pmx-canvas 0.6.4 → 0.7.0

package/.github/extensions/pmx-canvas/extension.mjs

@@ -418,14 +418,77 @@ async function startPanelServer(instanceId, ctx, pmx) {
     return { server, url: `http://127.0.0.1:${port}/`, entry };
 }
 
-async function getAxContext(baseUrl, workspaceRoot, input = {}) {
+async function getAxContext(baseUrl, workspaceRoot, input = {}, options = {}) {
     const resolved = baseUrl
         ? { ok: true, baseUrl }
         : await resolvePmxServer({ input, session: { workingDirectory: workspaceRoot } }, { autoStart: false });
     if (!resolved.ok || !resolved.baseUrl) {
         return { ok: false, error: resolved.error ?? "PMX Canvas server is unavailable." };
     }
-    return await fetchJson(resolved.baseUrl, "/api/canvas/ax/context", { timeoutMs: 2_000 });
+    // A proxied read is one this extension records itself with what it actually
+    // injected (after truncation), so the server does not record it again.
+    const headers = { "x-pmx-source": "copilot", ...(options.proxied ? { "x-pmx-proxied-read": "1" } : {}) };
+    return await fetchJson(resolved.baseUrl, "/api/canvas/ax/context", { headers, timeoutMs: 2_000 });
+}
+
+function deliveredPinnedIds(pinnedNodeIds, payloadText) {
+    const pinned = new Set(pinnedNodeIds);
+    const delivered = new Set();
+    const objectStarts = [];
+    let inString = false;
+    let escaped = false;
+    for (let index = 0; index < payloadText.length; index += 1) {
+        const character = payloadText[index];
+        if (inString) {
+            if (escaped) escaped = false;
+            else if (character === "\\") escaped = true;
+            else if (character === '"') inString = false;
+            continue;
+        }
+        if (character === '"') {
+            inString = true;
+        } else if (character === "{") {
+            objectStarts.push(index);
+        } else if (character === "}" && objectStarts.length > 0) {
+            const start = objectStarts.pop();
+            try {
+                const value = JSON.parse(payloadText.slice(start, index + 1));
+                if (value && !Array.isArray(value) && typeof value === "object" &&
+                    Object.hasOwn(value, "id") && typeof value.id === "string" && pinned.has(value.id)) {
+                    delivered.add(value.id);
+                }
+            } catch {
+                // An inner object may be complete even when its containing object was clipped.
+            }
+        }
+    }
+    return pinnedNodeIds.filter((id) => delivered.has(id));
+}
+
+/** Records what the per-prompt hook injected, so delivery is measured on what Copilot received. */
+async function recordInjectedContext(baseUrl, context, injected) {
+    const pinnedNodeIds = Array.isArray(context?.pinned?.nodeIds) ? context.pinned.nodeIds : [];
+    const text = injected ?? "";
+    try {
+        await fetchJson(baseUrl, "/api/canvas/ax/context-reads", {
+            method: "POST",
+            headers: { "Content-Type": "application/json", "x-pmx-source": "copilot" },
+            body: JSON.stringify({
+                channel: "adapter",
+                resource: "copilot:prompt-context",
+                source: "copilot",
+                consumer: "copilot",
+                boardId: context.boardId,
+                pinnedNodeIds,
+                // Same rule as the server (context-reads.ts): a node object with that id, not a bare id list.
+                deliveredNodeIds: deliveredPinnedIds(pinnedNodeIds, text),
+                bytes: Buffer.byteLength(text, "utf-8"),
+            }),
+            timeoutMs: 1_500,
+        });
+    } catch {
+        // Instrumentation must never block the prompt.
+    }
 }
 
 async function getAxStatus(ctx) {
@@ -860,8 +923,9 @@ copilotSession = await joinSession({
             void postPresence(workspaceRoot, { attached: true, phase: "thinking", detail: null });
             const resolved = await resolvePmxServer({ input: {}, session: { workingDirectory: workspaceRoot } }, { autoStart: false });
             if (!resolved.ok || !resolved.baseUrl) return undefined;
-            const context = await getAxContext(resolved.baseUrl, workspaceRoot, {});
+            const context = await getAxContext(resolved.baseUrl, workspaceRoot, {}, { proxied: true });
             const additionalContext = formatAdditionalContext(context, resolved.baseUrl);
+            void recordInjectedContext(resolved.baseUrl, context, additionalContext);
             return additionalContext ? { additionalContext } : undefined;
         },
     },

package/CHANGELOG.md

@@ -3,6 +3,79 @@
 All notable changes to `pmx-canvas` are documented here. This project follows
 [Semantic Versioning](https://semver.org/).
 
+## [Unreleased]
+
+## [0.7.0] - 2026-09-29
+
+### Highlights
+
+- Keep your work in named boards, organized into nested folders and connected by board links.
+- Search across your library and give agents source-labelled context from related boards.
+- Turn document attachments into reviewable Markdown using your connected agent's tools.
+- Share a board as a standalone HTML file and back up the whole library.
+
+### Breaking
+
+- The database migrates to multi-board storage and cannot be opened by older versions. Before downgrading, restore the automatic `canvas.db.pre-boards` copy or a pre-upgrade backup; changes made after migration are not in that copy.
+
+### Changed
+
+- The canvas database now stores many named boards. On first start your current board becomes a board named after the workspace, every old snapshot becomes a board of its own, and a copy of the old file is kept as `canvas.db.pre-boards` (older versions cannot open the migrated file).
+- Agent context and search now read chart values, diagram labels and structured card text instead of raw renderer configuration.
+- Questions, approvals and mode requests record who asked and answered them, including self-answers; this attribution describes the writer and does not grant permission.
+
+### Added
+
+- Sort boards into categories on Home; each category is its own section you can fold away, and boards migrated from old snapshots start in a folded "From old snapshots" section.
+- Export a board as one HTML file anyone can open without installing anything, from **Export** in the top bar or `pmx-canvas export`; the dialog lists what goes into the file first, and local file contents stay out unless you include them.
+- Back up every board with `pmx-canvas backup`, schedule server-run copies with `pmx-canvas backup schedule --every 24h`, and bring a backup back with `pmx-canvas restore` (the replaced file is kept); Home has no backup button.
+- The top bar shows the open board; click it to switch to a recent board, create a new one, or go Home, where you can open, rename, and delete boards (deleting asks first).
+- Agents can list, read and create boards with `canvas_board`, `canvas://boards`, `pmx-canvas board list|create|rename`, and the `/api/canvas/boards` routes; only you open, switch or delete a board.
+- Agent writes go to the board you have open; on Home, an agent's first write opens your most recent board, or creates one if there are none.
+- The canvas now records which context each agent reads and whether your pinned nodes were in it, readable with `pmx-canvas ax reads`, `canvas_ax_timeline { action: "reads" }`, or `GET /api/canvas/ax/context-reads`.
+- Designate a Markdown card as a board README, add text-only board-link cards, inspect outgoing links and backlinks, and search cards across the library without switching boards.
+- Preview and create an inactive board from selected reusable cards and optional groups/README; copied cards receive fresh IDs and omit pins, AX state and history.
+- Read a character-bounded cross-board brief with source IDs over MCP, HTTP, CLI or SDK; a durable cursor is used only when a stable consumer ID is supplied.
+- Attach PDF and Office originals up to 20 MiB, explicitly ask the connected agent to draft source-linked Markdown, and review it before adding it to the board; Canvas does not bundle conversion or launch an agent automatically.
+
+### Known limitations
+
+- Document extraction depends on the connected agent's available tools; remote byte transfer, OCR, unreadable charts, and some host formats may be unavailable.
+- A graph map, direct card-to-card edges across boards, and wiki-link syntax are not implemented.
+
+### Fixed
+
+- Snapshots can only be read, restored, renamed or deleted on their owning board.
+- Slow file imports no longer land on a board opened after the drop, and rapid board switches keep their intended order.
+- Recent boards remain correctly ordered when multiple opens happen within one millisecond.
+- HTTP board switching and deletion require the trusted workbench token, not just the UI marker.
+- `pmx-canvas pump` no longer crashes when its command exits without reading the steer; the exit code decides, as intended.
+- A change the server refuses in the browser now shows a toast with the reason instead of failing silently.
+- Webpage nodes refuse redirects that move a public page onto a private or loopback address, and never fetch link-local (cloud metadata) addresses.
+
+### Internal
+
+- The e2e gate now checks that every node type paints in a 600 px Chromium pane, the width of the agent-host panels the workbench lives in.
+
+## [0.6.5] - 2026-09-26
+
+### Added
+
+- Present saved board tours or derive stops from groups, with keyboard navigation and optional local PNG/MP4 capture using the same camera path.
+- Creation responses report requested and applied sizes, including group fitting, across HTTP, MCP, and batches.
+- JSON-render warns when unbound form values would be ignored.
+
+### Fixed
+
+- Workboards use equal-width columns across narrow and wide frames.
+- Embedded HTML and JSON-render updates keep the previous frame visible until the replacement is ready.
+- Explicitly empty HTML primitive fields omit their sections instead of inserting example content.
+- Mermaid diagrams fit overflowing content without enlarging small diagrams; authored sizes and optional natural scrolling are preserved.
+- Titlebar clicks select nodes without adding a selection after a drag.
+- Detached agents expire promptly, workers roll up under their parent, and camera operations no longer claim writer activity.
+- Unchanged and worker sessions do not replace useful receipts or reopen the panel.
+- Ghosts finish their rendered settle animation before removal, and tour-only changes create distinct snapshots.
+
 ## [0.6.4] - 2026-09-24
 
 ### Added

package/Readme.md

@@ -18,6 +18,12 @@ structured panel into place as they generate it — not as a separate tooling
 project. Pin what matters and the agent reads your spatial curation as
 structured context.
 
+**The board is the presentation.** Click **Present** to step through a saved tour
+(or groups in reading order), with chrome hidden and smooth camera moves.
+Optionally capture that same tour with
+`pmx-canvas record --mode deterministic --present --output tour.mp4`. See the
+[tour model and CLI walkthrough](docs/cli.md#tour-and-presentation).
+
 <p align="center">
   <img src="docs/screenshots/workbench-live-dark.png" alt="Live multi-agent workbench — dark theme: two agents on the board, review cards, an architecture diagram, and the writers pill" width="49%" />
   <img src="docs/screenshots/workbench-live-light.png" alt="Live multi-agent workbench — light theme" width="49%" />
@@ -35,6 +41,15 @@ in real time. Either side adds material; the human curates spatial structure
 `canvas://pinned-context` and acts on it. Spatial arrangement is
 communication — proximity means relatedness, pinning means *focus here*.
 
+The database holds many named boards. **Home is the library view, not a board**:
+it lists recent boards and nested category paths (up to eight 60-character
+segments). Empty folders are not independent objects; they exist only while a
+board is filed beneath them. Only a human opens/switches or deletes a board.
+Agents may list, read, create, rename, categorize, search, and create an inactive
+board from selected reusable cards without disturbing the board in view. Home
+provides a copy-preview dialog; an open board's command palette offers a
+board-link picker. Neither depends on native browser prompts.
+
 ## Main features
 
 ### 01 / Curate
@@ -67,6 +82,14 @@ the canvas is the union of its [built-in node types](docs/node-types.md) and
 **whatever your agent's harness already has access to** — MCP servers, CLIs,
 file reads, web fetch, anything on its toolbelt.
 
+Dropping a PDF or Office document attaches the original (up to 20 MiB). It does
+not bundle a converter or automatically launch an agent. After you explicitly
+request agent-assisted import and consent to processing by the connected host's
+tools/model provider, the agent fetches the controlled bytes, returns Markdown
+sections with references and warnings, and you review before adding them to the
+board. Remote hosts may require manual transfer; OCR, charts, and host format
+support are not guaranteed.
+
 JSON-render panels support bound form state, nested repeats, watchers, and Card
 header/footer slots. Form edits remain viewer-local until explicitly submitted;
 see [JSON-render nodes](docs/node-types.md#json-render-nodes). Authored iframe cards
@@ -170,15 +193,21 @@ and the `pmx-canvas-orchestration` skill documents the choreography.
 
 Spatial state auto-saves to `.pmx-canvas/canvas.db` (debounced ~500 ms) —
 git-committable, shareable across machines, and survives both browser
-refresh and server restart. Named [snapshots](docs/mcp.md), full
+refresh and server restart. Autosave is not a backup: `pmx-canvas backup` and
+its optional server-run schedule copy the whole board library, while restore
+keeps the replaced database. Backup and scheduling are backend/CLI operations;
+there is no Home backup button. A board can also be exported as a self-contained
+HTML file. Export previews what is included, omits local file contents unless
+explicitly requested, and locks board-link cards because an exported file has
+no live target library (the target title is not embedded). Named [snapshots](docs/mcp.md), full
 undo/redo, and an auto-detected code graph (JS/TS, Python, Go, Rust) make
 the canvas durable rather than throwaway. Stop the server before committing
 the DB so SQLite WAL data is checkpointed into the file.
 
 ### 07 / Any agent
 
-Harness-agnostic. Drive the canvas from [MCP](docs/mcp.md) (22 tools,
-14 resources, change notifications), the [CLI](docs/cli.md), the
+Harness-agnostic. Drive the canvas from [MCP](docs/mcp.md) (24 tools,
+15 static canvas resources plus one context resource template, change notifications), the [CLI](docs/cli.md), the
 [HTTP API](docs/http-api.md), or the [Bun SDK](docs/sdk.md) — all
 [environment variables documented here](docs/environment.md). Works with
 Claude Code, the GitHub Copilot app and CLI, Codex, Amp, Cursor, Windsurf, or
@@ -372,7 +401,7 @@ services:
 ```bash
 # .agents/setup — install the CLI (pin the exact version: a fresh orb running
 # @latest can silently pick up a newer release than the one you validated)
-npm install -g pmx-canvas@0.6.4
+npm install -g pmx-canvas@0.7.0
 ```
 
 The server binds the portal-assigned `$PORT` automatically (gated on the
@@ -438,7 +467,8 @@ paths, screenshots, or logs are attached automatically.
   the three-tier visual matrix (json-render → html → web-artifact)
 - **[CLI reference](docs/cli.md)** — full command surface, daemon mode,
   watch streams, WebView automation
-- **[MCP reference](docs/mcp.md)** — 22 tools, 14 core resources plus bundled
+- **[MCP reference](docs/mcp.md)** — 24 tools, 15 static canvas resources, one
+  context resource template, plus bundled
   skill resources, Skills extension, change notifications, node-type routing
 - **[HTTP API](docs/http-api.md)** — REST endpoints, SSE, batch operations
 - **[AX host-adapter contract](docs/ax-host-adapter-contract.md)** — how native