@floless/app 0.20.0 → 0.22.0

package/dist/floless-server.cjs

@@ -50958,6 +50958,17 @@ function appProvider(id) {
     return "other";
   }
 }
+function appBaked(id) {
+  try {
+    const dir = appDir(id);
+    const sourcePath = firstWithExt(dir, ".app") ?? firstWithExt(dir, ".flo");
+    if (!sourcePath) return false;
+    const src = asRecord((0, import_yaml.parse)((0, import_node_fs3.readFileSync)(sourcePath, "utf8")));
+    return src["exposes-as-agent"] === true;
+  } catch {
+    return false;
+  }
+}
 function readApp(id) {
   const dir = appDir(id);
   const sourcePath = firstWithExt(dir, ".app") ?? firstWithExt(dir, ".flo");
@@ -51933,6 +51944,41 @@ var aware = {
     if (code !== 0) throw new AwareError(`aware app uninstall failed (exit ${code})`, { stdout, stderr });
     return { output: stdout.trim() };
   },
+  /**
+   * Rename an installed app in place (`aware app rename <old> <new>`, CLI ≥ 0.68).
+   * AWARE owns the whole move — the app dir, the source `app:` field, the
+   * regenerated lock (so the Run gate stays green, no drift), and the synthesized
+   * agent of a baked (`exposes-as-agent`) app. `compiled` reflects whether AWARE
+   * refreshed the lock (false → the app needs a manual Compile). Throws
+   * AwareUnsupportedError on a pre-0.68 CLI so app-lifecycle can say "update AWARE"
+   * instead of treating an old CLI as a hard fault.
+   */
+  async rename(oldId, newId) {
+    const { code, stdout, stderr } = await runRaw(["app", "rename", assertId(oldId), assertId(newId)]);
+    if (code !== 0) {
+      if (isInvokeUnsupported({ stdout, stderr })) {
+        throw new AwareUnsupportedError("aware CLI does not support `app rename` (needs \u2265 0.68) \u2014 update AWARE", { stdout, stderr });
+      }
+      throw new AwareError(`aware app rename ${oldId} \u2192 ${newId} failed (exit ${code})`, { stdout, stderr, code });
+    }
+    return { compiled: /lock refreshed/i.test(stdout), output: stdout.trim() };
+  },
+  /**
+   * Duplicate an installed app into an independent copy (`aware app duplicate
+   * <src> <new>`, CLI ≥ 0.68). The original is untouched; a baked copy gets its
+   * own synthesized agent. Same `compiled` + unsupported-degradation contract as
+   * rename.
+   */
+  async duplicate(srcId, newId) {
+    const { code, stdout, stderr } = await runRaw(["app", "duplicate", assertId(srcId), assertId(newId)]);
+    if (code !== 0) {
+      if (isInvokeUnsupported({ stdout, stderr })) {
+        throw new AwareUnsupportedError("aware CLI does not support `app duplicate` (needs \u2265 0.68) \u2014 update AWARE", { stdout, stderr });
+      }
+      throw new AwareError(`aware app duplicate ${srcId} \u2192 ${newId} failed (exit ${code})`, { stdout, stderr, code });
+    }
+    return { compiled: /lock refreshed/i.test(stdout), output: stdout.trim() };
+  },
   /**
    * Install a first-party agent by registry id (`aware agent install <id>`). The
    * registry install pulls a large tarball (~200s observed) — far over runRaw's 60s
@@ -52683,7 +52729,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.20.0" : void 0,
+    define: true ? "0.22.0" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -52693,7 +52739,7 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.20.0" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.22.0" : void 0 });
 }
 
 // oauth-presets.ts
@@ -53202,11 +53248,12 @@ var flolessRoot = ROOT2;
 var SnapshotError = class extends Error {
 };
 var MAX_SNAPSHOTS = 8;
-var MAX_BYTES2 = 10 * 1024 * 1024;
+var MAX_BYTES2 = 25 * 1024 * 1024;
 function sniffExt(buf) {
   if (buf.length >= 8 && buf[0] === 137 && buf[1] === 80 && buf[2] === 78 && buf[3] === 71) return "png";
   if (buf.length >= 3 && buf[0] === 255 && buf[1] === 216 && buf[2] === 255) return "jpg";
   if (buf.length >= 12 && buf.toString("ascii", 0, 4) === "RIFF" && buf.toString("ascii", 8, 12) === "WEBP") return "webp";
+  if (buf.length >= 5 && buf[0] === 37 && buf[1] === 80 && buf[2] === 68 && buf[3] === 70 && buf[4] === 45) return "pdf";
   return null;
 }
 function decodeSnapshots(inputs) {
@@ -53215,11 +53262,12 @@ function decodeSnapshots(inputs) {
   return inputs.map((s) => {
     const m = /^data:([\w/+.-]+);base64,(.*)$/s.exec(s.dataUrl || "");
     if (!m) throw new SnapshotError("snapshot must be a base64 data URL");
+    if ((m[2]?.length ?? 0) * 0.75 > MAX_BYTES2) throw new SnapshotError("snapshot too large (max 25 MB)");
     const buf = Buffer.from(m[2] ?? "", "base64");
     if (buf.length === 0) throw new SnapshotError("empty snapshot");
-    if (buf.length > MAX_BYTES2) throw new SnapshotError("snapshot too large (max 10 MB)");
+    if (buf.length > MAX_BYTES2) throw new SnapshotError("snapshot too large (max 25 MB)");
     const ext = sniffExt(buf);
-    if (!ext) throw new SnapshotError("snapshot must be PNG, JPEG, or WebP");
+    if (!ext) throw new SnapshotError("snapshot must be PNG, JPEG, WebP, or PDF");
     return { buf, ext };
   });
 }
@@ -54104,49 +54152,15 @@ function appDirPath(id) {
 function appInstalled(id) {
   return APP_ID3.test(id) && (0, import_node_fs16.existsSync)(appDirPath(id));
 }
-function findSource(dir) {
-  const files = (0, import_node_fs16.readdirSync)(dir);
-  const hit = files.find((f) => f.toLowerCase().endsWith(".app")) ?? files.find((f) => f.toLowerCase().endsWith(".flo"));
-  return hit ? (0, import_node_path14.join)(dir, hit) : null;
-}
-function rewriteAppId(text, newId) {
-  const re = /^(app:[ \t]*)(["']?)([^"'#\r\n]+?)\2([ \t]*(?:#[^\r\n]*)?)$/m;
-  if (!re.test(text)) throw new AppLifecycleError("source has no top-level app: field", 422);
-  return text.replace(re, (_m, pre, quote, _id, trail) => `${pre}${quote}${newId}${quote}${trail}`);
-}
-function isExposedAsAgent(dir) {
-  const src = findSource(dir);
-  return src ? /^exposes-as-agent:[ \t]*true\b/m.test((0, import_node_fs16.readFileSync)(src, "utf8")) : false;
-}
 function logCascade(what, e) {
   console.error(`[app-lifecycle] cascade step failed (${what}):`, e instanceof Error ? e.message : e);
 }
-function removeLocks(dir) {
-  for (const f of (0, import_node_fs16.readdirSync)(dir)) {
-    const lower = f.toLowerCase();
-    if (lower.endsWith(".lock") || lower === "lockfile.yaml") {
-      try {
-        (0, import_node_fs16.unlinkSync)((0, import_node_path14.join)(dir, f));
-      } catch {
-      }
-    }
-  }
-}
-function restampSource(dir, newId) {
-  const src = findSource(dir);
-  if (!src) throw new AppLifecycleError("app has no source file", 422);
-  const text = rewriteAppId((0, import_node_fs16.readFileSync)(src, "utf8"), newId);
-  const ext = src.toLowerCase().endsWith(".flo") ? ".flo" : ".app";
-  const newSrc = (0, import_node_path14.join)(dir, `${newId}${ext}`);
-  (0, import_node_fs16.writeFileSync)(newSrc, text);
-  if (src !== newSrc) {
-    try {
-      (0, import_node_fs16.unlinkSync)(src);
-    } catch {
-    }
-  }
-  removeLocks(dir);
-  return newSrc;
+function mapAwareError(e) {
+  const code = e instanceof AwareError ? e.detail?.code : void 0;
+  if (code === 8) throw new AppLifecycleError("a workflow with that name already exists", 409);
+  if (code === 7) throw new AppLifecycleError("workflow not found", 404);
+  if (code === 3) throw new AppLifecycleError(e instanceof Error ? e.message : "invalid name", 400);
+  throw e;
 }
 function assertNewId(newId) {
   if (!newId || !APP_ID3.test(newId) || !safeSegment(newId)) {
@@ -54154,39 +54168,16 @@ function assertNewId(newId) {
   }
 }
 var defaultDeps2 = {
-  compile: (p) => aware.compile(p),
+  rename: (oldId, newId) => aware.rename(oldId, newId),
+  duplicate: (srcId, newId) => aware.duplicate(srcId, newId),
   uninstall: (id) => aware.uninstall(id)
 };
-async function tryCompile(deps, sourcePath) {
-  try {
-    await deps.compile(sourcePath);
-    return true;
-  } catch {
-    return false;
-  }
-}
 async function renameApp(oldId, newId, deps = defaultDeps2) {
   if (!appInstalled(oldId)) throw new AppLifecycleError(`workflow not found: ${oldId}`, 404);
   assertNewId(newId);
   if (newId === oldId) throw new AppLifecycleError("that is already its name", 400);
   if (appInstalled(newId)) throw new AppLifecycleError(`a workflow named "${newId}" already exists`, 409);
-  if (isExposedAsAgent(appDirPath(oldId))) {
-    throw new AppLifecycleError("this workflow is baked into an agent \u2014 rename isn\u2019t supported yet (the agent wouldn\u2019t follow). Un-bake it first, or rename it from the terminal.", 409);
-  }
-  const oldDir = appDirPath(oldId);
-  const newDir = appDirPath(newId);
-  (0, import_node_fs16.renameSync)(oldDir, newDir);
-  let newSrc;
-  try {
-    newSrc = restampSource(newDir, newId);
-  } catch (e) {
-    try {
-      (0, import_node_fs16.renameSync)(newDir, oldDir);
-    } catch {
-    }
-    throw e;
-  }
-  const compiled = await tryCompile(deps, newSrc);
+  const { compiled } = await deps.rename(oldId, newId).catch(mapAwareError);
   try {
     renameVisualInputs(oldId, newId);
   } catch (e) {
@@ -54203,27 +54194,7 @@ async function duplicateApp(srcId, newId, deps = defaultDeps2) {
   if (!appInstalled(srcId)) throw new AppLifecycleError(`workflow not found: ${srcId}`, 404);
   assertNewId(newId);
   if (appInstalled(newId)) throw new AppLifecycleError(`a workflow named "${newId}" already exists`, 409);
-  if (isExposedAsAgent(appDirPath(srcId))) {
-    throw new AppLifecycleError("this workflow is baked into an agent \u2014 duplicate isn\u2019t supported yet (the copy\u2019s agent wouldn\u2019t be installed). Un-bake it first, or copy it from the terminal.", 409);
-  }
-  const newDir = appDirPath(newId);
-  try {
-    (0, import_node_fs16.mkdirSync)(newDir);
-  } catch {
-    throw new AppLifecycleError(`a workflow named "${newId}" already exists`, 409);
-  }
-  let newSrc;
-  try {
-    (0, import_node_fs16.cpSync)(appDirPath(srcId), newDir, { recursive: true });
-    newSrc = restampSource(newDir, newId);
-  } catch (e) {
-    try {
-      (0, import_node_fs16.rmSync)(newDir, { recursive: true, force: true });
-    } catch {
-    }
-    throw e;
-  }
-  const compiled = await tryCompile(deps, newSrc);
+  const { compiled } = await deps.duplicate(srcId, newId).catch(mapAwareError);
   try {
     copyVisualInputs(srcId, newId);
   } catch (e) {
@@ -54233,7 +54204,7 @@ async function duplicateApp(srcId, newId, deps = defaultDeps2) {
 }
 async function deleteApp(id, deps = defaultDeps2) {
   if (!appInstalled(id)) throw new AppLifecycleError(`workflow not found: ${id}`, 404);
-  await deps.uninstall(id);
+  await deps.uninstall(id).catch(mapAwareError);
   try {
     deleteVisualInputs(id);
   } catch (e) {
@@ -55328,6 +55299,8 @@ var PRODUCT_SKILLS = [
   //  file a diagnosed bug/idea/question to the private log via the floless.io relay
   "floless-app-routines",
   //      author event-driven ("on trigger") routines
+  "floless-app-steel-from-drawings",
+  // read a steel drawing into an interactive 3D model (bake the viewer-3d scene)
   "floless-app-ui",
   //            compose Custom Panels (~/.floless/ui/extensions.json) for the Dashboard
   "floless-app-workflows"
@@ -57273,7 +57246,7 @@ async function startServer() {
     }
   });
   await app.register(import_static.default, { root: WEB_ROOT, prefix: "/" });
-  const MIN_AWARE = "0.51.0";
+  const MIN_AWARE = "0.69.0";
   const isWin3 = process.platform === "win32";
   const has = (cmd) => {
     try {
@@ -57499,7 +57472,7 @@ async function startServer() {
   onSeatLost((reason) => broadcast({ type: "seat-taken", reason }));
   app.get("/api/apps", async () => {
     const apps = await aware.list();
-    return { ok: true, apps: apps.map((a) => ({ ...a, provider: appProvider(a.id) })) };
+    return { ok: true, apps: apps.map((a) => ({ ...a, provider: appProvider(a.id), baked: appBaked(a.id) })) };
   });
   app.get("/api/agents", async () => {
     const agents = await aware.agentList();
@@ -57985,7 +57958,7 @@ async function startServer() {
     const p = Number.isInteger(n) ? snapshotPathFor(req.params.id, n) : null;
     if (!p || !(0, import_node_fs23.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
     const ext = p.split(".").pop().toLowerCase();
-    reply.header("Content-Type", ext === "png" ? "image/png" : ext === "webp" ? "image/webp" : "image/jpeg");
+    reply.header("Content-Type", ext === "png" ? "image/png" : ext === "webp" ? "image/webp" : ext === "pdf" ? "application/pdf" : "image/jpeg");
     reply.header("Cache-Control", "no-store");
     return (0, import_node_fs23.readFileSync)(p);
   });

package/dist/skills/floless-app-steel-from-drawings/SKILL.md

@@ -0,0 +1,109 @@
+---
+name: floless-app-steel-from-drawings
+description: This skill should be used to turn a structural steel drawing into an interactive 3D model in floless.app — the "Steel from Drawings" reader. Triggers on a pending floless `rebake` request for the `steel-from-drawings` app (queued from its "Re-read & re-bake ▸" button), or asks like "read this framing plan into 3D", "turn this steel drawing into a model", "bake my drawing into steel-from-drawings". It teaches the host AI to READ a steel drawing (PDF/image) with its own vision, extract a schematic 3D scene (grids, members, sizes, takeoff) in the viewer-3d scene schema, bake it INLINE into the app's `view` node, recompile, and ask the user to approve — all at COMPOSE time (no model in the run path, no API key). Also bakes the same scene into the `steel-to-ifc` companion so the model exports to a universal IFC file (open in Tekla, SDS2, Revit, Navisworks). Triggers also on "export this to IFC", "bake to Tekla/SDS2/Revit".
+metadata:
+  version: 0.1.0
+---
+
+# Steel from Drawings — read a steel drawing into an interactive 3D model
+
+## What this is
+
+`steel-from-drawings` is a FloLess app that renders an interactive, **licence-free 3D model** of a
+steel frame (the `viewer-3d` agent) from a scene that **you, the terminal AI, bake from a drawing**.
+The drawing is read **at compose time** with your own vision — there is **no model in the run path
+and no AI API key**: the brain is you, in the terminal (the FloLess thin-UI contract). This is the
+**bake** strategy (`floless-app-rebake` is the generic version; this skill is the steel-specific one,
+and **for `steel-from-drawings` it supersedes the generic re-bake** — you bake the scene INLINE into
+the `.flo`'s `view` node, not into `config.yaml`).
+
+**Bake-out companion (`steel-to-ifc`).** A sibling app writes the SAME scene to a universal **IFC**
+file (IfcColumn/IfcBeam on the real grid) — open it in Tekla, SDS2, Revit or Navisworks; no Tekla
+needed to export. When you bake a scene, bake the *identical* scene into `steel-to-ifc` too (loop
+step 6) so the IFC matches the 3D the user confirmed. The whole loop: **read the drawing → see it in
+3D (`steel-from-drawings`) → bake it out to IFC (`steel-to-ifc`) → finish in your detailing tool.**
+
+> **Pasted a request?** If the user pastes a message beginning with a `[floless-request type=rebake
+> id=…]` marker, that's a request copied from the FloLess Dashboard — resolve it via
+> `GET /api/requests` (match the id), don't run the pasted line verbatim, and `DELETE` it when done.
+
+## The loop
+
+1. **Find the drawing.** From a `rebake` request: `GET http://localhost:<port>/api/requests` → the
+   entry with `type:"rebake"` and `appId:"steel-from-drawings"` carries `snapshots: ["<abs path>"]`.
+   (Or the user just attaches/points at a drawing in prose — same procedure, skip the lookup.)
+2. **Read the drawing with your own vision.** Open the file (PDF or image) and READ it. If it's a
+   large multi-sheet PDF, focus on one framing plan / GA sheet (say which). This is the compose-time
+   extraction — your vision is the reader, not any API.
+3. **Extract a schematic 3D scene** in the schema below (§ Scene schema), following § Reading a steel
+   drawing. Aim for a complete, plausible stick model — the user confirms/nudges it in 3D.
+4. **Bake it INLINE into the app.** Replace the entire `scene:` mapping under the `view` node's
+   `config:` in the app's `.flo` with your extracted scene — in BOTH the installed copy
+   `~/.aware/apps/steel-from-drawings/steel-from-drawings.flo` AND the editable
+   `demos/steel-from-drawings/steel-from-drawings.flo` if present. Change ONLY the `scene:` block;
+   leave `inputs`, `requires`, the node id/agent/command, and everything else identical.
+5. **Recompile.** `aware app compile ~/.aware/apps/steel-from-drawings` → rewrites the `.lock`. The
+   source-hash changes, so FloLess's Run gate disarms until the user approves. Copy the fresh `.lock`
+   to `demos/steel-from-drawings/` if you keep the editable copy in sync.
+6. **Bake the SAME scene into `steel-to-ifc` (the IFC bake-out), if it's installed.** Check
+   `~/.aware/apps/steel-to-ifc/`. If present, replace the `scene:` mapping under that app's `bake-ifc`
+   node `config.args` with the IDENTICAL scene (the installed copy and `demos/steel-to-ifc/` if
+   present), then `aware app compile ~/.aware/apps/steel-to-ifc`. This keeps the exported IFC matching
+   the 3D the user confirmed. (`steel-to-ifc` writes a real IFC file — IfcColumn/IfcBeam on the grid —
+   openable in Tekla, SDS2, Revit or Navisworks; it never touches a Tekla model, so no Tekla needed.)
+7. **Hand the approval to the user.** Tell them what you read (e.g. "read 6 columns + 8 beams on grids
+   A–C / 1–2, heights assumed 4.5 m — review in Inspect → Code, then Compile/Approve, then ▶ Run to
+   see the 3D; run **steel-to-ifc** to export the IFC"). The human eyeballing the read in 3D **is the
+   safety gate**. Never auto-run.
+8. **Clear the request.** `DELETE http://localhost:<port>/api/requests/<id>` once done (if from one).
+
+## Scene schema (the bake target — exactly what `viewer-3d` renders)
+
+```yaml
+scene:
+  meta: { name: "<sheet title / drawing no.>", units: mm, up: z }
+  groups:                       # one per group you use; drives legend + colour
+    - { key: column, label: Columns, color: "#60a5fa" }
+    - { key: beam,   label: Beams,   color: "#94a3b8" }
+    # rafter #38bdf8, brace #818cf8 — add others as needed
+  elements:                     # one per member, kind: box (a from→to bar)
+    - { id: COL-A1, group: column, kind: box, from: [x,y,z], to: [x,y,z],
+        section: { w: 150, d: 150 }, meta: { profile: "HSS6x6x3/8", mark: "C1", grid: "A-1" } }
+  grids:                        # grid labels placed just outside the framing
+    - { label: A, at: [x,y,0] }
+  panels:                       # generic side tables; build a Takeoff
+    - title: Takeoff
+      note: "<assumptions, e.g. heights assumed — plan view, H=4.5 m>"
+      columns: [Section, "No.", Length]
+      rows: [["HSS6x6x3/8", 6, "27.0 m"]]
+```
+
+`from`/`to` are `[x,y,z]` in mm. `meta` is free-form (shown in the click-to-inspect panel) — put
+`profile`, `mark`, `grid` there. `section.w`/`d` are visual thickness only.
+
+## Reading a steel drawing (the method)
+
+1. **Grid.** Find the grid (A,B,C… one way, 1,2,3… the other, plus half-grids). Read the dimension
+   strings to place grids in mm; if a spacing is unreadable, assume a regular ~6000 mm bay and say so.
+2. **Sheet type & heights.** A PLAN view (top-down) shows no heights — pick one eave/storey height H
+   (a level/height note if present, else ~4500 mm) and note it; columns run z:0→H, beams/rafters sit
+   at z:H. An ELEVATION/SECTION gives real heights — read them.
+3. **Members.** One `elements` entry per member, size label exactly as drawn. Columns → `column`,
+   `from:[gx,gy,0] to:[gx,gy,H]`. Beams/rafters → `beam`/`rafter`, along the grid at z:H. Braces →
+   `brace`, the diagonal. Put the size in `meta.profile`, the mark in `meta.mark`, the grid ref in
+   `meta.grid`; approximate `section.w`/`d` from the profile (W12≈300×310, HSS6x6≈150×150, L≈90×90).
+4. **Takeoff.** One row per distinct profile (count + total length in m). Assumptions in the note.
+5. **meta.name** = the sheet title / drawing number. Never invent grids or members the drawing does
+   not show; if a sheet has no readable steel framing, bake an empty `elements` with a note saying so.
+
+## Guardrails
+
+- **Compose-time only.** The drawing is read HERE, by you, then baked. Never add a runtime node that
+  reads the drawing — `aware app validate` rejects it and it breaks determinism.
+- **Scene, not logic.** Re-bake only the `view.scene` block. A different output (new columns, a
+  schedule) is a workflow change — use `floless-app-workflows`, not this.
+- **Schematic + honest.** ~90% is the goal; the user tidies the last 10% in 3D. State your
+  assumptions (heights, assumed bays) in the takeoff note. Don't fabricate sizes the drawing lacks.
+- **Thin-UI contract.** The browser only recorded intent + the drawing; the brain is you, in the
+  terminal. The UI never reads the drawing and never bakes.
+- **Resolve the port** from the running floless.app the same way the other floless-app skills do.

package/dist/web/app.css

@@ -2476,6 +2476,7 @@ body {
   .req-thumbs { display: flex; flex-wrap: wrap; gap: 5px; margin-top: 6px; }
   .req-thumb { width: 46px; height: 46px; padding: 0; border: 1px solid var(--border-strong); border-radius: 4px; background: var(--bg); overflow: hidden; cursor: pointer; flex-shrink: 0; transition: border-color 0.15s; }
   .req-thumb img { width: 100%; height: 100%; object-fit: cover; display: block; }
+  .req-thumb-pdf { display: grid; place-items: center; width: 100%; height: 100%; font-size: 11px; font-weight: 700; letter-spacing: 0.04em; color: var(--text-dim); }
   .req-thumb:hover { border-color: var(--accent-dim); }
 
   /* ============================================================================

package/dist/web/aware.js

@@ -583,7 +583,7 @@
         // <button>s without nesting interactive elements (#85). Selection stays driven by
         // the delegated $wfList click + comboMove highlight (aria-activedescendant).
         const aid = escapeAttr(a.id);
-        html += `<div class="wf-option" role="option" id="wf-opt-${aid}" data-id="${aid}" data-search="${escapeAttr((a.id + ' ' + p).toLowerCase())}" tabindex="-1" aria-selected="false">`
+        html += `<div class="wf-option" role="option" id="wf-opt-${aid}" data-id="${aid}" data-baked="${a.baked ? '1' : ''}" data-search="${escapeAttr((a.id + ' ' + p).toLowerCase())}" tabindex="-1" aria-selected="false">`
           + `<span class="wf-option-name">${escapeHtml(a.id)}</span><span class="wf-option-meta">${meta}</span>`
           + `<span class="wf-option-actions">`
           + `<button type="button" class="wf-act act-edit" data-wf-act="rename" data-id="${aid}" tabindex="-1" data-tip="Rename" aria-label="Rename ${aid}">✎</button>`
@@ -709,7 +709,7 @@
       const act = e.target.closest('[data-wf-act]');
       if (act) {
         const id = act.dataset.id;
-        if (act.dataset.wfAct === 'rename') openRenameWorkflow(id);
+        if (act.dataset.wfAct === 'rename') openRenameWorkflow(id, act.closest('.wf-option')?.dataset.baked === '1');
         else if (act.dataset.wfAct === 'duplicate') openDuplicateWorkflow(id);
         else if (act.dataset.wfAct === 'delete') confirmDeleteWorkflow(id);
         return;
@@ -738,11 +738,17 @@
     appInputValues.delete(id); dirtyBaseline.delete(id); apps.delete(id);
   }
 
-  async function openRenameWorkflow(oldId) {
+  async function openRenameWorkflow(oldId, baked = false) {
     closeCombo(false);
+    // A baked workflow is a reusable agent; renaming it also renames that agent, so any
+    // OTHER workflow that uses it as a node will reference the old name and need updating.
+    // Warn (informed consent) — not a blocker; the user may be renaming an unreferenced
+    // one (#226 UX review).
+    const sub = 'This is the name you pick here, and what .flo files and your terminal AI use to refer to it.'
+      + (baked ? ' Renaming a baked workflow also renames its synthesized agent — other workflows that use it as a node will need updating.' : '');
     const res = await formModal({
       title: 'Rename workflow',
-      sub: 'This is the name you pick here, and what .flo files and your terminal AI use to refer to it.',
+      sub,
       fields: [{ name: 'name', label: 'New name', type: 'text', value: oldId, placeholder: 'e.g. tekla-bom-by-phase' }],
       okLabel: 'Rename',
     });
@@ -974,8 +980,8 @@
     const name = app.rebakeInput;
     const res = await formModal({
       title: `Re-read & re-bake · ${app.displayName}`,
-      sub: 'Swap the source drawing. Your terminal AI will re-read it, re-bake the values into config, then ask you to approve.',
-      fields: [{ name, label: `${name} — new source drawing`, type: 'file', accept: ['png', 'jpg', 'webp'] }],
+      sub: 'Attach the new drawing (PDF or image). Your terminal AI re-reads it and updates this workflow, then asks you to approve — nothing changes until you do.',
+      fields: [{ name, label: `${name} — new source drawing`, type: 'file', accept: ['pdf', 'png', 'jpg', 'webp'] }],
       okLabel: 'Queue re-bake',
     });
     if (!res) return;
@@ -989,8 +995,8 @@
       });
       const out = await r.json().catch(() => ({ ok: false, error: `re-bake failed (${r.status})` }));
       if (!out || !out.ok) { showToast((out && out.error) || 'could not queue re-bake', 'err'); return; }
-      showToast('Queued — your terminal AI will re-read & re-bake, then ask you to approve.', 'ok');
-      appendNarration(`<strong>Re-bake queued</strong> for <strong>${escapeHtml(name)}</strong>. Your terminal AI will re-read the drawing, re-bake the config literals, and ask you to approve the new lock.`);
+      showToast('Queued — your terminal AI will re-read it and update this workflow, then ask you to approve.', 'ok');
+      appendNarration(`<strong>Re-bake queued</strong> for <strong>${escapeHtml(name)}</strong>. Your terminal AI will re-read the drawing, update this workflow, and ask you to approve the new lock.`);
     } catch { showToast('could not queue re-bake', 'err'); }
   }
 
@@ -1648,6 +1654,8 @@
       $body.onpaste = (e) => {
         const items = Array.from((e.clipboardData && e.clipboardData.items) || []);
         const imgs = items.filter((it) => it.kind === 'file' && it.type.startsWith('image/'));
+        // The single-file field also accepts PDFs (steel drawings) — paste, not just click.
+        const fileItems = items.filter((it) => it.kind === 'file' && (it.type.startsWith('image/') || it.type === 'application/pdf'));
         const box = $body.querySelector('.fm-images');
         if (box) {
           if (!imgs.length) return;
@@ -1667,10 +1675,10 @@
           return;
         }
         const fileBox = $body.querySelector('.fm-file');
-        if (!fileBox || !imgs.length) return;
+        if (!fileBox || !fileItems.length) return;
         e.preventDefault();
         const entry = fileStates.get(fileBox.dataset.fmFileBox);
-        const file = imgs[0].getAsFile();
+        const file = fileItems[0].getAsFile();
         if (entry && file) entry.setFile(file);
       };
       const collect = () => {
@@ -3616,7 +3624,7 @@
           <div class="req-info">
             <div class="req-head"><span class="${badgeCls}">${label}</span> ${r.appId ? `<code>${escapeHtml(r.appId)}</code>` : ''}${target}${time}</div>
             <div class="req-instruction">${escapeHtml(instructionFor(r))}</div>
-            ${r.snapshots && r.snapshots.length ? `<div class="req-thumbs">${r.snapshots.map((_, i) => `<button type="button" class="req-thumb" data-id="${escapeAttr(r.id)}" data-n="${i}" aria-label="View screenshot ${i + 1}"><img src="/api/requests/${encodeURIComponent(r.id)}/snapshot/${i}" alt=""></button>`).join('')}</div>` : ''}
+            ${r.snapshots && r.snapshots.length ? `<div class="req-thumbs">${r.snapshots.map((sp, i) => { const pdf = /\.pdf$/i.test(String(sp)); return `<button type="button" class="req-thumb" data-id="${escapeAttr(r.id)}" data-n="${i}" aria-label="View ${pdf ? 'PDF' : 'screenshot'} ${i + 1}">${pdf ? '<span class="req-thumb-pdf">PDF</span>' : `<img src="/api/requests/${encodeURIComponent(r.id)}/snapshot/${i}" alt="">`}</button>`; }).join('')}</div>` : ''}
           </div>
           <div class="req-actions">
             <button class="req-copy" data-id="${escapeAttr(r.id)}" data-tip="Copy this instruction">⧉</button>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floless/app",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "type": "module",
   "description": "Thin localhost host for floless.app — serves web/ and shells the aware CLI. No engine, no LLM.",
   "bin": {