@floless/app 0.12.0 → 0.12.2

package/dist/floless-server.cjs

@@ -5489,7 +5489,7 @@ var require_thread_stream = __commonJS({
     var { version } = require_package();
     var { EventEmitter: EventEmitter2 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join21 } = require("path");
+    var { join: join22 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -5540,7 +5540,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join21(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join22(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         name: opts.workerOpts?.name || "thread-stream",
@@ -6006,9 +6006,9 @@ var require_transport = __commonJS({
   "node_modules/pino/lib/transport.js"(exports2, module2) {
     "use strict";
     var { createRequire: createRequire4 } = require("module");
-    var { existsSync: existsSync19 } = require("node:fs");
+    var { existsSync: existsSync20 } = require("node:fs");
     var getCallers = require_caller();
-    var { join: join21, isAbsolute: isAbsolute2, sep: sep3 } = require("node:path");
+    var { join: join22, isAbsolute: isAbsolute2, sep: sep3 } = require("node:path");
     var { fileURLToPath: fileURLToPath4 } = require("node:url");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
@@ -6080,7 +6080,7 @@ var require_transport = __commonJS({
           return false;
         }
       }
-      return isAbsolute2(path) && !existsSync19(path);
+      return isAbsolute2(path) && !existsSync20(path);
     }
     function stripQuotes(value) {
       const first = value[0];
@@ -6161,7 +6161,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join21(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join22(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -6179,7 +6179,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline2) {
-        target = bundlerOverrides["pino-worker"] || join21(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join22(__dirname, "worker.js");
         options.pipelines = [pipeline2.map((dest) => {
           return {
             ...dest,
@@ -6202,7 +6202,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join21(__dirname, "..", "file.js");
+          return join22(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -7182,7 +7182,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join21 = ",";
+            let join22 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -7196,7 +7196,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join21 = `,
+                join22 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -7204,13 +7204,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join21;
+                res += join22;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join21}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join22}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -7231,7 +7231,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join21 = `,
+              join22 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -7245,13 +7245,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join21;
+                separator = join22;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join21;
+              separator = join22;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -7292,7 +7292,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join21 = ",";
+            let join22 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -7305,7 +7305,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join21 = `,
+                join22 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -7313,13 +7313,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join21;
+                res += join22;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join21}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join22}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -7332,7 +7332,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join21 = `,
+              join22 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -7341,7 +7341,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join21;
+                separator = join22;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -7399,20 +7399,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join22 = `,
+              const join23 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join22;
+                res2 += join23;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join22}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join23}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -7428,16 +7428,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join21 = `,
+            const join22 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join21, maximumBreadth);
+              res += stringifyTypedArray(value, join22, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join21;
+              separator = join22;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -7448,13 +7448,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join21;
+                separator = join22;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join21;
+              separator = join22;
             }
             if (separator !== "") {
               res = `
@@ -41991,7 +41991,7 @@ var require_send = __commonJS({
     var { parseTokenList } = require_parseTokenList();
     var { createHttpError } = require_createHttpError();
     var extname2 = path.extname;
-    var join21 = path.join;
+    var join22 = path.join;
     var normalize2 = path.normalize;
     var resolve5 = path.resolve;
     var sep3 = path.sep;
@@ -42078,7 +42078,7 @@ var require_send = __commonJS({
           return { statusCode: 403 };
         }
         parts = path2.split(sep3);
-        path2 = normalize2(join21(root, path2));
+        path2 = normalize2(join22(root, path2));
       } else {
         if (UP_PATH_REGEXP.test(path2)) {
           debug('malicious path "%s"', path2);
@@ -42361,7 +42361,7 @@ var require_send = __commonJS({
       let err;
       for (let i = 0; i < options.index.length; i++) {
         const index = options.index[i];
-        const p = join21(path2, index);
+        const p = join22(path2, index);
         const { error, stat: stat4 } = await tryStat(p);
         if (error) {
           err = error;
@@ -43012,7 +43012,7 @@ var require_static = __commonJS({
     "use strict";
     var path = require("node:path");
     var { fileURLToPath: fileURLToPath4 } = require("node:url");
-    var { statSync: statSync7 } = require("node:fs");
+    var { statSync: statSync8 } = require("node:fs");
     var { glob } = require_commonjs6();
     var fp = require_plugin2();
     var send = require_send2();
@@ -43145,8 +43145,8 @@ var require_static = __commonJS({
               }
             }
           }
-          for (const [dirname9, rootPath] of indexDirs.entries()) {
-            const pathname = dirname9 + (dirname9.endsWith("/") ? "" : "/");
+          for (const [dirname10, rootPath] of indexDirs.entries()) {
+            const pathname = dirname10 + (dirname10.endsWith("/") ? "" : "/");
             const file = "/" + pathname.replace(prefix, "");
             setUpHeadAndGet(routeOpts, pathname, file, rootPath);
             if (opts.redirect === true) {
@@ -43375,7 +43375,7 @@ var require_static = __commonJS({
       }
       let pathStat;
       try {
-        pathStat = statSync7(rootPath);
+        pathStat = statSync8(rootPath);
       } catch (e) {
         if (e.code === "ENOENT") {
           fastify.log.warn(`"root" path "${rootPath}" must exist`);
@@ -43399,7 +43399,7 @@ var require_static = __commonJS({
         return indexFiles.find((filename) => {
           const p = path.join(root, pathname, filename);
           try {
-            const stats = statSync7(p);
+            const stats = statSync8(p);
             return !stats.isDirectory();
           } catch {
             return false;
@@ -50827,9 +50827,9 @@ var import_node_readline2 = require("node:readline");
 
 // index.ts
 var import_node_url3 = require("node:url");
-var import_node_path19 = require("node:path");
-var import_node_os13 = require("node:os");
-var import_node_fs20 = require("node:fs");
+var import_node_path20 = require("node:path");
+var import_node_os14 = require("node:os");
+var import_node_fs21 = require("node:fs");
 var import_node_child_process6 = require("node:child_process");
 
 // log.mjs
@@ -52609,7 +52609,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.12.0" : void 0,
+    define: true ? "0.12.2" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -52619,7 +52619,7 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.12.0" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.12.2" : void 0 });
 }
 
 // oauth-presets.ts
@@ -52964,6 +52964,13 @@ function writeTemplates(list) {
   (0, import_node_fs12.renameSync)(tmp, TEMPLATES_FILE);
 }
 function addTemplate(input) {
+  const list = listTemplates();
+  if (!input.source?.nodeId && input.node.agent != null && input.node.command != null) {
+    const dup = list.find(
+      (t) => !t.source?.nodeId && t.node.agent === input.node.agent && t.node.command === input.node.command && t.node.kind === input.node.kind
+    );
+    if (dup) return dup;
+  }
   const tpl = {
     id: (0, import_node_crypto4.randomUUID)(),
     name: input.name.trim(),
@@ -52972,7 +52979,6 @@ function addTemplate(input) {
     createdAt: (/* @__PURE__ */ new Date()).toISOString(),
     source: input.source
   };
-  const list = listTemplates();
   list.push(tpl);
   writeTemplates(list);
   return tpl;
@@ -54026,10 +54032,58 @@ function unregisterAutostart() {
 // updater.ts
 var import_node_child_process4 = require("node:child_process");
 var import_node_crypto5 = require("node:crypto");
-var import_node_fs16 = require("node:fs");
+var import_node_fs17 = require("node:fs");
 var import_node_stream = require("node:stream");
 var import_promises = require("node:stream/promises");
+var import_node_path15 = require("node:path");
+
+// post-update-marker.mjs
+var import_node_fs16 = require("node:fs");
+var import_node_os11 = require("node:os");
 var import_node_path14 = require("node:path");
+var FRESH_MS = 12e4;
+function markerPath() {
+  const override = (process.env.FLOLESS_POST_UPDATE_MARKER ?? "").trim();
+  if (override) return override;
+  const root = process.env.FLOLESS_HOME ?? (0, import_node_path14.join)((0, import_node_os11.homedir)(), ".floless");
+  return (0, import_node_path14.join)(root, ".post-update");
+}
+function legacyMarkerPath() {
+  if ((process.env.FLOLESS_POST_UPDATE_MARKER ?? "").trim()) return null;
+  try {
+    return (0, import_node_path14.join)((0, import_node_path14.dirname)((0, import_node_path14.dirname)(process.execPath)), ".floless-post-update");
+  } catch {
+    return null;
+  }
+}
+function writePostUpdateMarker() {
+  let wrote = false;
+  for (const p of [markerPath(), legacyMarkerPath()]) {
+    if (!p) continue;
+    try {
+      (0, import_node_fs16.writeFileSync)(p, (/* @__PURE__ */ new Date()).toISOString());
+      wrote = true;
+    } catch {
+    }
+  }
+  return wrote;
+}
+function consumePostUpdateMarker() {
+  let fresh = false;
+  for (const p of [markerPath(), legacyMarkerPath()]) {
+    if (!p) continue;
+    try {
+      if (!(0, import_node_fs16.existsSync)(p)) continue;
+      const ageMs = Date.now() - (0, import_node_fs16.statSync)(p).mtimeMs;
+      (0, import_node_fs16.rmSync)(p, { force: true });
+      if (ageMs < FRESH_MS) fresh = true;
+    } catch {
+    }
+  }
+  return fresh;
+}
+
+// updater.ts
 var CHANNEL = "win";
 var FEED_TIMEOUT_MS = 15e3;
 var DOWNLOAD_TIMEOUT_MS = 3e5;
@@ -54038,13 +54092,13 @@ function currentVersion() {
   return appVersion();
 }
 function installRoot() {
-  return (0, import_node_path14.dirname)((0, import_node_path14.dirname)(process.execPath));
+  return (0, import_node_path15.dirname)((0, import_node_path15.dirname)(process.execPath));
 }
 function updateExePath() {
-  return (0, import_node_path14.join)(installRoot(), "Update.exe");
+  return (0, import_node_path15.join)(installRoot(), "Update.exe");
 }
 function packagesDir() {
-  return (0, import_node_path14.join)(installRoot(), "packages");
+  return (0, import_node_path15.join)(installRoot(), "packages");
 }
 function feedUrl() {
   const env2 = (process.env.FLOLESS_UPDATE_URL ?? "").trim().replace(/\/+$/, "");
@@ -54137,22 +54191,22 @@ async function checkForUpdate() {
 }
 async function sha1OfFile(path) {
   const hash = (0, import_node_crypto5.createHash)("sha1");
-  await (0, import_promises.pipeline)((0, import_node_fs16.createReadStream)(path), hash);
+  await (0, import_promises.pipeline)((0, import_node_fs17.createReadStream)(path), hash);
   return hash.digest("hex").toUpperCase();
 }
 async function downloadPackage(asset) {
   if (!NUPKG_NAME.test(asset.FileName)) throw new Error(`refusing suspicious package name: ${asset.FileName}`);
   const want = asset.SHA1.toUpperCase();
   const dir = packagesDir();
-  (0, import_node_fs16.mkdirSync)(dir, { recursive: true });
-  const dest = (0, import_node_path14.join)(dir, asset.FileName);
-  if ((0, import_node_fs16.existsSync)(dest) && await sha1OfFile(dest) === want) return dest;
+  (0, import_node_fs17.mkdirSync)(dir, { recursive: true });
+  const dest = (0, import_node_path15.join)(dir, asset.FileName);
+  if ((0, import_node_fs17.existsSync)(dest) && await sha1OfFile(dest) === want) return dest;
   const res = await authedFetch(`${feedUrl()}/${encodeURIComponent(asset.FileName)}`, {
     redirect: "follow",
     signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS)
   });
   if (!res.ok || !res.body) throw new Error(`download failed: HTTP ${res.status} for ${asset.FileName}`);
-  await (0, import_promises.pipeline)(import_node_stream.Readable.fromWeb(res.body), (0, import_node_fs16.createWriteStream)(dest));
+  await (0, import_promises.pipeline)(import_node_stream.Readable.fromWeb(res.body), (0, import_node_fs17.createWriteStream)(dest));
   const got = await sha1OfFile(dest);
   if (got !== want) throw new Error(`SHA1 mismatch for ${asset.FileName}: feed=${want} got=${got}`);
   return dest;
@@ -54161,7 +54215,7 @@ async function applyUpdate(check, opts) {
   if (!check.supported) return { applied: false, message: check.reason ?? "auto-update not supported in this runtime" };
   if (!check.updateAvailable || !check.asset) return { applied: false, message: check.reason ?? "no update available" };
   const exe = updateExePath();
-  if (!(0, import_node_fs16.existsSync)(exe)) {
+  if (!(0, import_node_fs17.existsSync)(exe)) {
     return { applied: false, message: `Update.exe not found at ${exe} \u2014 is this a Velopack install?` };
   }
   const pkg = await downloadPackage(check.asset);
@@ -54179,6 +54233,7 @@ async function applyUpdate(check, opts) {
       resolve5();
     });
   });
+  writePostUpdateMarker();
   return { applied: true, message: `updating to v${check.targetVersion}\u2026 the app will relaunch` };
 }
 
@@ -54369,12 +54424,12 @@ function isTraceCorrupt(events) {
 
 // launch.mjs
 var import_node_child_process5 = require("node:child_process");
-var import_node_path15 = require("node:path");
+var import_node_path16 = require("node:path");
 var import_node_url = require("node:url");
-var import_node_fs17 = require("node:fs");
+var import_node_fs18 = require("node:fs");
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_readline = require("node:readline");
-var __dirname2 = (0, import_node_path15.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
+var __dirname2 = (0, import_node_path16.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
 var PORT = Number(process.env.PORT ?? 4317);
 var HEALTH_URL = `http://127.0.0.1:${PORT}/api/health`;
 var BROWSER_URL = `http://floless.localhost:${PORT}`;
@@ -54446,8 +54501,8 @@ async function waitHealthy(timeoutMs = 3e4) {
 function resolveServerStart() {
   const packaged = /flolessapp\.exe$/i.test(process.execPath);
   if (packaged) return { cmd: process.execPath, args: ["--serve"], shell: false };
-  const bundle = (0, import_node_path15.join)(__dirname2, "dist", "floless-server.cjs");
-  if ((0, import_node_fs17.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
+  const bundle = (0, import_node_path16.join)(__dirname2, "dist", "floless-server.cjs");
+  if ((0, import_node_fs18.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
   return { cmd: "npm", args: ["run", "start"], shell: isWin2 };
 }
 function startServerDetached() {
@@ -54495,6 +54550,7 @@ async function ensureServerUp() {
   log("server up");
 }
 async function cmdOpen() {
+  const postUpdate = consumePostUpdateMarker();
   if (await ping()) {
     const running = await probeVersion();
     if (shouldTakeOver(running, _selfVersion)) {
@@ -54503,11 +54559,15 @@ async function cmdOpen() {
       await new Promise((r) => setTimeout(r, 500));
       await ensureServerUp();
     } else {
-      log(`already running${running ? ` (v${running})` : ""} \u2014 opening browser`);
+      log(`already running${running ? ` (v${running})` : ""}`);
     }
   } else {
     await ensureServerUp();
   }
+  if (postUpdate) {
+    log("post-update relaunch \u2014 server up; the existing tab reconnects via its health poll (no new tab)");
+    return;
+  }
   log(`opening ${BROWSER_URL}`);
   openBrowser2(BROWSER_URL);
 }
@@ -54595,8 +54655,8 @@ function taskkillArgs(pid, { tree = true } = {}) {
 }
 function killSupervisor({ tree = true } = {}) {
   if (!isWin2) return;
-  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path15.basename)(process.execPath));
-  const scriptMatch = isNpmChannel ? (0, import_node_path15.basename)((0, import_node_url.fileURLToPath)(__import_meta_url)) : void 0;
+  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path16.basename)(process.execPath));
+  const scriptMatch = isNpmChannel ? (0, import_node_path16.basename)((0, import_node_url.fileURLToPath)(__import_meta_url)) : void 0;
   const realExe = resolveRealInstallExe(process.execPath);
   const exeMatch = realExe === process.execPath ? process.execPath : [process.execPath, realExe];
   const pids = supervisorPidsToKill(enumerateProcesses(), process.pid, exeMatch, scriptMatch);
@@ -54761,7 +54821,7 @@ async function runAction(arg, flagArgv = [], selfVersion = null) {
   }
   await action(parseTeardownFlags(flagArgv));
 }
-var entry = (0, import_node_path15.basename)(process.argv[1] ?? "").toLowerCase();
+var entry = (0, import_node_path16.basename)(process.argv[1] ?? "").toLowerCase();
 if (entry === "launch.mjs") {
   runAction(process.argv[2], process.argv.slice(3)).catch((e) => {
     log(`error: ${e?.message ?? e}`);
@@ -54835,9 +54895,9 @@ function awareUpgradeBlockReason(s) {
 }
 
 // skill-sync.ts
-var import_node_fs18 = require("node:fs");
-var import_node_os11 = require("node:os");
-var import_node_path16 = require("node:path");
+var import_node_fs19 = require("node:fs");
+var import_node_os12 = require("node:os");
+var import_node_path17 = require("node:path");
 var import_node_url2 = require("node:url");
 var import_yaml5 = __toESM(require_dist6(), 1);
 
@@ -54862,30 +54922,30 @@ function selectShippedSkillNames(names) {
 }
 
 // skill-sync.ts
-var __dirname3 = (0, import_node_path16.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
+var __dirname3 = (0, import_node_path17.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
 function bundledSkillsRoot() {
   const candidates = [
-    (0, import_node_path16.join)(__dirname3, "skills"),
-    (0, import_node_path16.join)((0, import_node_path16.dirname)(process.execPath), "skills"),
-    (0, import_node_path16.join)(__dirname3, "..", ".claude", "skills")
+    (0, import_node_path17.join)(__dirname3, "skills"),
+    (0, import_node_path17.join)((0, import_node_path17.dirname)(process.execPath), "skills"),
+    (0, import_node_path17.join)(__dirname3, "..", ".claude", "skills")
   ];
-  return candidates.find((p) => (0, import_node_fs18.existsSync)(p)) ?? null;
+  return candidates.find((p) => (0, import_node_fs19.existsSync)(p)) ?? null;
 }
 function targetConfigDirs() {
   const override = process.env.FLOLESS_SKILL_TARGETS;
   if (override) {
     return override.split(";").map((d) => d.trim()).filter(Boolean).map((dir) => ({ runtime: "custom", dir }));
   }
-  const home = (0, import_node_os11.homedir)();
+  const home = (0, import_node_os12.homedir)();
   return [
-    { runtime: "claude", dir: (0, import_node_path16.join)(home, ".claude") },
-    { runtime: "codex", dir: (0, import_node_path16.join)(home, ".codex") },
-    { runtime: "opencode", dir: (0, import_node_path16.join)(home, ".opencode") }
+    { runtime: "claude", dir: (0, import_node_path17.join)(home, ".claude") },
+    { runtime: "codex", dir: (0, import_node_path17.join)(home, ".codex") },
+    { runtime: "opencode", dir: (0, import_node_path17.join)(home, ".opencode") }
   ];
 }
 function skillVersion(skillMdPath) {
   try {
-    const text = (0, import_node_fs18.readFileSync)(skillMdPath, "utf8");
+    const text = (0, import_node_fs19.readFileSync)(skillMdPath, "utf8");
     const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(text);
     if (!m || m[1] === void 0) return null;
     const fm = (0, import_yaml5.parse)(m[1]);
@@ -54925,21 +54985,21 @@ function decideAction(installed, bundled) {
 function bundledSkills(root) {
   let entries = [];
   try {
-    entries = selectShippedSkillNames((0, import_node_fs18.readdirSync)(root));
+    entries = selectShippedSkillNames((0, import_node_fs19.readdirSync)(root));
   } catch {
     return [];
   }
   const out = [];
   for (const name of entries) {
-    const dir = (0, import_node_path16.join)(root, name);
+    const dir = (0, import_node_path17.join)(root, name);
     let isDir = false;
     try {
-      isDir = (0, import_node_fs18.statSync)(dir).isDirectory();
+      isDir = (0, import_node_fs19.statSync)(dir).isDirectory();
     } catch {
       isDir = false;
     }
     if (!isDir) continue;
-    const v = skillVersion((0, import_node_path16.join)(dir, "SKILL.md"));
+    const v = skillVersion((0, import_node_path17.join)(dir, "SKILL.md"));
     if (!v) continue;
     out.push({ name, dir, version: v });
   }
@@ -54952,17 +55012,17 @@ function syncSkills() {
   const skills = bundledSkills(root);
   if (!skills.length) return results;
   for (const { runtime, dir: cfg } of targetConfigDirs()) {
-    if (!(0, import_node_fs18.existsSync)(cfg)) continue;
-    const skillsDir = (0, import_node_path16.join)(cfg, "skills");
+    if (!(0, import_node_fs19.existsSync)(cfg)) continue;
+    const skillsDir = (0, import_node_path17.join)(cfg, "skills");
     for (const s of skills) {
-      const dest = (0, import_node_path16.join)(skillsDir, s.name);
-      const installedMd = (0, import_node_path16.join)(dest, "SKILL.md");
-      const installed = (0, import_node_fs18.existsSync)(installedMd) ? skillVersion(installedMd) : null;
+      const dest = (0, import_node_path17.join)(skillsDir, s.name);
+      const installedMd = (0, import_node_path17.join)(dest, "SKILL.md");
+      const installed = (0, import_node_fs19.existsSync)(installedMd) ? skillVersion(installedMd) : null;
       const action = decideAction(installed, s.version);
       if (action === "installed" || action === "updated") {
         try {
-          if (action === "updated") (0, import_node_fs18.rmSync)(dest, { recursive: true, force: true });
-          (0, import_node_fs18.cpSync)(s.dir, dest, { recursive: true });
+          if (action === "updated") (0, import_node_fs19.rmSync)(dest, { recursive: true, force: true });
+          (0, import_node_fs19.cpSync)(s.dir, dest, { recursive: true });
           results.push({ runtime, skill: s.name, action, from: installed, to: s.version });
         } catch {
         }
@@ -54975,9 +55035,9 @@ function syncSkills() {
 }
 
 // watch.ts
-var import_node_os12 = require("node:os");
-var import_node_path18 = require("node:path");
-var import_node_fs19 = require("node:fs");
+var import_node_os13 = require("node:os");
+var import_node_path19 = require("node:path");
+var import_node_fs20 = require("node:fs");
 
 // node_modules/chokidar/esm/index.js
 var import_fs2 = require("fs");
@@ -54988,7 +55048,7 @@ var sysPath2 = __toESM(require("path"), 1);
 // node_modules/readdirp/esm/index.js
 var import_promises2 = require("node:fs/promises");
 var import_node_stream2 = require("node:stream");
-var import_node_path17 = require("node:path");
+var import_node_path18 = require("node:path");
 var EntryTypes = {
   FILE_TYPE: "files",
   DIR_TYPE: "directories",
@@ -55063,7 +55123,7 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
     this._wantsDir = type ? DIR_TYPES.has(type) : false;
     this._wantsFile = type ? FILE_TYPES.has(type) : false;
     this._wantsEverything = type === EntryTypes.EVERYTHING_TYPE;
-    this._root = (0, import_node_path17.resolve)(root);
+    this._root = (0, import_node_path18.resolve)(root);
     this._isDirent = !opts.alwaysStat;
     this._statsProp = this._isDirent ? "dirent" : "stats";
     this._rdOptions = { encoding: "utf8", withFileTypes: this._isDirent };
@@ -55134,8 +55194,8 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
     let entry2;
     const basename5 = this._isDirent ? dirent.name : dirent;
     try {
-      const fullPath = (0, import_node_path17.resolve)((0, import_node_path17.join)(path, basename5));
-      entry2 = { path: (0, import_node_path17.relative)(this._root, fullPath), fullPath, basename: basename5 };
+      const fullPath = (0, import_node_path18.resolve)((0, import_node_path18.join)(path, basename5));
+      entry2 = { path: (0, import_node_path18.relative)(this._root, fullPath), fullPath, basename: basename5 };
       entry2[this._statsProp] = this._isDirent ? dirent : await this._stat(fullPath);
     } catch (err) {
       this._onError(err);
@@ -55169,7 +55229,7 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
         }
         if (entryRealPathStats.isDirectory()) {
           const len = entryRealPath.length;
-          if (full.startsWith(entryRealPath) && full.substr(len, 1) === import_node_path17.sep) {
+          if (full.startsWith(entryRealPath) && full.substr(len, 1) === import_node_path18.sep) {
             const recursiveError = new Error(`Circular symlink detected: "${full}" points to "${entryRealPath}"`);
             recursiveError.code = RECURSIVE_ERROR_CODE;
             return this._onError(recursiveError);
@@ -55708,9 +55768,9 @@ var NodeFsHandler = class {
     if (this.fsw.closed) {
       return;
     }
-    const dirname9 = sysPath.dirname(file);
+    const dirname10 = sysPath.dirname(file);
     const basename5 = sysPath.basename(file);
-    const parent = this.fsw._getWatchedDir(dirname9);
+    const parent = this.fsw._getWatchedDir(dirname10);
     let prevStats = stats;
     if (parent.has(basename5))
       return;
@@ -55737,7 +55797,7 @@ var NodeFsHandler = class {
             prevStats = newStats2;
           }
         } catch (error) {
-          this.fsw._remove(dirname9, basename5);
+          this.fsw._remove(dirname10, basename5);
         }
       } else if (parent.has(basename5)) {
         const at = newStats.atimeMs;
@@ -56677,33 +56737,33 @@ function appIdFromLogPath(path) {
   return i >= 0 && parts[i + 1] ? parts[i + 1] : null;
 }
 function samePath(a, b) {
-  const ra = (0, import_node_path18.resolve)(a);
-  const rb = (0, import_node_path18.resolve)(b);
+  const ra = (0, import_node_path19.resolve)(a);
+  const rb = (0, import_node_path19.resolve)(b);
   return process.platform === "win32" ? ra.toLowerCase() === rb.toLowerCase() : ra === rb;
 }
 function underDir(path, dir) {
-  const rp = (0, import_node_path18.resolve)(path);
-  const rd = (0, import_node_path18.resolve)(dir);
+  const rp = (0, import_node_path19.resolve)(path);
+  const rd = (0, import_node_path19.resolve)(dir);
   const [p, d] = process.platform === "win32" ? [rp.toLowerCase(), rd.toLowerCase()] : [rp, rd];
-  return p === d || p.startsWith(d + import_node_path18.sep);
+  return p === d || p.startsWith(d + import_node_path19.sep);
 }
 function startWatcher() {
-  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path18.join)((0, import_node_os12.homedir)(), ".aware");
-  const credentialsDir = (0, import_node_path18.join)(awareDir, "credentials");
-  if (!(0, import_node_fs19.existsSync)(credentialsDir)) {
+  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path19.join)((0, import_node_os13.homedir)(), ".aware");
+  const credentialsDir = (0, import_node_path19.join)(awareDir, "credentials");
+  if (!(0, import_node_fs20.existsSync)(credentialsDir)) {
     try {
-      (0, import_node_fs19.mkdirSync)(credentialsDir, { recursive: true });
+      (0, import_node_fs20.mkdirSync)(credentialsDir, { recursive: true });
     } catch {
     }
   }
-  if (!(0, import_node_fs19.existsSync)(uiDir)) {
+  if (!(0, import_node_fs20.existsSync)(uiDir)) {
     try {
-      (0, import_node_fs19.mkdirSync)(uiDir, { recursive: true });
+      (0, import_node_fs20.mkdirSync)(uiDir, { recursive: true });
     } catch {
     }
   }
-  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path18.join)(awareDir, d)).filter((p) => (0, import_node_fs19.existsSync)(p));
-  if ((0, import_node_fs19.existsSync)(uiDir)) targets.push(uiDir);
+  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path19.join)(awareDir, d)).filter((p) => (0, import_node_fs20.existsSync)(p));
+  if ((0, import_node_fs20.existsSync)(uiDir)) targets.push(uiDir);
   if (targets.length === 0) {
     return null;
   }
@@ -56733,11 +56793,11 @@ function startWatcher() {
     const isCredential = path.split(/[\\/]/).includes("credentials");
     const kind = isCredential ? "credential" : path.endsWith(".jsonl") ? "trace" : path.endsWith(".lock") ? "lock" : path.endsWith(".flo") || path.endsWith(".app") ? "source" : "file";
     broadcast({ type: "fs-change", kind, event, path });
-    if (kind === "trace" && event !== "unlink" && (0, import_node_fs19.existsSync)(path)) {
+    if (kind === "trace" && event !== "unlink" && (0, import_node_fs20.existsSync)(path)) {
       const id = appIdFromLogPath(path);
       if (!id) return;
       try {
-        broadcast({ type: "trace-file", id, runId: path.split(import_node_path18.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs19.readFileSync)(path, "utf8")) });
+        broadcast({ type: "trace-file", id, runId: path.split(import_node_path19.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs20.readFileSync)(path, "utf8")) });
       } catch {
       }
     }
@@ -56746,10 +56806,10 @@ function startWatcher() {
 }
 
 // index.ts
-var __dirname4 = (0, import_node_path19.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
-var WEB_ROOT = [(0, import_node_path19.join)(__dirname4, "web"), (0, import_node_path19.join)((0, import_node_path19.dirname)(process.execPath), "web"), (0, import_node_path19.join)(__dirname4, "..", "web")].find(
-  (p) => (0, import_node_fs20.existsSync)(p)
-) ?? (0, import_node_path19.join)(__dirname4, "..", "web");
+var __dirname4 = (0, import_node_path20.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
+var WEB_ROOT = [(0, import_node_path20.join)(__dirname4, "web"), (0, import_node_path20.join)((0, import_node_path20.dirname)(process.execPath), "web"), (0, import_node_path20.join)(__dirname4, "..", "web")].find(
+  (p) => (0, import_node_fs21.existsSync)(p)
+) ?? (0, import_node_path20.join)(__dirname4, "..", "web");
 var PORT2 = Number(process.env.PORT ?? 4317);
 var HOST = "127.0.0.1";
 function extractReportHtml(events) {
@@ -56776,7 +56836,7 @@ function installCrashHandlers() {
 ${stack}
 `;
     try {
-      (0, import_node_fs20.appendFileSync)(logFilePath(), line);
+      (0, import_node_fs21.appendFileSync)(logFilePath(), line);
     } catch {
     }
     if (process.stderr.isTTY) process.stderr.write(line);
@@ -57121,13 +57181,13 @@ async function startServer() {
     }
     const inputs = appData.inputs.map((i) => ({ name: i.name, type: i.type }));
     const baked = bakeFloSource(appData.source.text, inputs);
-    const tmpRoot = (0, import_node_fs20.mkdtempSync)((0, import_node_path19.join)((0, import_node_os13.tmpdir)(), "floless-bake-"));
-    const backupDir = (0, import_node_path19.join)(tmpRoot, `${id}-backup`);
-    const bakeDir = (0, import_node_path19.join)(tmpRoot, id);
-    (0, import_node_fs20.cpSync)(appDir(id), backupDir, { recursive: true });
-    (0, import_node_fs20.cpSync)(appDir(id), bakeDir, { recursive: true });
+    const tmpRoot = (0, import_node_fs21.mkdtempSync)((0, import_node_path20.join)((0, import_node_os14.tmpdir)(), "floless-bake-"));
+    const backupDir = (0, import_node_path20.join)(tmpRoot, `${id}-backup`);
+    const bakeDir = (0, import_node_path20.join)(tmpRoot, id);
+    (0, import_node_fs21.cpSync)(appDir(id), backupDir, { recursive: true });
+    (0, import_node_fs21.cpSync)(appDir(id), bakeDir, { recursive: true });
     const floName = appData.source.path.split(/[\\/]/).pop();
-    (0, import_node_fs20.writeFileSync)((0, import_node_path19.join)(bakeDir, floName), baked);
+    (0, import_node_fs21.writeFileSync)((0, import_node_path20.join)(bakeDir, floName), baked);
     let appInstalled = true;
     try {
       await aware.uninstall(id);
@@ -57149,17 +57209,17 @@ async function startServer() {
         throw installErr;
       }
       try {
-        await aware.compile((0, import_node_path19.join)(appDir(id), floName));
+        await aware.compile((0, import_node_path20.join)(appDir(id), floName));
       } catch (compileErr) {
         app.log.warn({ id, compileErr: String(compileErr) }, "bake: post-install recompile failed (app baked but may need a manual Compile)");
       }
       broadcast({ type: "baked", id });
       return { ok: true, id, agent: id, inputs };
     } finally {
-      if (appInstalled) (0, import_node_fs20.rmSync)(tmpRoot, { recursive: true, force: true });
+      if (appInstalled) (0, import_node_fs21.rmSync)(tmpRoot, { recursive: true, force: true });
     }
   });
-  const graftAgentsDir = () => (0, import_node_path19.join)((0, import_node_os13.homedir)(), ".aware", "agents");
+  const graftAgentsDir = () => (0, import_node_path20.join)((0, import_node_os14.homedir)(), ".aware", "agents");
   app.post("/api/graft/match", async (req, reply) => {
     const { glob } = req.body ?? {};
     if (!glob) return reply.status(400).send({ ok: false, error: "glob required" });
@@ -57176,7 +57236,7 @@ async function startServer() {
     if (!sourceKind || !sourceRef) {
       return reply.status(400).send({ ok: false, error: "sourceKind and sourceRef required" });
     }
-    const tempHome = (0, import_node_fs20.mkdtempSync)((0, import_node_path19.join)((0, import_node_os13.tmpdir)(), "floless-graft-"));
+    const tempHome = (0, import_node_fs21.mkdtempSync)((0, import_node_path20.join)((0, import_node_os14.tmpdir)(), "floless-graft-"));
     let result;
     try {
       result = await aware.build({
@@ -57189,19 +57249,19 @@ async function startServer() {
         awareHome: tempHome
       });
     } catch (err) {
-      (0, import_node_fs20.rmSync)(tempHome, { recursive: true, force: true });
+      (0, import_node_fs21.rmSync)(tempHome, { recursive: true, force: true });
       const msg = err instanceof AwareError ? err.message : String(err?.message ?? err);
       return reply.status(422).send({ ok: false, error: msg });
     }
     const manifest = readStagedManifest(result.agentDir);
     if (!manifest) {
-      (0, import_node_fs20.rmSync)(tempHome, { recursive: true, force: true });
+      (0, import_node_fs21.rmSync)(tempHome, { recursive: true, force: true });
       return reply.status(502).send({ ok: false, error: `build produced output at ${result.agentDir} but no manifest.yaml` });
     }
     const token = (0, import_node_crypto6.randomUUID)();
     registerStage(token, tempHome, result.agentId);
     const preview = buildPreview(manifest, sourceKind, sourceRef, token);
-    if ((0, import_node_fs20.existsSync)((0, import_node_path19.join)(graftAgentsDir(), result.agentId))) {
+    if ((0, import_node_fs21.existsSync)((0, import_node_path20.join)(graftAgentsDir(), result.agentId))) {
       preview.warnings.unshift(`An agent named "${result.agentId}" is already installed \u2014 creating it will overwrite it.`);
     }
     return { ok: true, preview };
@@ -57220,7 +57280,7 @@ async function startServer() {
         registerStage(stagedRef, stage.tempDir, stage.agentId);
         return reply.status(409).send({ ok: false, error: err.message, agentId: stage.agentId, collision: true });
       }
-      (0, import_node_fs20.rmSync)(stage.tempDir, { recursive: true, force: true });
+      (0, import_node_fs21.rmSync)(stage.tempDir, { recursive: true, force: true });
       throw err;
     }
     broadcast({ type: "grafted", id: stage.agentId });
@@ -57394,11 +57454,11 @@ async function startServer() {
   app.get("/api/requests/:id/snapshot/:n", async (req, reply) => {
     const n = Number.parseInt(req.params.n, 10);
     const p = Number.isInteger(n) ? snapshotPathFor(req.params.id, n) : null;
-    if (!p || !(0, import_node_fs20.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
+    if (!p || !(0, import_node_fs21.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
     const ext = p.split(".").pop().toLowerCase();
     reply.header("Content-Type", ext === "png" ? "image/png" : ext === "webp" ? "image/webp" : "image/jpeg");
     reply.header("Cache-Control", "no-store");
-    return (0, import_node_fs20.readFileSync)(p);
+    return (0, import_node_fs21.readFileSync)(p);
   });
   app.post(
     "/api/tweak",
@@ -57492,7 +57552,7 @@ async function startServer() {
         warn(`last-run-status:${ref} \u2014 trace exists but couldn't be parsed (corrupt/truncated)`);
         let finishedAt2 = null;
         try {
-          finishedAt2 = (0, import_node_fs20.statSync)(latest.path).mtime.toISOString();
+          finishedAt2 = (0, import_node_fs21.statSync)(latest.path).mtime.toISOString();
         } catch {
           finishedAt2 = null;
         }
@@ -57502,7 +57562,7 @@ async function startServer() {
       let finishedAt = typeof runEnd?.ts === "string" ? runEnd.ts : null;
       if (!finishedAt) {
         try {
-          finishedAt = (0, import_node_fs20.statSync)(latest.path).mtime.toISOString();
+          finishedAt = (0, import_node_fs21.statSync)(latest.path).mtime.toISOString();
         } catch {
           finishedAt = null;
         }
@@ -57704,6 +57764,7 @@ async function main() {
         const realExe = resolveRealInstallExe(process.execPath);
         registerProtocol(realExe);
         registerAutostart(realExe);
+        if (veloHook === "--veloapp-updated") writePostUpdateMarker();
       } else if (veloHook === "--veloapp-uninstall") {
         unregisterProtocol();
         unregisterAutostart();

package/dist/web/app.css

@@ -1935,6 +1935,25 @@ body {
 .run-state.drift      { color: var(--warn); border-color: color-mix(in srgb, var(--warn) 40%, transparent); }
 .run-state.uncompiled { color: var(--text-muted); border-color: var(--border-strong); }
 
+/* Header Stop — the always-reachable escape hatch during a run, regardless of whether
+   the HTML Viewer modal is open or closed (#39). Shown only while a run is in flight.
+   Mirrors the in-modal .overlay-stop: a quiet destructive action — warn-tinted outline
+   that fills on hover, never a primary. Inherits the header button's size/radius/font;
+   only the colours are overridden here. */
+.run-stop-btn {
+  background: transparent;
+  color: var(--warn);
+  border: 1px solid color-mix(in srgb, var(--warn) 45%, transparent);
+  font-weight: 600;
+  letter-spacing: 0.04em;
+}
+.run-stop-btn:hover {
+  background: color-mix(in srgb, var(--warn) 16%, transparent);
+  border-color: var(--warn);
+  color: var(--text);
+}
+.run-stop-btn:disabled { opacity: 0.6; cursor: default; }
+
 /* Compile-notes strip over the canvas (CONCERNS §1). These are info-level FYIs
    (e.g. AWARE's read-mode-on-exec note), so they read as info — not a warning —
    and collapse to a faint one-line pill so they don't eat canvas height. */

package/dist/web/aware.js

@@ -24,6 +24,7 @@
   const $reportOpen = document.getElementById('report-open');
   const $reportShare = document.getElementById('report-share');
   const $reportClose = document.getElementById('report-close');
+  const $stopRunBtn = document.getElementById('stop-run-btn');
 
   // One persistent array the inspect Execution tab reads; we mutate in place so
   // every AGENTS[node].execution reference stays valid across re-renders.
@@ -327,7 +328,10 @@
     };
     $runState.dataset.tip = stateTips[app.runState] || '';
 
-    $runBtn.disabled = !app.runnable;
+    // Keep Run disabled (and the header Stop shown) if a gate re-paint lands mid-run (#39) —
+    // never let a re-render re-arm Run while a run is still in flight.
+    $runBtn.disabled = !app.runnable || reportRunning || state.running;
+    if ($stopRunBtn) $stopRunBtn.hidden = !(reportRunning || state.running);
     $runBtn.dataset.tip = app.runnable
       ? 'Run the approved workflow'
       : app.runState === 'drift'
@@ -787,11 +791,22 @@
     const saveItem = document.querySelector('.menu-item[data-action="save"]');
     if (saveItem) saveItem.classList.toggle('menu-item-dirty', dirty);
   }
+  // Set while WE programmatically reload to adopt a self-update (#37) — an in-place build
+  // adoption is not the user navigating away, so it must NOT trigger the unsaved-changes
+  // prompt below (that would strand the tab behind a modal). The reload path persists the
+  // inputs first, so nothing is lost.
+  let selfUpdating = false;
   // Refresh/close guard: unsaved input values live only in memory, so warn before
   // the page unloads while dirty (the browser shows its own generic confirm).
   window.addEventListener('beforeunload', (e) => {
-    if (isInputsDirty(currentId)) { e.preventDefault(); e.returnValue = ''; }
+    if (!selfUpdating && isInputsDirty(currentId)) { e.preventDefault(); e.returnValue = ''; }
   });
+  // Persist the active app's inputs to localStorage (the new build restores them on load).
+  // Used before a self-update reload so an in-place adoption never drops unsaved edits.
+  function persistCurrentInputs() {
+    if (!currentId) return;
+    try { localStorage.setItem(lsInputsKey(currentId), JSON.stringify(appInputValues.get(currentId) || {})); } catch { /* private mode / quota */ }
+  }
 
   function seedAppInputs(app) {
     if (app && Array.isArray(app.inputs) && app.inputs.length) {
@@ -896,6 +911,35 @@
   // double-click LOAD the last result instantly instead of re-running.
   const lastReportByApp = new Map();
 
+  // Reflect run-in-flight state in the ALWAYS-VISIBLE header so a run is stoppable even
+  // when the HTML Viewer modal is closed (#39). The header ■ Stop run appears for the whole
+  // duration of either run path (the modal run `reportRunning` and the inline run
+  // `state.running`) and disappears when neither is active. Run stays disabled while a run
+  // is in flight; when idle it falls back to the compile-gate's runnable state. Also tells
+  // the user, on the modal's × tooltip, that closing leaves the run going (Stop is in the
+  // header) — the canvas keeps showing progress (markCanvasRunning), by design.
+  function syncRunControls() {
+    const running = reportRunning || state.running;
+    if ($stopRunBtn) {
+      $stopRunBtn.hidden = !running;
+      // Reset to a fresh, clickable Stop each run; stopRun() flips it to "Cancelling…".
+      if (running && !cancelRequested) { $stopRunBtn.disabled = false; $stopRunBtn.textContent = '■ Stop run'; }
+    }
+    if (running) {
+      $runBtn.disabled = true;
+    } else {
+      const app = currentId && apps.get(currentId);
+      $runBtn.disabled = !(app && app.runnable);
+    }
+    // Rely on the native `disabled` attribute for AT state (paintGate also flips it); a
+    // separate aria-disabled would be redundant and could go stale on a gate re-paint.
+    if ($reportClose) {
+      $reportClose.dataset.tip = reportRunning
+        ? 'Close viewer (the run keeps going — ■ Stop run is in the header)'
+        : 'Close';
+    }
+  }
+
   // Stop the in-flight run (the escape hatch for a hung/unattached host). Marks
   // cancelRequested so the catch shows "cancelled", clears the canvas running
   // pulse, and asks the server to kill the `aware app run` child. The in-flight
@@ -904,8 +948,10 @@
     if (!reportRunning && !state.running) return;
     cancelRequested = true;
     clearNodeStatus();
+    // Reflect "cancelling" on BOTH Stop surfaces — the in-modal overlay and the header.
     const stopBtn = document.querySelector('.overlay-stop');
     if (stopBtn) { stopBtn.disabled = true; stopBtn.textContent = 'Cancelling…'; }
+    if ($stopRunBtn) { $stopRunBtn.disabled = true; $stopRunBtn.textContent = 'Cancelling…'; }
     try { await api('/api/run/stop', { method: 'POST' }); } catch { /* the run's own catch surfaces it */ }
   }
 
@@ -946,6 +992,7 @@
     reportRunning = true;
     cancelRequested = false;
     markCanvasRunning(); // paints behind the modal; visible once it's closed
+    syncRunControls(); // header ■ Stop run + Run disabled — reachable even if the modal is closed (#39)
 
     const inputs = currentInputs();
     const inputBadge = Object.entries(inputs).map(([k, v]) => `${k}=${v}`).join(' · ');
@@ -1004,6 +1051,7 @@
       }
     } finally {
       reportRunning = false;
+      syncRunControls(); // run ended — hide the header Stop, restore Run from the gate
     }
   }
 
@@ -1264,6 +1312,8 @@
   // The Stop button is rebuilt into the overlay each run — delegate so one
   // listener survives every innerHTML swap.
   $reportOverlay.addEventListener('click', (e) => { if (e.target.closest('.overlay-stop')) stopRun(); });
+  // The header ■ Stop run — the always-reachable twin of the overlay Stop (#39).
+  if ($stopRunBtn) $stopRunBtn.onclick = () => stopRun();
   $reportOpen.onclick = () => {
     const html = $reportFrame.srcdoc;
     if (!html) return;
@@ -2064,6 +2114,7 @@
     $runBtn.disabled = true;
     if ($simBtn) $simBtn.disabled = true;
     $runBtn.textContent = '◆ Running…';
+    syncRunControls(); // surface the header ■ Stop run for the inline (no-modal) run too (#39)
     liveTrace.length = 0;
     state.hasRun = true;
     try {
@@ -2102,6 +2153,7 @@
       $runBtn.disabled = false;
       if ($simBtn) $simBtn.disabled = false;
       $runBtn.textContent = '▶ Run workflow';
+      syncRunControls(); // hide the header Stop; reconcile Run with the gate's runnable state
     }
   }
   $runBtn.onclick = () => runApp({ simulate: false });
@@ -2572,6 +2624,7 @@
     }
   }
   let shownVersion = false;
+  let loadedAppVersion = null; // the build this tab is running against (first health wins)
   function startHealthPoll() {
     const tick = async () => {
       let ok = false;
@@ -2592,7 +2645,25 @@
           // (popover + what's-new). Empty until /api/health reports it → links omitted.
           if (h && h.webBase) webBase = h.webBase;
           const av = document.getElementById('app-version');
-          if (av && h && h.appVersion && !shownVersion) { av.textContent = 'v' + h.appVersion; shownVersion = true; }
+          if (av && h && h.appVersion && !shownVersion) { av.textContent = 'FloLess ' + h.appVersion; shownVersion = true; }
+          // Adopt a self-update IN PLACE (#37): this tab loaded build X, but the server now
+          // reports build Y — a self-update swapped the build under us. Reload so the tab runs
+          // the NEW build's web assets (and a fresh footer + what's-new) instead of being
+          // stranded on the old build's UI — stuck "Updating…", a frozen version, version skew.
+          // This is what makes the post-update tab genuinely "reusable": the existing tab
+          // becomes the new-version tab. Only fires on a real version change (first health sets
+          // the baseline), so normal restarts / same-version polls never reload.
+          if (h && h.appVersion) {
+            if (loadedAppVersion === null) loadedAppVersion = h.appVersion;
+            else if (h.appVersion !== loadedAppVersion) {
+              // Persist unsaved inputs and suppress the beforeunload prompt (this is an
+              // in-place build adoption, not the user leaving) before reloading.
+              selfUpdating = true;
+              persistCurrentInputs();
+              location.reload();
+              return;
+            }
+          }
           // After the build version is stamped, reveal the relaunch-surviving what's-new
           // panel iff this is the build we just self-updated into (guarded to once).
           maybeShowWhatsNew();
@@ -3716,7 +3787,7 @@
       riAwareVersion = h.awareVersion || '';
       const app = currentId && apps.get(currentId);
       const wf = app ? ` · workflow "${app.displayName || currentId}"` : '';
-      $riContext.textContent = `Also sent automatically: FloLess v${h.appVersion || '?'}, AWARE v${h.awareVersion || '?'}${wf}`;
+      $riContext.textContent = `Also sent automatically: FloLess ${h.appVersion || '?'}, AWARE ${h.awareVersion || '?'}${wf}`;
     }).catch(() => { /* keep the generic line on a health blip */ });
     showModal($riModal);
     setTimeout(() => $riTitle.focus(), 0);
@@ -3971,7 +4042,7 @@
     // /api/health is un-gated, so this works even while unlicensed.
     fetch('/api/health', { cache: 'no-store' })
       .then((r) => r.json())
-      .then((h) => { if (h && h.appVersion) document.getElementById('lg-version').textContent = 'v' + h.appVersion; })
+      .then((h) => { if (h && h.appVersion) document.getElementById('lg-version').textContent = 'FloLess ' + h.appVersion; })
       .catch(() => { /* version is a nicety; never block the gate on it */ });
     document.getElementById('lg-signin').onclick = async () => {
       const s = document.getElementById('lg-status');

package/dist/web/index.html

@@ -60,10 +60,11 @@
         <button id="browse-btn" data-tip="Browse all installed agents">⊞ Agents</button>
         <button id="routines-btn" data-tip="Routines — run a workflow on a schedule or a live trigger">⏱ Routines</button>
         <span class="ctl-sep" aria-hidden="true"></span>
-        <span class="run-state" id="run-state"></span>
+        <span class="run-state" id="run-state" role="status" aria-live="polite"></span>
         <button id="compile-btn" data-tip="Compile + approve → freeze the .lock">⎙ Compile</button>
         <button id="sim-btn" data-tip="Simulate: stub every node from its output schema — no live host is contacted. Validates the workflow's composition end-to-end, even when the real agents aren't connected yet.">Simulate</button>
         <button id="run-btn" data-tip="Run the workflow for real against the live host (uses the inputs; renders the report node in the HTML Viewer)">▶ Run workflow</button>
+        <button id="stop-run-btn" class="run-stop-btn" type="button" aria-label="Stop the current run" data-tip="Stop the in-flight run (always reachable, even with the HTML Viewer closed)" hidden>■ Stop run</button>
       </div>
     </header>
 

package/launch.mjs

@@ -17,6 +17,7 @@ import { createInterface } from 'node:readline';
 import { rotateLog, openLogFd } from './log.mjs';
 import { supervisorPidsToKill, teardownDecision, awareIsPresent, RUN_KEY, RUN_VALUE, PROTOCOL_KEY } from './teardown.mjs';
 import { resolveRealInstallExe } from './install-path.mjs';
+import { consumePostUpdateMarker } from './post-update-marker.mjs';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const PORT = Number(process.env.PORT ?? 4317);
@@ -163,6 +164,11 @@ async function ensureServerUp() {
 }
 
 export async function cmdOpen() {
+  // A post-self-update relaunch must start the server but NOT open a second browser tab —
+  // Velopack relaunches FlolessApp.exe bare (→ this `open` action), while the user's existing
+  // tab is still alive and reconnects via its 5s health poll (#37). Consume the one-shot
+  // marker the updater dropped before the Update.exe handoff; if present, behave like `start`.
+  const postUpdate = consumePostUpdateMarker();
   if (await ping()) {
     // Something is already serving the port. If it's a DIFFERENT, OLDER floless.app build than
     // this one, take it over ("newest wins") so the version the user just launched is the one
@@ -174,11 +180,15 @@ export async function cmdOpen() {
       await new Promise((r) => setTimeout(r, 500)); // let the OS release the port
       await ensureServerUp();
     } else {
-      log(`already running${running ? ` (v${running})` : ''} — opening browser`);
+      log(`already running${running ? ` (v${running})` : ''}`);
     }
   } else {
     await ensureServerUp();
   }
+  if (postUpdate) {
+    log('post-update relaunch — server up; the existing tab reconnects via its health poll (no new tab)');
+    return;
+  }
   log(`opening ${BROWSER_URL}`);
   openBrowser(BROWSER_URL);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floless/app",
-  "version": "0.12.0",
+  "version": "0.12.2",
   "type": "module",
   "description": "Thin localhost host for floless.app — serves web/ and shells the aware CLI. No engine, no LLM.",
   "bin": {