Summary

• Fix js_repl so await codex.tool("view_image", { path }) actually attaches the image to the active turn when called from inside the JS REPL.
• Restore the behavior expected by the existing js_repl image-attachment test.
• This is a follow-up to #12553, which changed view_image to return structured image content.

Root Cause

• #12553 changed view_image from directly injecting a pending user image message to returning structured function_call_output content items.
• The nested tool-call bridge inside js_repl serialized that tool response back to the JS runtime, but it did not mirror returned image content into the active turn.
• As a result, view_image appeared to succeed inside js_repl, but no input_image was actually attached for the outer turn.

What Changed

• Updated the nested tool-call path in js_repl to inspect function tool responses for structured content items.
• When a nested tool response includes input_image content, js_repl now injects a corresponding user Message into the active turn before returning the raw tool result back to the JS runtime.
• Kept the normal JSON result flow intact, so codex.tool(...) still returns the original tool output object to JavaScript.

Why

• js_repl documentation and tests already assume that view_image can be used from inside the REPL to attach generated images to the model.
• Without this fix, the nested call path silently dropped that attachment behavior.