@floless/app 0.25.1 → 0.26.0

package/dist/floless-server.cjs

@@ -52777,7 +52777,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.25.1" : void 0,
+    define: true ? "0.26.0" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -52787,7 +52787,7 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.25.1" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.26.0" : void 0 });
 }
 
 // oauth-presets.ts
@@ -54211,6 +54211,14 @@ async function runRoutine(id) {
         runId: res.runId ?? void 0,
         durationMs: Date.now() - startedAt.getTime()
       });
+      try {
+        const report = withBadge(extractReportHtml(events, r.workflow));
+        if (report?.html) {
+          broadcast({ type: "routine-report", id: r.id, workflow: r.workflow, nodeId: report.nodeId, html: report.html });
+        }
+      } catch (err) {
+        console.warn(`[floless] routine "${r.id}" report surfacing failed (run still recorded ${outcome.status}):`, err instanceof Error ? err.message : err);
+      }
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       recordRun(r, {
@@ -57665,11 +57673,29 @@ async function startServer() {
       throw err;
     }
   });
+  const installingAgents = /* @__PURE__ */ new Set();
+  let installQueue = Promise.resolve();
   app.post("/api/agents/install", async (req, reply) => {
     const id = req.body?.id;
     if (!id || typeof id !== "string") return reply.status(400).send({ ok: false, error: "id is required" });
-    const result = await aware.ensureAgentInstalled(id);
-    return { ok: true, id: result.installed ?? id };
+    if (installingAgents.has(id)) return reply.status(202).send({ ok: true, started: true });
+    installingAgents.add(id);
+    installQueue = installQueue.then(async () => {
+      let result;
+      try {
+        const res = await aware.ensureAgentInstalled(id);
+        result = { type: "agent-install-result", id, ok: true, installed: res.installed ?? id };
+      } catch (err) {
+        result = { type: "agent-install-result", id, ok: false, error: err instanceof Error ? err.message : String(err) };
+      } finally {
+        installingAgents.delete(id);
+      }
+      try {
+        broadcast(result);
+      } catch {
+      }
+    });
+    return reply.status(202).send({ ok: true, started: true });
   });
   app.get("/api/integrations", async () => {
     let integrations = listIntegrations();

package/dist/web/app.css

@@ -344,6 +344,12 @@
     overflow: hidden;
     min-width: 0;
     position: relative;
+    /* The whole canvas is a pannable infinite surface (drag the background / middle-mouse),
+       so the grab affordance covers the entire grid-area — not just .topology, which is
+       sized around the node cards and left distant background areas as a plain arrow (#115).
+       Interactive controls (toolbar buttons, template chips, find input, node cards) carry
+       their own cursor, so grab never reads as draggable over a clickable target. */
+    cursor: grab;
   }
   /* While middle-mouse panning, force the grab cursor over the whole canvas. */
   .canvas.panning, .canvas.panning * { cursor: grabbing !important; }
@@ -378,9 +384,9 @@
        overflow:visible also means no scrollbar — drag the background / middle-mouse
        to pan, zoom, or Fit this infinite canvas. */
     overflow: visible;
-    cursor: grab;
   }
-  /* (the grabbing cursor during a pan is already forced by `.canvas.panning *` above) */
+  /* The grab cursor lives on the parent `.canvas` (covers the full surface, #115); the
+     grabbing cursor during a pan is forced by `.canvas.panning *` above. */
 
   /* Canvas chrome (top label, bottom hint + Templates bar) paints ABOVE the
      transform-panned topology with an OPAQUE background, so dragging the canvas
@@ -2864,6 +2870,9 @@ body {
 .canvas.view-dashboard .fav-bar,
 .canvas.view-dashboard .notes-strip,
 .canvas.view-dashboard .find-overlay { display: none; }
+/* In dashboard view the pannable topology is hidden, so the canvas isn't a drag surface —
+   drop the grab affordance the .canvas rule sets for the normal view (#115 follow-up). */
+.canvas.view-dashboard { cursor: default; }
 .dashboard { flex: 1; min-height: 0; overflow-y: auto; padding: 18px 24px 24px; }
 .dashboard[hidden] { display: none; }
 

package/dist/web/app.js

@@ -1422,11 +1422,15 @@ $canvasEl.addEventListener('mousedown', (e) => {
   startPan(e);
 });
 // Left-drag the empty canvas background also pans — so the infinite, scrollbar-less
-// canvas is navigable with any pointer (trackpads have no middle button). Excludes
-// node cards (those keep click-to-select + their HTML5 drag); the toolbar/hint/
-// fav-bar/find aren't inside .topology, so they're naturally excluded.
-$topology.addEventListener('mousedown', (e) => {
-  if (e.button !== 0 || e.target.closest('.agent-card')) return;
+// canvas is navigable with any pointer (trackpads have no middle button). On the full
+// `.canvas` (not just `.topology`) so panning reaches every background area, matching the
+// middle-mouse handler above (#115). Bail on interactive chrome so clicks/drags there still
+// work: node cards (their own select + HTML5 drag), the zoom toolbar, the Templates
+// fav-bar, and the find input. Non-interactive chrome (panel label, hint, notes) still pans.
+// `.dashboard` (the custom-panels view that replaces the topology) is excluded too — it has
+// its own scroll/click surface and the topology it would pan is hidden in that view.
+$canvasEl.addEventListener('mousedown', (e) => {
+  if (e.button !== 0 || e.target.closest('.agent-card, .canvas-toolbar, .fav-bar, .find-overlay, .dashboard')) return;
   e.preventDefault();
   startPan(e);
 });

package/dist/web/aware.js

@@ -1240,6 +1240,9 @@
       const ovStop = document.querySelector('.overlay-stop');
       if (ovStop) { ovStop.disabled = true; ovStop.textContent = 'Stopping…'; }
       try { await api(`/api/trigger-run/${encodeURIComponent(ft.appId)}/stop`, { method: 'POST' }); } catch { /* best effort — the session may already be gone */ }
+      // Clear the canvas "running" pulse just like the regular-run stop below — the
+      // early return here previously skipped it, leaving nodes stuck on `running` (#116).
+      clearNodeStatus();
       // A deliberate stop needs no toast — the subtitle change is the confirmation.
       paintForegroundStopped('stopped');
       syncRunControls();
@@ -3292,6 +3295,23 @@
         loadAgentCatalog().then(() => {
           if ($libModal && $libModal.classList.contains('show')) renderLibrary();
         }).catch(() => {});
+      } else if (m.type === 'agent-install-result') {
+        // A background `aware agent install` (from the Available tab) finished. Clear
+        // its in-flight state, then on success refresh so it drops out of Available and
+        // appears under Installed; on failure restore its Install button + surface why.
+        installingIds.delete(m.id);
+        if (m.ok) {
+          const a = availableCatalog.find((x) => x.id === m.id);
+          showToast(`Installed “${a && a.display_name ? a.display_name : m.id}” — find it in Installed`, 'ok');
+          loadAgentCatalog().then(() => {
+            if (!($libModal && $libModal.classList.contains('show'))) return;
+            renderAvailable();
+            if (libTab === 'installed') renderLibrary();
+          }).catch(() => {});
+        } else {
+          showToast(`Install failed: ${String(m.error || '').slice(0, 80)}`, 'err');
+          if ($libModal && $libModal.classList.contains('show')) renderAvailable();
+        }
       } else if (m.type === 'request-added' || m.type === 'requests-changed') {
         loadRequests();
         if (window.flolessPanels) window.flolessPanels.refreshPending(); // composer's "queued" line
@@ -3319,6 +3339,8 @@
         else applyTriggerSnapshot(m.id, m.snapshot);
       } else if (m.type === 'trigger-report') {
         applyTriggerReport(m);
+      } else if (m.type === 'routine-report') {
+        applyRoutineReport(m);
       } else if (m.type === 'connect-result') {
         // A run's credential-reconnect card may be waiting on this integration —
         // drive its success/fail state from the same SSE result.
@@ -3489,7 +3511,7 @@
     if (!tpls.length) { $favChipRow.innerHTML = ''; $favBarEmpty.style.display = 'block'; return; }
     $favBarEmpty.style.display = 'none';
     $favChipRow.innerHTML = tpls.map((t) => `
-      <div class="fav-chip" data-tpl="${escapeAttr(t.id)}" data-tip="Click to use · ✎ rename · ${escapeAttr(t.category)} · ${escapeAttr((t.node.agent || t.node.kind) + (t.node.command ? '/' + t.node.command : ''))}">
+      <div class="fav-chip" data-tpl="${escapeAttr(t.id)}" data-tip="Click to use · ${escapeAttr(t.category)} · ${escapeAttr((t.node.agent || t.node.kind) + (t.node.command ? '/' + t.node.command : ''))}">
         <span class="cat">${escapeHtml(t.category)}</span>
         <span class="name">${escapeHtml(t.name)}</span>
         <span class="edit" data-tip="Rename / recategorize" aria-label="Edit template">✎</span>
@@ -3796,6 +3818,7 @@
   let availableLoading = false;     // a fetch is in flight (prevents a double-fetch race)
   let availableUnsupported = false; // CLI too old to know `agent catalog`
   let libTab = 'installed';
+  const installingIds = new Set(); // ids with an install in flight (server runs it async)
 
   async function loadAvailableAgents() {
     const { agents, unsupported } = await api('/api/agents/available');
@@ -3817,6 +3840,11 @@
     // renders "undefined command". (Numbers, so no escaping needed.)
     const cmds = Number(a.commands) || 0;
     const skills = Number(a.skills) || 0;
+    // The install runs server-side and can take a minute; the button persists its
+    // "Installing…" state across re-renders (search/tab-switch) via installingIds.
+    const installBtn = installingIds.has(a.id)
+      ? `<button class="lib-install" aria-busy="true" aria-label="Installing ${escapeAttr(a.display_name || a.id)}…" data-tip="Downloading from the registry — this can take a minute"><span class="rtn-spinner"></span></button>`
+      : `<button class="lib-install" data-install="${escapeAttr(a.id)}" aria-label="Install ${escapeAttr(a.display_name || a.id)}">Install</button>`;
     return `
       <div class="lib-card" data-agent="${escapeAttr(a.id)}">
         <div class="lib-item">
@@ -3825,7 +3853,7 @@
             <div class="meta">${cmds} command${cmds === 1 ? '' : 's'} · ${skills} skill${skills === 1 ? '' : 's'}</div>
             ${blurb}
           </div>
-          <button class="lib-install" data-install="${escapeAttr(a.id)}" aria-label="Install ${escapeAttr(a.display_name || a.id)}">Install</button>
+          ${installBtn}
         </div>
       </div>`;
   }
@@ -3896,29 +3924,28 @@
     });
   }
 
-  async function installAgent(id, btn) {
-    const label = btn.getAttribute('aria-label') || `Install ${id}`;
+  // Kick off an install. The server runs `aware agent install` asynchronously (it can
+  // take a minute — it downloads from the registry) and reports completion over SSE
+  // (`agent-install-result`), so we DON'T await it here — that's what made the button
+  // look hung. We flip the card to "Installing…" and let the SSE handler finish it.
+  function installAgent(id, btn) {
+    if (installingIds.has(id)) return; // already in flight (server dedupes too)
+    installingIds.add(id);
     const a = availableCatalog.find((x) => x.id === id);
-    btn.setAttribute('aria-busy', 'true');
-    btn.setAttribute('aria-label', label.replace(/^Install/, 'Installing') + '…');
-    btn.innerHTML = '<span class="rtn-spinner"></span>';
-    try {
-      await api('/api/agents/install', { method: 'POST', body: JSON.stringify({ id }) });
-    } catch (e) {
-      btn.removeAttribute('aria-busy');
-      btn.setAttribute('aria-label', label);
-      btn.textContent = 'Install';
-      reportErr(e);
-      return;
+    const nice = a && a.display_name ? a.display_name : id;
+    if (btn) { // immediate feedback before the next render
+      btn.setAttribute('aria-busy', 'true');
+      btn.setAttribute('aria-label', `Installing ${nice}…`);
+      btn.removeAttribute('data-install'); // a stray re-wire can't re-trigger it
+      btn.innerHTML = '<span class="rtn-spinner"></span>';
     }
-    // Installed now — signal success BEFORE the catalog refresh so a transient refresh
-    // failure can't swallow the confirmation of an install that already succeeded.
-    showToast(`Installed “${a && a.display_name ? a.display_name : id}” — find it in Installed`, 'ok');
-    // Refresh the Installed catalog (footer count + Installed tab) best-effort, then
-    // re-render Available so the now-installed agent drops out (= not-yet-installed).
-    try { await loadAgentCatalog(); } catch (e) { console.warn('post-install catalog refresh failed', e); }
-    renderAvailable();
-    if (libTab === 'installed') renderLibrary();
+    showToast(`Installing “${nice}” — this can take a minute or two`, 'info');
+    api('/api/agents/install', { method: 'POST', body: JSON.stringify({ id }) })
+      .catch((e) => { // the START failed (bad id / server) — completion errors arrive via SSE
+        installingIds.delete(id);
+        if ($libModal && $libModal.classList.contains('show')) renderAvailable();
+        reportErr(e);
+      });
   }
 
   function switchLibTab(tab) {
@@ -4273,6 +4300,32 @@
     pulseReportFrame();
   }
 
+  // A SCHEDULED routine (a timed `aware app run`) produced a report (#113). Mirrors
+  // applyTriggerReport for the timed path: always refresh the cache so "View report" shows
+  // the latest result, and if THIS app's viewer is open, live-repaint it. An unattended
+  // routine (e.g. hourly) shouldn't beep on every tick, so the toast fires ONLY when the
+  // report HTML actually changed (e.g. an exception-monitor flips from "all clear" to
+  // "exception detected"). Never auto-opens the viewer, never hijacks another app's open
+  // viewer, never stomps an in-flight manual run or a live foreground session.
+  function applyRoutineReport(m) {
+    if (!m || !m.workflow || typeof m.html !== 'string') return;
+    const prev = lastReportByApp.get(m.workflow);
+    const changed = !prev || prev.html !== m.html;
+    lastReportByApp.set(m.workflow, { nodeId: m.nodeId || null, label: 'scheduled', html: m.html });
+    const open = $reportModal && $reportModal.classList.contains('show');
+    if (open && currentId === m.workflow && !reportRunning && !foregroundTrigger) {
+      paintReport(m.html); // unhides Share + clears the overlay
+      const t = new Date().toLocaleTimeString();
+      $reportSub.innerHTML =
+        `<span class="live-pip" aria-hidden="true"></span>Scheduled &middot; updated ${escapeHtml(t)} — rendered from the node's output, never composed by the UI.`;
+      pulseReportFrame();
+    }
+    if (changed) {
+      const app = apps.get(m.workflow);
+      showToast(`Report updated — ${app ? app.displayName : m.workflow}`, 'info');
+    }
+  }
+
   // Brief edge-flash on the report stage when a live update lands, so the change
   // is noticeable. Forced reflow re-arms it on rapid repeats. CSS honors
   // prefers-reduced-motion.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floless/app",
-  "version": "0.25.1",
+  "version": "0.26.0",
   "type": "module",
   "description": "Thin localhost host for floless.app — serves web/ and shells the aware CLI. No engine, no LLM.",
   "bin": {