pmx-canvas 0.3.3 → 0.3.4

package/CHANGELOG.md

@@ -3,6 +3,51 @@
 All notable changes to `pmx-canvas` are documented here. This project follows
 [Semantic Versioning](https://semver.org/).
 
+## [0.3.4] - 2026-08-03
+
+### Added
+
+- A client component test harness (happy-dom + Testing Library) with the
+  first 20 render tests, plus dedicated suites for the semantic watch
+  reducer and the canvas schema (46 new tests). Test files are now
+  typechecked, and CI fails when total coverage drops below the recorded
+  floor.
+
+### Fixed
+
+- App tiles now show a spinner and a "Connecting to <app>..." overlay while an
+  app frame boots or recovers, instead of a dark tile body (0.3.3 report: the
+  transient black window during automatic recovery).
+- Composite tools now name the missing field when a required argument for the
+  chosen action is absent, instead of failing deep in the handler or silently
+  doing nothing.
+- A pending code-graph recompute timer no longer outlives its server across
+  start/stop cycles.
+
+### Changed
+
+- The sandboxed-surface AX bridge (the listener that validates and submits
+  iframe interactions) is now one shared implementation across html, app, and
+  viewer nodes, with the protocol tags defined in a single module. No behavior
+  change — this hardens a security boundary that was previously copy-pasted.
+- The CLI dispatches every canvas command through the operation registry's
+  HTTP invoker instead of hand-written request paths; success output is
+  unchanged. One failure-path improvement: a failed `pmx-canvas batch` now
+  prints the full result envelope (`ok:false`, `failedIndex`, partial
+  `results`, `refs`) on stdout and exits 1, instead of a bare stderr error.
+
+### Docs
+
+- WebView backend preflight: prefer webkit on macOS; the chrome backend can
+  show an "Allow remote debugging?" dialog that must be approved promptly, and
+  `PMX_CANVAS_WEBVIEW_TIMEOUT_MS` can be raised for slow starts.
+- Skill evals: the two file-node eval prompts now reference the bundled
+  fixture paths, so a literal eval run works in any workspace.
+- Web-artifact builds are documented as POSIX-only (the build pipeline runs
+  bash scripts); already-built artifacts render on every platform.
+- All `PMX_*` environment variables are documented in
+  [`docs/environment.md`](docs/environment.md).
+
 ## [0.3.3] - 2026-07-08
 
 ### Fixed
@@ -2734,6 +2779,7 @@ otherwise have to discover by trial and error.
 - Regression coverage for snapshot flat-`id` aliases on both MCP and
   HTTP surfaces, plus async / top-level-`await` WebView script bodies.
 
+[0.3.4]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.3.4
 [0.3.3]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.3.3
 [0.3.2]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.3.2
 [0.3.1]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.3.1

package/Readme.md

@@ -107,7 +107,8 @@ the DB so SQLite WAL data is checkpointed into the file.
 
 Harness-agnostic. Drive the canvas from [MCP](docs/mcp.md) (27 tools,
 14 resources, change notifications), the [CLI](docs/cli.md), the
-[HTTP API](docs/http-api.md), or the [Bun SDK](docs/sdk.md). Works with
+[HTTP API](docs/http-api.md), or the [Bun SDK](docs/sdk.md) — all
+[environment variables documented here](docs/environment.md). Works with
 Claude Code, GitHub Copilot CLI, Codex, Cursor, Windsurf, or any agent
 that can spawn an MCP stdio server, call a CLI, or hit an HTTP endpoint.