@floless/app 0.10.0 → 0.12.0

package/dist/floless-server.cjs

@@ -294,41 +294,41 @@ var require_queue = __commonJS({
       queue2.drained = drained;
       return queue2;
       function push(value) {
-        var p = new Promise(function(resolve4, reject) {
+        var p = new Promise(function(resolve5, reject) {
           pushCb(value, function(err, result) {
             if (err) {
               reject(err);
               return;
             }
-            resolve4(result);
+            resolve5(result);
           });
         });
         p.catch(noop);
         return p;
       }
       function unshift(value) {
-        var p = new Promise(function(resolve4, reject) {
+        var p = new Promise(function(resolve5, reject) {
           unshiftCb(value, function(err, result) {
             if (err) {
               reject(err);
               return;
             }
-            resolve4(result);
+            resolve5(result);
           });
         });
         p.catch(noop);
         return p;
       }
       function drained() {
-        var p = new Promise(function(resolve4) {
+        var p = new Promise(function(resolve5) {
           process.nextTick(function() {
             if (queue2.idle()) {
-              resolve4();
+              resolve5();
             } else {
               var previousDrain = queue2.drain;
               queue2.drain = function() {
                 if (typeof previousDrain === "function") previousDrain();
-                resolve4();
+                resolve5();
                 queue2.drain = previousDrain;
               };
             }
@@ -671,8 +671,8 @@ var require_create_promise = __commonJS({
         reject: null,
         promise: null
       };
-      obj.promise = new Promise((resolve4, reject) => {
-        obj.resolve = resolve4;
+      obj.promise = new Promise((resolve5, reject) => {
+        obj.resolve = resolve5;
         obj.reject = reject;
       });
       return obj;
@@ -941,11 +941,11 @@ var require_thenify = __commonJS({
         return;
       }
       debug("thenify");
-      return (resolve4, reject) => {
+      return (resolve5, reject) => {
         const p = this._loadRegistered();
         return p.then(() => {
           this[kThenifyDoNotWrap] = true;
-          return resolve4(this._server);
+          return resolve5(this._server);
         }, reject);
       };
     }
@@ -1082,12 +1082,12 @@ var require_boot = __commonJS({
     inherits(Boot, EE);
     if ("asyncDispose" in Symbol) {
       Boot.prototype[Symbol.asyncDispose] = function() {
-        return new Promise((resolve4, reject) => {
+        return new Promise((resolve5, reject) => {
           this.close((err) => {
             if (err) {
               return reject(err);
             }
-            resolve4();
+            resolve5();
           });
         });
       };
@@ -1234,12 +1234,12 @@ var require_boot = __commonJS({
           throw new AVV_ERR_CALLBACK_NOT_FN("close", typeof func);
         }
       } else {
-        promise = new Promise(function(resolve4, reject) {
+        promise = new Promise(function(resolve5, reject) {
           func = function(err) {
             if (err) {
               return reject(err);
             }
-            resolve4();
+            resolve5();
           };
         });
       }
@@ -1259,7 +1259,7 @@ var require_boot = __commonJS({
         queueMicrotask(this.start.bind(this));
         return;
       }
-      return new Promise((resolve4, reject) => {
+      return new Promise((resolve5, reject) => {
         this._readyQ.push(readyPromiseCB);
         this.start();
         const relativeContext = this._current[0].server;
@@ -1267,7 +1267,7 @@ var require_boot = __commonJS({
           if (err) {
             reject(err);
           } else {
-            resolve4(relativeContext);
+            resolve5(relativeContext);
           }
           process.nextTick(done);
         }
@@ -2542,8 +2542,8 @@ var require_promise = __commonJS({
     var { kTestInternals } = require_symbols2();
     function withResolvers() {
       let res, rej;
-      const promise = new Promise((resolve4, reject) => {
-        res = resolve4;
+      const promise = new Promise((resolve5, reject) => {
+        res = resolve5;
         rej = reject;
       });
       return { promise, resolve: res, reject: rej };
@@ -2642,15 +2642,15 @@ var require_server = __commonJS({
         if (cb === void 0) {
           const listening = listenPromise.call(this, server, listenOptions);
           return listening.then((address) => {
-            const { promise, resolve: resolve4 } = PonyPromise.withResolvers();
+            const { promise, resolve: resolve5 } = PonyPromise.withResolvers();
             if (host === "localhost") {
               multipleBindings.call(this, server, httpHandler, options, listenOptions, () => {
                 this[kState].listening = true;
-                resolve4(address);
+                resolve5(address);
                 onListenHookRunner(this);
               });
             } else {
-              resolve4(address);
+              resolve5(address);
               onListenHookRunner(this);
             }
             return promise;
@@ -2777,7 +2777,7 @@ var require_server = __commonJS({
       }
       return this.ready().then(() => {
         if (this[kState].aborted) return;
-        const { promise, resolve: resolve4, reject } = PonyPromise.withResolvers();
+        const { promise, resolve: resolve5, reject } = PonyPromise.withResolvers();
         const errEventHandler = (err) => {
           cleanup();
           this[kState].listening = false;
@@ -2786,7 +2786,7 @@ var require_server = __commonJS({
         const listeningEventHandler = () => {
           cleanup();
           this[kState].listening = true;
-          resolve4(logServerAddress.call(
+          resolve5(logServerAddress.call(
             this,
             server,
             listenOptions.listenTextResolver || defaultResolveServerListeningText
@@ -5489,7 +5489,7 @@ var require_thread_stream = __commonJS({
     var { version } = require_package();
     var { EventEmitter: EventEmitter2 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join20 } = require("path");
+    var { join: join21 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -5540,7 +5540,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join20(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join21(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         name: opts.workerOpts?.name || "thread-stream",
@@ -6006,9 +6006,9 @@ var require_transport = __commonJS({
   "node_modules/pino/lib/transport.js"(exports2, module2) {
     "use strict";
     var { createRequire: createRequire4 } = require("module");
-    var { existsSync: existsSync18 } = require("node:fs");
+    var { existsSync: existsSync19 } = require("node:fs");
     var getCallers = require_caller();
-    var { join: join20, isAbsolute: isAbsolute2, sep: sep3 } = require("node:path");
+    var { join: join21, isAbsolute: isAbsolute2, sep: sep3 } = require("node:path");
     var { fileURLToPath: fileURLToPath4 } = require("node:url");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
@@ -6080,7 +6080,7 @@ var require_transport = __commonJS({
           return false;
         }
       }
-      return isAbsolute2(path) && !existsSync18(path);
+      return isAbsolute2(path) && !existsSync19(path);
     }
     function stripQuotes(value) {
       const first = value[0];
@@ -6161,7 +6161,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join20(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join21(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -6179,7 +6179,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline2) {
-        target = bundlerOverrides["pino-worker"] || join20(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join21(__dirname, "worker.js");
         options.pipelines = [pipeline2.map((dest) => {
           return {
             ...dest,
@@ -6202,7 +6202,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join20(__dirname, "..", "file.js");
+          return join21(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -7182,7 +7182,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join20 = ",";
+            let join21 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -7196,7 +7196,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join20 = `,
+                join21 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -7204,13 +7204,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join20;
+                res += join21;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join20}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join21}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -7231,7 +7231,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join20 = `,
+              join21 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -7245,13 +7245,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join20;
+                separator = join21;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join20;
+              separator = join21;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -7292,7 +7292,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join20 = ",";
+            let join21 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -7305,7 +7305,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join20 = `,
+                join21 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -7313,13 +7313,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join20;
+                res += join21;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join20}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join21}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -7332,7 +7332,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join20 = `,
+              join21 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -7341,7 +7341,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join20;
+                separator = join21;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -7399,20 +7399,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join21 = `,
+              const join22 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join21;
+                res2 += join22;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join21}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join22}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -7428,16 +7428,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join20 = `,
+            const join21 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join20, maximumBreadth);
+              res += stringifyTypedArray(value, join21, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join20;
+              separator = join21;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -7448,13 +7448,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join20;
+                separator = join21;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join20;
+              separator = join21;
             }
             if (separator !== "") {
               res = `
@@ -15309,7 +15309,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve4.call(this, root, ref);
+      let _sch = resolve5.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a = root.localRefs) === null || _a === void 0 ? void 0 : _a[ref];
         const { schemaId } = this.opts;
@@ -15336,7 +15336,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve4(root, ref) {
+    function resolve5(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -15967,7 +15967,7 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve4(baseURI, relativeURI, options) {
+    function resolve5(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const resolved = resolveComponent(parse(baseURI, schemelessOptions), parse(relativeURI, schemelessOptions), schemelessOptions, true);
       schemelessOptions.skipEscape = true;
@@ -16225,7 +16225,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize: normalize2,
-      resolve: resolve4,
+      resolve: resolve5,
       resolveComponent,
       equal,
       serialize,
@@ -32061,7 +32061,7 @@ var require_parse_url = __commonJS({
 var require_form_data = __commonJS({
   "node_modules/light-my-request/lib/form-data.js"(exports2, module2) {
     "use strict";
-    var { randomUUID: randomUUID4 } = require("node:crypto");
+    var { randomUUID: randomUUID5 } = require("node:crypto");
     var { Readable: Readable3 } = require("node:stream");
     var textEncoder;
     function isFormDataLike(payload) {
@@ -32069,7 +32069,7 @@ var require_form_data = __commonJS({
     }
     function formDataToStream(formdata) {
       textEncoder = textEncoder ?? new TextEncoder();
-      const boundary = `----formdata-${randomUUID4()}`;
+      const boundary = `----formdata-${randomUUID5()}`;
       const prefix = `--${boundary}\r
 Content-Disposition: form-data`;
       const escape2 = (str) => str.replace(/\n/g, "%0A").replace(/\r/g, "%0D").replace(/"/g, "%22");
@@ -33572,9 +33572,9 @@ var require_light_my_request = __commonJS({
         const res = new Response(req, callback);
         return makeRequest(dispatchFunc, server, req, res);
       } else {
-        return new Promise((resolve4, reject) => {
+        return new Promise((resolve5, reject) => {
           const req = new RequestConstructor(options);
-          const res = new Response(req, resolve4, reject);
+          const res = new Response(req, resolve5, reject);
           makeRequest(dispatchFunc, server, req, res);
         });
       }
@@ -37706,10 +37706,10 @@ var require_commonjs4 = __commonJS({
        * Return a void Promise that resolves once the stream ends.
        */
       async promise() {
-        return new Promise((resolve4, reject) => {
+        return new Promise((resolve5, reject) => {
           this.on(DESTROYED, () => reject(new Error("stream destroyed")));
           this.on("error", (er) => reject(er));
-          this.on("end", () => resolve4());
+          this.on("end", () => resolve5());
         });
       }
       /**
@@ -37733,7 +37733,7 @@ var require_commonjs4 = __commonJS({
             return Promise.resolve({ done: false, value: res });
           if (this[EOF])
             return stop();
-          let resolve4;
+          let resolve5;
           let reject;
           const onerr = (er) => {
             this.off("data", ondata);
@@ -37747,19 +37747,19 @@ var require_commonjs4 = __commonJS({
             this.off("end", onend);
             this.off(DESTROYED, ondestroy);
             this.pause();
-            resolve4({ value, done: !!this[EOF] });
+            resolve5({ value, done: !!this[EOF] });
           };
           const onend = () => {
             this.off("error", onerr);
             this.off("data", ondata);
             this.off(DESTROYED, ondestroy);
             stop();
-            resolve4({ done: true, value: void 0 });
+            resolve5({ done: true, value: void 0 });
           };
           const ondestroy = () => onerr(new Error("stream destroyed"));
           return new Promise((res2, rej) => {
             reject = rej;
-            resolve4 = res2;
+            resolve5 = res2;
             this.once(DESTROYED, ondestroy);
             this.once("error", onerr);
             this.once("end", onend);
@@ -38779,9 +38779,9 @@ var require_commonjs5 = __commonJS({
         if (this.#asyncReaddirInFlight) {
           await this.#asyncReaddirInFlight;
         } else {
-          let resolve4 = () => {
+          let resolve5 = () => {
           };
-          this.#asyncReaddirInFlight = new Promise((res) => resolve4 = res);
+          this.#asyncReaddirInFlight = new Promise((res) => resolve5 = res);
           try {
             for (const e of await this.#fs.promises.readdir(fullpath, {
               withFileTypes: true
@@ -38794,7 +38794,7 @@ var require_commonjs5 = __commonJS({
             children.provisional = 0;
           }
           this.#asyncReaddirInFlight = void 0;
-          resolve4();
+          resolve5();
         }
         return children.slice(0, children.provisional);
       }
@@ -41991,9 +41991,9 @@ var require_send = __commonJS({
     var { parseTokenList } = require_parseTokenList();
     var { createHttpError } = require_createHttpError();
     var extname2 = path.extname;
-    var join20 = path.join;
+    var join21 = path.join;
     var normalize2 = path.normalize;
-    var resolve4 = path.resolve;
+    var resolve5 = path.resolve;
     var sep3 = path.sep;
     var Readable3 = stream.Readable;
     var BYTES_RANGE_REGEXP = /^ *bytes=/;
@@ -42040,7 +42040,7 @@ var require_send = __commonJS({
       const lastModified = options.lastModified !== void 0 ? Boolean(options.lastModified) : true;
       const maxage = normalizeMaxAge(options.maxAge ?? options.maxage);
       const maxContentRangeChunkSize = options.maxContentRangeChunkSize !== void 0 ? Number(options.maxContentRangeChunkSize) : null;
-      const root = options.root ? resolve4(options.root) : null;
+      const root = options.root ? resolve5(options.root) : null;
       const highWaterMark = Number.isSafeInteger(options.highWaterMark) && options.highWaterMark > 0 ? options.highWaterMark : null;
       return {
         acceptRanges,
@@ -42078,14 +42078,14 @@ var require_send = __commonJS({
           return { statusCode: 403 };
         }
         parts = path2.split(sep3);
-        path2 = normalize2(join20(root, path2));
+        path2 = normalize2(join21(root, path2));
       } else {
         if (UP_PATH_REGEXP.test(path2)) {
           debug('malicious path "%s"', path2);
           return { statusCode: 403 };
         }
         parts = normalize2(path2).split(sep3);
-        path2 = resolve4(path2);
+        path2 = resolve5(path2);
       }
       return { path: path2, parts };
     }
@@ -42181,9 +42181,9 @@ var require_send = __commonJS({
       );
     }
     function tryStat(path2) {
-      return new Promise((resolve5) => {
+      return new Promise((resolve6) => {
         fs.stat(path2, function onstat(error, stat4) {
-          resolve5({ error, stat: stat4 });
+          resolve6({ error, stat: stat4 });
         });
       });
     }
@@ -42361,7 +42361,7 @@ var require_send = __commonJS({
       let err;
       for (let i = 0; i < options.index.length; i++) {
         const index = options.index[i];
-        const p = join20(path2, index);
+        const p = join21(path2, index);
         const { error, stat: stat4 } = await tryStat(p);
         if (error) {
           err = error;
@@ -43012,7 +43012,7 @@ var require_static = __commonJS({
     "use strict";
     var path = require("node:path");
     var { fileURLToPath: fileURLToPath4 } = require("node:url");
-    var { statSync: statSync5 } = require("node:fs");
+    var { statSync: statSync7 } = require("node:fs");
     var { glob } = require_commonjs6();
     var fp = require_plugin2();
     var send = require_send2();
@@ -43375,7 +43375,7 @@ var require_static = __commonJS({
       }
       let pathStat;
       try {
-        pathStat = statSync5(rootPath);
+        pathStat = statSync7(rootPath);
       } catch (e) {
         if (e.code === "ENOENT") {
           fastify.log.warn(`"root" path "${rootPath}" must exist`);
@@ -43399,7 +43399,7 @@ var require_static = __commonJS({
         return indexFiles.find((filename) => {
           const p = path.join(root, pathname, filename);
           try {
-            const stats = statSync5(p);
+            const stats = statSync7(p);
             return !stats.isDirectory();
           } catch {
             return false;
@@ -50827,9 +50827,9 @@ var import_node_readline2 = require("node:readline");
 
 // index.ts
 var import_node_url3 = require("node:url");
-var import_node_path18 = require("node:path");
-var import_node_os12 = require("node:os");
-var import_node_fs19 = require("node:fs");
+var import_node_path19 = require("node:path");
+var import_node_os13 = require("node:os");
+var import_node_fs20 = require("node:fs");
 var import_node_child_process6 = require("node:child_process");
 
 // log.mjs
@@ -50878,6 +50878,7 @@ var import_node_child_process = require("node:child_process");
 var import_node_fs4 = require("node:fs");
 var import_node_path3 = require("node:path");
 var import_node_os3 = require("node:os");
+var import_node_crypto2 = require("node:crypto");
 var import_node_module = require("node:module");
 
 // app-reader.ts
@@ -51183,6 +51184,12 @@ var AwareError = class extends Error {
   }
   detail;
 };
+var AwareUnsupportedError = class extends AwareError {
+  constructor(message, detail) {
+    super(message, detail);
+    this.name = "AwareUnsupportedError";
+  }
+};
 function resolveInvoker() {
   const envDir = process.env.AWARE_CLI_DIR;
   if (envDir && (0, import_node_fs4.existsSync)((0, import_node_path3.join)(envDir, "scripts/bin/aware.js"))) {
@@ -51225,7 +51232,7 @@ function runRaw(args, onSpawn) {
     if (bad !== void 0) throw new AwareError(`refusing to pass unsafe argument to shell: ${bad}`);
   }
   const argv = [...preArgs, ...args];
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const child = (0, import_node_child_process.spawn)(bin, argv, { shell: invoker.shell, windowsHide: true });
     onSpawn?.(child);
     let stdout = "";
@@ -51243,7 +51250,7 @@ function runRaw(args, onSpawn) {
     });
     child.on("close", (code) => {
       clearTimeout(timer);
-      resolve4({ code: code ?? -1, stdout, stderr });
+      resolve5({ code: code ?? -1, stdout, stderr });
     });
   });
 }
@@ -51257,7 +51264,7 @@ function runRawWithEnv(args, env2, timeoutMs) {
   }
   const argv = [...preArgs, ...args];
   const limit = timeoutMs ?? RUN_TIMEOUT_MS;
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const child = (0, import_node_child_process.spawn)(bin, argv, { shell: invoker.shell, windowsHide: true, env: env2 ?? process.env });
     let stdout = "";
     let stderr = "";
@@ -51274,7 +51281,7 @@ function runRawWithEnv(args, env2, timeoutMs) {
     });
     child.on("close", (code) => {
       clearTimeout(timer);
-      resolve4({ code: code ?? -1, stdout, stderr });
+      resolve5({ code: code ?? -1, stdout, stderr });
     });
   });
 }
@@ -51324,7 +51331,7 @@ async function execTekla(code, opts = {}) {
     args: opts.args ?? {}
   });
   const timeoutMs = opts.debug ? 15 * 6e4 : RUN_TIMEOUT_MS;
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const child = (0, import_node_child_process.spawn)(bin, ["exec", "--version", version, "--json-stdin"], { windowsHide: true });
     let stdout = "";
     let stderr = "";
@@ -51352,7 +51359,7 @@ async function execTekla(code, opts = {}) {
           })
         );
       }
-      resolve4(parsed);
+      resolve5(parsed);
     });
     child.stdin.write(payload);
     child.stdin.end();
@@ -51423,17 +51430,31 @@ function latestTracePath(id, logsRoot = LOGS_DIR) {
   }
   return best ? best.path : null;
 }
-function readLatestTrace(id, logsRoot = LOGS_DIR) {
+function readTail(path, maxBytes) {
+  const size = (0, import_node_fs4.statSync)(path).size;
+  if (size <= maxBytes) return { text: (0, import_node_fs4.readFileSync)(path, "utf8"), truncated: false };
+  const fd = (0, import_node_fs4.openSync)(path, "r");
+  try {
+    const buf = Buffer.alloc(maxBytes);
+    const read = (0, import_node_fs4.readSync)(fd, buf, 0, maxBytes, size - maxBytes);
+    const nl = buf.indexOf(10, 0);
+    const start = nl >= 0 && nl + 1 <= read ? nl + 1 : 0;
+    return { text: buf.subarray(start, read).toString("utf8"), truncated: true };
+  } finally {
+    (0, import_node_fs4.closeSync)(fd);
+  }
+}
+function readLatestTrace(id, logsRoot = LOGS_DIR, maxBytes) {
   const p = latestTracePath(id, logsRoot);
   if (!p) return null;
-  let text;
+  let read;
   try {
-    text = (0, import_node_fs4.readFileSync)(p, "utf8");
+    read = maxBytes && maxBytes > 0 ? readTail(p, maxBytes) : { text: (0, import_node_fs4.readFileSync)(p, "utf8"), truncated: false };
   } catch {
     return null;
   }
   const runId = p.split(/[\\/]/).pop()?.replace(/\.jsonl$/, "") ?? "";
-  return { runId, path: p, text };
+  return { runId, path: p, text: read.text, truncated: read.truncated };
 }
 function startTrigger(id, opts = {}) {
   assertId(id);
@@ -51611,6 +51632,19 @@ function parseAgentInstallOutput(stdout) {
 function isAgentInstalled(agents, id) {
   return agents.some((a) => a.id === id);
 }
+function agentInvokeArgv(agent, command, inputsRef) {
+  assertId(agent);
+  if (!APP_ID.test(command)) throw new AwareError(`invalid agent command: ${JSON.stringify(command)}`);
+  const args = ["agent", "invoke", agent, command];
+  if (inputsRef !== void 0) args.push("--inputs", inputsRef);
+  return args;
+}
+function isInvokeUnsupported(detail) {
+  if (!detail || typeof detail !== "object") return false;
+  const d = detail;
+  const text = [d.stdout, d.stderr].filter((s) => typeof s === "string").join("\n");
+  return /unrecognized subcommand|unknown subcommand/i.test(text);
+}
 var inFlightConnects = /* @__PURE__ */ new Map();
 function cancelAllConnects() {
   for (const cancel of inFlightConnects.values()) cancel();
@@ -51623,7 +51657,7 @@ function connectDeviceCode(id, onEvent) {
   if (!bin) throw new AwareError("aware CLI invoker not resolved");
   inFlightConnects.get(id)?.();
   const argv = [...preArgs, "connect", id, "--device-code", "--json"];
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const child = (0, import_node_child_process.spawn)(bin, argv, { shell: invoker.shell, windowsHide: true });
     let buf = "";
     let gotPrompt = false;
@@ -51649,7 +51683,7 @@ function connectDeviceCode(id, onEvent) {
         }
         if (!gotPrompt && obj.phase === "prompt" && typeof obj.user_code === "string") {
           gotPrompt = true;
-          resolve4({ prompt: obj, cancel });
+          resolve5({ prompt: obj, cancel });
         } else {
           onEvent(obj);
         }
@@ -51733,6 +51767,43 @@ var aware = {
     const { data } = await runJson(["agent", "describe", assertId(id)]);
     return data;
   },
+  /**
+   * Invoke a BUILTIN agent command directly (`aware agent invoke <agent> <command>
+   * --inputs @file --json`, CLI ≥ 0.63) and return the envelope's `data` — e.g.
+   * `agentInvoke('ui','validate',{descriptor})` for Custom Panels validation.
+   * Inputs always travel via a temp file (`--inputs @path`): inline JSON would trip
+   * the shell-injection guard on the bare-PATH Windows fallback (quotes/braces are
+   * SHELL_META) and a large descriptor could blow cmd.exe's argv limit. Throws
+   * AwareUnsupportedError on a pre-0.63 CLI so callers can degrade ("update AWARE").
+   */
+  async agentInvoke(agent, command, inputs) {
+    let inputsFile = null;
+    try {
+      let ref;
+      if (inputs !== void 0) {
+        inputsFile = (0, import_node_path3.join)((0, import_node_os3.tmpdir)(), `floless-agent-inputs-${(0, import_node_crypto2.randomUUID)()}.json`);
+        (0, import_node_fs4.writeFileSync)(inputsFile, JSON.stringify(inputs));
+        ref = `@${inputsFile}`;
+      }
+      const { data } = await runJson(agentInvokeArgv(agent, command, ref));
+      return data;
+    } catch (err) {
+      if (err instanceof AwareError && isInvokeUnsupported(err.detail)) {
+        throw new AwareUnsupportedError(
+          `aware CLI does not support \`agent invoke\` (needs \u2265 0.63) \u2014 update AWARE`,
+          err.detail
+        );
+      }
+      throw err;
+    } finally {
+      if (inputsFile) {
+        try {
+          (0, import_node_fs4.rmSync)(inputsFile);
+        } catch {
+        }
+      }
+    }
+  },
   /**
    * Graft: build an agent from a foreign source (`aware build agent --from-*`).
    * When `awareHome` is set the spawn writes into that staging dir (AWARE_HOME is
@@ -51875,6 +51946,170 @@ var aware = {
   connectList
 };
 
+// extensions-store.ts
+var import_node_fs5 = require("node:fs");
+var import_node_os4 = require("node:os");
+var import_node_path4 = require("node:path");
+var ROOT = process.env.FLOLESS_HOME ?? (0, import_node_path4.join)((0, import_node_os4.homedir)(), ".floless");
+var uiDir = (0, import_node_path4.join)(ROOT, "ui");
+var extensionsFile = (0, import_node_path4.join)(uiDir, "extensions.json");
+var HISTORY_DIR = (0, import_node_path4.join)(uiDir, "history");
+var HISTORY_KEEP = 20;
+function ensureUiDir() {
+  if (!(0, import_node_fs5.existsSync)(uiDir)) (0, import_node_fs5.mkdirSync)(uiDir, { recursive: true });
+}
+function ensureHistoryDir() {
+  if (!(0, import_node_fs5.existsSync)(HISTORY_DIR)) (0, import_node_fs5.mkdirSync)(HISTORY_DIR, { recursive: true });
+}
+function readExtensionsText() {
+  try {
+    return (0, import_node_fs5.readFileSync)(extensionsFile, "utf8");
+  } catch {
+    return null;
+  }
+}
+function readExtensions() {
+  const text = readExtensionsText();
+  if (text === null) return null;
+  try {
+    const parsed = JSON.parse(text);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+function descriptorPanels(d) {
+  if (!d || !Array.isArray(d.panels)) return [];
+  return d.panels.filter((p) => !!p && typeof p === "object" && !Array.isArray(p));
+}
+function panelsCountOf(text) {
+  try {
+    const parsed = JSON.parse(text);
+    return parsed && typeof parsed === "object" && Array.isArray(parsed.panels) ? parsed.panels.length : 0;
+  } catch {
+    return 0;
+  }
+}
+function historyFileName(now) {
+  const base = now.toISOString().replace(/[:.]/g, "-");
+  let name = `${base}.json`;
+  for (let i = 2; (0, import_node_fs5.existsSync)((0, import_node_path4.join)(HISTORY_DIR, name)); i++) name = `${base}-${i}.json`;
+  return name;
+}
+function timestampFromName(file) {
+  const m = /^(\d{4}-\d{2}-\d{2})T(\d{2})-(\d{2})-(\d{2})-(\d{3})Z(?:-\d+)?\.json$/.exec(file);
+  return m ? `${m[1]}T${m[2]}:${m[3]}:${m[4]}.${m[5]}Z` : null;
+}
+function historyFiles() {
+  if (!(0, import_node_fs5.existsSync)(HISTORY_DIR)) return [];
+  try {
+    return (0, import_node_fs5.readdirSync)(HISTORY_DIR).filter((f) => f.endsWith(".json")).sort();
+  } catch {
+    return [];
+  }
+}
+function pruneHistory() {
+  const files = historyFiles();
+  for (const f of files.slice(0, Math.max(0, files.length - HISTORY_KEEP))) {
+    try {
+      (0, import_node_fs5.rmSync)((0, import_node_path4.join)(HISTORY_DIR, f));
+    } catch {
+    }
+  }
+}
+function snapshotExtensions(content) {
+  const text = content !== void 0 ? content : readExtensionsText();
+  if (text === null) return null;
+  const files = historyFiles();
+  const newest = files[files.length - 1];
+  if (newest) {
+    try {
+      if ((0, import_node_fs5.readFileSync)((0, import_node_path4.join)(HISTORY_DIR, newest), "utf8") === text) return (0, import_node_path4.join)(HISTORY_DIR, newest);
+    } catch {
+    }
+  }
+  ensureHistoryDir();
+  const path = (0, import_node_path4.join)(HISTORY_DIR, historyFileName(/* @__PURE__ */ new Date()));
+  const tmp = `${path}.${process.pid}.tmp`;
+  (0, import_node_fs5.writeFileSync)(tmp, text);
+  (0, import_node_fs5.renameSync)(tmp, path);
+  pruneHistory();
+  return path;
+}
+function listHistory() {
+  return historyFiles().reverse().map((f) => {
+    let ts = timestampFromName(f);
+    if (!ts) {
+      try {
+        ts = (0, import_node_fs5.statSync)((0, import_node_path4.join)(HISTORY_DIR, f)).mtime.toISOString();
+      } catch {
+        ts = "";
+      }
+    }
+    let count = 0;
+    try {
+      count = panelsCountOf((0, import_node_fs5.readFileSync)((0, import_node_path4.join)(HISTORY_DIR, f), "utf8"));
+    } catch {
+    }
+    return { timestamp: ts ?? "", panelsCount: count };
+  });
+}
+function writeExtensionsText(text) {
+  ensureUiDir();
+  const tmp = `${extensionsFile}.${process.pid}.tmp`;
+  (0, import_node_fs5.writeFileSync)(tmp, text);
+  (0, import_node_fs5.renameSync)(tmp, extensionsFile);
+}
+function undoExtensions() {
+  const current = readExtensionsText();
+  const files = historyFiles().reverse();
+  let target = null;
+  for (const f of files) {
+    try {
+      const text = (0, import_node_fs5.readFileSync)((0, import_node_path4.join)(HISTORY_DIR, f), "utf8");
+      if (text !== current) {
+        target = text;
+        break;
+      }
+    } catch {
+    }
+  }
+  if (target === null) return { restored: false, descriptor: readExtensions() };
+  if (current !== null) snapshotExtensions(current);
+  writeExtensionsText(target);
+  return { restored: true, descriptor: readExtensions() };
+}
+function resetExtensions() {
+  const current = readExtensionsText();
+  if (current === null) return { reset: false };
+  snapshotExtensions(current);
+  try {
+    (0, import_node_fs5.rmSync)(extensionsFile);
+  } catch {
+  }
+  return { reset: true };
+}
+
+// ui-validation.ts
+function isUiAgentMissing(err) {
+  if (!(err instanceof AwareError)) return /not installed/i.test(String(err));
+  const detail = err.detail ?? {};
+  const stdout = typeof detail.stdout === "string" ? detail.stdout : "";
+  const stderr = typeof detail.stderr === "string" ? detail.stderr : "";
+  const text = `${err.message} ${stdout} ${stderr}`;
+  return /not installed/i.test(text);
+}
+function classifyValidateError(err) {
+  if (err instanceof AwareUnsupportedError) {
+    return { valid: null, note: "aware CLI without ui agent \u2014 update AWARE" };
+  }
+  if (isUiAgentMissing(err)) {
+    return { valid: null, note: "AWARE ui agent is installing \u2014 this validates itself in a moment", installing: true };
+  }
+  const msg = err instanceof Error ? err.message : String(err);
+  return { valid: false, errors: [`Validation failed: ${msg}`], unexpected: true };
+}
+
 // bootstrap.ts
 var VERSION_RE = /^\d+(\.\d+)*(-[0-9A-Za-z.-]+)?$/;
 function isValidVersion(v) {
@@ -51960,13 +52195,13 @@ function runBootstrap(deps) {
 }
 
 // licensing.ts
-var import_node_fs5 = require("node:fs");
-var import_node_path4 = require("node:path");
-var import_node_os4 = require("node:os");
+var import_node_fs6 = require("node:fs");
+var import_node_path5 = require("node:path");
+var import_node_os5 = require("node:os");
 var import_node_child_process2 = require("node:child_process");
-var import_node_crypto2 = require("node:crypto");
+var import_node_crypto3 = require("node:crypto");
 var import_node_module2 = require("node:module");
-var import_node_os5 = require("node:os");
+var import_node_os6 = require("node:os");
 var ENVS = {
   production: { apiBase: "https://api.floless.io/api", webBase: "https://floless.io" },
   staging: { apiBase: "https://api.stage.floless.io/api", webBase: "https://stage.floless.io" }
@@ -51978,6 +52213,18 @@ function env() {
     webBase: process.env.FLOLESS_WEB_BASE || base.webBase
   };
 }
+function isLoopback(host) {
+  return host === "127.0.0.1" || host === "localhost" || host === "::1" || host.endsWith(".localhost");
+}
+var TRUSTED_API_ORIGINS = /* @__PURE__ */ new Set(["https://api.floless.io", "https://api.stage.floless.io"]);
+function isTrustedFlolessHost(url) {
+  try {
+    const u = new URL(url);
+    return isLoopback(u.hostname) || TRUSTED_API_ORIGINS.has(u.origin);
+  } catch {
+    return false;
+  }
+}
 var OFFLINE_GRACE_MS = 24 * 60 * 60 * 1e3;
 var MEM_CACHE_MS = 60 * 1e3;
 var REFRESH_SKEW_MS = 60 * 1e3;
@@ -51990,26 +52237,26 @@ function isSea() {
 }
 function storeDir() {
   if (process.env.FLOLESS_LICENSE_DIR) return process.env.FLOLESS_LICENSE_DIR;
-  if (isSea() && process.env.LOCALAPPDATA) return (0, import_node_path4.join)(process.env.LOCALAPPDATA, "FlolessApp-data");
-  return (0, import_node_path4.join)((0, import_node_os4.homedir)(), ".aware");
+  if (isSea() && process.env.LOCALAPPDATA) return (0, import_node_path5.join)(process.env.LOCALAPPDATA, "FlolessApp-data");
+  return (0, import_node_path5.join)((0, import_node_os5.homedir)(), ".aware");
 }
-var tokenPath = () => (0, import_node_path4.join)(storeDir(), "floless-license.json");
-var cachePath = () => (0, import_node_path4.join)(storeDir(), "floless-license-cache.json");
+var tokenPath = () => (0, import_node_path5.join)(storeDir(), "floless-license.json");
+var cachePath = () => (0, import_node_path5.join)(storeDir(), "floless-license-cache.json");
 var _migrated = false;
 function migrateLegacyStore() {
   if (_migrated) return;
   _migrated = true;
   if (process.env.FLOLESS_LICENSE_DIR || !(isSea() && process.env.LOCALAPPDATA)) return;
-  const oldDir = (0, import_node_path4.join)(process.env.LOCALAPPDATA, "FlolessApp");
+  const oldDir = (0, import_node_path5.join)(process.env.LOCALAPPDATA, "FlolessApp");
   const newDir = storeDir();
   if (oldDir === newDir) return;
   for (const f of ["floless-license.json", "floless-license-cache.json", "floless-install-id"]) {
     try {
-      const oldP = (0, import_node_path4.join)(oldDir, f);
-      const newP = (0, import_node_path4.join)(newDir, f);
-      if ((0, import_node_fs5.existsSync)(oldP) && !(0, import_node_fs5.existsSync)(newP)) {
-        (0, import_node_fs5.mkdirSync)(newDir, { recursive: true });
-        (0, import_node_fs5.copyFileSync)(oldP, newP);
+      const oldP = (0, import_node_path5.join)(oldDir, f);
+      const newP = (0, import_node_path5.join)(newDir, f);
+      if ((0, import_node_fs6.existsSync)(oldP) && !(0, import_node_fs6.existsSync)(newP)) {
+        (0, import_node_fs6.mkdirSync)(newDir, { recursive: true });
+        (0, import_node_fs6.copyFileSync)(oldP, newP);
       }
     } catch {
     }
@@ -52017,16 +52264,16 @@ function migrateLegacyStore() {
 }
 function readJson(path) {
   try {
-    return (0, import_node_fs5.existsSync)(path) ? JSON.parse((0, import_node_fs5.readFileSync)(path, "utf8")) : null;
+    return (0, import_node_fs6.existsSync)(path) ? JSON.parse((0, import_node_fs6.readFileSync)(path, "utf8")) : null;
   } catch {
     return null;
   }
 }
 function writeJson(path, value) {
-  (0, import_node_fs5.mkdirSync)(storeDir(), { recursive: true });
-  (0, import_node_fs5.writeFileSync)(path, JSON.stringify(value, null, 2), "utf8");
+  (0, import_node_fs6.mkdirSync)(storeDir(), { recursive: true });
+  (0, import_node_fs6.writeFileSync)(path, JSON.stringify(value, null, 2), "utf8");
   try {
-    (0, import_node_fs5.chmodSync)(path, 384);
+    (0, import_node_fs6.chmodSync)(path, 384);
   } catch {
   }
 }
@@ -52059,6 +52306,7 @@ async function resolveToken() {
   const t = readTokens();
   if (!t) return { token: null, reason: "signed-out" };
   if (Date.now() < t.expiresAt - REFRESH_SKEW_MS) return { token: t.accessToken };
+  if (!isTrustedFlolessHost(env().apiBase)) return { token: null, reason: "session-expired" };
   let res;
   try {
     res = await fetch(`${env().apiBase}/auth/refresh`, {
@@ -52164,7 +52412,7 @@ async function ensureSeat(token) {
     const res = await fetch(`${env().apiBase}/seats/claim`, {
       method: "POST",
       headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
-      body: JSON.stringify({ device_fingerprint: installId(), device_name: (0, import_node_os5.hostname)(), os_version: `${process.platform} ${process.arch}` })
+      body: JSON.stringify({ device_fingerprint: installId(), device_name: (0, import_node_os6.hostname)(), os_version: `${process.platform} ${process.arch}` })
     });
     if (!res.ok) return;
     const b = await res.json();
@@ -52185,7 +52433,7 @@ async function seatHeartbeat() {
   try {
     const token = await ensureFreshToken().catch(() => null);
     if (!token) return;
-    const hmac = (0, import_node_crypto2.createHmac)("sha256", seat.hmacSecret).update(seat.nonce).digest("hex");
+    const hmac = (0, import_node_crypto3.createHmac)("sha256", seat.hmacSecret).update(seat.nonce).digest("hex");
     let res;
     try {
       res = await fetch(`${env().apiBase}/seats/heartbeat`, {
@@ -52255,7 +52503,7 @@ function logout() {
   resetSeat();
   for (const p of [tokenPath(), cachePath()]) {
     try {
-      (0, import_node_fs5.rmSync)(p, { force: true });
+      (0, import_node_fs6.rmSync)(p, { force: true });
     } catch {
     }
   }
@@ -52279,7 +52527,7 @@ function openBrowser(url) {
   (0, import_node_child_process2.spawn)(cmd, args, opts).unref();
 }
 async function startLogin() {
-  const sessionId = (0, import_node_crypto2.randomUUID)();
+  const sessionId = (0, import_node_crypto3.randomUUID)();
   const loginUrl = `${env().webBase}/login?desktop=true&session=${sessionId}&app=floless`;
   openBrowser(loginUrl);
   void pollDesktopStatus(sessionId).catch(() => {
@@ -52312,20 +52560,20 @@ async function pollDesktopStatus(sessionId, timeoutMs = 18e4) {
   return false;
 }
 function installId() {
-  const p = (0, import_node_path4.join)(storeDir(), "floless-install-id");
+  const p = (0, import_node_path5.join)(storeDir(), "floless-install-id");
   const existing = readJson(p);
   if (typeof existing === "string" && existing.length >= 80 && existing.length <= 100) {
     return existing;
   }
-  const id = (0, import_node_crypto2.createHash)("sha512").update((0, import_node_crypto2.randomUUID)()).digest("base64");
+  const id = (0, import_node_crypto3.createHash)("sha512").update((0, import_node_crypto3.randomUUID)()).digest("base64");
   writeJson(p, id);
   return id;
 }
 
 // version.ts
 var import_node_module3 = require("node:module");
-var import_node_path5 = require("node:path");
-var import_node_fs6 = require("node:fs");
+var import_node_path6 = require("node:path");
+var import_node_fs7 = require("node:fs");
 function resolveVersion(s) {
   if (s.isSea) {
     const m = s.sqVersionXml?.match(/<version>([^<]+)<\/version>/);
@@ -52344,8 +52592,8 @@ function isSea2() {
 }
 function readSqVersionXml() {
   try {
-    const sq = (0, import_node_path5.join)((0, import_node_path5.dirname)(process.execPath), "sq.version");
-    return (0, import_node_fs6.existsSync)(sq) ? (0, import_node_fs6.readFileSync)(sq, "utf8") : null;
+    const sq = (0, import_node_path6.join)((0, import_node_path6.dirname)(process.execPath), "sq.version");
+    return (0, import_node_fs7.existsSync)(sq) ? (0, import_node_fs7.readFileSync)(sq, "utf8") : null;
   } catch {
     return null;
   }
@@ -52361,7 +52609,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.10.0" : void 0,
+    define: true ? "0.12.0" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -52371,14 +52619,14 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.10.0" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.12.0" : void 0 });
 }
 
 // oauth-presets.ts
-var import_node_os6 = require("node:os");
-var import_node_path6 = require("node:path");
+var import_node_os7 = require("node:os");
+var import_node_path7 = require("node:path");
 var import_node_net = __toESM(require("node:net"), 1);
-var import_node_fs7 = require("node:fs");
+var import_node_fs8 = require("node:fs");
 var MANAGED_HEADER = "# managed by floless.app - do not edit";
 var OAUTH_PRESETS = {
   "trimble-connect": {
@@ -52408,7 +52656,7 @@ function managedProfileYaml(preset) {
   ].join("\n");
 }
 function oauthDir() {
-  return process.env.AWARE_HOME ? (0, import_node_path6.join)(process.env.AWARE_HOME, "oauth") : (0, import_node_path6.join)((0, import_node_os6.homedir)(), ".aware", "oauth");
+  return process.env.AWARE_HOME ? (0, import_node_path7.join)(process.env.AWARE_HOME, "oauth") : (0, import_node_path7.join)((0, import_node_os7.homedir)(), ".aware", "oauth");
 }
 function isUpgradableLegacyProfile(existing, preset) {
   if (existing.startsWith(MANAGED_HEADER)) return false;
@@ -52422,22 +52670,22 @@ function ensureManagedProfile(id) {
   const preset = OAUTH_PRESETS[id];
   if (!preset) return "not-managed";
   const dir = oauthDir();
-  const file = (0, import_node_path6.join)(dir, `${id}.yaml`);
-  const existing = (0, import_node_fs7.existsSync)(file) ? (0, import_node_fs7.readFileSync)(file, "utf8") : null;
+  const file = (0, import_node_path7.join)(dir, `${id}.yaml`);
+  const existing = (0, import_node_fs8.existsSync)(file) ? (0, import_node_fs8.readFileSync)(file, "utf8") : null;
   if (existing !== null && !existing.startsWith(MANAGED_HEADER) && !isUpgradableLegacyProfile(existing, preset)) {
     return "skipped";
   }
   const desired = managedProfileYaml(preset);
   if (existing === desired) return "unchanged";
-  (0, import_node_fs7.mkdirSync)(dir, { recursive: true });
-  (0, import_node_fs7.writeFileSync)(file, desired, "utf8");
+  (0, import_node_fs8.mkdirSync)(dir, { recursive: true });
+  (0, import_node_fs8.writeFileSync)(file, desired, "utf8");
   return "written";
 }
 function isPortBindable(port, host = "127.0.0.1") {
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     const srv = import_node_net.default.createServer();
-    srv.once("error", () => resolve4(false));
-    srv.listen(port, host, () => srv.close(() => resolve4(true)));
+    srv.once("error", () => resolve5(false));
+    srv.listen(port, host, () => srv.close(() => resolve5(true)));
   });
 }
 
@@ -52508,7 +52756,7 @@ function withBadge(report, opts) {
 }
 
 // index.ts
-var import_node_crypto5 = require("node:crypto");
+var import_node_crypto6 = require("node:crypto");
 
 // graft.ts
 var TEKLA_MARKER = "Recipe: Tekla model plug-in";
@@ -52552,16 +52800,16 @@ function buildPreview(m, sourceKind, sourceRef, stagedRef) {
 }
 
 // graft-manifest-reader.ts
-var import_node_fs8 = require("node:fs");
-var import_node_path7 = require("node:path");
+var import_node_fs9 = require("node:fs");
+var import_node_path8 = require("node:path");
 var import_yaml3 = __toESM(require_dist6(), 1);
 var asRecord2 = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
 function readStagedManifest(agentDir) {
-  const manifestPath = (0, import_node_path7.join)(agentDir, "manifest.yaml");
-  if (!(0, import_node_fs8.existsSync)(manifestPath)) return null;
+  const manifestPath = (0, import_node_path8.join)(agentDir, "manifest.yaml");
+  if (!(0, import_node_fs9.existsSync)(manifestPath)) return null;
   let doc;
   try {
-    doc = asRecord2((0, import_yaml3.parse)((0, import_node_fs8.readFileSync)(manifestPath, "utf8")));
+    doc = asRecord2((0, import_yaml3.parse)((0, import_node_fs9.readFileSync)(manifestPath, "utf8")));
   } catch {
     return null;
   }
@@ -52591,10 +52839,10 @@ function readStagedManifest(agentDir) {
   }
   let skillCount = Array.isArray(doc.skills) ? doc.skills.length : 0;
   if (!skillCount) {
-    const skillsDir = (0, import_node_path7.join)(agentDir, "skills");
-    if ((0, import_node_fs8.existsSync)(skillsDir)) {
+    const skillsDir = (0, import_node_path8.join)(agentDir, "skills");
+    if ((0, import_node_fs9.existsSync)(skillsDir)) {
       try {
-        skillCount = (0, import_node_fs8.readdirSync)(skillsDir).filter((f) => f.endsWith(".md")).length;
+        skillCount = (0, import_node_fs9.readdirSync)(skillsDir).filter((f) => f.endsWith(".md")).length;
       } catch {
       }
     }
@@ -52608,7 +52856,7 @@ function readStagedManifest(agentDir) {
 }
 
 // graft-stage-registry.ts
-var import_node_fs9 = require("node:fs");
+var import_node_fs10 = require("node:fs");
 var TTL_MS = 30 * 60 * 1e3;
 var registry = /* @__PURE__ */ new Map();
 function registerStage(token, tempDir, agentId) {
@@ -52630,7 +52878,7 @@ function evict(token) {
   clearTimeout(e.timer);
   registry.delete(token);
   try {
-    (0, import_node_fs9.rmSync)(e.tempDir, { recursive: true, force: true });
+    (0, import_node_fs10.rmSync)(e.tempDir, { recursive: true, force: true });
   } catch {
   }
 }
@@ -52639,8 +52887,8 @@ function clearAllStages() {
 }
 
 // graft-commit.ts
-var import_node_fs10 = require("node:fs");
-var import_node_path8 = require("node:path");
+var import_node_fs11 = require("node:fs");
+var import_node_path9 = require("node:path");
 var GraftCommitError = class extends Error {
   constructor(message, code) {
     super(message);
@@ -52650,34 +52898,34 @@ var GraftCommitError = class extends Error {
   code;
 };
 function commitStaged(tempDir, agentId, targetAgentsDir, force) {
-  const staged = (0, import_node_path8.join)(tempDir, "agents", agentId);
-  const target = (0, import_node_path8.join)(targetAgentsDir, agentId);
-  if ((0, import_node_fs10.existsSync)(target)) {
+  const staged = (0, import_node_path9.join)(tempDir, "agents", agentId);
+  const target = (0, import_node_path9.join)(targetAgentsDir, agentId);
+  if ((0, import_node_fs11.existsSync)(target)) {
     if (!force) throw new GraftCommitError(`an agent named "${agentId}" is already installed`, "collision");
-    (0, import_node_fs10.rmSync)(target, { recursive: true, force: true });
+    (0, import_node_fs11.rmSync)(target, { recursive: true, force: true });
   }
-  (0, import_node_fs10.mkdirSync)(targetAgentsDir, { recursive: true });
+  (0, import_node_fs11.mkdirSync)(targetAgentsDir, { recursive: true });
   try {
-    (0, import_node_fs10.renameSync)(staged, target);
+    (0, import_node_fs11.renameSync)(staged, target);
   } catch {
-    (0, import_node_fs10.cpSync)(staged, target, { recursive: true });
+    (0, import_node_fs11.cpSync)(staged, target, { recursive: true });
   }
-  (0, import_node_fs10.rmSync)(tempDir, { recursive: true, force: true });
+  (0, import_node_fs11.rmSync)(tempDir, { recursive: true, force: true });
   return { agentId };
 }
 function matchAssemblies(globOrDir) {
   let dir;
   let pattern;
-  if ((0, import_node_fs10.existsSync)(globOrDir) && (0, import_node_fs10.statSync)(globOrDir).isDirectory()) {
+  if ((0, import_node_fs11.existsSync)(globOrDir) && (0, import_node_fs11.statSync)(globOrDir).isDirectory()) {
     dir = globOrDir;
     pattern = "*.dll";
   } else {
-    dir = (0, import_node_path8.dirname)(globOrDir);
-    pattern = (0, import_node_path8.basename)(globOrDir);
+    dir = (0, import_node_path9.dirname)(globOrDir);
+    pattern = (0, import_node_path9.basename)(globOrDir);
   }
-  if (!dir || !(0, import_node_fs10.existsSync)(dir) || !(0, import_node_fs10.statSync)(dir).isDirectory()) return [];
+  if (!dir || !(0, import_node_fs11.existsSync)(dir) || !(0, import_node_fs11.statSync)(dir).isDirectory()) return [];
   const re = globToRegExp(pattern);
-  return (0, import_node_fs10.readdirSync)(dir).filter((f) => re.test(f)).sort();
+  return (0, import_node_fs11.readdirSync)(dir).filter((f) => re.test(f)).sort();
 }
 function globToRegExp(p) {
   const esc = p.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
@@ -52685,25 +52933,25 @@ function globToRegExp(p) {
 }
 
 // floless-store.ts
-var import_node_crypto3 = require("node:crypto");
-var import_node_fs11 = require("node:fs");
-var import_node_os7 = require("node:os");
-var import_node_path9 = require("node:path");
-var ROOT = process.env.FLOLESS_HOME ?? (0, import_node_path9.join)((0, import_node_os7.homedir)(), ".floless");
-var TEMPLATES_FILE = (0, import_node_path9.join)(ROOT, "templates.json");
-var REQUESTS_DIR = (0, import_node_path9.join)(ROOT, "requests");
+var import_node_crypto4 = require("node:crypto");
+var import_node_fs12 = require("node:fs");
+var import_node_os8 = require("node:os");
+var import_node_path10 = require("node:path");
+var ROOT2 = process.env.FLOLESS_HOME ?? (0, import_node_path10.join)((0, import_node_os8.homedir)(), ".floless");
+var TEMPLATES_FILE = (0, import_node_path10.join)(ROOT2, "templates.json");
+var REQUESTS_DIR = (0, import_node_path10.join)(ROOT2, "requests");
 function ensureRoot() {
-  if (!(0, import_node_fs11.existsSync)(ROOT)) (0, import_node_fs11.mkdirSync)(ROOT, { recursive: true });
+  if (!(0, import_node_fs12.existsSync)(ROOT2)) (0, import_node_fs12.mkdirSync)(ROOT2, { recursive: true });
 }
 function withinRequestsDir(p) {
-  const base = (0, import_node_path9.resolve)(REQUESTS_DIR);
-  const full = (0, import_node_path9.resolve)(p);
-  return full === base || full.startsWith(base + import_node_path9.sep);
+  const base = (0, import_node_path10.resolve)(REQUESTS_DIR);
+  const full = (0, import_node_path10.resolve)(p);
+  return full === base || full.startsWith(base + import_node_path10.sep);
 }
 function listTemplates() {
-  if (!(0, import_node_fs11.existsSync)(TEMPLATES_FILE)) return [];
+  if (!(0, import_node_fs12.existsSync)(TEMPLATES_FILE)) return [];
   try {
-    const parsed = JSON.parse((0, import_node_fs11.readFileSync)(TEMPLATES_FILE, "utf8"));
+    const parsed = JSON.parse((0, import_node_fs12.readFileSync)(TEMPLATES_FILE, "utf8"));
     return Array.isArray(parsed) ? parsed : [];
   } catch {
     return [];
@@ -52712,12 +52960,12 @@ function listTemplates() {
 function writeTemplates(list) {
   ensureRoot();
   const tmp = `${TEMPLATES_FILE}.${process.pid}.tmp`;
-  (0, import_node_fs11.writeFileSync)(tmp, JSON.stringify(list, null, 2));
-  (0, import_node_fs11.renameSync)(tmp, TEMPLATES_FILE);
+  (0, import_node_fs12.writeFileSync)(tmp, JSON.stringify(list, null, 2));
+  (0, import_node_fs12.renameSync)(tmp, TEMPLATES_FILE);
 }
 function addTemplate(input) {
   const tpl = {
-    id: (0, import_node_crypto3.randomUUID)(),
+    id: (0, import_node_crypto4.randomUUID)(),
     name: input.name.trim(),
     category: (input.category || "Uncategorized").trim(),
     node: input.node,
@@ -52741,13 +52989,13 @@ function getTemplate(id) {
 }
 function addRequest(req, decoded = []) {
   ensureRoot();
-  if (!(0, import_node_fs11.existsSync)(REQUESTS_DIR)) (0, import_node_fs11.mkdirSync)(REQUESTS_DIR, { recursive: true });
-  const id = (0, import_node_crypto3.randomUUID)();
+  if (!(0, import_node_fs12.existsSync)(REQUESTS_DIR)) (0, import_node_fs12.mkdirSync)(REQUESTS_DIR, { recursive: true });
+  const id = (0, import_node_crypto4.randomUUID)();
   const createdAt = (/* @__PURE__ */ new Date()).toISOString();
   const base = `${createdAt.replace(/[:.]/g, "-")}__${id}`;
   const snapshots = decoded.map((d, i) => {
-    const p = (0, import_node_path9.join)(REQUESTS_DIR, `${base}__snap${i + 1}.${d.ext}`);
-    (0, import_node_fs11.writeFileSync)(p, d.buf);
+    const p = (0, import_node_path10.join)(REQUESTS_DIR, `${base}__snap${i + 1}.${d.ext}`);
+    (0, import_node_fs12.writeFileSync)(p, d.buf);
     return p;
   });
   const full = {
@@ -52757,62 +53005,62 @@ function addRequest(req, decoded = []) {
     ...req,
     ...snapshots.length ? { snapshots } : {}
   };
-  (0, import_node_fs11.writeFileSync)((0, import_node_path9.join)(REQUESTS_DIR, `${base}.json`), JSON.stringify(full, null, 2));
+  (0, import_node_fs12.writeFileSync)((0, import_node_path10.join)(REQUESTS_DIR, `${base}.json`), JSON.stringify(full, null, 2));
   return full;
 }
 function listRequests() {
-  if (!(0, import_node_fs11.existsSync)(REQUESTS_DIR)) return [];
-  return (0, import_node_fs11.readdirSync)(REQUESTS_DIR).filter((f) => f.endsWith(".json")).sort().map((f) => {
+  if (!(0, import_node_fs12.existsSync)(REQUESTS_DIR)) return [];
+  return (0, import_node_fs12.readdirSync)(REQUESTS_DIR).filter((f) => f.endsWith(".json")).sort().map((f) => {
     try {
-      return JSON.parse((0, import_node_fs11.readFileSync)((0, import_node_path9.join)(REQUESTS_DIR, f), "utf8"));
+      return JSON.parse((0, import_node_fs12.readFileSync)((0, import_node_path10.join)(REQUESTS_DIR, f), "utf8"));
     } catch {
       return null;
     }
   }).filter((r) => r !== null);
 }
 function deleteRequest(id) {
-  if (!(0, import_node_fs11.existsSync)(REQUESTS_DIR)) return false;
-  const file = (0, import_node_fs11.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
+  if (!(0, import_node_fs12.existsSync)(REQUESTS_DIR)) return false;
+  const file = (0, import_node_fs12.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
   if (!file) return false;
   try {
-    const parsed = JSON.parse((0, import_node_fs11.readFileSync)((0, import_node_path9.join)(REQUESTS_DIR, file), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs12.readFileSync)((0, import_node_path10.join)(REQUESTS_DIR, file), "utf8"));
     for (const p of parsed.snapshots ?? []) {
       if (!withinRequestsDir(p)) continue;
       try {
-        (0, import_node_fs11.rmSync)(p);
+        (0, import_node_fs12.rmSync)(p);
       } catch {
       }
     }
   } catch {
   }
-  (0, import_node_fs11.rmSync)((0, import_node_path9.join)(REQUESTS_DIR, file));
+  (0, import_node_fs12.rmSync)((0, import_node_path10.join)(REQUESTS_DIR, file));
   return true;
 }
 function clearRequests() {
-  if (!(0, import_node_fs11.existsSync)(REQUESTS_DIR)) return 0;
-  const allFiles = (0, import_node_fs11.readdirSync)(REQUESTS_DIR);
+  if (!(0, import_node_fs12.existsSync)(REQUESTS_DIR)) return 0;
+  const allFiles = (0, import_node_fs12.readdirSync)(REQUESTS_DIR);
   const jsonFiles = allFiles.filter((f) => f.endsWith(".json"));
   for (const f of allFiles) {
     try {
-      (0, import_node_fs11.rmSync)((0, import_node_path9.join)(REQUESTS_DIR, f));
+      (0, import_node_fs12.rmSync)((0, import_node_path10.join)(REQUESTS_DIR, f));
     } catch {
     }
   }
   return jsonFiles.length;
 }
 function snapshotPathFor(id, n) {
-  if (!(0, import_node_fs11.existsSync)(REQUESTS_DIR)) return null;
-  const file = (0, import_node_fs11.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
+  if (!(0, import_node_fs12.existsSync)(REQUESTS_DIR)) return null;
+  const file = (0, import_node_fs12.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
   if (!file) return null;
   try {
-    const parsed = JSON.parse((0, import_node_fs11.readFileSync)((0, import_node_path9.join)(REQUESTS_DIR, file), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs12.readFileSync)((0, import_node_path10.join)(REQUESTS_DIR, file), "utf8"));
     const cand = parsed.snapshots?.[n] ?? null;
     return cand && withinRequestsDir(cand) ? cand : null;
   } catch {
     return null;
   }
 }
-var flolessRoot = ROOT;
+var flolessRoot = ROOT2;
 var SnapshotError = class extends Error {
 };
 var MAX_SNAPSHOTS = 8;
@@ -52839,8 +53087,8 @@ function decodeSnapshots(inputs) {
 }
 
 // routines.ts
-var import_node_fs13 = require("node:fs");
-var import_node_path11 = require("node:path");
+var import_node_fs14 = require("node:fs");
+var import_node_path12 = require("node:path");
 
 // sse.ts
 var clients = /* @__PURE__ */ new Set();
@@ -52877,11 +53125,11 @@ function clientCount() {
 }
 
 // trigger-sessions.ts
-var import_node_fs12 = require("node:fs");
-var import_node_os8 = require("node:os");
-var import_node_path10 = require("node:path");
+var import_node_fs13 = require("node:fs");
+var import_node_os9 = require("node:os");
+var import_node_path11 = require("node:path");
 var import_yaml4 = __toESM(require_dist6(), 1);
-var AGENTS_DIR2 = process.env.AWARE_HOME ? (0, import_node_path10.join)(process.env.AWARE_HOME, "agents") : (0, import_node_path10.join)((0, import_node_os8.homedir)(), ".aware", "agents");
+var AGENTS_DIR2 = process.env.AWARE_HOME ? (0, import_node_path11.join)(process.env.AWARE_HOME, "agents") : (0, import_node_path11.join)((0, import_node_os9.homedir)(), ".aware", "agents");
 function summarizeFire(data) {
   if (!data) return "event";
   const type = typeof data.type === "string" ? data.type : "";
@@ -52898,10 +53146,10 @@ function mapTriggerState(phase) {
 function isHostBacked(agent, agentsDir = AGENTS_DIR2) {
   const safe = (n) => !n.includes("/") && !n.includes("\\") && !n.includes("..");
   if (!safe(agent)) return false;
-  const manifestPath = (0, import_node_path10.join)(agentsDir, agent, "manifest.yaml");
-  if (!(0, import_node_fs12.existsSync)(manifestPath)) return false;
+  const manifestPath = (0, import_node_path11.join)(agentsDir, agent, "manifest.yaml");
+  if (!(0, import_node_fs13.existsSync)(manifestPath)) return false;
   try {
-    const doc = (0, import_yaml4.parse)((0, import_node_fs12.readFileSync)(manifestPath, "utf8"));
+    const doc = (0, import_yaml4.parse)((0, import_node_fs13.readFileSync)(manifestPath, "utf8"));
     const transport = doc?.transport;
     return !!(transport && typeof transport === "object" && "cli" in transport);
   } catch {
@@ -53160,7 +53408,7 @@ var RoutineError = class extends Error {
   }
   status;
 };
-var ROUTINES_FILE = (0, import_node_path11.join)(flolessRoot, "routines.json");
+var ROUTINES_FILE = (0, import_node_path12.join)(flolessRoot, "routines.json");
 var routines = [];
 var loaded = false;
 function ensureLoaded() {
@@ -53196,10 +53444,10 @@ function sanitizeRoutine(raw) {
   };
 }
 function loadFromDisk() {
-  if (!(0, import_node_fs13.existsSync)(ROUTINES_FILE)) return [];
+  if (!(0, import_node_fs14.existsSync)(ROUTINES_FILE)) return [];
   let text;
   try {
-    text = (0, import_node_fs13.readFileSync)(ROUTINES_FILE, "utf8");
+    text = (0, import_node_fs14.readFileSync)(ROUTINES_FILE, "utf8");
   } catch {
     return [];
   }
@@ -53208,17 +53456,17 @@ function loadFromDisk() {
     return Array.isArray(parsed) ? parsed.map(sanitizeRoutine).filter((r) => r !== null) : [];
   } catch {
     try {
-      (0, import_node_fs13.renameSync)(ROUTINES_FILE, `${ROUTINES_FILE}.corrupt-${Date.now()}`);
+      (0, import_node_fs14.renameSync)(ROUTINES_FILE, `${ROUTINES_FILE}.corrupt-${Date.now()}`);
     } catch {
     }
     return [];
   }
 }
 function saveRoutines() {
-  if (!(0, import_node_fs13.existsSync)(flolessRoot)) (0, import_node_fs13.mkdirSync)(flolessRoot, { recursive: true });
+  if (!(0, import_node_fs14.existsSync)(flolessRoot)) (0, import_node_fs14.mkdirSync)(flolessRoot, { recursive: true });
   const tmp = `${ROUTINES_FILE}.${process.pid}.tmp`;
-  (0, import_node_fs13.writeFileSync)(tmp, JSON.stringify(routines, null, 2));
-  (0, import_node_fs13.renameSync)(tmp, ROUTINES_FILE);
+  (0, import_node_fs14.writeFileSync)(tmp, JSON.stringify(routines, null, 2));
+  (0, import_node_fs14.renameSync)(tmp, ROUTINES_FILE);
 }
 function listRoutines() {
   ensureLoaded();
@@ -53608,9 +53856,9 @@ function isGatedAwareRoute(url, method) {
 
 // autostart.mjs
 var import_node_child_process3 = require("node:child_process");
-var import_node_fs14 = require("node:fs");
-var import_node_os9 = require("node:os");
-var import_node_path12 = require("node:path");
+var import_node_fs15 = require("node:fs");
+var import_node_os10 = require("node:os");
+var import_node_path13 = require("node:path");
 
 // teardown.mjs
 var RUN_KEY = "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";
@@ -53722,8 +53970,8 @@ function removeLegacyRunKey() {
 }
 function logLine(msg) {
   try {
-    (0, import_node_fs14.mkdirSync)(logDir(), { recursive: true });
-    (0, import_node_fs14.appendFileSync)(logFilePath(), `${(/* @__PURE__ */ new Date()).toISOString()} ${msg}
+    (0, import_node_fs15.mkdirSync)(logDir(), { recursive: true });
+    (0, import_node_fs15.appendFileSync)(logFilePath(), `${(/* @__PURE__ */ new Date()).toISOString()} ${msg}
 `);
   } catch {
   }
@@ -53731,8 +53979,8 @@ function logLine(msg) {
 function registerAutostart(exePath) {
   if (!isWin) return;
   const xml = buildAutostartTaskXml(exePath, currentUserId());
-  const tmp = (0, import_node_path12.join)((0, import_node_os9.tmpdir)(), `floless-autostart-${process.pid}-${Date.now()}.xml`);
-  (0, import_node_fs14.writeFileSync)(tmp, "\uFEFF" + xml, { encoding: "utf16le" });
+  const tmp = (0, import_node_path13.join)((0, import_node_os10.tmpdir)(), `floless-autostart-${process.pid}-${Date.now()}.xml`);
+  (0, import_node_fs15.writeFileSync)(tmp, "\uFEFF" + xml, { encoding: "utf16le" });
   try {
     (0, import_node_child_process3.execFileSync)("schtasks", ["/Create", "/TN", TASK_NAME, "/XML", tmp, "/F"], {
       stdio: ["ignore", "ignore", "ignore"],
@@ -53743,7 +53991,7 @@ function registerAutostart(exePath) {
     throw err;
   } finally {
     try {
-      (0, import_node_fs14.rmSync)(tmp, { force: true });
+      (0, import_node_fs15.rmSync)(tmp, { force: true });
     } catch {
     }
   }
@@ -53777,11 +54025,11 @@ function unregisterAutostart() {
 
 // updater.ts
 var import_node_child_process4 = require("node:child_process");
-var import_node_crypto4 = require("node:crypto");
-var import_node_fs15 = require("node:fs");
+var import_node_crypto5 = require("node:crypto");
+var import_node_fs16 = require("node:fs");
 var import_node_stream = require("node:stream");
 var import_promises = require("node:stream/promises");
-var import_node_path13 = require("node:path");
+var import_node_path14 = require("node:path");
 var CHANNEL = "win";
 var FEED_TIMEOUT_MS = 15e3;
 var DOWNLOAD_TIMEOUT_MS = 3e5;
@@ -53790,30 +54038,18 @@ function currentVersion() {
   return appVersion();
 }
 function installRoot() {
-  return (0, import_node_path13.dirname)((0, import_node_path13.dirname)(process.execPath));
+  return (0, import_node_path14.dirname)((0, import_node_path14.dirname)(process.execPath));
 }
 function updateExePath() {
-  return (0, import_node_path13.join)(installRoot(), "Update.exe");
+  return (0, import_node_path14.join)(installRoot(), "Update.exe");
 }
 function packagesDir() {
-  return (0, import_node_path13.join)(installRoot(), "packages");
+  return (0, import_node_path14.join)(installRoot(), "packages");
 }
 function feedUrl() {
   const env2 = (process.env.FLOLESS_UPDATE_URL ?? "").trim().replace(/\/+$/, "");
   return env2 || updateApiBase();
 }
-function isLoopback(host) {
-  return host === "127.0.0.1" || host === "localhost" || host === "::1" || host.endsWith(".localhost");
-}
-var TRUSTED_FEED_ORIGINS = /* @__PURE__ */ new Set(["https://api.floless.io", "https://api.stage.floless.io"]);
-function isTrustedFlolessHost(url) {
-  try {
-    const u = new URL(url);
-    return isLoopback(u.hostname) || TRUSTED_FEED_ORIGINS.has(u.origin);
-  } catch {
-    return false;
-  }
-}
 async function authedFetch(url, init = {}) {
   const headers = new Headers(init.headers);
   if (isTrustedFlolessHost(url)) {
@@ -53900,23 +54136,23 @@ async function checkForUpdate() {
   return { supported: true, currentVersion: cur, updateAvailable: true, targetVersion: latest.Version, asset: latest };
 }
 async function sha1OfFile(path) {
-  const hash = (0, import_node_crypto4.createHash)("sha1");
-  await (0, import_promises.pipeline)((0, import_node_fs15.createReadStream)(path), hash);
+  const hash = (0, import_node_crypto5.createHash)("sha1");
+  await (0, import_promises.pipeline)((0, import_node_fs16.createReadStream)(path), hash);
   return hash.digest("hex").toUpperCase();
 }
 async function downloadPackage(asset) {
   if (!NUPKG_NAME.test(asset.FileName)) throw new Error(`refusing suspicious package name: ${asset.FileName}`);
   const want = asset.SHA1.toUpperCase();
   const dir = packagesDir();
-  (0, import_node_fs15.mkdirSync)(dir, { recursive: true });
-  const dest = (0, import_node_path13.join)(dir, asset.FileName);
-  if ((0, import_node_fs15.existsSync)(dest) && await sha1OfFile(dest) === want) return dest;
+  (0, import_node_fs16.mkdirSync)(dir, { recursive: true });
+  const dest = (0, import_node_path14.join)(dir, asset.FileName);
+  if ((0, import_node_fs16.existsSync)(dest) && await sha1OfFile(dest) === want) return dest;
   const res = await authedFetch(`${feedUrl()}/${encodeURIComponent(asset.FileName)}`, {
     redirect: "follow",
     signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS)
   });
   if (!res.ok || !res.body) throw new Error(`download failed: HTTP ${res.status} for ${asset.FileName}`);
-  await (0, import_promises.pipeline)(import_node_stream.Readable.fromWeb(res.body), (0, import_node_fs15.createWriteStream)(dest));
+  await (0, import_promises.pipeline)(import_node_stream.Readable.fromWeb(res.body), (0, import_node_fs16.createWriteStream)(dest));
   const got = await sha1OfFile(dest);
   if (got !== want) throw new Error(`SHA1 mismatch for ${asset.FileName}: feed=${want} got=${got}`);
   return dest;
@@ -53925,12 +54161,12 @@ async function applyUpdate(check, opts) {
   if (!check.supported) return { applied: false, message: check.reason ?? "auto-update not supported in this runtime" };
   if (!check.updateAvailable || !check.asset) return { applied: false, message: check.reason ?? "no update available" };
   const exe = updateExePath();
-  if (!(0, import_node_fs15.existsSync)(exe)) {
+  if (!(0, import_node_fs16.existsSync)(exe)) {
     return { applied: false, message: `Update.exe not found at ${exe} \u2014 is this a Velopack install?` };
   }
   const pkg = await downloadPackage(check.asset);
   if (opts?.onBeforeApply) await opts.onBeforeApply();
-  await new Promise((resolve4, reject) => {
+  await new Promise((resolve5, reject) => {
     const child = (0, import_node_child_process4.spawn)(exe, ["apply", "--package", pkg, "--waitPid", String(process.pid)], {
       cwd: installRoot(),
       detached: true,
@@ -53940,7 +54176,7 @@ async function applyUpdate(check, opts) {
     child.once("error", reject);
     child.once("spawn", () => {
       child.unref();
-      resolve4();
+      resolve5();
     });
   });
   return { applied: true, message: `updating to v${check.targetVersion}\u2026 the app will relaunch` };
@@ -53980,6 +54216,43 @@ async function reportIssue(input) {
   return { ok: true, ref };
 }
 
+// report-share.ts
+var SHARE_TIMEOUT_MS = 3e4;
+async function shareReport(input) {
+  let token;
+  try {
+    token = await accessToken();
+  } catch {
+    return { ok: false, error: "offline" };
+  }
+  if (!token) return { ok: false, error: "signed_out" };
+  const url = `${apiBaseUrl()}/reports`;
+  let res;
+  try {
+    res = await authedFetch(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(input),
+      signal: AbortSignal.timeout(SHARE_TIMEOUT_MS)
+    });
+  } catch {
+    return { ok: false, error: "offline" };
+  }
+  if (res.status === 401) return { ok: false, error: "signed_out" };
+  if (res.status === 403) return { ok: false, error: "no_subscription" };
+  if (res.status === 429) return { ok: false, error: "rate_limited" };
+  if (res.status === 413) return { ok: false, error: "too_large" };
+  if (!res.ok) return { ok: false, error: "offline" };
+  try {
+    const b = await res.json();
+    if (typeof b.url === "string" && b.url && new URL(b.url).protocol === "https:") {
+      return { ok: true, url: b.url };
+    }
+  } catch {
+  }
+  return { ok: false, error: "offline" };
+}
+
 // release-notes.ts
 var FETCH_TIMEOUT_MS = 8e3;
 var AWARE_REPO = "aware-aeco/aware";
@@ -54089,15 +54362,19 @@ function summarizeRun(events) {
   }
   return { status, errorNodeId, errorMessage };
 }
+function isTraceCorrupt(events) {
+  if (!events.length) return false;
+  return events.every((e) => e.kind === "unparsed");
+}
 
 // launch.mjs
 var import_node_child_process5 = require("node:child_process");
-var import_node_path14 = require("node:path");
+var import_node_path15 = require("node:path");
 var import_node_url = require("node:url");
-var import_node_fs16 = require("node:fs");
+var import_node_fs17 = require("node:fs");
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_readline = require("node:readline");
-var __dirname2 = (0, import_node_path14.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
+var __dirname2 = (0, import_node_path15.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
 var PORT = Number(process.env.PORT ?? 4317);
 var HEALTH_URL = `http://127.0.0.1:${PORT}/api/health`;
 var BROWSER_URL = `http://floless.localhost:${PORT}`;
@@ -54110,20 +54387,20 @@ var log = (m) => {
   }
 };
 function ping() {
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     const req = import_node_http.default.get(HEALTH_URL, { timeout: 1500 }, (res) => {
       res.resume();
-      resolve4(res.statusCode === 200);
+      resolve5(res.statusCode === 200);
     });
-    req.on("error", () => resolve4(false));
+    req.on("error", () => resolve5(false));
     req.on("timeout", () => {
       req.destroy();
-      resolve4(false);
+      resolve5(false);
     });
   });
 }
 function probeVersion() {
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     const req = import_node_http.default.get(HEALTH_URL, { timeout: 1500 }, (res) => {
       let body = "";
       res.on("data", (c) => {
@@ -54131,16 +54408,16 @@ function probeVersion() {
       });
       res.on("end", () => {
         try {
-          resolve4(JSON.parse(body).appVersion || null);
+          resolve5(JSON.parse(body).appVersion || null);
         } catch {
-          resolve4(null);
+          resolve5(null);
         }
       });
     });
-    req.on("error", () => resolve4(null));
+    req.on("error", () => resolve5(null));
     req.on("timeout", () => {
       req.destroy();
-      resolve4(null);
+      resolve5(null);
     });
   });
 }
@@ -54169,8 +54446,8 @@ async function waitHealthy(timeoutMs = 3e4) {
 function resolveServerStart() {
   const packaged = /flolessapp\.exe$/i.test(process.execPath);
   if (packaged) return { cmd: process.execPath, args: ["--serve"], shell: false };
-  const bundle = (0, import_node_path14.join)(__dirname2, "dist", "floless-server.cjs");
-  if ((0, import_node_fs16.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
+  const bundle = (0, import_node_path15.join)(__dirname2, "dist", "floless-server.cjs");
+  if ((0, import_node_fs17.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
   return { cmd: "npm", args: ["run", "start"], shell: isWin2 };
 }
 function startServerDetached() {
@@ -54318,8 +54595,8 @@ function taskkillArgs(pid, { tree = true } = {}) {
 }
 function killSupervisor({ tree = true } = {}) {
   if (!isWin2) return;
-  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path14.basename)(process.execPath));
-  const scriptMatch = isNpmChannel ? (0, import_node_path14.basename)((0, import_node_url.fileURLToPath)(__import_meta_url)) : void 0;
+  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path15.basename)(process.execPath));
+  const scriptMatch = isNpmChannel ? (0, import_node_path15.basename)((0, import_node_url.fileURLToPath)(__import_meta_url)) : void 0;
   const realExe = resolveRealInstallExe(process.execPath);
   const exeMatch = realExe === process.execPath ? process.execPath : [process.execPath, realExe];
   const pids = supervisorPidsToKill(enumerateProcesses(), process.pid, exeMatch, scriptMatch);
@@ -54352,15 +54629,15 @@ async function cmdRestart() {
   await cmdOpen();
 }
 function apiJson(path, method = "GET") {
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const req = import_node_http.default.request(`http://127.0.0.1:${PORT}${path}`, { method, timeout: 5e3 }, (res) => {
       let body = "";
       res.on("data", (c) => body += c);
       res.on("end", () => {
         try {
-          resolve4(JSON.parse(body || "{}"));
+          resolve5(JSON.parse(body || "{}"));
         } catch {
-          resolve4({});
+          resolve5({});
         }
       });
     });
@@ -54426,11 +54703,11 @@ function removeRegistryFootprint() {
   }
 }
 function promptYesNo(question) {
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     const rl = (0, import_node_readline.createInterface)({ input: process.stdin, output: process.stdout });
     rl.question(`${question} `, (answer) => {
       rl.close();
-      resolve4(/^y(es)?$/i.test((answer ?? "").trim()));
+      resolve5(/^y(es)?$/i.test((answer ?? "").trim()));
     });
   });
 }
@@ -54484,7 +54761,7 @@ async function runAction(arg, flagArgv = [], selfVersion = null) {
   }
   await action(parseTeardownFlags(flagArgv));
 }
-var entry = (0, import_node_path14.basename)(process.argv[1] ?? "").toLowerCase();
+var entry = (0, import_node_path15.basename)(process.argv[1] ?? "").toLowerCase();
 if (entry === "launch.mjs") {
   runAction(process.argv[2], process.argv.slice(3)).catch((e) => {
     log(`error: ${e?.message ?? e}`);
@@ -54558,9 +54835,9 @@ function awareUpgradeBlockReason(s) {
 }
 
 // skill-sync.ts
-var import_node_fs17 = require("node:fs");
-var import_node_os10 = require("node:os");
-var import_node_path15 = require("node:path");
+var import_node_fs18 = require("node:fs");
+var import_node_os11 = require("node:os");
+var import_node_path16 = require("node:path");
 var import_node_url2 = require("node:url");
 var import_yaml5 = __toESM(require_dist6(), 1);
 
@@ -54574,6 +54851,8 @@ var PRODUCT_SKILLS = [
   //  file a diagnosed bug/idea/question to the private log via the floless.io relay
   "floless-app-routines",
   //      author event-driven ("on trigger") routines
+  "floless-app-ui",
+  //            compose Custom Panels (~/.floless/ui/extensions.json) for the Dashboard
   "floless-app-workflows"
   //     author/run .flo workflows
 ];
@@ -54583,30 +54862,30 @@ function selectShippedSkillNames(names) {
 }
 
 // skill-sync.ts
-var __dirname3 = (0, import_node_path15.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
+var __dirname3 = (0, import_node_path16.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
 function bundledSkillsRoot() {
   const candidates = [
-    (0, import_node_path15.join)(__dirname3, "skills"),
-    (0, import_node_path15.join)((0, import_node_path15.dirname)(process.execPath), "skills"),
-    (0, import_node_path15.join)(__dirname3, "..", ".claude", "skills")
+    (0, import_node_path16.join)(__dirname3, "skills"),
+    (0, import_node_path16.join)((0, import_node_path16.dirname)(process.execPath), "skills"),
+    (0, import_node_path16.join)(__dirname3, "..", ".claude", "skills")
   ];
-  return candidates.find((p) => (0, import_node_fs17.existsSync)(p)) ?? null;
+  return candidates.find((p) => (0, import_node_fs18.existsSync)(p)) ?? null;
 }
 function targetConfigDirs() {
   const override = process.env.FLOLESS_SKILL_TARGETS;
   if (override) {
     return override.split(";").map((d) => d.trim()).filter(Boolean).map((dir) => ({ runtime: "custom", dir }));
   }
-  const home = (0, import_node_os10.homedir)();
+  const home = (0, import_node_os11.homedir)();
   return [
-    { runtime: "claude", dir: (0, import_node_path15.join)(home, ".claude") },
-    { runtime: "codex", dir: (0, import_node_path15.join)(home, ".codex") },
-    { runtime: "opencode", dir: (0, import_node_path15.join)(home, ".opencode") }
+    { runtime: "claude", dir: (0, import_node_path16.join)(home, ".claude") },
+    { runtime: "codex", dir: (0, import_node_path16.join)(home, ".codex") },
+    { runtime: "opencode", dir: (0, import_node_path16.join)(home, ".opencode") }
   ];
 }
 function skillVersion(skillMdPath) {
   try {
-    const text = (0, import_node_fs17.readFileSync)(skillMdPath, "utf8");
+    const text = (0, import_node_fs18.readFileSync)(skillMdPath, "utf8");
     const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(text);
     if (!m || m[1] === void 0) return null;
     const fm = (0, import_yaml5.parse)(m[1]);
@@ -54646,21 +54925,21 @@ function decideAction(installed, bundled) {
 function bundledSkills(root) {
   let entries = [];
   try {
-    entries = selectShippedSkillNames((0, import_node_fs17.readdirSync)(root));
+    entries = selectShippedSkillNames((0, import_node_fs18.readdirSync)(root));
   } catch {
     return [];
   }
   const out = [];
   for (const name of entries) {
-    const dir = (0, import_node_path15.join)(root, name);
+    const dir = (0, import_node_path16.join)(root, name);
     let isDir = false;
     try {
-      isDir = (0, import_node_fs17.statSync)(dir).isDirectory();
+      isDir = (0, import_node_fs18.statSync)(dir).isDirectory();
     } catch {
       isDir = false;
     }
     if (!isDir) continue;
-    const v = skillVersion((0, import_node_path15.join)(dir, "SKILL.md"));
+    const v = skillVersion((0, import_node_path16.join)(dir, "SKILL.md"));
     if (!v) continue;
     out.push({ name, dir, version: v });
   }
@@ -54673,17 +54952,17 @@ function syncSkills() {
   const skills = bundledSkills(root);
   if (!skills.length) return results;
   for (const { runtime, dir: cfg } of targetConfigDirs()) {
-    if (!(0, import_node_fs17.existsSync)(cfg)) continue;
-    const skillsDir = (0, import_node_path15.join)(cfg, "skills");
+    if (!(0, import_node_fs18.existsSync)(cfg)) continue;
+    const skillsDir = (0, import_node_path16.join)(cfg, "skills");
     for (const s of skills) {
-      const dest = (0, import_node_path15.join)(skillsDir, s.name);
-      const installedMd = (0, import_node_path15.join)(dest, "SKILL.md");
-      const installed = (0, import_node_fs17.existsSync)(installedMd) ? skillVersion(installedMd) : null;
+      const dest = (0, import_node_path16.join)(skillsDir, s.name);
+      const installedMd = (0, import_node_path16.join)(dest, "SKILL.md");
+      const installed = (0, import_node_fs18.existsSync)(installedMd) ? skillVersion(installedMd) : null;
       const action = decideAction(installed, s.version);
       if (action === "installed" || action === "updated") {
         try {
-          if (action === "updated") (0, import_node_fs17.rmSync)(dest, { recursive: true, force: true });
-          (0, import_node_fs17.cpSync)(s.dir, dest, { recursive: true });
+          if (action === "updated") (0, import_node_fs18.rmSync)(dest, { recursive: true, force: true });
+          (0, import_node_fs18.cpSync)(s.dir, dest, { recursive: true });
           results.push({ runtime, skill: s.name, action, from: installed, to: s.version });
         } catch {
         }
@@ -54696,9 +54975,9 @@ function syncSkills() {
 }
 
 // watch.ts
-var import_node_os11 = require("node:os");
-var import_node_path17 = require("node:path");
-var import_node_fs18 = require("node:fs");
+var import_node_os12 = require("node:os");
+var import_node_path18 = require("node:path");
+var import_node_fs19 = require("node:fs");
 
 // node_modules/chokidar/esm/index.js
 var import_fs2 = require("fs");
@@ -54709,7 +54988,7 @@ var sysPath2 = __toESM(require("path"), 1);
 // node_modules/readdirp/esm/index.js
 var import_promises2 = require("node:fs/promises");
 var import_node_stream2 = require("node:stream");
-var import_node_path16 = require("node:path");
+var import_node_path17 = require("node:path");
 var EntryTypes = {
   FILE_TYPE: "files",
   DIR_TYPE: "directories",
@@ -54784,7 +55063,7 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
     this._wantsDir = type ? DIR_TYPES.has(type) : false;
     this._wantsFile = type ? FILE_TYPES.has(type) : false;
     this._wantsEverything = type === EntryTypes.EVERYTHING_TYPE;
-    this._root = (0, import_node_path16.resolve)(root);
+    this._root = (0, import_node_path17.resolve)(root);
     this._isDirent = !opts.alwaysStat;
     this._statsProp = this._isDirent ? "dirent" : "stats";
     this._rdOptions = { encoding: "utf8", withFileTypes: this._isDirent };
@@ -54855,8 +55134,8 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
     let entry2;
     const basename5 = this._isDirent ? dirent.name : dirent;
     try {
-      const fullPath = (0, import_node_path16.resolve)((0, import_node_path16.join)(path, basename5));
-      entry2 = { path: (0, import_node_path16.relative)(this._root, fullPath), fullPath, basename: basename5 };
+      const fullPath = (0, import_node_path17.resolve)((0, import_node_path17.join)(path, basename5));
+      entry2 = { path: (0, import_node_path17.relative)(this._root, fullPath), fullPath, basename: basename5 };
       entry2[this._statsProp] = this._isDirent ? dirent : await this._stat(fullPath);
     } catch (err) {
       this._onError(err);
@@ -54890,7 +55169,7 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
         }
         if (entryRealPathStats.isDirectory()) {
           const len = entryRealPath.length;
-          if (full.startsWith(entryRealPath) && full.substr(len, 1) === import_node_path16.sep) {
+          if (full.startsWith(entryRealPath) && full.substr(len, 1) === import_node_path17.sep) {
             const recursiveError = new Error(`Circular symlink detected: "${full}" points to "${entryRealPath}"`);
             recursiveError.code = RECURSIVE_ERROR_CODE;
             return this._onError(recursiveError);
@@ -55554,7 +55833,7 @@ var NodeFsHandler = class {
         this._addToNodeFs(path, initialAdd, wh, depth + 1);
       }
     }).on(EV.ERROR, this._boundHandleError);
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       if (!stream)
         return reject();
       stream.once(STR_END, () => {
@@ -55563,7 +55842,7 @@ var NodeFsHandler = class {
           return;
         }
         const wasThrottled = throttler ? throttler.clear() : false;
-        resolve4(void 0);
+        resolve5(void 0);
         previous.getChildren().filter((item) => {
           return item !== directory && !current.has(item);
         }).forEach((item) => {
@@ -56397,16 +56676,34 @@ function appIdFromLogPath(path) {
   const i = parts.lastIndexOf("logs");
   return i >= 0 && parts[i + 1] ? parts[i + 1] : null;
 }
+function samePath(a, b) {
+  const ra = (0, import_node_path18.resolve)(a);
+  const rb = (0, import_node_path18.resolve)(b);
+  return process.platform === "win32" ? ra.toLowerCase() === rb.toLowerCase() : ra === rb;
+}
+function underDir(path, dir) {
+  const rp = (0, import_node_path18.resolve)(path);
+  const rd = (0, import_node_path18.resolve)(dir);
+  const [p, d] = process.platform === "win32" ? [rp.toLowerCase(), rd.toLowerCase()] : [rp, rd];
+  return p === d || p.startsWith(d + import_node_path18.sep);
+}
 function startWatcher() {
-  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path17.join)((0, import_node_os11.homedir)(), ".aware");
-  const credentialsDir = (0, import_node_path17.join)(awareDir, "credentials");
-  if (!(0, import_node_fs18.existsSync)(credentialsDir)) {
+  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path18.join)((0, import_node_os12.homedir)(), ".aware");
+  const credentialsDir = (0, import_node_path18.join)(awareDir, "credentials");
+  if (!(0, import_node_fs19.existsSync)(credentialsDir)) {
     try {
-      (0, import_node_fs18.mkdirSync)(credentialsDir, { recursive: true });
+      (0, import_node_fs19.mkdirSync)(credentialsDir, { recursive: true });
     } catch {
     }
   }
-  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path17.join)(awareDir, d)).filter((p) => (0, import_node_fs18.existsSync)(p));
+  if (!(0, import_node_fs19.existsSync)(uiDir)) {
+    try {
+      (0, import_node_fs19.mkdirSync)(uiDir, { recursive: true });
+    } catch {
+    }
+  }
+  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path18.join)(awareDir, d)).filter((p) => (0, import_node_fs19.existsSync)(p));
+  if ((0, import_node_fs19.existsSync)(uiDir)) targets.push(uiDir);
   if (targets.length === 0) {
     return null;
   }
@@ -56414,15 +56711,33 @@ function startWatcher() {
     ignoreInitial: true,
     awaitWriteFinish: { stabilityThreshold: 150, pollInterval: 50 }
   });
+  let lastExtContent = readExtensionsText();
+  const handleExtensionsChange = () => {
+    const next = readExtensionsText();
+    if (next === lastExtContent) return;
+    if (lastExtContent !== null) {
+      try {
+        snapshotExtensions(lastExtContent);
+      } catch (err) {
+        console.warn("[floless] failed to snapshot the previous extensions.json before a change (undo for this step is lost):", err);
+      }
+    }
+    lastExtContent = next;
+    broadcast({ type: "extensions-changed" });
+  };
   watcher.on("all", (event, path) => {
+    if (underDir(path, uiDir)) {
+      if (samePath(path, extensionsFile)) handleExtensionsChange();
+      return;
+    }
     const isCredential = path.split(/[\\/]/).includes("credentials");
     const kind = isCredential ? "credential" : path.endsWith(".jsonl") ? "trace" : path.endsWith(".lock") ? "lock" : path.endsWith(".flo") || path.endsWith(".app") ? "source" : "file";
     broadcast({ type: "fs-change", kind, event, path });
-    if (kind === "trace" && event !== "unlink" && (0, import_node_fs18.existsSync)(path)) {
+    if (kind === "trace" && event !== "unlink" && (0, import_node_fs19.existsSync)(path)) {
       const id = appIdFromLogPath(path);
       if (!id) return;
       try {
-        broadcast({ type: "trace-file", id, runId: path.split(import_node_path17.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs18.readFileSync)(path, "utf8")) });
+        broadcast({ type: "trace-file", id, runId: path.split(import_node_path18.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs19.readFileSync)(path, "utf8")) });
       } catch {
       }
     }
@@ -56431,10 +56746,10 @@ function startWatcher() {
 }
 
 // index.ts
-var __dirname4 = (0, import_node_path18.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
-var WEB_ROOT = [(0, import_node_path18.join)(__dirname4, "web"), (0, import_node_path18.join)((0, import_node_path18.dirname)(process.execPath), "web"), (0, import_node_path18.join)(__dirname4, "..", "web")].find(
-  (p) => (0, import_node_fs19.existsSync)(p)
-) ?? (0, import_node_path18.join)(__dirname4, "..", "web");
+var __dirname4 = (0, import_node_path19.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
+var WEB_ROOT = [(0, import_node_path19.join)(__dirname4, "web"), (0, import_node_path19.join)((0, import_node_path19.dirname)(process.execPath), "web"), (0, import_node_path19.join)(__dirname4, "..", "web")].find(
+  (p) => (0, import_node_fs20.existsSync)(p)
+) ?? (0, import_node_path19.join)(__dirname4, "..", "web");
 var PORT2 = Number(process.env.PORT ?? 4317);
 var HOST = "127.0.0.1";
 function extractReportHtml(events) {
@@ -56461,7 +56776,7 @@ function installCrashHandlers() {
 ${stack}
 `;
     try {
-      (0, import_node_fs19.appendFileSync)(logFilePath(), line);
+      (0, import_node_fs20.appendFileSync)(logFilePath(), line);
     } catch {
     }
     if (process.stderr.isTTY) process.stderr.write(line);
@@ -56504,7 +56819,7 @@ async function startServer() {
   };
   function installAwareGlobal(spec, onLine = () => {
   }) {
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       const child = (0, import_node_child_process6.spawn)("npm", ["i", "-g", `@aware-aeco/cli@${spec}`], { shell: isWin3, windowsHide: true });
       let stderrTail = "";
       let combinedTail = "";
@@ -56521,7 +56836,7 @@ async function startServer() {
         onLine(s.trimEnd());
       });
       child.on("error", (e) => reject(e));
-      child.on("close", (code) => code === 0 ? resolve4() : reject(new Error(`npm exited ${code}: ${stderrTail || combinedTail}`)));
+      child.on("close", (code) => code === 0 ? resolve5() : reject(new Error(`npm exited ${code}: ${stderrTail || combinedTail}`)));
     });
   }
   const bootstrapDeps = {
@@ -56548,6 +56863,9 @@ async function startServer() {
       app.log.warn({ detail: err.detail }, err.message);
       return reply.status(502).send({ ok: false, error: err.message, detail: err.detail ?? null });
     }
+    if (err.statusCode === 413) {
+      return reply.status(413).send({ ok: false, error: "too_large" });
+    }
     app.log.error(err);
     return reply.status(500).send({ ok: false, error: err.message });
   });
@@ -56628,6 +56946,20 @@ async function startServer() {
       return reply.status(status).send({ ok: false, error: result.error });
     }
   );
+  app.post(
+    "/api/share-report",
+    { bodyLimit: 6 * 1024 * 1024 },
+    async (req, reply) => {
+      const b = req.body ?? {};
+      const html = typeof b.html === "string" ? b.html : "";
+      const title = typeof b.title === "string" ? b.title.trim().slice(0, 200) : "";
+      if (!html) return reply.status(400).send({ ok: false, error: "html is required" });
+      const result = await shareReport({ title: title || "FloLess report", html });
+      if (result.ok) return { ok: true, url: result.url };
+      const status = result.error === "signed_out" ? 401 : result.error === "no_subscription" ? 403 : result.error === "rate_limited" ? 429 : result.error === "too_large" ? 413 : 503;
+      return reply.status(status).send({ ok: false, error: result.error });
+    }
+  );
   app.get("/api/autostart", async () => {
     const supported = autostartSupported();
     return { ok: true, supported, enabled: supported ? autostartPresent() : false };
@@ -56789,13 +57121,13 @@ async function startServer() {
     }
     const inputs = appData.inputs.map((i) => ({ name: i.name, type: i.type }));
     const baked = bakeFloSource(appData.source.text, inputs);
-    const tmpRoot = (0, import_node_fs19.mkdtempSync)((0, import_node_path18.join)((0, import_node_os12.tmpdir)(), "floless-bake-"));
-    const backupDir = (0, import_node_path18.join)(tmpRoot, `${id}-backup`);
-    const bakeDir = (0, import_node_path18.join)(tmpRoot, id);
-    (0, import_node_fs19.cpSync)(appDir(id), backupDir, { recursive: true });
-    (0, import_node_fs19.cpSync)(appDir(id), bakeDir, { recursive: true });
+    const tmpRoot = (0, import_node_fs20.mkdtempSync)((0, import_node_path19.join)((0, import_node_os13.tmpdir)(), "floless-bake-"));
+    const backupDir = (0, import_node_path19.join)(tmpRoot, `${id}-backup`);
+    const bakeDir = (0, import_node_path19.join)(tmpRoot, id);
+    (0, import_node_fs20.cpSync)(appDir(id), backupDir, { recursive: true });
+    (0, import_node_fs20.cpSync)(appDir(id), bakeDir, { recursive: true });
     const floName = appData.source.path.split(/[\\/]/).pop();
-    (0, import_node_fs19.writeFileSync)((0, import_node_path18.join)(bakeDir, floName), baked);
+    (0, import_node_fs20.writeFileSync)((0, import_node_path19.join)(bakeDir, floName), baked);
     let appInstalled = true;
     try {
       await aware.uninstall(id);
@@ -56817,17 +57149,17 @@ async function startServer() {
         throw installErr;
       }
       try {
-        await aware.compile((0, import_node_path18.join)(appDir(id), floName));
+        await aware.compile((0, import_node_path19.join)(appDir(id), floName));
       } catch (compileErr) {
         app.log.warn({ id, compileErr: String(compileErr) }, "bake: post-install recompile failed (app baked but may need a manual Compile)");
       }
       broadcast({ type: "baked", id });
       return { ok: true, id, agent: id, inputs };
     } finally {
-      if (appInstalled) (0, import_node_fs19.rmSync)(tmpRoot, { recursive: true, force: true });
+      if (appInstalled) (0, import_node_fs20.rmSync)(tmpRoot, { recursive: true, force: true });
     }
   });
-  const graftAgentsDir = () => (0, import_node_path18.join)((0, import_node_os12.homedir)(), ".aware", "agents");
+  const graftAgentsDir = () => (0, import_node_path19.join)((0, import_node_os13.homedir)(), ".aware", "agents");
   app.post("/api/graft/match", async (req, reply) => {
     const { glob } = req.body ?? {};
     if (!glob) return reply.status(400).send({ ok: false, error: "glob required" });
@@ -56844,7 +57176,7 @@ async function startServer() {
     if (!sourceKind || !sourceRef) {
       return reply.status(400).send({ ok: false, error: "sourceKind and sourceRef required" });
     }
-    const tempHome = (0, import_node_fs19.mkdtempSync)((0, import_node_path18.join)((0, import_node_os12.tmpdir)(), "floless-graft-"));
+    const tempHome = (0, import_node_fs20.mkdtempSync)((0, import_node_path19.join)((0, import_node_os13.tmpdir)(), "floless-graft-"));
     let result;
     try {
       result = await aware.build({
@@ -56857,19 +57189,19 @@ async function startServer() {
         awareHome: tempHome
       });
     } catch (err) {
-      (0, import_node_fs19.rmSync)(tempHome, { recursive: true, force: true });
+      (0, import_node_fs20.rmSync)(tempHome, { recursive: true, force: true });
       const msg = err instanceof AwareError ? err.message : String(err?.message ?? err);
       return reply.status(422).send({ ok: false, error: msg });
     }
     const manifest = readStagedManifest(result.agentDir);
     if (!manifest) {
-      (0, import_node_fs19.rmSync)(tempHome, { recursive: true, force: true });
+      (0, import_node_fs20.rmSync)(tempHome, { recursive: true, force: true });
       return reply.status(502).send({ ok: false, error: `build produced output at ${result.agentDir} but no manifest.yaml` });
     }
-    const token = (0, import_node_crypto5.randomUUID)();
+    const token = (0, import_node_crypto6.randomUUID)();
     registerStage(token, tempHome, result.agentId);
     const preview = buildPreview(manifest, sourceKind, sourceRef, token);
-    if ((0, import_node_fs19.existsSync)((0, import_node_path18.join)(graftAgentsDir(), result.agentId))) {
+    if ((0, import_node_fs20.existsSync)((0, import_node_path19.join)(graftAgentsDir(), result.agentId))) {
       preview.warnings.unshift(`An agent named "${result.agentId}" is already installed \u2014 creating it will overwrite it.`);
     }
     return { ok: true, preview };
@@ -56888,7 +57220,7 @@ async function startServer() {
         registerStage(stagedRef, stage.tempDir, stage.agentId);
         return reply.status(409).send({ ok: false, error: err.message, agentId: stage.agentId, collision: true });
       }
-      (0, import_node_fs19.rmSync)(stage.tempDir, { recursive: true, force: true });
+      (0, import_node_fs20.rmSync)(stage.tempDir, { recursive: true, force: true });
       throw err;
     }
     broadcast({ type: "grafted", id: stage.agentId });
@@ -57062,11 +57394,11 @@ async function startServer() {
   app.get("/api/requests/:id/snapshot/:n", async (req, reply) => {
     const n = Number.parseInt(req.params.n, 10);
     const p = Number.isInteger(n) ? snapshotPathFor(req.params.id, n) : null;
-    if (!p || !(0, import_node_fs19.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
+    if (!p || !(0, import_node_fs20.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
     const ext = p.split(".").pop().toLowerCase();
     reply.header("Content-Type", ext === "png" ? "image/png" : ext === "webp" ? "image/webp" : "image/jpeg");
     reply.header("Cache-Control", "no-store");
-    return (0, import_node_fs19.readFileSync)(p);
+    return (0, import_node_fs20.readFileSync)(p);
   });
   app.post(
     "/api/tweak",
@@ -57106,6 +57438,158 @@ async function startServer() {
     broadcast({ type: "requests-changed" });
     return { ok: true, cleared };
   });
+  const EXT_SOURCE_REF = /^[A-Za-z0-9._-]+$/;
+  function pickRows(v) {
+    const isRowArray = (x) => Array.isArray(x) && x.length > 0 && x.every((r) => !!r && typeof r === "object" && !Array.isArray(r));
+    if (isRowArray(v)) return v;
+    if (v && typeof v === "object") {
+      for (const key of ["rows", "items", "data"]) {
+        const inner = v[key];
+        if (isRowArray(inner)) return inner;
+      }
+    }
+    return null;
+  }
+  function extractRunRows(events) {
+    let rows = null;
+    for (const ev of events) {
+      const data = ev.data;
+      if (!data || typeof data !== "object") continue;
+      const found = pickRows(data.result ?? data);
+      if (found) rows = found;
+    }
+    return rows;
+  }
+  const EXT_TRACE_MAX_BYTES = 5 * 1024 * 1024;
+  function resolveExtensionSource(source, warn = () => {
+  }) {
+    const sep3 = source.indexOf(":");
+    if (sep3 <= 0) return void 0;
+    const kind = source.slice(0, sep3);
+    const ref = source.slice(sep3 + 1);
+    if (!EXT_SOURCE_REF.test(ref)) return void 0;
+    if (kind === "last-run-output") {
+      const latest = readLatestTrace(ref, void 0, EXT_TRACE_MAX_BYTES);
+      if (!latest) return void 0;
+      const events = parseTrace(latest.text);
+      if (!latest.truncated && isTraceCorrupt(events)) {
+        warn(`last-run-output:${ref} \u2014 trace exists but couldn't be parsed (corrupt/truncated)`);
+        return { appId: ref, runId: latest.runId, status: "unknown", rows: null, html: null, traceUnreadable: true };
+      }
+      return {
+        appId: ref,
+        runId: latest.runId,
+        status: summarizeRun(events).status,
+        rows: extractRunRows(events),
+        html: withBadge(extractReportHtml(events))?.html ?? null
+      };
+    }
+    if (kind === "last-run-status") {
+      const latest = readLatestTrace(ref, void 0, EXT_TRACE_MAX_BYTES);
+      if (!latest) return { appId: ref, status: "none", finishedAt: null, runId: null };
+      const events = parseTrace(latest.text);
+      if (!latest.truncated && isTraceCorrupt(events)) {
+        warn(`last-run-status:${ref} \u2014 trace exists but couldn't be parsed (corrupt/truncated)`);
+        let finishedAt2 = null;
+        try {
+          finishedAt2 = (0, import_node_fs20.statSync)(latest.path).mtime.toISOString();
+        } catch {
+          finishedAt2 = null;
+        }
+        return { appId: ref, status: "unknown", finishedAt: finishedAt2, runId: latest.runId, traceUnreadable: true };
+      }
+      const runEnd = [...events].reverse().find((e) => e.kind === "run-end");
+      let finishedAt = typeof runEnd?.ts === "string" ? runEnd.ts : null;
+      if (!finishedAt) {
+        try {
+          finishedAt = (0, import_node_fs20.statSync)(latest.path).mtime.toISOString();
+        } catch {
+          finishedAt = null;
+        }
+      }
+      return { appId: ref, status: summarizeRun(events).status, finishedAt, runId: latest.runId };
+    }
+    if (kind === "routine-status") {
+      const routines2 = listRoutines();
+      const r = routines2.find((x) => x.id === ref) ?? routines2.find((x) => x.workflow === ref);
+      if (!r) return void 0;
+      return {
+        id: r.id,
+        name: r.name,
+        workflow: r.workflow,
+        kind: r.kind,
+        enabled: r.enabled,
+        nextFireAt: r.nextFireAt,
+        lastRun: r.lastRun,
+        broken: r.broken ?? null
+      };
+    }
+    return void 0;
+  }
+  let uiAgentInstallKicked = false;
+  let validationCache = null;
+  app.get("/api/extensions", async () => {
+    const descriptor = readExtensions();
+    let validation = null;
+    if (descriptor !== null) {
+      const cacheKey = JSON.stringify(descriptor);
+      if (validationCache && validationCache.key === cacheKey) {
+        return finishExtensions(descriptor, validationCache.result);
+      }
+      try {
+        validation = await aware.agentInvoke("ui", "validate", { descriptor }) ?? null;
+        if (validation) validationCache = { key: cacheKey, result: validation };
+      } catch (err) {
+        const mapped = classifyValidateError(err);
+        if (mapped.installing && !uiAgentInstallKicked) {
+          uiAgentInstallKicked = true;
+          aware.ensureAgentInstalled("ui").then(() => broadcast({ type: "extensions-changed" })).catch((e) => app.log.warn({ err: String(e) }, "ui agent auto-install failed"));
+        }
+        if (mapped.unexpected) app.log.warn({ err: String(err) }, "ui validate failed unexpectedly");
+        validation = mapped;
+        if (!mapped.installing && !mapped.unexpected) validationCache = { key: cacheKey, result: validation };
+      }
+    }
+    return finishExtensions(descriptor, validation);
+  });
+  function finishExtensions(descriptor, validation) {
+    const data = {};
+    for (const panel of descriptorPanels(descriptor)) {
+      const blocks = Array.isArray(panel.blocks) ? panel.blocks : [];
+      for (const block of blocks) {
+        if (!block || typeof block !== "object") continue;
+        const b = block;
+        if (b.type !== "table" && b.type !== "report") continue;
+        const src = b.source;
+        if (typeof src !== "string" || src in data) continue;
+        try {
+          const payload = resolveExtensionSource(src, (msg) => app.log.warn(msg));
+          if (payload !== void 0) data[src] = payload;
+        } catch {
+        }
+      }
+    }
+    return { ok: true, descriptor, validation, data };
+  }
+  app.post("/api/extensions/customize", async (req, reply) => {
+    const instruction = typeof req.body?.instruction === "string" ? req.body.instruction.trim() : "";
+    if (!instruction) return reply.status(400).send({ ok: false, error: "instruction required" });
+    const panelId = typeof req.body?.panelId === "string" && req.body.panelId.trim() ? req.body.panelId.trim() : void 0;
+    const request = addRequest({ type: "ui-customize", instruction, ...panelId ? { panelId } : {} });
+    broadcast({ type: "request-added", request });
+    return { ok: true, request };
+  });
+  app.post("/api/extensions/undo", async (_req, reply) => {
+    const result = undoExtensions();
+    if (!result.restored) return reply.send({ ok: false, error: "nothing to undo" });
+    return { ok: true, descriptor: result.descriptor };
+  });
+  app.post("/api/extensions/reset", async (_req, reply) => {
+    const result = resetExtensions();
+    if (!result.reset) return reply.send({ ok: false, error: "nothing to reset \u2014 the dashboard is already the default" });
+    return { ok: true, descriptor: null };
+  });
+  app.get("/api/extensions/history", async () => ({ ok: true, history: listHistory() }));
   app.get("/api/events", async (_req, reply) => {
     reply.hijack();
     reply.raw.writeHead(200, {
@@ -57171,11 +57655,11 @@ function unregisterProtocol() {
 
 // main.ts
 function promptYesNo2(question) {
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     const rl = (0, import_node_readline2.createInterface)({ input: process.stdin, output: process.stdout });
     rl.question(`${question} `, (answer) => {
       rl.close();
-      resolve4(/^y(es)?$/i.test((answer ?? "").trim()));
+      resolve5(/^y(es)?$/i.test((answer ?? "").trim()));
     });
   });
 }