@nanobpm/nano-workforce 0.139.0 → 0.139.2

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [0.139.2](https://github.com/nanobpm/nano-workforce/compare/v0.139.1...v0.139.2) (2026-08-24)
+
+### Bug Fixes
+
+* **delivery-graphs:** stop the in-flight grid headers wrapping to 0-width columns ([#538](https://github.com/nanobpm/nano-workforce/issues/538)) ([#539](https://github.com/nanobpm/nano-workforce/issues/539)) ([c52e85b](https://github.com/nanobpm/nano-workforce/commit/c52e85bf38edef680914df0336ff95c98a364059))
+
+## [0.139.1](https://github.com/nanobpm/nano-workforce/compare/v0.139.0...v0.139.1) (2026-08-24)
+
+### Bug Fixes
+
+* **delivery-graphs:** anchor App-View door defaults to import.meta.url ([#536](https://github.com/nanobpm/nano-workforce/issues/536)) ([#537](https://github.com/nanobpm/nano-workforce/issues/537)) ([58cd57e](https://github.com/nanobpm/nano-workforce/commit/58cd57e7f35937a9d1720e2fd4d938f70ce8f304)), closes [#279](https://github.com/nanobpm/nano-workforce/issues/279) [#467](https://github.com/nanobpm/nano-workforce/issues/467) [#279-only](https://github.com/nanobpm/nano-workforce/issues/279-only) [#279](https://github.com/nanobpm/nano-workforce/issues/279) [#279](https://github.com/nanobpm/nano-workforce/issues/279)
+
 ## [0.139.0](https://github.com/nanobpm/nano-workforce/compare/v0.138.3...v0.139.0) (2026-08-24)
 
 ### Features

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanobpm/nano-workforce",
-  "version": "0.139.0",
+  "version": "0.139.2",
   "description": "Nano Workforce — an Agent Graph Orchestration application for Agentic SDLC: durable BPMN processes that coordinate a graph of AI agents across the software delivery lifecycle.",
   "type": "module",
   "main": "main.ts",

package/pages/delivery-graphs/library.mount.js

@@ -15,9 +15,18 @@
 
 import { DG_COMPOSE_FILL_MESSAGE } from "./mount.js";
 
-// The read behind the list: every saved library entry, newest first (base-relative — a leading-slash
-// path resolves against the console iframe ORIGIN, not the app-view base, and 404s the door, #279).
-const DEFAULT_LIBRARY_URL = "app/api/delivery-graph/library";
+// The read behind the list: every saved library entry, newest first. Anchored to THIS MODULE's url
+// (import.meta.url), NOT the document base. The library App-View shell (library-embed.html /
+// library-standalone.html) — and therefore this mount.js — is served ONE DIRECTORY DEEP at
+// `<appMount>/delivery-graphs/`, while the API is a sibling of that dir at `<appMount>/app/api/…`. A
+// document-base-relative default (`"app/api/delivery-graph/library"`) resolves against the
+// `…/delivery-graphs/` shell base to `…/delivery-graphs/app/api/delivery-graph/library` → 404 on EVERY
+// surface (standalone, local urban-SPA App-View, and the Studio console App-View, which never injects
+// window.__NANO_APP_VIEW__ so this default is what runs). A leading-slash absolute is worse still:
+// through Studio it resolves against the console ORIGIN, not the app-view base (#279). `../app/api/…`
+// off import.meta.url steps up out of `/delivery-graphs/` and lands on `<appMount>/app/api/…` on all
+// surfaces regardless of the document base — the same fix the preview/stage doors ship (#467/#536).
+const DEFAULT_LIBRARY_URL = new URL("../app/api/delivery-graph/library", import.meta.url).href;
 
 // How often the list re-polls so a freshly-saved (or just-deleted) entry appears (or drops off)
 // without a manual refresh — mirrors the 5s cadence the staged list uses.
@@ -145,10 +154,11 @@ export function mountDeliveryGraphLibrary(host, config = {}) {
     ...(config.hookSecret && isSameOrigin(url) ? { "x-hook-secret": config.hookSecret } : {}),
   });
 
-  // The delete door is the per-entry path under the list door: DELETE app/api/delivery-graph/library/<id>.
+  // The delete door is the per-entry path under the list door: DELETE .../delivery-graph/library/<id>.
   // Append the id to the path only, preserving any query/hash on the configured door so a
   // `?library=` override carrying a search string or fragment still resolves the per-entry URL.
-  // Kept base-relative (no `new URL`) to preserve the App-View resolution class (#279).
+  // Derived by string-appending to `libraryUrl` (no fresh `new URL`) so it inherits the same
+  // module-anchored (`../app/api/…`, #467/#536) resolution as the list door it hangs off.
   const entryUrl = (id) => {
     const [beforeHash, hash = ""] = libraryUrl.split("#");
     const [path, search = ""] = beforeHash.split("?");

package/pages/delivery-graphs/mount.js

@@ -15,14 +15,23 @@
 // View) and standalone on a phone — only the host element and injected endpoint config differ. The app
 // has no browser build step, so this consumes the preview/stage doors straight off the wire.
 
-const DEFAULT_PREVIEW_URL = "app/api/actions/delivery-graph/preview";
-const DEFAULT_STAGE_URL = "app/api/actions/delivery-graph/stage";
+// Door defaults are anchored to THIS MODULE's url (import.meta.url), NOT the document base. The compose
+// shell (embed.html / standalone.html) — and therefore this mount.js — is served ONE DIRECTORY DEEP at
+// `<appMount>/delivery-graphs/`, while the preview/stage doors are siblings of that dir at
+// `<appMount>/app/api/…`. A document-base-relative default resolves against the `…/delivery-graphs/`
+// shell base → `…/delivery-graphs/app/api/…` → 404 on every surface (the Studio console App-View never
+// injects window.__NANO_APP_VIEW__, so the default is what runs); a leading-slash absolute resolves
+// against the console ORIGIN through Studio (#279). `../app/api/…` off import.meta.url steps up out of
+// `/delivery-graphs/` onto `<appMount>/app/api/…` on all surfaces — the cockpit's #467 fix.
+const DEFAULT_PREVIEW_URL = new URL("../app/api/actions/delivery-graph/preview", import.meta.url).href;
+const DEFAULT_STAGE_URL = new URL("../app/api/actions/delivery-graph/stage", import.meta.url).href;
 
 // The filesystem IMPORT door (issue #524, epic #519 S5). The Import control below reads a chosen
 // `.json` file's text client-side and POSTs it here; the door validates + compiles it and persists it
-// to the library with `source: imported`. Base-relative like the preview/stage defaults (App-View #279
-// resolution class — a leading-slash path 404s).
-const DEFAULT_IMPORT_URL = "app/api/actions/delivery-graph/library/import";
+// to the library with `source: imported`. Module-anchored off import.meta.url like the preview/stage
+// defaults (App-View #279/#467/#536 resolution class — a document-base-relative default 404s under the
+// `…/delivery-graphs/` shell base, a leading-slash absolute resolves against the console origin).
+const DEFAULT_IMPORT_URL = new URL("../app/api/actions/delivery-graph/library/import", import.meta.url).href;
 
 // The INBOUND reuse-fill seam (issue #523, epic #519 S4). Until now the compose textarea (`#dg-json`)
 // had NO inbound prefill path — its value was set only by "Load example" or the operator typing. The

package/pages/delivery-graphs/staged.mount.js

@@ -17,21 +17,31 @@
 // demand×supply board (pages/board/mount.js): the SAME module mounts embedded in the console (App View)
 // and standalone — only the host element and injected endpoint config differ.
 
-// The read behind the list: every live staged proposal, newest first (base-relative — a leading-slash
-// path resolves against the console iframe ORIGIN, not the app-view base, and 404s the door, #279).
-const DEFAULT_STAGED_URL = "app/api/delivery-graph/staged";
+// The door defaults are anchored to THIS MODULE's url (import.meta.url), NOT the document base. The
+// staged App-View shell (staged-embed.html / staged-standalone.html) — and therefore this mount.js —
+// is served ONE DIRECTORY DEEP at `<appMount>/delivery-graphs/`, while the API is a sibling of that
+// dir at `<appMount>/app/api/…`. A document-base-relative default (`"app/api/delivery-graph/staged"`)
+// resolves against the `…/delivery-graphs/` shell base to `…/delivery-graphs/app/api/delivery-graph/
+// staged` → 404 on EVERY surface (standalone, local urban-SPA App-View, and the Studio console
+// App-View, which never injects window.__NANO_APP_VIEW__ so this default is what runs) — the
+// "Could not load staged proposals." bug. A leading-slash absolute is worse still: through Studio it
+// resolves against the console ORIGIN, not the app-view base (#279). `../app/api/…` off
+// import.meta.url steps up out of `/delivery-graphs/` and lands on `<appMount>/app/api/…` on all
+// three surfaces regardless of the document base — the same fix the cockpit shipped for #467.
+// The read behind the list: every live staged proposal, newest first.
+const DEFAULT_STAGED_URL = new URL("../app/api/delivery-graph/staged", import.meta.url).href;
 // The operator dispatch door: POST { digest } → launches the staged graph engine-natively (#460).
-const DEFAULT_DISPATCH_URL = "app/api/actions/delivery-graph/dispatch";
+const DEFAULT_DISPATCH_URL = new URL("../app/api/actions/delivery-graph/dispatch", import.meta.url).href;
 // The operator dismiss door: POST { digest } → discards a staged proposal as noise, flipping it to the
 // terminal `dismissed` status so it drops off the staged list (#520). Launches nothing.
-const DEFAULT_DISMISS_URL = "app/api/actions/delivery-graph/dismiss";
+const DEFAULT_DISMISS_URL = new URL("../app/api/actions/delivery-graph/dismiss", import.meta.url).href;
 // The read-only DI preview door: recompiles a staged proposal's BPMN (with diagram interchange) so its
 // generated diagram can be rendered in the host explorer BEFORE dispatch. No deploy, no dispatch.
-const DEFAULT_PROPOSAL_BPMN_URL = "app/api/actions/delivery-graph/proposal-bpmn";
+const DEFAULT_PROPOSAL_BPMN_URL = new URL("../app/api/actions/delivery-graph/proposal-bpmn", import.meta.url).href;
 // The save-to-library door: POST { name, digest } → copies this staged proposal's already-stored graph
 // into the reusable library (issue #523, save-from-digest → source `from-staged`). Persists a library
 // entry; it never dispatches or re-stages, so the #460 operator boundary holds.
-const DEFAULT_SAVE_LIBRARY_URL = "app/api/actions/delivery-graph/library/save";
+const DEFAULT_SAVE_LIBRARY_URL = new URL("../app/api/actions/delivery-graph/library/save", import.meta.url).href;
 
 // How often the list re-polls the read door so a freshly-staged (or just-dispatched) proposal appears
 // (or drops off) without a manual refresh — mirrors the 5s cadence the old declarative grid used.

package/pages/delivery-graphs.page.json

@@ -128,15 +128,15 @@
           { "label": "All", "filter": [] }
         ],
         "columns": [
-          { "field": "title", "template": "{{title}}", "header": "Graph", "subtitleField": "run_key", "truncate": true, "width": "28%", "link": { "kind": "page", "page": "delivery-graph-detail", "keyField": "run_key" } },
-          { "field": "status", "header": "Status", "link": { "kind": "processExplorer", "keyField": "process_key" } },
-          { "field": "process_key", "header": "Instance", "width": "9rem", "truncate": true, "link": { "kind": "processExplorer", "keyField": "process_key" } },
-          { "field": "phase", "header": "Phase", "truncate": true, "width": "26%" },
-          { "field": "node_count", "header": "Nodes" },
-          { "field": "human_node_count", "header": "Human" },
-          { "field": "side_effect_count", "header": "Side effects" },
-          { "field": "created_at", "header": "Dispatched", "width": "9rem", "format": "datetime" },
-          { "field": "updated_at", "header": "Updated", "width": "9rem", "format": "datetime" }
+          { "field": "title", "template": "{{title}}", "header": "Graph", "subtitleField": "run_key", "truncate": true, "width": "20%", "link": { "kind": "page", "page": "delivery-graph-detail", "keyField": "run_key" } },
+          { "field": "status", "header": "Status", "truncate": true, "width": "12%", "link": { "kind": "processExplorer", "keyField": "process_key" } },
+          { "field": "process_key", "header": "Instance", "width": "9%", "truncate": true, "link": { "kind": "processExplorer", "keyField": "process_key" } },
+          { "field": "phase", "header": "Phase", "truncate": true, "width": "15%" },
+          { "field": "node_count", "header": "Nodes", "width": "5%" },
+          { "field": "human_node_count", "header": "Human", "width": "5%" },
+          { "field": "side_effect_count", "header": "Effects", "width": "7%" },
+          { "field": "created_at", "header": "Dispatched", "width": "11%", "truncate": true, "format": "datetime" },
+          { "field": "updated_at", "header": "Updated", "width": "11%", "truncate": true, "format": "datetime" }
         ],
         "detail": {
           "fields": [

package/test/delivery-graphs-embed.test.ts

@@ -6,12 +6,13 @@
 // Stage are SEPARATE operator actions (#516): Preview compiles without persisting; Stage persists a
 // proposal. Dispatch is deliberately NOT in this view (issue #460): it is an OPERATOR row-action on the
 // Staged proposals grid on the same page. This test pins the wiring so it can't silently regress: the
-// sidecars exist, mount.js hits the preview + stage doors with base-relative defaults (the #279
-// App-View resolution class — a leading-slash path 404s), it renders each preview facet, its compose
-// panel is collapsible, and it exposes NO dispatch/approval affordance (the self-approval hole #460
-// closes).
+// sidecars exist, mount.js hits the preview + stage doors with MODULE-ANCHORED defaults (`new
+// URL("../app/api/…", import.meta.url)`, the #467 App-View resolution class — this module is served one
+// dir deep under `/delivery-graphs/`, so a document-base-relative or leading-slash default 404s; see
+// test/delivery-graphs-staged-embed.test.ts and #536), it renders each preview facet, its compose panel
+// is collapsible, and it exposes NO dispatch/approval affordance (the self-approval hole #460 closes).
 import { test } from "node:test";
-import { assert } from "#test-assert";
+import { assert, assertEquals } from "#test-assert";
 import { readFileSync } from "node:fs";
 import { parseAndCompileText } from "../app/deliveryGraphTextIngress.ts";
 import { EXAMPLE_GRAPH } from "../pages/delivery-graphs/mount.js";
@@ -24,15 +25,41 @@ const STANDALONE_HTML = readFileSync(`${DIR}/standalone.html`, "utf8");
 const CSS = readFileSync(`${DIR}/delivery-graphs.css`, "utf8");
 const PAGE_JSON = readFileSync(`${ROOT}pages/delivery-graphs.page.json`, "utf8");
 
-// Pull the string default out of `const <name> = config.<name> ?? <CONST>;` (a module const).
-function defaultUrl(name: string): string {
+// The REAL served location of mount.js on each surface: one directory deep under `/delivery-graphs/`.
+const STANDALONE_MOUNT = "http://127.0.0.1:3000/delivery-graphs/mount.js";
+const STUDIO_MOUNT = "http://studio-host:8080/console/app-view/Workforce/delivery-graphs/mount.js";
+
+// Pull the module-anchored default spec out of `const <name> = config.<field> ?? <CONST>;` where the
+// CONST is declared `const <CONST> = new URL("<spec>", import.meta.url).href;`.
+function defaultSpec(name: string): string {
   const m = MOUNT_JS.match(new RegExp(`${name}\\s*=\\s*config\\.\\w+\\s*\\?\\?\\s*(\\w+);`));
   assert(m, `mount.js must default ${name} from config with a fallback constant`);
-  const constM = MOUNT_JS.match(new RegExp(`const ${m![1]}\\s*=\\s*"([^"]*)"`));
-  assert(constM, `mount.js must declare the ${m![1]} fallback as a string literal`);
+  const constM = MOUNT_JS.match(
+    new RegExp(`const ${m![1]}\\s*=\\s*new URL\\(\\s*"([^"]*)"\\s*,\\s*import\\.meta\\.url\\s*\\)\\s*\\.href`),
+  );
+  assert(
+    constM,
+    `mount.js must default ${m![1]} to new URL("<spec>", import.meta.url) so the door is anchored to the ` +
+      `module's own served location, not the document base (#467/#536)`,
+  );
   return constM![1];
 }
 
+// A module-anchored door default must (a) not be absolute (#279), (b) step up out of /delivery-graphs/
+// (#467), and (c) resolve onto <appMount>/app/api/… both standalone AND inside the Studio iframe.
+function assertModuleAnchored(name: string, endpoint: string): void {
+  const spec = defaultSpec(name);
+  assert(!spec.startsWith("/"), `default ${name} spec "${spec}" must not be absolute (resolves against console origin, #279)`);
+  assert(spec.startsWith("../"), `default ${name} spec "${spec}" must step up out of /delivery-graphs/ (#467)`);
+  assert(spec.endsWith(endpoint), `default ${name} spec "${spec}" must hit the ${endpoint} door`);
+  assertEquals(new URL(spec, STANDALONE_MOUNT).href, `http://127.0.0.1:3000/${endpoint}`, `default ${name} must resolve to the app root (#467)`);
+  assertEquals(
+    new URL(spec, STUDIO_MOUNT).href,
+    `http://studio-host:8080/console/app-view/Workforce/${endpoint}`,
+    `default ${name} must resolve under the app-view base, not the console origin (#279) nor the /delivery-graphs/ base (#467/#536)`,
+  );
+}
+
 test("#441: the delivery-graphs App View mounts the same module standalone and embedded", () => {
   assert(/mountDeliveryGraphs/.test(MOUNT_JS), "mount.js must export mountDeliveryGraphs");
   for (const [file, html] of [["embed.html", EMBED_HTML], ["standalone.html", STANDALONE_HTML]] as const) {
@@ -41,13 +68,9 @@ test("#441: the delivery-graphs App View mounts the same module standalone and e
   }
 });
 
-test("#516: mount.js wires SEPARATE preview and stage doors (base-relative)", () => {
-  const previewUrl = defaultUrl("previewUrl");
-  assert(previewUrl.endsWith("actions/delivery-graph/preview"), `previewUrl default "${previewUrl}" must hit the previewDeliveryGraph door`);
-  assert(!previewUrl.startsWith("/"), `default previewUrl "${previewUrl}" must be base-relative (App-View #279 resolution class)`);
-  const stageUrl = defaultUrl("stageUrl");
-  assert(stageUrl.endsWith("actions/delivery-graph/stage"), `stageUrl default "${stageUrl}" must hit the stageDeliveryGraph door`);
-  assert(!stageUrl.startsWith("/"), `default stageUrl "${stageUrl}" must be base-relative (App-View #279 resolution class)`);
+test("#516/#467: mount.js wires SEPARATE preview and stage doors, module-anchored to the app root", () => {
+  assertModuleAnchored("previewUrl", "app/api/actions/delivery-graph/preview");
+  assertModuleAnchored("stageUrl", "app/api/actions/delivery-graph/stage");
   // Preview and Stage are distinct buttons wired to distinct actions.
   assert(/id="dg-preview"/.test(MOUNT_JS) && /id="dg-stage"/.test(MOUNT_JS), "mount.js must render distinct Preview and Stage buttons");
   assert(/submit\(previewUrl,\s*false\)/.test(MOUNT_JS), "the Preview button must submit to the preview door WITHOUT staging");

package/test/delivery-graphs-import.test.ts

@@ -2,7 +2,7 @@
 // epic #519 S5). The Import control is ADDED into the PRE-EXISTING compose mount (pages/delivery-graphs/
 // mount.js — the one #523 reshaped), alongside #523's inbound reuse-fill seam. It must: render an
 // `<input type=file accept=.json>`, read the picked file's text client-side, POST it to the
-// importToLibrary door (base-relative, App-View #279 resolution class), route a successful import back
+// importToLibrary door (module-anchored relative spec, App-View #279 + #467/#536 resolution class), route a successful import back
 // through #523's SINGLE `fillComposer()` seam (no second inbound fill path), and render path-qualified
 // compile errors inline on a 400. This test pins that wiring so it can't silently regress.
 import { test } from "node:test";
@@ -16,12 +16,22 @@ const CSS = readFileSync(`${DIR}/delivery-graphs.css`, "utf8");
 const EMBED_HTML = readFileSync(`${DIR}/embed.html`, "utf8");
 const STANDALONE_HTML = readFileSync(`${DIR}/standalone.html`, "utf8");
 
-// Pull the string default out of `const <name> = config.<name> ?? <CONST>;` (a module const).
-function defaultUrl(name: string): string {
+// Pull the module-anchored default URL *spec* (the "<spec>" literal inside
+// `new URL("<spec>", import.meta.url)`, e.g. "../app/api/…") out of
+// `const <name> = config.<name> ?? <CONST>;` where the CONST is declared
+// `const <CONST> = new URL("<spec>", import.meta.url).href;`. This is the unresolved
+// relative spec, not a resolved URL string — hence `Spec`, not `Url`.
+function defaultSpec(name: string): string {
   const m = MOUNT_JS.match(new RegExp(`${name}\\s*=\\s*config\\.\\w+\\s*\\?\\?\\s*(\\w+);`));
   assert(m, `mount.js must default ${name} from config with a fallback constant`);
-  const constM = MOUNT_JS.match(new RegExp(`const ${m![1]}\\s*=\\s*"([^"]*)"`));
-  assert(constM, `mount.js must declare the ${m![1]} fallback as a string literal`);
+  const constM = MOUNT_JS.match(
+    new RegExp(`const ${m![1]}\\s*=\\s*new URL\\(\\s*"([^"]*)"\\s*,\\s*import\\.meta\\.url\\s*\\)\\s*\\.href`),
+  );
+  assert(
+    constM,
+    `mount.js must default ${m![1]} to new URL("<spec>", import.meta.url) so the door is anchored ` +
+      `to the module's own served location, not the document base (#467/#536)`,
+  );
   return constM![1];
 }
 
@@ -31,13 +41,21 @@ test("#524: the compose mount renders a file-input Import control accepting .jso
   assert(/accept="[^"]*\.json[^"]*"/.test(MOUNT_JS), "the Import file input must accept .json files");
 });
 
-test("#524: Import wires the importToLibrary door (base-relative), reading the file text client-side", () => {
-  const importUrl = defaultUrl("importUrl");
+test("#524: Import wires the importToLibrary door (module-anchored relative), reading the file text client-side", () => {
+  const importSpec = defaultSpec("importUrl");
+  assert(
+    importSpec.endsWith("actions/delivery-graph/library/import"),
+    `importUrl default spec "${importSpec}" must hit the importToLibrary door`,
+  );
+  assert(!importSpec.startsWith("/"), `default importUrl spec "${importSpec}" must be relative, not absolute (App-View #279 + #467/#536 resolution class)`);
+  // Pin the MODULE-anchored invariant, not merely "not absolute": the spec must step UP out of the
+  // /delivery-graphs/ shell base with "../" (resolved against import.meta.url), so a regression back to a
+  // document-base-relative "app/api/…" — which 404s under the shell base (#467/#536) — fails the guard.
   assert(
-    importUrl.endsWith("actions/delivery-graph/library/import"),
-    `importUrl default "${importUrl}" must hit the importToLibrary door`,
+    importSpec.startsWith("../"),
+    `default importUrl spec "${importSpec}" must be module-anchored with a "../" prefix (steps out of the ` +
+      `/delivery-graphs/ shell base off import.meta.url), not document-base-relative (#467/#536)`,
   );
-  assert(!importUrl.startsWith("/"), `default importUrl "${importUrl}" must be base-relative (App-View #279 resolution class)`);
   // The file's text is read CLIENT-SIDE and POSTed as graphJson to the import door.
   assert(/\.text\(\)/.test(MOUNT_JS), "mount.js must read the selected file's text client-side via File.text()");
   assert(/post\(importUrl,\s*\{\s*graphJson:/.test(MOUNT_JS), "the Import handler must POST the file text as graphJson to the import door");

package/test/delivery-graphs-library-embed.test.ts

@@ -6,8 +6,8 @@
 // compose mount's NEW inbound fill seam over the shared `deliveryGraph.compose.fill` host-bridge
 // message. Plus a Save-to-library affordance on the staged App-View (save-from-digest) and a
 // Save-to-library row action on the dispatched/history grid. This test pins that wiring so it cannot
-// silently regress: the sidecars mount the same module, the door defaults are base-relative (the #279
-// App-View resolution class), Reuse posts the ONE shared fill message, Delete hits the per-entry door,
+// silently regress: the sidecars mount the same module, the door defaults are module-anchored off
+// import.meta.url (the #279/#467/#536 App-View resolution class), Reuse posts the ONE shared fill message, Delete hits the per-entry door,
 // the compose mount adds the inbound fill listener, and the page carries the new Library App-View node.
 import { test } from "node:test";
 import { assert, assertEquals, assertStringIncludes } from "#test-assert";
@@ -23,15 +23,21 @@ const EMBED_HTML = readFileSync(`${DIR}/library-embed.html`, "utf8");
 const STANDALONE_HTML = readFileSync(`${DIR}/library-standalone.html`, "utf8");
 const PAGE_JSON = readFileSync(`${ROOT}pages/delivery-graphs.page.json`, "utf8");
 
-// Pull the string default out of `const <name> = config.<field> ?? <CONST>;` (or a module const).
-function defaultUrl(src: string, name: string): string {
+// Pull a MODULE-ANCHORED default spec out of `const <name> = config.<field> ?? <CONST>;` where the
+// CONST is declared `const <CONST> = new URL("<spec>", import.meta.url).href;` (#467/#536).
+function defaultSpec(src: string, name: string): string {
   const m = src.match(new RegExp(`${name}\\s*=\\s*config\\.\\w+\\s*\\?\\?\\s*(\\w+);`));
   assert(m, `mount must default ${name} from config with a fallback constant`);
-  const constM = src.match(new RegExp(`const ${m![1]}\\s*=\\s*"([^"]*)"`));
-  assert(constM, `mount must declare the ${m![1]} fallback as a string literal`);
+  const constM = src.match(
+    new RegExp(`const ${m![1]}\\s*=\\s*new URL\\(\\s*"([^"]*)"\\s*,\\s*import\\.meta\\.url\\s*\\)\\s*\\.href`),
+  );
+  assert(
+    constM,
+    `mount must default ${m![1]} to new URL("<spec>", import.meta.url) so the door is anchored to the ` +
+      `module's own served location, not the document base (#467/#536)`,
+  );
   return constM![1];
 }
-
 test("#523: the Library App-View mounts the same module standalone and embedded", () => {
   assert(/mountDeliveryGraphLibrary/.test(LIBRARY_JS), "library.mount.js must export mountDeliveryGraphLibrary");
   for (const [file, html] of [["library-embed.html", EMBED_HTML], ["library-standalone.html", STANDALONE_HTML]] as const) {
@@ -52,10 +58,11 @@ test("#523: the page binds the Library node to the library App-View sidecars", (
   assert(library?.props?.standalone === "./delivery-graphs/library-standalone.html", "it has the library standalone sidecar");
 });
 
-test("#523/#279: the Library list door default is base-relative and hits the listLibrary door", () => {
-  const url = defaultUrl(LIBRARY_JS, "libraryUrl");
-  assert(url.endsWith("delivery-graph/library"), `libraryUrl default "${url}" must hit the listLibrary door`);
-  assert(!url.startsWith("/"), `default libraryUrl "${url}" must be base-relative (App-View #279 resolution class)`);
+test("#523/#467/#536: the Library list door default is module-anchored and hits the listLibrary door", () => {
+  const spec = defaultSpec(LIBRARY_JS, "libraryUrl");
+  assert(spec.endsWith("delivery-graph/library"), `libraryUrl default "${spec}" must hit the listLibrary door`);
+  assert(!spec.startsWith("/"), `default libraryUrl "${spec}" must not be absolute (App-View #279 resolution class)`);
+  assert(spec.startsWith("../"), `default libraryUrl "${spec}" must step up out of /delivery-graphs/ (module-anchored, #467/#536)`);
   // The list read consumes the door's `entries` array (one row per saved entry).
   assert(/body\.entries/.test(LIBRARY_JS), "library.mount.js must render one row per `entries[]` item the listLibrary door returns");
 });
@@ -98,15 +105,38 @@ test("#523: the compose mount exposes an INBOUND reuse-fill seam (message → #d
 });
 
 test("#523: Save-to-library on the staged App-View posts save-from-digest", () => {
-  const url = defaultUrl(STAGED_JS, "saveLibraryUrl");
-  assert(url.endsWith("actions/delivery-graph/library/save"), `saveLibraryUrl default "${url}" must hit the saveToLibrary door`);
-  assert(!url.startsWith("/"), `default saveLibraryUrl "${url}" must be base-relative (App-View #279 resolution class)`);
+  const spec = defaultSpec(STAGED_JS, "saveLibraryUrl");
+  assert(spec.endsWith("actions/delivery-graph/library/save"), `saveLibraryUrl default "${spec}" must hit the saveToLibrary door`);
+  assert(!spec.startsWith("/"), `default saveLibraryUrl "${spec}" must not be absolute (App-View #279 resolution class)`);
+  assert(spec.startsWith("../"), `default saveLibraryUrl "${spec}" must step up out of /delivery-graphs/ (module-anchored, #467/#536)`);
   assert(/data-save-library=/.test(STAGED_JS), "staged.mount.js must render a per-row Save-to-library affordance carrying the digest");
   // Save-from-digest: it posts { name, digest } — it must NOT compile or stage a raw graph (the #460
   // operator boundary the staged view enforces stays intact).
   assert(/post\(saveLibraryUrl,\s*\{\s*name:[^}]*digest:/.test(STAGED_JS), "Save-to-library must POST { name, digest } (save-from-digest) to the save door");
 });
 
+test("#538: the in-flight grid's column widths never over-allocate (no 0-width column, no header char-wrap)", () => {
+  // Regression guard: the grid is `table-layout:fixed` with `overflow-wrap:anywhere` headers, so a
+  // column squeezed to 0 width wraps its title one character per line (a ~250px-tall header row). That
+  // happens when the declared widths over-allocate. Pin the contract: every data column carries a
+  // percentage width, and their sum leaves headroom (>=5%) for the implicit row-action column — so no
+  // column can collapse to 0.
+  const page = JSON.parse(PAGE_JSON) as { nodes: Array<Record<string, any>> };
+  const grid = page.nodes.find((n) => n.id === "delivery-graphs-inflight");
+  assert(grid, "the page must carry the delivery-graphs-inflight grid");
+  const columns = (grid?.props?.columns ?? []) as Array<Record<string, any>>;
+  assert(columns.length > 0, "the grid must declare columns");
+  let sum = 0;
+  for (const col of columns) {
+    const w = col.width;
+    assert(typeof w === "string" && /^\d+(\.\d+)?%$/.test(w), `column "${col.header}" must declare a percentage width so it can't collapse to 0 (got ${JSON.stringify(w)})`);
+    const parsed = Number.parseFloat(w);
+    assert(parsed > 0, `column "${col.header}" must declare a positive width so it can't collapse to 0 (got ${JSON.stringify(w)})`);
+    sum += parsed;
+  }
+  assert(sum <= 95, `declared column widths sum to ${sum}% — they must leave >=5% for the row-action column so nothing squeezes to 0 (#538)`);
+});
+
 test("#523: Save-to-library is offered on a dispatched/history grid row (save-from-dispatched)", () => {
   const page = JSON.parse(PAGE_JSON) as { nodes: Array<Record<string, any>> };
   const grid = page.nodes.find((n) => n.id === "delivery-graphs-inflight");

package/test/delivery-graphs-staged-embed.test.ts

@@ -6,10 +6,21 @@
 // Dispatch button and NO way to see the graph. The staged App-View (pages/delivery-graphs/staged.*)
 // closes that: per row it offers Preview-DI (over the nano-navigate bridge) AND Dispatch. This test
 // pins the wiring so it cannot silently regress: the sidecars exist and mount the same module, the door
-// defaults are base-relative (the #279 App-View resolution class — a leading-slash path 404s through the
-// console iframe), it drives the DI-preview bridge, and it posts the dispatch by digest.
+// defaults are MODULE-ANCHORED (`new URL("../app/api/…", import.meta.url)`, the #467 App-View
+// resolution class — see below), it drives the DI-preview bridge, and it posts the dispatch by digest.
+//
+// #279/#467 resolution class: the staged shell (staged-embed.html / staged-standalone.html) — and thus
+// staged.mount.js — is served ONE DIRECTORY DEEP at `<appMount>/delivery-graphs/`, while the API lives
+// at the app root, a sibling of `/delivery-graphs/`: `<appMount>/app/api/…`. A leading-slash absolute
+// default resolves against the console iframe ORIGIN, not the app-view base (#279). A document-base-
+// relative default (`"app/api/…"`) resolves against the `…/delivery-graphs/` shell base to
+// `…/delivery-graphs/app/api/…` → 404 on EVERY surface (the Studio console never injects
+// window.__NANO_APP_VIEW__, so the default runs) — the "Could not load staged proposals." bug (#536).
+// The only correct default is anchored to staged.mount.js's OWN url (import.meta.url): `../app/api/…`
+// steps up out of `/delivery-graphs/` onto `<appMount>/app/api/…` on all surfaces. This test pins that
+// resolution against the REAL, `/delivery-graphs/`-deep module url so neither regression can return.
 import { test } from "node:test";
-import { assert } from "#test-assert";
+import { assert, assertEquals } from "#test-assert";
 import { readFileSync } from "node:fs";
 
 const ROOT = decodeURIComponent(new URL("../", import.meta.url).pathname);
@@ -19,15 +30,55 @@ const EMBED_HTML = readFileSync(`${DIR}/staged-embed.html`, "utf8");
 const STANDALONE_HTML = readFileSync(`${DIR}/staged-standalone.html`, "utf8");
 const PAGE_JSON = readFileSync(`${ROOT}pages/delivery-graphs.page.json`, "utf8");
 
-// Pull the string default out of `const <name> = config.<field> ?? <CONST>;` (or a module const).
-function defaultUrl(name: string): string {
+// The REAL served location of staged.mount.js on each surface: one directory deep under
+// `/delivery-graphs/`.
+const STANDALONE_MOUNT = "http://127.0.0.1:3000/delivery-graphs/staged.mount.js";
+const STUDIO_MOUNT = "http://studio-host:8080/console/app-view/Workforce/delivery-graphs/staged.mount.js";
+
+// Pull the module-anchored default spec out of `const <name> = config.<field> ?? <CONST>;` where the
+// CONST is declared `const <CONST> = new URL("<spec>", import.meta.url).href;`.
+function defaultSpec(name: string): string {
   const m = MOUNT_JS.match(new RegExp(`${name}\\s*=\\s*config\\.\\w+\\s*\\?\\?\\s*(\\w+);`));
   assert(m, `staged.mount.js must default ${name} from config with a fallback constant`);
-  const constM = MOUNT_JS.match(new RegExp(`const ${m![1]}\\s*=\\s*"([^"]*)"`));
-  assert(constM, `staged.mount.js must declare the ${m![1]} fallback as a string literal`);
+  const constM = MOUNT_JS.match(
+    new RegExp(`const ${m![1]}\\s*=\\s*new URL\\(\\s*"([^"]*)"\\s*,\\s*import\\.meta\\.url\\s*\\)\\s*\\.href`),
+  );
+  assert(
+    constM,
+    `staged.mount.js must default ${m![1]} to new URL("<spec>", import.meta.url) so the door is anchored ` +
+      `to the module's own served location, not the document base (#467/#536)`,
+  );
   return constM![1];
 }
 
+// A module-anchored door default must (a) not be absolute (#279), (b) step up out of /delivery-graphs/
+// (#467), and (c) resolve onto <appMount>/app/api/… both standalone AND inside the Studio iframe.
+function assertModuleAnchored(name: string, endpoint: string): void {
+  const spec = defaultSpec(name);
+  assert(
+    !spec.startsWith("/"),
+    `default ${name} spec "${spec}" must not be absolute: a leading-slash path resolves against the ` +
+      `iframe ORIGIN (console :8080), not the app-view base, so every fetch 404s (#279)`,
+  );
+  assert(
+    spec.startsWith("../"),
+    `default ${name} spec "${spec}" must step up out of /delivery-graphs/ (import.meta.url points at ` +
+      `<appMount>/delivery-graphs/staged.mount.js; the API is a sibling at <appMount>/app/api/…) (#467)`,
+  );
+  assert(spec.endsWith(endpoint), `default ${name} spec "${spec}" must hit the ${endpoint} door`);
+  assertEquals(
+    new URL(spec, STANDALONE_MOUNT).href,
+    `http://127.0.0.1:3000/${endpoint}`,
+    `default ${name} must resolve to the app root, not the /delivery-graphs/ shell base (#467)`,
+  );
+  assertEquals(
+    new URL(spec, STUDIO_MOUNT).href,
+    `http://studio-host:8080/console/app-view/Workforce/${endpoint}`,
+    `default ${name} must resolve under the app-view base the console proxies, not the console origin ` +
+      `root (#279) nor the /delivery-graphs/ shell base (#467/#536)`,
+  );
+}
+
 test("#511: the staged App-View mounts the same module standalone and embedded", () => {
   assert(/mountStagedProposals/.test(MOUNT_JS), "staged.mount.js must export mountStagedProposals");
   for (const [file, html] of [["staged-embed.html", EMBED_HTML], ["staged-standalone.html", STANDALONE_HTML]] as const) {
@@ -48,25 +99,19 @@ test("#511: the page binds the Staged proposals node to the staged App-View side
   assert(staged?.props?.standalone === "./delivery-graphs/staged-standalone.html", "it has the staged standalone sidecar");
 });
 
-test("#511/#279: the staged list door default is base-relative", () => {
-  const url = defaultUrl("stagedUrl");
-  assert(url.endsWith("delivery-graph/staged"), `stagedUrl default "${url}" must hit the listStagedProposals door`);
-  assert(!url.startsWith("/"), `default stagedUrl "${url}" must be base-relative (App-View #279 resolution class)`);
+test("#511/#279/#467: the staged list door default is module-anchored to the app root", () => {
+  assertModuleAnchored("stagedUrl", "app/api/delivery-graph/staged");
 });
 
 test("#511: DI preview — the staged view wires the proposal-bpmn door and bridges the XML to the explorer", () => {
-  const url = defaultUrl("proposalBpmnUrl");
-  assert(url.endsWith("actions/delivery-graph/proposal-bpmn"), `proposalBpmnUrl default "${url}" must hit the previewProposalBpmn door`);
-  assert(!url.startsWith("/"), `default proposalBpmnUrl "${url}" must be base-relative`);
+  assertModuleAnchored("proposalBpmnUrl", "app/api/actions/delivery-graph/proposal-bpmn");
   assert(/data-preview-di=/.test(MOUNT_JS), "staged.mount.js must render a per-row Preview-DI affordance carrying the digest");
   assert(/target:\s*"definitionPreview"/.test(MOUNT_JS), "staged.mount.js must post nano-navigate to the definitionPreview target");
   assert(/params:\s*\{\s*xml:/.test(MOUNT_JS), "staged.mount.js must carry the compiled BPMN xml in the bridge message");
 });
 
 test("#460/#511: Dispatch is the operator's launch — posts the digest to the dispatch door, and never compiles/stages", () => {
-  const url = defaultUrl("dispatchUrl");
-  assert(url.endsWith("actions/delivery-graph/dispatch"), `dispatchUrl default "${url}" must hit the dispatchDeliveryGraph door`);
-  assert(!url.startsWith("/"), `default dispatchUrl "${url}" must be base-relative`);
+  assertModuleAnchored("dispatchUrl", "app/api/actions/delivery-graph/dispatch");
   assert(/data-dispatch=/.test(MOUNT_JS), "staged.mount.js must render a per-row Dispatch affordance carrying the digest");
   assert(/window\.confirm\(/.test(MOUNT_JS), "Dispatch must confirm before launching (dispatch authorises side effects)");
   // Operator-only: this surface dispatches a digest that is ALREADY staged — it must not compile or
@@ -77,9 +122,7 @@ test("#460/#511: Dispatch is the operator's launch — posts the digest to the d
 });
 
 test("#520: Dismiss is the operator's discard — posts the digest to the dismiss door, behind a confirm, and launches nothing", () => {
-  const url = defaultUrl("dismissUrl");
-  assert(url.endsWith("actions/delivery-graph/dismiss"), `dismissUrl default "${url}" must hit the dismissProposal door`);
-  assert(!url.startsWith("/"), `default dismissUrl "${url}" must be base-relative (App-View #279 resolution class)`);
+  assertModuleAnchored("dismissUrl", "app/api/actions/delivery-graph/dismiss");
   assert(/data-dismiss=/.test(MOUNT_JS), "staged.mount.js must render a per-row Dismiss affordance carrying the digest");
   // Dismiss is a one-way discard off the staged list — confirm before it drops the proposal.
   assert(/window\.confirm\(DISMISS_CONFIRM\)/.test(MOUNT_JS), "staged.mount.js must confirm before dismissing (a one-way discard off the staged list)");