pmx-canvas 0.7.0 → 0.7.1

package/.github/extensions/pmx-canvas/extension.mjs

@@ -23,6 +23,10 @@ let managedWorkspaceRoot = null;
 let managedPort = null;
 const managedLogs = [];
 const panelServers = new Map();
+// Canvas actions are invoked separately from `open`, and their context can
+// omit the canvas input. Keep the server selected for each visible instance so
+// an action cannot fall back to the process/default port behind the panel.
+const panelTargets = new Map();
 
 function normalizeBaseUrl(value) {
     if (typeof value !== "string" || value.trim() === "") return null;
@@ -227,7 +231,7 @@ async function resolvePmxServer(ctxOrInput, options = {}) {
     const allowWorkspaceMismatch = input?.allowWorkspaceMismatch === true;
     for (const candidate of candidateBaseUrls(input)) {
         const probe = await probeServer(candidate.baseUrl, workspaceRoot, {
-            allowWorkspaceMismatch: candidate.explicit || allowWorkspaceMismatch,
+            allowWorkspaceMismatch,
         });
         if (probe.ok) return probe;
     }
@@ -245,6 +249,29 @@ async function resolvePmxServer(ctxOrInput, options = {}) {
     return await startManagedServer(workspaceRoot, input);
 }
 
+async function resolvePanelTarget(ctx, options = {}) {
+    const selected = panelTargets.get(ctx?.instanceId);
+    if (!selected) return await resolvePmxServer(ctx, options);
+
+    const probe = await probeServer(selected.baseUrl, selected.workspaceRoot, {
+        timeoutMs: options.timeoutMs ?? 2_000,
+    });
+    if (probe.ok) return probe;
+    return {
+        ...probe,
+        baseUrl: null,
+        error: `The displayed PMX Canvas target is no longer valid: ${probe.error ?? "health check failed"}. Action withheld.`,
+    };
+}
+
+function rememberPanelTarget(ctx, pmx) {
+    if (!ctx?.instanceId || !pmx?.ok || !pmx.baseUrl) return;
+    panelTargets.set(ctx.instanceId, {
+        baseUrl: pmx.baseUrl,
+        workspaceRoot: pmx.health.workspace,
+    });
+}
+
 function escapeHtml(value) {
     return String(value)
         .replaceAll("&", "&")
@@ -350,6 +377,19 @@ async function readRequestJson(req) {
     return JSON.parse(Buffer.concat(chunks).toString("utf8"));
 }
 
+async function verifiedEntryTarget(entry) {
+    if (!entry.pmx?.baseUrl) return { ok: false, baseUrl: null, error: "PMX Canvas server is unavailable." };
+    const probe = await probeServer(entry.pmx.baseUrl, entry.pmx.health.workspace, {
+        timeoutMs: 2_000,
+    });
+    if (probe.ok) return probe;
+    return {
+        ...probe,
+        baseUrl: null,
+        error: `The displayed PMX Canvas target is no longer valid: ${probe.error ?? "health check failed"}. Action withheld.`,
+    };
+}
+
 function jsonResponse(res, statusCode, body) {
     res.writeHead(statusCode, { "Content-Type": "application/json; charset=utf-8" });
     res.end(JSON.stringify(body));
@@ -377,13 +417,23 @@ async function startPanelServer(instanceId, ctx, pmx) {
                 return;
             }
             if (req.method === "GET" && url.pathname === "/context") {
-                const context = await getAxContext(entry.pmx?.baseUrl, entry.workspaceRoot, entry.input);
+                const target = await verifiedEntryTarget(entry);
+                if (!target.ok || !target.baseUrl) {
+                    jsonResponse(res, 409, target);
+                    return;
+                }
+                const context = await getAxContext(target.baseUrl, entry.workspaceRoot, entry.input);
                 jsonResponse(res, 200, context);
                 return;
             }
             if (req.method === "POST" && url.pathname === "/focus") {
                 const body = await readRequestJson(req);
-                const result = await setAxFocus(entry.pmx?.baseUrl, entry.workspaceRoot, entry.input, body.nodeIds);
+                const target = await verifiedEntryTarget(entry);
+                if (!target.ok || !target.baseUrl) {
+                    jsonResponse(res, 409, target);
+                    return;
+                }
+                const result = await setAxFocus(target.baseUrl, entry.workspaceRoot, entry.input, body.nodeIds);
                 jsonResponse(res, 200, result);
                 return;
             }
@@ -396,8 +446,9 @@ async function startPanelServer(instanceId, ctx, pmx) {
                 await copilotSession?.send({ prompt: body.prompt });
                 // Explicit user instruction from the panel → mirror onto the AX
                 // timeline as a steering message (fire-and-forget).
-                if (entry.pmx?.baseUrl) {
-                    void fetchJson(entry.pmx.baseUrl, "/api/canvas/ax/steer", {
+                const target = await verifiedEntryTarget(entry);
+                if (target.ok && target.baseUrl) {
+                    void fetchJson(target.baseUrl, "/api/canvas/ax/steer", {
                         method: "POST",
                         headers: { "Content-Type": "application/json" },
                         body: JSON.stringify({ message: body.prompt, source: "copilot" }),
@@ -492,7 +543,7 @@ async function recordInjectedContext(baseUrl, context, injected) {
 }
 
 async function getAxStatus(ctx) {
-    const resolved = await resolvePmxServer(ctx, { autoStart: false });
+    const resolved = await resolvePanelTarget(ctx, { autoStart: false });
     if (!resolved.ok || !resolved.baseUrl) return { ok: false, server: resolved };
     const state = await fetchJson(resolved.baseUrl, "/api/canvas/ax", { timeoutMs: 2_000 });
     return { ok: true, server: resolved, ax: state };
@@ -517,7 +568,7 @@ async function setAxFocus(baseUrl, workspaceRoot, input = {}, nodeIds = []) {
 // Resolves the server first so the action returns an actionable error when the
 // canvas is unavailable, then maps the neutral primitive over plain HTTP.
 async function postAxRecord(ctx, path, payload) {
-    const resolved = await resolvePmxServer(ctx, { autoStart: false });
+    const resolved = await resolvePanelTarget(ctx, { autoStart: false });
     if (!resolved.ok || !resolved.baseUrl) {
         return { ok: false, error: resolved.error ?? "PMX Canvas server is unavailable." };
     }
@@ -625,7 +676,7 @@ function reportSteeringDeliveryError(error) {
 }
 
 async function getAxTimeline(ctx, limit) {
-    const resolved = await resolvePmxServer(ctx, { autoStart: false });
+    const resolved = await resolvePanelTarget(ctx, { autoStart: false });
     if (!resolved.ok || !resolved.baseUrl) return { ok: false, error: resolved.error };
     const query = typeof limit === "number" && limit > 0 ? `?limit=${limit}` : "";
     return await fetchJson(resolved.baseUrl, `/api/canvas/ax/timeline${query}`, { timeoutMs: 2_000 });
@@ -674,7 +725,7 @@ const pmxCanvas = createCanvas({
             name: "get_ax_context",
             description: "Return the current PMX Canvas AX pinned and focused context.",
             handler: async (ctx) => {
-                const resolved = await resolvePmxServer(ctx, { autoStart: false });
+                const resolved = await resolvePanelTarget(ctx, { autoStart: false });
                 if (!resolved.ok || !resolved.baseUrl) return { ok: false, error: resolved.error };
                 return await getAxContext(resolved.baseUrl, workspaceRootFrom(ctx), ctx.input ?? {});
             },
@@ -693,7 +744,13 @@ const pmxCanvas = createCanvas({
                 required: ["nodeIds"],
                 additionalProperties: false,
             },
-            handler: async (ctx) => await setAxFocus(null, workspaceRootFrom(ctx), ctx.input ?? {}, ctx.input?.nodeIds),
+            handler: async (ctx) => {
+                const resolved = await resolvePanelTarget(ctx, { autoStart: false });
+                if (!resolved.ok || !resolved.baseUrl) {
+                    throw new CanvasError("pmx_unavailable", resolved.error ?? "PMX Canvas server is unavailable.");
+                }
+                return await setAxFocus(resolved.baseUrl, workspaceRootFrom(ctx), ctx.input ?? {}, ctx.input?.nodeIds);
+            },
         },
         {
             name: "send_instruction",
@@ -835,7 +892,7 @@ const pmxCanvas = createCanvas({
                 additionalProperties: false,
             },
             handler: async (ctx) => {
-                const resolved = await resolvePmxServer(ctx, { autoStart: false });
+                const resolved = await resolvePanelTarget(ctx, { autoStart: false });
                 if (!resolved.ok || !resolved.baseUrl) {
                     return { ok: false, error: resolved.error ?? "PMX Canvas server is unavailable." };
                 }
@@ -863,6 +920,7 @@ const pmxCanvas = createCanvas({
         },
     ],
     open: async (ctx) => {
+        panelTargets.delete(ctx.instanceId);
         let pmx;
         try {
             pmx = await resolvePmxServer(ctx);
@@ -877,6 +935,7 @@ const pmxCanvas = createCanvas({
         }
 
         if (pmx.ok && pmx.baseUrl) {
+            rememberPanelTarget(ctx, pmx);
             const fallbackPanel = panelServers.get(ctx.instanceId);
             if (fallbackPanel) {
                 panelServers.delete(ctx.instanceId);
@@ -898,6 +957,7 @@ const pmxCanvas = createCanvas({
             panel.entry.workspaceRoot = workspaceRootFrom(ctx);
             panel.entry.input = ctx.input ?? {};
         }
+        rememberPanelTarget(ctx, pmx);
         return {
             title: "PMX Canvas",
             status: pmx.ok ? "Connected" : "Needs server",
@@ -905,6 +965,7 @@ const pmxCanvas = createCanvas({
         };
     },
     onClose: async (ctx) => {
+        panelTargets.delete(ctx.instanceId);
         const panel = panelServers.get(ctx.instanceId);
         if (!panel) return;
         panelServers.delete(ctx.instanceId);

package/CHANGELOG.md

@@ -5,6 +5,22 @@ All notable changes to `pmx-canvas` are documented here. This project follows
 
 ## [Unreleased]
 
+## [0.7.1] - 2026-09-30
+
+### Fixed
+
+- Imported cards avoid existing content and multi-card imports form a group named after the source file.
+- Asking an agent to import now includes processing consent in one click; review actions have clearer buttons and a separate sticky footer.
+- Presentations support right-drag panning and a visible exit button; export Open and Download actions look like buttons.
+- Board navigation no longer reports removed cards or carries old session receipts onto Home.
+- Refused edits show their reason without a tooltip, keep the reason in Updates, and leave refused deletions visible.
+- Copilot panel actions use the displayed server and refuse writes if its workspace changes.
+- Inline batch JSON works with either spaced or equals-style flags.
+- CLI exports support an independent `--include-derived-text` opt-in and reject unknown flags.
+- Stopping from a different installation preserves live daemon PID files and reports the mismatch.
+- Daemon stop verifies the process on Windows and refuses to stop a live process whose installation cannot be verified.
+- Bundled skills include a retrievable tour reference, conditional browser-host checks, and eval scenarios for the new board and import workflows.
+
 ## [0.7.0] - 2026-09-29
 
 ### Highlights

package/Readme.md

@@ -83,12 +83,12 @@ the canvas is the union of its [built-in node types](docs/node-types.md) and
 file reads, web fetch, anything on its toolbelt.
 
 Dropping a PDF or Office document attaches the original (up to 20 MiB). It does
-not bundle a converter or automatically launch an agent. After you explicitly
-request agent-assisted import and consent to processing by the connected host's
-tools/model provider, the agent fetches the controlled bytes, returns Markdown
-sections with references and warnings, and you review before adding them to the
-board. Remote hosts may require manual transfer; OCR, charts, and host format
-support are not guaranteed.
+not bundle a converter or automatically launch an agent. Clicking **Ask agent to
+import** also authorizes processing by the connected host's tools/model provider;
+there is no separate consent confirmation. The agent returns Markdown sections
+with references and warnings for review. Multi-card imports are placed together
+in a free area, in a group named after the source file. Remote hosts may require
+manual transfer; OCR, charts, and host format support are not guaranteed.
 
 JSON-render panels support bound form state, nested repeats, watchers, and Card
 header/footer slots. Form edits remain viewer-local until explicitly submitted;
@@ -246,7 +246,9 @@ surfaces (the core never imports a host SDK).
   session override), wakes Copilot when the board sends a steer, injects
   pinned/focused AX context on prompt submission, and exposes actions for focus,
   work items, approval gates, review annotations, the AX timeline, and
-  host-capability reporting. Install it into any repo with
+  host-capability reporting. Actions stay bound to the server shown by their
+  panel and are withheld if that server no longer matches the panel workspace.
+  Install it into any repo with
   `pmx-canvas copilot install-extension` (`--dry-run` to preview).
 - **Codex app** — native through the Codex in-app Browser (opened to
   `/workbench`) plus the PMX MCP server: agents read `canvas://ax-context` /
@@ -401,7 +403,7 @@ services:
 ```bash
 # .agents/setup — install the CLI (pin the exact version: a fresh orb running
 # @latest can silently pick up a newer release than the one you validated)
-npm install -g pmx-canvas@0.7.0
+npm install -g pmx-canvas@0.7.1
 ```
 
 The server binds the portal-assigned `$PORT` automatically (gated on the

package/dist/canvas/global.css

@@ -4784,7 +4784,7 @@ html.is-node-resizing .ext-app-preview-catcher {
   position: absolute;
   top: 18px;
   right: 18px;
-  max-width: min(260px, calc(100% - 24px));
+  max-width: min(360px, calc(100% - 36px));
   display: inline-flex;
   align-items: center;
   gap: 8px;
@@ -4792,7 +4792,7 @@ html.is-node-resizing .ext-app-preview-catcher {
   background: color-mix(in srgb, var(--c-panel-glass) 96%, transparent);
   backdrop-filter: blur(14px);
   border: 1px solid color-mix(in srgb, var(--c-line) 76%, var(--c-warn) 24%);
-  border-radius: 999px;
+  border-radius: 12px;
   box-shadow: 0 8px 22px var(--c-shadow);
   color: var(--c-text);
   font: inherit;
@@ -4831,15 +4831,27 @@ html.is-node-resizing .ext-app-preview-catcher {
   box-shadow: 0 0 0 2px color-mix(in srgb, currentColor 28%, transparent);
 }
 
+.attention-toast-copy {
+  display: grid;
+  gap: 4px;
+  min-width: 0;
+  text-align: left;
+  overflow-wrap: anywhere;
+}
+
+.attention-toast-detail {
+  color: var(--c-text-soft);
+  font-size: 12px;
+  line-height: 1.45;
+  max-height: 9em;
+  overflow: auto;
+}
+
 .attention-toast-title {
   font-size: 12px;
   font-weight: 600;
   line-height: 1.2;
   letter-spacing: -0.005em;
-  white-space: nowrap;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  max-width: 200px;
 }
 
 .attention-history {
@@ -6841,12 +6853,23 @@ html.is-node-dragging .intent-line-layer {
   padding: 4px 12px;
   cursor: pointer;
 }
-.is-presenting > :not(.app-main):not(.presentation-error),
+.is-presenting > :not(.app-main):not(.presentation-error):not(.presentation-navigation),
 .is-presenting .app-main > :not(.canvas-region),
 .is-presenting .canvas-region > :not(.canvas-viewport) {
   display: none !important;
 }
 .is-presenting .canvas-viewport { pointer-events: none; }
+.presentation-navigation {
+  position: fixed;
+  inset: 0;
+  z-index: 99;
+}
+.presentation-exit {
+  position: absolute;
+  top: 16px;
+  right: 16px;
+  box-shadow: 0 2px 12px var(--c-shadow);
+}
 .presentation-error {
   position: fixed;
   bottom: 16px;
@@ -7104,10 +7127,17 @@ html.is-node-dragging .intent-line-layer {
 }
 .export-dialog-links {
   display: flex;
+  flex-wrap: wrap;
   gap: 12px;
+  margin-top: 12px;
 }
 .export-dialog-links a {
-  color: var(--c-accent);
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  box-sizing: border-box;
+  text-decoration: none;
+  word-break: normal;
 }
 
 /* ── Home categories ── */
@@ -7267,9 +7297,42 @@ html.is-node-dragging .intent-line-layer {
 .attachment-node p { margin: 0; color: var(--c-text-soft); line-height: 1.5; }
 .attachment-node a, .md-import-source a { color: var(--c-accent); }
 .attachment-status { font-weight: 600; }
-.attachment-node .home-board-action { border-color: var(--c-line); color: var(--c-text); min-height: 34px; }
-.attachment-node .home-board-action:hover { background: var(--c-panel); border-color: var(--c-accent); }
+.attachment-button,
+.presentation-exit,
+.export-dialog-links a {
+  min-height: 38px;
+  padding: 8px 14px;
+  border: 1px solid var(--c-text-soft);
+  border-radius: 8px;
+  background: var(--c-panel);
+  color: var(--c-text);
+  font: inherit;
+  font-weight: 600;
+  cursor: pointer;
+}
+.attachment-button.is-primary,
+.export-dialog-links a.is-primary { background: var(--c-accent); border-color: var(--c-accent); color: var(--c-bg); }
+.attachment-button:hover:not(:disabled),
+.presentation-exit:hover,
+.export-dialog-links a:hover { filter: brightness(1.12); }
+.attachment-button:focus-visible,
+.presentation-exit:focus-visible,
+.export-dialog-links a:focus-visible { outline: 2px solid var(--c-accent); outline-offset: 3px; }
+.attachment-button:disabled { opacity: 0.5; cursor: default; }
 .attachment-review { width: 100%; border-top: 1px solid var(--c-line); padding-top: 12px; }
+.attachment-review-actions {
+  position: sticky;
+  bottom: -16px;
+  display: flex;
+  flex-wrap: wrap;
+  justify-content: flex-end;
+  gap: 12px;
+  margin-top: 24px;
+  padding: 16px 0;
+  border-top: 1px solid var(--c-line);
+  background: var(--c-panel);
+  z-index: 1;
+}
 .attachment-review pre { white-space: pre-wrap; overflow-wrap: anywhere; font: 12px/1.6 var(--mono); padding: 12px; background: var(--c-bg); border-radius: 8px; }
 .attachment-review h4 { margin-bottom: 6px; }
 .md-import-source { padding: 6px 12px; font-size: 11px; overflow-wrap: anywhere; color: var(--c-text-soft); border-top: 1px solid var(--c-line); }