pmx-canvas 0.7.0 → 0.7.2

package/.github/extensions/pmx-canvas/extension.mjs

@@ -23,6 +23,10 @@ let managedWorkspaceRoot = null;
 let managedPort = null;
 const managedLogs = [];
 const panelServers = new Map();
+// Canvas actions are invoked separately from `open`, and their context can
+// omit the canvas input. Keep the server selected for each visible instance so
+// an action cannot fall back to the process/default port behind the panel.
+const panelTargets = new Map();
 
 function normalizeBaseUrl(value) {
     if (typeof value !== "string" || value.trim() === "") return null;
@@ -227,7 +231,7 @@ async function resolvePmxServer(ctxOrInput, options = {}) {
     const allowWorkspaceMismatch = input?.allowWorkspaceMismatch === true;
     for (const candidate of candidateBaseUrls(input)) {
         const probe = await probeServer(candidate.baseUrl, workspaceRoot, {
-            allowWorkspaceMismatch: candidate.explicit || allowWorkspaceMismatch,
+            allowWorkspaceMismatch,
         });
         if (probe.ok) return probe;
     }
@@ -245,6 +249,41 @@ async function resolvePmxServer(ctxOrInput, options = {}) {
     return await startManagedServer(workspaceRoot, input);
 }
 
+async function resolvePanelTarget(ctx, options = {}) {
+    const selected = panelTargets.get(ctx?.instanceId);
+    if (!selected) {
+        const panel = panelServers.get(ctx?.instanceId);
+        if (!panel) return await resolvePmxServer(ctx, options);
+        // A fallback panel still owns its original target. Action inputs may
+        // contain neither that URL nor its workspace, so never rediscover from them.
+        const resolved = await resolvePmxServer({
+            input: { ...panel.entry.input, ...(options.autoStart === true ? { autoStart: true } : {}) },
+            session: { workingDirectory: panel.entry.workspaceRoot },
+        }, options);
+        panel.entry.pmx = resolved;
+        rememberPanelTarget(ctx, resolved);
+        return resolved;
+    }
+
+    const probe = await probeServer(selected.baseUrl, selected.workspaceRoot, {
+        timeoutMs: options.timeoutMs ?? 2_000,
+    });
+    if (probe.ok) return probe;
+    return {
+        ...probe,
+        baseUrl: null,
+        error: `The displayed PMX Canvas target is no longer valid: ${probe.error ?? "health check failed"}. Action withheld.`,
+    };
+}
+
+function rememberPanelTarget(ctx, pmx) {
+    if (!ctx?.instanceId || !pmx?.ok || !pmx.baseUrl) return;
+    panelTargets.set(ctx.instanceId, {
+        baseUrl: pmx.baseUrl,
+        workspaceRoot: pmx.health.workspace,
+    });
+}
+
 function escapeHtml(value) {
     return String(value)
         .replaceAll("&", "&")
@@ -253,15 +292,9 @@ function escapeHtml(value) {
         .replaceAll('"', """);
 }
 
-function renderShell(instanceId, entry) {
-    const status = entry.pmx?.ok ? "Connected" : "Not connected";
-    // theme=light is a client-local session default matching the Copilot app's
-    // light chrome — it never changes the server-global theme other clients
-    // see, and the in-panel theme picker still overrides it.
-    const frameSrc = entry.pmx?.baseUrl ? `${entry.pmx.baseUrl}/workbench?theme=light` : "about:blank";
-    const error = entry.pmx?.error ? `<p class="error">${escapeHtml(entry.pmx.error)}</p>` : "";
+function renderShell(entry) {
     return `<!doctype html>
-<html>
+<html lang="en">
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
@@ -274,70 +307,83 @@ function renderShell(instanceId, entry) {
         font-family: var(--font-sans, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif);
       }
       .shell {
-        display: grid;
-        grid-template-rows: auto 1fr;
-        height: 100vh;
+        max-width: 560px;
+        margin: 12vh auto;
+        padding: 24px;
       }
-      header {
+      .actions {
         display: flex;
-        align-items: center;
+        flex-wrap: wrap;
         gap: 12px;
-        padding: 10px 12px;
-        border-bottom: 1px solid var(--border-color-default, #30363d);
-        background: var(--background-color-muted, rgba(22, 27, 34, 0.95));
+        margin-top: 24px;
       }
-      strong { font-weight: var(--font-weight-semibold, 600); }
-      .status {
+      p { line-height: 1.6; overflow-wrap: anywhere; }
+      .workspace {
         color: var(--text-color-muted, #8b949e);
-        font-size: var(--text-body-small, 12px);
+        font-size: 13px;
       }
       .error {
-        margin: 0;
         color: var(--true-color-red, #ff7b72);
-        font-size: var(--text-body-small, 12px);
+        min-height: 24px;
       }
       button {
-        border: 1px solid var(--border-color-default, #30363d);
+        border: 1px solid var(--border-color-default, #6e7681);
         border-radius: 8px;
-        background: var(--background-color-default, #0d1117);
+        background: var(--background-color-muted, #21262d);
         color: inherit;
+        font: inherit;
         cursor: pointer;
-        padding: 6px 10px;
+        min-height: 40px;
+        padding: 8px 16px;
       }
-      button:hover {
+      button:hover, button:focus-visible {
         border-color: var(--color-focus-outline, #2f81f7);
       }
-      iframe {
-        width: 100%;
-        height: 100%;
-        border: 0;
-        background: #0d1117;
-      }
-      .spacer { flex: 1; }
+      button:disabled { opacity: 0.6; cursor: wait; }
     </style>
   </head>
   <body>
-    <div class="shell">
-      <header>
-        <strong>PMX Canvas</strong>
-        <span class="status">${escapeHtml(status)}${entry.pmx?.baseUrl ? ` · ${escapeHtml(entry.pmx.baseUrl)}` : ""}</span>
-        ${error}
-        <span class="spacer"></span>
-        <button type="button" onclick="refreshContext()">Refresh AX</button>
-        <button type="button" onclick="startServer()">Start server</button>
-      </header>
-      <iframe title="PMX Canvas workbench" src="${escapeHtml(frameSrc)}"></iframe>
-    </div>
+    <main class="shell">
+      <h1>Connect to PMX Canvas</h1>
+      <p>The workbench is not connected yet. Home and recent boards will appear when the server is available.</p>
+      <p class="workspace">Workspace: ${escapeHtml(entry.workspaceRoot)}</p>
+      <p class="workspace">Server: ${escapeHtml(candidateBaseUrls(entry.input)[0].baseUrl)}</p>
+      <p id="connection-status" class="error" role="status">${escapeHtml(entry.pmx?.error ?? "Checking connection…")}</p>
+      <div class="actions">
+        <button type="button" onclick="connect(false)">Check connection</button>
+        <button type="button" onclick="connect(true)">Start server</button>
+      </div>
+      <p class="workspace">This page checks for the server automatically. Start server launches a local server for this workspace.</p>
+    </main>
     <script>
-      async function startServer() {
-        await fetch('/start', { method: 'POST' });
-        window.location.reload();
-      }
-      async function refreshContext() {
-        const response = await fetch('/context');
-        const context = await response.json();
-        window.parent.postMessage({ type: 'pmx-canvas-ax-context', instanceId: ${JSON.stringify(instanceId)}, context }, '*');
+      let busy = false;
+      let timer;
+      async function connect(start) {
+        if (busy) return;
+        busy = true;
+        clearTimeout(timer);
+        const buttons = document.querySelectorAll('button');
+        buttons.forEach(button => button.disabled = true);
+        const status = document.getElementById('connection-status');
+        status.textContent = start ? 'Starting server…' : 'Checking connection…';
+        try {
+          const response = await fetch(start ? '/start' : '/status', { method: start ? 'POST' : 'GET', cache: 'no-store' });
+          const target = await response.json();
+          if (response.ok && target.ok && target.baseUrl) {
+            // Load the real workbench at its own origin, including its token,
+            // Home, boards, and relative API paths. The shell is not a proxy.
+            window.location.replace(target.baseUrl + '/workbench?theme=light');
+            return;
+          }
+          status.textContent = target.error || 'No matching PMX Canvas server is running.';
+        } catch (error) {
+          status.textContent = 'Connection check failed. Reopen the canvas if the adapter has stopped.';
+        }
+        busy = false;
+        buttons.forEach(button => button.disabled = false);
+        timer = setTimeout(() => connect(false), 2000);
       }
+      connect(false);
     </script>
   </body>
 </html>`;
@@ -350,6 +396,19 @@ async function readRequestJson(req) {
     return JSON.parse(Buffer.concat(chunks).toString("utf8"));
 }
 
+async function verifiedEntryTarget(entry) {
+    if (!entry.pmx?.ok || !entry.pmx.baseUrl) return { ok: false, baseUrl: null, error: "PMX Canvas server is unavailable." };
+    const probe = await probeServer(entry.pmx.baseUrl, entry.pmx.health.workspace, {
+        timeoutMs: 2_000,
+    });
+    if (probe.ok) return probe;
+    return {
+        ...probe,
+        baseUrl: null,
+        error: `The displayed PMX Canvas target is no longer valid: ${probe.error ?? "health check failed"}. Action withheld.`,
+    };
+}
+
 function jsonResponse(res, statusCode, body) {
     res.writeHead(statusCode, { "Content-Type": "application/json; charset=utf-8" });
     res.end(JSON.stringify(body));
@@ -361,29 +420,38 @@ async function startPanelServer(instanceId, ctx, pmx) {
         try {
             const url = new URL(req.url ?? "/", "http://127.0.0.1");
             if (req.method === "GET" && url.pathname === "/") {
-                res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-                res.end(renderShell(instanceId, entry));
+                res.writeHead(200, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" });
+                res.end(renderShell(entry));
                 return;
             }
             if (req.method === "POST" && url.pathname === "/start") {
-                entry.pmx = await resolvePmxServer({ input: entry.input, session: { workingDirectory: entry.workspaceRoot } });
-                jsonResponse(res, 200, entry.pmx);
+                const latest = await resolvePanelTarget({ instanceId }, { autoStart: true });
+                jsonResponse(res, 200, latest);
                 return;
             }
             if (req.method === "GET" && url.pathname === "/status") {
-                const latest = await resolvePmxServer({ input: entry.input, session: { workingDirectory: entry.workspaceRoot } }, { autoStart: false });
-                entry.pmx = latest.ok ? latest : entry.pmx;
+                const latest = await resolvePanelTarget({ instanceId }, { autoStart: false });
                 jsonResponse(res, 200, latest);
                 return;
             }
             if (req.method === "GET" && url.pathname === "/context") {
-                const context = await getAxContext(entry.pmx?.baseUrl, entry.workspaceRoot, entry.input);
+                const target = await verifiedEntryTarget(entry);
+                if (!target.ok || !target.baseUrl) {
+                    jsonResponse(res, 409, target);
+                    return;
+                }
+                const context = await getAxContext(target.baseUrl, entry.workspaceRoot, entry.input);
                 jsonResponse(res, 200, context);
                 return;
             }
             if (req.method === "POST" && url.pathname === "/focus") {
                 const body = await readRequestJson(req);
-                const result = await setAxFocus(entry.pmx?.baseUrl, entry.workspaceRoot, entry.input, body.nodeIds);
+                const target = await verifiedEntryTarget(entry);
+                if (!target.ok || !target.baseUrl) {
+                    jsonResponse(res, 409, target);
+                    return;
+                }
+                const result = await setAxFocus(target.baseUrl, entry.workspaceRoot, entry.input, body.nodeIds);
                 jsonResponse(res, 200, result);
                 return;
             }
@@ -396,8 +464,9 @@ async function startPanelServer(instanceId, ctx, pmx) {
                 await copilotSession?.send({ prompt: body.prompt });
                 // Explicit user instruction from the panel → mirror onto the AX
                 // timeline as a steering message (fire-and-forget).
-                if (entry.pmx?.baseUrl) {
-                    void fetchJson(entry.pmx.baseUrl, "/api/canvas/ax/steer", {
+                const target = await verifiedEntryTarget(entry);
+                if (target.ok && target.baseUrl) {
+                    void fetchJson(target.baseUrl, "/api/canvas/ax/steer", {
                         method: "POST",
                         headers: { "Content-Type": "application/json" },
                         body: JSON.stringify({ message: body.prompt, source: "copilot" }),
@@ -492,9 +561,9 @@ async function recordInjectedContext(baseUrl, context, injected) {
 }
 
 async function getAxStatus(ctx) {
-    const resolved = await resolvePmxServer(ctx, { autoStart: false });
+    const resolved = await resolvePanelTarget(ctx, { autoStart: false });
     if (!resolved.ok || !resolved.baseUrl) return { ok: false, server: resolved };
-    const state = await fetchJson(resolved.baseUrl, "/api/canvas/ax", { timeoutMs: 2_000 });
+    const state = await fetchJson(resolved.baseUrl, "/api/canvas/ax?includeContext=false", { timeoutMs: 2_000 });
     return { ok: true, server: resolved, ax: state };
 }
 
@@ -517,7 +586,7 @@ async function setAxFocus(baseUrl, workspaceRoot, input = {}, nodeIds = []) {
 // Resolves the server first so the action returns an actionable error when the
 // canvas is unavailable, then maps the neutral primitive over plain HTTP.
 async function postAxRecord(ctx, path, payload) {
-    const resolved = await resolvePmxServer(ctx, { autoStart: false });
+    const resolved = await resolvePanelTarget(ctx, { autoStart: false });
     if (!resolved.ok || !resolved.baseUrl) {
         return { ok: false, error: resolved.error ?? "PMX Canvas server is unavailable." };
     }
@@ -625,7 +694,7 @@ function reportSteeringDeliveryError(error) {
 }
 
 async function getAxTimeline(ctx, limit) {
-    const resolved = await resolvePmxServer(ctx, { autoStart: false });
+    const resolved = await resolvePanelTarget(ctx, { autoStart: false });
     if (!resolved.ok || !resolved.baseUrl) return { ok: false, error: resolved.error };
     const query = typeof limit === "number" && limit > 0 ? `?limit=${limit}` : "";
     return await fetchJson(resolved.baseUrl, `/api/canvas/ax/timeline${query}`, { timeoutMs: 2_000 });
@@ -667,14 +736,14 @@ const pmxCanvas = createCanvas({
     actions: [
         {
             name: "status",
-            description: "Return PMX Canvas server and AX state status for this workspace.",
+            description: "Return PMX Canvas server and AX state without serialized node context. Use get_ax_context for full pinned/focused context.",
             handler: async (ctx) => await getAxStatus(ctx),
         },
         {
             name: "get_ax_context",
             description: "Return the current PMX Canvas AX pinned and focused context.",
             handler: async (ctx) => {
-                const resolved = await resolvePmxServer(ctx, { autoStart: false });
+                const resolved = await resolvePanelTarget(ctx, { autoStart: false });
                 if (!resolved.ok || !resolved.baseUrl) return { ok: false, error: resolved.error };
                 return await getAxContext(resolved.baseUrl, workspaceRootFrom(ctx), ctx.input ?? {});
             },
@@ -693,7 +762,13 @@ const pmxCanvas = createCanvas({
                 required: ["nodeIds"],
                 additionalProperties: false,
             },
-            handler: async (ctx) => await setAxFocus(null, workspaceRootFrom(ctx), ctx.input ?? {}, ctx.input?.nodeIds),
+            handler: async (ctx) => {
+                const resolved = await resolvePanelTarget(ctx, { autoStart: false });
+                if (!resolved.ok || !resolved.baseUrl) {
+                    throw new CanvasError("pmx_unavailable", resolved.error ?? "PMX Canvas server is unavailable.");
+                }
+                return await setAxFocus(resolved.baseUrl, workspaceRootFrom(ctx), ctx.input ?? {}, ctx.input?.nodeIds);
+            },
         },
         {
             name: "send_instruction",
@@ -835,7 +910,7 @@ const pmxCanvas = createCanvas({
                 additionalProperties: false,
             },
             handler: async (ctx) => {
-                const resolved = await resolvePmxServer(ctx, { autoStart: false });
+                const resolved = await resolvePanelTarget(ctx, { autoStart: false });
                 if (!resolved.ok || !resolved.baseUrl) {
                     return { ok: false, error: resolved.error ?? "PMX Canvas server is unavailable." };
                 }
@@ -863,6 +938,7 @@ const pmxCanvas = createCanvas({
         },
     ],
     open: async (ctx) => {
+        panelTargets.delete(ctx.instanceId);
         let pmx;
         try {
             pmx = await resolvePmxServer(ctx);
@@ -877,6 +953,7 @@ const pmxCanvas = createCanvas({
         }
 
         if (pmx.ok && pmx.baseUrl) {
+            rememberPanelTarget(ctx, pmx);
             const fallbackPanel = panelServers.get(ctx.instanceId);
             if (fallbackPanel) {
                 panelServers.delete(ctx.instanceId);
@@ -898,6 +975,7 @@ const pmxCanvas = createCanvas({
             panel.entry.workspaceRoot = workspaceRootFrom(ctx);
             panel.entry.input = ctx.input ?? {};
         }
+        rememberPanelTarget(ctx, pmx);
         return {
             title: "PMX Canvas",
             status: pmx.ok ? "Connected" : "Needs server",
@@ -905,6 +983,7 @@ const pmxCanvas = createCanvas({
         };
     },
     onClose: async (ctx) => {
+        panelTargets.delete(ctx.instanceId);
         const panel = panelServers.get(ctx.instanceId);
         if (!panel) return;
         panelServers.delete(ctx.instanceId);

package/CHANGELOG.md

@@ -3,7 +3,38 @@
 All notable changes to `pmx-canvas` are documented here. This project follows
 [Semantic Versioning](https://semver.org/).
 
-## [Unreleased]
+## [0.7.2] - 2026-09-30
+
+### Added
+
+- Agents can explicitly open a board before writing through MCP, CLI, HTTP, and SDK; board deletion remains human-only.
+
+### Fixed
+
+- Main-agent transport attaches reuse the attached host session, avoiding duplicate Copilot agents while keeping identified subagents separate.
+- HTML exports have clearer Markdown typography and tables, readable CSV/TSV previews, complete status and context text, and scrollable cards with keyboard-accessible reading views.
+- Original document attachments now avoid existing cards and each other without moving existing content.
+- Backup and restore commands reject unknown flags instead of silently ignoring them.
+- Amp setup instructions distinguish native MCP configuration from the browser portal.
+- Copilot's fallback panel reconnects to the full workbench and keeps adapter actions on the recovered server.
+- Copilot status omits serialized node context; full context remains available through `get_ax_context`.
+- Attachment, board-menu, card, and panel controls use consistently sized SVG icons instead of small font symbols.
+
+## [0.7.1] - 2026-09-30
+
+### Fixed
+
+- Imported cards avoid existing content and multi-card imports form a group named after the source file.
+- Asking an agent to import now includes processing consent in one click; review actions have clearer buttons and a separate sticky footer.
+- Presentations support right-drag panning and a visible exit button; export Open and Download actions look like buttons.
+- Board navigation no longer reports removed cards or carries old session receipts onto Home.
+- Refused edits show their reason without a tooltip, keep the reason in Updates, and leave refused deletions visible.
+- Copilot panel actions use the displayed server and refuse writes if its workspace changes.
+- Inline batch JSON works with either spaced or equals-style flags.
+- CLI exports support an independent `--include-derived-text` opt-in and reject unknown flags.
+- Stopping from a different installation preserves live daemon PID files and reports the mismatch.
+- Daemon stop verifies the process on Windows and refuses to stop a live process whose installation cannot be verified.
+- Bundled skills include a retrievable tour reference, conditional browser-host checks, and eval scenarios for the new board and import workflows.
 
 ## [0.7.0] - 2026-09-29
 

package/Readme.md

@@ -44,9 +44,11 @@ communication — proximity means relatedness, pinning means *focus here*.
 The database holds many named boards. **Home is the library view, not a board**:
 it lists recent boards and nested category paths (up to eight 60-character
 segments). Empty folders are not independent objects; they exist only while a
-board is filed beneath them. Only a human opens/switches or deletes a board.
-Agents may list, read, create, rename, categorize, search, and create an inactive
-board from selected reusable cards without disturbing the board in view. Home
+board is filed beneath them. Agents can explicitly open/switch boards; deletion
+remains human-only. Creating a board or a copy from reusable cards leaves it
+inactive. Agents open its returned ID before writing; this also switches the
+shared workbench the human sees. Agents may list, read, rename, categorize, and
+search boards without switching. Home
 provides a copy-preview dialog; an open board's command palette offers a
 board-link picker. Neither depends on native browser prompts.
 
@@ -83,12 +85,12 @@ the canvas is the union of its [built-in node types](docs/node-types.md) and
 file reads, web fetch, anything on its toolbelt.
 
 Dropping a PDF or Office document attaches the original (up to 20 MiB). It does
-not bundle a converter or automatically launch an agent. After you explicitly
-request agent-assisted import and consent to processing by the connected host's
-tools/model provider, the agent fetches the controlled bytes, returns Markdown
-sections with references and warnings, and you review before adding them to the
-board. Remote hosts may require manual transfer; OCR, charts, and host format
-support are not guaranteed.
+not bundle a converter or automatically launch an agent. Clicking **Ask agent to
+import** also authorizes processing by the connected host's tools/model provider;
+there is no separate consent confirmation. The agent returns Markdown sections
+with references and warnings for review. Multi-card imports are placed together
+in a free area, in a group named after the source file. Remote hosts may require
+manual transfer; OCR, charts, and host format support are not guaranteed.
 
 JSON-render panels support bound form state, nested repeats, watchers, and Card
 header/footer slots. Form edits remain viewer-local until explicitly submitted;
@@ -246,7 +248,9 @@ surfaces (the core never imports a host SDK).
   session override), wakes Copilot when the board sends a steer, injects
   pinned/focused AX context on prompt submission, and exposes actions for focus,
   work items, approval gates, review annotations, the AX timeline, and
-  host-capability reporting. Install it into any repo with
+  host-capability reporting. Actions stay bound to the server shown by their
+  panel and are withheld if that server no longer matches the panel workspace.
+  Install it into any repo with
   `pmx-canvas copilot install-extension` (`--dry-run` to preview).
 - **Codex app** — native through the Codex in-app Browser (opened to
   `/workbench`) plus the PMX MCP server: agents read `canvas://ax-context` /
@@ -385,9 +389,32 @@ the full workflow and live-test checklist.
 
 ### Use inside AMPCode orbs and the Amp portal
 
-Amp needs no adapter either. Run `pmx-canvas` as an orb service (the orb sets
+The portal and the agent's MCP connection are separate. For native Canvas tools,
+merge this into the workspace's `.amp/settings.json` (not `.mcp.json`):
+
+```json
+{
+  "amp.mcpServers": {
+    "canvas": {
+      "command": "bunx",
+      "args": ["pmx-canvas@0.7.2", "--mcp"]
+    }
+  }
+}
+```
+
+In the PMX product checkout, use `"command": "bun"` and
+`"args": ["run", "src/mcp/server.ts"]` to test the checked-out source instead.
+Reload MCP connections and complete any host trust prompt. Confirm Canvas tools
+are discoverable and the target `/health.workspace` and version match before
+mutating a board. If discovery is empty, inspect Amp's MCP connection status;
+an open portal or a successful standalone MCP handshake does not prove a native
+connection, skill activation, or steering delivery. See
+[Amp MCP configuration](https://ampcode.com/docs/customize/mcp).
+
+For the visible workbench, run `pmx-canvas` as an orb service (the orb sets
 `AMP_ORB` in the environment automatically) and open the workbench through the
-thread's portal URL. The zero-config recipe for the repo the orb runs in:
+thread's portal URL. A consumer-workspace service recipe:
 
 ```yaml
 # .amp/services.yaml — supervised portal service
@@ -401,7 +428,7 @@ services:
 ```bash
 # .agents/setup — install the CLI (pin the exact version: a fresh orb running
 # @latest can silently pick up a newer release than the one you validated)
-npm install -g pmx-canvas@0.7.0
+npm install -g pmx-canvas@0.7.2
 ```
 
 The server binds the portal-assigned `$PORT` automatically (gated on the