pmx-canvas 0.4.4 → 0.4.6

package/CHANGELOG.md

@@ -3,6 +3,112 @@
 All notable changes to `pmx-canvas` are documented here. This project follows
 [Semantic Versioning](https://semver.org/).
 
+## [0.4.6] - 2026-08-08
+
+### Added
+
+- A `pmx-canvas smoke` command: one-command check that a running canvas works
+  in the current environment — server health + workspace, CLI/server version
+  skew, MCP initialize handshake, a temporary node create/search/remove
+  round-trip, and board validation. JSON report, exit 1 on failure.
+- The `/health` endpoint now reports the server's package `version`, so tools
+  can detect version skew between a CLI and the daemon it targets.
+- The CLI now accepts `--agent-id` on `ax work add/update` and `ax event add`,
+  and `--agent-id` / `--target` on `ax steer`; the SDK's work, event, and
+  steering methods accept the same identity fields.
+- The skill now teaches in-view placement and content sizing: focus or fit
+  newly created user-facing nodes, use per-type default sizes, and keep AX
+  state reads lean.
+- A new `diff` node type: unified diffs render with per-file headers, hunk
+  rows, and colored added/removed lines instead of a plain code fence.
+- A new `mermaid` node type: flowcharts, sequence and state diagrams render
+  client-side from mermaid text — no hosted app needed; Excalidraw remains
+  for interactive drawing.
+- A live work-item board: `canvas_render { action: "workboard" }` (HTTP
+  `POST /api/canvas/workboard`) materializes one board node showing all AX
+  work items by status, and it refreshes automatically whenever work items
+  change.
+
+### Changed
+
+- **Nodes created with unreadably small explicit sizes are now clamped up to a
+  per-type minimum.** A request for e.g. 200x100 now yields a readable
+  default-ish size instead; pass `strictSize: true` to keep a genuinely small
+  fixed frame. `validate` reports any undersized nodes as advisory size
+  warnings. Agents doing their own layout arithmetic should read back the
+  created size (or set `strictSize`).
+- The README's MCP and Amp orb setup guides now cover portable configs: pin
+  the package version in orb setup scripts and avoid hard-coding an absolute
+  `PMX_CANVAS_WORKSPACE_ROOT` in committed MCP configs.
+- Focus margins are now screen-space and zoom-aware, so a focused node clears
+  the floating toolbar at any scale.
+
+### Fixed
+
+- A browser panel left open across a `pmx-canvas` upgrade now reloads itself
+  once on reconnect instead of silently running the old client bundle (which
+  hid new client behavior such as the auto-ghost minimum dwell).
+- A batch that pins nodes now updates the browser's pin state immediately —
+  the context menu no longer shows a stale "Pin as context" until reload.
+- The MCP stdio server now exits when its client closes the connection instead
+  of remaining as an orphaned process.
+- Black app tiles in WebKit host panels (e.g. the GitHub Copilot app): hosted
+  app frames now boot one at a time, confirm they actually painted via a paint
+  probe, and recover automatically when they did not — soft resize, then
+  remount, then an explicit Retry button instead of a silent black tile. The
+  loading overlay stays up until the paint is confirmed.
+
+## [0.4.5] - 2026-08-07
+
+### Added
+
+- A third bundled skill, `pmx-canvas-orchestration`: the choreography for
+  multi-agent orchestration ON a canvas board — the agent host executes, the
+  canvas is the shared graph, state, human-steering surface, and audit trail.
+  It ships in the package's `skills/`; `pmx-canvas skills sync --yes` refreshes
+  installed copies of it like the others (sync never creates a copy — install
+  one the way your agent layout expects first).
+- Per-agent identity for orchestration: work items, timeline events, and
+  steering messages accept an optional `agentId` (who within the host), on
+  top of the coarse `source` host label.
+- Addressed steering: a steer can carry a `target` agent id — a consumer
+  claiming deliveries only sees steers addressed to it or broadcast steers.
+- Work-item status now mirrors onto linked canvas nodes automatically (an
+  `axWorkStatus` chip on the node), so the board reflects step state without
+  double-writing.
+- Running as an Amp orb service now binds the portal-assigned `$PORT`
+  automatically, so the service command is just `pmx-canvas --no-open` — no
+  port flags or `$PORT` interpolation. Honored only when `AMP_ORB` is set, so
+  a stray `PORT` in normal shells never changes the default. The README now
+  carries the full zero-config orb recipe (setup + services.yaml).
+- Auto-ghost: agent mutations that arrive without an explicit `canvas_intent`
+  signal now synthesize a short ghost that settles the moment the mutation
+  lands, so agent activity is visible even when the caller doesn't signal.
+  Auto-ghosts render lighter (dimmer, dotted, no veto) than a deliberate
+  signal; human actions in the browser and `canvas_batch` churn never ghost.
+  Disable with `PMX_CANVAS_AUTO_INTENT=0`.
+- Ghost minimum dwell: a ghost now stays visible for a perceptible floor
+  (~0.65s) even when its mutation settles within milliseconds.
+- The `amp` AX source label, for Amp host adapters and steering loop
+  prevention.
+
+### Changed
+
+- The `volt` theme's accent was retuned from coral to the Amp app's cream
+  (`#DFDFC1`).
+- Marking an AX delivery is now compare-and-set: `delivered:true` only on the
+  actual undelivered→delivered transition, so racing adapters can detect lost
+  claims.
+- The WebView-automation unavailable error now names the running Bun version
+  and clarifies that the canvas itself keeps working — only automation and
+  screenshots need Bun >= 1.3.12.
+
+### Fixed
+
+- File nodes are no longer created as content-less slivers: they get a real
+  code-preview default size, and untitled file nodes show their filename in
+  the title bar instead of a bare "FILE" chip.
+
 ## [0.4.4] - 2026-08-06
 
 ### Fixed
@@ -2938,6 +3044,8 @@ otherwise have to discover by trial and error.
 - Regression coverage for snapshot flat-`id` aliases on both MCP and
   HTTP surfaces, plus async / top-level-`await` WebView script bodies.
 
+[0.4.6]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.4.6
+[0.4.5]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.4.5
 [0.4.4]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.4.4
 [0.4.3]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.4.3
 [0.4.2]: https://github.com/pskoett/pmx-canvas/releases/tag/v0.4.2

package/Readme.md

@@ -128,6 +128,16 @@ surfaces (the core never imports a host SDK).
 </p>
 <p align="center"><sub>The live PMX workbench in the Codex in-app Browser.</sub></p>
 
+<p align="center">
+  <img src="docs/screenshots/claude-code-desktop.png" alt="PMX Canvas in the Claude Code desktop app's built-in browser pane, driven over MCP" width="100%" />
+</p>
+<p align="center"><sub>Claude Code desktop: the workbench in the built-in browser pane, mutated live over MCP.</sub></p>
+
+<p align="center">
+  <img src="docs/screenshots/amp-orb-portal.png" alt="PMX Canvas running as an Amp orb service, viewed through the Amp portal in the Volt theme" width="100%" />
+</p>
+<p align="center"><sub>AMPCode: the canvas as an orb service through the Amp portal (Volt theme).</sub></p>
+
 - **GitHub Copilot app** — a committed project canvas extension
   (`.github/extensions/pmx-canvas/`) opens the live PMX workbench in a native
   Copilot panel (light-themed by default to match the app, via the `?theme=`
@@ -158,7 +168,6 @@ surfaces (the core never imports a host SDK).
   either behavior when diagnosing). Non-orb buffering proxies get the same
   protections via runtime detection: an SSE watchdog that falls back to
   polling, and the boot-time iframe probe.
-  <!-- screenshot: docs/screenshots/amp-orb-portal.png — PMX Canvas live inside the Amp portal (to be added) -->
 
 Any other app browser (the ChatGPT desktop app, an IDE webview, …) works the
 same zero-adapter way: open the workbench URL, and add `?theme=<name|auto>` to
@@ -219,7 +228,21 @@ Add to your agent's MCP config:
 }
 ```
 
-The canvas auto-starts on first tool call.
+The canvas auto-starts on first tool call. Keep the config portable: commit it
+to the repo and let the workspace default to the launch directory — hard-coding
+an absolute `PMX_CANVAS_WORKSPACE_ROOT` breaks other checkouts and machines.
+Set that env var only when your host spawns the MCP server from an incidental
+directory (e.g. `~/.copilot`) instead of the project root.
+
+Verify any environment in one command against a running server:
+
+```bash
+bunx pmx-canvas smoke
+```
+
+It checks server health + workspace, CLI/server version skew, the MCP stdio
+initialize handshake, a temp-node create/search/remove round-trip, and board
+validation — JSON report, exit 1 on failure.
 
 ### Use inside the GitHub Copilot app
 
@@ -253,14 +276,39 @@ the full workflow and live-test checklist.
 
 Amp needs no adapter either. Run `pmx-canvas` as an orb service (the orb sets
 `AMP_ORB` in the environment automatically) and open the workbench through the
-thread's portal URL. The canvas detects the orb and the portal's nested-iframe
+thread's portal URL. The zero-config recipe for the repo the orb runs in:
+
+```yaml
+# .amp/services.yaml — supervised portal service
+services:
+  pmx-canvas:
+    command: pmx-canvas --no-open
+    portal: true
+    health: /health
+```
+
+```bash
+# .agents/setup — install the CLI (pin the exact version: a fresh orb running
+# @latest can silently pick up a newer release than the one you validated)
+npm install -g pmx-canvas@0.4.5
+```
+
+The server binds the portal-assigned `$PORT` automatically (gated on the
+`AMP_ORB` env the orb always sets, so a stray `PORT` elsewhere never changes
+the default), restores `.pmx-canvas/canvas.db`, and the portal manifest picks
+it up — no port flags or `$PORT` interpolation in the service command. One
+caveat: WebView automation (`pmx-canvas screenshot`) needs Bun >= 1.3.12 in
+the orb image; the canvas itself runs fine without it and says so in the
+error. The canvas detects the orb and the portal's nested-iframe
 embed on its own: live updates arrive over the proxy-safe polling transport,
 and iframe-backed nodes (HTML, graph, json-render, web artifacts) render
 inline via `srcdoc` with their theme styling included. Cross-origin hosted
 apps (e.g. the hosted Excalidraw MCP app) cannot be inlined and may stay
 blocked by the portal embed — everything served from the canvas itself works.
 Debug overrides: `/workbench?transport=poll|sse` and
-`?iframe-mode=srcdoc|src`.
+`?iframe-mode=srcdoc|src`. Once the service is up, `pmx-canvas smoke` verifies
+the whole stack (health, versions, MCP handshake, node lifecycle, validation)
+in one command.
 
 ### Install the agent skill (recommended)
 

package/dist/canvas/global.css

@@ -456,7 +456,7 @@
   --c-text-soft: #CBD3CA;
   --c-muted: #9CA49C;
   --c-dim: #626962;
-  --c-accent: #F34E3F;
+  --c-accent: #DFDFC1;
   --c-ok: #52C880;
   --c-warn: #E4C465;
   --c-warn-alt: #FFB300;
@@ -465,22 +465,22 @@
   --c-thinking: #BC8FB4;
   --c-subagent: #6CA0E0;
   --c-input-bg: #111311;
-  --c-dot-grid: rgba(243, 78, 63, 0.08);
+  --c-dot-grid: rgba(223, 223, 193, 0.08);
   --c-panel-overlay: rgba(11, 13, 11, 0.6);
   --c-panel-glass: rgba(23, 26, 23, 0.92);
   --c-shadow: rgba(0, 0, 0, 0.3);
   --c-shadow-heavy: rgba(0, 0, 0, 0.5);
-  --c-glow-accent: rgba(243, 78, 63, 0.15);
+  --c-glow-accent: rgba(223, 223, 193, 0.15);
   --c-surface-hover: rgba(255, 255, 255, 0.06);
   --c-surface-subtle: rgba(255, 255, 255, 0.03);
   --c-surface-th: rgba(255, 255, 255, 0.04);
-  --c-accent-8: rgba(243, 78, 63, 0.08);
-  --c-accent-10: rgba(243, 78, 63, 0.1);
-  --c-accent-12: rgba(243, 78, 63, 0.12);
-  --c-accent-15: rgba(243, 78, 63, 0.15);
-  --c-accent-25: rgba(243, 78, 63, 0.25);
-  --c-accent-30: rgba(243, 78, 63, 0.3);
-  --c-accent-40: rgba(243, 78, 63, 0.4);
+  --c-accent-8: rgba(223, 223, 193, 0.08);
+  --c-accent-10: rgba(223, 223, 193, 0.1);
+  --c-accent-12: rgba(223, 223, 193, 0.12);
+  --c-accent-15: rgba(223, 223, 193, 0.15);
+  --c-accent-25: rgba(223, 223, 193, 0.25);
+  --c-accent-30: rgba(223, 223, 193, 0.3);
+  --c-accent-40: rgba(223, 223, 193, 0.4);
   --c-ok-10: rgba(82, 200, 128, 0.1);
   --c-ok-12: rgba(82, 200, 128, 0.12);
   --c-ok-20: rgba(82, 200, 128, 0.2);
@@ -495,7 +495,7 @@
   --c-danger-12: rgba(214, 118, 112, 0.12);
   --c-line-30: rgba(39, 42, 39, 0.3);
   --c-contrast-fg: #0B0D0B;
-  --c-accent-hover: #F8695B;
+  --c-accent-hover: #EDEDDB;
   --c-warn-hover: #EBD087;
   --c-canvas-wash: linear-gradient(180deg, rgba(255, 255, 255, 0.02), rgba(0, 0, 0, 0));
   --c-annotation: #F1F7F0;
@@ -669,6 +669,29 @@ body,
   flex-shrink: 0;
 }
 
+.canvas-node .node-ax-status {
+  font-size: calc(9px * var(--node-chrome-scale, 1));
+  padding: calc(1px * var(--node-chrome-scale, 1)) calc(6px * var(--node-chrome-scale, 1));
+  border-radius: calc(4px * var(--node-chrome-scale, 1));
+  background: var(--c-panel-overlay);
+  color: var(--c-muted);
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+  flex-shrink: 0;
+}
+
+.canvas-node .node-ax-status-in-progress {
+  color: var(--c-accent);
+}
+
+.canvas-node .node-ax-status-done {
+  color: var(--c-ok);
+}
+
+.canvas-node .node-ax-status-blocked {
+  color: var(--c-warn);
+}
+
 .canvas-node .node-controls {
   display: flex;
   align-items: center;
@@ -1872,6 +1895,74 @@ html.is-node-resizing .ext-app-preview-catcher {
   }
 }
 
+/* Diff nodes — unified diff viewer with per-file sections */
+.diff-node {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+  height: 100%;
+  overflow: auto;
+  font-family: var(--mono);
+  font-size: 12px;
+  color: var(--c-text);
+}
+
+.diff-node.diff-node-empty {
+  align-items: center;
+  justify-content: center;
+  color: var(--c-muted);
+}
+
+.diff-node .diff-file {
+  border: 1px solid var(--c-line);
+  border-radius: 6px;
+  overflow: hidden;
+  flex-shrink: 0;
+}
+
+.diff-node .diff-file-header {
+  padding: 4px 8px;
+  background: var(--c-panel-overlay);
+  border-bottom: 1px solid var(--c-line);
+  color: var(--c-text-soft);
+  font-weight: 600;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.diff-node .diff-lines {
+  margin: 0;
+  padding: 4px 0;
+  overflow-x: auto;
+  font-family: inherit;
+  font-size: inherit;
+  line-height: 1.5;
+}
+
+.diff-node .diff-lines > div {
+  padding: 0 8px;
+  white-space: pre;
+}
+
+.diff-node .diff-hunk {
+  color: var(--c-muted);
+}
+
+.diff-node .diff-line-add {
+  color: var(--c-ok);
+  background: var(--c-ok-10);
+}
+
+.diff-node .diff-line-remove {
+  color: var(--c-danger);
+  background: var(--c-danger-12);
+}
+
+.diff-node .diff-line-context {
+  color: var(--c-text-soft);
+}
+
 /* Docked node — compact toolbar-flanking panel */
 .docked-node {
   min-width: 200px;
@@ -3955,6 +4046,19 @@ button.welcome-hint:hover {
   display: contents;
 }
 
+/* Auto-ghosts (server-synthesized for unlinked agent mutations) read lighter
+   than a deliberate canvas_intent signal: desaturated, dotted, no veto —
+   the opacity drop lives in ghostOpacity() (inline style). */
+.intent-ghost.is-auto {
+  filter: saturate(0.7);
+  border-style: dotted;
+}
+
+.intent-ghost.is-auto .intent-ghost-titlebar,
+.intent-ghost.is-auto .intent-chip {
+  border-style: dotted;
+}
+
 .intent-ghost {
   position: absolute;
   pointer-events: none;