pmx-canvas 0.9.1 → 0.9.3

package/dist/types/client/canvas/submit-without-navigation.d.ts

@@ -0,0 +1,3 @@
+import type { JSX } from 'preact';
+/** A scripts-only host blocks native submission before onSubmit can run. */
+export declare function submitWithoutNavigation(event: JSX.TargetedMouseEvent<HTMLFormElement>): void;

package/dist/types/client/state/intent-bridge.d.ts

@@ -1,4 +1,3 @@
-import type { AgentPresenceSnapshot } from '../../shared/agent-presence.js';
 import type { CanvasNodeState } from '../types';
 /**
  * Per-tab identity: an AGENT driving the workbench UI from its own pane opens
@@ -156,8 +155,6 @@ export interface AxInteractionResponse {
 }
 /** Fetch the compact AX state snapshot pushed into AX-enabled surfaces. */
 export declare function fetchAxSurfaceState(): Promise<unknown>;
-/** Connect-time agent-presence read; live updates arrive as `agent-presence` SSE frames. */
-export declare function fetchAgentPresence(): Promise<Partial<AgentPresenceSnapshot> | null>;
 /** Ask the server to open a node's surface in the system browser. */
 export declare function openNodeInSystemBrowserRequest(nodeId: string, url?: string): Promise<{
     ok: boolean;

package/dist/types/client/state/presence-store.d.ts

@@ -1,9 +1,9 @@
 import type { PmxAxIntent } from '../../shared/ax-intent.js';
 import { type AgentActivityEntry, type AgentPresence, type AgentPresenceSnapshot } from '../../shared/agent-presence.js';
 /**
- * Agent presence (rail-chrome-v2 phase 2). Fed by the server's `agent-presence`
- * SSE snapshot (every change, including TTL expiry) and the connect-time read,
- * so this store never runs its own expiry ticker.
+ * Agent presence (rail-chrome-v2 phase 2). Fed by the server's ordered
+ * `agent-presence` frames: a connect snapshot and every change, including TTL
+ * expiry, over SSE or polling. This store never runs its own expiry ticker.
  *
  * `sessionActive` is the ONE selector every agent surface reads — the session
  * panel, command bar, presence layer, and top-bar chip all mount on it.

package/dist/types/client/types.d.ts

@@ -75,7 +75,7 @@ export type AnnotationTool = 'pen' | 'eraser' | 'text' | null;
 export type ConnectionStatus = 'connecting' | 'connected' | 'disconnected';
 export declare const TYPE_LABELS: Record<CanvasNodeState['type'], string>;
 /** Node types that support the full-viewport expand/focus overlay. */
-export declare const EXPANDABLE_TYPES: Set<"image" | "board" | "file" | "markdown" | "mcp-app" | "webpage" | "json-render" | "graph" | "prompt" | "response" | "status" | "context" | "ledger" | "trace" | "diff" | "mermaid" | "html" | "group">;
+export declare const EXPANDABLE_TYPES: Set<"board" | "image" | "file" | "markdown" | "mcp-app" | "webpage" | "json-render" | "graph" | "prompt" | "response" | "status" | "context" | "ledger" | "trace" | "diff" | "mermaid" | "html" | "group">;
 export declare const EXCALIDRAW_SERVER_NAME = "Excalidraw";
 export declare const EXCALIDRAW_CREATE_VIEW_TOOL = "create_view";
 export declare function isExcalidrawNode(node: CanvasNodeState): boolean;

package/dist/types/server/canvas-state.d.ts

@@ -432,6 +432,8 @@ declare class CanvasStateManager {
     updateNode(id: string, patch: Partial<CanvasNodeState>, savedWikiLinks?: WikiLink[] | null): void;
     removeNode(id: string): void;
     getNode(id: string): CanvasNodeState | undefined;
+    /** Camera targets need geometry, not hydrated documents, frames or image blobs. */
+    nodeGeometry(): Array<Pick<CanvasNodeState, 'id' | 'type' | 'position' | 'size'>>;
     /** Who made and last edited each card, and its content revision — no content, no copies. */
     nodeStamps(): Array<Pick<CanvasNodeState, 'id' | 'createdBy' | 'lastEditedBy' | 'contentRevision'>>;
     getNodeForPersistence(id: string): CanvasNodeState | undefined;

package/dist/types/server/index.d.ts

@@ -1,5 +1,5 @@
 import { EventEmitter } from 'node:events';
-import { type Camera, type Tour, type TourStop } from '../shared/tour.js';
+import type { Camera, Tour, TourStop } from '../shared/tour.js';
 import { type TourStep, type TourStepResult } from './tour-control.js';
 export type { Tour, TourStop } from '../shared/tour.js';
 export type { TourStep, TourStepResult } from './tour-control.js';
@@ -22,7 +22,7 @@ import type { HtmlPrimitiveKind } from './html-primitives.js';
 import { type WebArtifactBuildInput, type WebArtifactCanvasBuildResult } from './web-artifacts.js';
 import { type ExternalMcpTransportConfig } from './mcp-app-runtime.js';
 import type { DiagramPresetOpenInput } from './diagram-presets.js';
-import { type GraphNodeInput, type JsonRenderNodeInput, type JsonRenderSpec } from '../json-render/server.js';
+import type { GraphNodeInput, JsonRenderNodeInput, JsonRenderSpec } from '../json-render/server.js';
 import type { CanvasAutomationWebViewOptions, CanvasAutomationWebViewStatus } from './server.js';
 /**
  * Node object returned by the SDK's create/get methods. It is the fully

package/dist/types/server/knowledge-lifecycle.d.ts

@@ -1,5 +1,6 @@
 import type { Database } from 'bun:sqlite';
 import { z } from 'zod';
+import { type MemoryTarget } from '../shared/memory-graph.js';
 import { type ActorAttribution } from './attribution.js';
 import type { LifecycleQualification } from '../shared/lifecycle-status.js';
 import type { CanvasNodeState } from './canvas-state.js';
@@ -182,7 +183,7 @@ export declare class KnowledgeLifecycle {
             cadenceDays?: number | undefined;
         } | null;
         lifecycleSourceFolder: string | null;
-        lifecycleSource: "unknown" | "card" | "folder";
+        lifecycleSource: "card" | "unknown" | "folder";
     };
     resolveCard(folderPath: string | null, node: Pick<CanvasNodeState, 'type' | 'data'>, catalog?: {
         categories: KnowledgeCategory[];
@@ -208,8 +209,16 @@ export declare class KnowledgeLifecycle {
             cadenceDays?: number | undefined;
         } | null;
         lifecycleSourceFolder: string | null;
-        lifecycleSource: "unknown" | "card" | "folder";
+        lifecycleSource: "card" | "unknown" | "folder";
     };
+    private indexedDb;
+    /** Stored owners of semantic sources; the caller overlays the active board's unsaved edges. */
+    incomingSourceBoards(target: MemoryTarget, activeBoardId: string | null): string[];
+    /** One indexed latest validation and retirement per card, never its full audit history. */
+    reviewSummaries(targets: MemoryTarget[]): Map<string, {
+        lastValidation: ReviewRecord | null;
+        retired: boolean;
+    }>;
     reviews(boardId: string, nodeId: string): {
         records: ReviewRecord[];
         retired: boolean;

package/dist/types/server/lifecycle-status.d.ts

@@ -3,8 +3,10 @@ import type { LifecycleQualification } from '../shared/lifecycle-status.js';
 import type { ReviewCardSummary } from './knowledge-lifecycle.js';
 /** A read-only qualification, shared by briefs, search, Home and card review. No clock is renewed. */
 export declare function lifecycleQualifications(now?: number, atUse?: MemoryTarget[]): Record<string, LifecycleQualification>;
+/** A card being inspected is in use, including its transitive sources and portal contents. */
+export declare function lifecycleQualification(target: MemoryTarget, now?: number): LifecycleQualification | undefined;
 /** Compact queue metadata and qualifications come from the same authoritative read. */
-export declare function lifecycleSnapshot(now?: number, atUse?: MemoryTarget[]): {
+export declare function lifecycleSnapshot(now?: number, atUse?: MemoryTarget[], only?: MemoryTarget): {
     cards: Record<string, LifecycleQualification>;
     reviewCards: ReviewCardSummary[];
 };

package/dist/types/server/tour-control.d.ts

@@ -15,9 +15,12 @@ export interface TourStepResult {
     total: number;
     stop: TourStop;
 }
-export declare function currentTour(): Tour;
-/** The stop the tour is on for the active board, or null when not touring. */
-export declare function tourPosition(tour?: Tour): number | null;
+export interface TourState {
+    tour: Tour;
+    derived: boolean;
+    position: number | null;
+}
+export declare function currentTour(): TourState;
 /** Move the shared cursor. `next`/`previous` clamp at the ends; an explicit index must exist. */
 export declare function goToTourStop(step: TourStep): TourStepResult;
 export declare function exitTour(): void;

package/docs/bun-webview-integration.md

@@ -12,7 +12,7 @@ This document tracks:
 
 **Implemented** for Phase 1.
 
-The repo now targets Bun `>=1.4.2`, and PMX Canvas ships an opt-in, server-owned WebView automation session that can:
+The repo now targets Bun `>=1.4.4`, and PMX Canvas ships an opt-in, server-owned WebView automation session that can:
 
 - start a headless browser session for `/workbench`
 - report WebView runtime status
@@ -192,7 +192,7 @@ If `chromePath` or `chromeArgv` is provided, PMX Canvas forces a Chrome-backed s
 
 The repo now requires:
 
-- Bun `>=1.4.2`
+- Bun `>=1.4.4`
 
 That change is reflected in:
 

package/docs/cli.md

@@ -99,7 +99,8 @@ offset mid-move without changing endpoints. Tours allow at most 1000 stops.
 Tours persist with the board and snapshots, participate in undo, and clear with
 the board. A file containing `null` resets the tour: when none is saved, groups
 are sorted by y, then x, then ID. A saved empty `stops` array deliberately has no
-stops. SDK: `canvas.setTour(tourOrNull)` / `canvas.getTour()`.
+stops. SDK: `canvas.setTour(tourOrNull)` / `canvas.getTour()`, which returns
+the tour directly; read stops from `.stops`.
 
 ### Driving a tour (agents)
 
@@ -593,6 +594,14 @@ pmx-canvas copilot install-extension --dry-run   # Preview target, writes nothin
 pmx-canvas copilot install-extension --yes        # Install/overwrite into .github/extensions/pmx-canvas/
 ```
 
+After updating the adapter, start a new Copilot project session to load it.
+Panel instructions, `send_instruction` and canvas steering request the SDK's
+`immediate` mode: during an active turn, Copilot receives them before its next
+model call, without aborting an executing tool. If the turn has already ended,
+the SDK queues the instruction instead. A successful send means the host accepted
+the instruction, not that the model has consumed it. Failed sends are not marked
+delivered; the delivery pump retries them.
+
 ## Skill sync
 
 Refresh the pmx-canvas skill copies **already installed** in this workspace.

package/docs/design/Chrome.dc.html

@@ -125,6 +125,7 @@ body{margin:0}
 <div style="height: 350px; display: flex; flex-direction: column; border: 1px solid #1b2c44; border-radius: 14px; overflow: hidden; background: #0f1d31">
 <div style="flex-shrink: 0; height: 46px; display: flex; align-items: center; gap: 10px; padding: 0 16px; border-bottom: 1px solid #1b2c44; font-size: 13px; font-weight: 600">Research index <span style="margin-left: auto; font-size: 12px; font-weight: 400">Relations</span><span style="margin-left: 12px">×</span></div>
 <div style="flex: 1; min-height: 0; overflow: auto; padding: 16px; font-size: 13px; color: #b9c6d6">Read and edit the source here. Actual edits finish saving before a reference opens; a refused save keeps this reader and its draft.</div>
+<button style="flex-shrink: 0; align-self: flex-end; margin: 16px; padding: 8px 18px; border: 1px solid #1b2c44; border-radius: 6px; font: 600 13px 'IBM Plex Sans', sans-serif; background: #13243b; color: #8ea3bd">&lt;/&gt; Source</button>
 <div role="region" aria-label="Cross-board references" tabindex="0" style="flex-shrink: 0; max-height: min(40%, 132px); overflow: auto; overscroll-behavior: contain">
 <div style="padding: 6px 12px; border-top: 1px solid #1b2c44; font-size: 12px; color: #b9c6d6">↗ references: Research / Interview notes</div>
 <div style="padding: 6px 12px; border-top: 1px solid #1b2c44; font-size: 12px; color: #b9c6d6">↗ references: Research / Findings</div>

package/docs/design.md

@@ -504,7 +504,9 @@ retain their hit targets. Grab areas yield to every card, including neighboring
 but outrank connection labels and lines. Group interiors still select and open their menus,
 below child ports and labels; the frames and labels keep their existing visual stacking.
 Expanded flow documents put Source in a separate row above the reader, clear of the
-bottom dock's action hints; ordinary documents keep their bottom-right Source button.
+bottom dock's action hints. Ordinary documents keep Source at the bottom right in a
+reserved row below the scroll viewport, so it cannot cover text at narrow widths
+or intermediate scroll positions (0.9.2 review follow-up, 2026-10-24).
 Hovering a flow action temporarily
 hides another action's keyboard hint without moving focus; leaving restores the focused hint.
 Card checkbox clicks address parsed Markdown tasks, not fenced/indented examples or raw

package/docs/mcp.md

@@ -57,7 +57,7 @@ on its source board. It appears as a `portal` edge in `canvas://graph`, independ
 
 ## Board tours
 
-`canvas_view { action: "get-tour" }` returns `{ tour, derived }`, using group
+`canvas_view { action: "get-tour" }` returns `{ tour, derived, position }`, using group
 reading order when there is no saved tour. `canvas_view { action: "set-tour",
 tour: { stops: [...] } }` persists an ordered tour; `tour: null` resets it.
 `canvas_view { action: "tour-go", stop: 0 }` (or `step: "next" | "previous"`)
@@ -170,6 +170,10 @@ in the user's browser. Standalone Markdown edits carry captured board/content
 revisions; a refused save keeps the current editor draft. Copy that draft before
 closing the editor or switching boards; unsaved drafts do not survive remounts.
 
+Knowledge review, categories, relation presets and board-copy forms handle saves
+in JavaScript, including Enter and input validation. They do not require the
+outer host to grant `allow-forms`; the SDK test host keeps `sandbox="allow-scripts"`.
+
 **Host constraints still apply.** Native PMX controls work without child frames.
 HTML, Mermaid, JSON/graph and nested app renderers need the host to permit local
 `srcdoc` frames. The portable MCP Apps default with empty `frameDomains` is

package/docs/node-types.md

@@ -77,6 +77,9 @@ Tick a task directly on its card, including quoted and nested tasks. A card clic
 only that task's `[ ]` or `[x]` marker, preserving the rest of the source exactly.
 Task-shaped text in code examples and raw HTML checkboxes are not Markdown task controls.
 
+Expand a Markdown card to read and edit the full document. Source stays outside the
+scrolling text, below ordinary documents and above documents with flow actions.
+
 ## File nodes
 
 File nodes display project files with line numbers and language detection.

package/docs/plans/plan-019-post-0.9-roadmap.md

@@ -1,10 +1,11 @@
 # Plan 019: After 0.9.0
 
-**Status (2026-10-19):** proposed sequence, agreed in direction with the maintainer. Nothing
-here is started. 0.9.0 itself (the CHANGELOG's Unreleased section) still needs the owner's
-acceptance and release approval; this plan begins once it ships. Version numbers below are
-proposals, not assignments; each release still needs explicit approval and the
-[release gates](../RELEASE.md).
+**Status (2026-10-24):** 0.9.0–0.9.2 are released. The maintainer authorized review,
+testing and release of the patch-only 0.9.3 cleanup after the prerequisite fixes reached
+`origin/main` at `bed57fe9a4b79bd54f8b5ee51cefd65fec3dbe1a`. The SDK tour return shape
+stays unchanged. MCP hardening and SDK tour result parity move to 0.10 on SDK v1.
+Later version numbers are proposals, not publication approval; every release must pass
+the [release gates](../RELEASE.md).
 **Sources:** [product vision](../product-vision-2026-09.md) (moves and the 2026-10-19 sequence),
 [design.md build plan](../design.md#build-plan) (Waves 4, 5, Later),
 [plan 009](plan-009-tech-debt-backlog.md) (open debt),
@@ -21,7 +22,7 @@ measured; the maintainer carries that risk rather than reinstating an earlier ga
 
 | Step | Proposed version | Scope | Vision | Size |
 |---|---|---|---|---|
-| 1 | 0.9.1 | Cleanup: tour debt, large-board costs, bounded due evaluator, MCP reconnect, lint | 12, 1 | S–M |
+| 1 | 0.9.3 | Cleanup: tour debt, large-board costs, bounded due evaluator, MCP reconnect, lint | 12, 1 | S–M |
 | 2 | 0.10 | MCP hardening: contracts, annotations, cancellation, resource subscriptions | 6a, 1 | M |
 | 3 | 0.11 | One frame host, portal-layer mount, Wave-0 design pass | 5, 9 | M–L |
 | 4 | 0.12 | Wave 5: agent output as nodes, make/inline board, group drill-in, relations sketch parity | 3, 0 | L |
@@ -31,10 +32,66 @@ measured; the maintainer carries that risk rather than reinstating an earlier ga
 Each step starts after the previous release ships, except that a concrete defect found in
 use can be fixed narrowly in a patch release without pulling later scope forward.
 
-## Step 1: 0.9.1 cleanup
+## Step 1: 0.9.3 cleanup
 
 Debt deliberately kept out of 0.9.0, plus measured performance leads.
 
+**Local checkpoint, 2026-10-24 (not release approval):**
+- Camera moves now persist only the viewport. A headed browser regression failed on the
+  baseline's two full-card geometry writes, then passed without them; the complete seven-case
+  presentation/recording file passes. Both camera paths use one animation driver while retaining
+  their existing interpolation. Tour resolution reads geometry without hydrating card contents.
+- Tour reads share one result builder. HTTP and MCP return `{ tour, derived, position }`;
+  the SDK preserves its existing direct tour result (`.stops`). Result-shape parity is
+  deferred to 0.10 because changing the SDK to `.tour.stops` breaks callers.
+- `bun run scripts/probe-mcp-reconnect.ts` opened 12 local stdio fixture apps concurrently,
+  then restored them through five server restarts and queried every replacement session's live
+  tool catalog. All 60 restored sessions passed, with no `-32001` timeout. The native-host/remote
+  backend failure remains open; this probe is not evidence that it is fixed.
+- Saved Markdown skips unused reference parsing; saved targets, unresolved links, drafts and
+  inline images retain their behavior. The measurements below leave serialization, offscreen
+  rendering and SSE unchanged because each needs a separate contract or lifecycle decision.
+- Lifecycle-get, node-get and review qualification use the dependency/portal closure, including
+  incoming cross-board sources and unsaved active-board edges. Latest evidence and retirement
+  summaries use indexed queries; requested audit history remains complete. Home counts are
+  unchanged. **Deferred:** aggregate-only Home reads, per-card storage reads within closure boards,
+  and whole-library mutation broadcasts. The current Home client consumes `knowledge.list.cards`.
+- Lint passes with 55 warnings and 12 infos, down from 63 warnings and 12 infos. Eight unused
+  import diagnostics were removed in the touched SDK module. Remaining diagnostics are listed below.
+- Combined checkout verification passed: `bun run build`, `bun run typecheck`, `bun run test`
+  (1,503 tests), `bun run test:client` (332 tests), and
+  `xvfb-run -a bash scripts/run-playwright.sh --headed` (333 tests). The final node-get
+  integration assertion also passed its 32-case relation suite, typecheck and lint. The inspected
+  tour recording shows both stops and the restored editor after exit. These are local source
+  checks, not release smoke, CI, installed-adapter or native-host verification. The patch-only
+  decision is settled; release gates are being run against the final 0.9.3 candidate.
+
+**Reproducible measurements (local Bun 1.4.4, synthetic data):**
+
+| Workload and command | Before | After | Limits |
+|---|---|---|---|
+| 12 Markdown cards, five decodable 400×300 PNGs, 2,459,314 source bytes; `bun run scripts/benchmark-markdown-load.ts --browser --expect-no-reference-lex` | 24 extra reference parses scanning 4,918,628 bytes | Zero extra reference parses; all 12 normalized HTML hashes match | Three warmups and nine HTTP samples; headed Chromium at 1440×900, 2×, one warmup and three reloads. Timing varied on the shared orb, so no board-load speedup claim |
+| Same Markdown board, public state serialization | 4,927,936 bytes | Unchanged | 2,460,294 bytes are duplicated top-level content; removing that alias is only a counterfactual measurement |
+| Same Markdown board, offscreen rendering | Six offscreen POSTs, 508,608 source bytes | Unchanged | All 12 cards render; all five images decode |
+| Same Markdown board, one-character edit | First layout SSE frame: 2,466,713 bytes, 12 nodes | Unchanged | First frame only, not total event traffic |
+| 12 boards × 24 cards × 32 reviews; `bun run scripts/benchmark-lifecycle.ts` | 13 board reads and 9,248 full-history records per request | Two board reads and 32 records per request | One independent inactive-card request; all 32 requested audit records returned. Closure boards still load whole board bodies |
+| Same lifecycle workload, warm medians from three independent runs | 16.016 / 14.938 / 16.648 ms | 0.832 / 1.101 / 0.609 ms | Five warmups and 20 samples per run. First request initializes indexes and was not consistently faster; no cold-start claim |
+
+Remove `--expect-no-reference-lex` when running the Markdown script against the baseline.
+Both benchmarks isolate their databases in disposable workspaces. Dependency-heavy lifecycle
+behavior is covered by cycle, provenance, missing-source and cross-board tests, not this timing workload.
+
+**Remaining lint diagnostics:** `bunx --no-install biome check . --max-diagnostics=200`
+lists the exact locations. These remain outside the narrow behavioral fixes:
+
+| Diagnostics | Count | Reason retained |
+|---|---:|---|
+| Unused imports / variables / parameters / private members | 11 / 8 / 6 / 1 | Spread across unrelated client, server and test modules; remove with their owning cleanup |
+| Optional-chain suggestions | 23 | Existing style suggestions, including untouched regions of changed files |
+| Literal template placeholders | 3 | Tests intentionally exercise literal `${…}` text |
+| Global `isNaN`, confusing `void`, comma operator | 1 each | Existing chart coercion, frame callback and presence expressions need individual semantic review |
+| Infos: template strings / switch cases / index lookup / config deprecation | 6 / 3 / 2 / 1 | Non-gating style/config follow-up, no rule disabled |
+
 - **Tour debt** ([vision move 12](../product-vision-2026-09.md#12-tours-the-board-is-the-presentation-m)):
   a tour camera move saves every node's layout (`commitViewport` → `persistLayout` from the SSE
   camera handler) and re-reads the whole layout (`tour-control.ts`); `animateCameraPath`
@@ -55,8 +112,8 @@ Debt deliberately kept out of 0.9.0, plus measured performance leads.
 **Done when**
 - A tour step changes the viewport and writes no node layout: a test asserts the intended
   viewport change and that no layout-persistence write occurs during `tour go`/`next`
-  (unchanged positions alone would also pass a needless identical rewrite). SDK, HTTP and MCP
-  return the same tour shape, including position. One camera-animation path remains.
+  (unchanged positions alone would also pass a needless identical rewrite). The SDK keeps its
+  existing tour shape; result-shape parity moves to step 2. One camera-animation path remains.
 - Each WI-01 amplifier has a reproducible measurement script and a before/after number on the
   same workload, per the measurement rules in `CLAUDE.md`; unimplicated ones are recorded, not changed.
 - A one-card lifecycle request on a board with populated review histories reads only its
@@ -77,6 +134,8 @@ and move 1's context delivery, on the current SDK v1.
    for long operations where the host supports it; partial outcomes reported honestly.
 5. Resource subscriptions: advertise the capability, track subscribed URIs per connection,
    notify only subscribers. Explicit context reads keep working for hosts without them.
+6. Align SDK tour reads with HTTP/MCP `{ tour, derived, position }`; document the breaking
+   change from `.stops` to `.tour.stops` at this minor-version boundary.
 
 Candidates, not automatic scope: `canvas_help { op }`, `session.start`, per-action schemas.
 

package/docs/sdk.md

@@ -36,6 +36,13 @@ Missing/stale validating preconditions fail. Reviewed content must persist befor
 record. Read, edit, refresh and explicit retirement restore never renew validation; historical
 records retain their reviewed revision, and legacy unversioned evidence remains unknown.
 
+## Board tours
+
+`canvas.getTour()` returns the tour directly. Read stops from `canvas.getTour().stops`.
+When no tour is saved, stops come from group reading order.
+`canvas.setTour(tourOrNull)` saves the tour or resets it to derived group order.
+See the [tour contract](http-api.md#board-tours) for navigation and camera moves.
+
 ## Quick example
 
 `canvas.addNode` also accepts `destinationBoardId`, `requestId`, and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmx-canvas",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "Spatial canvas workbench for coding agents — infinite 2D canvas with agent-native CLI, MCP integration, nodes, edges, file watching, and snapshots",
   "type": "module",
   "main": "./src/server/index.ts",
@@ -123,6 +123,6 @@
   },
   "homepage": "https://github.com/pskoett/pmx-canvas#readme",
   "engines": {
-    "bun": ">=1.4.2"
+    "bun": ">=1.4.4"
   }
 }

package/plugins/pmx-canvas/com.github.copilot/extensions/pmx-canvas/extension.mjs

@@ -312,7 +312,11 @@ async function startPanelServer(instanceId, ctx, pmx) {
                     jsonResponse(res, 400, { ok: false, error: "prompt is required" });
                     return;
                 }
-                await copilotSession?.send({ prompt: body.prompt });
+                if (!copilotSession) {
+                    jsonResponse(res, 503, { ok: false, error: "Copilot session is unavailable." });
+                    return;
+                }
+                await copilotSession.send({ prompt: body.prompt, mode: "immediate" });
                 // Explicit user instruction from the panel → mirror onto the AX
                 // timeline as a steering message (fire-and-forget).
                 const target = await verifiedEntryTarget(entry);
@@ -635,7 +639,8 @@ const pmxCanvas = createCanvas({
             handler: async (ctx) => {
                 const prompt = typeof ctx.input?.prompt === "string" ? ctx.input.prompt.trim() : "";
                 if (!prompt) throw new CanvasError("prompt_required", "prompt is required");
-                await copilotSession?.send({ prompt });
+                if (!copilotSession) throw new CanvasError("copilot_unavailable", "Copilot session is unavailable.");
+                await copilotSession.send({ prompt, mode: "immediate" });
                 // Mirror the explicit user instruction onto the AX timeline as a
                 // steering message (fire-and-forget). This is an explicit action
                 // flow, never a sync from the prompt hook.
@@ -867,7 +872,8 @@ sessionWorkspaceRoot = resolve((await copilotSession.rpc.metadata.snapshot()).wo
 steeringDeliveryPump = createSteeringDeliveryPump({
     consumer: "copilot",
     claim: claimCopilotSteering,
-    send: async (message) => await copilotSession.send({ prompt: message }),
+    // The SDK defaults to enqueue; canvas steering must target the active turn.
+    send: async (message) => await copilotSession.send({ prompt: message, mode: "immediate" }),
     mark: markCopilotSteering,
     getPresence: getCopilotPresence,
     setPresence: async (patch) => await postPresence(sessionWorkspaceRoot, patch),

package/plugins/pmx-canvas/com.github.copilot/extensions/pmx-canvas/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.9.1"
+  "version": "0.9.3"
 }

package/plugins/pmx-canvas/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "pmx-canvas",
   "description": "PMX Canvas spatial workbench and MCP tools, with a native canvas panel in the GitHub Copilot app.",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "author": {
     "name": "pskoett",
     "url": "https://github.com/pskoett"

package/plugins/pmx-canvas/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.9.1"
+  "version": "0.9.3"
 }