pmx-canvas 0.7.1 → 0.7.2

package/dist/types/client/canvas/ExternalWriters.d.ts

@@ -1,5 +1,5 @@
 /** Top-bar indicator: avatar cluster, "3 writers", op count, pulsing dot. */
-export declare function ExternalWriterIndicator(): import("preact/jsx-runtime").JSX.Element | null;
-export declare function ActivityFeed(): import("preact/jsx-runtime").JSX.Element | null;
+export declare function ExternalWriterIndicator(): import("preact/src").JSX.Element | null;
+export declare function ActivityFeed(): import("preact/src").JSX.Element | null;
 /** Connected writers — pure visibility, no permissions. */
-export declare function WritersSheet(): import("preact/jsx-runtime").JSX.Element | null;
+export declare function WritersSheet(): import("preact/src").JSX.Element | null;

package/dist/types/client/icons.d.ts

@@ -3,6 +3,21 @@ interface IconProps {
     size?: number;
     class?: string;
 }
+export declare function IconClose(p: IconProps): JSX.Element;
+export declare function IconPlus(p: IconProps): JSX.Element;
+export declare function IconPlusCircle(p: IconProps): JSX.Element;
+export declare function IconChevronRight(p: IconProps): JSX.Element;
+export declare function IconMore(p: IconProps): JSX.Element;
+export declare function IconExternalLink(p: IconProps): JSX.Element;
+export declare function IconExpand(p: IconProps): JSX.Element;
+export declare function IconArrowLeft(p: IconProps): JSX.Element;
+export declare function IconRefresh(p: IconProps): JSX.Element;
+export declare function IconUndo(p: IconProps): JSX.Element;
+export declare function IconSparkle(p: IconProps): JSX.Element;
+/** Upload into a tray — attach a document. */
+export declare function IconUpload(p: IconProps): JSX.Element;
+/** Dropdown disclosure, sized like the other toolbar icons. */
+export declare function IconChevronDown(p: IconProps): JSX.Element;
 /** Expand-arrows — fit all nodes */
 export declare function IconFitAll(p: IconProps): JSX.Element;
 /** Magnifier with + */

package/dist/types/client/nodes/ExtAppFrame.d.ts

@@ -106,5 +106,5 @@ export declare function resolveExtAppInlineFrameHeight(appHeight: number, hostHe
 export declare function ExtAppFrame({ node, expanded }: {
     node: CanvasNodeState;
     expanded?: boolean;
-}): import("preact/jsx-runtime").JSX.Element;
+}): import("preact/src").JSX.Element;
 export {};

package/dist/types/client/nodes/FileNode.d.ts

@@ -1,16 +1,4 @@
 import type { CanvasNodeState } from '../types';
-export interface DelimitedTable {
-    header: string[];
-    /** Rectangular: every row padded (short) or truncated (long) to the header width. */
-    rows: string[][];
-}
-/**
- * RFC4180-ish delimited-text parser. Quoted fields may contain the delimiter,
- * newlines, and `""` escapes; CRLF, LF and lone CR all end a record; a trailing
- * newline produces no phantom empty row. Ragged records are squared off against
- * the header width instead of throwing.
- */
-export declare function parseDelimitedText(text: string, delimiter: string): DelimitedTable;
 /** Human-readable byte size, e.g. `4.2 MB`. */
 export declare function formatBytes(bytes: number): string;
 export declare function FileNode({ node, expanded }: {

package/dist/types/shared/delimited-text.d.ts

@@ -0,0 +1,14 @@
+export interface DelimitedTable {
+    header: string[];
+    /** Rectangular: every row padded (short) or truncated (long) to the header width. */
+    rows: string[][];
+}
+/** Column delimiter for a delimited-data path, or null when the file is not one. */
+export declare function delimiterForPath(path: string): string | null;
+/**
+ * RFC4180-ish delimited-text parser. Quoted fields may contain the delimiter,
+ * newlines, and `""` escapes; CRLF, LF and lone CR all end a record; a trailing
+ * newline produces no phantom empty row. Ragged records are squared off against
+ * the header width instead of throwing.
+ */
+export declare function parseDelimitedText(text: string, delimiter: string): DelimitedTable;

package/docs/cli.md

@@ -280,6 +280,8 @@ node or fit the new ids — auto-placement is board-relative, not camera-relativ
 ```bash
 pmx-canvas board list                          # most recently opened first; activeBoardId null = Home
 pmx-canvas board create "Q4 planning"          # created, not opened
+pmx-canvas board open <board-id>               # open the returned ID before writing
+pmx-canvas board open --home                   # return the shared workbench to Home
 pmx-canvas board rename <board-id> "New name"
 pmx-canvas board create "Q4 planning" --category Planning
 pmx-canvas board category <board-id> "Planning/Quarterly" # nested folders; --clear unfiles it
@@ -287,8 +289,10 @@ pmx-canvas board from <source-id> "Follow-up" --preview
 pmx-canvas board from <source-id> "Follow-up" --nodes id1,id2 --readme --structure
 ```
 
-Commands write to the board open in the workbench. Opening, switching and
-deleting boards happens in the workbench (the human's call). `board from`
+Commands write to the board open in the workbench. `board open` switches the
+shared visible board, not a private CLI target. Verify its returned
+`activeBoardId` before writing; another participant can switch it later.
+Deletion remains human-only. `board from`
 excludes `prompt`, `response`, `trace`, and `mcp-app` cards; selected reusable
 cards get fresh IDs. `--structure` includes group frames; edges between copied
 cards are retained automatically. `--readme` carries the designated README. The new board remains inactive and
@@ -300,6 +304,9 @@ Boards save automatically. Backups are separate recovery copies of the whole lib
 configured through the CLI or HTTP API rather than the Home screen. Scheduled backups
 run while the server is running; scheduling is off until configured.
 
+Use `--to` for the destination folder. Backup and restore commands reject unknown
+flags (including `--folder`) rather than silently using the configured default.
+
 ```bash
 pmx-canvas backup                                   # every board, now; into .pmx-canvas/backups
 pmx-canvas backup --to ~/Backups/pmx --keep 14

package/docs/http-api.md

@@ -48,11 +48,13 @@ the CLI, not an HTTP job endpoint.
 A workspace holds many named boards; one is open at a time. Agent writes go to
 the open board. While no board is open (Home), the first write opens the most
 recently opened board, or creates one when the workspace has none;
-`canvas.clear` on Home opens nothing. Only the trusted workbench opens or
-deletes a board — HTTP calls require both `x-pmx-workbench: 1` and the
+`canvas.clear` on Home opens nothing. Agents can explicitly open a board using
+`POST /api/canvas/boards/open`; verify the returned `activeBoardId` before writing.
+This changes the shared workbench, not a private per-agent target. Only the
+trusted workbench deletes a board — deletion requires both `x-pmx-workbench: 1` and the
 per-boot `x-pmx-workbench-token` embedded in the served `/workbench` HTML;
-the marker alone is not authority. Public HTTP integrations must not open or
-delete boards. In-process SDK embedding hosts retain authority to do so.
+the marker alone is not authority. Public HTTP integrations must not delete
+boards. In-process SDK embedding hosts retain deletion authority.
 Every change emits a
 `boards-changed` SSE frame with `{ activeBoardId, boards }`.
 
@@ -87,10 +89,9 @@ curl -X PATCH http://localhost:4313/api/canvas/boards/<board-id> \
 curl -X PATCH http://localhost:4313/api/canvas/boards/<board-id> \
   -H "Content-Type: application/json" -d '{"readmeNodeId":"<markdown-node-id>"}'
 
-# Open a board, or Home with {"id":null} — workbench only
+# Open a board, or Home with {"id":null} — also available to agents
 curl -X POST http://localhost:4313/api/canvas/boards/open \
-  -H "Content-Type: application/json" -H "x-pmx-workbench: 1" \
-  -H "x-pmx-workbench-token: <token-from-served-workbench>" -d '{"id":"<board-id>"}'
+  -H "Content-Type: application/json" -d '{"id":"<board-id>"}'
 
 # Delete a board and its snapshots — workbench only; deleting the open board returns to Home
 curl -X DELETE http://localhost:4313/api/canvas/boards/<board-id> \
@@ -158,7 +159,10 @@ curl "http://localhost:4313/api/canvas/exports/<file>.html?download=1" -o board.
 
 PDF and Office uploads are raw bytes, not JSON. Upload requires the trusted
 workbench token, an active captured board, a non-empty body of at most 20 MiB,
-and creates both an original file card and an `attached` import. The original
+and creates both an original file card and an `attached` import. Requested x/y
+coordinates are preserved when free; otherwise the original card is placed in
+open space with a 48-unit gap, without moving existing cards. The import's
+initial anchor follows the original card's actual position. The original
 remains board-owned until board deletion; snapshot restore does not remove it,
 and whole-database backups include it.
 

package/docs/mcp.md

@@ -65,7 +65,7 @@ its `action` to the same operation the legacy tool used, so results are identica
 | `canvas_ax_timeline` | `read` · `record-event` · `add-evidence` · `send-steering` · `reads` | `canvas_get_ax_timeline`, `canvas_record_ax_event`, `canvas_add_evidence`, `canvas_send_steering` (`reads` is new — the context read log) |
 | `canvas_ax_delivery` | `claim` (long-polls with `timeoutMs`) · `mark` | `canvas_claim_ax_delivery`, `canvas_mark_ax_delivery` |
 | `canvas_intent` | `signal` · `update` · `clear` | _(new — Ghost Cursor of Intent; no legacy standalone tool)_ |
-| `canvas_board` | `list` · `get` · `create` · `create-from` · `update` | Boards, README designation, and transactional inactive copies |
+| `canvas_board` | `list` · `get` · `create` · `create-from` · `open` · `update` | Boards, explicit shared-workbench switching, README designation, and transactional inactive copies |
 | `canvas_snapshot` | `save` · `list` · `restore` · `delete` · `gc` · `diff` | `canvas_snapshot` (legacy save tool), `canvas_list_snapshots`, `canvas_restore`, `canvas_delete_snapshot`, `canvas_gc_snapshots`, `canvas_diff` — removed in v0.4.0 after one deprecated minor |
 
 Board categories are nested folder paths: `canvas_board { action: "update", id:
@@ -91,6 +91,13 @@ state, or history. Groups and the designated README are opt-in.
 Library search is `canvas_query { action: "search", query: "auth", scope:
 "library" }`. It returns board/card IDs and never switches the active board.
 
+To author a new board, create it, then call `canvas_board { action: "open",
+id: "<returned-board-id>" }` and verify `activeBoardId` in the response before
+writing. Opening changes the shared workbench the human sees and the target of
+subsequent writes; it is not a private agent selection. Another participant can
+switch it later, so recheck after interruptions. `id: null` opens Home. Deletion
+remains human-only.
+
 ### `canvas_import` — agent-assisted document extraction
 
 A PDF/Office drop retains the original attachment (maximum 20 MiB), but does

package/docs/sdk.md

@@ -91,8 +91,8 @@ canvas.setAxFocus([n1], { source: 'sdk' });
 console.log(canvas.getAxState());
 console.log(canvas.getAxContext());
 
-// Boards — the SDK is the embedding host, so it may open and delete boards.
-// Writes made on Home (no board open) land on a new board; open one first.
+// Boards — agents may open boards; deletion is reserved for trusted embedding hosts.
+// Open the intended board before writing: this also switches the shared workbench.
 const board = await canvas.createBoard('Q4 planning', 'Planning'); // optional category
 await canvas.updateBoard(board.id, { category: 'Planning/Quarterly' }); // nested folders; null unfiles it
 await canvas.openBoard(board.id);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmx-canvas",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "Spatial canvas workbench for coding agents — infinite 2D canvas with agent-native CLI, MCP integration, nodes, edges, file watching, and snapshots",
   "type": "module",
   "main": "./src/server/index.ts",

package/skills/pmx-canvas/SKILL.md

@@ -43,7 +43,7 @@ for the authoritative stop, viewport, persistence, reset, group-order, and captu
 
 ## Runtime prerequisites
 
-PMX Canvas 0.7.1 requires **Bun >=1.4.2**, including when installed through npm.
+PMX Canvas 0.7.2 requires **Bun >=1.4.2**, including when installed through npm.
 Check `bun --version` and ensure Bun is on the MCP host's PATH, not just your shell's;
 use an absolute executable path if needed. Install/configure only when requested.
 For pinned installation, MCP configuration, managed services, and disposable verification,
@@ -95,9 +95,13 @@ the served catalog is a startup snapshot. Local mirrors still use `skills sync`
    floor, not a replacement: only an explicit signal gives the human a real pre-mutation veto
    window, your reasoning (`reason`), and staged multi-step previews. Batch and browser-human
    actions never auto-ghost.
-6. **Attach a session so the human can see you (0.4.8+).** Start board work with
-   `canvas_ax_state { action: "set-presence", attached: true, label: "<who you are>" }` and end
-   it with `{ attached: false }` — detaching hands the human a receipt. Everything the session
+6. **Reuse your host session, or attach one if needed.** First read
+   `canvas_ax_state { action: "presence" }`. Copilot's extension already attaches as
+   `source: "copilot"` with consumer/session ID `copilot`: reuse that identity, do not create a
+   task-named agent. Put task descriptions in `detail`, not a new `agentId` or source. Only if
+   your host has no session, attach with `canvas_ax_state { action: "set-presence",
+   attached: true, label: "<who you are>" }` and detach that self-owned session when done.
+   Do not detach a host-owned session; its adapter manages its lifetime. Everything the session
    gives you and asks of you (cursor + phase chip, the session panel, steering, the scope fence's
    403s, the human edit lock's 409s, unattended approvals) is in **Sessions & the human** below.
 7. **Mutate through current composites.** Prefer the 16 composite MCP tools below.
@@ -360,7 +364,10 @@ The board has three modes, all gated on one fact — whether a session is attach
 
 What the session asks of you:
 
-- **Detach explicitly** (`attached: false` or a `session-end` activity). Attaching over a
+- **Detach self-owned sessions explicitly** (`attached: false` or a `session-end` activity).
+  Reuse an adapter-owned session without attaching/detaching another; for Copilot, update
+  `{ source: "copilot", detail: "Team overview" }` without inventing an `agentId`. Separate
+  `agentId` values are for actual independent subagents, not steps in one chat. Attaching over a
   non-empty board saved a `Before session · …` snapshot; detaching emits the receipt (items
   done / vetoed, a diff against that snapshot, one-click restore) — an idle timeout delays it.
 - **403 = outside the scope fence.** The human may fence you to a region (`policy.scope`): writes
@@ -525,7 +532,13 @@ are text-only links through `data.boardId`; they are not direct cross-board card
 edges. `create-from` should be previewed first. It excludes prompt, response,
 trace, and MCP-app cards; groups and README are optional; creation assigns fresh
 IDs, copies no pins/AX/history, preserves the original, and leaves the new board
-inactive. Only the human opens/switches or deletes boards.
+inactive. Agents can open/switch boards; only the human deletes them. To create
+and populate a board, call `canvas_board { action: "create", name: "Planning" }`,
+then `canvas_board { action: "open", id: "<returned-board-id>" }` (CLI:
+`pmx-canvas board open <board-id>`). Verify the returned `activeBoardId` before
+writing. Opening changes the shared visible workbench and subsequent write
+target, not a private agent selection. Recheck after interruptions or another
+participant's navigation. Use `id: null` or CLI `board open --home` for Home.
 
 Attribution is descriptive, not authority. `requestedBy`, `resolvedBy`, and
 `selfAnswer` tell you who wrote an ask or answer; an agent answer is not human

package/skills/pmx-canvas/evals/evals.json

@@ -565,11 +565,11 @@
       "id": 23,
       "name": "multi-board-targeting",
       "prompt": "I have Roadmap and Incident Review boards. Add a decision note only to Incident Review and set its tour to the Summary group. Do not disturb Roadmap.",
-      "expected_output": "Lists/gets boards, resolves the exact Incident Review board and opens or explicitly targets it before mutation, verifies the active target, searches for the Summary group there, then adds the note and sets that board's tour. It does not infer IDs from titles, mutate Roadmap, or assume that a board switch succeeded. It validates Incident Review and reports board/node IDs.",
+      "expected_output": "Lists/gets boards, resolves the exact Incident Review board and calls canvas_board action open or CLI board open with its ID, verifies the returned activeBoardId, searches for the Summary group there, then adds the note and sets that board's tour. It explains that opening switches the shared view but preserves Roadmap content. It does not infer IDs from titles, mutate Roadmap, invent inactive-board write targeting, or assume that a board switch succeeded. It validates Incident Review and reports board/node IDs.",
       "assertions": [
         {
           "name": "resolves-and-verifies-target-board",
-          "description": "Uses board list/get/open or explicit board targeting to resolve and verify Incident Review before any write",
+          "description": "Resolves Incident Review with board list/get, explicitly opens its ID and verifies activeBoardId before writing; does not confuse read-only board targeting with write targeting",
           "type": "output_check"
         },
         {
@@ -662,6 +662,47 @@
           "type": "output_check"
         }
       ]
+    },
+    {
+      "id": 27,
+      "name": "create-open-and-populate-board",
+      "prompt": "Create a new Release checklist board, open it for me, and add a checklist. Keep the content on my current board intact. Do this yourself without asking me to navigate.",
+      "expected_output": "Creates Release checklist, captures its returned ID, explicitly opens it with canvas_board action open or CLI board open, verifies activeBoardId, and only then adds the checklist. Creation alone does not switch boards. It verifies the checklist on the new board and leaves the original board content intact. It explains that the shared workbench now shows the new board, without asking the human to open it or claiming private per-agent targeting. Deletion authority remains human-only.",
+      "assertions": [
+        {
+          "name": "opens-created-id-before-authoring",
+          "description": "Uses the returned creation ID in an explicit open call and verifies activeBoardId before adding content",
+          "type": "output_check"
+        },
+        {
+          "name": "preserves-original-board",
+          "description": "Does not clear, delete, or add the checklist to the previously open board; verifies the new board's content",
+          "type": "output_check"
+        },
+        {
+          "name": "no-human-navigation-handoff",
+          "description": "Performs opening itself and describes the shared visible switch rather than requesting a human click or claiming a private target",
+          "type": "output_check"
+        }
+      ]
+    },
+    {
+      "id": 28,
+      "name": "reuse-copilot-adapter-presence",
+      "prompt": "You are the main Copilot agent. The canvas presence list already has source copilot, sessionId copilot, label GitHub Copilot, attached true, with recent polling. Create a team overview on this board and show that you are working. You are not launching a subagent.",
+      "expected_output": "Reuses the existing adapter-owned copilot session. Reports task detail and phase on source copilot without creating a task-specific agentId or a second attached MCP session. Keeps steering addressed to consumer copilot. Does not detach the adapter-owned session after finishing; separate IDs are only for actual independent agents.",
+      "assertions": [
+        {
+          "name": "reuses-host-identity",
+          "description": "Updates source copilot with task detail instead of creating a second task-named identity or attaching a new session",
+          "type": "output_check"
+        },
+        {
+          "name": "preserves-delivery-and-lifetime",
+          "description": "Uses consumer copilot for addressed steering and leaves attach/detach lifecycle to the host adapter",
+          "type": "output_check"
+        }
+      ]
     }
   ]
 }

package/skills/pmx-canvas/references/full-reference.md

@@ -443,7 +443,7 @@ single-purpose tools behind an `action` (and, for `canvas_ax_gate`, a `kind`) di
 | `canvas_edge` | `add` · `update` · `remove` | Connect / edit / disconnect nodes |
 | `canvas_group` | `create` · `add` · `ungroup` | Manage spatial group containers |
 | `canvas_history` | `undo` · `redo` | Time travel through the mutation ring buffer |
-| `canvas_board` | `list` · `get` · `create` · `create-from` · `update` | Boards, README designation, links/backlinks, and inactive copies |
+| `canvas_board` | `list` · `get` · `create` · `create-from` · `open` · `update` | Boards, shared-workbench switching, README designation, links/backlinks, and inactive copies |
 | `canvas_snapshot` | `save` · `list` · `restore` · `delete` · `gc` · `diff` | Named snapshots: save/list/restore/delete, garbage-collect old ones, diff current canvas vs a snapshot (`diff` takes `snapshot`, not `id`) |
 | `canvas_view` | `arrange` · `focus` · `fit` · `clear` · `remove-annotation` · `get-tour` · `set-tour` | Auto-arrange, pan-to-node, fit viewport, clear the board, delete annotations, read/persist ordered presentation stops (`tour: null` derives group order) |
 | `canvas_query` | `context` · `search` · `layout` · `validate` | Read the budgeted cross-board brief, find nodes by keyword, read full layout, or **`validate`** the board for node collisions / group-containment / dangling edges |
@@ -485,6 +485,11 @@ creation: `prompt`, `response`, `trace`, and `mcp-app` are excluded; README and
 group structure are optional; fresh IDs are allocated; pins, AX state, and
 history are not copied; the source remains unchanged and the new board inactive.
 
+Use `canvas_board { action: "open", id: "<board-id>" }` to open a created or
+existing board before authoring. Verify the returned `activeBoardId`; opening
+switches the shared visible workbench and all subsequent write targets, not
+just this agent's context. `id: null` opens Home. Deletion stays human-only.
+
 `canvas_ax_gate` takes **two** discriminators, `{ kind, action }` — e.g.
 `{ kind: "approval", action: "request", title }`,
 `{ kind: "elicitation", action: "resolve", id, response }`,

package/skills/pmx-canvas/references/github-copilot-app-adapter.md

@@ -53,6 +53,12 @@ canvas writes — which reach the server as MCP or HTTP tool calls, not as `copi
 to that session by the server. Nothing to configure; `GET /api/canvas/ax/presence` shows the live
 state.
 
+Read presence before starting board work. Reuse the extension's `copilot` session and
+steering consumer; do not attach a second session such as “Copilot – team overview” with
+a new source or `agentId`. Send task names as `detail` on `source: "copilot"`, preserving
+the host's identity and polling route. The adapter owns attach/detach; the agent must not
+end it after each task. Explicit agent IDs are reserved for genuinely independent subagents.
+
 ## What the Adapter Does
 
 - Opens the live PMX workbench directly in a native Copilot canvas panel.
@@ -138,14 +144,22 @@ Default discovery order:
 3. `PMX_CANVAS_PORT` / `PMX_WEB_CANVAS_PORT` / `4313` on loopback.
 4. Managed server startup for the current workspace when `autoStart` is not `false`.
 
-The adapter rejects an unrelated running PMX server unless `serverUrl` is explicit or
-`allowWorkspaceMismatch` is true.
+The adapter rejects an unrelated running PMX server unless `allowWorkspaceMismatch` is true,
+including when `serverUrl` is explicit.
+
+If discovery fails, the panel shows a connection page, not a partial workbench. It checks the
+original target automatically; **Check connection** retries immediately and **Start server**
+explicitly allows local startup even if `autoStart` was disabled. After recovery it navigates
+to the server's real `/workbench`, with Home and recent boards. Adapter actions keep using that
+server and refuse writes if its workspace changes. Reopen the canvas explicitly to select a
+different target. The fallback shell's own `/health` or `/api/canvas/boards` returning 404 is
+expected: the shell is not a PMX API proxy.
 
 ## Actions
 
 | Action | Purpose |
 |---|---|
-| `status` | Return PMX server health and persisted AX state. |
+| `status` | Return PMX server health and persisted AX state, excluding serialized node context (`includeContext=false`). |
 | `get_ax_context` | Return current pinned + focused AX context. |
 | `focus_nodes` | Set AX focus with `source: "copilot"`. |
 | `send_instruction` | Send an explicit prompt into the active Copilot session. |

package/skills/pmx-canvas/references/installing-pmx-canvas.md

@@ -4,7 +4,7 @@ Use this reference when the `pmx-canvas` skill is installed but the `pmx-canvas`
 
 ## Prerequisites and version
 
-The examples pin **PMX Canvas 0.7.1**, which requires **Bun >=1.4.2** even when
+The examples pin **PMX Canvas 0.7.2**, which requires **Bun >=1.4.2** even when
 installed through npm: the CLI runs through Bun, not Node. Check `bun --version`
 first. If missing or older, follow the [Bun installation instructions](https://bun.sh/docs/installation)
 with the user's authorization. Ensure Bun is on the MCP host's PATH as well as the
@@ -17,11 +17,11 @@ in `SKILL.md`. Do not pair newer checkout guidance with an older runtime unknowi
 ## Install from npm
 
 ```bash
-npm install -g pmx-canvas@0.7.1
+npm install -g pmx-canvas@0.7.2
 pmx-canvas --version
 ```
 
-Without a global install, use `bunx pmx-canvas@0.7.1` in place of `pmx-canvas` in
+Without a global install, use `bunx pmx-canvas@0.7.2` in place of `pmx-canvas` in
 the commands below. Do not use unpinned `bunx pmx-canvas` for a version-specific check.
 
 ## Choose the workspace and target
@@ -91,7 +91,7 @@ discards empty env values, remove `PMX_CANVAS_URL` from its launch environment i
   "mcpServers": {
     "canvas": {
       "command": "bunx",
-      "args": ["pmx-canvas@0.7.1", "--mcp"],
+      "args": ["pmx-canvas@0.7.2", "--mcp"],
       "env": {
         "PMX_CANVAS_WORKSPACE_ROOT": "/absolute/path/to/project",
         "PMX_CANVAS_PORT": "14313",

package/src/cli/commands/backup.ts

@@ -12,12 +12,23 @@ import {
   showCommandHelp,
 } from '../shared.js';
 
+function backupArgs(command: string, args: string[], supported: string[]) {
+  const parsed = parseFlags(args, { boolFlags: ['off'] });
+  const allowed = new Set(['help', 'h', ...supported]);
+  const unknown = Object.keys(parsed.flags).find((flag) => !allowed.has(flag));
+  if (unknown) die(`Unknown ${command} flag: --${unknown}`, `Run: pmx-canvas ${command} --help`);
+  for (const name of ['to', 'keep', 'every']) {
+    if (parsed.flags[name] === true) die(`Missing value for --${name}`, `Run: pmx-canvas ${command} --help`);
+  }
+  return parsed;
+}
+
 cmd(
   'backup',
   'Back up every board to a folder (safe while the server runs)',
   ['pmx-canvas backup', 'pmx-canvas backup --to ~/Backups/pmx --keep 14'],
   async (args) => {
-    const { flags } = parseFlags(args);
+    const { flags } = backupArgs('backup', args, ['to', 'keep']);
     if (flags.help || flags.h) return showCommandHelp('backup');
     const to = getStringFlag(flags, 'to');
     const keep = optionalNumberFlag(flags, 'keep', 'pmx-canvas backup --keep <n>');
@@ -26,7 +37,7 @@ cmd(
 );
 
 cmd('backup status', 'Show the backup folder, schedule and backups', ['pmx-canvas backup status'], async (args) => {
-  const { flags } = parseFlags(args);
+  const { flags } = backupArgs('backup status', args, []);
   if (flags.help || flags.h) return showCommandHelp('backup status');
   output(await invokeOperation('backup.status', {}));
 });
@@ -36,7 +47,7 @@ cmd(
   'Back up on a schedule, run by the server',
   ['pmx-canvas backup schedule --every 24h --keep 14 --to ~/Backups/pmx', 'pmx-canvas backup schedule --off'],
   async (args) => {
-    const { flags } = parseFlags(args);
+    const { flags } = backupArgs('backup schedule', args, ['every', 'off', 'to', 'keep']);
     if (flags.help || flags.h) return showCommandHelp('backup schedule');
     const every = flags.off ? 'off' : getStringFlag(flags, 'every');
     if (!every) die('Usage: pmx-canvas backup schedule --every <30m|24h|7d> [--keep <n>] [--to <folder>] | --off');
@@ -57,7 +68,7 @@ cmd(
   'Replace every board with a backup (the current file is kept as canvas.db.before-restore)',
   ['pmx-canvas restore ~/Backups/pmx/canvas-20260927T090000000Z.db'],
   async (args) => {
-    const { positional, flags } = parseFlags(args);
+    const { positional, flags } = backupArgs('restore', args, []);
     if (flags.help || flags.h) return showCommandHelp('restore');
     const file = positional[0];
     if (!file) die('Usage: pmx-canvas restore <backup-file>');

package/src/cli/commands/boards.ts

@@ -1,5 +1,4 @@
-// Board commands (plan 012): board list, board create, board rename, board category.
-// Opening, switching and deleting boards is the human's, in the workbench.
+// Board commands. Opening changes the shared workbench; deletion remains human-only.
 
 import { cmd, die, getStringFlag, invokeOperation, output, parseFlags, showCommandHelp } from '../shared.js';
 
@@ -9,6 +8,20 @@ cmd('board list', 'List boards, most recently opened first', ['pmx-canvas board
   output(await invokeOperation('board.list', {}));
 });
 
+cmd(
+  'board open',
+  'Open a board in the shared workbench, or return Home with --home',
+  ['pmx-canvas board open <board-id>', 'pmx-canvas board open --home'],
+  async (args) => {
+    const { positional, flags } = parseFlags(args, { boolFlags: ['home'] });
+    if (flags.help || flags.h) return showCommandHelp('board open');
+    if (positional.length > 1 || (flags.home ? positional.length !== 0 : !positional[0])) {
+      die('Usage: pmx-canvas board open <board-id> | --home');
+    }
+    output(await invokeOperation('board.open', { id: flags.home ? null : positional[0] }));
+  },
+);
+
 cmd(
   'board from',
   'Preview or create a board from selected cards on another board',
@@ -35,7 +48,7 @@ cmd(
 
 cmd(
   'board create',
-  'Create an empty board (the human opens it in the workbench)',
+  'Create an empty board (use board open with its returned id before writing)',
   ['pmx-canvas board create "Q4 planning"', 'pmx-canvas board create "Q4 planning" --category Planning'],
   async (args) => {
     const { positional, flags } = parseFlags(args);

package/src/client/canvas/AttentionHistory.tsx

@@ -5,6 +5,7 @@ import {
   closeAttentionHistory,
   openAttentionHistory,
 } from '../state/attention-store';
+import { IconClose } from '../icons';
 
 function formatTimestamp(timestamp: number): string {
   return new Date(timestamp).toLocaleTimeString([], {
@@ -73,7 +74,7 @@ export function AttentionHistory() {
           aria-label="Collapse changes panel"
           title="Collapse"
         >
-          ×
+          <IconClose />
         </button>
       </div>
       <div class="attention-history-list">

package/src/client/canvas/BoardSwitcher.tsx

@@ -1,7 +1,7 @@
 import { render, type VNode } from 'preact';
 import { useLayoutEffect, useMemo, useRef, useState } from 'preact/hooks';
 import { activeBoard, activeBoardId, boardList, boardsLoaded, openBoard } from '../state/boards-store';
-import { IconLogo, IconArrange } from '../icons';
+import { IconLogo, IconArrange, IconChevronDown, IconPlus } from '../icons';
 import { promptNewBoard } from './HomeView';
 
 const RECENT_LIMIT = 8;
@@ -76,7 +76,7 @@ export function BoardSwitcher({ fallbackName }: { fallbackName: string }) {
       >
         <span class="board-switcher-name">{label}</span>
         <span class="board-switcher-caret" aria-hidden="true">
-          ▾
+          <IconChevronDown />
         </span>
       </button>
       {open && anchor && (
@@ -130,7 +130,7 @@ export function BoardSwitcher({ fallbackName }: { fallbackName: string }) {
                 }}
               >
                 <span class="board-switcher-icon" aria-hidden="true">
-                  +
+                  <IconPlus size={18} />
                 </span>
                 New board…
               </button>

package/src/client/canvas/CanvasNode.tsx

@@ -38,7 +38,16 @@ import { KIND_COLOR } from './kind-colors';
 import { reportHumanGrab, takeOverNode, yieldedNodes } from '../state/human-store';
 import { AxStepControls } from '../nodes/AxStepControls';
 import { canOpenAsSite, openNodeAsSite } from '../nodes/surface-url';
-import { getNodeIcon } from '../icons';
+import {
+  getNodeIcon,
+  IconChevronRight,
+  IconChevronDown,
+  IconClose,
+  IconMore,
+  IconExternalLink,
+  IconExpand,
+  IconSparkle,
+} from '../icons';
 import { EXPANDABLE_TYPES, TYPE_LABELS } from '../types';
 import type { CanvasNodeState } from '../types';
 import { AUTO_FIT_TITLEBAR_HEIGHT, computeAutoFitHeight, shouldAutoFitNode } from './auto-fit';
@@ -472,7 +481,7 @@ export function CanvasNode({ node, children, onContextMenu }: CanvasNodeProps) {
               toggleCollapsed(node.id);
             }}
           >
-            ▸
+            <IconChevronRight size={14} />
           </button>
           <div class="group-chip-text">
             <div class="group-chip-name">{title}</div>
@@ -591,7 +600,7 @@ export function CanvasNode({ node, children, onContextMenu }: CanvasNodeProps) {
                 setGroupMenuOpen((open) => !open);
               }}
             >
-              ⋯
+              <IconMore size={14} />
             </button>
             {groupMenuOpen && (
               <div class="group-menu" role="menu" onPointerDown={(e) => e.stopPropagation()}>
@@ -683,7 +692,7 @@ export function CanvasNode({ node, children, onContextMenu }: CanvasNodeProps) {
               }}
               title={isContextPinned ? 'Remove from context' : 'Add to context'}
             >
-              {'\u2726'}
+              <IconSparkle size={14} />
             </button>
             {/* Open as site — full-page standalone view of this node's surface,
               served from /api/canvas/surface/:id (same document as the canvas
@@ -698,7 +707,7 @@ export function CanvasNode({ node, children, onContextMenu }: CanvasNodeProps) {
                 }}
                 title="Open as site"
               >
-                ↗
+                <IconExternalLink size={14} />
               </button>
             )}
             {/* Expand — opens node as full-viewport overlay for focused work */}
@@ -711,7 +720,7 @@ export function CanvasNode({ node, children, onContextMenu }: CanvasNodeProps) {
                 }}
                 title="Expand (focus mode)"
               >
-                ⤢
+                <IconExpand size={14} />
               </button>
             )}
             <button
@@ -722,7 +731,7 @@ export function CanvasNode({ node, children, onContextMenu }: CanvasNodeProps) {
               }}
               title={node.collapsed ? 'Expand' : 'Collapse'}
             >
-              {node.collapsed ? '▸' : '▾'}
+              {node.collapsed ? <IconChevronRight size={14} /> : <IconChevronDown size={14} />}
             </button>
             {/* Report #64: status nodes get the same remove control as every other
               node type (backend removal + undo/history handle status uniformly). */}
@@ -734,7 +743,7 @@ export function CanvasNode({ node, children, onContextMenu }: CanvasNodeProps) {
               }}
               title="Close"
             >
-              ×
+              <IconClose size={14} />
             </button>
           </div>
         </div>