pmx-canvas 0.3.0 → 0.3.1

package/CHANGELOG.md

@@ -3,6 +3,43 @@
 All notable changes to `pmx-canvas` are documented here. This project follows
 [Semantic Versioning](https://semver.org/).
 
+## [0.3.1] - 2026-07-07
+
+### Fixed
+
+- Documented the Ghost Cursor intent HTTP endpoints in `docs/http-api.md`: the
+  operation is chosen by method and path (POST signals, PATCH updates, DELETE
+  clears/settles/vetoes) — there is no `action` field over raw HTTP; that
+  discriminator exists only on the MCP `canvas_intent` composite.
+- `DELETE /api/canvas/ax/intent/:id?vetoed=true` now works: the query-string
+  form of `vetoed` is coerced to a boolean (literal `true`/`false` only; other
+  values are still rejected with 400).
+- `serve --daemon` lifecycle is now race- and orphan-free: the pid file is
+  created as a lock before the child spawns and records the pid immediately,
+  a failed startup kills the child instead of leaving it orphaned, and a
+  liveness check guards against recycled pids.
+- `serve --daemon` no longer reports "already running" when the port is held
+  by a daemon for a different workspace (or another application) — it refuses
+  with the owner's workspace named and a hint to pick another port.
+- `serve status` no longer deletes a concurrent `serve --daemon`'s in-progress
+  spawn lock, closing a race that could otherwise let two daemons start on the
+  same port.
+
+### Changed
+
+- The `/api/ext-app/*` endpoints are now served by the operation registry;
+  request and response wire shapes are unchanged.
+- The AX read endpoints (`ax/work`, `ax/approval`, `ax/review`,
+  `ax/elicitation`, `ax/mode`, `ax/command`, `ax/policy`,
+  `ax/host-capability`, `ax/context`, `ax/surface-snapshot`),
+  `pinned-context`, `code-graph`, `ax/activity`, `ax/interaction`, and
+  `PATCH /api/canvas/ax` are likewise registry-served with unchanged wire
+  shapes.
+- The theme, update, viewport, annotation, and webpage-refresh endpoints are
+  also registry-served now; wire shapes unchanged. One edge-case difference:
+  a malformed JSON body on the refresh endpoint returns 400 before the
+  missing-node 404 check (previously the 404 won).
+
 ## [0.3.0] - 2026-07-07
 
 ### Breaking
@@ -2641,6 +2678,7 @@ otherwise have to discover by trial and error.
 - Regression coverage for snapshot flat-`id` aliases on both MCP and
   HTTP surfaces, plus async / top-level-`await` WebView script bodies.
 
+[0.3.1]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.3.1
 [0.3.0]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.3.0
 [0.2.7]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.2.7
 [0.2.6]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.2.6