@floless/app 0.42.0 → 0.44.0

package/dist/floless-server.cjs

@@ -5489,7 +5489,7 @@ var require_thread_stream = __commonJS({
     var { version } = require_package();
     var { EventEmitter: EventEmitter2 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join28 } = require("path");
+    var { join: join29 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -5540,7 +5540,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join28(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join29(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         name: opts.workerOpts?.name || "thread-stream",
@@ -6006,10 +6006,10 @@ var require_transport = __commonJS({
   "node_modules/pino/lib/transport.js"(exports2, module2) {
     "use strict";
     var { createRequire: createRequire4 } = require("module");
-    var { existsSync: existsSync24 } = require("node:fs");
+    var { existsSync: existsSync25 } = require("node:fs");
     var getCallers = require_caller();
-    var { join: join28, isAbsolute: isAbsolute2, sep: sep4 } = require("node:path");
-    var { fileURLToPath: fileURLToPath5 } = require("node:url");
+    var { join: join29, isAbsolute: isAbsolute2, sep: sep4 } = require("node:path");
+    var { fileURLToPath: fileURLToPath6 } = require("node:url");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -6075,12 +6075,12 @@ var require_transport = __commonJS({
       let path = unquoted;
       if (path.startsWith("file://")) {
         try {
-          path = fileURLToPath5(path);
+          path = fileURLToPath6(path);
         } catch {
           return false;
         }
       }
-      return isAbsolute2(path) && !existsSync24(path);
+      return isAbsolute2(path) && !existsSync25(path);
     }
     function stripQuotes(value) {
       const first = value[0];
@@ -6161,7 +6161,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join28(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join29(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -6179,7 +6179,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline2) {
-        target = bundlerOverrides["pino-worker"] || join28(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join29(__dirname, "worker.js");
         options.pipelines = [pipeline2.map((dest) => {
           return {
             ...dest,
@@ -6202,7 +6202,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join28(__dirname, "..", "file.js");
+          return join29(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -7182,7 +7182,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join28 = ",";
+            let join29 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -7196,7 +7196,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join28 = `,
+                join29 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -7204,13 +7204,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join28;
+                res += join29;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join28}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join29}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -7231,7 +7231,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join28 = `,
+              join29 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -7245,13 +7245,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join28;
+                separator = join29;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join28;
+              separator = join29;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -7292,7 +7292,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join28 = ",";
+            let join29 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -7305,7 +7305,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join28 = `,
+                join29 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -7313,13 +7313,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join28;
+                res += join29;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join28}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join29}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -7332,7 +7332,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join28 = `,
+              join29 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -7341,7 +7341,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join28;
+                separator = join29;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -7399,20 +7399,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join29 = `,
+              const join30 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join29;
+                res2 += join30;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join29}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join30}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -7428,16 +7428,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join28 = `,
+            const join29 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join28, maximumBreadth);
+              res += stringifyTypedArray(value, join29, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join28;
+              separator = join29;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -7448,13 +7448,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join28;
+                separator = join29;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join28;
+              separator = join29;
             }
             if (separator !== "") {
               res = `
@@ -41991,7 +41991,7 @@ var require_send = __commonJS({
     var { parseTokenList } = require_parseTokenList();
     var { createHttpError } = require_createHttpError();
     var extname2 = path.extname;
-    var join28 = path.join;
+    var join29 = path.join;
     var normalize2 = path.normalize;
     var resolve6 = path.resolve;
     var sep4 = path.sep;
@@ -42078,7 +42078,7 @@ var require_send = __commonJS({
           return { statusCode: 403 };
         }
         parts = path2.split(sep4);
-        path2 = normalize2(join28(root, path2));
+        path2 = normalize2(join29(root, path2));
       } else {
         if (UP_PATH_REGEXP.test(path2)) {
           debug('malicious path "%s"', path2);
@@ -42361,7 +42361,7 @@ var require_send = __commonJS({
       let err;
       for (let i = 0; i < options.index.length; i++) {
         const index = options.index[i];
-        const p = join28(path2, index);
+        const p = join29(path2, index);
         const { error, stat: stat4 } = await tryStat(p);
         if (error) {
           err = error;
@@ -43011,7 +43011,7 @@ var require_static = __commonJS({
   "node_modules/@fastify/static/index.js"(exports2, module2) {
     "use strict";
     var path = require("node:path");
-    var { fileURLToPath: fileURLToPath5 } = require("node:url");
+    var { fileURLToPath: fileURLToPath6 } = require("node:url");
     var { statSync: statSync8 } = require("node:fs");
     var { glob } = require_commonjs6();
     var fp = require_plugin2();
@@ -43145,8 +43145,8 @@ var require_static = __commonJS({
               }
             }
           }
-          for (const [dirname11, rootPath] of indexDirs.entries()) {
-            const pathname = dirname11 + (dirname11.endsWith("/") ? "" : "/");
+          for (const [dirname12, rootPath] of indexDirs.entries()) {
+            const pathname = dirname12 + (dirname12.endsWith("/") ? "" : "/");
             const file = "/" + pathname.replace(prefix, "");
             setUpHeadAndGet(routeOpts, pathname, file, rootPath);
             if (opts.redirect === true) {
@@ -43330,13 +43330,13 @@ var require_static = __commonJS({
         return root;
       }
       if (root instanceof URL && root.protocol === "file:") {
-        return fileURLToPath5(root);
+        return fileURLToPath6(root);
       }
       if (Array.isArray(root)) {
         const result = [];
         for (let i = 0, il = root.length; i < il; ++i) {
           if (root[i] instanceof URL && root[i].protocol === "file:") {
-            result.push(fileURLToPath5(root[i]));
+            result.push(fileURLToPath6(root[i]));
           } else {
             result.push(root[i]);
           }
@@ -50826,10 +50826,10 @@ var import_node_child_process9 = require("node:child_process");
 var import_node_readline2 = require("node:readline");
 
 // index.ts
-var import_node_url4 = require("node:url");
-var import_node_path26 = require("node:path");
-var import_node_os18 = require("node:os");
-var import_node_fs28 = require("node:fs");
+var import_node_url5 = require("node:url");
+var import_node_path27 = require("node:path");
+var import_node_os19 = require("node:os");
+var import_node_fs29 = require("node:fs");
 var import_node_child_process7 = require("node:child_process");
 
 // log.mjs
@@ -52856,7 +52856,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.42.0" : void 0,
+    define: true ? "0.44.0" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -52866,14 +52866,111 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.42.0" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.44.0" : void 0 });
 }
 
-// oauth-presets.ts
+// workflow-update.ts
+var import_node_fs8 = require("node:fs");
 var import_node_os7 = require("node:os");
 var import_node_path7 = require("node:path");
+var import_node_url = require("node:url");
+var import_yaml2 = __toESM(require_dist6(), 1);
+var here = (0, import_node_path7.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
+function compareSemver(a, b) {
+  const pa = String(a).split(".");
+  const pb = String(b).split(".");
+  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+    const na = Number.parseInt(pa[i] ?? "0", 10) || 0;
+    const nb = Number.parseInt(pb[i] ?? "0", 10) || 0;
+    if (na !== nb) return na > nb ? 1 : -1;
+  }
+  return 0;
+}
+function changelogSince(changelog, installed) {
+  return (changelog ?? []).filter((e) => e && compareSemver(String(e.version), installed) > 0);
+}
+function detectUpdates(installed, templates) {
+  const out = [];
+  for (const t of templates) {
+    if (t.publisher !== "floless") continue;
+    const iv = installed[t.id];
+    if (iv == null) continue;
+    if (compareSemver(t.version, iv) <= 0) continue;
+    out.push({
+      id: t.id,
+      installed: iv,
+      available: t.version,
+      module: t.module,
+      changelog: changelogSince(t.changelog, iv)
+    });
+  }
+  return out;
+}
+function readTemplateMeta(path) {
+  const doc2 = (0, import_yaml2.parse)((0, import_node_fs8.readFileSync)(path, "utf8")) ?? {};
+  return {
+    id: String(doc2.app ?? ""),
+    version: doc2.version != null ? String(doc2.version) : "0.0.0",
+    publisher: typeof doc2.publisher === "string" ? doc2.publisher : void 0,
+    module: typeof doc2.module === "string" ? doc2.module : void 0,
+    changelog: Array.isArray(doc2.changelog) ? doc2.changelog : void 0,
+    path
+  };
+}
+function templatePaths(roots) {
+  const envDir = process.env.FLOLESS_TEMPLATES_DIR;
+  const flatDirs = roots ?? [
+    ...envDir ? [envDir] : [],
+    (0, import_node_path7.join)(here, "templates"),
+    // bundled: dist/templates beside the cjs
+    (0, import_node_path7.join)(here, "dist", "templates"),
+    // dev: the built bundle at server/dist
+    (0, import_node_path7.join)((0, import_node_path7.dirname)(process.execPath), "templates")
+    // SEA exe
+  ];
+  for (const d of flatDirs) {
+    if (!(0, import_node_fs8.existsSync)(d)) continue;
+    const flos = (0, import_node_fs8.readdirSync)(d).filter((f) => f.endsWith(".flo"));
+    if (flos.length) return flos.map((f) => (0, import_node_path7.join)(d, f));
+  }
+  for (const demos of [(0, import_node_path7.join)(here, "..", "demos"), (0, import_node_path7.join)(here, "..", "..", "demos")]) {
+    if (!(0, import_node_fs8.existsSync)(demos)) continue;
+    const out = [];
+    for (const dir of (0, import_node_fs8.readdirSync)(demos)) {
+      try {
+        for (const f of (0, import_node_fs8.readdirSync)((0, import_node_path7.join)(demos, dir))) if (f.endsWith(".flo")) out.push((0, import_node_path7.join)(demos, dir, f));
+      } catch {
+      }
+    }
+    return out;
+  }
+  return [];
+}
+function loadTemplates(roots) {
+  const out = [];
+  for (const p of templatePaths(roots)) {
+    try {
+      out.push(readTemplateMeta(p));
+    } catch (e) {
+      console.warn(`workflow-update: skipping unreadable template ${p}: ${e instanceof Error ? e.message : e}`);
+    }
+  }
+  return out;
+}
+function backupDir(id, version, ts) {
+  const root = process.env.FLOLESS_HOME ?? (0, import_node_path7.join)((0, import_node_os7.homedir)(), ".floless");
+  const safe = (s) => {
+    const c = String(s).replace(/[^0-9A-Za-z._-]/g, "_");
+    return /^\.+$/.test(c) ? "_" : c || "_";
+  };
+  return (0, import_node_path7.join)(root, "app-backups", safe(id), `${safe(version)}-${ts}`);
+}
+
+// oauth-presets.ts
+var import_node_os8 = require("node:os");
+var import_node_path8 = require("node:path");
 var import_node_net = __toESM(require("node:net"), 1);
-var import_node_fs8 = require("node:fs");
+var import_node_fs9 = require("node:fs");
 var MANAGED_HEADER = "# managed by floless.app - do not edit";
 var OAUTH_PRESETS = {
   "trimble-connect": {
@@ -52903,7 +53000,7 @@ function managedProfileYaml(preset) {
   ].join("\n");
 }
 function oauthDir() {
-  return process.env.AWARE_HOME ? (0, import_node_path7.join)(process.env.AWARE_HOME, "oauth") : (0, import_node_path7.join)((0, import_node_os7.homedir)(), ".aware", "oauth");
+  return process.env.AWARE_HOME ? (0, import_node_path8.join)(process.env.AWARE_HOME, "oauth") : (0, import_node_path8.join)((0, import_node_os8.homedir)(), ".aware", "oauth");
 }
 function isUpgradableLegacyProfile(existing, preset) {
   if (existing.startsWith(MANAGED_HEADER)) return false;
@@ -52917,15 +53014,15 @@ function ensureManagedProfile(id) {
   const preset = OAUTH_PRESETS[id];
   if (!preset) return "not-managed";
   const dir = oauthDir();
-  const file = (0, import_node_path7.join)(dir, `${id}.yaml`);
-  const existing = (0, import_node_fs8.existsSync)(file) ? (0, import_node_fs8.readFileSync)(file, "utf8") : null;
+  const file = (0, import_node_path8.join)(dir, `${id}.yaml`);
+  const existing = (0, import_node_fs9.existsSync)(file) ? (0, import_node_fs9.readFileSync)(file, "utf8") : null;
   if (existing !== null && !existing.startsWith(MANAGED_HEADER) && !isUpgradableLegacyProfile(existing, preset)) {
     return "skipped";
   }
   const desired = managedProfileYaml(preset);
   if (existing === desired) return "unchanged";
-  (0, import_node_fs8.mkdirSync)(dir, { recursive: true });
-  (0, import_node_fs8.writeFileSync)(file, desired, "utf8");
+  (0, import_node_fs9.mkdirSync)(dir, { recursive: true });
+  (0, import_node_fs9.writeFileSync)(file, desired, "utf8");
   return "written";
 }
 function isPortBindable(port, host = "127.0.0.1") {
@@ -52937,7 +53034,7 @@ function isPortBindable(port, host = "127.0.0.1") {
 }
 
 // bake.ts
-var import_yaml2 = __toESM(require_dist6(), 1);
+var import_yaml3 = __toESM(require_dist6(), 1);
 function buildExposedCommands(inputs) {
   const runInputs = {};
   for (const inp of inputs) {
@@ -52954,7 +53051,7 @@ function buildExposedCommands(inputs) {
   };
 }
 function bakeFloSource(source, inputs) {
-  const doc2 = (0, import_yaml2.parseDocument)(source);
+  const doc2 = (0, import_yaml3.parseDocument)(source);
   if (doc2.errors.length > 0) {
     throw new Error(`bake: source is not valid YAML: ${doc2.errors[0]?.message ?? "parse error"}`);
   }
@@ -53118,16 +53215,16 @@ function extractReportHtml(events, appId) {
 }
 
 // steel-output-path.ts
-var import_node_path8 = require("node:path");
-var import_node_os8 = require("node:os");
-var import_node_fs9 = require("node:fs");
+var import_node_path9 = require("node:path");
+var import_node_os9 = require("node:os");
+var import_node_fs10 = require("node:fs");
 function steelIfcRunInputs(id, inputs) {
   if (id !== "steel-to-ifc") return inputs;
   const op = inputs?.output_path;
   if (op != null && op !== "" && op !== "steel-from-drawings.ifc") return inputs;
-  const dl = (0, import_node_path8.join)((0, import_node_os8.homedir)(), "Downloads");
-  const dir = (0, import_node_fs9.existsSync)(dl) ? dl : (0, import_node_os8.homedir)();
-  return { ...inputs ?? {}, output_path: (0, import_node_path8.join)(dir, "steel-from-drawings.ifc") };
+  const dl = (0, import_node_path9.join)((0, import_node_os9.homedir)(), "Downloads");
+  const dir = (0, import_node_fs10.existsSync)(dl) ? dl : (0, import_node_os9.homedir)();
+  return { ...inputs ?? {}, output_path: (0, import_node_path9.join)(dir, "steel-from-drawings.ifc") };
 }
 
 // index.ts
@@ -53175,16 +53272,16 @@ function buildPreview(m, sourceKind, sourceRef, stagedRef) {
 }
 
 // graft-manifest-reader.ts
-var import_node_fs10 = require("node:fs");
-var import_node_path9 = require("node:path");
-var import_yaml3 = __toESM(require_dist6(), 1);
+var import_node_fs11 = require("node:fs");
+var import_node_path10 = require("node:path");
+var import_yaml4 = __toESM(require_dist6(), 1);
 var asRecord2 = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
 function readStagedManifest(agentDir) {
-  const manifestPath = (0, import_node_path9.join)(agentDir, "manifest.yaml");
-  if (!(0, import_node_fs10.existsSync)(manifestPath)) return null;
+  const manifestPath = (0, import_node_path10.join)(agentDir, "manifest.yaml");
+  if (!(0, import_node_fs11.existsSync)(manifestPath)) return null;
   let doc2;
   try {
-    doc2 = asRecord2((0, import_yaml3.parse)((0, import_node_fs10.readFileSync)(manifestPath, "utf8")));
+    doc2 = asRecord2((0, import_yaml4.parse)((0, import_node_fs11.readFileSync)(manifestPath, "utf8")));
   } catch {
     return null;
   }
@@ -53214,10 +53311,10 @@ function readStagedManifest(agentDir) {
   }
   let skillCount = Array.isArray(doc2.skills) ? doc2.skills.length : 0;
   if (!skillCount) {
-    const skillsDir = (0, import_node_path9.join)(agentDir, "skills");
-    if ((0, import_node_fs10.existsSync)(skillsDir)) {
+    const skillsDir = (0, import_node_path10.join)(agentDir, "skills");
+    if ((0, import_node_fs11.existsSync)(skillsDir)) {
       try {
-        skillCount = (0, import_node_fs10.readdirSync)(skillsDir).filter((f) => f.endsWith(".md")).length;
+        skillCount = (0, import_node_fs11.readdirSync)(skillsDir).filter((f) => f.endsWith(".md")).length;
       } catch {
       }
     }
@@ -53231,7 +53328,7 @@ function readStagedManifest(agentDir) {
 }
 
 // graft-stage-registry.ts
-var import_node_fs11 = require("node:fs");
+var import_node_fs12 = require("node:fs");
 var TTL_MS = 30 * 60 * 1e3;
 var registry = /* @__PURE__ */ new Map();
 function registerStage(token, tempDir, agentId) {
@@ -53253,7 +53350,7 @@ function evict(token) {
   clearTimeout(e.timer);
   registry.delete(token);
   try {
-    (0, import_node_fs11.rmSync)(e.tempDir, { recursive: true, force: true });
+    (0, import_node_fs12.rmSync)(e.tempDir, { recursive: true, force: true });
   } catch {
   }
 }
@@ -53262,8 +53359,8 @@ function clearAllStages() {
 }
 
 // graft-commit.ts
-var import_node_fs12 = require("node:fs");
-var import_node_path10 = require("node:path");
+var import_node_fs13 = require("node:fs");
+var import_node_path11 = require("node:path");
 var GraftCommitError = class extends Error {
   constructor(message, code) {
     super(message);
@@ -53273,34 +53370,34 @@ var GraftCommitError = class extends Error {
   code;
 };
 function commitStaged(tempDir, agentId, targetAgentsDir, force) {
-  const staged = (0, import_node_path10.join)(tempDir, "agents", agentId);
-  const target = (0, import_node_path10.join)(targetAgentsDir, agentId);
-  if ((0, import_node_fs12.existsSync)(target)) {
+  const staged = (0, import_node_path11.join)(tempDir, "agents", agentId);
+  const target = (0, import_node_path11.join)(targetAgentsDir, agentId);
+  if ((0, import_node_fs13.existsSync)(target)) {
     if (!force) throw new GraftCommitError(`an agent named "${agentId}" is already installed`, "collision");
-    (0, import_node_fs12.rmSync)(target, { recursive: true, force: true });
+    (0, import_node_fs13.rmSync)(target, { recursive: true, force: true });
   }
-  (0, import_node_fs12.mkdirSync)(targetAgentsDir, { recursive: true });
+  (0, import_node_fs13.mkdirSync)(targetAgentsDir, { recursive: true });
   try {
-    (0, import_node_fs12.renameSync)(staged, target);
+    (0, import_node_fs13.renameSync)(staged, target);
   } catch {
-    (0, import_node_fs12.cpSync)(staged, target, { recursive: true });
+    (0, import_node_fs13.cpSync)(staged, target, { recursive: true });
   }
-  (0, import_node_fs12.rmSync)(tempDir, { recursive: true, force: true });
+  (0, import_node_fs13.rmSync)(tempDir, { recursive: true, force: true });
   return { agentId };
 }
 function matchAssemblies(globOrDir) {
   let dir;
   let pattern;
-  if ((0, import_node_fs12.existsSync)(globOrDir) && (0, import_node_fs12.statSync)(globOrDir).isDirectory()) {
+  if ((0, import_node_fs13.existsSync)(globOrDir) && (0, import_node_fs13.statSync)(globOrDir).isDirectory()) {
     dir = globOrDir;
     pattern = "*.dll";
   } else {
-    dir = (0, import_node_path10.dirname)(globOrDir);
-    pattern = (0, import_node_path10.basename)(globOrDir);
+    dir = (0, import_node_path11.dirname)(globOrDir);
+    pattern = (0, import_node_path11.basename)(globOrDir);
   }
-  if (!dir || !(0, import_node_fs12.existsSync)(dir) || !(0, import_node_fs12.statSync)(dir).isDirectory()) return [];
+  if (!dir || !(0, import_node_fs13.existsSync)(dir) || !(0, import_node_fs13.statSync)(dir).isDirectory()) return [];
   const re = globToRegExp(pattern);
-  return (0, import_node_fs12.readdirSync)(dir).filter((f) => re.test(f)).sort();
+  return (0, import_node_fs13.readdirSync)(dir).filter((f) => re.test(f)).sort();
 }
 function globToRegExp(p) {
   const esc2 = p.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
@@ -53309,24 +53406,24 @@ function globToRegExp(p) {
 
 // floless-store.ts
 var import_node_crypto4 = require("node:crypto");
-var import_node_fs13 = require("node:fs");
-var import_node_os9 = require("node:os");
-var import_node_path11 = require("node:path");
-var ROOT2 = process.env.FLOLESS_HOME ?? (0, import_node_path11.join)((0, import_node_os9.homedir)(), ".floless");
-var TEMPLATES_FILE = (0, import_node_path11.join)(ROOT2, "templates.json");
-var REQUESTS_DIR = (0, import_node_path11.join)(ROOT2, "requests");
+var import_node_fs14 = require("node:fs");
+var import_node_os10 = require("node:os");
+var import_node_path12 = require("node:path");
+var ROOT2 = process.env.FLOLESS_HOME ?? (0, import_node_path12.join)((0, import_node_os10.homedir)(), ".floless");
+var TEMPLATES_FILE = (0, import_node_path12.join)(ROOT2, "templates.json");
+var REQUESTS_DIR = (0, import_node_path12.join)(ROOT2, "requests");
 function ensureRoot() {
-  if (!(0, import_node_fs13.existsSync)(ROOT2)) (0, import_node_fs13.mkdirSync)(ROOT2, { recursive: true });
+  if (!(0, import_node_fs14.existsSync)(ROOT2)) (0, import_node_fs14.mkdirSync)(ROOT2, { recursive: true });
 }
 function withinRequestsDir(p) {
-  const base = (0, import_node_path11.resolve)(REQUESTS_DIR);
-  const full = (0, import_node_path11.resolve)(p);
-  return full === base || full.startsWith(base + import_node_path11.sep);
+  const base = (0, import_node_path12.resolve)(REQUESTS_DIR);
+  const full = (0, import_node_path12.resolve)(p);
+  return full === base || full.startsWith(base + import_node_path12.sep);
 }
 function listTemplates() {
-  if (!(0, import_node_fs13.existsSync)(TEMPLATES_FILE)) return [];
+  if (!(0, import_node_fs14.existsSync)(TEMPLATES_FILE)) return [];
   try {
-    const parsed = JSON.parse((0, import_node_fs13.readFileSync)(TEMPLATES_FILE, "utf8"));
+    const parsed = JSON.parse((0, import_node_fs14.readFileSync)(TEMPLATES_FILE, "utf8"));
     return Array.isArray(parsed) ? parsed : [];
   } catch {
     return [];
@@ -53335,8 +53432,8 @@ function listTemplates() {
 function writeTemplates(list) {
   ensureRoot();
   const tmp = `${TEMPLATES_FILE}.${process.pid}.tmp`;
-  (0, import_node_fs13.writeFileSync)(tmp, JSON.stringify(list, null, 2));
-  (0, import_node_fs13.renameSync)(tmp, TEMPLATES_FILE);
+  (0, import_node_fs14.writeFileSync)(tmp, JSON.stringify(list, null, 2));
+  (0, import_node_fs14.renameSync)(tmp, TEMPLATES_FILE);
 }
 function addTemplate(input) {
   const list = listTemplates();
@@ -53381,13 +53478,13 @@ function updateTemplate(id, patch) {
 }
 function addRequest(req, decoded = []) {
   ensureRoot();
-  if (!(0, import_node_fs13.existsSync)(REQUESTS_DIR)) (0, import_node_fs13.mkdirSync)(REQUESTS_DIR, { recursive: true });
+  if (!(0, import_node_fs14.existsSync)(REQUESTS_DIR)) (0, import_node_fs14.mkdirSync)(REQUESTS_DIR, { recursive: true });
   const id = (0, import_node_crypto4.randomUUID)();
   const createdAt = (/* @__PURE__ */ new Date()).toISOString();
   const base = `${createdAt.replace(/[:.]/g, "-")}__${id}`;
   const snapshots = decoded.map((d, i) => {
-    const p = (0, import_node_path11.join)(REQUESTS_DIR, `${base}__snap${i + 1}.${d.ext}`);
-    (0, import_node_fs13.writeFileSync)(p, d.buf);
+    const p = (0, import_node_path12.join)(REQUESTS_DIR, `${base}__snap${i + 1}.${d.ext}`);
+    (0, import_node_fs14.writeFileSync)(p, d.buf);
     return p;
   });
   const full = {
@@ -53397,55 +53494,55 @@ function addRequest(req, decoded = []) {
     ...req,
     ...snapshots.length ? { snapshots } : {}
   };
-  (0, import_node_fs13.writeFileSync)((0, import_node_path11.join)(REQUESTS_DIR, `${base}.json`), JSON.stringify(full, null, 2));
+  (0, import_node_fs14.writeFileSync)((0, import_node_path12.join)(REQUESTS_DIR, `${base}.json`), JSON.stringify(full, null, 2));
   return full;
 }
 function listRequests() {
-  if (!(0, import_node_fs13.existsSync)(REQUESTS_DIR)) return [];
-  return (0, import_node_fs13.readdirSync)(REQUESTS_DIR).filter((f) => f.endsWith(".json")).sort().map((f) => {
+  if (!(0, import_node_fs14.existsSync)(REQUESTS_DIR)) return [];
+  return (0, import_node_fs14.readdirSync)(REQUESTS_DIR).filter((f) => f.endsWith(".json")).sort().map((f) => {
     try {
-      return JSON.parse((0, import_node_fs13.readFileSync)((0, import_node_path11.join)(REQUESTS_DIR, f), "utf8"));
+      return JSON.parse((0, import_node_fs14.readFileSync)((0, import_node_path12.join)(REQUESTS_DIR, f), "utf8"));
     } catch {
       return null;
     }
   }).filter((r) => r !== null);
 }
 function deleteRequest(id) {
-  if (!(0, import_node_fs13.existsSync)(REQUESTS_DIR)) return false;
-  const file = (0, import_node_fs13.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
+  if (!(0, import_node_fs14.existsSync)(REQUESTS_DIR)) return false;
+  const file = (0, import_node_fs14.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
   if (!file) return false;
   try {
-    const parsed = JSON.parse((0, import_node_fs13.readFileSync)((0, import_node_path11.join)(REQUESTS_DIR, file), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs14.readFileSync)((0, import_node_path12.join)(REQUESTS_DIR, file), "utf8"));
     for (const p of parsed.snapshots ?? []) {
       if (!withinRequestsDir(p)) continue;
       try {
-        (0, import_node_fs13.rmSync)(p);
+        (0, import_node_fs14.rmSync)(p);
       } catch {
       }
     }
   } catch {
   }
-  (0, import_node_fs13.rmSync)((0, import_node_path11.join)(REQUESTS_DIR, file));
+  (0, import_node_fs14.rmSync)((0, import_node_path12.join)(REQUESTS_DIR, file));
   return true;
 }
 function clearRequests() {
-  if (!(0, import_node_fs13.existsSync)(REQUESTS_DIR)) return 0;
-  const allFiles = (0, import_node_fs13.readdirSync)(REQUESTS_DIR);
+  if (!(0, import_node_fs14.existsSync)(REQUESTS_DIR)) return 0;
+  const allFiles = (0, import_node_fs14.readdirSync)(REQUESTS_DIR);
   const jsonFiles = allFiles.filter((f) => f.endsWith(".json"));
   for (const f of allFiles) {
     try {
-      (0, import_node_fs13.rmSync)((0, import_node_path11.join)(REQUESTS_DIR, f));
+      (0, import_node_fs14.rmSync)((0, import_node_path12.join)(REQUESTS_DIR, f));
     } catch {
     }
   }
   return jsonFiles.length;
 }
 function snapshotPathFor(id, n) {
-  if (!(0, import_node_fs13.existsSync)(REQUESTS_DIR)) return null;
-  const file = (0, import_node_fs13.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
+  if (!(0, import_node_fs14.existsSync)(REQUESTS_DIR)) return null;
+  const file = (0, import_node_fs14.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
   if (!file) return null;
   try {
-    const parsed = JSON.parse((0, import_node_fs13.readFileSync)((0, import_node_path11.join)(REQUESTS_DIR, file), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs14.readFileSync)((0, import_node_path12.join)(REQUESTS_DIR, file), "utf8"));
     const cand = parsed.snapshots?.[n] ?? null;
     return cand && withinRequestsDir(cand) ? cand : null;
   } catch {
@@ -53482,15 +53579,15 @@ function decodeSnapshots(inputs) {
 
 // visual-input-store.ts
 var import_node_crypto5 = require("node:crypto");
-var import_node_fs14 = require("node:fs");
-var import_node_os10 = require("node:os");
-var import_node_path12 = require("node:path");
+var import_node_fs15 = require("node:fs");
+var import_node_os11 = require("node:os");
+var import_node_path13 = require("node:path");
 var MAX_BYTES3 = 25 * 1024 * 1024;
 var VisualInputError = class extends Error {
 };
 function inputsDir() {
-  const root = process.env.FLOLESS_HOME ?? (0, import_node_path12.join)((0, import_node_os10.homedir)(), ".floless");
-  return (0, import_node_path12.join)(root, "inputs");
+  const root = process.env.FLOLESS_HOME ?? (0, import_node_path13.join)((0, import_node_os11.homedir)(), ".floless");
+  return (0, import_node_path13.join)(root, "inputs");
 }
 function sniffExt2(buf) {
   if (buf.length >= 8 && buf[0] === 137 && buf[1] === 80 && buf[2] === 78 && buf[3] === 71) return "png";
@@ -53502,7 +53599,7 @@ function sniffExt2(buf) {
 var RESERVED = /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(\..*)?$/i;
 function safeSegment(s) {
   if (!s || s === "." || s.includes("..")) return false;
-  if (s.includes("/") || s.includes("\\") || s.includes(import_node_path12.sep)) return false;
+  if (s.includes("/") || s.includes("\\") || s.includes(import_node_path13.sep)) return false;
   for (let i = 0; i < s.length; i++) {
     const c = s.charCodeAt(i);
     if (c < 32 || c === 58) return false;
@@ -53520,51 +53617,51 @@ function storeVisualInput(appId, dataUrl) {
   const ext = sniffExt2(buf);
   if (!ext) throw new VisualInputError("visual input must be PNG, JPEG, WebP, or PDF");
   const sha2562 = (0, import_node_crypto5.createHash)("sha256").update(buf).digest("hex");
-  const dir = (0, import_node_path12.join)(inputsDir(), appId);
-  const path = (0, import_node_path12.join)(dir, `${sha2562}.${ext}`);
-  const root = (0, import_node_path12.resolve)(inputsDir());
-  const target = (0, import_node_path12.resolve)(path);
-  if (target !== root && !target.startsWith(root + import_node_path12.sep)) {
+  const dir = (0, import_node_path13.join)(inputsDir(), appId);
+  const path = (0, import_node_path13.join)(dir, `${sha2562}.${ext}`);
+  const root = (0, import_node_path13.resolve)(inputsDir());
+  const target = (0, import_node_path13.resolve)(path);
+  if (target !== root && !target.startsWith(root + import_node_path13.sep)) {
     throw new VisualInputError("refusing to write outside the inputs root");
   }
-  (0, import_node_fs14.mkdirSync)(dir, { recursive: true });
-  if (!(0, import_node_fs14.existsSync)(path)) {
+  (0, import_node_fs15.mkdirSync)(dir, { recursive: true });
+  if (!(0, import_node_fs15.existsSync)(path)) {
     const tmp = `${path}.tmp`;
-    (0, import_node_fs14.writeFileSync)(tmp, buf);
-    (0, import_node_fs14.renameSync)(tmp, path);
+    (0, import_node_fs15.writeFileSync)(tmp, buf);
+    (0, import_node_fs15.renameSync)(tmp, path);
   }
-  return { path, ext, bytes: (0, import_node_fs14.statSync)(path).size, sha256: sha2562 };
+  return { path, ext, bytes: (0, import_node_fs15.statSync)(path).size, sha256: sha2562 };
 }
 function renameVisualInputs(oldId, newId) {
   if (!safeSegment(oldId) || !safeSegment(newId)) throw new VisualInputError("invalid app id");
-  const from = (0, import_node_path12.join)(inputsDir(), oldId);
-  if (!(0, import_node_fs14.existsSync)(from)) return;
-  const to = (0, import_node_path12.join)(inputsDir(), newId);
-  if ((0, import_node_fs14.existsSync)(to)) (0, import_node_fs14.rmSync)(to, { recursive: true, force: true });
-  (0, import_node_fs14.mkdirSync)(inputsDir(), { recursive: true });
-  (0, import_node_fs14.renameSync)(from, to);
+  const from = (0, import_node_path13.join)(inputsDir(), oldId);
+  if (!(0, import_node_fs15.existsSync)(from)) return;
+  const to = (0, import_node_path13.join)(inputsDir(), newId);
+  if ((0, import_node_fs15.existsSync)(to)) (0, import_node_fs15.rmSync)(to, { recursive: true, force: true });
+  (0, import_node_fs15.mkdirSync)(inputsDir(), { recursive: true });
+  (0, import_node_fs15.renameSync)(from, to);
 }
 function copyVisualInputs(srcId, newId) {
   if (!safeSegment(srcId) || !safeSegment(newId)) throw new VisualInputError("invalid app id");
-  const from = (0, import_node_path12.join)(inputsDir(), srcId);
-  if (!(0, import_node_fs14.existsSync)(from)) return;
-  (0, import_node_fs14.cpSync)(from, (0, import_node_path12.join)(inputsDir(), newId), { recursive: true });
+  const from = (0, import_node_path13.join)(inputsDir(), srcId);
+  if (!(0, import_node_fs15.existsSync)(from)) return;
+  (0, import_node_fs15.cpSync)(from, (0, import_node_path13.join)(inputsDir(), newId), { recursive: true });
 }
 function deleteVisualInputs(id) {
   if (!safeSegment(id)) throw new VisualInputError("invalid app id");
-  const dir = (0, import_node_path12.join)(inputsDir(), id);
-  if ((0, import_node_fs14.existsSync)(dir)) (0, import_node_fs14.rmSync)(dir, { recursive: true, force: true });
+  const dir = (0, import_node_path13.join)(inputsDir(), id);
+  if ((0, import_node_fs15.existsSync)(dir)) (0, import_node_fs15.rmSync)(dir, { recursive: true, force: true });
 }
 
 // contract-store.ts
-var import_node_fs16 = require("node:fs");
-var import_node_path14 = require("node:path");
-var import_node_os11 = require("node:os");
+var import_node_fs17 = require("node:fs");
+var import_node_path15 = require("node:path");
+var import_node_os12 = require("node:os");
 
 // contract-schema.ts
-var import_node_fs15 = require("node:fs");
-var import_node_path13 = require("node:path");
-var import_node_url = require("node:url");
+var import_node_fs16 = require("node:fs");
+var import_node_path14 = require("node:path");
+var import_node_url2 = require("node:url");
 function validate(doc2, schema) {
   const errors = [];
   walk(doc2, schema, schema, "$", errors);
@@ -53664,16 +53761,16 @@ function walk(value, node, root, path, errors) {
 var _cached = null;
 function loadSteelTakeoffSchema() {
   if (_cached) return _cached;
-  const here = (0, import_node_path13.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
+  const here2 = (0, import_node_path14.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
   const candidates = [
-    (0, import_node_path13.join)(here, "..", "schemas", "steel.takeoff.v1.schema.json"),
+    (0, import_node_path14.join)(here2, "..", "schemas", "steel.takeoff.v1.schema.json"),
     // dev: server/ next to schemas/
-    (0, import_node_path13.join)(here, "schemas", "steel.takeoff.v1.schema.json")
+    (0, import_node_path14.join)(here2, "schemas", "steel.takeoff.v1.schema.json")
     // bundled: dist/ holds ./schemas
   ];
   for (const p of candidates) {
     try {
-      const text = (0, import_node_fs15.readFileSync)(p, "utf8");
+      const text = (0, import_node_fs16.readFileSync)(p, "utf8");
       _cached = JSON.parse(text);
       return _cached;
     } catch (err) {
@@ -53689,20 +53786,20 @@ function validateSteelTakeoff(doc2) {
 // contract-store.ts
 var ContractError = class extends Error {
 };
-var ROOT3 = process.env.FLOLESS_HOME ?? (0, import_node_path14.join)((0, import_node_os11.homedir)(), ".floless");
-var DIR = (0, import_node_path14.join)(ROOT3, "contracts");
+var ROOT3 = process.env.FLOLESS_HOME ?? (0, import_node_path15.join)((0, import_node_os12.homedir)(), ".floless");
+var DIR = (0, import_node_path15.join)(ROOT3, "contracts");
 function safeId(appId) {
   if (!/^[a-z0-9][a-z0-9._-]*$/i.test(appId)) throw new ContractError(`invalid appId: ${appId}`);
   return appId;
 }
 function contractPath(appId) {
-  return (0, import_node_path14.join)(DIR, `${safeId(appId)}.json`);
+  return (0, import_node_path15.join)(DIR, `${safeId(appId)}.json`);
 }
 function readContract(appId) {
   const p = contractPath(appId);
-  if (!(0, import_node_fs16.existsSync)(p)) return null;
+  if (!(0, import_node_fs17.existsSync)(p)) return null;
   try {
-    return JSON.parse((0, import_node_fs16.readFileSync)(p, "utf8"));
+    return JSON.parse((0, import_node_fs17.readFileSync)(p, "utf8"));
   } catch (e) {
     console.warn(`readContract: ignoring unreadable contract at ${p}: ${e instanceof Error ? e.message : e}`);
     return null;
@@ -53715,8 +53812,8 @@ function writeContract(appId, doc2) {
     const first = res.errors.slice(0, 5).map((e) => `${e.path}: ${e.message}`).join("; ");
     throw new ContractError(`contract failed schema validation \u2014 ${first}`);
   }
-  if (!(0, import_node_fs16.existsSync)(DIR)) (0, import_node_fs16.mkdirSync)(DIR, { recursive: true });
-  (0, import_node_fs16.writeFileSync)(p, JSON.stringify(doc2));
+  if (!(0, import_node_fs17.existsSync)(DIR)) (0, import_node_fs17.mkdirSync)(DIR, { recursive: true });
+  (0, import_node_fs17.writeFileSync)(p, JSON.stringify(doc2));
 }
 
 // contract-resolve.ts
@@ -53738,16 +53835,16 @@ function readContractForApp(appId, readAppFn = readApp) {
 }
 
 // contract-bake.ts
-var import_node_fs17 = require("node:fs");
-var import_yaml4 = __toESM(require_dist6(), 1);
+var import_node_fs18 = require("node:fs");
+var import_yaml5 = __toESM(require_dist6(), 1);
 function bakeContractIntoApp(sourcePath, contract) {
-  const doc2 = (0, import_yaml4.parseDocument)((0, import_node_fs17.readFileSync)(sourcePath, "utf8"));
+  const doc2 = (0, import_yaml5.parseDocument)((0, import_node_fs18.readFileSync)(sourcePath, "utf8"));
   if (doc2.errors.length > 0) {
     throw new Error(`contract bake: source is not valid YAML: ${doc2.errors[0]?.message ?? "parse error"}`);
   }
   const seq = doc2.get("nodes");
-  const items = (0, import_yaml4.isSeq)(seq) ? seq.items : [];
-  const nodeOf = (it) => (0, import_yaml4.isMap)(it) ? it.toJSON() : null;
+  const items = (0, import_yaml5.isSeq)(seq) ? seq.items : [];
+  const nodeOf = (it) => (0, import_yaml5.isMap)(it) ? it.toJSON() : null;
   let idx = items.findIndex((it) => nodeOf(it)?.config?.contract === contract.type);
   if (idx < 0) idx = items.findIndex((it) => nodeOf(it)?.agent === "steel-takeoff-us");
   if (idx < 0) throw new Error("no contract-emitting node to bake the contract into");
@@ -53770,7 +53867,7 @@ function bakeContractIntoApp(sourcePath, contract) {
     baked.filter = { ...filter, page };
   }
   doc2.setIn(["nodes", idx, "config", "takeoff"], baked);
-  (0, import_node_fs17.writeFileSync)(sourcePath, doc2.toString());
+  (0, import_node_fs18.writeFileSync)(sourcePath, doc2.toString());
 }
 
 // contract-to-scene.ts
@@ -53867,37 +53964,37 @@ function contractToScene(contractInput) {
 }
 
 // scene-bake.ts
-var import_node_fs18 = require("node:fs");
-var import_node_path15 = require("node:path");
-var import_yaml5 = __toESM(require_dist6(), 1);
+var import_node_fs19 = require("node:fs");
+var import_node_path16 = require("node:path");
+var import_yaml6 = __toESM(require_dist6(), 1);
 function bakeSceneIntoApp(sourcePath, scene, agent = "viewer-3d") {
-  const doc2 = (0, import_yaml5.parseDocument)((0, import_node_fs18.readFileSync)(sourcePath, "utf8"));
+  const doc2 = (0, import_yaml6.parseDocument)((0, import_node_fs19.readFileSync)(sourcePath, "utf8"));
   if (doc2.errors.length > 0) {
     throw new Error(`scene bake: source is not valid YAML: ${doc2.errors[0]?.message ?? "parse error"}`);
   }
   const seq = doc2.get("nodes");
-  const items = (0, import_yaml5.isSeq)(seq) ? seq.items : [];
-  const idx = items.findIndex((it) => ((0, import_yaml5.isMap)(it) ? it.toJSON() : null)?.agent === agent);
+  const items = (0, import_yaml6.isSeq)(seq) ? seq.items : [];
+  const idx = items.findIndex((it) => ((0, import_yaml6.isMap)(it) ? it.toJSON() : null)?.agent === agent);
   if (idx < 0) throw new Error(`no ${agent} render node to bake the scene into`);
   doc2.setIn(["nodes", idx, "config", "scene"], scene);
-  (0, import_node_fs18.writeFileSync)(sourcePath, doc2.toString());
+  (0, import_node_fs19.writeFileSync)(sourcePath, doc2.toString());
 }
 function bakeNodeConfigById(sourcePath, nodeId, patch) {
-  const doc2 = (0, import_yaml5.parseDocument)((0, import_node_fs18.readFileSync)(sourcePath, "utf8"));
+  const doc2 = (0, import_yaml6.parseDocument)((0, import_node_fs19.readFileSync)(sourcePath, "utf8"));
   if (doc2.errors.length > 0) {
     throw new Error(`node bake: source is not valid YAML: ${doc2.errors[0]?.message ?? "parse error"}`);
   }
   const seq = doc2.get("nodes");
-  const items = (0, import_yaml5.isSeq)(seq) ? seq.items : [];
-  const idx = items.findIndex((it) => ((0, import_yaml5.isMap)(it) ? it.toJSON() : null)?.id === nodeId);
+  const items = (0, import_yaml6.isSeq)(seq) ? seq.items : [];
+  const idx = items.findIndex((it) => ((0, import_yaml6.isMap)(it) ? it.toJSON() : null)?.id === nodeId);
   if (idx < 0) throw new Error(`no node with id "${nodeId}"`);
   for (const [key, value] of Object.entries(patch)) doc2.setIn(["nodes", idx, "config", key], value);
-  (0, import_node_fs18.writeFileSync)(sourcePath, doc2.toString());
+  (0, import_node_fs19.writeFileSync)(sourcePath, doc2.toString());
 }
 function writeViewer3dApp(dir, appId, scene) {
-  (0, import_node_fs18.mkdirSync)(dir, { recursive: true });
-  const flo = (0, import_node_path15.join)(dir, `${appId}.flo`);
-  (0, import_node_fs18.writeFileSync)(flo, [
+  (0, import_node_fs19.mkdirSync)(dir, { recursive: true });
+  const flo = (0, import_node_path16.join)(dir, `${appId}.flo`);
+  (0, import_node_fs19.writeFileSync)(flo, [
     `app: ${appId}`,
     "version: 0.1.0",
     "display-name: Steel 3D",
@@ -53918,9 +54015,9 @@ function writeViewer3dApp(dir, appId, scene) {
   return flo;
 }
 function writeIfcApp(dir, appId, scene, outputPath) {
-  (0, import_node_fs18.mkdirSync)(dir, { recursive: true });
-  const flo = (0, import_node_path15.join)(dir, `${appId}.flo`);
-  (0, import_node_fs18.writeFileSync)(flo, [
+  (0, import_node_fs19.mkdirSync)(dir, { recursive: true });
+  const flo = (0, import_node_path16.join)(dir, `${appId}.flo`);
+  (0, import_node_fs19.writeFileSync)(flo, [
     `app: ${appId}`,
     "version: 0.1.0",
     "display-name: Steel IFC",
@@ -53943,9 +54040,9 @@ function writeIfcApp(dir, appId, scene, outputPath) {
   return flo;
 }
 function writeTeklaApp(dir, appId, scene, teklaVersion = "2026.0") {
-  (0, import_node_fs18.mkdirSync)(dir, { recursive: true });
-  const flo = (0, import_node_path15.join)(dir, `${appId}.flo`);
-  (0, import_node_fs18.writeFileSync)(flo, [
+  (0, import_node_fs19.mkdirSync)(dir, { recursive: true });
+  const flo = (0, import_node_path16.join)(dir, `${appId}.flo`);
+  (0, import_node_fs19.writeFileSync)(flo, [
     `app: ${appId}`,
     "version: 0.1.0",
     "display-name: Steel to Tekla",
@@ -54322,13 +54419,13 @@ function scoreContract2(contractInput) {
 }
 
 // app-lifecycle.ts
-var import_node_fs21 = require("node:fs");
-var import_node_os13 = require("node:os");
-var import_node_path18 = require("node:path");
+var import_node_fs22 = require("node:fs");
+var import_node_os14 = require("node:os");
+var import_node_path19 = require("node:path");
 
 // routines.ts
-var import_node_fs20 = require("node:fs");
-var import_node_path17 = require("node:path");
+var import_node_fs21 = require("node:fs");
+var import_node_path18 = require("node:path");
 
 // sse.ts
 var clients = /* @__PURE__ */ new Set();
@@ -54365,11 +54462,11 @@ function clientCount() {
 }
 
 // trigger-sessions.ts
-var import_node_fs19 = require("node:fs");
-var import_node_os12 = require("node:os");
-var import_node_path16 = require("node:path");
-var import_yaml6 = __toESM(require_dist6(), 1);
-var AGENTS_DIR2 = process.env.AWARE_HOME ? (0, import_node_path16.join)(process.env.AWARE_HOME, "agents") : (0, import_node_path16.join)((0, import_node_os12.homedir)(), ".aware", "agents");
+var import_node_fs20 = require("node:fs");
+var import_node_os13 = require("node:os");
+var import_node_path17 = require("node:path");
+var import_yaml7 = __toESM(require_dist6(), 1);
+var AGENTS_DIR2 = process.env.AWARE_HOME ? (0, import_node_path17.join)(process.env.AWARE_HOME, "agents") : (0, import_node_path17.join)((0, import_node_os13.homedir)(), ".aware", "agents");
 function summarizeFire(data) {
   if (!data) return "event";
   const type = typeof data.type === "string" ? data.type : "";
@@ -54386,10 +54483,10 @@ function mapTriggerState(phase) {
 function isHostBacked(agent, agentsDir = AGENTS_DIR2) {
   const safe = (n) => !n.includes("/") && !n.includes("\\") && !n.includes("..");
   if (!safe(agent)) return false;
-  const manifestPath = (0, import_node_path16.join)(agentsDir, agent, "manifest.yaml");
-  if (!(0, import_node_fs19.existsSync)(manifestPath)) return false;
+  const manifestPath = (0, import_node_path17.join)(agentsDir, agent, "manifest.yaml");
+  if (!(0, import_node_fs20.existsSync)(manifestPath)) return false;
   try {
-    const doc2 = (0, import_yaml6.parse)((0, import_node_fs19.readFileSync)(manifestPath, "utf8"));
+    const doc2 = (0, import_yaml7.parse)((0, import_node_fs20.readFileSync)(manifestPath, "utf8"));
     const transport = doc2?.transport;
     return !!(transport && typeof transport === "object" && "cli" in transport);
   } catch {
@@ -54674,7 +54771,7 @@ var RoutineError = class extends Error {
   }
   status;
 };
-var ROUTINES_FILE = (0, import_node_path17.join)(flolessRoot, "routines.json");
+var ROUTINES_FILE = (0, import_node_path18.join)(flolessRoot, "routines.json");
 var routines = [];
 var loaded = false;
 function ensureLoaded() {
@@ -54710,10 +54807,10 @@ function sanitizeRoutine(raw) {
   };
 }
 function loadFromDisk() {
-  if (!(0, import_node_fs20.existsSync)(ROUTINES_FILE)) return [];
+  if (!(0, import_node_fs21.existsSync)(ROUTINES_FILE)) return [];
   let text;
   try {
-    text = (0, import_node_fs20.readFileSync)(ROUTINES_FILE, "utf8");
+    text = (0, import_node_fs21.readFileSync)(ROUTINES_FILE, "utf8");
   } catch {
     return [];
   }
@@ -54722,17 +54819,17 @@ function loadFromDisk() {
     return Array.isArray(parsed) ? parsed.map(sanitizeRoutine).filter((r) => r !== null) : [];
   } catch {
     try {
-      (0, import_node_fs20.renameSync)(ROUTINES_FILE, `${ROUTINES_FILE}.corrupt-${Date.now()}`);
+      (0, import_node_fs21.renameSync)(ROUTINES_FILE, `${ROUTINES_FILE}.corrupt-${Date.now()}`);
     } catch {
     }
     return [];
   }
 }
 function saveRoutines() {
-  if (!(0, import_node_fs20.existsSync)(flolessRoot)) (0, import_node_fs20.mkdirSync)(flolessRoot, { recursive: true });
+  if (!(0, import_node_fs21.existsSync)(flolessRoot)) (0, import_node_fs21.mkdirSync)(flolessRoot, { recursive: true });
   const tmp = `${ROUTINES_FILE}.${process.pid}.tmp`;
-  (0, import_node_fs20.writeFileSync)(tmp, JSON.stringify(routines, null, 2));
-  (0, import_node_fs20.renameSync)(tmp, ROUTINES_FILE);
+  (0, import_node_fs21.writeFileSync)(tmp, JSON.stringify(routines, null, 2));
+  (0, import_node_fs21.renameSync)(tmp, ROUTINES_FILE);
 }
 function listRoutines() {
   ensureLoaded();
@@ -55140,13 +55237,13 @@ var AppLifecycleError = class extends Error {
   }
 };
 function appsDir() {
-  return process.env.AWARE_HOME ? (0, import_node_path18.join)(process.env.AWARE_HOME, "apps") : (0, import_node_path18.join)((0, import_node_os13.homedir)(), ".aware", "apps");
+  return process.env.AWARE_HOME ? (0, import_node_path19.join)(process.env.AWARE_HOME, "apps") : (0, import_node_path19.join)((0, import_node_os14.homedir)(), ".aware", "apps");
 }
 function appDirPath(id) {
-  return (0, import_node_path18.join)(appsDir(), id);
+  return (0, import_node_path19.join)(appsDir(), id);
 }
 function appInstalled(id) {
-  return APP_ID3.test(id) && (0, import_node_fs21.existsSync)(appDirPath(id));
+  return APP_ID3.test(id) && (0, import_node_fs22.existsSync)(appDirPath(id));
 }
 function logCascade(what, e) {
   console.error(`[app-lifecycle] cascade step failed (${what}):`, e instanceof Error ? e.message : e);
@@ -55247,9 +55344,9 @@ function isGatedAwareRoute(url, method) {
 
 // autostart.mjs
 var import_node_child_process4 = require("node:child_process");
-var import_node_fs22 = require("node:fs");
-var import_node_os14 = require("node:os");
-var import_node_path19 = require("node:path");
+var import_node_fs23 = require("node:fs");
+var import_node_os15 = require("node:os");
+var import_node_path20 = require("node:path");
 
 // teardown.mjs
 var RUN_KEY = "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";
@@ -55361,8 +55458,8 @@ function removeLegacyRunKey() {
 }
 function logLine(msg) {
   try {
-    (0, import_node_fs22.mkdirSync)(logDir(), { recursive: true });
-    (0, import_node_fs22.appendFileSync)(logFilePath(), `${(/* @__PURE__ */ new Date()).toISOString()} ${msg}
+    (0, import_node_fs23.mkdirSync)(logDir(), { recursive: true });
+    (0, import_node_fs23.appendFileSync)(logFilePath(), `${(/* @__PURE__ */ new Date()).toISOString()} ${msg}
 `);
   } catch {
   }
@@ -55370,8 +55467,8 @@ function logLine(msg) {
 function registerAutostart(exePath) {
   if (!isWin) return;
   const xml = buildAutostartTaskXml(exePath, currentUserId());
-  const tmp = (0, import_node_path19.join)((0, import_node_os14.tmpdir)(), `floless-autostart-${process.pid}-${Date.now()}.xml`);
-  (0, import_node_fs22.writeFileSync)(tmp, "\uFEFF" + xml, { encoding: "utf16le" });
+  const tmp = (0, import_node_path20.join)((0, import_node_os15.tmpdir)(), `floless-autostart-${process.pid}-${Date.now()}.xml`);
+  (0, import_node_fs23.writeFileSync)(tmp, "\uFEFF" + xml, { encoding: "utf16le" });
   try {
     (0, import_node_child_process4.execFileSync)("schtasks", ["/Create", "/TN", TASK_NAME, "/XML", tmp, "/F"], {
       stdio: ["ignore", "ignore", "ignore"],
@@ -55382,7 +55479,7 @@ function registerAutostart(exePath) {
     throw err;
   } finally {
     try {
-      (0, import_node_fs22.rmSync)(tmp, { force: true });
+      (0, import_node_fs23.rmSync)(tmp, { force: true });
     } catch {
     }
   }
@@ -55417,26 +55514,26 @@ function unregisterAutostart() {
 // updater.ts
 var import_node_child_process5 = require("node:child_process");
 var import_node_crypto6 = require("node:crypto");
-var import_node_fs24 = require("node:fs");
+var import_node_fs25 = require("node:fs");
 var import_node_stream = require("node:stream");
 var import_promises = require("node:stream/promises");
-var import_node_path21 = require("node:path");
+var import_node_path22 = require("node:path");
 
 // post-update-marker.mjs
-var import_node_fs23 = require("node:fs");
-var import_node_os15 = require("node:os");
-var import_node_path20 = require("node:path");
+var import_node_fs24 = require("node:fs");
+var import_node_os16 = require("node:os");
+var import_node_path21 = require("node:path");
 var FRESH_MS = 12e4;
 function markerPath() {
   const override = (process.env.FLOLESS_POST_UPDATE_MARKER ?? "").trim();
   if (override) return override;
-  const root = process.env.FLOLESS_HOME ?? (0, import_node_path20.join)((0, import_node_os15.homedir)(), ".floless");
-  return (0, import_node_path20.join)(root, ".post-update");
+  const root = process.env.FLOLESS_HOME ?? (0, import_node_path21.join)((0, import_node_os16.homedir)(), ".floless");
+  return (0, import_node_path21.join)(root, ".post-update");
 }
 function legacyMarkerPath() {
   if ((process.env.FLOLESS_POST_UPDATE_MARKER ?? "").trim()) return null;
   try {
-    return (0, import_node_path20.join)((0, import_node_path20.dirname)((0, import_node_path20.dirname)(process.execPath)), ".floless-post-update");
+    return (0, import_node_path21.join)((0, import_node_path21.dirname)((0, import_node_path21.dirname)(process.execPath)), ".floless-post-update");
   } catch {
     return null;
   }
@@ -55446,7 +55543,7 @@ function writePostUpdateMarker() {
   for (const p of [markerPath(), legacyMarkerPath()]) {
     if (!p) continue;
     try {
-      (0, import_node_fs23.writeFileSync)(p, (/* @__PURE__ */ new Date()).toISOString());
+      (0, import_node_fs24.writeFileSync)(p, (/* @__PURE__ */ new Date()).toISOString());
       wrote = true;
     } catch {
     }
@@ -55458,9 +55555,9 @@ function consumePostUpdateMarker() {
   for (const p of [markerPath(), legacyMarkerPath()]) {
     if (!p) continue;
     try {
-      if (!(0, import_node_fs23.existsSync)(p)) continue;
-      const ageMs = Date.now() - (0, import_node_fs23.statSync)(p).mtimeMs;
-      (0, import_node_fs23.rmSync)(p, { force: true });
+      if (!(0, import_node_fs24.existsSync)(p)) continue;
+      const ageMs = Date.now() - (0, import_node_fs24.statSync)(p).mtimeMs;
+      (0, import_node_fs24.rmSync)(p, { force: true });
       if (ageMs < FRESH_MS) fresh = true;
     } catch {
     }
@@ -55477,13 +55574,13 @@ function currentVersion() {
   return appVersion();
 }
 function installRoot() {
-  return (0, import_node_path21.dirname)((0, import_node_path21.dirname)(process.execPath));
+  return (0, import_node_path22.dirname)((0, import_node_path22.dirname)(process.execPath));
 }
 function updateExePath() {
-  return (0, import_node_path21.join)(installRoot(), "Update.exe");
+  return (0, import_node_path22.join)(installRoot(), "Update.exe");
 }
 function packagesDir() {
-  return (0, import_node_path21.join)(installRoot(), "packages");
+  return (0, import_node_path22.join)(installRoot(), "packages");
 }
 function feedUrl() {
   const env2 = (process.env.FLOLESS_UPDATE_URL ?? "").trim().replace(/\/+$/, "");
@@ -55576,22 +55673,22 @@ async function checkForUpdate() {
 }
 async function sha1OfFile(path) {
   const hash = (0, import_node_crypto6.createHash)("sha1");
-  await (0, import_promises.pipeline)((0, import_node_fs24.createReadStream)(path), hash);
+  await (0, import_promises.pipeline)((0, import_node_fs25.createReadStream)(path), hash);
   return hash.digest("hex").toUpperCase();
 }
 async function downloadPackage(asset) {
   if (!NUPKG_NAME.test(asset.FileName)) throw new Error(`refusing suspicious package name: ${asset.FileName}`);
   const want = asset.SHA1.toUpperCase();
   const dir = packagesDir();
-  (0, import_node_fs24.mkdirSync)(dir, { recursive: true });
-  const dest = (0, import_node_path21.join)(dir, asset.FileName);
-  if ((0, import_node_fs24.existsSync)(dest) && await sha1OfFile(dest) === want) return dest;
+  (0, import_node_fs25.mkdirSync)(dir, { recursive: true });
+  const dest = (0, import_node_path22.join)(dir, asset.FileName);
+  if ((0, import_node_fs25.existsSync)(dest) && await sha1OfFile(dest) === want) return dest;
   const res = await authedFetch(`${feedUrl()}/${encodeURIComponent(asset.FileName)}`, {
     redirect: "follow",
     signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS)
   });
   if (!res.ok || !res.body) throw new Error(`download failed: HTTP ${res.status} for ${asset.FileName}`);
-  await (0, import_promises.pipeline)(import_node_stream.Readable.fromWeb(res.body), (0, import_node_fs24.createWriteStream)(dest));
+  await (0, import_promises.pipeline)(import_node_stream.Readable.fromWeb(res.body), (0, import_node_fs25.createWriteStream)(dest));
   const got = await sha1OfFile(dest);
   if (got !== want) throw new Error(`SHA1 mismatch for ${asset.FileName}: feed=${want} got=${got}`);
   return dest;
@@ -55600,7 +55697,7 @@ async function applyUpdate(check, opts) {
   if (!check.supported) return { applied: false, message: check.reason ?? "auto-update not supported in this runtime" };
   if (!check.updateAvailable || !check.asset) return { applied: false, message: check.reason ?? "no update available" };
   const exe = updateExePath();
-  if (!(0, import_node_fs24.existsSync)(exe)) {
+  if (!(0, import_node_fs25.existsSync)(exe)) {
     return { applied: false, message: `Update.exe not found at ${exe} \u2014 is this a Velopack install?` };
   }
   const pkg = await downloadPackage(check.asset);
@@ -55840,12 +55937,12 @@ function isTraceCorrupt(events) {
 
 // launch.mjs
 var import_node_child_process6 = require("node:child_process");
-var import_node_path22 = require("node:path");
-var import_node_url2 = require("node:url");
-var import_node_fs25 = require("node:fs");
+var import_node_path23 = require("node:path");
+var import_node_url3 = require("node:url");
+var import_node_fs26 = require("node:fs");
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_readline = require("node:readline");
-var __dirname2 = (0, import_node_path22.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
+var __dirname2 = (0, import_node_path23.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
 var PORT = Number(process.env.PORT ?? 4317);
 var HEALTH_URL = `http://127.0.0.1:${PORT}/api/health`;
 var BROWSER_URL = `http://floless.localhost:${PORT}`;
@@ -55917,8 +56014,8 @@ async function waitHealthy(timeoutMs = 3e4) {
 function resolveServerStart() {
   const packaged = /flolessapp\.exe$/i.test(process.execPath);
   if (packaged) return { cmd: process.execPath, args: ["--serve"], shell: false };
-  const bundle = (0, import_node_path22.join)(__dirname2, "dist", "floless-server.cjs");
-  if ((0, import_node_fs25.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
+  const bundle = (0, import_node_path23.join)(__dirname2, "dist", "floless-server.cjs");
+  if ((0, import_node_fs26.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
   return { cmd: "npm", args: ["run", "start"], shell: isWin2 };
 }
 function startServerDetached() {
@@ -56071,8 +56168,8 @@ function taskkillArgs(pid, { tree = true } = {}) {
 }
 function killSupervisor({ tree = true } = {}) {
   if (!isWin2) return;
-  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path22.basename)(process.execPath));
-  const scriptMatch = isNpmChannel ? (0, import_node_path22.basename)((0, import_node_url2.fileURLToPath)(__import_meta_url)) : void 0;
+  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path23.basename)(process.execPath));
+  const scriptMatch = isNpmChannel ? (0, import_node_path23.basename)((0, import_node_url3.fileURLToPath)(__import_meta_url)) : void 0;
   const realExe = resolveRealInstallExe(process.execPath);
   const exeMatch = realExe === process.execPath ? process.execPath : [process.execPath, realExe];
   const pids = supervisorPidsToKill(enumerateProcesses(), process.pid, exeMatch, scriptMatch);
@@ -56237,7 +56334,7 @@ async function runAction(arg, flagArgv = [], selfVersion = null) {
   }
   await action(parseTeardownFlags(flagArgv));
 }
-var entry = (0, import_node_path22.basename)(process.argv[1] ?? "").toLowerCase();
+var entry = (0, import_node_path23.basename)(process.argv[1] ?? "").toLowerCase();
 if (entry === "launch.mjs") {
   runAction(process.argv[2], process.argv.slice(3)).catch((e) => {
     log(`error: ${e?.message ?? e}`);
@@ -56311,11 +56408,11 @@ function awareUpgradeBlockReason(s) {
 }
 
 // skill-sync.ts
-var import_node_fs26 = require("node:fs");
-var import_node_os16 = require("node:os");
-var import_node_path23 = require("node:path");
-var import_node_url3 = require("node:url");
-var import_yaml7 = __toESM(require_dist6(), 1);
+var import_node_fs27 = require("node:fs");
+var import_node_os17 = require("node:os");
+var import_node_path24 = require("node:path");
+var import_node_url4 = require("node:url");
+var import_yaml8 = __toESM(require_dist6(), 1);
 
 // build/ship-skills.mjs
 var PRODUCT_SKILLS = [
@@ -56348,33 +56445,33 @@ function selectShippedSkillNames(names) {
 }
 
 // skill-sync.ts
-var __dirname3 = (0, import_node_path23.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
+var __dirname3 = (0, import_node_path24.dirname)((0, import_node_url4.fileURLToPath)(__import_meta_url));
 function bundledSkillsRoot() {
   const candidates = [
-    (0, import_node_path23.join)(__dirname3, "skills"),
-    (0, import_node_path23.join)((0, import_node_path23.dirname)(process.execPath), "skills"),
-    (0, import_node_path23.join)(__dirname3, "..", ".claude", "skills")
+    (0, import_node_path24.join)(__dirname3, "skills"),
+    (0, import_node_path24.join)((0, import_node_path24.dirname)(process.execPath), "skills"),
+    (0, import_node_path24.join)(__dirname3, "..", ".claude", "skills")
   ];
-  return candidates.find((p) => (0, import_node_fs26.existsSync)(p)) ?? null;
+  return candidates.find((p) => (0, import_node_fs27.existsSync)(p)) ?? null;
 }
 function targetConfigDirs() {
   const override = process.env.FLOLESS_SKILL_TARGETS;
   if (override) {
     return override.split(";").map((d) => d.trim()).filter(Boolean).map((dir) => ({ runtime: "custom", dir }));
   }
-  const home = (0, import_node_os16.homedir)();
+  const home = (0, import_node_os17.homedir)();
   return [
-    { runtime: "claude", dir: (0, import_node_path23.join)(home, ".claude") },
-    { runtime: "codex", dir: (0, import_node_path23.join)(home, ".codex") },
-    { runtime: "opencode", dir: (0, import_node_path23.join)(home, ".opencode") }
+    { runtime: "claude", dir: (0, import_node_path24.join)(home, ".claude") },
+    { runtime: "codex", dir: (0, import_node_path24.join)(home, ".codex") },
+    { runtime: "opencode", dir: (0, import_node_path24.join)(home, ".opencode") }
   ];
 }
 function skillVersion(skillMdPath) {
   try {
-    const text = (0, import_node_fs26.readFileSync)(skillMdPath, "utf8");
+    const text = (0, import_node_fs27.readFileSync)(skillMdPath, "utf8");
     const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(text);
     if (!m || m[1] === void 0) return null;
-    const fm = (0, import_yaml7.parse)(m[1]);
+    const fm = (0, import_yaml8.parse)(m[1]);
     const meta = fm?.metadata;
     const v = meta?.version;
     return typeof v === "string" || typeof v === "number" ? String(v) : null;
@@ -56411,21 +56508,21 @@ function decideAction(installed, bundled) {
 function bundledSkills(root) {
   let entries = [];
   try {
-    entries = selectShippedSkillNames((0, import_node_fs26.readdirSync)(root));
+    entries = selectShippedSkillNames((0, import_node_fs27.readdirSync)(root));
   } catch {
     return [];
   }
   const out = [];
   for (const name of entries) {
-    const dir = (0, import_node_path23.join)(root, name);
+    const dir = (0, import_node_path24.join)(root, name);
     let isDir = false;
     try {
-      isDir = (0, import_node_fs26.statSync)(dir).isDirectory();
+      isDir = (0, import_node_fs27.statSync)(dir).isDirectory();
     } catch {
       isDir = false;
     }
     if (!isDir) continue;
-    const v = skillVersion((0, import_node_path23.join)(dir, "SKILL.md"));
+    const v = skillVersion((0, import_node_path24.join)(dir, "SKILL.md"));
     if (!v) continue;
     out.push({ name, dir, version: v });
   }
@@ -56438,17 +56535,17 @@ function syncSkills() {
   const skills = bundledSkills(root);
   if (!skills.length) return results;
   for (const { runtime, dir: cfg } of targetConfigDirs()) {
-    if (!(0, import_node_fs26.existsSync)(cfg)) continue;
-    const skillsDir = (0, import_node_path23.join)(cfg, "skills");
+    if (!(0, import_node_fs27.existsSync)(cfg)) continue;
+    const skillsDir = (0, import_node_path24.join)(cfg, "skills");
     for (const s of skills) {
-      const dest = (0, import_node_path23.join)(skillsDir, s.name);
-      const installedMd = (0, import_node_path23.join)(dest, "SKILL.md");
-      const installed = (0, import_node_fs26.existsSync)(installedMd) ? skillVersion(installedMd) : null;
+      const dest = (0, import_node_path24.join)(skillsDir, s.name);
+      const installedMd = (0, import_node_path24.join)(dest, "SKILL.md");
+      const installed = (0, import_node_fs27.existsSync)(installedMd) ? skillVersion(installedMd) : null;
       const action = decideAction(installed, s.version);
       if (action === "installed" || action === "updated") {
         try {
-          if (action === "updated") (0, import_node_fs26.rmSync)(dest, { recursive: true, force: true });
-          (0, import_node_fs26.cpSync)(s.dir, dest, { recursive: true });
+          if (action === "updated") (0, import_node_fs27.rmSync)(dest, { recursive: true, force: true });
+          (0, import_node_fs27.cpSync)(s.dir, dest, { recursive: true });
           results.push({ runtime, skill: s.name, action, from: installed, to: s.version });
         } catch {
         }
@@ -56461,9 +56558,9 @@ function syncSkills() {
 }
 
 // watch.ts
-var import_node_os17 = require("node:os");
-var import_node_path25 = require("node:path");
-var import_node_fs27 = require("node:fs");
+var import_node_os18 = require("node:os");
+var import_node_path26 = require("node:path");
+var import_node_fs28 = require("node:fs");
 
 // node_modules/chokidar/esm/index.js
 var import_fs2 = require("fs");
@@ -56474,7 +56571,7 @@ var sysPath2 = __toESM(require("path"), 1);
 // node_modules/readdirp/esm/index.js
 var import_promises2 = require("node:fs/promises");
 var import_node_stream2 = require("node:stream");
-var import_node_path24 = require("node:path");
+var import_node_path25 = require("node:path");
 var EntryTypes = {
   FILE_TYPE: "files",
   DIR_TYPE: "directories",
@@ -56549,7 +56646,7 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
     this._wantsDir = type ? DIR_TYPES.has(type) : false;
     this._wantsFile = type ? FILE_TYPES.has(type) : false;
     this._wantsEverything = type === EntryTypes.EVERYTHING_TYPE;
-    this._root = (0, import_node_path24.resolve)(root);
+    this._root = (0, import_node_path25.resolve)(root);
     this._isDirent = !opts.alwaysStat;
     this._statsProp = this._isDirent ? "dirent" : "stats";
     this._rdOptions = { encoding: "utf8", withFileTypes: this._isDirent };
@@ -56620,8 +56717,8 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
     let entry2;
     const basename5 = this._isDirent ? dirent.name : dirent;
     try {
-      const fullPath = (0, import_node_path24.resolve)((0, import_node_path24.join)(path, basename5));
-      entry2 = { path: (0, import_node_path24.relative)(this._root, fullPath), fullPath, basename: basename5 };
+      const fullPath = (0, import_node_path25.resolve)((0, import_node_path25.join)(path, basename5));
+      entry2 = { path: (0, import_node_path25.relative)(this._root, fullPath), fullPath, basename: basename5 };
       entry2[this._statsProp] = this._isDirent ? dirent : await this._stat(fullPath);
     } catch (err) {
       this._onError(err);
@@ -56655,7 +56752,7 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
         }
         if (entryRealPathStats.isDirectory()) {
           const len2 = entryRealPath.length;
-          if (full.startsWith(entryRealPath) && full.substr(len2, 1) === import_node_path24.sep) {
+          if (full.startsWith(entryRealPath) && full.substr(len2, 1) === import_node_path25.sep) {
             const recursiveError = new Error(`Circular symlink detected: "${full}" points to "${entryRealPath}"`);
             recursiveError.code = RECURSIVE_ERROR_CODE;
             return this._onError(recursiveError);
@@ -57194,9 +57291,9 @@ var NodeFsHandler = class {
     if (this.fsw.closed) {
       return;
     }
-    const dirname11 = sysPath.dirname(file);
+    const dirname12 = sysPath.dirname(file);
     const basename5 = sysPath.basename(file);
-    const parent = this.fsw._getWatchedDir(dirname11);
+    const parent = this.fsw._getWatchedDir(dirname12);
     let prevStats = stats;
     if (parent.has(basename5))
       return;
@@ -57223,7 +57320,7 @@ var NodeFsHandler = class {
             prevStats = newStats2;
           }
         } catch (error) {
-          this.fsw._remove(dirname11, basename5);
+          this.fsw._remove(dirname12, basename5);
         }
       } else if (parent.has(basename5)) {
         const at = newStats.atimeMs;
@@ -58163,33 +58260,33 @@ function appIdFromLogPath(path) {
   return i >= 0 && parts[i + 1] ? parts[i + 1] : null;
 }
 function samePath(a, b) {
-  const ra = (0, import_node_path25.resolve)(a);
-  const rb = (0, import_node_path25.resolve)(b);
+  const ra = (0, import_node_path26.resolve)(a);
+  const rb = (0, import_node_path26.resolve)(b);
   return process.platform === "win32" ? ra.toLowerCase() === rb.toLowerCase() : ra === rb;
 }
 function underDir(path, dir) {
-  const rp = (0, import_node_path25.resolve)(path);
-  const rd = (0, import_node_path25.resolve)(dir);
+  const rp = (0, import_node_path26.resolve)(path);
+  const rd = (0, import_node_path26.resolve)(dir);
   const [p, d] = process.platform === "win32" ? [rp.toLowerCase(), rd.toLowerCase()] : [rp, rd];
-  return p === d || p.startsWith(d + import_node_path25.sep);
+  return p === d || p.startsWith(d + import_node_path26.sep);
 }
 function startWatcher() {
-  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path25.join)((0, import_node_os17.homedir)(), ".aware");
-  const credentialsDir = (0, import_node_path25.join)(awareDir, "credentials");
-  if (!(0, import_node_fs27.existsSync)(credentialsDir)) {
+  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path26.join)((0, import_node_os18.homedir)(), ".aware");
+  const credentialsDir = (0, import_node_path26.join)(awareDir, "credentials");
+  if (!(0, import_node_fs28.existsSync)(credentialsDir)) {
     try {
-      (0, import_node_fs27.mkdirSync)(credentialsDir, { recursive: true });
+      (0, import_node_fs28.mkdirSync)(credentialsDir, { recursive: true });
     } catch {
     }
   }
-  if (!(0, import_node_fs27.existsSync)(uiDir)) {
+  if (!(0, import_node_fs28.existsSync)(uiDir)) {
     try {
-      (0, import_node_fs27.mkdirSync)(uiDir, { recursive: true });
+      (0, import_node_fs28.mkdirSync)(uiDir, { recursive: true });
     } catch {
     }
   }
-  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path25.join)(awareDir, d)).filter((p) => (0, import_node_fs27.existsSync)(p));
-  if ((0, import_node_fs27.existsSync)(uiDir)) targets.push(uiDir);
+  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path26.join)(awareDir, d)).filter((p) => (0, import_node_fs28.existsSync)(p));
+  if ((0, import_node_fs28.existsSync)(uiDir)) targets.push(uiDir);
   if (targets.length === 0) {
     return null;
   }
@@ -58218,11 +58315,11 @@ function startWatcher() {
     const isCredential = path.split(/[\\/]/).includes("credentials");
     const kind = isCredential ? "credential" : path.endsWith(".jsonl") ? "trace" : path.endsWith(".lock") ? "lock" : path.endsWith(".flo") || path.endsWith(".app") ? "source" : "file";
     broadcast({ type: "fs-change", kind, event, path });
-    if (kind === "trace" && event !== "unlink" && (0, import_node_fs27.existsSync)(path)) {
+    if (kind === "trace" && event !== "unlink" && (0, import_node_fs28.existsSync)(path)) {
       const id = appIdFromLogPath(path);
       if (!id) return;
       try {
-        broadcast({ type: "trace-file", id, runId: path.split(import_node_path25.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs27.readFileSync)(path, "utf8")) });
+        broadcast({ type: "trace-file", id, runId: path.split(import_node_path26.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs28.readFileSync)(path, "utf8")) });
       } catch {
       }
     }
@@ -58231,10 +58328,10 @@ function startWatcher() {
 }
 
 // index.ts
-var __dirname4 = (0, import_node_path26.dirname)((0, import_node_url4.fileURLToPath)(__import_meta_url));
-var WEB_ROOT = [(0, import_node_path26.join)(__dirname4, "web"), (0, import_node_path26.join)((0, import_node_path26.dirname)(process.execPath), "web"), (0, import_node_path26.join)(__dirname4, "..", "web")].find(
-  (p) => (0, import_node_fs28.existsSync)(p)
-) ?? (0, import_node_path26.join)(__dirname4, "..", "web");
+var __dirname4 = (0, import_node_path27.dirname)((0, import_node_url5.fileURLToPath)(__import_meta_url));
+var WEB_ROOT = [(0, import_node_path27.join)(__dirname4, "web"), (0, import_node_path27.join)((0, import_node_path27.dirname)(process.execPath), "web"), (0, import_node_path27.join)(__dirname4, "..", "web")].find(
+  (p) => (0, import_node_fs29.existsSync)(p)
+) ?? (0, import_node_path27.join)(__dirname4, "..", "web");
 var PORT2 = Number(process.env.PORT ?? 4317);
 var HOST = "127.0.0.1";
 var crashHandlersInstalled = false;
@@ -58250,7 +58347,7 @@ function installCrashHandlers() {
 ${stack}
 `;
     try {
-      (0, import_node_fs28.appendFileSync)(logFilePath(), line);
+      (0, import_node_fs29.appendFileSync)(logFilePath(), line);
     } catch {
     }
     if (process.stderr.isTTY) process.stderr.write(line);
@@ -58515,6 +58612,73 @@ async function startServer() {
     const apps = await aware.list();
     return { ok: true, apps: apps.map((a) => ({ ...a, provider: appProvider(a.id), baked: appBaked(a.id) })) };
   });
+  app.get("/api/workflows/updates", async () => {
+    const apps = await aware.list();
+    const installed = {};
+    for (const a of apps) {
+      try {
+        installed[a.id] = readApp(a.id).version;
+      } catch {
+      }
+    }
+    return { ok: true, updates: detectUpdates(installed, loadTemplates()) };
+  });
+  const _wfUpdating = /* @__PURE__ */ new Set();
+  app.post("/api/workflows/:id/update", async (req, reply) => {
+    const id = req.params.id;
+    const t = loadTemplates().find((x) => x.id === id);
+    if (!t) return reply.status(404).send({ ok: false, error: `no bundled template for "${id}"`, code: "no-template" });
+    if (t.publisher !== "floless") return reply.status(400).send({ ok: false, error: `"${id}" is not a FloLess-published workflow`, code: "not-published" });
+    if (_wfUpdating.has(id)) return reply.status(409).send({ ok: false, error: `an update for "${id}" is already in progress`, code: "in-progress" });
+    let fromVersion;
+    let srcPath;
+    let appDirPath2;
+    try {
+      const a = readApp(id);
+      fromVersion = a.version;
+      srcPath = a.source.path;
+      appDirPath2 = appDir(id);
+    } catch {
+      return reply.status(404).send({ ok: false, error: `"${id}" is not installed`, code: "not-installed" });
+    }
+    if (compareSemver(t.version, fromVersion) <= 0) {
+      return reply.status(409).send({ ok: false, error: `"${id}" is already at ${fromVersion}`, code: "up-to-date" });
+    }
+    const contract = readContract(id);
+    if (contract == null && (0, import_node_fs29.existsSync)(contractPath(id))) {
+      return reply.status(409).send({ ok: false, error: `"${id}"'s saved data is unreadable \u2014 open it in the editor and re-save before updating`, code: "contract-corrupt" });
+    }
+    if (contract != null) {
+      const v = validateSteelTakeoff(contract);
+      if (!v.valid) return reply.status(409).send({ ok: false, error: `"${id}"'s saved data is invalid \u2014 re-save it in the editor before updating`, code: "contract-invalid" });
+    }
+    _wfUpdating.add(id);
+    const bdir = backupDir(id, fromVersion, Date.now());
+    try {
+      (0, import_node_fs29.mkdirSync)((0, import_node_path27.dirname)(bdir), { recursive: true });
+      (0, import_node_fs29.cpSync)(appDirPath2, bdir, { recursive: true });
+      (0, import_node_fs29.cpSync)(t.path, srcPath);
+      if (contract != null) {
+        bakeContractIntoApp(srcPath, contract);
+        bakeDownstream(srcPath, contract);
+      }
+      await aware.compile(srcPath);
+      broadcast({ type: "apps-changed", id });
+      return { ok: true, id, fromVersion, toVersion: t.version, backupPath: bdir };
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : String(e);
+      try {
+        (0, import_node_fs29.rmSync)(appDirPath2, { recursive: true, force: true });
+        (0, import_node_fs29.cpSync)(bdir, appDirPath2, { recursive: true });
+      } catch (re) {
+        const rmsg = re instanceof Error ? re.message : String(re);
+        return reply.status(500).send({ ok: false, error: `update failed (${msg}) AND rollback failed (${rmsg}) \u2014 restore manually from ${bdir}`, code: "rollback-failed", backupPath: bdir });
+      }
+      return reply.status(500).send({ ok: false, error: `update failed (rolled back to ${fromVersion}): ${msg}`, code: "update-failed" });
+    } finally {
+      _wfUpdating.delete(id);
+    }
+  });
   app.get("/api/agents", async () => {
     const agents = await aware.agentList();
     return { ok: true, agents };
@@ -58777,7 +58941,7 @@ async function startServer() {
     }
     const companionId = `${req.params.appId}-ifc`;
     const filename = `${req.params.appId}.ifc`;
-    const outPath = (0, import_node_path26.join)(appPath(companionId), filename);
+    const outPath = (0, import_node_path27.join)(appPath(companionId), filename);
     let flo;
     try {
       flo = writeIfcApp(appPath(companionId), companionId, scene, outPath);
@@ -58800,8 +58964,8 @@ async function startServer() {
       }
       throw e;
     }
-    if (!(0, import_node_fs28.existsSync)(outPath)) return reply.send({ ok: false, error: "the IFC export produced no file" });
-    const content = (0, import_node_fs28.readFileSync)(outPath, "utf8");
+    if (!(0, import_node_fs29.existsSync)(outPath)) return reply.send({ ok: false, error: "the IFC export produced no file" });
+    const content = (0, import_node_fs29.readFileSync)(outPath, "utf8");
     broadcast({ type: "apps-changed" });
     return { ok: true, filename, content, bytes: Buffer.byteLength(content), skipped };
   });
@@ -58950,11 +59114,11 @@ async function startServer() {
     if (appExists(id)) {
       return reply.status(409).send({ ok: false, error: `a workflow named "${id}" is already installed \u2014 remove it first, or rename the file's app: id`, code: "exists", id });
     }
-    const stageRoot = (0, import_node_fs28.mkdtempSync)((0, import_node_path26.join)((0, import_node_os18.tmpdir)(), "floless-import-"));
+    const stageRoot = (0, import_node_fs29.mkdtempSync)((0, import_node_path27.join)((0, import_node_os19.tmpdir)(), "floless-import-"));
     try {
-      const stageDir = (0, import_node_path26.join)(stageRoot, id);
-      (0, import_node_fs28.mkdirSync)(stageDir);
-      (0, import_node_fs28.writeFileSync)((0, import_node_path26.join)(stageDir, `${id}.flo`), content);
+      const stageDir = (0, import_node_path27.join)(stageRoot, id);
+      (0, import_node_fs29.mkdirSync)(stageDir);
+      (0, import_node_fs29.writeFileSync)((0, import_node_path27.join)(stageDir, `${id}.flo`), content);
       await aware.install(stageDir);
     } catch (err) {
       try {
@@ -58964,7 +59128,7 @@ async function startServer() {
       const msg = err instanceof AwareError ? err.message : String(err?.message ?? err);
       return reply.status(502).send({ ok: false, error: `import failed: ${msg}` });
     } finally {
-      (0, import_node_fs28.rmSync)(stageRoot, { recursive: true, force: true });
+      (0, import_node_fs29.rmSync)(stageRoot, { recursive: true, force: true });
     }
     broadcast({ type: "apps-changed", id });
     return { ok: true, id };
@@ -58978,13 +59142,13 @@ async function startServer() {
     }
     const inputs = appData.inputs.map((i) => ({ name: i.name, type: i.type }));
     const baked = bakeFloSource(appData.source.text, inputs);
-    const tmpRoot = (0, import_node_fs28.mkdtempSync)((0, import_node_path26.join)((0, import_node_os18.tmpdir)(), "floless-bake-"));
-    const backupDir = (0, import_node_path26.join)(tmpRoot, `${id}-backup`);
-    const bakeDir = (0, import_node_path26.join)(tmpRoot, id);
-    (0, import_node_fs28.cpSync)(appDir(id), backupDir, { recursive: true });
-    (0, import_node_fs28.cpSync)(appDir(id), bakeDir, { recursive: true });
+    const tmpRoot = (0, import_node_fs29.mkdtempSync)((0, import_node_path27.join)((0, import_node_os19.tmpdir)(), "floless-bake-"));
+    const backupDir2 = (0, import_node_path27.join)(tmpRoot, `${id}-backup`);
+    const bakeDir = (0, import_node_path27.join)(tmpRoot, id);
+    (0, import_node_fs29.cpSync)(appDir(id), backupDir2, { recursive: true });
+    (0, import_node_fs29.cpSync)(appDir(id), bakeDir, { recursive: true });
     const floName = appData.source.path.split(/[\\/]/).pop();
-    (0, import_node_fs28.writeFileSync)((0, import_node_path26.join)(bakeDir, floName), baked);
+    (0, import_node_fs29.writeFileSync)((0, import_node_path27.join)(bakeDir, floName), baked);
     let appInstalled2 = true;
     try {
       await aware.uninstall(id);
@@ -58994,29 +59158,29 @@ async function startServer() {
         appInstalled2 = true;
       } catch (installErr) {
         try {
-          await aware.install(backupDir);
+          await aware.install(backupDir2);
           appInstalled2 = true;
         } catch (restoreErr) {
           app.log.error({ id, tmpRoot, restoreErr: String(restoreErr) }, "bake: install AND restore failed \u2014 app uninstalled; backup retained");
           return reply.status(502).send({
             ok: false,
-            error: `bake failed and the app could not be restored \u2014 its source is backed up at ${backupDir}. Reinstall it from there with: aware app install "${backupDir}"`
+            error: `bake failed and the app could not be restored \u2014 its source is backed up at ${backupDir2}. Reinstall it from there with: aware app install "${backupDir2}"`
           });
         }
         throw installErr;
       }
       try {
-        await aware.compile((0, import_node_path26.join)(appDir(id), floName));
+        await aware.compile((0, import_node_path27.join)(appDir(id), floName));
       } catch (compileErr) {
         app.log.warn({ id, compileErr: String(compileErr) }, "bake: post-install recompile failed (app baked but may need a manual Compile)");
       }
       broadcast({ type: "baked", id });
       return { ok: true, id, agent: id, inputs };
     } finally {
-      if (appInstalled2) (0, import_node_fs28.rmSync)(tmpRoot, { recursive: true, force: true });
+      if (appInstalled2) (0, import_node_fs29.rmSync)(tmpRoot, { recursive: true, force: true });
     }
   });
-  const graftAgentsDir = () => (0, import_node_path26.join)((0, import_node_os18.homedir)(), ".aware", "agents");
+  const graftAgentsDir = () => (0, import_node_path27.join)((0, import_node_os19.homedir)(), ".aware", "agents");
   app.post("/api/graft/match", async (req, reply) => {
     const { glob } = req.body ?? {};
     if (!glob) return reply.status(400).send({ ok: false, error: "glob required" });
@@ -59033,7 +59197,7 @@ async function startServer() {
     if (!sourceKind || !sourceRef) {
       return reply.status(400).send({ ok: false, error: "sourceKind and sourceRef required" });
     }
-    const tempHome = (0, import_node_fs28.mkdtempSync)((0, import_node_path26.join)((0, import_node_os18.tmpdir)(), "floless-graft-"));
+    const tempHome = (0, import_node_fs29.mkdtempSync)((0, import_node_path27.join)((0, import_node_os19.tmpdir)(), "floless-graft-"));
     let result;
     try {
       result = await aware.build({
@@ -59046,19 +59210,19 @@ async function startServer() {
         awareHome: tempHome
       });
     } catch (err) {
-      (0, import_node_fs28.rmSync)(tempHome, { recursive: true, force: true });
+      (0, import_node_fs29.rmSync)(tempHome, { recursive: true, force: true });
       const msg = err instanceof AwareError ? err.message : String(err?.message ?? err);
       return reply.status(422).send({ ok: false, error: msg });
     }
     const manifest = readStagedManifest(result.agentDir);
     if (!manifest) {
-      (0, import_node_fs28.rmSync)(tempHome, { recursive: true, force: true });
+      (0, import_node_fs29.rmSync)(tempHome, { recursive: true, force: true });
       return reply.status(502).send({ ok: false, error: `build produced output at ${result.agentDir} but no manifest.yaml` });
     }
     const token = (0, import_node_crypto7.randomUUID)();
     registerStage(token, tempHome, result.agentId);
     const preview = buildPreview(manifest, sourceKind, sourceRef, token);
-    if ((0, import_node_fs28.existsSync)((0, import_node_path26.join)(graftAgentsDir(), result.agentId))) {
+    if ((0, import_node_fs29.existsSync)((0, import_node_path27.join)(graftAgentsDir(), result.agentId))) {
       preview.warnings.unshift(`An agent named "${result.agentId}" is already installed \u2014 creating it will overwrite it.`);
     }
     return { ok: true, preview };
@@ -59077,7 +59241,7 @@ async function startServer() {
         registerStage(stagedRef, stage.tempDir, stage.agentId);
         return reply.status(409).send({ ok: false, error: err.message, agentId: stage.agentId, collision: true });
       }
-      (0, import_node_fs28.rmSync)(stage.tempDir, { recursive: true, force: true });
+      (0, import_node_fs29.rmSync)(stage.tempDir, { recursive: true, force: true });
       throw err;
     }
     broadcast({ type: "grafted", id: stage.agentId });
@@ -59310,11 +59474,11 @@ async function startServer() {
   app.get("/api/requests/:id/snapshot/:n", async (req, reply) => {
     const n = Number.parseInt(req.params.n, 10);
     const p = Number.isInteger(n) ? snapshotPathFor(req.params.id, n) : null;
-    if (!p || !(0, import_node_fs28.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
+    if (!p || !(0, import_node_fs29.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
     const ext = p.split(".").pop().toLowerCase();
     reply.header("Content-Type", ext === "png" ? "image/png" : ext === "webp" ? "image/webp" : ext === "pdf" ? "application/pdf" : "image/jpeg");
     reply.header("Cache-Control", "no-store");
-    return (0, import_node_fs28.readFileSync)(p);
+    return (0, import_node_fs29.readFileSync)(p);
   });
   app.post(
     "/api/tweak",
@@ -59464,7 +59628,7 @@ async function startServer() {
         warn(`last-run-status:${ref} \u2014 trace exists but couldn't be parsed (corrupt/truncated)`);
         let finishedAt2 = null;
         try {
-          finishedAt2 = (0, import_node_fs28.statSync)(latest.path).mtime.toISOString();
+          finishedAt2 = (0, import_node_fs29.statSync)(latest.path).mtime.toISOString();
         } catch {
           finishedAt2 = null;
         }
@@ -59474,7 +59638,7 @@ async function startServer() {
       let finishedAt = typeof runEnd?.ts === "string" ? runEnd.ts : null;
       if (!finishedAt) {
         try {
-          finishedAt = (0, import_node_fs28.statSync)(latest.path).mtime.toISOString();
+          finishedAt = (0, import_node_fs29.statSync)(latest.path).mtime.toISOString();
         } catch {
           finishedAt = null;
         }