pmx-canvas 0.2.3 → 0.2.5

package/CHANGELOG.md

@@ -5,6 +5,66 @@ All notable changes to `pmx-canvas` are documented here. This project follows
 
 ## [Unreleased]
 
+## [0.2.5] - 2026-06-24
+
+### Fixed
+
+- **A vetoed-via-`update` intent now blocks its linked settle (report #C, 0.2.4).**
+  `canvas_intent { action: "update", vetoed: true }` dissolved the ghost visually but did not
+  record the veto, so a subsequently linked `canvas_node` settle still landed — only
+  `action: "clear"` was authoritative. `IntentRegistry.update` now treats `vetoed: true` as a veto
+  (poisons the intent id + emits the `ax-intent-clear` dissolve), so a later linked commit is
+  rejected with `Intent "<id>" was vetoed`, matching `clear { vetoed: true }`. Applies across
+  HTTP, MCP (`canvas_intent`), and the SDK (`updateIntent`); `vetoed` is now an advertised field
+  on the update op.
+- **Mitigated the WebKit ext-app black-tile paint race on board load (report Finding F, 0.2.4).**
+  A hosted ext-app (Excalidraw) node already on the board when a WebKit host panel loads (e.g. the
+  GitHub Copilot app's WKWebView) could come up as a black tile — a host paint race on the
+  doubly-nested iframe, healthy server-side, clean in Chrome / the Codex browser / on live-created
+  nodes. `ExtAppFrame` now forces one iframe remount on mount **only under a WebKit-only host**
+  (Safari/WKWebView; Blink — Chrome/Edge/Codex — and Gecko are a strict no-op), replicating the
+  deterministic expand+close recovery so present-at-load nodes repaint without manual interaction.
+  Expand-then-close or a normal browser remains the fallback; the durable fix is upstream in the
+  host panel.
+
+### Docs
+
+- **Corrected the `canvas_webview status` field names in the reference (report Finding D, 0.2.4).**
+  The status response is `{ supported, active, headlessOnly, url, backend, width, height,
+  dataStoreDir, startedAt, lastError }` — the viewport size is `width` / `height`, not
+  `viewportWidth` / `viewportHeight`.
+- **Added a WebKit ext-app black-tile host caveat to the skill** so agents don't misdiagnose a
+  healthy app session as a broken node (Finding F).
+
+## [0.2.4] - 2026-06-24
+
+### Fixed
+
+- **`canvas_ax_delivery` claim can surface the newest steering first (report #68).** The
+  delivery claim (`canvas_claim_ax_delivery` / `GET /api/canvas/ax/delivery/pending` / CLI
+  `ax delivery list`) defaults to oldest-first FIFO for ordered processing, but on a
+  long-lived board with stale undelivered steering an agent claiming with a small `limit`
+  could process old leftovers and miss the human's latest in-canvas action. A new `order`
+  parameter (`"oldest"` default, `"newest"`) lets an adapter claim newest-first so a fresh
+  browser-originated steer is never buried behind the backlog. Additive — the default FIFO
+  order, wire shape, and the compact `canvas://ax-context` newest-first lead block are all
+  unchanged.
+- **CLI `ax` commands honor `--source` (report #69).** `pmx-canvas ax focus … --source codex`
+  (and the other `ax` subcommands that record a source — `steer`, `event add`, `interaction`,
+  `work`, `approval`, `review`, `evidence`, `elicitation`, `mode`, `command`, `policy`) now
+  persist the given source instead of always recording `cli`, so an adapterless agent using
+  the CLI as a fallback transport attributes its actions correctly (keeping AX loop-safety
+  accurate). The flag defaults to `cli` when omitted — unchanged for existing usage.
+
+### Docs
+
+- **Ghost Cursor skill guidance: default-on, with concrete use/skip + settle scope.** The
+  bundled `pmx-canvas` skill now frames proactive `canvas_intent` signalling as the default
+  before meaningful spatial mutations, with explicit use-vs-skip lists and a one-ghost-per-
+  human-meaningful-move rule for batches. It also documents that linked settle is scoped to
+  node / edge / group mutations — `canvas_app` (diagram / mcp-app) and `canvas_webview`
+  reject an `intentId` (HTTP 400), so signal a ghost, then clear it and open without one.
+
 ## [0.2.3] - 2026-06-23
 
 ### Fixed
@@ -2388,6 +2448,8 @@ otherwise have to discover by trial and error.
 - Regression coverage for snapshot flat-`id` aliases on both MCP and
   HTTP surfaces, plus async / top-level-`await` WebView script bodies.
 
+[0.2.5]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.2.5
+[0.2.4]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.2.4
 [0.2.3]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.2.3
 [0.2.2]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.2.2
 [0.2.1]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.2.1