@floless/app 0.28.0 → 0.30.0

package/dist/schemas/steel.takeoff.v1.schema.json

@@ -0,0 +1,148 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://floless.app/schemas/steel.takeoff/v1",
+  "title": "steel.takeoff/v1",
+  "description": "Typed contract emitted by the steel-takeoff-us reader and rendered by the floless contract editor. The contract is the single source of truth; the editor is its view, the exporters (IFC/Tekla/viewer-3d) consume it, Approve bakes the .lock. A multi-plan container: each plan is one framing sheet. All coordinates are DISPLAY space; elevations are decimal inches. Confidential rasters ride inside as base64 and are never committed. Field reference: docs/superpowers/specs/2026-06-17-steel-takeoff-agent-guidance.md §3.",
+  "type": "object",
+  "required": ["type", "plans"],
+  "additionalProperties": true,
+  "properties": {
+    "type": { "const": "steel.takeoff/v1", "description": "Renderer-registry discriminator." },
+    "active": { "type": "integer", "description": "Index into plans of the active sheet." },
+    "palette": { "type": "array", "items": { "type": "string" }, "description": "Default per-index profile colours." },
+    "weights": { "type": "object", "additionalProperties": { "type": ["number", "null"] }, "description": "profile -> plf (pounds per linear foot), from the AISC lookup. null for an unresolved profile (e.g. an unsized moment-frame mark) that has no weight yet." },
+    "profile_colors": { "type": "object", "additionalProperties": { "type": "string" }, "description": "profile -> #hex user overrides." },
+    "sheet_previews": { "type": "object", "additionalProperties": { "type": "string" }, "description": "sheet -> base64 JPEG full-sheet preview (title block excluded)." },
+    "custom_details": { "type": "object", "additionalProperties": { "type": "string" }, "description": "user-created detail name -> base64 JPEG." },
+    "moment_frames": { "type": "array", "description": "Moment-frame schedule from the frame-elevation sheets." },
+    "detail_bubbles": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": { "$ref": "#/$defs/point2" }
+      },
+      "description": "sheet -> { detail number -> normalized [fx,fy] bubble anchor }."
+    },
+    "plans": { "type": "array", "items": { "$ref": "#/$defs/plan" } }
+  },
+  "$defs": {
+    "point2": {
+      "type": "array",
+      "items": { "type": "number" },
+      "minItems": 2,
+      "maxItems": 2,
+      "description": "An [x,y] pair in display space (or [fx,fy] normalized for bubbles)."
+    },
+    "plan": {
+      "type": "object",
+      "required": ["sheet", "members"],
+      "additionalProperties": true,
+      "properties": {
+        "sheet": { "type": "string", "description": "Sheet number, e.g. S-202." },
+        "title": { "type": "string" },
+        "clip": {
+          "type": "array",
+          "items": { "type": "number" },
+          "minItems": 4,
+          "maxItems": 4,
+          "description": "[x0,y0,x1,y1] display-space crop of the framing area."
+        },
+        "pt_per_ft": { "type": "number", "description": "Display points per foot (the drawing scale)." },
+        "default_tos": { "type": "number", "description": "Default top-of-steel elevation in inches for blank ends on this plan." },
+        "raster_b64": { "type": "string", "description": "Base64 raster of the framing area. CONFIDENTIAL — never committed." },
+        "segments": { "type": "array", "items": { "$ref": "#/$defs/segment" } },
+        "labels": { "type": "array", "items": { "$ref": "#/$defs/label" } },
+        "details": { "type": "array", "items": { "$ref": "#/$defs/detail" } },
+        "tos_callouts": { "type": "array", "items": { "$ref": "#/$defs/tos_callout" } },
+        "members": { "type": "array", "items": { "$ref": "#/$defs/member" } }
+      }
+    },
+    "segment": {
+      "type": "object",
+      "required": ["id", "a", "b"],
+      "additionalProperties": true,
+      "properties": {
+        "id": { "type": "string" },
+        "a": { "$ref": "#/$defs/point2" },
+        "b": { "$ref": "#/$defs/point2" },
+        "o": { "enum": ["H", "V", "D"], "description": "Orientation: horizontal / vertical / diagonal." }
+      }
+    },
+    "label": {
+      "type": "object",
+      "required": ["text", "disp"],
+      "additionalProperties": true,
+      "properties": {
+        "text": { "type": "string" },
+        "disp": { "$ref": "#/$defs/point2" }
+      }
+    },
+    "detail": {
+      "type": "object",
+      "required": ["text"],
+      "additionalProperties": true,
+      "properties": {
+        "text": { "type": "string", "description": "Callout, e.g. \"2-S-302\"." },
+        "disp": { "$ref": "#/$defs/point2" }
+      }
+    },
+    "tos_callout": {
+      "type": "object",
+      "required": ["elev_in"],
+      "additionalProperties": true,
+      "properties": {
+        "elev_in": { "type": "number", "description": "Top-of elevation in inches." },
+        "type": { "enum": ["TOS", "TOD", "TOC"], "description": "Top of steel / deck / concrete." },
+        "disp": { "$ref": "#/$defs/point2" }
+      }
+    },
+    "member": {
+      "type": "object",
+      "required": ["id", "profile", "wp"],
+      "additionalProperties": true,
+      "properties": {
+        "id": { "type": "string" },
+        "profile": { "type": "string", "description": "AISC designation (e.g. W16X26) or an unresolved mark (e.g. MF). Empty string allowed for an unprofiled member." },
+        "wp": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/point2" },
+          "minItems": 2,
+          "maxItems": 2,
+          "description": "Work-point endpoints [[x,y],[x,y]] in display space."
+        },
+        "angle": { "enum": ["H", "V", "D"] },
+        "role": { "enum": ["beam", "column"], "description": "Defaults to beam when absent." },
+        "rfi": { "type": "boolean", "description": "True when the size is unresolved (excluded from the BOM)." },
+        "mf": { "type": "boolean", "description": "Moment-frame member (persistent flag)." },
+        "ends": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/end" },
+          "minItems": 2,
+          "maxItems": 2,
+          "description": "Per-end metadata (beam variant); index 0 and 1 match wp's two endpoints."
+        },
+        "col": { "$ref": "#/$defs/col" }
+      }
+    },
+    "end": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "tos": { "type": ["number", "null"], "description": "Top-of-steel elevation in inches at this end." },
+        "note": { "type": "string", "description": "Connection note (e.g. moment, shear, braced)." },
+        "tosDef": { "type": "boolean", "description": "True = follows the plan default; false = read from a drawing callout or set by hand." },
+        "detail": { "type": "string", "description": "Connection detail reference, e.g. \"5-S504\"." }
+      }
+    },
+    "col": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "bos": { "type": ["number", "null"], "description": "Bottom-of-steel elevation in inches." },
+        "tos": { "type": ["number", "null"], "description": "Top-of-steel elevation in inches." },
+        "note": { "type": "string" },
+        "detail": { "type": "string" }
+      }
+    }
+  }
+}

package/dist/skills/floless-app-tweak-contract/SKILL.md

@@ -0,0 +1,111 @@
+---
+name: floless-app-tweak-contract
+description: This skill should be used when there is a pending floless `tweak-contract` request — the user typed an instruction in the steel-takeoff contract editor and clicked Send (Ask AI). Also triggers on asks like "edit the steel takeoff contract via AI", "adjust the steel takeoff in the contract editor", "the user asked me to change the steel contract", "pick up my tweak-contract request", "update the member profile in the contract". It teaches the host AI to read the request, fetch the current steel.takeoff/v1 contract, apply the instruction (and any pasted screenshots), PUT the updated contract back, and resolve the request.
+metadata:
+  version: 0.1.0
+---
+
+# Handle a `tweak-contract` request (Slice 2 AI round-trip)
+
+## What this is
+
+The floless.app steel-takeoff contract editor surfaces an **Ask AI** panel: the user types
+an instruction ("change all W12X26 to W14X30", "add a new beam on sheet S-202", "mark this
+member as moment-frame") and optionally pastes screenshots, then clicks **Send**. That records
+a `tweak-contract` request in the reverse channel. You pick it up here, edit the contract
+document, write it back, and the editor reloads it.
+
+The contract is `~/.floless/contracts/<appId>.json`, a `steel.takeoff/v1` document. It is the
+single source of truth — the editor is its view, the exporters (IFC/Tekla/viewer-3d) consume
+it, and **Approve** bakes the lock. A PUT writeback is schema-validated on the server; a 400
+means invalid — fix and retry.
+
+> **Pasted a request?** If the user pastes a message with a `[floless-request type=tweak-contract id=…]`
+> marker, that is a request **copied from the FloLess Dashboard**. Resolve it via
+> `GET /api/requests` (match the id) — don't act on the raw marker — then follow the loop
+> below and `DELETE` it when done.
+
+## The loop
+
+1. **Find the request.** `GET http://localhost:<port>/api/requests` → find the entry with
+   `type: "tweak-contract"`. It carries:
+   - `id` — the request id (used to DELETE it when done)
+   - `appId` — which app's contract to edit
+   - `instruction` — the user's plain-English ask
+   - `snapshots` — absolute paths to screenshot files saved under
+     `~/.floless/requests/<id>/` (PNG/JPEG/WebP). These are the key input — the user
+     pasted them to show you exactly which region or member they mean.
+
+   The port is the same base URL the floless.app server is on (check `/api/health` or use
+   the port the skill context provides — typically 4317 for the installed app, 4318 for the
+   dev server).
+
+2. **Read the current contract.** `GET http://localhost:<port>/api/contract/<appId>` returns
+   the full `steel.takeoff/v1` JSON document. You can also read it directly from
+   `~/.floless/contracts/<appId>.json`.
+
+   The schema is at `schemas/steel.takeoff.v1.schema.json` (in the floless.app repo) and the
+   field reference is `docs/superpowers/specs/2026-06-17-steel-takeoff-agent-guidance.md` §3.
+   Key shapes you'll edit:
+   - Top-level: `type` (const `"steel.takeoff/v1"`), `active`, `palette`, `weights{profile→plf}`,
+     `profile_colors{profile→#hex}`, `plans[]`
+   - `plans[i]`: `sheet`, `title`, `clip`, `pt_per_ft`, `default_tos`, `segments[]`,
+     `labels[]`, `details[]`, `tos_callouts[]`, `members[]`
+   - `members[j]`: `id` (required), `profile` (AISC designation e.g. `W16X26` or mark e.g. `MF`),
+     `wp` ([[x,y],[x,y]] work-point endpoints in display space), `angle` (`H`|`V`|`D`),
+     `role` (`beam`|`column`), `rfi` (true = no resolved AISC size), `mf` (moment-frame flag),
+     `ends[2]` (per-end: `tos` in inches, `note`, `tosDef`, `detail`),
+     `col` (column variant: `bos`, `tos`, `note`, `detail`)
+
+3. **Understand the ask.** Read the `instruction` text AND open the `snapshots[]` image files
+   with your vision — the screenshots are the primary input. They show the user pointing at a
+   specific member, region, or annotation on the canvas. What the text alone says ("change this
+   beam") only resolves with the visual context ("this beam" = the one circled in red on the
+   screenshot).
+
+4. **Produce the edit.** Modify the contract JSON to satisfy the instruction:
+   - Profile changes: update `members[j].profile`; if the new profile resolves in the AISC
+     table update `weights` too (plf from the AISC designation). Set `rfi: false` when you
+     assign a real AISC size; `rfi: true` for marks (`MF`, `BF`) or unknowns.
+   - Add a member: append to `plans[i].members[]` with a valid `{id, profile, wp}` minimum.
+     Use a unique `id` (e.g. `m-<uuid-fragment>`). Infer geometry from context/screenshot.
+   - Delete a member: remove it from `members[]`.
+   - Elevation changes: update `ends[].tos` (decimal inches) or `col.tos`/`col.bos`.
+     `tosDef: false` means the value came from the drawing, not the plan default.
+   - Connection notes / detail refs: update `ends[].note` or `ends[].detail` (e.g. `"5-S504"`).
+   - Flag adjustments: `mf: true` for moment-frame members; `rfi: true` for unresolved sizes.
+   - **Preserve everything you're not changing** — v1 is a full-document writeback; partial
+     objects are not supported.
+
+5. **Write it back.** `PUT http://localhost:<port>/api/contract/<appId>` with the full updated
+   document (Content-Type: application/json). A **400** response means schema-invalid — read
+   the error, fix the structure against `schemas/steel.takeoff.v1.schema.json`, and retry.
+   On success the server broadcasts a `contract-changed` event; the editor picks it up and
+   prompts to reload.
+
+6. **Tell the user.** Summarize what you changed (e.g. "Updated W12X26 → W14X30 on 4 beams
+   in sheet S-202; updated `weights` entry to 30 plf"). Tell them to click **↻ Reload** in the
+   editor (or accept the reload banner) to see the change. Then resolve the request:
+
+   `DELETE http://localhost:<port>/api/requests/<id>`
+
+   so it doesn't reappear in the queue.
+
+## Guardrails
+
+- **Schema is the guardrail.** A 400 on PUT is the server rejecting invalid JSON — don't
+  skip it. Read `schemas/steel.takeoff.v1.schema.json` and fix the issue before retrying.
+- **Preserve unedited data.** Coordinates, rasters (`raster_b64`), detail bubbles, sheet
+  previews — if you're not changing them, copy them through unchanged. Dropping fields silently
+  corrupts the contract.
+- **Coordinates are display space, elevations are decimal inches.** Don't confuse them. Member
+  geometry (`wp`, `segments`) is in display-space points (not feet, not native PDF coords).
+  `tos` / `bos` / `elev_in` fields are always decimal inches (`16.5` = 16½ inches).
+- **Screenshots don't lie; instructions generalize.** If the screenshot shows a specific member
+  and the instruction says "this beam", resolve "this" from the visual, not a guess.
+- **Never auto-approve.** Writing the contract back is the AI act; the user still clicks
+  **Approve** in the editor to bake the lock. You write; they gate.
+- **Thin-UI contract holds.** The browser recorded intent + screenshots; the brain is you, in
+  the terminal. The editor never edits the contract directly (it's read-only from its side
+  until the user clicks Save after a manual edit — and that is a different path). This skill
+  is the AI path.

package/dist/web/app.css

@@ -608,6 +608,20 @@
     border: 1px solid var(--accent-dim); border-radius: 999px;
     cursor: help;
   }
+  /* Frozen node (aware app freeze): its last output is pinned and Run skips this node.
+     A quiet, INERT read — badge + a one-step-cooler surface — NOT a disabled state (the
+     card stays fully interactive; it's just static). Mirrors the rt-model-badge recipe but
+     with neutral-cool tokens so it reads distinct from the accent-blue runtime-model badge.
+     (No left ::after ribbon: that pseudo-element is already the node mode stripe.) */
+  .agent-card.frozen { background: var(--surface-2); }
+  .agent-card .frozen-badge {
+    display: inline-flex; align-items: center; gap: 4px;
+    margin: 0 0 8px; padding: 2px 8px;
+    font: 600 10px/1.4 var(--ui); letter-spacing: 0.01em;
+    color: var(--text-muted); background: var(--surface-3);
+    border: 1px solid var(--border-strong); border-radius: 999px;
+    cursor: help;
+  }
   .agent-card .footer-row {
     display: flex;
     justify-content: space-between;
@@ -1855,6 +1869,19 @@
     background: var(--border);
     margin: 5px 4px;
   }
+  /* Cursor-anchored node context menu (right-click a card). Reuses .menu/.menu-item; only
+     the fixed 280px width is wrong for it — the pointer anchor (top/left) is set inline. */
+  .menu.context-menu { width: auto; min-width: 168px; }
+  /* Non-interactive node-name header line atop the context menu. */
+  .menu-head {
+    padding: 6px 9px 4px;
+    font-size: 11px;
+    color: var(--text-dim);
+    max-width: 220px;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
   .menu-theme {
     display: flex;
     align-items: center;
@@ -3010,6 +3037,37 @@ body {
 /* Inspect-tab panels reuse the same block styles inside the inspect body. */
 .ext-inspect { display: flex; flex-direction: column; gap: 10px; overflow-y: auto; min-height: 0; }
 
+/* ── Contract editor overlay ────────────────────────────────────────────────
+   Full-window surface for an editable typed contract (steel takeoff, …).
+   Same-origin iframe, so the editor page calls /api/contract directly.
+   z-index 60 sits above the 3-col app (z 1–8) and below any modal backdrops (z 70+). */
+.contract-editor {
+  position: fixed; inset: 0; z-index: 60;
+  display: flex; flex-direction: column;
+  background: var(--bg);
+}
+.contract-editor[hidden] { display: none; }
+.contract-editor-bar {
+  display: flex; align-items: center; gap: 12px;
+  padding: 8px 14px;
+  background: var(--surface-2);
+  border-bottom: 1px solid var(--border);
+  flex: none;
+}
+.contract-editor-title {
+  color: var(--text-muted);
+  font-size: 13px;
+  overflow: hidden; text-overflow: ellipsis; white-space: nowrap;
+}
+/* The Approve button reuses the same .primary recipe as modal primary actions. */
+.contract-editor-bar .primary {
+  background: var(--accent); color: #fff; border: 1px solid var(--accent);
+  padding: 6px 14px; border-radius: 6px; font-size: 12.5px; font-weight: 600; cursor: pointer;
+}
+.contract-editor-bar .primary:hover { background: var(--accent-bright); border-color: var(--accent-bright); box-shadow: 0 0 14px var(--accent-glow); }
+.contract-editor-bar .primary:disabled { opacity: 0.6; cursor: default; background: var(--surface-2); border-color: var(--border-strong); color: var(--text-muted); box-shadow: none; }
+.contract-editor iframe { flex: 1; border: 0; width: 100%; min-height: 0; }
+
 /* ===== MOBILE REFLOW =====
    Phone/touch access (e.g. over Tailscale). The desktop 3-column shell is wider than a phone
    and html,body{overflow:hidden} (top of file) clips the off-screen columns with no way to pan

package/dist/web/app.js

@@ -339,7 +339,9 @@ function cardEl(id, ports) {
   const a = AGENTS[id];
   ports = ports || { in: 0, out: 0 };
   const div = document.createElement('div');
-  div.className = 'agent-card';
+  // `frozen` = the node's output is pinned and Run skips it (aware app freeze). A quiet,
+  // inert card treatment + badge so it reads as "static / won't re-run" at a glance.
+  div.className = 'agent-card' + (a._frozen ? ' frozen' : '');
   div.dataset.agentId = id;
   div.draggable = true;
   const faved = state.favorites.some(f => f.id === id);
@@ -355,6 +357,7 @@ function cardEl(id, ports) {
     <div class="title">${a.title}</div>
     <div class="subtitle">${a.subtitle}</div>
     ${a._runtimeModel ? '<div class="rt-model-badge" title="This node calls a model at run time (vision.extract). Output is content-cached and sits behind an approve gate — review the extraction before any write.">⚡ calls a model at run time</div>' : ''}
+    ${a._frozen ? '<div class="frozen-badge" title="Frozen — its last result is pinned and Run skips this node. Right-click to unfreeze.">❄ Frozen</div>' : ''}
     <div class="blurb">${a.blurb}</div>
     <div class="footer-row">
       <span class="ports"><span class="ports-num">${ports.in}</span> in <span class="ports-arrow">·</span> <span class="ports-num">${ports.out}</span> out</span>

package/dist/web/aware.js

@@ -28,6 +28,14 @@
   const $reportStop = document.getElementById('report-stop');
   const $stopRunBtn = document.getElementById('stop-run-btn');
 
+  // Contract editor — a dedicated full-window surface for an editable typed
+  // contract (steel takeoff, …). Unlike the opaque report viewer, this is a
+  // same-origin floless page (the iframe talks to /api/contract directly). The
+  // type→view registry lives in renderers.js (a global, loaded before this file).
+  const $contractEditor = document.getElementById('contract-editor');
+  const $contractEditorFrame = document.getElementById('contract-editor-frame');
+  const $contractEditorTitle = document.getElementById('contract-editor-title');
+
   // One persistent array the inspect Execution tab reads; we mutate in place so
   // every AGENTS[node].execution reference stays valid across re-renders.
   const liveTrace = [];
@@ -286,6 +294,7 @@
     return {
       _mode: n.mode,
       _runtimeModel: !!n.runtimeModel, // B2: lock stamped runtime-model → card badge
+      _frozen: !!n.frozen, // source node carries a `frozen:` block → card badge + Unfreeze menu
       icon: iconFor(n.agent),
       kind: n.kind === 'agent' && n.agent ? `${agentLabel} agent` : escapeHtml(n.kind),
       version: pin ? `v${escapeHtml(String(pin))}` : '—',
@@ -967,6 +976,15 @@
       }
       if (isInput) addNodeAction(card, 'Set inputs ▸', () => openInputsDialog());
       if (isRebake) addNodeAction(card, 'Re-read & re-bake ▸', () => openRebakeDialog());
+      const node = app && app.nodes.find((n) => n.id === id);
+      const contractType = node && window.contractTypeOf && window.contractTypeOf(node);
+      // Only offer the action when a renderer is actually registered for the type — otherwise
+      // openContractEditor() returns false and the click would silently do nothing.
+      if (contractType && window.CONTRACT_RENDERERS && window.CONTRACT_RENDERERS[contractType]) {
+        addNodeAction(card, 'Edit contract ▸', () => openContractEditor(currentId, contractType));
+        addNodeAction(card, 'View 3D ▸', () => exportContract3d(currentId));
+        card.dataset.tip = 'Double-click to open the contract editor';
+      }
     });
   }
 
@@ -1319,6 +1337,186 @@
     }
   }
 
+  // ── Contract editor (tier-1 typed, editable contract) ───────────────────────
+  // Open the dedicated full-window editor for a node that emits a known contract
+  // type. Returns true if a renderer exists (so the caller can stop here instead
+  // of falling through to the report viewer); false → unknown type, caller continues.
+  function openContractEditor(appId, type) {
+    const r = window.CONTRACT_RENDERERS && window.CONTRACT_RENDERERS[type];
+    if (!r) return false;
+    $contractEditorTitle.replaceChildren(
+      Object.assign(document.createElement('span'), { textContent: appId, style: 'color:var(--text);font-weight:600' }),
+      Object.assign(document.createElement('span'), { textContent: ' · ' + type, style: 'color:var(--text-muted)' }),
+    );
+    $contractEditorFrame.src = r.editorUrl(appId);
+    $contractEditor.hidden = false;
+    return true;
+  }
+  function closeContractEditor() {
+    $contractEditor.hidden = true;
+    $contractEditorFrame.src = 'about:blank'; // tear down the editor session + its draft listeners
+  }
+  document.getElementById('contract-editor-close').onclick = closeContractEditor;
+
+  // Export 3D ▸ — render the approved takeoff as an interactive 3D model. Calls the server's
+  // export-3d (transform → companion viewer-3d app → compile → run) and paints the returned
+  // interactive report in the same viewer a normal run uses. api() throws on any failure (non-2xx
+  // OR in-band ok:false), so one catch covers "no contract", "all RFI", and compile/render errors.
+  async function exportContract3d(appId) {
+    const app = currentId && apps.get(currentId);
+    if (!app) return;
+    $reportTitle.textContent = `3D Viewer · ${app.displayName}`;
+    $reportSub.textContent = 'Rendering the 3D model from the approved takeoff…';
+    $reportModal.dataset.nodeId = appId;
+    showModal($reportModal);
+    clearReportFrames(); // reset both frames + the ↗ Open buffer so a failure can't show a stale report
+    $reportFrame.hidden = true; $reportFrame3d.hidden = true;
+    $reportOverlay.hidden = false;
+    $reportOverlay.replaceChildren(mkEl('div', 'spinner'), mkEl('div', null, 'Rendering 3D model…'));
+    try {
+      const res = await api('/api/contract/' + encodeURIComponent(appId) + '/export-3d', { method: 'POST' });
+      const html = res.report && res.report.html;
+      if (!html) { $reportOverlay.innerHTML = '<div>The 3D render produced no output. Check the Execution tab.</div>'; return; }
+      // Partial render: members with no resolvable AISC size were dropped server-side (res.skipped) —
+      // surface that, never let an incomplete model read as complete.
+      const dropped = Array.isArray(res.skipped) ? res.skipped.length : 0;
+      $reportSub.textContent = (dropped ? `${dropped} member(s) not shown (no AISC size — RFI). ` : '')
+        + 'Live 3D view from the approved takeoff — drag to orbit, scroll to zoom, click an element to inspect.';
+      if (dropped) showToast(`3D: ${dropped} member(s) skipped — no resolvable AISC size`, 'info');
+      paintReport(html, true);
+      lastReportByApp.set(currentId, { nodeId: res.report.nodeId, label: '3D', html, interactive: true });
+      $reportModal.dataset.html = '1';
+    } catch (e) {
+      const msg = e && e.message ? e.message : String(e);
+      $reportOverlay.innerHTML = `<div>3D export failed: ${escapeHtml(msg)}</div>`;
+      showToast('3D export failed: ' + msg, 'warn');
+    }
+  }
+
+  // ── Right-click Freeze / Unfreeze a node (aware-aeco#261) ─────────────────────
+  // A general per-node toggle: right-click a canvas node → Freeze output (Run then
+  // REPLAYS the node's last result instead of re-running its agent — so e.g. a
+  // drawing-reader node won't re-read & wipe the user's edits, "whatever's there is
+  // there") or Unfreeze (runs normally again). Needs AWARE ≥ 0.77; on an older runtime
+  // the menu simply doesn't appear and the native menu passes through (the app keeps
+  // AWARE at latest, so that's rare/transient — never a dead/disabled control).
+  let _freezeMenuEl = null, _freezeMenuEsc = null, _freezeMenuOutside = null;
+
+  // numeric major.minor.patch compare; an empty/unparseable version sorts BELOW (-1),
+  // so a missing awareVersion safely reads as "freeze unsupported". `Number` (not parseInt)
+  // is strict — a prerelease segment like "0-rc1" → NaN → unsupported (defer to the server
+  // backstop), never silently treated as the release.
+  function cmpSemver(a, b) {
+    const pa = String(a || '').split('.').map((x) => Number(x));
+    const pb = String(b || '').split('.').map((x) => Number(x));
+    if (pa.length < 3 || pa.some(Number.isNaN)) return -1;
+    for (let i = 0; i < 3; i++) {
+      const d = (pa[i] || 0) - (pb[i] || 0);
+      if (d !== 0) return d < 0 ? -1 : 1;
+    }
+    return 0;
+  }
+  function awareSupportsFreeze() { return cmpSemver(awareRuntimeVersion, '0.77.0') >= 0; }
+
+  function closeNodeMenu() {
+    if (_freezeMenuEsc) { document.removeEventListener('keydown', _freezeMenuEsc, true); _freezeMenuEsc = null; }
+    if (_freezeMenuOutside) { document.removeEventListener('mousedown', _freezeMenuOutside, true); _freezeMenuOutside = null; }
+    if (_freezeMenuEl) { _freezeMenuEl.remove(); _freezeMenuEl = null; }
+  }
+
+  // Build + open the cursor-anchored menu over a node card. Reuses the hamburger
+  // `.menu`/`.menu-item` vocabulary (+ a `.context-menu` width modifier) so it matches
+  // the existing popover language; dismiss mirrors openNotesPopover (Escape + click-away).
+  function openNodeMenu(card, x, y) {
+    closeNodeMenu();
+    const nodeId = card.dataset.agentId;
+    if (!nodeId) return;
+    const node = AGENTS[nodeId];
+    const frozen = !!(node && node._frozen);
+    // A 4-line snowflake glyph as a stroke SVG — matches `.menu-icon svg` (Lucide family).
+    const ice = '<span class="menu-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><line x1="12" y1="2" x2="12" y2="22"/><line x1="2" y1="12" x2="22" y2="12"/><line x1="4.6" y1="4.6" x2="19.4" y2="19.4"/><line x1="19.4" y1="4.6" x2="4.6" y2="19.4"/></svg></span>';
+    const menu = document.createElement('div');
+    menu.className = 'menu context-menu show';
+    menu.setAttribute('role', 'menu');
+    menu.setAttribute('aria-label', 'Node actions');
+    menu.innerHTML =
+      `<div class="menu-head" role="none">${escapeHtml(nodeId)}</div>`
+      + `<div class="menu-divider"></div>`
+      + `<button type="button" class="menu-item" role="menuitem">${ice}<span class="menu-label">${frozen ? 'Unfreeze' : 'Freeze output'}</span></button>`;
+    document.body.appendChild(menu);
+    // Anchor at the pointer, then clamp so a card near the right/bottom edge can't push
+    // the menu off-screen (same intent as openNotesPopover's edge-clamp).
+    const r = menu.getBoundingClientRect();
+    menu.style.left = Math.max(8, Math.min(x, window.innerWidth - r.width - 8)) + 'px';
+    menu.style.top = Math.max(8, Math.min(y, window.innerHeight - r.height - 8)) + 'px';
+    const item = menu.querySelector('.menu-item');
+    item.onclick = () => { closeNodeMenu(); toggleFreeze(nodeId, frozen); };
+    try { item.focus(); } catch { /* container handles focus */ }
+    _freezeMenuEl = menu;
+    _freezeMenuEsc = (e) => { if (e.key === 'Escape') { e.preventDefault(); closeNodeMenu(); try { card.focus(); } catch { /* card not focusable */ } } };
+    document.addEventListener('keydown', _freezeMenuEsc, true);
+    _freezeMenuOutside = (e) => { if (_freezeMenuEl && !_freezeMenuEl.contains(e.target)) closeNodeMenu(); };
+    document.addEventListener('mousedown', _freezeMenuOutside, true);
+  }
+
+  // Toggle a node's frozen state via the server (which shells `aware app freeze/unfreeze`
+  // + recompiles), then re-read the app so the badge + state repaint. api() throws on any
+  // failure (non-2xx OR in-band ok:false) with the server's plain-English message — e.g.
+  // "No output to freeze — run this node at least once first." — so one catch covers it.
+  async function toggleFreeze(nodeId, currentlyFrozen) {
+    if (!currentId) return;
+    const verb = currentlyFrozen ? 'unfreeze' : 'freeze';
+    try {
+      await api(`/api/app/${encodeURIComponent(currentId)}/${verb}`, { method: 'POST', body: JSON.stringify({ nodeId }) });
+      await loadApp(currentId); // re-read → frozen badge/state repaints
+      showToast(currentlyFrozen
+        ? 'Node unfrozen — it will run normally.'
+        : 'Output frozen — this node will replay its last result on the next run.',
+        currentlyFrozen ? 'info' : 'ok');
+    } catch (e) {
+      // Surface the real aware reason the route attached as body.reason — otherwise the friendly
+      // lead hides the actual cause. First non-empty line, capped, keeps the warn toast sane.
+      const lead = (e && e.message) || `Could not ${verb} this node.`;
+      const raw = e && e.body && typeof e.body.reason === 'string' ? e.body.reason.trim() : '';
+      const reason = raw ? (raw.split('\n').find((l) => l.trim()) || '').trim().slice(0, 200) : '';
+      showToast(reason ? `${lead} — ${reason}` : lead, 'warn');
+    }
+  }
+
+  // Right-click a node card → the Freeze/Unfreeze menu. preventDefault is scoped to cards
+  // (right-click stays normal everywhere else), and only when AWARE supports it — on an
+  // older runtime the native menu passes through, so there's no dead interaction.
+  document.addEventListener('contextmenu', (e) => {
+    const card = e.target.closest && e.target.closest('.agent-card');
+    if (!card || !awareSupportsFreeze()) return;
+    e.preventDefault();
+    openNodeMenu(card, e.clientX, e.clientY);
+  });
+
+  // Approve & bake — freezes the edited contract into the .lock, arming Run.
+  // Flushes the editor's pending debounce save first so Approve always bakes the
+  // latest in-memory edits, not a stale snapshot. api() throws on non-2xx, so
+  // any flush or bake failure surfaces through the catch as a warn toast.
+  document.getElementById('contract-editor-approve').onclick = async () => {
+    const appId = currentId;
+    if (!appId) return;
+    const btn = document.getElementById('contract-editor-approve');
+    const prev = btn.textContent;
+    btn.disabled = true; btn.textContent = '⊙ Baking…';
+    try {
+      const frameWin = document.getElementById('contract-editor-frame').contentWindow;
+      if (frameWin && typeof frameWin.flushContract === 'function') {
+        await frameWin.flushContract(); // ensure the latest edits are on the server before baking
+      }
+      await api(`/api/contract/${encodeURIComponent(appId)}/approve`, { method: 'POST' });
+      showToast('Approved — lock baked. Run is armed.', 'ok');
+    } catch (e) {
+      showToast((e && e.message) || 'Approve failed', 'warn');
+    } finally {
+      btn.disabled = false; btn.textContent = prev;
+    }
+  };
+
   // The dedicated RUN: executes the app for real (simulate:false) with the
   // current inputs, renders + caches the HTML the report node returned. The UI
   // never builds the HTML — it relays exactly what the exec node produced.
@@ -1710,14 +1908,19 @@
     });
   }
 
-  // Double-click a node on the canvas: the report node → LOAD the last report (no
-  // run); the input node → open the styled inputs dialog. Delegated + bound once;
-  // survives every renderTopology that rebuilds the cards.
+  // Double-click a node on the canvas: a node that emits an editable typed contract
+  // → open the dedicated full-window editor; the report node → LOAD the last report
+  // (no run); the input node → open the styled inputs dialog. Delegated + bound
+  // once; survives every renderTopology that rebuilds the cards.
   $topology.addEventListener('dblclick', (e) => {
     const card = e.target.closest('.agent-card');
     if (!card) return;
     const id = card.dataset.agentId;
     if (!id) return;
+    const app = currentId && apps.get(currentId);
+    const node = app && (app.nodes || []).find((n) => n.id === id);
+    const ct = window.contractTypeOf && window.contractTypeOf(node);
+    if (ct && openContractEditor(currentId, ct)) return;
     if (id === reportNodeId()) showReport(id);
     else if (id === inputNodeId()) openInputsDialog();
   });
@@ -3182,6 +3385,8 @@
   }
   let shownVersion = false;
   let loadedAppVersion = null; // the build this tab is running against (first health wins)
+  let awareRuntimeVersion = null; // installed AWARE version (from /api/health) — gates the freeze menu
+  let freezeHintAppended = false; // append the right-click-to-freeze canvas hint once, when supported
   function startHealthPoll() {
     const tick = async () => {
       let ok = false;
@@ -3224,6 +3429,15 @@
           // After the build version is stamped, reveal the relaunch-surviving what's-new
           // panel iff this is the build we just self-updated into (guarded to once).
           maybeShowWhatsNew();
+          // Track the installed AWARE runtime version so the right-click freeze menu can
+          // gate itself (needs ≥ 0.77) and the canvas hint can advertise it once available.
+          if (h && h.awareVersion) {
+            awareRuntimeVersion = h.awareVersion;
+            if (!freezeHintAppended && awareSupportsFreeze()) {
+              const ch = document.getElementById('canvas-hint');
+              if (ch) { ch.textContent += ' Right-click a node to freeze its output.'; freezeHintAppended = true; }
+            }
+          }
           const wv = document.getElementById('aware-version');
           if (wv && h && h.awareVersion) {
             const next = 'AWARE ' + h.awareVersion;