When the user requests PaintPilot Photoshop/MCP drawing or forbids imagegen/image_gen, use only the connected PaintPilot Photoshop MCP tools for that task. Start with photoshop_get_state to establish the document, or photoshop_guard_resume for an interrupted run; reuse an already confirmed target. Draw through photoshop_guard_cycle_auto. If the intended open document is inactive, discover photoshop_set_active_document via photoshop_guard_capabilities(tool_names) even when no standalone tool appears. With explicit authorization to switch focus, activate its exact document_id through photoshop_guard_cycle_auto, then verify photoshop_get_state before painting. Without focus permission ask permission to activate through MCP, not for a manual tab click. Never switch silently or remove document_id pinning. A decision-loop stall is advisory, not a mutation blocker: dispatch the next meaningful visual pass or one bounded diagnostic. Do not call built-in/external image generation, even for a reference, preview or fallback. If the selected tools are unavailable, report the exact blocker and stop; only an explicit later user change authorizes another execution mode. Run one bounded semantic pass, not an entire artistic stage, in local Photoshop; keep this route unless the user explicitly changes execution mode. After inspecting exact review images, send previous_operation_id + previous_observation (critic_review at its checkpoint) with optional next_pass; fetch missing images via photoshop_guard_review_image and poll returned job_id via photoshop_guard_job_poll.

Persist Director plans and evidence-bound assessments for a verified art-run document; use photoshop_guard_resume(document_id, director_fields) to read saved fields and photoshop_guard_status for readiness. review requires directive and issues/updates tasks; interrupt requires an allowed reason and marks an active directive for replanning; complete requires final_comparison and pre_final_hostile_review against the exact current frame and rejects outstanding completion blockers. This closes a satisfied directive, not the whole painting, and does not certify painted quality. directive carries style/strategy and observed value/refinement assessments; observed claims need current registered image evidence. anchor_decision explicitly manages classified whole-frame anchors; capture_restore_state additionally reads pinned layer/selection state. incomplete_hypothesis records a bounded experiment with rollback and review horizon; its resolution is explicit. whole_image_glance supplies due whole-frame/relationship review, never an invented pass. Writes Guard state without painting; optional anchor capture reads Photoshop. Returns ok, bounded document/Director state and next guidance. Payload errors return guard_art_director_contract_invalid with issues; state/evidence failures return guard_art_director_rejected. Retrieve saved fields and correct the request; do not replay painting or bypass evidence gates.

Recover the local Photoshop workflow without replaying uncertain mutations; keep it unless the user explicitly changes execution mode. After a UXP session change, same_document_confirmed=true requires user confirmation and internally compares fresh pixels/owners with the preserved frame; mismatch keeps work quarantined. No source inspection is needed.

Deliver stored exact-image evidence for a completed visual Guard operation; use photoshop_get_preview for a fresh document preview instead. Obtain operation_id from photoshop_guard_cycle_auto or its completed job result. Returns JSON review instructions, operation_id and per-role delivery/omission metadata, plus MCP image blocks with recorded MIME types (normally JPEG); roles and image count depend on the stored review package. Omit roles for all required images, or request only missing roles. Already delivered exact images may be reused as confirmed same-chat references without resending bytes. Does not paint or capture a replacement frame, but records delivery receipts/timing and updates the review cache; delivery is not proof of visual observation. Inspect the actual images before submitting previous_observation through cycle_auto. review_scope=whole-scene requests whole-scene review metadata using the same images. Force redelivery only for unavailable/failed images with redelivery_reason; repeated forced delivery is rejected. Missing previews or invalid roles return isError=true with an error code; incomplete delivery lists undelivered_roles and next_required_action, not successful visual review.

Inspect one asynchronous Guard job using the job_id returned by photoshop_guard_cycle_auto; use photoshop_guard_status for document/global readiness instead. Returns immediately without waiting for completion, starting replacement work or painting; polling may record a bookkeeping event in the Guard journal. Returns ok, job_id, state, process_state, timing/heartbeat fields, next and result when available. starting/running means poll the same job again; completed means inspect result and fetch missing completed visual review via photoshop_guard_review_image before submitting previous_observation. A completed process can still have state=uncertain and ok=false when its operation is partial or uncertain: process_state is not proof of successful execution. For uncertain/stalled/failed jobs follow next and the recovery guidance from photoshop_guard_resume and photoshop_guard_reconcile; never replace running/uncertain work with another mutation and never replay uncertain execution. Unknown or unreadable job ids return isError=true with code=guard_job_not_found.

Reconcile uncertain execution without replay. For a user-confirmed closed document, send id + outcome=abandoned + document_closed_confirmed=true + reason; Guard collects fresh document-list evidence internally. Do not read source or manufacture evidence ids.

Create or update durable art-run settings for a verified document; use photoshop_guard_resume to retrieve an existing run rather than registering it again. Requires document_id and process_dir; bind document and immutable process_dir, and preserve the original user request verbatim as original_brief, never a success summary. Probes Photoshop/UXP readiness and document identity, creates the process directory and persists Guard settings without painting. Honor presentation_context.painting_profile_selection from the Photoshop panel for NEW art runs; auto allows an explicit choice based on the brief and defaults to nontrivial_painting if omitted. Existing profile locks and transition gates remain enforced. Brush preflight is required before dependent brush operations; supply observed evidence or the brush_pack_profile preflight, not invented preset claims. Commentary settings control presentation, not execution permission. Returns ok, art_run, capability context and next guidance; invalid identity/path/profile/preflight returns isError=true with guard_art_run_rejected and message. Changing original_brief invalidates its evaluation binding; settings alone do not prove painting completion.

Inspect Guard readiness, pending review/ack debts, active jobs and uncertain work. Use photoshop_get_state for Photoshop/UI state or photoshop_guard_lint_next_pass for lint alone. No arguments returns global status; document_id scopes readiness, next_pass adds candidate lint, and construction_model or construction_ref selects a geometry solve instead. Returns readiness/next_required_action or solved geometry; geometry is not image proof. Does not paint; never replay uncertain mutations. Status may reconcile missing-document journal state; diagnostic_timing_marker writes benchmark metadata. Keep the established local Photoshop workflow unless its route is unavailable.

Discover Guard workflow/recovery rules and exact registered command contracts without source inspection. With no arguments returns Guard mode, protocol/runtime revisions, running deployment and command_sets; this is not document readiness (photoshop_guard_status) or Photoshop version-derived feature flags (photoshop_get_capabilities). tool_name returns one exact executable argument schema and dispatch route; tool_names batches up to 8. Mutating commands discovered here still run through photoshop_guard_cycle_auto, never a raw bypass. Returns discovery_revision; cache contracts once per art run and use if_revision only for a deliberate recheck (a match returns unchanged=true). deployment_health=true is a separate source/dist/running-MCP/loaded-UXP comparison after activation or a freshness blocker; omit tool names and if_revision. Does not paint, restart components or reconcile operations. Unknown names return guard_tool_contract_unknown with supported alternatives; incompatible argument modes are rejected.

Import supplied .abr assets and return brush_pack_id with verified presets; changes Photoshop brush inventory, not canvas pixels.

Profile an already imported brush pack; use photoshop_guard_brush_pack_ingest to import first. plan compares cached profiles to preset_states and returns role coverage and probe candidates. probe_media requires Photoshop/UXP, draws a disposable sheet and saves preview evidence plus a receipt when preset identity is verified; it may also return a JPEG. record_media/record_stamp save observed classifications to local profile records. build_preflight reads profiles against preset_states and returns complete with brush_preflight or missing_role_coverage; ok=true alone does not mean complete. Rejections return ok=false, code and message.

Commit a visually accepted temporary component on a predeclared independent unit using its journal-bound hypothesis_id and layer_id; does not alter pixels or layer structure. A temporary composition-scaffold unit cannot be promoted or relabelled.

Optionally validate a complete proposed Guard continuation before execution, including its previous observation. Use for a new risky draft; cycle_auto already validates, so do not lint each normal component or separately close a reviewed previous pass. Requires next_pass; retain its pinned document_id and complete construction/ownership fields. Include previous_operation_id plus previous_observation when continuing an operation, or review_operation_id for retained-frame re-evaluation, following the existing review instructions. Reads Guard state under a temporary controller lock and compiles the proposal without painting, persisting a review or closing an operation. Returns ok, execution=not-executed, visual_mutation_started=false, violations, error_codes, normalizations, compiled_operation and rejection. ok=false means correct the listed fields; success is not execution or artistic approval. Submit the same validated continuation once to photoshop_guard_cycle_auto, without another lint or close-only call. Runtime failures return isError=true with guard_next_pass_lint_failed.

Explicit PaintPilot Stop for one known Guard execution operation_id. Blocks subsequent Photoshop mutations in that execution, including queued work. This does not detect or replace the MCP host chat Stop button, and cannot undo an already dispatched command.

Persist the document's whole-frame problem priorities after visual assessment; use photoshop_guard_status to inspect readiness and photoshop_guard_lint_next_pass to validate a proposed pass. Writes Guard state without painting. problems supplies the ordinary problem set for this update, matched by stable problem_id; omitted ordinary problems are removed, while unresolved structural defects are retained. Open larger must-fix problems block finer work, and dependencies constrain blocker selection. Each problem needs scale and severity; status defaults to open. Changing an existing open problem's status/scale/severity requires evidence_operation_id from an exact-current visual operation with a verdict. Structural defects require an exact-current Critic finding and cannot be resolved by a priority label. current_stage cannot override the durable painting stage. Returns ok=true, updated document state and next guidance; rejected updates return isError=true with ok=false, code=guard_priority_rejected and message. Recording priorities does not certify image quality.

Release locks only for dead owners; embedded_guard_job_stalled with a live PID requires MCP-child restart before recovery, never mutation replay.

Verify Photoshop/UXP readiness and report transport, version, bridge revision, active document and document count. Use for route/bootstrap checks, not every call.

Return the detected Photoshop version string.

For feature support use photoshop_get_capabilities.

Read the active Photoshop document and active-layer metadata through Photoshop/UXP without painting or switching tabs. Use this when an open document is required; photoshop_get_state also supports checking whether a document exists, while photoshop_list_documents lists all open tabs. Returns a text response headed "Document info:" containing the JSON state snapshot (hasDocument, document and activeLayer metadata). Requires a working Photoshop/UXP connection and an active document; no active document returns isError=true with "Error getting document info: No active document". Optional document_id verifies that the expected document is already active and fails closed on a mismatch; it never activates that document.

List all open Photoshop documents, their ids/dimensions, and the active document without changing tabs.

List all layers in the active document with kind, visibility, and opacity.

Use photoshop_get_state for a lighter session summary.

List Photoshop fonts, optionally filtered by name/family/PostScript name. Returns font records, total count, and truncation state without changing Photoshop.

Read the active pixel selection bounds in document pixels (read-only).

Read the active document history states without mutation.

When the user requests PaintPilot Photoshop/MCP drawing or forbids imagegen/image_gen, use only the connected PaintPilot Photoshop MCP tools for that task. Start with photoshop_get_state to establish the document, or photoshop_guard_resume for an interrupted run; reuse an already confirmed target. Draw through photoshop_guard_cycle_auto. If the intended open document is inactive, discover photoshop_set_active_document via photoshop_guard_capabilities(tool_names) even when no standalone tool appears. With explicit authorization to switch focus, activate its exact document_id through photoshop_guard_cycle_auto, then verify photoshop_get_state before painting. Without focus permission ask permission to activate through MCP, not for a manual tab click. Never switch silently or remove document_id pinning. A decision-loop stall is advisory, not a mutation blocker: dispatch the next meaningful visual pass or one bounded diagnostic. Do not call built-in/external image generation, even for a reference, preview or fallback. If the selected tools are unavailable, report the exact blocker and stop; only an explicit later user change authorizes another execution mode. Read current document/layer/selection state without mutation; establish or recover the document target.

Capture a JPEG preview of the active/pinned document, optionally with a local focus crop or materialized filesystem copy.

Report version-derived Photoshop feature flags plus current UXP bridge availability. Use for installation/version compatibility and whether the UXP bridge is reachable; use photoshop_get_version for version alone, photoshop_guard_capabilities for Guard rules/exact command schemas, and photoshop_get_painting_method_capabilities for registered painting methods. Takes no arguments. Reads the detected Photoshop version and probes bridge reachability without painting or changing document state. Returns JSON with version and features, including uxp_bridge_reachable; neural_filters is gated by bridge reachability and the version-derived UXP flag. Feature flags are not proof that a particular document operation will succeed or that Guard permits direct mutation. Detection/probe failures return the structured error response.

Sample the visible composite color at a document-space pixel coordinate. With radius=0, returns a point sample. With radius>0, returns the Photoshop Average-equivalent color of the clipped square neighborhood without changing the source document. Useful for painting from references, skin/hair/lip palette pickup, and local color checks.

Sample many visible-composite point colors from one pinned Photoshop document in a single operation. Large requests are automatically split into bounded batches; up to 1024 total point samples are returned without changing the source document. Use for reference-driven painting value maps, palette studies, and dense visual checkpoints where repeated photoshop_sample_color calls would be inefficient.

List installed Photoshop brush presets. Supports optional case-insensitive filtering and a result limit.

Read active Photoshop paint-brush settings used for digital painting, including geometry, opacity/flow, pressure overrides, airbrush and smoothing.

Measure user-supplied named points in the active Photoshop document. Returns pixel and normalized coordinates, vector distances, and optional ratios between named measurements. This tool does not detect facial/anatomical landmarks automatically.

Pure deterministic source-pixel geometry for Scene Geometry Model / Geometry Preflight work. The caller supplies semantic line endpoints, points or polygons plus exact source-frame provenance; this tool performs no semantic detection and creates no Photoshop history.

List Photoshop guides with index, orientation, pixel position, and normalized position for the active document.

Transform a caller-supplied named landmark set from one axis-aligned semantic frame to another while preserving local u/v coordinates. Pure geometry: does not inspect Photoshop or detect landmarks.

Compare two caller-supplied named landmark sets in their own semantic frames. Returns per-point normalized error plus mean/RMSE/max error. Pure geometry: does not inspect Photoshop or detect landmarks.

Return the executable painting-method capability map derived from tools actually registered in this runtime. Unsupported methods remain explicit instead of being invented.

Choose an executable painting method from registered runtime capabilities without contacting or mutating Photoshop. Use photoshop_get_painting_method_capabilities to inspect the full map; use this tool for a specific construction_role or visual_intent plus required impact_class. construction_role takes precedence and derives the intent when both are supplied. Excludes avoid_method_ids, then uses the ordered intent preferences unless a valid preferred_method_id is supplied; an unavailable, avoided or incompatible preference is rejected rather than silently replaced. With edge_class, returns a separate edge_selection and tries preferred_method_id first for that edge choice; incompatible edge preferences are listed as rejected and may fall back. Returns ok=true, selection (selected method, fallbacks and rejected candidates), execution_contract with registered commands/input schemas and fallback_commands. This is planning guidance, not execution or pixel verification; required preparation and state still apply. Missing role/intent or no compatible method returns isError=true with ok=false, code=no_painting_method_available and message.

Analyze large-form light/dark structure when Director value/refinement review needs grayscale evidence; use photoshop_get_preview for ordinary color inspection and photoshop_guard_review_image for stored operation review images. Requires pinned document_id. In Guard, analyzes the exact delivered current frame and automatically registers materialized grayscale/luminance evidence; standalone preview-only catalogs capture a non-destructive preview instead. Returns two MCP JPEG images (full grayscale and low-frequency thumbnail), source/derived SHAs, dimensions and descriptive luminance summaries; Guard also returns a real evidence_operation_id and director_evidence_fields for Director updates. The thumbnail suppresses small texture/noise so major-form claims can be checked independently of surface activity. Writes derived JPEG files when a materialization path is available and registers Guard evidence, but does not modify the PSD or declare artistic PASS. Inspect both images before making an observed claim. materialize_path must be absolute; invalid paths or unavailable preview images fail, and overwriting the source frame is forbidden.