@floless/app 0.18.0 → 0.19.0

package/dist/floless-server.cjs

@@ -5489,7 +5489,7 @@ var require_thread_stream = __commonJS({
     var { version } = require_package();
     var { EventEmitter: EventEmitter2 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join23 } = require("path");
+    var { join: join24 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -5540,7 +5540,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join23(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join24(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         name: opts.workerOpts?.name || "thread-stream",
@@ -6006,9 +6006,9 @@ var require_transport = __commonJS({
   "node_modules/pino/lib/transport.js"(exports2, module2) {
     "use strict";
     var { createRequire: createRequire4 } = require("module");
-    var { existsSync: existsSync21 } = require("node:fs");
+    var { existsSync: existsSync22 } = require("node:fs");
     var getCallers = require_caller();
-    var { join: join23, isAbsolute: isAbsolute2, sep: sep4 } = require("node:path");
+    var { join: join24, isAbsolute: isAbsolute2, sep: sep4 } = require("node:path");
     var { fileURLToPath: fileURLToPath4 } = require("node:url");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
@@ -6080,7 +6080,7 @@ var require_transport = __commonJS({
           return false;
         }
       }
-      return isAbsolute2(path) && !existsSync21(path);
+      return isAbsolute2(path) && !existsSync22(path);
     }
     function stripQuotes(value) {
       const first = value[0];
@@ -6161,7 +6161,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join23(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join24(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -6179,7 +6179,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline2) {
-        target = bundlerOverrides["pino-worker"] || join23(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join24(__dirname, "worker.js");
         options.pipelines = [pipeline2.map((dest) => {
           return {
             ...dest,
@@ -6202,7 +6202,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join23(__dirname, "..", "file.js");
+          return join24(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -7182,7 +7182,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join23 = ",";
+            let join24 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -7196,7 +7196,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join23 = `,
+                join24 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -7204,13 +7204,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join23;
+                res += join24;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join23}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join24}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -7231,7 +7231,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join23 = `,
+              join24 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -7245,13 +7245,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join23;
+                separator = join24;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join23;
+              separator = join24;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -7292,7 +7292,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join23 = ",";
+            let join24 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -7305,7 +7305,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join23 = `,
+                join24 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -7313,13 +7313,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join23;
+                res += join24;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join23}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join24}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -7332,7 +7332,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join23 = `,
+              join24 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -7341,7 +7341,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join23;
+                separator = join24;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -7399,20 +7399,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join24 = `,
+              const join25 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join24;
+                res2 += join25;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join24}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join25}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -7428,16 +7428,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join23 = `,
+            const join24 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join23, maximumBreadth);
+              res += stringifyTypedArray(value, join24, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join23;
+              separator = join24;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -7448,13 +7448,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join23;
+                separator = join24;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join23;
+              separator = join24;
             }
             if (separator !== "") {
               res = `
@@ -41991,7 +41991,7 @@ var require_send = __commonJS({
     var { parseTokenList } = require_parseTokenList();
     var { createHttpError } = require_createHttpError();
     var extname2 = path.extname;
-    var join23 = path.join;
+    var join24 = path.join;
     var normalize2 = path.normalize;
     var resolve6 = path.resolve;
     var sep4 = path.sep;
@@ -42078,7 +42078,7 @@ var require_send = __commonJS({
           return { statusCode: 403 };
         }
         parts = path2.split(sep4);
-        path2 = normalize2(join23(root, path2));
+        path2 = normalize2(join24(root, path2));
       } else {
         if (UP_PATH_REGEXP.test(path2)) {
           debug('malicious path "%s"', path2);
@@ -42361,7 +42361,7 @@ var require_send = __commonJS({
       let err;
       for (let i = 0; i < options.index.length; i++) {
         const index = options.index[i];
-        const p = join23(path2, index);
+        const p = join24(path2, index);
         const { error, stat: stat4 } = await tryStat(p);
         if (error) {
           err = error;
@@ -50827,9 +50827,9 @@ var import_node_readline2 = require("node:readline");
 
 // index.ts
 var import_node_url3 = require("node:url");
-var import_node_path21 = require("node:path");
-var import_node_os15 = require("node:os");
-var import_node_fs22 = require("node:fs");
+var import_node_path22 = require("node:path");
+var import_node_os16 = require("node:os");
+var import_node_fs23 = require("node:fs");
 var import_node_child_process6 = require("node:child_process");
 
 // log.mjs
@@ -52683,7 +52683,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.18.0" : void 0,
+    define: true ? "0.19.0" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -52693,7 +52693,7 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.18.0" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.19.0" : void 0 });
 }
 
 // oauth-presets.ts
@@ -53279,6 +53279,31 @@ function storeVisualInput(appId, dataUrl) {
   }
   return { path, ext, bytes: (0, import_node_fs13.statSync)(path).size, sha256: sha2562 };
 }
+function renameVisualInputs(oldId, newId) {
+  if (!safeSegment(oldId) || !safeSegment(newId)) throw new VisualInputError("invalid app id");
+  const from = (0, import_node_path11.join)(inputsDir(), oldId);
+  if (!(0, import_node_fs13.existsSync)(from)) return;
+  const to = (0, import_node_path11.join)(inputsDir(), newId);
+  if ((0, import_node_fs13.existsSync)(to)) (0, import_node_fs13.rmSync)(to, { recursive: true, force: true });
+  (0, import_node_fs13.mkdirSync)(inputsDir(), { recursive: true });
+  (0, import_node_fs13.renameSync)(from, to);
+}
+function copyVisualInputs(srcId, newId) {
+  if (!safeSegment(srcId) || !safeSegment(newId)) throw new VisualInputError("invalid app id");
+  const from = (0, import_node_path11.join)(inputsDir(), srcId);
+  if (!(0, import_node_fs13.existsSync)(from)) return;
+  (0, import_node_fs13.cpSync)(from, (0, import_node_path11.join)(inputsDir(), newId), { recursive: true });
+}
+function deleteVisualInputs(id) {
+  if (!safeSegment(id)) throw new VisualInputError("invalid app id");
+  const dir = (0, import_node_path11.join)(inputsDir(), id);
+  if ((0, import_node_fs13.existsSync)(dir)) (0, import_node_fs13.rmSync)(dir, { recursive: true, force: true });
+}
+
+// app-lifecycle.ts
+var import_node_fs16 = require("node:fs");
+var import_node_os11 = require("node:os");
+var import_node_path14 = require("node:path");
 
 // routines.ts
 var import_node_fs15 = require("node:fs");
@@ -53868,6 +53893,28 @@ function deleteRoutine(id) {
   broadcast({ type: "routine-changed", id });
   return true;
 }
+function repointRoutines(oldId, newId) {
+  ensureLoaded();
+  const changed = routines.filter((r) => r.workflow === oldId);
+  if (changed.length === 0) return 0;
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  for (const r of changed) {
+    r.workflow = newId;
+    r.updated = now;
+  }
+  saveRoutines();
+  for (const r of changed) {
+    if (r.kind === "trigger") syncTriggerSession(r);
+    broadcast({ type: "routine-changed", id: r.id });
+  }
+  return changed.length;
+}
+function removeRoutinesForApp(id) {
+  ensureLoaded();
+  const ids = routines.filter((r) => r.workflow === id).map((r) => r.id);
+  for (const rid of ids) deleteRoutine(rid);
+  return ids.length;
+}
 function runNow(id) {
   ensureLoaded();
   const r = getRoutine(id);
@@ -54038,6 +54085,167 @@ async function stopScheduler() {
   await stopAllSessions();
 }
 
+// app-lifecycle.ts
+var APP_ID3 = /^[a-z0-9][a-z0-9._-]*$/i;
+var AppLifecycleError = class extends Error {
+  status;
+  constructor(message, status) {
+    super(message);
+    this.name = "AppLifecycleError";
+    this.status = status;
+  }
+};
+function appsDir() {
+  return process.env.AWARE_HOME ? (0, import_node_path14.join)(process.env.AWARE_HOME, "apps") : (0, import_node_path14.join)((0, import_node_os11.homedir)(), ".aware", "apps");
+}
+function appDirPath(id) {
+  return (0, import_node_path14.join)(appsDir(), id);
+}
+function appInstalled(id) {
+  return APP_ID3.test(id) && (0, import_node_fs16.existsSync)(appDirPath(id));
+}
+function findSource(dir) {
+  const files = (0, import_node_fs16.readdirSync)(dir);
+  const hit = files.find((f) => f.toLowerCase().endsWith(".app")) ?? files.find((f) => f.toLowerCase().endsWith(".flo"));
+  return hit ? (0, import_node_path14.join)(dir, hit) : null;
+}
+function rewriteAppId(text, newId) {
+  const re = /^(app:[ \t]*)(["']?)([^"'#\r\n]+?)\2([ \t]*(?:#[^\r\n]*)?)$/m;
+  if (!re.test(text)) throw new AppLifecycleError("source has no top-level app: field", 422);
+  return text.replace(re, (_m, pre, quote, _id, trail) => `${pre}${quote}${newId}${quote}${trail}`);
+}
+function isExposedAsAgent(dir) {
+  const src = findSource(dir);
+  return src ? /^exposes-as-agent:[ \t]*true\b/m.test((0, import_node_fs16.readFileSync)(src, "utf8")) : false;
+}
+function logCascade(what, e) {
+  console.error(`[app-lifecycle] cascade step failed (${what}):`, e instanceof Error ? e.message : e);
+}
+function removeLocks(dir) {
+  for (const f of (0, import_node_fs16.readdirSync)(dir)) {
+    const lower = f.toLowerCase();
+    if (lower.endsWith(".lock") || lower === "lockfile.yaml") {
+      try {
+        (0, import_node_fs16.unlinkSync)((0, import_node_path14.join)(dir, f));
+      } catch {
+      }
+    }
+  }
+}
+function restampSource(dir, newId) {
+  const src = findSource(dir);
+  if (!src) throw new AppLifecycleError("app has no source file", 422);
+  const text = rewriteAppId((0, import_node_fs16.readFileSync)(src, "utf8"), newId);
+  const ext = src.toLowerCase().endsWith(".flo") ? ".flo" : ".app";
+  const newSrc = (0, import_node_path14.join)(dir, `${newId}${ext}`);
+  (0, import_node_fs16.writeFileSync)(newSrc, text);
+  if (src !== newSrc) {
+    try {
+      (0, import_node_fs16.unlinkSync)(src);
+    } catch {
+    }
+  }
+  removeLocks(dir);
+  return newSrc;
+}
+function assertNewId(newId) {
+  if (!newId || !APP_ID3.test(newId) || !safeSegment(newId)) {
+    throw new AppLifecycleError('name must be letters, digits, dot, dash or underscore (no spaces, slashes or "..")', 400);
+  }
+}
+var defaultDeps2 = {
+  compile: (p) => aware.compile(p),
+  uninstall: (id) => aware.uninstall(id)
+};
+async function tryCompile(deps, sourcePath) {
+  try {
+    await deps.compile(sourcePath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function renameApp(oldId, newId, deps = defaultDeps2) {
+  if (!appInstalled(oldId)) throw new AppLifecycleError(`workflow not found: ${oldId}`, 404);
+  assertNewId(newId);
+  if (newId === oldId) throw new AppLifecycleError("that is already its name", 400);
+  if (appInstalled(newId)) throw new AppLifecycleError(`a workflow named "${newId}" already exists`, 409);
+  if (isExposedAsAgent(appDirPath(oldId))) {
+    throw new AppLifecycleError("this workflow is baked into an agent \u2014 rename isn\u2019t supported yet (the agent wouldn\u2019t follow). Un-bake it first, or rename it from the terminal.", 409);
+  }
+  const oldDir = appDirPath(oldId);
+  const newDir = appDirPath(newId);
+  (0, import_node_fs16.renameSync)(oldDir, newDir);
+  let newSrc;
+  try {
+    newSrc = restampSource(newDir, newId);
+  } catch (e) {
+    try {
+      (0, import_node_fs16.renameSync)(newDir, oldDir);
+    } catch {
+    }
+    throw e;
+  }
+  const compiled = await tryCompile(deps, newSrc);
+  try {
+    renameVisualInputs(oldId, newId);
+  } catch (e) {
+    logCascade("move visual inputs", e);
+  }
+  try {
+    repointRoutines(oldId, newId);
+  } catch (e) {
+    logCascade("re-point routines", e);
+  }
+  return { id: newId, compiled };
+}
+async function duplicateApp(srcId, newId, deps = defaultDeps2) {
+  if (!appInstalled(srcId)) throw new AppLifecycleError(`workflow not found: ${srcId}`, 404);
+  assertNewId(newId);
+  if (appInstalled(newId)) throw new AppLifecycleError(`a workflow named "${newId}" already exists`, 409);
+  if (isExposedAsAgent(appDirPath(srcId))) {
+    throw new AppLifecycleError("this workflow is baked into an agent \u2014 duplicate isn\u2019t supported yet (the copy\u2019s agent wouldn\u2019t be installed). Un-bake it first, or copy it from the terminal.", 409);
+  }
+  const newDir = appDirPath(newId);
+  try {
+    (0, import_node_fs16.mkdirSync)(newDir);
+  } catch {
+    throw new AppLifecycleError(`a workflow named "${newId}" already exists`, 409);
+  }
+  let newSrc;
+  try {
+    (0, import_node_fs16.cpSync)(appDirPath(srcId), newDir, { recursive: true });
+    newSrc = restampSource(newDir, newId);
+  } catch (e) {
+    try {
+      (0, import_node_fs16.rmSync)(newDir, { recursive: true, force: true });
+    } catch {
+    }
+    throw e;
+  }
+  const compiled = await tryCompile(deps, newSrc);
+  try {
+    copyVisualInputs(srcId, newId);
+  } catch (e) {
+    logCascade("copy visual inputs", e);
+  }
+  return { id: newId, compiled };
+}
+async function deleteApp(id, deps = defaultDeps2) {
+  if (!appInstalled(id)) throw new AppLifecycleError(`workflow not found: ${id}`, 404);
+  await deps.uninstall(id);
+  try {
+    deleteVisualInputs(id);
+  } catch (e) {
+    logCascade("remove visual inputs", e);
+  }
+  try {
+    removeRoutinesForApp(id);
+  } catch (e) {
+    logCascade("remove routines", e);
+  }
+}
+
 // route-gate.ts
 var AWARE_ROUTES = [
   "/api/apps",
@@ -54063,14 +54271,15 @@ function isGatedAwareRoute(url, method) {
   }
   if (path.startsWith("/api/trigger-run/")) return false;
   if (path === "/api/trigger-run") return m === "POST";
+  if (path.startsWith("/api/app/")) return m === "PATCH" || m === "POST" || m === "DELETE";
   return AWARE_ROUTES.some((p) => path.startsWith(p));
 }
 
 // autostart.mjs
 var import_node_child_process3 = require("node:child_process");
-var import_node_fs16 = require("node:fs");
-var import_node_os11 = require("node:os");
-var import_node_path14 = require("node:path");
+var import_node_fs17 = require("node:fs");
+var import_node_os12 = require("node:os");
+var import_node_path15 = require("node:path");
 
 // teardown.mjs
 var RUN_KEY = "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";
@@ -54182,8 +54391,8 @@ function removeLegacyRunKey() {
 }
 function logLine(msg) {
   try {
-    (0, import_node_fs16.mkdirSync)(logDir(), { recursive: true });
-    (0, import_node_fs16.appendFileSync)(logFilePath(), `${(/* @__PURE__ */ new Date()).toISOString()} ${msg}
+    (0, import_node_fs17.mkdirSync)(logDir(), { recursive: true });
+    (0, import_node_fs17.appendFileSync)(logFilePath(), `${(/* @__PURE__ */ new Date()).toISOString()} ${msg}
 `);
   } catch {
   }
@@ -54191,8 +54400,8 @@ function logLine(msg) {
 function registerAutostart(exePath) {
   if (!isWin) return;
   const xml = buildAutostartTaskXml(exePath, currentUserId());
-  const tmp = (0, import_node_path14.join)((0, import_node_os11.tmpdir)(), `floless-autostart-${process.pid}-${Date.now()}.xml`);
-  (0, import_node_fs16.writeFileSync)(tmp, "\uFEFF" + xml, { encoding: "utf16le" });
+  const tmp = (0, import_node_path15.join)((0, import_node_os12.tmpdir)(), `floless-autostart-${process.pid}-${Date.now()}.xml`);
+  (0, import_node_fs17.writeFileSync)(tmp, "\uFEFF" + xml, { encoding: "utf16le" });
   try {
     (0, import_node_child_process3.execFileSync)("schtasks", ["/Create", "/TN", TASK_NAME, "/XML", tmp, "/F"], {
       stdio: ["ignore", "ignore", "ignore"],
@@ -54203,7 +54412,7 @@ function registerAutostart(exePath) {
     throw err;
   } finally {
     try {
-      (0, import_node_fs16.rmSync)(tmp, { force: true });
+      (0, import_node_fs17.rmSync)(tmp, { force: true });
     } catch {
     }
   }
@@ -54238,26 +54447,26 @@ function unregisterAutostart() {
 // updater.ts
 var import_node_child_process4 = require("node:child_process");
 var import_node_crypto6 = require("node:crypto");
-var import_node_fs18 = require("node:fs");
+var import_node_fs19 = require("node:fs");
 var import_node_stream = require("node:stream");
 var import_promises = require("node:stream/promises");
-var import_node_path16 = require("node:path");
+var import_node_path17 = require("node:path");
 
 // post-update-marker.mjs
-var import_node_fs17 = require("node:fs");
-var import_node_os12 = require("node:os");
-var import_node_path15 = require("node:path");
+var import_node_fs18 = require("node:fs");
+var import_node_os13 = require("node:os");
+var import_node_path16 = require("node:path");
 var FRESH_MS = 12e4;
 function markerPath() {
   const override = (process.env.FLOLESS_POST_UPDATE_MARKER ?? "").trim();
   if (override) return override;
-  const root = process.env.FLOLESS_HOME ?? (0, import_node_path15.join)((0, import_node_os12.homedir)(), ".floless");
-  return (0, import_node_path15.join)(root, ".post-update");
+  const root = process.env.FLOLESS_HOME ?? (0, import_node_path16.join)((0, import_node_os13.homedir)(), ".floless");
+  return (0, import_node_path16.join)(root, ".post-update");
 }
 function legacyMarkerPath() {
   if ((process.env.FLOLESS_POST_UPDATE_MARKER ?? "").trim()) return null;
   try {
-    return (0, import_node_path15.join)((0, import_node_path15.dirname)((0, import_node_path15.dirname)(process.execPath)), ".floless-post-update");
+    return (0, import_node_path16.join)((0, import_node_path16.dirname)((0, import_node_path16.dirname)(process.execPath)), ".floless-post-update");
   } catch {
     return null;
   }
@@ -54267,7 +54476,7 @@ function writePostUpdateMarker() {
   for (const p of [markerPath(), legacyMarkerPath()]) {
     if (!p) continue;
     try {
-      (0, import_node_fs17.writeFileSync)(p, (/* @__PURE__ */ new Date()).toISOString());
+      (0, import_node_fs18.writeFileSync)(p, (/* @__PURE__ */ new Date()).toISOString());
       wrote = true;
     } catch {
     }
@@ -54279,9 +54488,9 @@ function consumePostUpdateMarker() {
   for (const p of [markerPath(), legacyMarkerPath()]) {
     if (!p) continue;
     try {
-      if (!(0, import_node_fs17.existsSync)(p)) continue;
-      const ageMs = Date.now() - (0, import_node_fs17.statSync)(p).mtimeMs;
-      (0, import_node_fs17.rmSync)(p, { force: true });
+      if (!(0, import_node_fs18.existsSync)(p)) continue;
+      const ageMs = Date.now() - (0, import_node_fs18.statSync)(p).mtimeMs;
+      (0, import_node_fs18.rmSync)(p, { force: true });
       if (ageMs < FRESH_MS) fresh = true;
     } catch {
     }
@@ -54298,13 +54507,13 @@ function currentVersion() {
   return appVersion();
 }
 function installRoot() {
-  return (0, import_node_path16.dirname)((0, import_node_path16.dirname)(process.execPath));
+  return (0, import_node_path17.dirname)((0, import_node_path17.dirname)(process.execPath));
 }
 function updateExePath() {
-  return (0, import_node_path16.join)(installRoot(), "Update.exe");
+  return (0, import_node_path17.join)(installRoot(), "Update.exe");
 }
 function packagesDir() {
-  return (0, import_node_path16.join)(installRoot(), "packages");
+  return (0, import_node_path17.join)(installRoot(), "packages");
 }
 function feedUrl() {
   const env2 = (process.env.FLOLESS_UPDATE_URL ?? "").trim().replace(/\/+$/, "");
@@ -54397,22 +54606,22 @@ async function checkForUpdate() {
 }
 async function sha1OfFile(path) {
   const hash = (0, import_node_crypto6.createHash)("sha1");
-  await (0, import_promises.pipeline)((0, import_node_fs18.createReadStream)(path), hash);
+  await (0, import_promises.pipeline)((0, import_node_fs19.createReadStream)(path), hash);
   return hash.digest("hex").toUpperCase();
 }
 async function downloadPackage(asset) {
   if (!NUPKG_NAME.test(asset.FileName)) throw new Error(`refusing suspicious package name: ${asset.FileName}`);
   const want = asset.SHA1.toUpperCase();
   const dir = packagesDir();
-  (0, import_node_fs18.mkdirSync)(dir, { recursive: true });
-  const dest = (0, import_node_path16.join)(dir, asset.FileName);
-  if ((0, import_node_fs18.existsSync)(dest) && await sha1OfFile(dest) === want) return dest;
+  (0, import_node_fs19.mkdirSync)(dir, { recursive: true });
+  const dest = (0, import_node_path17.join)(dir, asset.FileName);
+  if ((0, import_node_fs19.existsSync)(dest) && await sha1OfFile(dest) === want) return dest;
   const res = await authedFetch(`${feedUrl()}/${encodeURIComponent(asset.FileName)}`, {
     redirect: "follow",
     signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS)
   });
   if (!res.ok || !res.body) throw new Error(`download failed: HTTP ${res.status} for ${asset.FileName}`);
-  await (0, import_promises.pipeline)(import_node_stream.Readable.fromWeb(res.body), (0, import_node_fs18.createWriteStream)(dest));
+  await (0, import_promises.pipeline)(import_node_stream.Readable.fromWeb(res.body), (0, import_node_fs19.createWriteStream)(dest));
   const got = await sha1OfFile(dest);
   if (got !== want) throw new Error(`SHA1 mismatch for ${asset.FileName}: feed=${want} got=${got}`);
   return dest;
@@ -54421,7 +54630,7 @@ async function applyUpdate(check, opts) {
   if (!check.supported) return { applied: false, message: check.reason ?? "auto-update not supported in this runtime" };
   if (!check.updateAvailable || !check.asset) return { applied: false, message: check.reason ?? "no update available" };
   const exe = updateExePath();
-  if (!(0, import_node_fs18.existsSync)(exe)) {
+  if (!(0, import_node_fs19.existsSync)(exe)) {
     return { applied: false, message: `Update.exe not found at ${exe} \u2014 is this a Velopack install?` };
   }
   const pkg = await downloadPackage(check.asset);
@@ -54630,12 +54839,12 @@ function isTraceCorrupt(events) {
 
 // launch.mjs
 var import_node_child_process5 = require("node:child_process");
-var import_node_path17 = require("node:path");
+var import_node_path18 = require("node:path");
 var import_node_url = require("node:url");
-var import_node_fs19 = require("node:fs");
+var import_node_fs20 = require("node:fs");
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_readline = require("node:readline");
-var __dirname2 = (0, import_node_path17.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
+var __dirname2 = (0, import_node_path18.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
 var PORT = Number(process.env.PORT ?? 4317);
 var HEALTH_URL = `http://127.0.0.1:${PORT}/api/health`;
 var BROWSER_URL = `http://floless.localhost:${PORT}`;
@@ -54707,8 +54916,8 @@ async function waitHealthy(timeoutMs = 3e4) {
 function resolveServerStart() {
   const packaged = /flolessapp\.exe$/i.test(process.execPath);
   if (packaged) return { cmd: process.execPath, args: ["--serve"], shell: false };
-  const bundle = (0, import_node_path17.join)(__dirname2, "dist", "floless-server.cjs");
-  if ((0, import_node_fs19.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
+  const bundle = (0, import_node_path18.join)(__dirname2, "dist", "floless-server.cjs");
+  if ((0, import_node_fs20.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
   return { cmd: "npm", args: ["run", "start"], shell: isWin2 };
 }
 function startServerDetached() {
@@ -54861,8 +55070,8 @@ function taskkillArgs(pid, { tree = true } = {}) {
 }
 function killSupervisor({ tree = true } = {}) {
   if (!isWin2) return;
-  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path17.basename)(process.execPath));
-  const scriptMatch = isNpmChannel ? (0, import_node_path17.basename)((0, import_node_url.fileURLToPath)(__import_meta_url)) : void 0;
+  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path18.basename)(process.execPath));
+  const scriptMatch = isNpmChannel ? (0, import_node_path18.basename)((0, import_node_url.fileURLToPath)(__import_meta_url)) : void 0;
   const realExe = resolveRealInstallExe(process.execPath);
   const exeMatch = realExe === process.execPath ? process.execPath : [process.execPath, realExe];
   const pids = supervisorPidsToKill(enumerateProcesses(), process.pid, exeMatch, scriptMatch);
@@ -55027,7 +55236,7 @@ async function runAction(arg, flagArgv = [], selfVersion = null) {
   }
   await action(parseTeardownFlags(flagArgv));
 }
-var entry = (0, import_node_path17.basename)(process.argv[1] ?? "").toLowerCase();
+var entry = (0, import_node_path18.basename)(process.argv[1] ?? "").toLowerCase();
 if (entry === "launch.mjs") {
   runAction(process.argv[2], process.argv.slice(3)).catch((e) => {
     log(`error: ${e?.message ?? e}`);
@@ -55101,9 +55310,9 @@ function awareUpgradeBlockReason(s) {
 }
 
 // skill-sync.ts
-var import_node_fs20 = require("node:fs");
-var import_node_os13 = require("node:os");
-var import_node_path18 = require("node:path");
+var import_node_fs21 = require("node:fs");
+var import_node_os14 = require("node:os");
+var import_node_path19 = require("node:path");
 var import_node_url2 = require("node:url");
 var import_yaml5 = __toESM(require_dist6(), 1);
 
@@ -55130,30 +55339,30 @@ function selectShippedSkillNames(names) {
 }
 
 // skill-sync.ts
-var __dirname3 = (0, import_node_path18.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
+var __dirname3 = (0, import_node_path19.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
 function bundledSkillsRoot() {
   const candidates = [
-    (0, import_node_path18.join)(__dirname3, "skills"),
-    (0, import_node_path18.join)((0, import_node_path18.dirname)(process.execPath), "skills"),
-    (0, import_node_path18.join)(__dirname3, "..", ".claude", "skills")
+    (0, import_node_path19.join)(__dirname3, "skills"),
+    (0, import_node_path19.join)((0, import_node_path19.dirname)(process.execPath), "skills"),
+    (0, import_node_path19.join)(__dirname3, "..", ".claude", "skills")
   ];
-  return candidates.find((p) => (0, import_node_fs20.existsSync)(p)) ?? null;
+  return candidates.find((p) => (0, import_node_fs21.existsSync)(p)) ?? null;
 }
 function targetConfigDirs() {
   const override = process.env.FLOLESS_SKILL_TARGETS;
   if (override) {
     return override.split(";").map((d) => d.trim()).filter(Boolean).map((dir) => ({ runtime: "custom", dir }));
   }
-  const home = (0, import_node_os13.homedir)();
+  const home = (0, import_node_os14.homedir)();
   return [
-    { runtime: "claude", dir: (0, import_node_path18.join)(home, ".claude") },
-    { runtime: "codex", dir: (0, import_node_path18.join)(home, ".codex") },
-    { runtime: "opencode", dir: (0, import_node_path18.join)(home, ".opencode") }
+    { runtime: "claude", dir: (0, import_node_path19.join)(home, ".claude") },
+    { runtime: "codex", dir: (0, import_node_path19.join)(home, ".codex") },
+    { runtime: "opencode", dir: (0, import_node_path19.join)(home, ".opencode") }
   ];
 }
 function skillVersion(skillMdPath) {
   try {
-    const text = (0, import_node_fs20.readFileSync)(skillMdPath, "utf8");
+    const text = (0, import_node_fs21.readFileSync)(skillMdPath, "utf8");
     const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(text);
     if (!m || m[1] === void 0) return null;
     const fm = (0, import_yaml5.parse)(m[1]);
@@ -55193,21 +55402,21 @@ function decideAction(installed, bundled) {
 function bundledSkills(root) {
   let entries = [];
   try {
-    entries = selectShippedSkillNames((0, import_node_fs20.readdirSync)(root));
+    entries = selectShippedSkillNames((0, import_node_fs21.readdirSync)(root));
   } catch {
     return [];
   }
   const out = [];
   for (const name of entries) {
-    const dir = (0, import_node_path18.join)(root, name);
+    const dir = (0, import_node_path19.join)(root, name);
     let isDir = false;
     try {
-      isDir = (0, import_node_fs20.statSync)(dir).isDirectory();
+      isDir = (0, import_node_fs21.statSync)(dir).isDirectory();
     } catch {
       isDir = false;
     }
     if (!isDir) continue;
-    const v = skillVersion((0, import_node_path18.join)(dir, "SKILL.md"));
+    const v = skillVersion((0, import_node_path19.join)(dir, "SKILL.md"));
     if (!v) continue;
     out.push({ name, dir, version: v });
   }
@@ -55220,17 +55429,17 @@ function syncSkills() {
   const skills = bundledSkills(root);
   if (!skills.length) return results;
   for (const { runtime, dir: cfg } of targetConfigDirs()) {
-    if (!(0, import_node_fs20.existsSync)(cfg)) continue;
-    const skillsDir = (0, import_node_path18.join)(cfg, "skills");
+    if (!(0, import_node_fs21.existsSync)(cfg)) continue;
+    const skillsDir = (0, import_node_path19.join)(cfg, "skills");
     for (const s of skills) {
-      const dest = (0, import_node_path18.join)(skillsDir, s.name);
-      const installedMd = (0, import_node_path18.join)(dest, "SKILL.md");
-      const installed = (0, import_node_fs20.existsSync)(installedMd) ? skillVersion(installedMd) : null;
+      const dest = (0, import_node_path19.join)(skillsDir, s.name);
+      const installedMd = (0, import_node_path19.join)(dest, "SKILL.md");
+      const installed = (0, import_node_fs21.existsSync)(installedMd) ? skillVersion(installedMd) : null;
       const action = decideAction(installed, s.version);
       if (action === "installed" || action === "updated") {
         try {
-          if (action === "updated") (0, import_node_fs20.rmSync)(dest, { recursive: true, force: true });
-          (0, import_node_fs20.cpSync)(s.dir, dest, { recursive: true });
+          if (action === "updated") (0, import_node_fs21.rmSync)(dest, { recursive: true, force: true });
+          (0, import_node_fs21.cpSync)(s.dir, dest, { recursive: true });
           results.push({ runtime, skill: s.name, action, from: installed, to: s.version });
         } catch {
         }
@@ -55243,9 +55452,9 @@ function syncSkills() {
 }
 
 // watch.ts
-var import_node_os14 = require("node:os");
-var import_node_path20 = require("node:path");
-var import_node_fs21 = require("node:fs");
+var import_node_os15 = require("node:os");
+var import_node_path21 = require("node:path");
+var import_node_fs22 = require("node:fs");
 
 // node_modules/chokidar/esm/index.js
 var import_fs2 = require("fs");
@@ -55256,7 +55465,7 @@ var sysPath2 = __toESM(require("path"), 1);
 // node_modules/readdirp/esm/index.js
 var import_promises2 = require("node:fs/promises");
 var import_node_stream2 = require("node:stream");
-var import_node_path19 = require("node:path");
+var import_node_path20 = require("node:path");
 var EntryTypes = {
   FILE_TYPE: "files",
   DIR_TYPE: "directories",
@@ -55331,7 +55540,7 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
     this._wantsDir = type ? DIR_TYPES.has(type) : false;
     this._wantsFile = type ? FILE_TYPES.has(type) : false;
     this._wantsEverything = type === EntryTypes.EVERYTHING_TYPE;
-    this._root = (0, import_node_path19.resolve)(root);
+    this._root = (0, import_node_path20.resolve)(root);
     this._isDirent = !opts.alwaysStat;
     this._statsProp = this._isDirent ? "dirent" : "stats";
     this._rdOptions = { encoding: "utf8", withFileTypes: this._isDirent };
@@ -55402,8 +55611,8 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
     let entry2;
     const basename5 = this._isDirent ? dirent.name : dirent;
     try {
-      const fullPath = (0, import_node_path19.resolve)((0, import_node_path19.join)(path, basename5));
-      entry2 = { path: (0, import_node_path19.relative)(this._root, fullPath), fullPath, basename: basename5 };
+      const fullPath = (0, import_node_path20.resolve)((0, import_node_path20.join)(path, basename5));
+      entry2 = { path: (0, import_node_path20.relative)(this._root, fullPath), fullPath, basename: basename5 };
       entry2[this._statsProp] = this._isDirent ? dirent : await this._stat(fullPath);
     } catch (err) {
       this._onError(err);
@@ -55437,7 +55646,7 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
         }
         if (entryRealPathStats.isDirectory()) {
           const len = entryRealPath.length;
-          if (full.startsWith(entryRealPath) && full.substr(len, 1) === import_node_path19.sep) {
+          if (full.startsWith(entryRealPath) && full.substr(len, 1) === import_node_path20.sep) {
             const recursiveError = new Error(`Circular symlink detected: "${full}" points to "${entryRealPath}"`);
             recursiveError.code = RECURSIVE_ERROR_CODE;
             return this._onError(recursiveError);
@@ -56945,33 +57154,33 @@ function appIdFromLogPath(path) {
   return i >= 0 && parts[i + 1] ? parts[i + 1] : null;
 }
 function samePath(a, b) {
-  const ra = (0, import_node_path20.resolve)(a);
-  const rb = (0, import_node_path20.resolve)(b);
+  const ra = (0, import_node_path21.resolve)(a);
+  const rb = (0, import_node_path21.resolve)(b);
   return process.platform === "win32" ? ra.toLowerCase() === rb.toLowerCase() : ra === rb;
 }
 function underDir(path, dir) {
-  const rp = (0, import_node_path20.resolve)(path);
-  const rd = (0, import_node_path20.resolve)(dir);
+  const rp = (0, import_node_path21.resolve)(path);
+  const rd = (0, import_node_path21.resolve)(dir);
   const [p, d] = process.platform === "win32" ? [rp.toLowerCase(), rd.toLowerCase()] : [rp, rd];
-  return p === d || p.startsWith(d + import_node_path20.sep);
+  return p === d || p.startsWith(d + import_node_path21.sep);
 }
 function startWatcher() {
-  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path20.join)((0, import_node_os14.homedir)(), ".aware");
-  const credentialsDir = (0, import_node_path20.join)(awareDir, "credentials");
-  if (!(0, import_node_fs21.existsSync)(credentialsDir)) {
+  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path21.join)((0, import_node_os15.homedir)(), ".aware");
+  const credentialsDir = (0, import_node_path21.join)(awareDir, "credentials");
+  if (!(0, import_node_fs22.existsSync)(credentialsDir)) {
     try {
-      (0, import_node_fs21.mkdirSync)(credentialsDir, { recursive: true });
+      (0, import_node_fs22.mkdirSync)(credentialsDir, { recursive: true });
     } catch {
     }
   }
-  if (!(0, import_node_fs21.existsSync)(uiDir)) {
+  if (!(0, import_node_fs22.existsSync)(uiDir)) {
     try {
-      (0, import_node_fs21.mkdirSync)(uiDir, { recursive: true });
+      (0, import_node_fs22.mkdirSync)(uiDir, { recursive: true });
     } catch {
     }
   }
-  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path20.join)(awareDir, d)).filter((p) => (0, import_node_fs21.existsSync)(p));
-  if ((0, import_node_fs21.existsSync)(uiDir)) targets.push(uiDir);
+  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path21.join)(awareDir, d)).filter((p) => (0, import_node_fs22.existsSync)(p));
+  if ((0, import_node_fs22.existsSync)(uiDir)) targets.push(uiDir);
   if (targets.length === 0) {
     return null;
   }
@@ -57001,11 +57210,11 @@ function startWatcher() {
     const isCredential = path.split(/[\\/]/).includes("credentials");
     const kind = isCredential ? "credential" : path.endsWith(".jsonl") ? "trace" : path.endsWith(".lock") ? "lock" : path.endsWith(".flo") || path.endsWith(".app") ? "source" : "file";
     broadcast({ type: "fs-change", kind, event, path });
-    if (kind === "trace" && event !== "unlink" && (0, import_node_fs21.existsSync)(path)) {
+    if (kind === "trace" && event !== "unlink" && (0, import_node_fs22.existsSync)(path)) {
       const id = appIdFromLogPath(path);
       if (!id) return;
       try {
-        broadcast({ type: "trace-file", id, runId: path.split(import_node_path20.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs21.readFileSync)(path, "utf8")) });
+        broadcast({ type: "trace-file", id, runId: path.split(import_node_path21.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs22.readFileSync)(path, "utf8")) });
       } catch {
       }
     }
@@ -57014,10 +57223,10 @@ function startWatcher() {
 }
 
 // index.ts
-var __dirname4 = (0, import_node_path21.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
-var WEB_ROOT = [(0, import_node_path21.join)(__dirname4, "web"), (0, import_node_path21.join)((0, import_node_path21.dirname)(process.execPath), "web"), (0, import_node_path21.join)(__dirname4, "..", "web")].find(
-  (p) => (0, import_node_fs22.existsSync)(p)
-) ?? (0, import_node_path21.join)(__dirname4, "..", "web");
+var __dirname4 = (0, import_node_path22.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
+var WEB_ROOT = [(0, import_node_path22.join)(__dirname4, "web"), (0, import_node_path22.join)((0, import_node_path22.dirname)(process.execPath), "web"), (0, import_node_path22.join)(__dirname4, "..", "web")].find(
+  (p) => (0, import_node_fs23.existsSync)(p)
+) ?? (0, import_node_path22.join)(__dirname4, "..", "web");
 var PORT2 = Number(process.env.PORT ?? 4317);
 var HOST = "127.0.0.1";
 var crashHandlersInstalled = false;
@@ -57033,7 +57242,7 @@ function installCrashHandlers() {
 ${stack}
 `;
     try {
-      (0, import_node_fs22.appendFileSync)(logFilePath(), line);
+      (0, import_node_fs23.appendFileSync)(logFilePath(), line);
     } catch {
     }
     if (process.stderr.isTTY) process.stderr.write(line);
@@ -57116,6 +57325,9 @@ async function startServer() {
     if (err instanceof RoutineError) {
       return reply.status(err.status).send({ ok: false, error: err.message });
     }
+    if (err instanceof AppLifecycleError) {
+      return reply.status(err.status).send({ ok: false, error: err.message });
+    }
     if (err instanceof AwareError) {
       app.log.warn({ detail: err.detail }, err.message);
       return reply.status(502).send({ ok: false, error: err.message, detail: err.detail ?? null });
@@ -57361,6 +57573,35 @@ async function startServer() {
   app.get("/api/app/:id", async (req) => {
     return { ok: true, app: readApp(req.params.id) };
   });
+  async function stopForegroundSession(id) {
+    try {
+      const sid = foregroundSessionId(id);
+      if (getSnapshot(sid)) await stopSession(sid);
+    } catch (e) {
+      app.log.warn({ id, err: e instanceof Error ? e.message : String(e) }, "stopForegroundSession failed before lifecycle op");
+    }
+  }
+  app.patch("/api/app/:id/rename", async (req, reply) => {
+    const name = typeof req.body?.name === "string" ? req.body.name.trim() : "";
+    if (!name) return reply.status(400).send({ ok: false, error: "name required" });
+    await stopForegroundSession(req.params.id);
+    const res = await renameApp(req.params.id, name);
+    broadcast({ type: "apps-changed", id: res.id });
+    return { ok: true, ...res };
+  });
+  app.post("/api/app/:id/duplicate", async (req, reply) => {
+    const name = typeof req.body?.name === "string" ? req.body.name.trim() : "";
+    if (!name) return reply.status(400).send({ ok: false, error: "name required" });
+    const res = await duplicateApp(req.params.id, name);
+    broadcast({ type: "apps-changed", id: res.id });
+    return { ok: true, ...res };
+  });
+  app.delete("/api/app/:id", async (req) => {
+    await stopForegroundSession(req.params.id);
+    await deleteApp(req.params.id);
+    broadcast({ type: "apps-changed", id: req.params.id });
+    return { ok: true };
+  });
   app.post("/api/compile", async (req, reply) => {
     const { id, sourcePath } = req.body ?? {};
     const path = sourcePath ?? (id ? readApp(id).source.path : void 0);
@@ -57383,11 +57624,11 @@ async function startServer() {
     if (appExists(id)) {
       return reply.status(409).send({ ok: false, error: `a workflow named "${id}" is already installed \u2014 remove it first, or rename the file's app: id`, code: "exists", id });
     }
-    const stageRoot = (0, import_node_fs22.mkdtempSync)((0, import_node_path21.join)((0, import_node_os15.tmpdir)(), "floless-import-"));
+    const stageRoot = (0, import_node_fs23.mkdtempSync)((0, import_node_path22.join)((0, import_node_os16.tmpdir)(), "floless-import-"));
     try {
-      const stageDir = (0, import_node_path21.join)(stageRoot, id);
-      (0, import_node_fs22.mkdirSync)(stageDir);
-      (0, import_node_fs22.writeFileSync)((0, import_node_path21.join)(stageDir, `${id}.flo`), content);
+      const stageDir = (0, import_node_path22.join)(stageRoot, id);
+      (0, import_node_fs23.mkdirSync)(stageDir);
+      (0, import_node_fs23.writeFileSync)((0, import_node_path22.join)(stageDir, `${id}.flo`), content);
       await aware.install(stageDir);
     } catch (err) {
       try {
@@ -57397,7 +57638,7 @@ async function startServer() {
       const msg = err instanceof AwareError ? err.message : String(err?.message ?? err);
       return reply.status(502).send({ ok: false, error: `import failed: ${msg}` });
     } finally {
-      (0, import_node_fs22.rmSync)(stageRoot, { recursive: true, force: true });
+      (0, import_node_fs23.rmSync)(stageRoot, { recursive: true, force: true });
     }
     broadcast({ type: "apps-changed", id });
     return { ok: true, id };
@@ -57411,24 +57652,24 @@ async function startServer() {
     }
     const inputs = appData.inputs.map((i) => ({ name: i.name, type: i.type }));
     const baked = bakeFloSource(appData.source.text, inputs);
-    const tmpRoot = (0, import_node_fs22.mkdtempSync)((0, import_node_path21.join)((0, import_node_os15.tmpdir)(), "floless-bake-"));
-    const backupDir = (0, import_node_path21.join)(tmpRoot, `${id}-backup`);
-    const bakeDir = (0, import_node_path21.join)(tmpRoot, id);
-    (0, import_node_fs22.cpSync)(appDir(id), backupDir, { recursive: true });
-    (0, import_node_fs22.cpSync)(appDir(id), bakeDir, { recursive: true });
+    const tmpRoot = (0, import_node_fs23.mkdtempSync)((0, import_node_path22.join)((0, import_node_os16.tmpdir)(), "floless-bake-"));
+    const backupDir = (0, import_node_path22.join)(tmpRoot, `${id}-backup`);
+    const bakeDir = (0, import_node_path22.join)(tmpRoot, id);
+    (0, import_node_fs23.cpSync)(appDir(id), backupDir, { recursive: true });
+    (0, import_node_fs23.cpSync)(appDir(id), bakeDir, { recursive: true });
     const floName = appData.source.path.split(/[\\/]/).pop();
-    (0, import_node_fs22.writeFileSync)((0, import_node_path21.join)(bakeDir, floName), baked);
-    let appInstalled = true;
+    (0, import_node_fs23.writeFileSync)((0, import_node_path22.join)(bakeDir, floName), baked);
+    let appInstalled2 = true;
     try {
       await aware.uninstall(id);
-      appInstalled = false;
+      appInstalled2 = false;
       try {
         await aware.install(bakeDir);
-        appInstalled = true;
+        appInstalled2 = true;
       } catch (installErr) {
         try {
           await aware.install(backupDir);
-          appInstalled = true;
+          appInstalled2 = true;
         } catch (restoreErr) {
           app.log.error({ id, tmpRoot, restoreErr: String(restoreErr) }, "bake: install AND restore failed \u2014 app uninstalled; backup retained");
           return reply.status(502).send({
@@ -57439,17 +57680,17 @@ async function startServer() {
         throw installErr;
       }
       try {
-        await aware.compile((0, import_node_path21.join)(appDir(id), floName));
+        await aware.compile((0, import_node_path22.join)(appDir(id), floName));
       } catch (compileErr) {
         app.log.warn({ id, compileErr: String(compileErr) }, "bake: post-install recompile failed (app baked but may need a manual Compile)");
       }
       broadcast({ type: "baked", id });
       return { ok: true, id, agent: id, inputs };
     } finally {
-      if (appInstalled) (0, import_node_fs22.rmSync)(tmpRoot, { recursive: true, force: true });
+      if (appInstalled2) (0, import_node_fs23.rmSync)(tmpRoot, { recursive: true, force: true });
     }
   });
-  const graftAgentsDir = () => (0, import_node_path21.join)((0, import_node_os15.homedir)(), ".aware", "agents");
+  const graftAgentsDir = () => (0, import_node_path22.join)((0, import_node_os16.homedir)(), ".aware", "agents");
   app.post("/api/graft/match", async (req, reply) => {
     const { glob } = req.body ?? {};
     if (!glob) return reply.status(400).send({ ok: false, error: "glob required" });
@@ -57466,7 +57707,7 @@ async function startServer() {
     if (!sourceKind || !sourceRef) {
       return reply.status(400).send({ ok: false, error: "sourceKind and sourceRef required" });
     }
-    const tempHome = (0, import_node_fs22.mkdtempSync)((0, import_node_path21.join)((0, import_node_os15.tmpdir)(), "floless-graft-"));
+    const tempHome = (0, import_node_fs23.mkdtempSync)((0, import_node_path22.join)((0, import_node_os16.tmpdir)(), "floless-graft-"));
     let result;
     try {
       result = await aware.build({
@@ -57479,19 +57720,19 @@ async function startServer() {
         awareHome: tempHome
       });
     } catch (err) {
-      (0, import_node_fs22.rmSync)(tempHome, { recursive: true, force: true });
+      (0, import_node_fs23.rmSync)(tempHome, { recursive: true, force: true });
       const msg = err instanceof AwareError ? err.message : String(err?.message ?? err);
       return reply.status(422).send({ ok: false, error: msg });
     }
     const manifest = readStagedManifest(result.agentDir);
     if (!manifest) {
-      (0, import_node_fs22.rmSync)(tempHome, { recursive: true, force: true });
+      (0, import_node_fs23.rmSync)(tempHome, { recursive: true, force: true });
       return reply.status(502).send({ ok: false, error: `build produced output at ${result.agentDir} but no manifest.yaml` });
     }
     const token = (0, import_node_crypto7.randomUUID)();
     registerStage(token, tempHome, result.agentId);
     const preview = buildPreview(manifest, sourceKind, sourceRef, token);
-    if ((0, import_node_fs22.existsSync)((0, import_node_path21.join)(graftAgentsDir(), result.agentId))) {
+    if ((0, import_node_fs23.existsSync)((0, import_node_path22.join)(graftAgentsDir(), result.agentId))) {
       preview.warnings.unshift(`An agent named "${result.agentId}" is already installed \u2014 creating it will overwrite it.`);
     }
     return { ok: true, preview };
@@ -57510,7 +57751,7 @@ async function startServer() {
         registerStage(stagedRef, stage.tempDir, stage.agentId);
         return reply.status(409).send({ ok: false, error: err.message, agentId: stage.agentId, collision: true });
       }
-      (0, import_node_fs22.rmSync)(stage.tempDir, { recursive: true, force: true });
+      (0, import_node_fs23.rmSync)(stage.tempDir, { recursive: true, force: true });
       throw err;
     }
     broadcast({ type: "grafted", id: stage.agentId });
@@ -57733,11 +57974,11 @@ async function startServer() {
   app.get("/api/requests/:id/snapshot/:n", async (req, reply) => {
     const n = Number.parseInt(req.params.n, 10);
     const p = Number.isInteger(n) ? snapshotPathFor(req.params.id, n) : null;
-    if (!p || !(0, import_node_fs22.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
+    if (!p || !(0, import_node_fs23.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
     const ext = p.split(".").pop().toLowerCase();
     reply.header("Content-Type", ext === "png" ? "image/png" : ext === "webp" ? "image/webp" : "image/jpeg");
     reply.header("Cache-Control", "no-store");
-    return (0, import_node_fs22.readFileSync)(p);
+    return (0, import_node_fs23.readFileSync)(p);
   });
   app.post(
     "/api/tweak",
@@ -57867,7 +58108,7 @@ async function startServer() {
         warn(`last-run-status:${ref} \u2014 trace exists but couldn't be parsed (corrupt/truncated)`);
         let finishedAt2 = null;
         try {
-          finishedAt2 = (0, import_node_fs22.statSync)(latest.path).mtime.toISOString();
+          finishedAt2 = (0, import_node_fs23.statSync)(latest.path).mtime.toISOString();
         } catch {
           finishedAt2 = null;
         }
@@ -57877,7 +58118,7 @@ async function startServer() {
       let finishedAt = typeof runEnd?.ts === "string" ? runEnd.ts : null;
       if (!finishedAt) {
         try {
-          finishedAt = (0, import_node_fs22.statSync)(latest.path).mtime.toISOString();
+          finishedAt = (0, import_node_fs23.statSync)(latest.path).mtime.toISOString();
         } catch {
           finishedAt = null;
         }