@floless/app 0.25.2 → 0.27.0

package/dist/floless-server.cjs

@@ -51710,8 +51710,11 @@ function parseBuildOutput(stdout) {
 function agentInstallArgv(id) {
   return ["agent", "install", assertId(id)];
 }
+function agentUpdateArgv(id) {
+  return ["agent", "update", assertId(id)];
+}
 function parseAgentInstallOutput(stdout) {
-  const m = stdout.match(/✓\s+installed\s+(\S+)/);
+  const m = stdout.match(/✓\s+(?:installed|updated)\s+(\S+)/);
   return { installed: m?.[1] ?? null };
 }
 function isAgentInstalled(agents, id) {
@@ -52023,6 +52026,18 @@ var aware = {
     if (isAgentInstalled(agents, id)) return { installed: id, output: "already installed" };
     return this.agentInstall(id);
   },
+  /**
+   * Update an installed agent to the latest registry version (`aware agent update
+   * <id>`). Unlike `ensureAgentInstalled`, this always re-pulls — it is the Agent
+   * Library's in-place "Update" action for a card whose installed version trails the
+   * catalog. Like install, the pull fetches a tarball (slow), so use the generous
+   * timeout. The token is NOT involved — only the agent manifest is fetched.
+   */
+  async agentUpdate(id) {
+    const { code, stdout, stderr } = await runRawWithEnv(agentUpdateArgv(id), void 0, 6e5);
+    if (code !== 0) throw new AwareError(`aware agent update ${id} failed (exit ${code})`, { stdout, stderr });
+    return { ...parseAgentInstallOutput(stdout), output: stdout.trim() };
+  },
   /**
    * POST /api/run — installed ID. `run` ignores --json and prints
    * "✓ run complete; trace at <path>"; we parse the path and read the JSONL.
@@ -52777,7 +52792,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.25.2" : void 0,
+    define: true ? "0.27.0" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -52787,7 +52802,7 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.25.2" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.27.0" : void 0 });
 }
 
 // oauth-presets.ts
@@ -54211,6 +54226,14 @@ async function runRoutine(id) {
         runId: res.runId ?? void 0,
         durationMs: Date.now() - startedAt.getTime()
       });
+      try {
+        const report = withBadge(extractReportHtml(events, r.workflow));
+        if (report?.html) {
+          broadcast({ type: "routine-report", id: r.id, workflow: r.workflow, nodeId: report.nodeId, html: report.html });
+        }
+      } catch (err) {
+        console.warn(`[floless] routine "${r.id}" report surfacing failed (run still recorded ${outcome.status}):`, err instanceof Error ? err.message : err);
+      }
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       recordRun(r, {
@@ -57665,28 +57688,38 @@ async function startServer() {
       throw err;
     }
   });
-  const installingAgents = /* @__PURE__ */ new Set();
-  let installQueue = Promise.resolve();
-  app.post("/api/agents/install", async (req, reply) => {
-    const id = req.body?.id;
-    if (!id || typeof id !== "string") return reply.status(400).send({ ok: false, error: "id is required" });
-    if (installingAgents.has(id)) return reply.status(202).send({ ok: true, started: true });
-    installingAgents.add(id);
-    installQueue = installQueue.then(async () => {
+  const agentJobsInFlight = /* @__PURE__ */ new Set();
+  let agentJobQueue = Promise.resolve();
+  function startAgentJob(id, action, run) {
+    agentJobsInFlight.add(id);
+    agentJobQueue = agentJobQueue.then(async () => {
       let result;
       try {
-        const res = await aware.ensureAgentInstalled(id);
-        result = { type: "agent-install-result", id, ok: true, installed: res.installed ?? id };
+        const res = await run();
+        result = { type: "agent-install-result", action, id, ok: true, installed: res.installed ?? id };
       } catch (err) {
-        result = { type: "agent-install-result", id, ok: false, error: err instanceof Error ? err.message : String(err) };
+        result = { type: "agent-install-result", action, id, ok: false, error: err instanceof Error ? err.message : String(err) };
       } finally {
-        installingAgents.delete(id);
+        agentJobsInFlight.delete(id);
       }
       try {
         broadcast(result);
       } catch {
       }
     });
+  }
+  app.post("/api/agents/install", async (req, reply) => {
+    const id = req.body?.id;
+    if (!id || typeof id !== "string") return reply.status(400).send({ ok: false, error: "id is required" });
+    if (agentJobsInFlight.has(id)) return reply.status(202).send({ ok: true, started: true });
+    startAgentJob(id, "install", () => aware.ensureAgentInstalled(id));
+    return reply.status(202).send({ ok: true, started: true });
+  });
+  app.post("/api/agents/update", async (req, reply) => {
+    const id = req.body?.id;
+    if (!id || typeof id !== "string") return reply.status(400).send({ ok: false, error: "id is required" });
+    if (agentJobsInFlight.has(id)) return reply.status(202).send({ ok: true, started: true });
+    startAgentJob(id, "update", () => aware.agentUpdate(id));
     return reply.status(202).send({ ok: true, started: true });
   });
   app.get("/api/integrations", async () => {

package/dist/web/app.css

@@ -344,6 +344,12 @@
     overflow: hidden;
     min-width: 0;
     position: relative;
+    /* The whole canvas is a pannable infinite surface (drag the background / middle-mouse),
+       so the grab affordance covers the entire grid-area — not just .topology, which is
+       sized around the node cards and left distant background areas as a plain arrow (#115).
+       Interactive controls (toolbar buttons, template chips, find input, node cards) carry
+       their own cursor, so grab never reads as draggable over a clickable target. */
+    cursor: grab;
   }
   /* While middle-mouse panning, force the grab cursor over the whole canvas. */
   .canvas.panning, .canvas.panning * { cursor: grabbing !important; }
@@ -378,9 +384,9 @@
        overflow:visible also means no scrollbar — drag the background / middle-mouse
        to pan, zoom, or Fit this infinite canvas. */
     overflow: visible;
-    cursor: grab;
   }
-  /* (the grabbing cursor during a pan is already forced by `.canvas.panning *` above) */
+  /* The grab cursor lives on the parent `.canvas` (covers the full surface, #115); the
+     grabbing cursor during a pan is forced by `.canvas.panning *` above. */
 
   /* Canvas chrome (top label, bottom hint + Templates bar) paints ABOVE the
      transform-panned topology with an OPAQUE background, so dragging the canvas
@@ -1159,6 +1165,17 @@
     text-overflow: ellipsis;
     white-space: nowrap;
   }
+  /* Version as a small dim pill on the meta line — matches the canvas node-card
+     `.ver` token, so the version no longer competes with the agent name (#119). */
+  .lib-item .info .meta .lib-ver {
+    font-family: var(--mono);
+    font-size: 9px;
+    color: var(--text-dim);
+    background: var(--surface-2);
+    padding: 1px 5px;
+    border-radius: 3px;
+    margin-right: 4px;
+  }
   .lib-item .info .blurb { font-size: 11px; color: var(--text-muted); line-height: 1.4; }
   .lib-item .lib-fav {
     background: transparent;
@@ -1174,6 +1191,22 @@
   }
   .lib-item .lib-fav.faved { color: var(--star); border-color: var(--star); }
 
+  /* Installed-tab action cluster: the transient "Update" action sits LEFT of the
+     persistent ⌄ "show commands" caret (#119). */
+  .lib-item .lib-actions { display: flex; gap: 6px; align-items: center; flex-shrink: 0; }
+  /* "Update" affordance — outline-accent-dim: signals "an action is available / newer
+     version" without the full-accent weight reserved for primary/selected. Shown only
+     when the registry is strictly ahead of the installed version; hidden when current. */
+  .lib-update {
+    background: transparent; border: 1px solid var(--accent-dim); color: var(--accent-dim);
+    padding: 4px 9px; font-size: 11px; cursor: pointer; border-radius: 3px; flex-shrink: 0;
+    line-height: 1; transition: color 0.15s, border-color 0.15s; font-family: var(--ui);
+    display: inline-flex; align-items: center; gap: 6px; white-space: nowrap;
+  }
+  .lib-update:hover { color: var(--accent); border-color: var(--accent); }
+  .lib-update[aria-busy="true"] { color: var(--text-dim); border-color: var(--border-strong); cursor: default; pointer-events: none; }
+  .lib-update .rtn-spinner { width: 11px; height: 11px; border-width: 2px; }
+
   /* Two-tab Agent Library: the tab bar sits between title and panes; each pane is a
      flex column so its inner .lib-list keeps scrolling within the modal's max-height.
      The hidden pane uses [hidden] (display:none) so it's skipped by assistive tech. */
@@ -2864,6 +2897,9 @@ body {
 .canvas.view-dashboard .fav-bar,
 .canvas.view-dashboard .notes-strip,
 .canvas.view-dashboard .find-overlay { display: none; }
+/* In dashboard view the pannable topology is hidden, so the canvas isn't a drag surface —
+   drop the grab affordance the .canvas rule sets for the normal view (#115 follow-up). */
+.canvas.view-dashboard { cursor: default; }
 .dashboard { flex: 1; min-height: 0; overflow-y: auto; padding: 18px 24px 24px; }
 .dashboard[hidden] { display: none; }
 

package/dist/web/app.js

@@ -1422,11 +1422,15 @@ $canvasEl.addEventListener('mousedown', (e) => {
   startPan(e);
 });
 // Left-drag the empty canvas background also pans — so the infinite, scrollbar-less
-// canvas is navigable with any pointer (trackpads have no middle button). Excludes
-// node cards (those keep click-to-select + their HTML5 drag); the toolbar/hint/
-// fav-bar/find aren't inside .topology, so they're naturally excluded.
-$topology.addEventListener('mousedown', (e) => {
-  if (e.button !== 0 || e.target.closest('.agent-card')) return;
+// canvas is navigable with any pointer (trackpads have no middle button). On the full
+// `.canvas` (not just `.topology`) so panning reaches every background area, matching the
+// middle-mouse handler above (#115). Bail on interactive chrome so clicks/drags there still
+// work: node cards (their own select + HTML5 drag), the zoom toolbar, the Templates
+// fav-bar, and the find input. Non-interactive chrome (panel label, hint, notes) still pans.
+// `.dashboard` (the custom-panels view that replaces the topology) is excluded too — it has
+// its own scroll/click surface and the topology it would pan is hidden in that view.
+$canvasEl.addEventListener('mousedown', (e) => {
+  if (e.button !== 0 || e.target.closest('.agent-card, .canvas-toolbar, .fav-bar, .find-overlay, .dashboard')) return;
   e.preventDefault();
   startPan(e);
 });

package/dist/web/aware.js

@@ -1240,6 +1240,9 @@
       const ovStop = document.querySelector('.overlay-stop');
       if (ovStop) { ovStop.disabled = true; ovStop.textContent = 'Stopping…'; }
       try { await api(`/api/trigger-run/${encodeURIComponent(ft.appId)}/stop`, { method: 'POST' }); } catch { /* best effort — the session may already be gone */ }
+      // Clear the canvas "running" pulse just like the regular-run stop below — the
+      // early return here previously skipped it, leaving nodes stuck on `running` (#116).
+      clearNodeStatus();
       // A deliberate stop needs no toast — the subtitle change is the confirmation.
       paintForegroundStopped('stopped');
       syncRunControls();
@@ -3293,21 +3296,31 @@
           if ($libModal && $libModal.classList.contains('show')) renderLibrary();
         }).catch(() => {});
       } else if (m.type === 'agent-install-result') {
-        // A background `aware agent install` (from the Available tab) finished. Clear
-        // its in-flight state, then on success refresh so it drops out of Available and
-        // appears under Installed; on failure restore its Install button + surface why.
+        // A background `aware agent install` (Available tab) or `aware agent update`
+        // (Installed tab) finished — `m.action` says which. Clear its in-flight state,
+        // then on success refresh the catalog (install: drops out of Available, appears
+        // under Installed; update: the new version replaces the old → its Update button
+        // disappears). On failure restore the card + surface why.
+        const isUpdate = m.action === 'update';
         installingIds.delete(m.id);
         if (m.ok) {
-          const a = availableCatalog.find((x) => x.id === m.id);
-          showToast(`Installed “${a && a.display_name ? a.display_name : m.id}” — find it in Installed`, 'ok');
+          if (isUpdate) {
+            showToast(`Updated “${m.id}”`, 'ok');
+          } else {
+            const a = availableCatalog.find((x) => x.id === m.id);
+            showToast(`Installed “${a && a.display_name ? a.display_name : m.id}” — find it in Installed`, 'ok');
+          }
           loadAgentCatalog().then(() => {
             if (!($libModal && $libModal.classList.contains('show'))) return;
             renderAvailable();
             if (libTab === 'installed') renderLibrary();
           }).catch(() => {});
         } else {
-          showToast(`Install failed: ${String(m.error || '').slice(0, 80)}`, 'err');
-          if ($libModal && $libModal.classList.contains('show')) renderAvailable();
+          showToast(`${isUpdate ? 'Update' : 'Install'} failed: ${String(m.error || '').slice(0, 80)}`, 'err');
+          if ($libModal && $libModal.classList.contains('show')) {
+            if (isUpdate) renderLibrary();
+            else renderAvailable();
+          }
         }
       } else if (m.type === 'request-added' || m.type === 'requests-changed') {
         loadRequests();
@@ -3336,6 +3349,8 @@
         else applyTriggerSnapshot(m.id, m.snapshot);
       } else if (m.type === 'trigger-report') {
         applyTriggerReport(m);
+      } else if (m.type === 'routine-report') {
+        applyRoutineReport(m);
       } else if (m.type === 'connect-result') {
         // A run's credential-reconnect card may be waiting on this integration —
         // drive its success/fail state from the same SSE result.
@@ -3506,7 +3521,7 @@
     if (!tpls.length) { $favChipRow.innerHTML = ''; $favBarEmpty.style.display = 'block'; return; }
     $favBarEmpty.style.display = 'none';
     $favChipRow.innerHTML = tpls.map((t) => `
-      <div class="fav-chip" data-tpl="${escapeAttr(t.id)}" data-tip="Click to use · ✎ rename · ${escapeAttr(t.category)} · ${escapeAttr((t.node.agent || t.node.kind) + (t.node.command ? '/' + t.node.command : ''))}">
+      <div class="fav-chip" data-tpl="${escapeAttr(t.id)}" data-tip="Click to use · ${escapeAttr(t.category)} · ${escapeAttr((t.node.agent || t.node.kind) + (t.node.command ? '/' + t.node.command : ''))}">
         <span class="cat">${escapeHtml(t.category)}</span>
         <span class="name">${escapeHtml(t.name)}</span>
         <span class="edit" data-tip="Rename / recategorize" aria-label="Edit template">✎</span>
@@ -3721,29 +3736,85 @@
     renderLibrary();
     $libModal.classList.add('show');
     if (!agentCatalog.length) loadAgentCatalog().then(renderLibrary).catch(reportErr);
+    // Load the registry catalog too, so the Installed tab can flag outdated agents
+    // with an "Update" button (and the Available tab is instant when switched to).
+    ensureAvailableLoaded(() => {
+      renderLibrary();
+      if (libTab === 'available') renderAvailable();
+    });
   };
 
+  // Compare two dotted version strings numerically, segment by segment (missing
+  // segments = 0). Returns 1 if a>b, -1 if a<b, 0 if equal — so the Installed tab
+  // only offers an "Update" when the registry is STRICTLY ahead (never a downgrade).
+  // Handles the registry's mixed schemes (e.g. "0.2.0" vs "1.0.0", "0.1.0" vs
+  // "2025.0.1"). ponytail: numeric-only compare — registry versions are pure dotted
+  // integers; a pre-release/build suffix (none today) compares by its leading int.
+  function cmpVer(a, b) {
+    const pa = String(a).split('.');
+    const pb = String(b).split('.');
+    const n = Math.max(pa.length, pb.length);
+    for (let i = 0; i < n; i++) {
+      const x = parseInt(pa[i], 10) || 0;
+      const y = parseInt(pb[i], 10) || 0;
+      if (x !== y) return x > y ? 1 : -1;
+    }
+    return 0;
+  }
+
+  // Latest installable version for an installed id, from availableCatalog (lazy-loaded
+  // on library open). Uses the catalog's `manifest_version` — the agent's manifest
+  // version for the latest registry entry, i.e. the version an in-place `aware agent
+  // update` actually pulls. This is the SAME axis as the installed agent's version
+  // (agentCatalog/`agent list` also reports manifest.version), so the comparison is
+  // valid — the catalog's `version` field is the registry INDEX key (the install
+  // spec, a different axis) and must NOT be compared. null when the registry hasn't
+  // loaded, the agent isn't in it (e.g. a grafted/local agent), or the CLI predates
+  // manifest_version (aware < the catalog-manifest-version release) → no Update shown.
+  function latestVersionFor(id) {
+    const a = availableCatalog.find((x) => x.id === id);
+    return a && a.manifest_version ? a.manifest_version : null;
+  }
+
   renderLibrary = function renderLibraryReal() {
     const q = ($libSearch.value || '').toLowerCase().trim();
     const items = agentCatalog.filter((a) => !q || a.id.toLowerCase().includes(q) || (a.kind || '').toLowerCase().includes(q));
     // Each agent is ONE grid cell: the card header + its (lazy) command list live
     // in the same `.lib-card`, so expanding nests the commands directly under the
     // picked card instead of scattering them into a neighbouring grid slot.
-    $libList.innerHTML = items.map((a) => `
-      <div class="lib-card" data-agent="${escapeAttr(a.id)}">
+    $libList.innerHTML = items.map((a) => {
+      const id = escapeAttr(a.id);
+      // "Update" shows only when the registry is strictly ahead of the installed
+      // version AND the registry catalog has loaded (else we can't know) — hidden,
+      // not disabled, when up to date. A pull in flight shows a spinner instead.
+      const latest = availableLoaded ? latestVersionFor(a.id) : null;
+      const canUpdate = !!latest && cmpVer(latest, a.version) > 0;
+      const updateBtn = installingIds.has(a.id)
+        ? `<button class="lib-update" aria-busy="true" aria-label="Updating ${escapeAttr(a.id)}…" data-tip="Downloading update from the registry — this can take a minute"><span class="rtn-spinner"></span></button>`
+        : canUpdate
+          ? `<button class="lib-update" data-update="${id}" aria-label="Update ${escapeAttr(a.id)} to v${escapeAttr(String(latest))}" data-tip="Update to v${escapeAttr(String(latest))}">↑ v${escapeHtml(String(latest))}</button>`
+          : '';
+      return `
+      <div class="lib-card" data-agent="${id}">
         <div class="lib-item">
           <div class="info">
-            <div class="name">${escapeHtml(a.id)} <span style="color:var(--text-dim);font-weight:400">v${escapeHtml(String(a.version))}</span></div>
-            <div class="meta">${escapeHtml(a.kind || 'agent')} · ${a.commands} command${a.commands === 1 ? '' : 's'} · ${a.skills} skill${a.skills === 1 ? '' : 's'}</div>
+            <div class="name">${escapeHtml(a.id)}</div>
+            <div class="meta"><span class="lib-ver">v${escapeHtml(String(a.version))}</span> ${escapeHtml(a.kind || 'agent')} · ${a.commands} command${a.commands === 1 ? '' : 's'} · ${a.skills} skill${a.skills === 1 ? '' : 's'}</div>
+          </div>
+          <div class="lib-actions">
+            ${updateBtn}
+            <button class="lib-fav" data-expand="${id}" data-tip="Show commands">⌄</button>
           </div>
-          <button class="lib-fav" data-expand="${escapeAttr(a.id)}" data-tip="Show commands">⌄</button>
         </div>
-        <div class="lib-commands" id="cmds-${escapeAttr(a.id)}" hidden></div>
-      </div>
-    `).join('') || '<div class="empty-state">No agents match.</div>';
+        <div class="lib-commands" id="cmds-${id}" hidden></div>
+      </div>`;
+    }).join('') || '<div class="empty-state">No agents match.</div>';
     $libList.querySelectorAll('[data-expand]').forEach((btn) => {
       btn.onclick = () => expandAgent(btn.dataset.expand);
     });
+    $libList.querySelectorAll('[data-update]').forEach((btn) => {
+      btn.onclick = () => updateAgent(btn.dataset.update, btn);
+    });
   };
 
   async function expandAgent(id) {
@@ -3943,6 +4014,49 @@
       });
   }
 
+  // Update an installed agent in place to the latest registry version (Installed tab
+  // "Update" button). Mirrors installAgent: the server runs `aware agent update`
+  // asynchronously (a registry pull, ~a minute) and reports completion over SSE
+  // (`agent-install-result`, action:'update'), so we flip the card to a busy spinner
+  // and let the SSE handler refresh the catalog + re-render. `installingIds` is the
+  // shared in-flight set (an id can't be installing and updating at once).
+  function updateAgent(id, btn) {
+    if (installingIds.has(id)) return; // already in flight (server dedupes too)
+    installingIds.add(id);
+    if (btn) { // immediate feedback before the next render
+      btn.setAttribute('aria-busy', 'true');
+      btn.setAttribute('aria-label', `Updating ${id}…`);
+      btn.removeAttribute('data-update'); // a stray re-wire can't re-trigger it
+      btn.innerHTML = '<span class="rtn-spinner"></span>';
+    }
+    showToast(`Updating “${id}” — this can take a minute or two`, 'info');
+    api('/api/agents/update', { method: 'POST', body: JSON.stringify({ id }) })
+      .catch((e) => { // the START failed (bad id / server) — completion errors arrive via SSE
+        installingIds.delete(id);
+        if ($libModal && $libModal.classList.contains('show')) renderLibrary();
+        reportErr(e);
+      });
+  }
+
+  // Lazy-load the registry catalog once. Used by the Available tab (to list agents)
+  // AND the Installed tab (to detect outdated agents → show "Update"). `onLoaded`
+  // fires after the data is available (immediately if already loaded), so the caller
+  // can re-render whichever view needs it. No-op on a pre-0.54 CLI (no catalog).
+  function ensureAvailableLoaded(onLoaded) {
+    if (availableUnsupported) return;
+    if (availableLoaded) { if (onLoaded) onLoaded(); return; }
+    if (availableLoading) return; // a load is already in flight; its onLoaded re-renders
+    availableLoading = true;
+    loadAvailableAgents()
+      .then(() => { if (onLoaded) onLoaded(); })
+      .catch((e) => {
+        $libAvailList.innerHTML = '<div class="empty-state">Could not load available agents.</div>';
+        $libAvailCount.textContent = '';
+        reportErr(e);
+      })
+      .finally(() => { availableLoading = false; });
+  }
+
   function switchLibTab(tab) {
     libTab = tab;
     $libTabs.querySelectorAll('[data-libtab]').forEach((b) => {
@@ -3954,17 +4068,7 @@
     $libPaneAvailable.hidden = tab !== 'available';
     if (tab === 'available') {
       renderAvailable(); // shows the loading spinner first if not yet loaded
-      if (!availableLoaded && !availableLoading && !availableUnsupported) {
-        availableLoading = true;
-        loadAvailableAgents()
-          .then(renderAvailable)
-          .catch((e) => {
-            $libAvailList.innerHTML = '<div class="empty-state">Could not load available agents.</div>';
-            $libAvailCount.textContent = '';
-            reportErr(e);
-          })
-          .finally(() => { availableLoading = false; });
-      }
+      ensureAvailableLoaded(() => { renderAvailable(); renderLibrary(); });
       setTimeout(() => { if (!$libAvailSearch.hidden) $libAvailSearch.focus(); }, 0);
     } else {
       renderLibrary(); // repaint from agentCatalog — it may have grown via an Install on the other tab
@@ -4295,6 +4399,32 @@
     pulseReportFrame();
   }
 
+  // A SCHEDULED routine (a timed `aware app run`) produced a report (#113). Mirrors
+  // applyTriggerReport for the timed path: always refresh the cache so "View report" shows
+  // the latest result, and if THIS app's viewer is open, live-repaint it. An unattended
+  // routine (e.g. hourly) shouldn't beep on every tick, so the toast fires ONLY when the
+  // report HTML actually changed (e.g. an exception-monitor flips from "all clear" to
+  // "exception detected"). Never auto-opens the viewer, never hijacks another app's open
+  // viewer, never stomps an in-flight manual run or a live foreground session.
+  function applyRoutineReport(m) {
+    if (!m || !m.workflow || typeof m.html !== 'string') return;
+    const prev = lastReportByApp.get(m.workflow);
+    const changed = !prev || prev.html !== m.html;
+    lastReportByApp.set(m.workflow, { nodeId: m.nodeId || null, label: 'scheduled', html: m.html });
+    const open = $reportModal && $reportModal.classList.contains('show');
+    if (open && currentId === m.workflow && !reportRunning && !foregroundTrigger) {
+      paintReport(m.html); // unhides Share + clears the overlay
+      const t = new Date().toLocaleTimeString();
+      $reportSub.innerHTML =
+        `<span class="live-pip" aria-hidden="true"></span>Scheduled &middot; updated ${escapeHtml(t)} — rendered from the node's output, never composed by the UI.`;
+      pulseReportFrame();
+    }
+    if (changed) {
+      const app = apps.get(m.workflow);
+      showToast(`Report updated — ${app ? app.displayName : m.workflow}`, 'info');
+    }
+  }
+
   // Brief edge-flash on the report stage when a live update lands, so the change
   // is noticeable. Forced reflow re-arms it on rapid repeats. CSS honors
   // prefers-reduced-motion.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floless/app",
-  "version": "0.25.2",
+  "version": "0.27.0",
   "type": "module",
   "description": "Thin localhost host for floless.app — serves web/ and shells the aware CLI. No engine, no LLM.",
   "bin": {