@floless/app 0.34.2 → 0.35.1

package/dist/floless-server.cjs

@@ -50822,7 +50822,7 @@ function deriveSandboxLicenseDir() {
 deriveSandboxLicenseDir();
 
 // main.ts
-var import_node_child_process8 = require("node:child_process");
+var import_node_child_process9 = require("node:child_process");
 var import_node_readline2 = require("node:readline");
 
 // index.ts
@@ -50830,7 +50830,7 @@ var import_node_url4 = require("node:url");
 var import_node_path26 = require("node:path");
 var import_node_os18 = require("node:os");
 var import_node_fs28 = require("node:fs");
-var import_node_child_process6 = require("node:child_process");
+var import_node_child_process7 = require("node:child_process");
 
 // log.mjs
 var import_node_path = require("node:path");
@@ -52856,7 +52856,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.34.2" : void 0,
+    define: true ? "0.35.1" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -52866,7 +52866,7 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.34.2" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.35.1" : void 0 });
 }
 
 // oauth-presets.ts
@@ -53948,6 +53948,42 @@ function writeTeklaApp(dir, appId, scene, teklaVersion = "2026.0") {
   return flo;
 }
 
+// tekla-version.ts
+var import_node_child_process3 = require("node:child_process");
+var import_node_util = require("node:util");
+var pexec = (0, import_node_util.promisify)(import_node_child_process3.execFile);
+var DEFAULT_TEKLA_VERSION = "2026.0";
+function parseTeklaVersionFromExePath(p) {
+  const m = /Tekla Structures[\\/]+([^\\/]+)[\\/]+bin\b/i.exec(p);
+  return m ? m[1].trim() : null;
+}
+async function detectRunningTeklaVersion() {
+  if (process.platform !== "win32") return null;
+  try {
+    const { stdout } = await pexec(
+      "powershell",
+      [
+        "-NoProfile",
+        "-NonInteractive",
+        "-Command",
+        `Get-CimInstance Win32_Process -Filter "Name='TeklaStructures.exe'" | Select-Object -First 1 -ExpandProperty ExecutablePath`
+      ],
+      { timeout: 5e3, windowsHide: true }
+    );
+    const exePath = stdout.trim();
+    if (!exePath) return null;
+    const version = parseTeklaVersionFromExePath(exePath);
+    if (!version) console.warn(`tekla-version: Tekla is running but no version parsed from "${exePath}" \u2014 baking ${DEFAULT_TEKLA_VERSION}`);
+    return version;
+  } catch (e) {
+    console.warn(`tekla-version: could not detect the running Tekla version (${e instanceof Error ? e.message : String(e)}) \u2014 baking ${DEFAULT_TEKLA_VERSION}`);
+    return null;
+  }
+}
+async function teklaVersionToBake() {
+  return await detectRunningTeklaVersion() ?? DEFAULT_TEKLA_VERSION;
+}
+
 // bom-format.ts
 var round1 = (n) => Math.round(n * 10) / 10;
 function contractToBom(contractInput) {
@@ -55187,7 +55223,7 @@ function isGatedAwareRoute(url, method) {
 }
 
 // autostart.mjs
-var import_node_child_process3 = require("node:child_process");
+var import_node_child_process4 = require("node:child_process");
 var import_node_fs22 = require("node:fs");
 var import_node_os14 = require("node:os");
 var import_node_path19 = require("node:path");
@@ -55296,7 +55332,7 @@ function currentUserId() {
 }
 function removeLegacyRunKey() {
   try {
-    (0, import_node_child_process3.execFileSync)("reg", ["delete", RUN_KEY, "/v", RUN_VALUE, "/f"], { stdio: "ignore", windowsHide: true });
+    (0, import_node_child_process4.execFileSync)("reg", ["delete", RUN_KEY, "/v", RUN_VALUE, "/f"], { stdio: "ignore", windowsHide: true });
   } catch {
   }
 }
@@ -55314,7 +55350,7 @@ function registerAutostart(exePath) {
   const tmp = (0, import_node_path19.join)((0, import_node_os14.tmpdir)(), `floless-autostart-${process.pid}-${Date.now()}.xml`);
   (0, import_node_fs22.writeFileSync)(tmp, "\uFEFF" + xml, { encoding: "utf16le" });
   try {
-    (0, import_node_child_process3.execFileSync)("schtasks", ["/Create", "/TN", TASK_NAME, "/XML", tmp, "/F"], {
+    (0, import_node_child_process4.execFileSync)("schtasks", ["/Create", "/TN", TASK_NAME, "/XML", tmp, "/F"], {
       stdio: ["ignore", "ignore", "ignore"],
       windowsHide: true
     });
@@ -55332,7 +55368,7 @@ function registerAutostart(exePath) {
 function autostartPresent() {
   if (!isWin) return false;
   try {
-    (0, import_node_child_process3.execFileSync)("schtasks", ["/query", "/tn", TASK_NAME], { stdio: "ignore", windowsHide: true });
+    (0, import_node_child_process4.execFileSync)("schtasks", ["/query", "/tn", TASK_NAME], { stdio: "ignore", windowsHide: true });
     return true;
   } catch {
     return false;
@@ -55349,14 +55385,14 @@ function ensureAutostart(exePath) {
 function unregisterAutostart() {
   if (!isWin) return;
   try {
-    (0, import_node_child_process3.execFileSync)("schtasks", ["/delete", "/tn", TASK_NAME, "/f"], { stdio: "ignore", windowsHide: true });
+    (0, import_node_child_process4.execFileSync)("schtasks", ["/delete", "/tn", TASK_NAME, "/f"], { stdio: "ignore", windowsHide: true });
   } catch {
   }
   removeLegacyRunKey();
 }
 
 // updater.ts
-var import_node_child_process4 = require("node:child_process");
+var import_node_child_process5 = require("node:child_process");
 var import_node_crypto6 = require("node:crypto");
 var import_node_fs24 = require("node:fs");
 var import_node_stream = require("node:stream");
@@ -55547,7 +55583,7 @@ async function applyUpdate(check, opts) {
   const pkg = await downloadPackage(check.asset);
   if (opts?.onBeforeApply) await opts.onBeforeApply();
   await new Promise((resolve6, reject) => {
-    const child = (0, import_node_child_process4.spawn)(exe, ["apply", "--package", pkg, "--waitPid", String(process.pid)], {
+    const child = (0, import_node_child_process5.spawn)(exe, ["apply", "--package", pkg, "--waitPid", String(process.pid)], {
       cwd: installRoot(),
       detached: true,
       stdio: "ignore",
@@ -55780,7 +55816,7 @@ function isTraceCorrupt(events) {
 }
 
 // launch.mjs
-var import_node_child_process5 = require("node:child_process");
+var import_node_child_process6 = require("node:child_process");
 var import_node_path22 = require("node:path");
 var import_node_url2 = require("node:url");
 var import_node_fs25 = require("node:fs");
@@ -55866,7 +55902,7 @@ function startServerDetached() {
   const { cmd, args, shell } = resolveServerStart();
   rotateLog();
   const fd = openLogFd();
-  const child = (0, import_node_child_process5.spawn)(cmd, args, {
+  const child = (0, import_node_child_process6.spawn)(cmd, args, {
     cwd: __dirname2,
     detached: true,
     stdio: fd == null ? "ignore" : ["ignore", fd, fd],
@@ -55876,13 +55912,13 @@ function startServerDetached() {
   child.unref();
 }
 function openBrowser2(url) {
-  if (isWin2) (0, import_node_child_process5.spawn)("cmd", ["/c", "start", "", url], { windowsHide: true }).unref();
-  else (0, import_node_child_process5.spawn)(process.platform === "darwin" ? "open" : "xdg-open", [url], { detached: true }).unref();
+  if (isWin2) (0, import_node_child_process6.spawn)("cmd", ["/c", "start", "", url], { windowsHide: true }).unref();
+  else (0, import_node_child_process6.spawn)(process.platform === "darwin" ? "open" : "xdg-open", [url], { detached: true }).unref();
 }
 function stopServer() {
   if (!isWin2) {
     try {
-      (0, import_node_child_process5.execSync)(`bash -lc "fuser -k ${PORT}/tcp"`, { stdio: "ignore" });
+      (0, import_node_child_process6.execSync)(`bash -lc "fuser -k ${PORT}/tcp"`, { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -55890,7 +55926,7 @@ function stopServer() {
   }
   try {
     const ps = `$p = Get-NetTCPConnection -LocalPort ${PORT} -State Listen -ErrorAction SilentlyContinue | Select-Object -Expand OwningProcess -Unique; if ($p) { $p | ForEach-Object { taskkill /PID $_ /T /F } } else { exit 9 }`;
-    (0, import_node_child_process5.execSync)(`powershell -NoProfile -Command "${ps}"`, { stdio: "ignore" });
+    (0, import_node_child_process6.execSync)(`powershell -NoProfile -Command "${ps}"`, { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -55942,7 +55978,7 @@ async function cmdSupervise() {
   if (isSeaChannel && !process.env[SUPERVISE_RESPAWN_ENV]) {
     rotateLog();
     const fd = openLogFd();
-    const child = (0, import_node_child_process5.spawn)(process.execPath, ["--supervise"], {
+    const child = (0, import_node_child_process6.spawn)(process.execPath, ["--supervise"], {
       detached: true,
       stdio: fd == null ? "ignore" : ["ignore", fd, fd],
       windowsHide: true,
@@ -55997,7 +56033,7 @@ function enumerateProcesses() {
   if (!isWin2) return [];
   try {
     const ps = "Get-CimInstance Win32_Process | Select-Object ProcessId,CommandLine | ConvertTo-Json -Compress";
-    const out = (0, import_node_child_process5.execSync)(`powershell -NoProfile -Command "${ps}"`, {
+    const out = (0, import_node_child_process6.execSync)(`powershell -NoProfile -Command "${ps}"`, {
       encoding: "utf8",
       windowsHide: true,
       maxBuffer: 16 * 1024 * 1024
@@ -56020,7 +56056,7 @@ function killSupervisor({ tree = true } = {}) {
   for (const pid of pids) {
     log(`stopping supervisor (pid ${pid})\u2026`);
     try {
-      (0, import_node_child_process5.execFileSync)("taskkill", taskkillArgs(pid, { tree }), { stdio: "ignore", windowsHide: true });
+      (0, import_node_child_process6.execFileSync)("taskkill", taskkillArgs(pid, { tree }), { stdio: "ignore", windowsHide: true });
     } catch {
     }
   }
@@ -56111,11 +56147,11 @@ async function cmdUpdate() {
 function removeRegistryFootprint() {
   if (!isWin2) return;
   try {
-    (0, import_node_child_process5.execFileSync)("reg", ["delete", RUN_KEY, "/v", RUN_VALUE, "/f"], { stdio: "ignore", windowsHide: true });
+    (0, import_node_child_process6.execFileSync)("reg", ["delete", RUN_KEY, "/v", RUN_VALUE, "/f"], { stdio: "ignore", windowsHide: true });
   } catch {
   }
   try {
-    (0, import_node_child_process5.execFileSync)("reg", ["delete", PROTOCOL_KEY, "/f"], { stdio: "ignore", windowsHide: true });
+    (0, import_node_child_process6.execFileSync)("reg", ["delete", PROTOCOL_KEY, "/f"], { stdio: "ignore", windowsHide: true });
   } catch {
   }
 }
@@ -56141,13 +56177,13 @@ async function cmdUninstall(flags = {}) {
   if (removeAware) {
     log("removing the AWARE runtime \u2014 this will affect ANY other tool that uses @aware-aeco/cli.");
     try {
-      (0, import_node_child_process5.execSync)("npm uninstall -g @aware-aeco/cli", { stdio: "inherit", shell: isWin2 });
+      (0, import_node_child_process6.execSync)("npm uninstall -g @aware-aeco/cli", { stdio: "inherit", shell: isWin2 });
     } catch {
       log('warning: "npm uninstall -g @aware-aeco/cli" failed \u2014 see the output above.');
     }
     let lsJson = "";
     try {
-      lsJson = (0, import_node_child_process5.execSync)("npm ls -g @aware-aeco/cli --depth=0 --json", {
+      lsJson = (0, import_node_child_process6.execSync)("npm ls -g @aware-aeco/cli --depth=0 --json", {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         shell: isWin2
@@ -58226,7 +58262,7 @@ async function startServer() {
   const isWin3 = process.platform === "win32";
   const has = (cmd) => {
     try {
-      (0, import_node_child_process6.execFileSync)(isWin3 ? "where" : "which", [cmd], { stdio: "ignore", windowsHide: true, timeout: 5e3 });
+      (0, import_node_child_process7.execFileSync)(isWin3 ? "where" : "which", [cmd], { stdio: "ignore", windowsHide: true, timeout: 5e3 });
       return true;
     } catch {
       return false;
@@ -58235,7 +58271,7 @@ async function startServer() {
   function installAwareGlobal(spec, onLine = () => {
   }) {
     return new Promise((resolve6, reject) => {
-      const child = (0, import_node_child_process6.spawn)("npm", ["i", "-g", `@aware-aeco/cli@${spec}`], { shell: isWin3, windowsHide: true });
+      const child = (0, import_node_child_process7.spawn)("npm", ["i", "-g", `@aware-aeco/cli@${spec}`], { shell: isWin3, windowsHide: true });
       let stderrTail = "";
       let combinedTail = "";
       const tail = (buf, s) => (buf + s).slice(-4e3);
@@ -58625,7 +58661,14 @@ async function startServer() {
         const first = v.errors[0];
         return reply.status(400).send({ ok: false, error: `contract failed schema validation \u2014 ${first ? `${first.path}: ${first.message}` : "invalid"}` });
       }
-      const target = typeof req.body?.target === "number" ? req.body.target : 70;
+      const docTarget = doc2 && typeof doc2 === "object" ? doc2.target_confidence : void 0;
+      let appDefault = 70;
+      try {
+        const inp = readApp(req.params.appId).inputs.find((i) => i.name === "target_confidence");
+        if (typeof inp?.default === "number") appDefault = inp.default;
+      } catch {
+      }
+      const target = typeof req.body?.target === "number" ? req.body.target : typeof docTarget === "number" ? docTarget : appDefault;
       const result = scoreContract2(doc2);
       const meetsTarget = result.score != null && result.score >= target;
       return {
@@ -58637,6 +58680,19 @@ async function startServer() {
       };
     }
   );
+  app.post(
+    "/api/contract/:appId/scene",
+    async (req, reply) => {
+      const doc2 = req.body && "contract" in req.body ? req.body.contract : readContract(req.params.appId);
+      if (doc2 == null) return reply.status(404).send({ ok: false, error: "no contract to render" });
+      const v = validateSteelTakeoff(doc2);
+      if (!v.valid) {
+        const first = v.errors[0];
+        return reply.status(400).send({ ok: false, error: `contract failed schema validation \u2014 ${first ? `${first.path}: ${first.message}` : "invalid"}` });
+      }
+      return { ok: true, ...contractToScene(doc2) };
+    }
+  );
   function awareStderr(e) {
     if (e instanceof AwareError && e.detail && typeof e.detail === "object") {
       const s = e.detail.stderr;
@@ -58732,9 +58788,10 @@ async function startServer() {
       return reply.status(422).send({ ok: false, error: "no resolvable members to bake \u2014 every member is an RFI (no AISC size yet)", skipped });
     }
     const companionId = `${req.params.appId}-tekla`;
+    const teklaVersion = await teklaVersionToBake();
     let flo;
     try {
-      flo = writeTeklaApp(appPath(companionId), companionId, scene);
+      flo = writeTeklaApp(appPath(companionId), companionId, scene, teklaVersion);
     } catch (e) {
       app.log.error({ companionId, err: e instanceof Error ? e.message : e }, "export-tekla: companion app write failed");
       return reply.status(500).send({ ok: false, error: `could not write the Tekla companion app: ${e instanceof Error ? e.message : "write error"}` });
@@ -59526,10 +59583,10 @@ async function startServer() {
 }
 
 // protocol.ts
-var import_node_child_process7 = require("node:child_process");
+var import_node_child_process8 = require("node:child_process");
 var BASE = PROTOCOL_KEY;
 function reg(args) {
-  (0, import_node_child_process7.execFileSync)("reg", args, { stdio: "ignore", windowsHide: true });
+  (0, import_node_child_process8.execFileSync)("reg", args, { stdio: "ignore", windowsHide: true });
 }
 function registerProtocol(exePath) {
   if (process.platform !== "win32") return;
@@ -59569,13 +59626,13 @@ async function removeAwarePerDecision(removeAwareFlag, prompt) {
   );
   const shell = process.platform === "win32" ? process.env.ComSpec || "cmd.exe" : "/bin/sh";
   try {
-    (0, import_node_child_process8.execSync)("npm uninstall -g @aware-aeco/cli", { stdio: "inherit", shell });
+    (0, import_node_child_process9.execSync)("npm uninstall -g @aware-aeco/cli", { stdio: "inherit", shell });
   } catch {
     process.stdout.write('floless: warning: "npm uninstall -g @aware-aeco/cli" failed \u2014 see the output above.\n');
   }
   let lsJson = "";
   try {
-    lsJson = (0, import_node_child_process8.execSync)("npm ls -g @aware-aeco/cli --depth=0 --json", {
+    lsJson = (0, import_node_child_process9.execSync)("npm ls -g @aware-aeco/cli --depth=0 --json", {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       shell

package/dist/schemas/steel.takeoff.v1.schema.json

@@ -8,6 +8,7 @@
   "additionalProperties": true,
   "properties": {
     "type": { "const": "steel.takeoff/v1", "description": "Renderer-registry discriminator." },
+    "target_confidence": { "type": "number", "minimum": 0, "maximum": 100, "description": "User's per-read confidence target (%); overrides the app's target_confidence input default. The editor chip and the /score endpoint use it." },
     "active": { "type": "integer", "description": "Index into plans of the active sheet." },
     "palette": { "type": "array", "items": { "type": "string" }, "description": "Default per-index profile colours." },
     "weights": { "type": "object", "additionalProperties": { "type": ["number", "null"] }, "description": "profile -> plf (pounds per linear foot), from the AISC lookup. null for an unresolved profile (e.g. an unsized moment-frame mark) that has no weight yet." },

package/dist/skills/floless-app-steel-takeoff/SKILL.md

@@ -117,9 +117,12 @@ Follow the methodology condensed here (full detail + every gotcha in
 
 ### 3. Honor `target_confidence` — score, then LOOP to the goal
 
-Read the app's `target_confidence` input (default 70). The confidence score is a **deterministic
-function of observable evidence** — not a model self-report — so you measure it with the server,
-never by eyeballing. Per-member bands (full method in
+Read the app's `target_confidence` input (default 70). The user may also set a **per-read override**
+via the editor (stored as a top-level `target_confidence` on the contract); it wins over the input
+default. On a **re-read / rebake**, preserve any `target_confidence` already on the existing contract
+(carry it into the new draft) so the user's chosen target isn't reset. The confidence score is a
+**deterministic function of observable evidence** — not a model self-report — so you measure it with
+the server, never by eyeballing. Per-member bands (full method in
 `docs/superpowers/specs/2026-06-20-steel-takeoff-confidence-report.md`):
 
 - **Verified (1.0)** — human-confirmed. **High (0.9)** — resolved from drawing evidence, no contradiction.

package/dist/skills/floless-app-workflows/references/dev-server-and-run-trace.md

@@ -88,8 +88,10 @@ machine via a `self_test:true` watch fixture — no Tekla, no `--simulate`:
 - **The installed SEA server usually already holds :4317** (and it 404s `/api/status` — different
   build). Don't fight it: `index.ts` honors `PORT`, so run the dev server on a free port —
   `PORT=4318 FLOLESS_LICENSE_DIR="$LOCALAPPDATA/FlolessApp-data" npx tsx main.ts --serve` (from
-  `server/`, background). Without the license dir it serves the **sign-in gate** (no `#routines-btn`)
-  — assert `document.getElementById('routines-btn')` exists before driving the panel.
+  `server/`, background). Without the license dir it serves the **sign-in gate** (the workspace
+  chrome is absent) — assert a stable workspace element like `document.getElementById('run-btn')`
+  (or `#menu-btn`) exists before driving the UI. (Don't probe `#routines-btn`/`#browse-btn` —
+  those header buttons moved into the ≡ menu in #149.)
 - **The Playwright MCP browser is flaky/locked here** ("Browser is already in use…"). A **standalone
   Node script is more reliable**: `playwright-core` resolves at
   `C:/Users/Pawel/AppData/Roaming/npm/node_modules/@playwright/cli/node_modules/playwright-core`;

package/dist/web/app.css

@@ -115,7 +115,7 @@
        reachable by scrolling), at viewport widths narrower than the design (#53). */
     min-width: 0;
   }
-  /* Brand + view-toggle stay full size; .controls is the shrink sink instead. */
+  /* The ≡ menu + brand stay full size; .controls is the shrink sink instead. */
   .header-left { display: flex; align-items: center; gap: 10px; flex-shrink: 0; }
   .brand { display: flex; align-items: center; gap: 12px; }
   .brand .mark {
@@ -169,10 +169,8 @@
     outline: 2px solid var(--accent);
     outline-offset: 2px;
   }
-  /* Agents = utility (opens a reference modal, not a workflow step): ghost button,
-     quietest tier. Label kept — an unlabeled icon would be an unclear affordance. */
-  #browse-btn { background: transparent; border-color: transparent; color: var(--text-dim); }
-  #browse-btn:hover { background: var(--surface-2); border-color: var(--border-strong); color: var(--text); }
+  /* (The #browse-btn "Agents" toolbar button moved into the ≡ menu in #149; its
+     ghost-tier styles were removed with it.) */
   /* Simulate mirrors Compile (outline-accent tier) — a consistent secondary
      sibling; Run stays the only filled (primary) button, so the two outline
      buttons reading alike is the correct hierarchy, not a lost signal. */
@@ -1490,10 +1488,8 @@
   #confirm-dont-save:hover { color: var(--err); border-color: var(--err); background: color-mix(in srgb, var(--err) 10%, transparent); }
 
   /* ========== ROUTINES ========== */
-  /* Header entry point: same ghost tier as #browse-btn (Agents) — a utility that
-     opens a management modal, not a workflow step. */
-  #routines-btn { background: transparent; border-color: transparent; color: var(--text-dim); }
-  #routines-btn:hover { background: var(--surface-2); border-color: var(--border-strong); color: var(--text); }
+  /* (The #routines-btn header button moved into the ≡ menu in #149; the panel is
+     opened from there and via Ctrl+R, so its toolbar styles were removed.) */
 
   .modal.routines { width: 600px; max-width: 92vw; max-height: 86vh; display: flex; flex-direction: column; }
   .rtn-quota { font-size: 11px; color: var(--text-dim); margin-bottom: 10px; flex: 0 0 auto; }
@@ -1787,6 +1783,21 @@
     transition: all 0.15s;
     margin-right: 10px;
     flex-shrink: 0;
+    position: relative; /* anchors the dashboard-updated badge below */
+  }
+  /* "Dashboard updated" badge — panels.js lights this when dashboard panels change while
+     the user is on Canvas, so the signal stays visible without opening the ≡ menu (#149,
+     the old Dashboard-toggle dot's new home). Cleared when the dashboard is viewed. */
+  .hamburger.has-dash-update::after {
+    content: "";
+    position: absolute;
+    top: 3px;
+    right: 3px;
+    width: 6px;
+    height: 6px;
+    border-radius: 50%;
+    background: var(--accent);
+    box-shadow: 0 0 0 2px var(--bg);
   }
   .hamburger:hover {
     border-color: var(--accent-dim);
@@ -2881,20 +2892,10 @@ body {
    shipped UI. No new colors, fonts, or aesthetics here — composition only.
    ========================================================================== */
 
-/* Header view switch (Canvas | Dashboard) — compact segmented control next to
-   the brand; reuses the .rtn-mode pill vocabulary at header scale. */
-.view-toggle { display: inline-flex; gap: 4px; margin-left: 16px; }
-.view-btn {
-  background: var(--surface-2); border: 1px solid var(--border-strong);
-  color: var(--text-dim); font-size: 10.5px; text-transform: uppercase;
-  letter-spacing: 0.1em; padding: 4px 12px; border-radius: 6px; cursor: pointer;
-  transition: color 0.15s, border-color 0.15s, background 0.15s;
-}
-.view-btn:hover { color: var(--text); border-color: var(--accent-dim); }
-.view-btn.active { color: var(--accent); border-color: var(--accent-dim); background: var(--accent-soft); }
-.view-btn:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
-/* "Dashboard updated" dot — lit when panels changed while the user was on Canvas. */
-.view-dot { color: var(--accent); font-size: 8px; vertical-align: 2px; margin-left: 5px; }
+/* The Canvas|Dashboard segmented toggle moved into the ≡ menu in #149; its styles are
+   gone. The "dashboard updated" dot lives on now: in the menu's view-switch item (.view-dot)
+   and as the ≡ hamburger badge (.hamburger.has-dash-update, defined above). */
+.view-dot { color: var(--accent); font-size: 8px; vertical-align: 2px; margin-left: auto; padding-left: 6px; }
 .view-dot[hidden] { display: none; }
 
 /* Customized pill — present only while custom panels exist; opens the ext menu. */

package/dist/web/app.js

@@ -50,7 +50,6 @@ function saveCollapse() {
 const $app          = document.getElementById('app');
 const $promptSel    = document.getElementById('prompt-select');
 const $runBtn       = document.getElementById('run-btn');
-const $browseBtn    = document.getElementById('browse-btn');
 const $messages     = document.getElementById('messages');
 const $topology     = document.getElementById('topology');
 const $tabs         = document.getElementById('tabs');
@@ -952,8 +951,6 @@ $runBtn.onclick = async () => {
   appendNarration(`Execution complete · ${nodeIds(p).length} steps fired · check the <strong>Execution</strong> tab on each agent for the full trace.`);
 };
 
-$browseBtn.onclick = openLibrary;
-
 document.querySelectorAll('.panel-toggle').forEach(btn => {
   btn.onclick = () => toggleCollapse(btn.dataset.side);
 });
@@ -1050,6 +1047,7 @@ function handleMenuAction(action) {
     case 'save-as':      doSaveAs(); break;
     case 'find':         openFind(); break;
     case 'integrations': openIntegrations(); break;
+    case 'agents':       openLibrary(); break;
     case 'routines': openRoutines(); break;
     case 'report-issue': openReportIssue(); break;
     case 'fullscreen': toggleFullscreen(); break;
@@ -1546,6 +1544,12 @@ document.addEventListener('keydown', (e) => {
   if (cmd && !e.shiftKey && e.key.toLowerCase() === 's') { e.preventDefault(); doSave(); return; }
   if (cmd && e.key.toLowerCase() === 'f') { e.preventDefault(); openFind(); return; }
   if (cmd && e.key.toLowerCase() === 'i') { e.preventDefault(); openIntegrations(); return; }
+  // Agents and Routines — the panels reachable from the ≡ menu since #149 moved their
+  // toolbar buttons there. Use the same Ctrl-or-Cmd modifier (`cmd`) as Ctrl+O/S/F/I
+  // above, so on macOS these are Cmd+G/Cmd+R. The !e.shiftKey guard leaves the Shift+
+  // hard-reload (Ctrl/Cmd+Shift+R) untouched. Both override a browser default, as O/S do.
+  if (cmd && !e.shiftKey && e.key.toLowerCase() === 'g') { e.preventDefault(); openLibrary(); return; }
+  if (cmd && !e.shiftKey && e.key.toLowerCase() === 'r') { e.preventDefault(); openRoutines(); return; }
   if (cmd && (e.key === '=' || e.key === '+')) { e.preventDefault(); zoomBy(+1); return; }
   if (cmd && e.key === '-') { e.preventDefault(); zoomBy(-1); return; }
   if (cmd && e.key === '0') { e.preventDefault(); resetView(); autoFit = false; return; }

package/dist/web/aware.js

@@ -1848,8 +1848,16 @@
   // `fields`: [{name,label,type,value,placeholder,multiline}]. Resolves with a
   // { name: value } object on Save (Enter), or null on Cancel (Esc / backdrop).
   const $formModal = document.getElementById('form-modal');
+  // The styled modal is a single shared #form-modal. Opening a second one while one is
+  // already up would clobber the first's button/keydown handlers and strand it (#148).
+  // Refuse re-entry: the second caller resolves null (treated as "cancelled") and aborts,
+  // and warns so the drop is observable rather than a silent no-op. The flag is set at the
+  // END of setup (not here) so a synchronous setup error can't latch it shut for the whole
+  // session; done() clears it on every close.
+  let _formModalOpen = false;
   function formModal({ title, sub = '', fields, okLabel = 'Save', danger = false }) {
     return new Promise((resolve) => {
+      if (_formModalOpen) { console.warn('formModal: a modal is already open — refusing re-entry'); resolve(null); return; }
       const $title = document.getElementById('form-modal-title');
       const $sub = document.getElementById('form-modal-sub');
       const $body = document.getElementById('form-modal-body');
@@ -2017,6 +2025,7 @@
         return out;
       };
       const done = (result) => {
+        _formModalOpen = false;
         hideModal($formModal);
         $ok.onclick = null; $cancel.onclick = null; $formModal.onclick = null; $formModal.onkeydown = null; $body.onpaste = null;
         $ok.classList.remove('danger'); $ok.classList.add('primary'); $cancel.classList.remove('primary'); // reset chrome for the next caller
@@ -2032,6 +2041,10 @@
         if (e.key === 'Escape') { e.preventDefault(); done(null); }
         else if (e.key === 'Enter' && !danger && e.target.tagName !== 'TEXTAREA') { e.preventDefault(); done(collect()); }
       };
+      // Setup succeeded and the modal is shown — mark it open now. Setting it here (not
+      // before the synchronous setup above) means a setup throw can't latch the guard for
+      // the whole session; done() clears it on close.
+      _formModalOpen = true;
     });
   }
 
@@ -2689,6 +2702,11 @@
   // installed build exists, show a footer pill → click opens the release-notes
   // popover → Update now → POST /api/update/apply, which downloads + relaunches into
   // the new version. Hidden in dev/npm (supported:false).
+  // Mutual lock across the two footer update flows (#148). A floless self-update downloads
+  // + relaunches the app; an AWARE upgrade reinstalls @aware-aeco/cli in place. Running both
+  // at once can relaunch mid-install or strand a pill on a phantom "↑ Updating…". Only one
+  // update may be in flight at a time — held from the confirm dialog through to completion.
+  let _updateApplying = null; // 'app' | 'aware' | null
   const $appUpdate = document.getElementById('app-update');
   let _appUpdateRecoveryTimer = null; // cleared before each new apply attempt
   // The apply body, extracted so the popover's "Update now" can drive it with the
@@ -2704,10 +2722,14 @@
       showToast('Update in your terminal — ' + cmd, 'info');
       return;
     }
-    // desktop (Velopack): one-click download + relaunch
+    // desktop (Velopack): one-click download + relaunch. Refuse to start while another
+    // update (or this one) is already in flight, so a back-to-back click can't drive two
+    // updates against the shared confirm modal (#148).
+    if (_updateApplying) { showToast('An update is already in progress — please wait for it to complete.', 'info'); return; }
+    _updateApplying = 'app';
     const v = version || '';
     const go = await formModal({ title: 'Update and relaunch', sub: 'FloLess will download v' + v + ', close, and relaunch into the new version.', fields: [], okLabel: 'Update now' });
-    if (!go) return;
+    if (!go) { _updateApplying = null; return; }
     // Record the pending version so the new build's first paint can reveal the
     // what's-new panel (survives the relaunch via localStorage; cleared once shown).
     try { localStorage.setItem('floless.whatsNew.pending', v); } catch { /* private mode */ }
@@ -2727,6 +2749,7 @@
         _appUpdateRecoveryTimer = null;
         if ($appUpdate && $appUpdate.disabled) {
           $appUpdate.disabled = false;
+          _updateApplying = null; // relaunch never happened — release the lock so retry works
           $appUpdate.textContent = '↑ Relaunch failed — retry';
           try { localStorage.removeItem('floless.whatsNew.pending'); } catch { /* private mode */ }
           refreshUpdate(); // re-poll so the pill state reflects reality, same as catch path
@@ -2734,6 +2757,7 @@
       }, 90_000);
     } catch (e) {
       $appUpdate.disabled = false;
+      _updateApplying = null;
       try { localStorage.removeItem('floless.whatsNew.pending'); } catch { /* private mode */ }
       showToast('Update failed — ' + String((e && e.message) || e).slice(0, 80), 'warn');
       refreshUpdate();
@@ -2808,9 +2832,13 @@
   // affordance and shows a brief "installed" confirmation before the pill hides.
   async function applyAwareUpdate(version) {
     if (!$awareUpdate) return;
+    // One update at a time — see _updateApplying (#148). AWARE stays open on success, so the
+    // lock is released in every terminal path below (success, cancel, error).
+    if (_updateApplying) { showToast('An update is already in progress — please wait for it to complete.', 'info'); return; }
+    _updateApplying = 'aware';
     const v = version || '';
     const go = await formModal({ title: 'Upgrade AWARE runtime', sub: 'Reinstalls @aware-aeco/cli to v' + v + ' in place. The app stays open — the version updates automatically when the install finishes.', fields: [], okLabel: 'Upgrade now' });
-    if (!go) return;
+    if (!go) { _updateApplying = null; return; }
     $awareUpdate.disabled = true;
     $awareUpdate.textContent = '↑ Upgrading…';
     try {
@@ -2820,6 +2848,7 @@
       if (!r.ok || !d.ok) throw new Error(d.error || 'aware upgrade failed');
       // Success is silent: the pill disappears and the AWARE version re-stamps live.
       $awareUpdate.disabled = false;
+      _updateApplying = null; // AWARE stays open — release the lock so the app pill can update
       const wv = document.getElementById('aware-version');
       if (wv && d.version) {
         wv.textContent = 'AWARE ' + d.version;
@@ -2836,6 +2865,7 @@
       setTimeout(() => { $awareUpdate.hidden = true; refreshAwareUpdate(); }, 2000);
     } catch (e) {
       $awareUpdate.disabled = false;
+      _updateApplying = null;
       const msg = (e && e.name === 'TimeoutError')
         ? 'AWARE upgrade is taking a while — it may still be installing; the version updates when it finishes'
         : 'AWARE upgrade failed — ' + String((e && e.message) || e).slice(0, 80);
@@ -5253,7 +5283,8 @@
   };
 
   // Wiring (the modal elements are static in index.html, present when this runs).
-  document.getElementById('routines-btn').onclick = () => openRoutines();
+  // The header "Routines" button moved into the ≡ menu (#149); it's opened from there
+  // (data-action="routines") and via Ctrl+R, so there's no toolbar button to wire here.
   document.getElementById('routines-close').onclick = () => hideModal($routinesModal);
   onBackdropDismiss($routinesModal, () => hideModal($routinesModal));
   document.getElementById('rtn-add').onclick = () => openRoutineEdit(null);
@@ -5455,9 +5486,20 @@
   // app.js already stored the ORIGINAL functions as .onclick/.oninput before we
   // reassigned the globals; rebind via arrows so they resolve our versions at
   // call-time (otherwise Save/library-search silently run the demo code).
-  $browseBtn.onclick = () => openLibrary();
+  // The header "⊞ Agents" button moved into the ≡ menu (#149) — openLibrary is now
+  // driven from there (data-action="agents") and via Ctrl+G, so no toolbar button to bind.
   $libSearch.oninput = () => renderLibrary();
 
+  // One-time hint: the Agents/Routines buttons moved into the ≡ menu (#149). Fire once
+  // so existing users (muscle memory) and new users both learn where they are + the
+  // shortcuts. Gated by localStorage like the what's-new panel; private mode → skip.
+  try {
+    if (!localStorage.getItem('floless.hint.menuMoved')) {
+      localStorage.setItem('floless.hint.menuMoved', '1');
+      showToast('Agents and Routines live in the ≡ menu — press Ctrl+G or Ctrl+R to open them.', 'info');
+    }
+  } catch { /* private mode — skip the hint */ }
+
   // Agent Library two-tab wiring (Installed | Available). The Available tab is
   // lazy-loaded on first switch (see switchLibTab).
   const $libTabs = document.getElementById('lib-tabs');