reset in customization only restores built-in layout and does not enable, disable or uninstall extensions.
- Use Change version… or inspect another ZIP with the same ID to replace an installed package.
- Review the new digest and permissions, acknowledge trust, then install it disabled.
- Reactivate through the normal checkbox only after deciding to trust the replacement.
- To uninstall, use Remove… and Confirm removal after reviewing the target.
Every replacement revokes activation across all projects, even if the permission list is unchanged, and clears the panel's own saved settings. Validation/conflict/storage failure preserves the installed package. There are no silent extension updates. Removal deletes the package, its activation settings and its saved panel settings, not OpenCode sessions or project files. To recover from unwanted code, disable it first; reinstall only a verified trusted package.
| Contract | What activation permits |
|---|---|
API 1 / session.context |
Current session identifier (or none), interface language and appearance. No transcript text or filesystem access. |
API 2 / session.assets.read plus context |
Explicitly reviewed permission to list bounded current-session tool-result image/attachment metadata and read supported embedded bytes. It is not general transcript, file or URL access. |
API 3 / repository.workItems.read plus context |
Explicitly reviewed permission to list bounded pages of the project repository's issues and pull requests on GitHub, GitLab or Gitea/Forgejo, and to open one of them in the browser. It is not file, credential or general network access. |
| API 4 / context plus one or more of the permissions below | The review lists one sentence per declared permission; activation grants all of them together, and a replacement revokes them all. |
session.images.read |
Read the images returned by the read tool in the displayed conversation, with generation status and lineage when they can be verified. |
session.images.prompts (needs session.images.read) |
Read the prompt and model of each image generated in the project's Images conversation. |
composer.prefill |
Add text to the message box of the displayed conversation. It never sends a message. |
images.conversation |
Open or start this project's Images conversation. |
opencode.designAgent |
Adds CodeNomad's Design agent and its image skills to OpenCode while this extension is enabled. |
panel.preferences |
Remember this panel's own settings. |
Asset access follows the currently mounted host/session, not an author-selected session. Local/remote references may be listed as unavailable; the asset API does not fetch arbitrary remote URLs or open local files. Switching sessions, disconnecting or revoking consent invalidates old access.
With API 4, image reading follows the displayed conversation in the same way, and only shows the images the agent read back into it. An extension with session.images.prompts can read the prompts you or the agent wrote for images in an Images conversation, and could pass them on despite the sandbox, so grant it only to authors you trust with them. Text added by composer.prefill stays in the message box until you edit it or select Send message; it never starts with a command, never ends with an open @ mention, and cites image paths as plain text. Undoing with Ctrl+Z (Cmd+Z on macOS) in the message box does not remove it. Saved panel settings belong to this CodeNomad profile, at most 4 KiB per extension; disabling an extension keeps them.
Work items come from the project folder's upstream remote, else origin. CodeNomad reads them with the GitHub, GitLab or Gitea CLI you already signed in to (gh, glab, tea), or anonymously for public repositories, and stores no token; the extension sees only the repository name and the items. Anonymous reads cover github.com, gitlab.com, codeberg.org and gitea.com; a self-hosted forge is read only through its CLI signed in to it. Opening an item asks CodeNomad to open that item's page on the same forge in your browser, at most once a second; the extension cannot open other addresses.
Author code runs in a restricted iframe, not in the trusted application renderer. It receives no native/OpenCode bridge, credential access, general RPC, forms, popups or downloads; network APIs and external resources are restricted. Extensions are UI addons, not OpenCode plugins.
The sandbox is not process/CPU isolation or a promise that approved code is harmless. A hostile extension can disrupt its renderer. Install only trusted authors, do not provide secrets, and disable/remove an addon if it behaves unexpectedly.
The Design extension is a light table for the images you create with CodeNomad's Design agent in a project's Images conversation. It shows the images, prepares requests in the message box and leaves every generation to the messages you send.
- Connect a provider that offers an image model. Image generation is on unless it was turned off in Settings → Providers → Images (Image generation and storage).
- In Customize right panel → Extensions, install Design from the catalogue (Review and install disabled) after reviewing its permissions (Context, asset consent and sandbox limits), then select its checkbox (Activate and understand the scope).
- Open the Design panel and choose Open the Images conversation.
While the extension is enabled, CodeNomad adds its Design agent and image skills to OpenCode. Your own design agent and your own design-* skills always take precedence; when you supply your own design agent, the panel shows Your own Design agent is used. The panel also says when image generation, an image model or the Design agent is missing.
Each project folder or worktree has its own Images conversation, titled Images. Open the Images conversation finds it, or creates it with the Design agent and the model CodeNomad picks for a new conversation with that agent, then shows it with the focus in the message box; opening sends nothing. An existing Images conversation keeps its own model. New Images conversation starts another one with an empty light table, and the panel suggests it once a conversation holds many images; Open then shows the newest one. Archived and deleted Images conversations are skipped.
Describe what you need and send it: the agent asks a few framing questions, says how many images it will generate, generates them, reads each one back and reviews it. Images are saved in .codenomad/design/ of the project folder. CodeNomad adds that folder to the repository's local Git exclusions (.git/info/exclude), leaving .gitignore untouched; when it cannot, the panel shows Images in this location may appear in Git. Undoing a turn removes its images from the light table but keeps their files, and an image the agent overwrote cannot be recovered. The agent asks for images of about 1K pixels, yet providers may return larger ones, and several large images at once can use a lot of memory in the shared OpenCode service.
If the Design agent is missing from an Images conversation that uses it, the message box shows The Design agent is not available and keeps sending blocked: choose Use the default agent, or enable the Design extension again. If the conversation's chat model cannot receive images, the panel warns that the agent can't critique them visually; the images it reads back still appear on the light table.
The Light table shows the images the agent read back into the displayed conversation, newest first, grouped by reply. Selecting an image shows it larger with Small sizes previews at 16, 32 and 64 px; Compare puts two images side by side, and View full size opens a viewer. In a narrow panel, widen it to compare. Lineage (Made from, Used for), and in the Images conversation the prompt and model, appear only when CodeNomad can verify which generation produced the image; otherwise the image keeps its pixels and reads origin not verifiable. Generations lists each image generation with its state; follow its progress in the conversation. In another conversation, the panel shows that conversation's read-back images without prompts or requests and offers to open the Images conversation.
In the Images conversation, Start from (a recipe such as an app icon or a logo), Refine, Variants, Apply direction, Save to project…, Ask the agent to show it and Retry only add editable text to the message box: the panel never sends a message or generates an image. Actions about a chosen image cite its path relative to the project, and only images of the project with a verifiable origin can be cited. Edit the request, then send it yourself. Save to project… asks the agent to copy the image to the destination you type after the request. Images per turn (1 to 4, 3 by default) is included in requests that generate new images and kept in the panel's saved settings. On a phone, the panel floats and closes when it adds a request.
The Design agent and skills are ordinary OpenCode files. To use them in the OpenCode TUI or another client without CodeNomad, copy the contents of the Design content folder into a project's .opencode/ folder or your global OpenCode configuration folder (~/.config/opencode/), keeping NOTICE.md and the licence beside them. Then select the design agent; it loads its skills by name, and other agents use them only when you name them.
The Design agent and skills adapt material from Open Design (Apache-2.0) and taste-skill (MIT); NOTICE.md lists each adapted file. The Design extension reuses code from the MCP Assets extension (MIT).