agent-canvas 0.1.43 → 0.1.45

package/daemon/dist/runtime.js

@@ -1 +1 @@
-import{createContext as q,useContext as B,useEffect as J}from"react";import{createContext as H}from"react";var I=H("");var K=q(null);function L(){return B(K)}function R(h,z,j){let{setFeedbackEntry:D,removeFeedbackEntry:G}=L();J(()=>{return D(h,{id:h,markdown:z,label:j?.label,required:j?.required}),()=>G(h)},[h,z,j?.label,j?.required])}var M=q("");function S(){return B(M)}var T=q({setActiveView:()=>{}});export{R as useFeedback,S as useCanvasFile,L as useAnnotations,I as SessionContext,M as CanvasFileCtx,K as AnnotationCtx,T as ActiveViewCtx};
+import{createContext as z,useContext as B,useEffect as D}from"react";import{createContext as J}from"react";var K=J("");var L=z(null);function G(){return B(L)}function S(h){let{registerResponse:j}=G();D(()=>{j(h)},[h,j])}function T(h,j,q){let{setFeedbackEntry:H,removeFeedbackEntry:I}=G();D(()=>{return H(h,{id:h,markdown:j,label:q?.label,required:q?.required}),()=>I(h)},[h,j,q?.label,q?.required])}var M=z("");function U(){return B(M)}var W=z({setActiveView:()=>{}});export{S as useResponseRegistration,T as useFeedback,U as useCanvasFile,G as useAnnotations,K as SessionContext,M as CanvasFileCtx,L as AnnotationCtx,W as ActiveViewCtx};

package/daemon/src/components.ts

@@ -0,0 +1,13 @@
+/**
+ * Components agent-canvas adds on top of the kernel's set.
+ *
+ * Keep in sync with `daemon/client/components/index.ts` — the compiler injects
+ * these names into authored JSX, and the browser resolves them from that barrel
+ * through `#canvas/components`. A name here with no matching export renders as
+ * undefined.
+ */
+import type { CanvasComponents } from "@fabrika/canvas-kernel/server";
+
+export const HOST_COMPONENTS: CanvasComponents = {
+  SecretInput: { requiredProps: { id: "string", label: "string", env: "string" } },
+};

package/daemon/src/handlers/api.ts

@@ -1,10 +1,14 @@
 import { readFileSync, readdirSync, existsSync } from "fs";
-import type { SessionManager } from "../session";
-import { compilePlan } from "../compiler";
-import { watchSession } from "../watcher";
-import { jsonResponse } from "./utils";
+import {
+  compileJsx,
+  jsonResponse,
+  watchSession,
+  type Route,
+  type SessionManager,
+} from "@fabrika/canvas-kernel/server";
 import { loadShareConfig, shareRevision, revokeShare } from "../share";
-import type { Route } from "../router";
+import { COMPILE_TEMP_DIR } from "../paths";
+import { HOST_COMPONENTS } from "../components";
 
 const SECRET_FIELD_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 const MAX_SECRET_BYTES = 64 * 1024;
@@ -83,7 +87,7 @@ export function createApiHandlers(ctx: ApiContext): Route[] {
       const errors: Record<string, string> = {};
       await Promise.all(
         [...canvasFiles.entries()].map(async ([filename, jsx]) => {
-          const result = await compilePlan(jsx, projectRoot);
+          const result = await compileJsx(jsx, { projectRoot, tempDir: COMPILE_TEMP_DIR, components: HOST_COMPONENTS });
           if (result.ok) {
             compiled.set(filename, result.js);
           } else {
@@ -106,7 +110,7 @@ export function createApiHandlers(ctx: ApiContext): Route[] {
       }
 
       broadcastPlanUpdate(sessionId);
-      watchSession(sessionId, sessionManager, broadcastPlanUpdate);
+      watchSession(sessionId, sessionManager, broadcastPlanUpdate, { tempDir: COMPILE_TEMP_DIR, components: HOST_COMPONENTS });
 
       const browserUrl = `http://localhost:${port}/s/${sessionId}`;
       return jsonResponse({
@@ -136,7 +140,7 @@ export function createApiHandlers(ctx: ApiContext): Route[] {
       if (session) {
         const jsx = sessionManager.readRevisionJsx(sessionId, rev, jsxFilename);
         if (jsx) {
-          const result = await compilePlan(jsx, session.projectRoot);
+          const result = await compileJsx(jsx, { projectRoot: session.projectRoot, tempDir: COMPILE_TEMP_DIR, components: HOST_COMPONENTS });
           if (result.ok) {
             sessionManager.saveCompiled(sessionId, jsxFilename, result.js, rev);
             compiled = result.js;
@@ -160,7 +164,8 @@ export function createApiHandlers(ctx: ApiContext): Route[] {
 
   function handleHealth(): Response {
     const sessions = sessionManager.list().map((s) => s.id);
-    return jsonResponse({ ok: true, sessions, version: ctx.version });
+    // The pid is what the CLI signals to stop us — a pid file it cannot corroborate is not.
+    return jsonResponse({ ok: true, sessions, version: ctx.version, pid: process.pid });
   }
 
   function handleMeta(_req: Request, _url: URL, match: URLPatternResult): Response {

package/daemon/src/handlers/files.ts

@@ -1,9 +1,7 @@
 import { join, resolve } from "path";
 import { readdir } from "fs/promises";
-import type { SessionManager } from "../session";
+import { jsonResponse, type Route, type SessionManager } from "@fabrika/canvas-kernel/server";
 import { LANG_MAP } from "../../langMap";
-import { jsonResponse } from "./utils";
-import type { Route } from "../router";
 
 const IMAGE_MIME: Record<string, string> = {
   png: "image/png", jpg: "image/jpeg", jpeg: "image/jpeg",

package/daemon/src/handlers/static.ts

@@ -1,6 +1,6 @@
 import { join, dirname } from "path";
 import { DATA_DIR } from "../paths";
-import type { Route } from "../router";
+import type { Route } from "@fabrika/canvas-kernel/server";
 
 const MIME_TYPES: Record<string, string> = {
   js: "application/javascript",

package/daemon/src/handlers/uploads.ts

@@ -1,9 +1,7 @@
 import { writeFileSync } from "fs";
 import { join } from "path";
+import { jsonResponse, type Route, type SessionManager } from "@fabrika/canvas-kernel/server";
 import { UPLOADS_DIR } from "../paths";
-import type { SessionManager } from "../session";
-import { jsonResponse } from "./utils";
-import type { Route } from "../router";
 
 const IMAGE_MIME: Record<string, string> = {
   png: "image/png", jpg: "image/jpeg", jpeg: "image/jpeg",

package/daemon/src/paths.ts

@@ -1,29 +1,15 @@
 import { join } from "path";
-import { homedir, tmpdir } from "os";
-import { mkdirSync } from "fs";
+import { createCanvasPaths } from "@fabrika/canvas-kernel/server";
 
-/** Persistent data — survives reboots */
-export const DATA_DIR = join(homedir(), ".claude", "agent-canvas");
+/** agent-canvas's on-disk layout. Kept in sync with bin/lib/config.ts. */
+export const paths = createCanvasPaths({ appName: "agent-canvas" });
 
-/** Session storage */
-export const SESSIONS_DIR = join(DATA_DIR, "sessions");
-
-/** Ephemeral — can be lost on reboot */
-export const TEMP_DIR = join(tmpdir(), "agent-canvas");
-
-/** PID file for daemon process */
-export const PID_FILE = join(TEMP_DIR, "daemon.pid");
+export const DATA_DIR = paths.dataDir;
+export const SESSIONS_DIR = paths.sessionsDir;
+export const TEMP_DIR = paths.tempDir;
+export const PID_FILE = paths.pidFile;
+export const COMPILE_TEMP_DIR = paths.compileTempDir;
+export const UPLOADS_DIR = paths.uploadsDir;
 
 /** Capability used only by the CLI to resolve secret values */
-export const CLI_AUTH_FILE = join(TEMP_DIR, "daemon-auth-token");
-
-/** Temp dir for JSX compilation */
-export const COMPILE_TEMP_DIR = join(TEMP_DIR, "compile");
-
-/** Uploaded annotation images */
-export const UPLOADS_DIR = join(TEMP_DIR, "uploads");
-
-// Ensure dirs exist
-mkdirSync(SESSIONS_DIR, { recursive: true });
-mkdirSync(COMPILE_TEMP_DIR, { recursive: true });
-mkdirSync(UPLOADS_DIR, { recursive: true });
+export const CLI_AUTH_FILE = join(paths.tempDir, "daemon-auth-token");

package/daemon/src/remote-feedback.test.ts

@@ -8,7 +8,7 @@ import { describe, expect, test, afterEach, beforeEach } from "bun:test";
 import { mkdtempSync, rmSync } from "fs";
 import { join } from "path";
 import { tmpdir } from "os";
-import { SessionManager } from "./session";
+import { SessionManager } from "@fabrika/canvas-kernel/server";
 import { startRemoteFeedbackPoller } from "./remote-feedback";
 
 let testDir: string;

package/daemon/src/remote-feedback.ts

@@ -1,4 +1,4 @@
-import type { SessionManager, RemoteFeedbackEntry, RemoteAnnotation } from "./session";
+import type { SessionManager, RemoteFeedbackEntry, RemoteAnnotation } from "@fabrika/canvas-kernel/server";
 import { loadShareConfig } from "./share";
 import { importShareKey, decryptString } from "../client/shareCrypto";
 

package/daemon/src/secrets-api.test.ts

@@ -3,8 +3,7 @@ import { mkdtempSync, rmSync } from "fs";
 import { tmpdir } from "os";
 import { join } from "path";
 import { createApiHandlers } from "./handlers/api";
-import { dispatch, type Route } from "./router";
-import { SessionManager } from "./session";
+import { dispatch, SessionManager, type Route } from "@fabrika/canvas-kernel/server";
 
 const testDirectories: string[] = [];
 

package/daemon/src/server.ts

@@ -2,30 +2,33 @@ import { writeFileSync, mkdirSync, readFileSync, chmodSync } from "fs";
 import { join, dirname } from "path";
 import { tmpdir } from "os";
 import { randomBytes } from "crypto";
-import { SessionManager } from "./session";
-import { createWebSocketManager, type WSData } from "./websocket";
-import { dispatch } from "./router";
-import { jsonResponse, corsHeaders } from "./handlers/utils";
+import {
+  corsHeaders,
+  createWebSocketManager,
+  dispatch,
+  jsonResponse,
+  SessionManager,
+  type WSData,
+} from "@fabrika/canvas-kernel/server";
 import { createApiHandlers } from "./handlers/api";
 import { createFileHandlers } from "./handlers/files";
 import { createStaticHandlers } from "./handlers/static";
 import { createUploadHandlers } from "./handlers/uploads";
 import { startRemoteFeedbackPoller } from "./remote-feedback";
-import { CLI_AUTH_FILE } from "./paths";
+import { CLI_AUTH_FILE, PID_FILE, SESSIONS_DIR, TEMP_DIR } from "./paths";
 
 const PORT = parseInt(process.env.CANVAS_PORT || "19400", 10);
 const VERSION = JSON.parse(readFileSync(join(dirname(import.meta.dir), "..", "package.json"), "utf-8")).version as string;
 
 // Write PID file so CLI can find and stop us
-const pidDir = join(tmpdir(), "agent-canvas");
-mkdirSync(pidDir, { recursive: true, mode: 0o700 });
-chmodSync(pidDir, 0o700);
-writeFileSync(join(pidDir, "daemon.pid"), String(process.pid));
+mkdirSync(TEMP_DIR, { recursive: true, mode: 0o700 });
+chmodSync(TEMP_DIR, 0o700);
+writeFileSync(PID_FILE, String(process.pid));
 const cliAuthToken = randomBytes(32).toString("base64url");
 writeFileSync(CLI_AUTH_FILE, cliAuthToken, { mode: 0o600 });
 chmodSync(CLI_AUTH_FILE, 0o600);
 
-const sessionManager = new SessionManager();
+const sessionManager = new SessionManager(SESSIONS_DIR);
 const wsManager = createWebSocketManager(sessionManager);
 
 const routes = [

package/daemon/src/share-e2e.test.ts

@@ -16,7 +16,7 @@ import { tmpdir } from "os";
 
 import workerHandler from "../../workers/canvas-share/src/index";
 import type { Env } from "../../workers/canvas-share/src/types";
-import { SessionManager } from "./session";
+import { SessionManager } from "@fabrika/canvas-kernel/server";
 import { buildSharePayload, encryptSharePayload } from "./share";
 import {
   generateShareKey,

package/daemon/src/share.test.ts

@@ -8,7 +8,7 @@ import { describe, expect, test, beforeEach, afterEach } from "bun:test";
 import { mkdtempSync, rmSync, mkdirSync, writeFileSync } from "fs";
 import { join } from "path";
 import { tmpdir } from "os";
-import { SessionManager } from "./session";
+import { SessionManager } from "@fabrika/canvas-kernel/server";
 import { buildSharePayload, pushShareToWorker, shareRevision, loadShareConfig, encryptSharePayload } from "./share";
 import { generateShareKey, importShareKey, decryptString } from "../client/shareCrypto";
 

package/daemon/src/share.ts

@@ -1,4 +1,4 @@
-import type { SessionManager, ShareEntry } from "./session";
+import type { SessionManager, ShareEntry } from "@fabrika/canvas-kernel/server";
 import {
   generateShareKey,
   exportShareKey,

package/daemon/tsconfig.json

@@ -8,16 +8,14 @@
     "esModuleInterop": true,
     "skipLibCheck": true,
     "noEmit": true,
-    "rootDir": ".",
     "types": ["@types/bun"],
     "paths": {
-      "#canvas/runtime": ["./client/runtime.ts"],
+      "#canvas/runtime": ["../packages/canvas-kernel/src/client/runtime.ts"],
       "#canvas/components": ["./client/components/index.ts"]
     }
   },
   "include": ["src/**/*", "client/**/*"],
   "exclude": [
-    "client/compat/**/*",
     "src/share-e2e.test.ts"
   ]
 }

package/package.json

@@ -1,17 +1,24 @@
 {
   "name": "agent-canvas",
-  "version": "0.1.43",
+  "version": "0.1.45",
   "description": "Interactive visual canvas for Claude Code — rich annotatable documents in the browser",
   "bin": {
     "agent-canvas": "bin/agent-canvas.js"
   },
+  "files": [
+    "bin",
+    "daemon",
+    "skills"
+  ],
   "scripts": {
     "build": "bun daemon/build.ts",
-    "typecheck": "tsc --noEmit && tsc --noEmit -p daemon/tsconfig.json",
+    "check:versions": "bun scripts/check-release-versions.ts",
+    "typecheck": "tsc --noEmit && tsc --noEmit -p packages/canvas-kernel/tsconfig.json && tsc --noEmit -p daemon/tsconfig.json",
     "test": "bun test",
     "prepublishOnly": "bun daemon/build.ts"
   },
   "dependencies": {
+    "@fabrika/canvas-kernel": "0.1.45",
     "marked": "^17.0.4",
     "mermaid-parser-bundle": "^0.1.2",
     "preact": "^10.25.0",
@@ -30,6 +37,7 @@
     "url": "https://github.com/contember/agent-canvas"
   },
   "workspaces": [
+    "packages/*",
     "workers/*"
   ],
   "license": "MIT",

package/.github/workflows/ci.yml

@@ -1,48 +0,0 @@
-name: CI
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-
-jobs:
-  typecheck:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: oven-sh/setup-bun@v2
-
-      - name: Install dependencies
-        run: bun install --frozen-lockfile
-
-      - name: Typecheck
-        run: bun run typecheck
-
-      - name: Test
-        run: bun test
-
-      - name: Build
-        run: bun run build
-
-  worker:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: oven-sh/setup-bun@v2
-
-      - name: Install dependencies
-        run: bun install --frozen-lockfile
-
-      - name: Typecheck
-        working-directory: workers/canvas-share
-        run: bun run typecheck
-
-      - name: Test
-        working-directory: workers/canvas-share
-        run: bun test
-
-      - name: Generate wrangler config (local env)
-        working-directory: workers/canvas-share
-        run: bun run oblaka

package/.github/workflows/deploy-worker-prod.yml

@@ -1,19 +0,0 @@
-name: Deploy worker to prod
-
-on:
-  # Triggered by version tags so the worker deploys alongside the npm
-  # release. This keeps the runtime bundles served by the worker in
-  # lockstep with the @agent-canvas package version users install.
-  push:
-    tags:
-      - "v*"
-  workflow_dispatch:
-
-jobs:
-  deploy:
-    uses: ./.github/workflows/deploy-worker.yml
-    with:
-      env: prod
-    # inherit so the reusable workflow can resolve secrets; the env-scoped
-    # values (set on the `prod` environment) win over repo-level ones.
-    secrets: inherit

package/.github/workflows/deploy-worker-stage.yml

@@ -1,21 +0,0 @@
-name: Deploy worker to stage
-
-on:
-  push:
-    branches: [main]
-    paths:
-      - "workers/canvas-share/**"
-      - "daemon/client/**"
-      - "daemon/build.ts"
-      - ".github/workflows/deploy-worker.yml"
-      - ".github/workflows/deploy-worker-stage.yml"
-  workflow_dispatch:
-
-jobs:
-  deploy:
-    uses: ./.github/workflows/deploy-worker.yml
-    with:
-      env: stage
-    # inherit so the reusable workflow can resolve secrets; the env-scoped
-    # values (set on the `stage` environment) win over repo-level ones.
-    secrets: inherit

package/.github/workflows/deploy-worker.yml

@@ -1,72 +0,0 @@
-name: Reusable Worker Deploy
-
-on:
-  workflow_call:
-    inputs:
-      env:
-        description: "Target environment (stage or prod)"
-        required: true
-        type: string
-    # No `secrets:` inputs on purpose. The deploy job below declares
-    # `environment: ${{ inputs.env }}`, so referencing `secrets.X` directly
-    # resolves the matching *environment* secret (falling back to a
-    # repo-level secret of the same name). Callers pass `secrets: inherit`
-    # so org/repo secrets remain reachable too. This is what makes the
-    # CLOUDFLARE_* / SHARE_AUTH_TOKEN values environment-scoped — a prod
-    # token can never be read by a stage deploy and vice versa.
-
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    environment: ${{ inputs.env }}
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: oven-sh/setup-bun@v2
-
-      - name: Install dependencies
-        run: bun install --frozen-lockfile
-
-      # Build the daemon bundles first. The root build script auto-mirrors
-      # them into workers/canvas-share/public/assets/ so the worker's
-      # `[assets]` binding always ships the exact runtime that was pushed
-      # to npm for this version — no risk of drift between the client code
-      # inside a share payload and the runtime bundles served by the worker.
-      - name: Build runtime bundles
-        run: bun run build
-
-      # Ask oblaka to create/update the Cloudflare resources (R2 bucket,
-      # KV namespace) for this environment and emit a fresh wrangler.jsonc
-      # pointed at them. `--remote` is what triggers the actual CF API
-      # calls; without it oblaka just regenerates the config file locally.
-      - name: Provision Cloudflare resources
-        working-directory: workers/canvas-share
-        env:
-          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
-          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
-        run: bunx oblaka oblaka.ts --env ${{ inputs.env }} --remote --state-namespace agent-state-kv
-
-      # Push the bearer token as a Worker secret if it was provided. Using
-      # `secret bulk` lets us set multiple secrets in one API call and
-      # keeps the value out of the generated wrangler.jsonc. Skipped
-      # silently when no token is configured (dev envs).
-      - name: Set worker secrets
-        working-directory: workers/canvas-share
-        env:
-          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
-          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
-          SHARE_AUTH_TOKEN: ${{ secrets.SHARE_AUTH_TOKEN }}
-        run: |
-          if [ -z "$SHARE_AUTH_TOKEN" ]; then
-            echo "SHARE_AUTH_TOKEN not set — worker will run in open-share mode"
-            exit 0
-          fi
-          printf '{"SHARE_AUTH_TOKEN":"%s"}\n' "$SHARE_AUTH_TOKEN" \
-            | bunx wrangler secret bulk
-
-      - name: Deploy worker
-        working-directory: workers/canvas-share
-        env:
-          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
-          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
-        run: bunx wrangler deploy

package/.github/workflows/release.yml

@@ -1,36 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-      - "v*"
-
-permissions: {}
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: oven-sh/setup-bun@v2
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "24.x"
-          registry-url: "https://registry.npmjs.org"
-
-      - name: Install dependencies
-        run: bun install --frozen-lockfile
-
-      - name: Typecheck
-        run: bun run typecheck
-
-      - name: Build
-        run: bun run build
-
-      - name: Publish to npm
-        run: npm publish --provenance --access public

package/CLAUDE.md

@@ -1,86 +0,0 @@
-# CLAUDE.md
-
-This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
-
-## Project
-
-Agent Canvas — an interactive browser-based visual canvas for Claude Code. Users author JSX documents that get compiled and rendered in the browser with annotation, feedback, and file browsing capabilities.
-
-## Architecture
-
-Three components communicate via HTTP and WebSocket:
-
-- **CLI** (`bin/agent-canvas.ts`) — pushes JSX canvases to the daemon, waits for user feedback, manages daemon lifecycle
-- **Daemon** (`daemon/src/server.ts`) — Bun HTTP+WS server on port 19400 (`CANVAS_PORT`). Compiles JSX, manages sessions, serves the browser UI
-- **Browser UI** (`daemon/client/`) — React 18 app loaded via CDN UMD with ESM import maps. Handles annotations, revision history, feedback collection, file browsing
-
-**Data flow:** CLI pushes JSX → daemon compiles via `Bun.build()` → browser loads compiled JS module → user annotates/responds → feedback sent back to CLI via WebSocket
-
-**Session model:** Each canvas push creates/updates a session identified by `CANVAS_SESSION_ID` (set by hook). Sessions are stored on disk at `~/.claude/agent-canvas/sessions/{id}/` with a revision system (`revisions/{rev}/plan.jsx`, `plan.compiled.js`, `feedback.md`).
-
-## Build
-
-```bash
-bun install
-bun run build              # builds client assets to daemon/dist/
-bun daemon/build.ts --watch  # watch mode with debounced rebuild
-```
-
-The build produces three bundles (runtime.js, components.js, client.js) plus Tailwind CSS. React is loaded from CDN, not bundled. Import maps route `#canvas/components` and `#canvas/runtime` to the local bundles.
-
-## Typecheck
-
-```bash
-bun run typecheck          # runs tsc --noEmit on both root (bin/) and daemon (client/ + src/)
-```
-
-Two separate tsconfig files: `tsconfig.json` (root, covers `bin/`) and `daemon/tsconfig.json` (covers `daemon/src/` and `daemon/client/`). CI runs typecheck on every push and PR.
-
-## Key Technical Details
-
-- **Runtime is Bun only** — no Node.js compatibility needed
-- **JSX compilation** uses temp files because `Bun.build()` doesn't support `stdin`. See `daemon/src/compiler.ts`
-- **Component imports are injected** by the compiler — authored JSX can use `Section`, `Task`, `CodeBlock`, etc. without imports
-- **Adding a new component:** create in `daemon/client/components/`, export from `index.ts`, add to `COMPONENT_IMPORTS` in `daemon/src/compiler.ts`, rebuild
-- **Bun's `spawn` throws synchronously** on missing executables — always check with `which` before spawning
-
-## Testing with Demo
-
-A demo JSX file lives at `example/plan.jsx` in the project root. To test UI changes:
-
-```bash
-# 1. Start daemon (if not running)
-bun bin/agent-canvas.ts daemon start
-
-# 2. Build client assets (use --watch for live reload)
-bun daemon/build.ts --watch
-
-# 3. Push the demo plan
-CANVAS_SESSION_ID=planner-demo bun bin/agent-canvas.ts push example/plan.jsx --label "Demo"
-
-# 4. Open in browser
-#    http://localhost:19400/s/planner-demo
-```
-
-The CLI blocks waiting for feedback after push — press Ctrl+C to exit without submitting. Each push creates a new revision visible in the browser's revision selector.
-
-## Publishing
-
-To release a new version:
-
-1. Bump the version in `package.json`
-2. Commit the change and create a git tag: `git tag v<version>`
-3. Push both the commit and the tag: `git push && git push origin v<version>`
-
-The CI pipeline handles `npm publish` automatically when a new version tag is pushed. Do not run `npm publish` manually.
-
-## Bundled Skill
-
-This package distributes a Claude Code skill in `skills/canvas/`. It teaches Claude Code how to use Agent Canvas — writing JSX canvases, pushing, waiting for feedback, iterating, and responding to user feedback. The skill is automatically available to users who install this package.
-
-## Environment Variables
-
-- `CANVAS_SESSION_ID` — current session (set by SessionStart hook)
-- `CANVAS_PROJECT_ROOT` — project directory for file serving
-- `CANVAS_PORT` — daemon port (default: 19400)
-- `CANVAS_TIMEOUT` — CLI feedback wait timeout (default: 1 hour)