pmx-canvas 0.9.1 → 0.9.3

package/skills/pmx-canvas/SKILL.md

@@ -106,7 +106,7 @@ for the authoritative stop, viewport, persistence, reset, group-order, and captu
 
 ## Runtime prerequisites
 
-PMX Canvas 0.9.1 requires **Bun >=1.4.2**, including when installed through npm.
+PMX Canvas 0.9.3 requires **Bun >=1.4.4**, including when installed through npm.
 Check `bun --version` and ensure Bun is on the MCP host's PATH, not just your shell's;
 use an absolute executable path if needed. Install/configure only when requested.
 For pinned installation, MCP configuration, managed services, and disposable verification,
@@ -389,9 +389,9 @@ If the documented receipts or warnings are unexpectedly absent, do not guess aro
 payload reads: verify that the CLI/MCP host and daemon use the same 0.7 installation and workspace,
 restart the matching daemon after upgrade, and re-check `/health`.
 
-**Token hygiene.** For routine state checks use `canvas_ax_state { action: "get" }` WITHOUT
-`includeContext` — the full AX context payload is ~10× larger; request it only when you are
-actually consuming context.
+**Token hygiene.** For routine state checks use
+`canvas_ax_state { action: "get", includeContext: false }` to omit the serialized AX context.
+Omitting `includeContext` defaults to `true`; request full context only when actually consuming it.
 
 ## Context Pins
 

package/skills/pmx-canvas/references/github-copilot-app-adapter.md

@@ -4,7 +4,7 @@ Use this reference when PMX Canvas is running inside the GitHub Copilot app as a
 extension. The adapter is intentionally thin: PMX Canvas remains the state owner, and the extension
 maps Copilot SDK features onto PMX AX primitives.
 
-The [standalone agent plugin](../../../docs/agent-plugin.md) bundles this adapter and PMX's
+The [standalone agent plugin](https://github.com/pskoett/pmx-canvas/blob/main/docs/agent-plugin.md) bundles this adapter and PMX's
 MCP launcher. Its native canvas is Copilot-only; other Agent Plugins-compatible clients use
 the portable MCP tools and browser workbench.
 
@@ -125,7 +125,7 @@ imports the Copilot SDK.
 - **Await gates** with `canvas_ax_gate { kind, action: "await", id }` (or surface a native modal
   and await the PMX result) so an approval gate actually blocks the agent until the human resolves it.
 
-See [`docs/ax-host-adapter-contract.md`](../../../docs/ax-host-adapter-contract.md).
+See [`docs/ax-host-adapter-contract.md`](https://github.com/pskoett/pmx-canvas/blob/main/docs/ax-host-adapter-contract.md).
 - Keeps all persistent PMX state in `.pmx-canvas/canvas.db`; the extension does not own canvas
   state.
 

package/skills/pmx-canvas/references/installing-pmx-canvas.md

@@ -4,12 +4,17 @@ Use this reference when the `pmx-canvas` skill is installed but the `pmx-canvas`
 
 ## Prerequisites and version
 
-The examples pin **PMX Canvas 0.9.1**, which requires **Bun >=1.4.2** even when
+The examples pin **PMX Canvas 0.9.3**, which requires **Bun >=1.4.4** even when
 installed through npm: the CLI runs through Bun, not Node. Check `bun --version`
 first. If missing or older, follow the [Bun installation instructions](https://bun.sh/docs/installation)
 with the user's authorization. Ensure Bun is on the MCP host's PATH as well as the
 interactive shell's; use an absolute `bun`/`bunx` executable path if needed.
 
+Bun 1.4.4 fixes the Brotli decoder vulnerability CVE-2026-111497. Updating the
+PMX package does not update Bun; upgrade the runtime and restart existing PMX/MCP
+processes. Development and build tooling should use Node 24.22.1 or a newer patched
+release on a supported Node line.
+
 Install/configure only when requested. After an intentional runtime upgrade, sync the
 skill from that installed package and restart existing server/MCP processes as described
 in `SKILL.md`. Do not pair newer checkout guidance with an older runtime unknowingly.
@@ -17,11 +22,11 @@ in `SKILL.md`. Do not pair newer checkout guidance with an older runtime unknowi
 ## Install from npm
 
 ```bash
-npm install -g pmx-canvas@0.9.1
+npm install -g pmx-canvas@0.9.3
 pmx-canvas --version
 ```
 
-Without a global install, use `bunx pmx-canvas@0.9.1` in place of `pmx-canvas` in
+Without a global install, use `bunx pmx-canvas@0.9.3` in place of `pmx-canvas` in
 the commands below. Do not use unpinned `bunx pmx-canvas` for a version-specific check.
 
 ## Choose the workspace and target
@@ -91,7 +96,7 @@ discards empty env values, remove `PMX_CANVAS_URL` from its launch environment i
   "mcpServers": {
     "canvas": {
       "command": "bunx",
-      "args": ["pmx-canvas@0.9.1", "--mcp"],
+      "args": ["pmx-canvas@0.9.3", "--mcp"],
       "env": {
         "PMX_CANVAS_WORKSPACE_ROOT": "/absolute/path/to/project",
         "PMX_CANVAS_PORT": "14313",
@@ -135,7 +140,7 @@ Amp executes, not only on the user's laptop. Merge this into that workspace's
   "amp.mcpServers": {
     "canvas": {
       "command": "bunx",
-      "args": ["pmx-canvas@0.9.1", "--mcp"],
+      "args": ["pmx-canvas@0.9.3", "--mcp"],
       "includeTools": ["canvas_*"],
       "env": {
         "PMX_CANVAS_WORKSPACE_ROOT": "/absolute/path/to/project",
@@ -169,7 +174,7 @@ The agent must not run this approval itself or move the command to global settin
 `--mcp-config` to bypass workspace trust. Approval authorizes execution of this MCP
 command; it is not a new Canvas import consent or permission to mutate arbitrary boards.
 After approval, reload MCP connections (`reload_mcp` in Amp) and require `connected`.
-Discover `canvas` tools with `tool_search`; for the full unfiltered 0.9.1 server there
+Discover `canvas` tools with `tool_search`; for the full unfiltered 0.9.3 server there
 are 24 tools. If still absent, inspect the server status, command/PATH and target instead
 of reinstalling blindly. See [Amp MCP documentation](https://ampcode.com/docs/customize/mcp).
 

package/src/client/canvas/BoardCopyDialog.tsx

@@ -7,6 +7,7 @@ import {
   type BoardSummary,
 } from '../state/boards-store';
 import { useFocusTrap } from './use-focus-trap';
+import { submitWithoutNavigation } from './submit-without-navigation';
 
 export function BoardCopyDialog({ board, onClose }: { board: BoardSummary; onClose: () => void }) {
   const dialogRef = useRef<HTMLDivElement>(null);
@@ -63,7 +64,7 @@ export function BoardCopyDialog({ board, onClose }: { board: BoardSummary; onClo
         aria-labelledby="board-copy-title"
         onMouseDown={(e) => e.stopPropagation()}
       >
-        <form onSubmit={submit}>
+        <form onClick={submitWithoutNavigation} onSubmit={submit}>
           <h2 id="board-copy-title">Create from {board.name}</h2>
           <label class="board-copy-field">
             Board name

package/src/client/canvas/KnowledgeDialog.tsx

@@ -8,6 +8,7 @@ import { requestJson } from '../state/intent-bridge';
 import { cleanLifecycle, DEFAULT_LIFECYCLE, LifecycleFields } from './LifecycleFields';
 import { useFocusTrap } from './use-focus-trap';
 import { ChoiceMenu } from './ChoiceMenu';
+import { submitWithoutNavigation } from './submit-without-navigation';
 
 export function KnowledgeDialog({ folder, onClose }: { folder?: string; onClose: () => void }) {
   const enabled = knowledgeLifecycleEnabled.value;
@@ -158,6 +159,7 @@ export function KnowledgeDialog({ folder, onClose }: { folder?: string; onClose:
           <p>Knowledge settings unavailable. Close and retry.</p>
         ) : folder ? (
           <form
+            onClick={submitWithoutNavigation}
             onSubmit={async (event) => {
               event.preventDefault();
               if (!knowledgeLifecycleEnabled.value || busy) return;
@@ -286,6 +288,7 @@ export function KnowledgeDialog({ folder, onClose }: { folder?: string; onClose:
                 <form
                   class="category-inspector"
                   noValidate
+                  onClick={submitWithoutNavigation}
                   onSubmit={async (event) => {
                     event.preventDefault();
                     if (!knowledgeLifecycleEnabled.value || busy) return;

package/src/client/canvas/LifecyclePanel.tsx

@@ -20,6 +20,7 @@ import {
 import { sendSteering } from '../state/session-store';
 import { hasUnsavedMarkdown } from '../nodes/MarkdownNode';
 import { cleanLifecycle, DEFAULT_LIFECYCLE, LifecycleFields } from './LifecycleFields';
+import { submitWithoutNavigation } from './submit-without-navigation';
 
 export function LifecyclePanel() {
   const target = lifecycleTarget.value;
@@ -264,6 +265,7 @@ function LifecycleDialog({ target }: { target: NonNullable<typeof lifecycleTarge
                 <form
                   class="lifecycle-quick-review"
                   noValidate
+                  onClick={submitWithoutNavigation}
                   onSubmit={(event) => {
                     event.preventDefault();
                     void recordReview('retain', true).then((ok) => {
@@ -345,6 +347,7 @@ function LifecycleDialog({ target }: { target: NonNullable<typeof lifecycleTarge
                 · category belongs to the folder
               </p>
               <form
+                onClick={submitWithoutNavigation}
                 onSubmit={(event) => {
                   event.preventDefault();
                   void mutate('/lifecycle', { lifecycleOverride: override ? cleanLifecycle(policy) : null });
@@ -446,6 +449,7 @@ function LifecycleDialog({ target }: { target: NonNullable<typeof lifecycleTarge
               ) : (
                 <form
                   class="lifecycle-review"
+                  onClick={submitWithoutNavigation}
                   onSubmit={(event) => {
                     event.preventDefault();
                     void recordReview(outcome, applied);

package/src/client/canvas/RelationPresetsDialog.tsx

@@ -4,6 +4,7 @@ import { boardList, updateBoard } from '../state/boards-store';
 import { requestJson } from '../state/intent-bridge';
 import { knowledge, refreshKnowledge } from '../state/knowledge-store';
 import { useFocusTrap } from './use-focus-trap';
+import { submitWithoutNavigation } from './submit-without-navigation';
 
 /** Shared templates live in Home; applying one never rewrites connection kinds. */
 export function RelationPresetsDialog({ onClose }: { onClose: () => void }) {
@@ -152,6 +153,7 @@ export function RelationPresetsDialog({ onClose }: { onClose: () => void }) {
                 {editing ? (
                   <form
                     class="relation-vocabulary"
+                    onClick={submitWithoutNavigation}
                     onSubmit={async (event) => {
                       event.preventDefault();
                       if (busy) return;

package/src/client/canvas/submit-without-navigation.ts

@@ -0,0 +1,14 @@
+import type { JSX } from 'preact';
+
+/** A scripts-only host blocks native submission before onSubmit can run. */
+export function submitWithoutNavigation(event: JSX.TargetedMouseEvent<HTMLFormElement>): void {
+  if (event.defaultPrevented || !(event.target instanceof Element)) return;
+  const button = event.target.closest('button');
+  const form = event.currentTarget;
+  if (button?.type !== 'submit' || button.form !== form || button.matches(':disabled')) return;
+  // Enter in a form input also activates its submit button. Keep native
+  // validation, but dispatch only the JS event, never a navigation/submission.
+  event.preventDefault();
+  if (!form.noValidate && !button.formNoValidate && !form.reportValidity()) return;
+  form.dispatchEvent(new SubmitEvent('submit', { bubbles: true, cancelable: true, submitter: button }));
+}

package/src/client/state/canvas-store.ts

@@ -768,31 +768,19 @@ export function animateViewport(
   duration = 300,
   options: { recordHistory?: boolean } = {},
 ): void {
-  if (animationId !== null) cancelAnimationFrame(animationId);
-
   const from = { ...viewport.value };
-  const start = performance.now();
-
-  function tick(now: number) {
-    const elapsed = now - start;
-    const t = Math.min(1, elapsed / duration);
-    const e = easeOutCubic(t);
-
-    viewport.value = {
-      x: from.x + (target.x - from.x) * e,
-      y: from.y + (target.y - from.y) * e,
-      scale: from.scale + (target.scale - from.scale) * e,
-    };
-
-    if (t < 1) {
-      animationId = requestAnimationFrame(tick);
-    } else {
-      animationId = null;
-      commitViewport(target, options);
-    }
-  }
-
-  animationId = requestAnimationFrame(tick);
+  animateCameraPath(
+    (t) => {
+      const e = easeOutCubic(t);
+      return {
+        x: from.x + (target.x - from.x) * e,
+        y: from.y + (target.y - from.y) * e,
+        scale: from.scale + (target.scale - from.scale) * e,
+      };
+    },
+    duration,
+    () => commitViewport(target, options),
+  );
 }
 
 /**

package/src/client/state/intent-bridge.ts

@@ -1,7 +1,6 @@
 import { canvasArea, canvasFitInsets } from '../canvas/canvas-area';
 import { showToast } from './attention-bridge';
 import { isHostedWorkbench, workbenchFetch } from './workbench-transport';
-import type { AgentPresenceSnapshot } from '../../shared/agent-presence.js';
 import type { CanvasEdge, CanvasNodeState } from '../types';
 import { addEdge, canvasInteractionEpoch, nodes } from './canvas-store';
 import { activeBoardId, boardsLoaded } from './boards-store';
@@ -401,11 +400,6 @@ export async function fetchAxSurfaceState(): Promise<unknown> {
   return requestJson<unknown>('fetchAxSurfaceState', '/api/canvas/ax/surface-snapshot', null);
 }
 
-/** Connect-time agent-presence read; live updates arrive as `agent-presence` SSE frames. */
-export async function fetchAgentPresence(): Promise<Partial<AgentPresenceSnapshot> | null> {
-  return requestJson<Partial<AgentPresenceSnapshot> | null>('fetchAgentPresence', '/api/canvas/ax/presence', null);
-}
-
 /** Ask the server to open a node's surface in the system browser. */
 export async function openNodeInSystemBrowserRequest(
   nodeId: string,

package/src/client/state/presence-store.ts

@@ -12,9 +12,9 @@ import {
 } from '../../shared/agent-presence.js';
 
 /**
- * Agent presence (rail-chrome-v2 phase 2). Fed by the server's `agent-presence`
- * SSE snapshot (every change, including TTL expiry) and the connect-time read,
- * so this store never runs its own expiry ticker.
+ * Agent presence (rail-chrome-v2 phase 2). Fed by the server's ordered
+ * `agent-presence` frames: a connect snapshot and every change, including TTL
+ * expiry, over SSE or polling. This store never runs its own expiry ticker.
  *
  * `sessionActive` is the ONE selector every agent surface reads — the session
  * panel, command bar, presence layer, and top-bar chip all mount on it.

package/src/client/state/sse-bridge.ts

@@ -14,7 +14,6 @@ import {
   axSurfaceState,
   bringToFront,
   cancelViewportAnimation,
-  commitViewport,
   canvasTheme,
   connectionStatus,
   contextPinsRevision,
@@ -50,12 +49,12 @@ import {
 import { applyContextStatus, refreshContextStatus } from './context-status-store';
 import { refreshContextChip } from './context-chip-store';
 import {
-  fetchAgentPresence,
   fetchAxSurfaceState,
   fetchCanvasState,
   reportClientViewportSize,
   requestJson,
   tabAgentKey,
+  updateViewportFromClient,
 } from './intent-bridge';
 import { agentActivity, applyPresenceSnapshot, sessionActive } from './presence-store';
 import { applyHumanSnapshot, humanClientId, startHumanPresence, stopHumanPresence } from './human-store';
@@ -577,9 +576,8 @@ function handleConnected(data: Record<string, unknown>): void {
   // Reconnect marker for holders of server-minted URLs (Finding S).
   workbenchConnectionEpoch.value += 1;
   reloadIfServerUpgraded(data.version, data.bundleStamp);
-  // Agent presence: read the snapshot on (re)connect; `agent-presence` frames
-  // keep it live from here on.
-  void fetchAgentPresence().then(applyPresenceSnapshot);
+  // Both transports send an ordered `agent-presence` connect snapshot, then
+  // live frames. A separate HTTP read can arrive late and overwrite newer state.
   void refreshContextStatus();
   refreshContextChip();
   // Human collaborators (phase 8): announce this tab and read who else is here.
@@ -1123,7 +1121,14 @@ function handleCanvasCameraMove(data: Record<string, unknown>): void {
   try {
     // The presentation camera is local; otherwise the end camera becomes the
     // board viewport — unrecorded, so a camera move is never an undo step.
-    playStop(stop.data, presenting.value ? undefined : (end) => commitViewport(end, { recordHistory: false }));
+    playStop(
+      stop.data,
+      presenting.value
+        ? undefined
+        : (end) => {
+            void updateViewportFromClient(end, { recordHistory: false });
+          },
+    );
   } catch {
     // Target not in this tab's layout yet: take the server's resolved camera.
     const fallback = cameraSchema.safeParse(data.viewport);

package/src/client/theme/global.css

@@ -4050,8 +4050,14 @@ kbd.toolbar-menu-hint {
 }
 
 /* ── Markdown reader mode (expanded view) ──────────────────── */
+.md-expanded-document {
+  display: flex;
+  flex-direction: column;
+}
+
 .md-reader {
-  height: 100%;
+  flex: 1;
+  min-height: 0;
   overflow-y: auto;
   display: flex;
   justify-content: center;
@@ -4205,11 +4211,11 @@ kbd.toolbar-menu-hint {
   background: var(--c-surface-subtle);
 }
 
-/* Source-mode FAB in expanded document view */
+/* Source stays below the scroll viewport, never over the document text. */
 .md-edit-fab {
-  position: absolute;
-  bottom: 16px;
-  right: 16px;
+  align-self: flex-end;
+  flex-shrink: 0;
+  margin: 16px;
   padding: 8px 18px;
   font-size: 13px;
   font-weight: 600;
@@ -5991,21 +5997,10 @@ html.is-node-resizing .ext-app-preview-catcher {
   /* Its sticky/backdrop-filter context must paint hints above the Source FAB. */
   z-index: 2;
 }
-.expanded-overlay-panel:has(.ax-step-dock) .md-expanded-document {
-  display: flex;
-  flex-direction: column;
-}
-.expanded-overlay-panel:has(.ax-step-dock) .md-reader {
-  flex: 1;
-  min-height: 0;
-}
 .expanded-overlay-panel:has(.ax-step-dock) .md-edit-fab {
   /* Keep Source and the document out of the bottom dock's hint area. */
-  position: static;
   order: -1;
-  align-self: flex-end;
-  flex-shrink: 0;
-  margin-bottom: 16px;
+  margin: 0 0 16px;
 }
 .ax-step-dock:has(.toolbar-tooltip-anchor:hover) .toolbar-tooltip-anchor:not(:hover) > :focus-visible + .toolbar-tooltip {
   /* Pointer exploration temporarily takes precedence without moving keyboard focus. */

package/src/server/canvas-state.ts

@@ -2863,6 +2863,16 @@ class CanvasStateManager {
     return node ? structuredClone(this.nodeForRead(node)) : undefined;
   }
 
+  /** Camera targets need geometry, not hydrated documents, frames or image blobs. */
+  nodeGeometry(): Array<Pick<CanvasNodeState, 'id' | 'type' | 'position' | 'size'>> {
+    return Array.from(this.nodes.values(), ({ id, type, position, size }) => ({
+      id,
+      type,
+      position: { ...position },
+      size: { ...size },
+    }));
+  }
+
   /** Who made and last edited each card, and its content revision — no content, no copies. */
   nodeStamps(): Array<Pick<CanvasNodeState, 'id' | 'createdBy' | 'lastEditedBy' | 'contentRevision'>> {
     return [...this.nodes.values()].map(({ id, createdBy, lastEditedBy, contentRevision }) => ({

package/src/server/index.ts

@@ -1,13 +1,13 @@
 import { EventEmitter } from 'node:events';
-import { derivedTour, type Camera, type Tour, type TourStop } from '../shared/tour.js';
-import { exitTour, goToTourStop, moveCamera, type TourStep, type TourStepResult } from './tour-control.js';
+import type { Camera, Tour, TourStop } from '../shared/tour.js';
+import { currentTour, exitTour, goToTourStop, moveCamera, type TourStep, type TourStepResult } from './tour-control.js';
 export type { Tour, TourStop } from '../shared/tour.js';
 export type { TourStep, TourStepResult } from './tour-control.js';
 import { agentPresence } from './agent-presence.js';
 import { checkFenceTarget, type FenceTarget } from './scope-fence.js';
 import type { AgentPhase, AgentPresence, AgentPresenceSnapshot } from '../shared/agent-presence.js';
-import { canvasState, IMAGE_MIME_MAP } from './canvas-state.js';
-import type { CanvasAnnotation, CanvasNodeState, CanvasEdge, CanvasLayout, ViewportState } from './canvas-state.js';
+import { canvasState } from './canvas-state.js';
+import type { CanvasAnnotation, CanvasNodeState, CanvasEdge, CanvasLayout } from './canvas-state.js';
 import { buildCanvasAxContext } from './ax-context.js';
 import { applyAxInteraction, type AxInteractionInput, type AxInteractionPublicResult } from './ax-interaction.js';
 import { intentRegistry } from './intent-registry.js';
@@ -46,12 +46,12 @@ import { workbenchToken } from './workbench-auth.js';
 import type { BackupFile, BackupStatus } from './backup.js';
 import type { ExportManifest } from './board-export.js';
 import { onFileNodeChanged } from './file-watcher.js';
-import { findOpenCanvasPosition, computeGroupBounds } from './placement.js';
+import { findOpenCanvasPosition } from './placement.js';
 import { overlapsAny } from '../shared/placement.js';
 import { buildSpatialContext } from './spatial-analysis.js';
 import { searchCanvasNodes } from './operations/ops/query.js';
 import { mutationHistory, diffLayouts, formatDiff } from './mutation-history.js';
-import { recomputeCodeGraph, buildCodeGraphSummary, formatCodeGraph } from './code-graph.js';
+import { buildCodeGraphSummary, formatCodeGraph } from './code-graph.js';
 import {
   addCanvasNode,
   addCanvasEdge,
@@ -90,12 +90,7 @@ import { validateCanvasLayout } from './canvas-validation.js';
 import { describeCanvasSchema, validateStructuredCanvasPayload } from './canvas-schema.js';
 import { serializeCanvasNode, type SerializedCanvasNode } from './canvas-serialization.js';
 import { contextReadFromPayload } from './context-reads.js';
-import {
-  buildHtmlPrimitive,
-  getHtmlPrimitiveSemanticMetadata,
-  isHtmlPrimitiveKind,
-  listHtmlPrimitiveDescriptors,
-} from './html-primitives.js';
+import { buildHtmlPrimitive, getHtmlPrimitiveSemanticMetadata } from './html-primitives.js';
 import type { HtmlPrimitiveKind } from './html-primitives.js';
 import {
   buildWebArtifactOnCanvas,
@@ -104,15 +99,7 @@ import {
 } from './web-artifacts.js';
 import { closeMcpAppSession, type ExternalMcpTransportConfig } from './mcp-app-runtime.js';
 import type { DiagramPresetOpenInput } from './diagram-presets.js';
-import {
-  buildGraphSpec,
-  GRAPH_NODE_SIZE,
-  JSON_RENDER_NODE_SIZE,
-  normalizeAndValidateJsonRenderSpec,
-  type GraphNodeInput,
-  type JsonRenderNodeInput,
-  type JsonRenderSpec,
-} from '../json-render/server.js';
+import type { GraphNodeInput, JsonRenderNodeInput, JsonRenderSpec } from '../json-render/server.js';
 import {
   startCanvasServer,
   stopCanvasServer,
@@ -126,15 +113,8 @@ import {
   screenshotCanvasAutomationWebView,
   emitPrimaryWorkbenchEvent,
   setPrimaryWorkbenchCanvasPromptHandler,
-  setPrimaryWorkbenchAutoOpenEnabled,
-  consumePrimaryWorkbenchIntents,
-} from './server.js';
-import type {
-  CanvasAutomationWebViewOptions,
-  CanvasAutomationWebViewStatus,
-  PrimaryWorkbenchCanvasPromptRequest,
-  PrimaryWorkbenchIntent,
 } from './server.js';
+import type { CanvasAutomationWebViewOptions, CanvasAutomationWebViewStatus } from './server.js';
 
 /**
  * Node object returned by the SDK's create/get methods. It is the fully
@@ -633,7 +613,7 @@ export class PmxCanvas extends EventEmitter {
   }
 
   getTour(): Tour {
-    return canvasState.getTour() ?? derivedTour(canvasState.getLayout().nodes);
+    return currentTour().tour;
   }
 
   setTour(tour: Tour | null): void {

package/src/server/knowledge-lifecycle.ts

@@ -1,6 +1,7 @@
 import type { Database } from 'bun:sqlite';
 import { z } from 'zod';
 import { normalizeBoardFolder } from '../shared/boards.js';
+import { memoryKey, type MemoryTarget } from '../shared/memory-graph.js';
 import { currentActor, type ActorAttribution } from './attribution.js';
 import { OperationError } from './operations/types.js';
 import type { LifecycleQualification } from '../shared/lifecycle-status.js';
@@ -47,6 +48,16 @@ export interface ReviewRecord {
   sourceRevisions?: Record<string, number | null>;
 }
 
+// SQLite trim defaults to ASCII space; match JavaScript evidence.trim(), including Unicode whitespace.
+const evidenceWhitespace =
+  '\u0009\u000a\u000b\u000c\u000d\u0020\u00a0\u1680\u2000\u2001\u2002\u2003\u2004\u2005\u2006\u2007\u2008\u2009\u200a\u2028\u2029\u202f\u205f\u3000\ufeff';
+const validationPredicate = `json_extract(value, '$.applied') = 1
+  AND json_extract(value, '$.outcome') IN ('retain', 'revise', 'externalize')
+  AND trim(json_extract(value, '$.evidence'), '${evidenceWhitespace}') <> ''`;
+const retirementPredicate = `(json_extract(value, '$.outcome') = 'restore'
+  OR (json_extract(value, '$.applied') = 1 AND json_extract(value, '$.outcome') = 'retire'))`;
+const indexedDatabases = new WeakSet<Database>();
+
 export type KnowledgeInput =
   | { action: 'list' }
   | { action: 'category-set'; category: KnowledgeCategory }
@@ -240,6 +251,61 @@ export class KnowledgeLifecycle {
     return resolved;
   }
 
+  private indexedDb(): Database {
+    const db = this.db();
+    if (!indexedDatabases.has(db)) {
+      db.exec(`CREATE INDEX IF NOT EXISTS review_latest_validation ON review_records
+        (board_id, node_id, sequence DESC) WHERE ${validationPredicate};
+        CREATE INDEX IF NOT EXISTS review_latest_retirement ON review_records
+        (board_id, node_id, sequence DESC) WHERE ${retirementPredicate};
+        CREATE INDEX IF NOT EXISTS lifecycle_incoming_sources ON edges (to_board_id, to_node)
+        WHERE COALESCE(kind, type) IN ('derived-from', 'contradicts', 'supersedes');`);
+      indexedDatabases.add(db);
+    }
+    return db;
+  }
+
+  /** Stored owners of semantic sources; the caller overlays the active board's unsaved edges. */
+  incomingSourceBoards(target: MemoryTarget, activeBoardId: string | null): string[] {
+    return this.indexedDb()
+      .query<{ board_id: string }, [string, string | null, string | null]>(
+        `SELECT DISTINCT board_id FROM edges WHERE to_board_id = ? AND to_node = ?
+       AND board_id IS NOT ? AND COALESCE(kind, type) IN ('derived-from', 'contradicts', 'supersedes')`,
+      )
+      .all(target.boardId, target.cardId ?? null, activeBoardId)
+      .map((row) => row.board_id);
+  }
+
+  /** One indexed latest validation and retirement per card, never its full audit history. */
+  reviewSummaries(targets: MemoryTarget[]): Map<string, { lastValidation: ReviewRecord | null; retired: boolean }> {
+    if (!targets.length) return new Map();
+    const rows = this.indexedDb()
+      .query<{ boardId: string; nodeId: string; validation: string | null; retirement: string | null }, [string]>(
+        `WITH targets AS (
+         SELECT json_extract(value, '$.boardId') AS boardId, json_extract(value, '$.cardId') AS nodeId
+         FROM json_each(?)
+       ) SELECT boardId, nodeId,
+         (SELECT value FROM review_records WHERE board_id = boardId AND node_id = nodeId
+          AND ${validationPredicate} ORDER BY sequence DESC LIMIT 1) AS validation,
+         (SELECT json_extract(value, '$.outcome') FROM review_records WHERE board_id = boardId AND node_id = nodeId
+          AND ${retirementPredicate} ORDER BY sequence DESC LIMIT 1) AS retirement
+       FROM targets`,
+      )
+      .all(JSON.stringify(targets));
+    return new Map(
+      rows.map((row) => {
+        const record: ReviewRecord | null = row.validation ? JSON.parse(row.validation) : null;
+        return [
+          memoryKey({ boardId: row.boardId, cardId: row.nodeId }),
+          {
+            lastValidation: record ? { ...record, contentRevision: record.contentRevision ?? null } : null,
+            retired: row.retirement === 'retire',
+          },
+        ];
+      }),
+    );
+  }
+
   reviews(boardId: string, nodeId: string) {
     const records = (
       this.db()