@floless/app 0.55.0 → 0.57.0

package/dist/floless-server.cjs

@@ -5489,7 +5489,7 @@ var require_thread_stream = __commonJS({
     var { version } = require_package();
     var { EventEmitter: EventEmitter2 } = require("events");
     var { Worker: Worker2 } = require("worker_threads");
-    var { join: join29 } = require("path");
+    var { join: join30 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -5540,7 +5540,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join29(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join30(__dirname, "lib", "worker.js");
       const worker = new Worker2(toExecute, {
         ...opts.workerOpts,
         name: opts.workerOpts?.name || "thread-stream",
@@ -6006,9 +6006,9 @@ var require_transport = __commonJS({
   "node_modules/pino/lib/transport.js"(exports2, module2) {
     "use strict";
     var { createRequire: createRequire5 } = require("module");
-    var { existsSync: existsSync24 } = require("node:fs");
+    var { existsSync: existsSync25 } = require("node:fs");
     var getCallers = require_caller();
-    var { join: join29, isAbsolute: isAbsolute2, sep: sep4 } = require("node:path");
+    var { join: join30, isAbsolute: isAbsolute2, sep: sep4 } = require("node:path");
     var { fileURLToPath: fileURLToPath6 } = require("node:url");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
@@ -6080,7 +6080,7 @@ var require_transport = __commonJS({
           return false;
         }
       }
-      return isAbsolute2(path) && !existsSync24(path);
+      return isAbsolute2(path) && !existsSync25(path);
     }
     function stripQuotes(value) {
       const first = value[0];
@@ -6161,7 +6161,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join29(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join30(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -6179,7 +6179,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline2) {
-        target = bundlerOverrides["pino-worker"] || join29(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join30(__dirname, "worker.js");
         options.pipelines = [pipeline2.map((dest) => {
           return {
             ...dest,
@@ -6202,7 +6202,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join29(__dirname, "..", "file.js");
+          return join30(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -6317,14 +6317,14 @@ var require_tools = __commonJS({
       }
       return point < 32 ? JSON.stringify(str) : '"' + result + '"';
     }
-    function asJson(obj, msg, num, time) {
+    function asJson(obj, msg, num2, time) {
       if (asJsonChan.hasSubscribers === false) {
-        return _asJson.call(this, obj, msg, num, time);
+        return _asJson.call(this, obj, msg, num2, time);
       }
       const store = { instance: this, arguments };
-      return asJsonChan.traceSync(_asJson, store, this, obj, msg, num, time);
+      return asJsonChan.traceSync(_asJson, store, this, obj, msg, num2, time);
     }
-    function _asJson(obj, msg, num, time) {
+    function _asJson(obj, msg, num2, time) {
       const stringify2 = this[stringifySym];
       const stringifySafe = this[stringifySafeSym];
       const stringifiers = this[stringifiersSym];
@@ -6334,7 +6334,7 @@ var require_tools = __commonJS({
       const formatters = this[formattersSym];
       const messageKey = this[messageKeySym];
       const errorKey = this[errorKeySym];
-      let data = this[lsCacheSym][num] + time;
+      let data = this[lsCacheSym][num2] + time;
       data = data + chindings;
       let value;
       if (formatters.log) {
@@ -6959,7 +6959,7 @@ var require_proto = __commonJS({
     function defaultMixinMergeStrategy(mergeObject, mixinObject) {
       return Object.assign(mixinObject, mergeObject);
     }
-    function write(_obj, msg, num) {
+    function write(_obj, msg, num2) {
       const t = this[timeSym]();
       const mixin = this[mixinSym];
       const errorKey = this[errorKeySym];
@@ -6981,12 +6981,12 @@ var require_proto = __commonJS({
         }
       }
       if (mixin) {
-        obj = mixinMergeStrategy(obj, mixin(obj, num, this));
+        obj = mixinMergeStrategy(obj, mixin(obj, num2, this));
       }
-      const s = this[asJsonSym](obj, msg, num, t);
+      const s = this[asJsonSym](obj, msg, num2, t);
       const stream = this[streamSym];
       if (stream[needsMetadataGsym] === true) {
-        stream.lastLevel = num;
+        stream.lastLevel = num2;
         stream.lastObj = obj;
         stream.lastMsg = msg;
         stream.lastTime = t.slice(this[timeSliceIndexSym]);
@@ -7182,7 +7182,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join29 = ",";
+            let join30 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -7196,7 +7196,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join29 = `,
+                join30 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -7204,13 +7204,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join29;
+                res += join30;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join29}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join30}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -7231,7 +7231,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join29 = `,
+              join30 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -7245,13 +7245,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join29;
+                separator = join30;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join29;
+              separator = join30;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -7292,7 +7292,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join29 = ",";
+            let join30 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -7305,7 +7305,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join29 = `,
+                join30 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -7313,13 +7313,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join29;
+                res += join30;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join29}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join30}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -7332,7 +7332,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join29 = `,
+              join30 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -7341,7 +7341,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join29;
+                separator = join30;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -7399,20 +7399,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join30 = `,
+              const join31 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join30;
+                res2 += join31;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join30}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join31}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -7428,16 +7428,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join29 = `,
+            const join30 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join29, maximumBreadth);
+              res += stringifyTypedArray(value, join30, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join29;
+              separator = join30;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -7448,13 +7448,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join29;
+                separator = join30;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join29;
+              separator = join30;
             }
             if (separator !== "") {
               res = `
@@ -8513,13 +8513,13 @@ var require_serializer = __commonJS({
         return "" + integer;
       }
       asNumber(i) {
-        const num = Number(i);
-        if (num !== num) {
+        const num2 = Number(i);
+        if (num2 !== num2) {
           throw new Error(`The value "${i}" cannot be converted to a number.`);
-        } else if (num === Infinity || num === -Infinity) {
+        } else if (num2 === Infinity || num2 === -Infinity) {
           return "null";
         } else {
-          return "" + num;
+          return "" + num2;
         }
       }
       asBoolean(bool) {
@@ -10711,17 +10711,17 @@ var require_proxy_addr = __commonJS({
       return len2 === 0 ? trustNone : len2 === 1 ? trustSingle(rangeSubnets[0]) : trustMulti(rangeSubnets);
     }
     function parseipNotation(note) {
-      const pos = note.lastIndexOf("/");
-      const str = pos !== -1 ? note.substring(0, pos) : note;
+      const pos2 = note.lastIndexOf("/");
+      const str = pos2 !== -1 ? note.substring(0, pos2) : note;
       if (!isip(str)) {
         throw new TypeError("invalid IP address: " + str);
       }
       let ip = parseip(str);
-      if (pos === -1 && ip.kind() === "ipv6" && ip.isIPv4MappedAddress()) {
+      if (pos2 === -1 && ip.kind() === "ipv6" && ip.isIPv4MappedAddress()) {
         ip = ip.toIPv4Address();
       }
       const max = ip.kind() === "ipv6" ? 128 : 32;
-      let range = pos !== -1 ? note.substring(pos + 1, note.length) : null;
+      let range = pos2 !== -1 ? note.substring(pos2 + 1, note.length) : null;
       if (range === null) {
         range = max;
       } else if (DIGIT_REGEXP.test(range)) {
@@ -17085,15 +17085,15 @@ var require_ucs2length = __commonJS({
     function ucs2length(str) {
       const len2 = str.length;
       let length = 0;
-      let pos = 0;
+      let pos2 = 0;
       let value;
-      while (pos < len2) {
+      while (pos2 < len2) {
         length++;
-        value = str.charCodeAt(pos++);
-        if (value >= 55296 && value <= 56319 && pos < len2) {
-          value = str.charCodeAt(pos);
+        value = str.charCodeAt(pos2++);
+        if (value >= 55296 && value <= 56319 && pos2 < len2) {
+          value = str.charCodeAt(pos2);
           if ((value & 64512) === 56320)
-            pos++;
+            pos2++;
         }
       }
       return length;
@@ -19981,14 +19981,14 @@ var require_parseJson = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.parseJsonString = exports2.parseJsonNumber = exports2.parseJson = void 0;
     var rxParseJson = /position\s(\d+)(?: \(line \d+ column \d+\))?$/;
-    function parseJson(s, pos) {
+    function parseJson(s, pos2) {
       let endPos;
       parseJson.message = void 0;
       let matches;
-      if (pos)
-        s = s.slice(pos);
+      if (pos2)
+        s = s.slice(pos2);
       try {
-        parseJson.position = pos + s.length;
+        parseJson.position = pos2 + s.length;
         return JSON.parse(s);
       } catch (e) {
         matches = rxParseJson.exec(e.message);
@@ -19999,7 +19999,7 @@ var require_parseJson = __commonJS({
         endPos = +matches[1];
         const c = s[endPos];
         s = s.slice(0, endPos);
-        parseJson.position = pos + endPos;
+        parseJson.position = pos2 + endPos;
         try {
           return JSON.parse(s);
         } catch (e1) {
@@ -20012,17 +20012,17 @@ var require_parseJson = __commonJS({
     parseJson.message = void 0;
     parseJson.position = 0;
     parseJson.code = 'require("ajv/dist/runtime/parseJson").parseJson';
-    function parseJsonNumber(s, pos, maxDigits) {
+    function parseJsonNumber(s, pos2, maxDigits) {
       let numStr = "";
       let c;
       parseJsonNumber.message = void 0;
-      if (s[pos] === "-") {
+      if (s[pos2] === "-") {
         numStr += "-";
-        pos++;
+        pos2++;
       }
-      if (s[pos] === "0") {
+      if (s[pos2] === "0") {
         numStr += "0";
-        pos++;
+        pos2++;
       } else {
         if (!parseDigits(maxDigits)) {
           errorMessage();
@@ -20030,43 +20030,43 @@ var require_parseJson = __commonJS({
         }
       }
       if (maxDigits) {
-        parseJsonNumber.position = pos;
+        parseJsonNumber.position = pos2;
         return +numStr;
       }
-      if (s[pos] === ".") {
+      if (s[pos2] === ".") {
         numStr += ".";
-        pos++;
+        pos2++;
         if (!parseDigits()) {
           errorMessage();
           return void 0;
         }
       }
-      if (c = s[pos], c === "e" || c === "E") {
+      if (c = s[pos2], c === "e" || c === "E") {
         numStr += "e";
-        pos++;
-        if (c = s[pos], c === "+" || c === "-") {
+        pos2++;
+        if (c = s[pos2], c === "+" || c === "-") {
           numStr += c;
-          pos++;
+          pos2++;
         }
         if (!parseDigits()) {
           errorMessage();
           return void 0;
         }
       }
-      parseJsonNumber.position = pos;
+      parseJsonNumber.position = pos2;
       return +numStr;
       function parseDigits(maxLen) {
         let digit = false;
-        while (c = s[pos], c >= "0" && c <= "9" && (maxLen === void 0 || maxLen-- > 0)) {
+        while (c = s[pos2], c >= "0" && c <= "9" && (maxLen === void 0 || maxLen-- > 0)) {
           digit = true;
           numStr += c;
-          pos++;
+          pos2++;
         }
         return digit;
       }
       function errorMessage() {
-        parseJsonNumber.position = pos;
-        parseJsonNumber.message = pos < s.length ? `unexpected token ${s[pos]}` : "unexpected end";
+        parseJsonNumber.position = pos2;
+        parseJsonNumber.message = pos2 < s.length ? `unexpected token ${s[pos2]}` : "unexpected end";
       }
     }
     exports2.parseJsonNumber = parseJsonNumber;
@@ -20085,26 +20085,26 @@ var require_parseJson = __commonJS({
     };
     var CODE_A = "a".charCodeAt(0);
     var CODE_0 = "0".charCodeAt(0);
-    function parseJsonString(s, pos) {
+    function parseJsonString(s, pos2) {
       let str = "";
       let c;
       parseJsonString.message = void 0;
       while (true) {
-        c = s[pos++];
+        c = s[pos2++];
         if (c === '"')
           break;
         if (c === "\\") {
-          c = s[pos];
+          c = s[pos2];
           if (c in escapedChars) {
             str += escapedChars[c];
-            pos++;
+            pos2++;
           } else if (c === "u") {
-            pos++;
+            pos2++;
             let count = 4;
             let code = 0;
             while (count--) {
               code <<= 4;
-              c = s[pos];
+              c = s[pos2];
               if (c === void 0) {
                 errorMessage("unexpected end");
                 return void 0;
@@ -20118,7 +20118,7 @@ var require_parseJson = __commonJS({
                 errorMessage(`unexpected token ${c}`);
                 return void 0;
               }
-              pos++;
+              pos2++;
             }
             str += String.fromCharCode(code);
           } else {
@@ -20137,10 +20137,10 @@ var require_parseJson = __commonJS({
           }
         }
       }
-      parseJsonString.position = pos;
+      parseJsonString.position = pos2;
       return str;
       function errorMessage(msg) {
-        parseJsonString.position = pos;
+        parseJsonString.position = pos2;
         parseJsonString.message = msg;
       }
     }
@@ -24673,9 +24673,9 @@ var require_semver = __commonJS({
         } else {
           this.prerelease = m[4].split(".").map((id) => {
             if (/^[0-9]+$/.test(id)) {
-              const num = +id;
-              if (num >= 0 && num < MAX_SAFE_INTEGER) {
-                return num;
+              const num2 = +id;
+              if (num2 >= 0 && num2 < MAX_SAFE_INTEGER) {
+                return num2;
               }
             }
             return id;
@@ -25041,8 +25041,8 @@ var require_patch = __commonJS({
   "node_modules/semver/functions/patch.js"(exports2, module2) {
     "use strict";
     var SemVer = require_semver();
-    var patch = (a, loose) => new SemVer(a, loose).patch;
-    module2.exports = patch;
+    var patch2 = (a, loose) => new SemVer(a, loose).patch;
+    module2.exports = patch2;
   }
 });
 
@@ -25270,10 +25270,10 @@ var require_coerce = __commonJS({
       }
       const major = match[2];
       const minor = match[3] || "0";
-      const patch = match[4] || "0";
+      const patch2 = match[4] || "0";
       const prerelease = options.includePrerelease && match[5] ? `-${match[5]}` : "";
       const build = options.includePrerelease && match[6] ? `+${match[6]}` : "";
-      return parse(`${major}.${minor}.${patch}${prerelease}${build}`, options);
+      return parse(`${major}.${minor}.${patch2}${prerelease}${build}`, options);
     };
     module2.exports = coerce;
   }
@@ -26338,7 +26338,7 @@ var require_semver2 = __commonJS({
     var diff = require_diff();
     var major = require_major();
     var minor = require_minor();
-    var patch = require_patch();
+    var patch2 = require_patch();
     var prerelease = require_prerelease();
     var compare = require_compare();
     var rcompare = require_rcompare();
@@ -26377,7 +26377,7 @@ var require_semver2 = __commonJS({
       diff,
       major,
       minor,
-      patch,
+      patch: patch2,
       prerelease,
       compare,
       rcompare,
@@ -28698,13 +28698,13 @@ var require_accept_version = __commonJS({
       if (typeof version !== "string") {
         throw new TypeError("Version should be a string");
       }
-      let [major, minor, patch] = version.split(".", 3);
+      let [major, minor, patch2] = version.split(".", 3);
       if (isNaN(major)) {
         throw new TypeError("Major version must be a numeric value");
       }
       major = Number(major);
       minor = Number(minor) || 0;
-      patch = Number(patch) || 0;
+      patch2 = Number(patch2) || 0;
       if (major >= this.maxMajor) {
         this.maxMajor = major;
         this.store.set("x", store);
@@ -28717,11 +28717,11 @@ var require_accept_version = __commonJS({
         this.store.set(`${major}.x`, store);
         this.store.set(`${major}.x.x`, store);
       }
-      if (patch >= (this.maxPatches[`${major}.${minor}`] || 0)) {
-        this.maxPatches[`${major}.${minor}`] = patch;
+      if (patch2 >= (this.maxPatches[`${major}.${minor}`] || 0)) {
+        this.maxPatches[`${major}.${minor}`] = patch2;
         this.store.set(`${major}.${minor}.x`, store);
       }
-      this.store.set(`${major}.${minor}.${patch}`, store);
+      this.store.set(`${major}.${minor}.${patch2}`, store);
       return this;
     };
     SemVerStore.prototype.get = function(version) {
@@ -32432,48 +32432,48 @@ var require_set_cookie = __commonJS({
         return [];
       }
       var cookiesStrings = [];
-      var pos = 0;
+      var pos2 = 0;
       var start;
       var ch2;
       var lastComma;
       var nextStart;
       var cookiesSeparatorFound;
       function skipWhitespace() {
-        while (pos < cookiesString.length && /\s/.test(cookiesString.charAt(pos))) {
-          pos += 1;
+        while (pos2 < cookiesString.length && /\s/.test(cookiesString.charAt(pos2))) {
+          pos2 += 1;
         }
-        return pos < cookiesString.length;
+        return pos2 < cookiesString.length;
       }
       function notSpecialChar() {
-        ch2 = cookiesString.charAt(pos);
+        ch2 = cookiesString.charAt(pos2);
         return ch2 !== "=" && ch2 !== ";" && ch2 !== ",";
       }
-      while (pos < cookiesString.length) {
-        start = pos;
+      while (pos2 < cookiesString.length) {
+        start = pos2;
         cookiesSeparatorFound = false;
         while (skipWhitespace()) {
-          ch2 = cookiesString.charAt(pos);
+          ch2 = cookiesString.charAt(pos2);
           if (ch2 === ",") {
-            lastComma = pos;
-            pos += 1;
+            lastComma = pos2;
+            pos2 += 1;
             skipWhitespace();
-            nextStart = pos;
-            while (pos < cookiesString.length && notSpecialChar()) {
-              pos += 1;
+            nextStart = pos2;
+            while (pos2 < cookiesString.length && notSpecialChar()) {
+              pos2 += 1;
             }
-            if (pos < cookiesString.length && cookiesString.charAt(pos) === "=") {
+            if (pos2 < cookiesString.length && cookiesString.charAt(pos2) === "=") {
               cookiesSeparatorFound = true;
-              pos = nextStart;
+              pos2 = nextStart;
               cookiesStrings.push(cookiesString.substring(start, lastComma));
-              start = pos;
+              start = pos2;
             } else {
-              pos = lastComma + 1;
+              pos2 = lastComma + 1;
             }
           } else {
-            pos += 1;
+            pos2 += 1;
           }
         }
-        if (!cookiesSeparatorFound || pos >= cookiesString.length) {
+        if (!cookiesSeparatorFound || pos2 >= cookiesString.length) {
           cookiesStrings.push(cookiesString.substring(start, cookiesString.length));
         }
       }
@@ -34746,22 +34746,22 @@ var require_brace_expressions = __commonJS({
     var regexpEscape = (s) => s.replace(/[-[\]{}()*+?.,\\^$|#\s]/g, "\\$&");
     var rangesToString = (ranges) => ranges.join("");
     var parseClass = (glob, position) => {
-      const pos = position;
-      if (glob.charAt(pos) !== "[") {
+      const pos2 = position;
+      if (glob.charAt(pos2) !== "[") {
         throw new Error("not in a brace expression");
       }
       const ranges = [];
       const negs = [];
-      let i = pos + 1;
+      let i = pos2 + 1;
       let sawStart = false;
       let uflag = false;
       let escaping = false;
       let negate = false;
-      let endPos = pos;
+      let endPos = pos2;
       let rangeStart = "";
       WHILE: while (i < glob.length) {
         const c = glob.charAt(i);
-        if ((c === "!" || c === "^") && i === pos + 1) {
+        if ((c === "!" || c === "^") && i === pos2 + 1) {
           negate = true;
           i++;
           continue;
@@ -34782,7 +34782,7 @@ var require_brace_expressions = __commonJS({
           for (const [cls, [unip, u, neg]] of Object.entries(posixClasses)) {
             if (glob.startsWith(cls, i)) {
               if (rangeStart) {
-                return ["$.", false, glob.length - pos, true];
+                return ["$.", false, glob.length - pos2, true];
               }
               i += cls.length;
               if (neg)
@@ -34822,16 +34822,16 @@ var require_brace_expressions = __commonJS({
         return ["", false, 0, false];
       }
       if (!ranges.length && !negs.length) {
-        return ["$.", false, glob.length - pos, true];
+        return ["$.", false, glob.length - pos2, true];
       }
       if (negs.length === 0 && ranges.length === 1 && /^\\?.$/.test(ranges[0]) && !negate) {
         const r = ranges[0].length === 2 ? ranges[0].slice(-1) : ranges[0];
-        return [regexpEscape(r), false, endPos - pos, false];
+        return [regexpEscape(r), false, endPos - pos2, false];
       }
       const sranges = "[" + (negate ? "^" : "") + rangesToString(ranges) + "]";
       const snegs = "[" + (negate ? "" : "^") + rangesToString(negs) + "]";
       const comb = ranges.length && negs.length ? "(" + sranges + "|" + snegs + ")" : ranges.length ? sranges : snegs;
-      return [comb, uflag, endPos - pos, true];
+      return [comb, uflag, endPos - pos2, true];
     };
     exports2.parseClass = parseClass;
   }
@@ -35067,14 +35067,14 @@ var require_ast = __commonJS({
         }
         return c;
       }
-      static #parseAST(str, ast, pos, opt, extDepth) {
+      static #parseAST(str, ast, pos2, opt, extDepth) {
         const maxDepth = opt.maxExtglobRecursion ?? 2;
         let escaping = false;
         let inBrace = false;
         let braceStart = -1;
         let braceNeg = false;
         if (ast.type === null) {
-          let i2 = pos;
+          let i2 = pos2;
           let acc2 = "";
           while (i2 < str.length) {
             const c = str.charAt(i2++);
@@ -35114,7 +35114,7 @@ var require_ast = __commonJS({
           ast.push(acc2);
           return i2;
         }
-        let i = pos + 1;
+        let i = pos2 + 1;
         let part = new _a2(null, ast);
         const parts = [];
         let acc = "";
@@ -35173,7 +35173,7 @@ var require_ast = __commonJS({
         }
         ast.type = null;
         ast.#hasMagic = void 0;
-        ast.#parts = [str.substring(pos - 1)];
+        ast.#parts = [str.substring(pos2 - 1)];
         return i;
       }
       #canAdoptWithSpace(child) {
@@ -41036,24 +41036,24 @@ var require_dist5 = __commonJS({
     var DAY = HOUR * 24;
     var YEAR = DAY * 365.25;
     function parse(val) {
-      var num, arr = val.toLowerCase().match(RGX);
-      if (arr != null && (num = parseFloat(arr[1]))) {
-        if (arr[3] != null) return num * SEC;
-        if (arr[4] != null) return num * MIN;
-        if (arr[5] != null) return num * HOUR;
-        if (arr[6] != null) return num * DAY;
-        if (arr[7] != null) return num * DAY * 7;
-        if (arr[8] != null) return num * YEAR;
-        return num;
+      var num2, arr = val.toLowerCase().match(RGX);
+      if (arr != null && (num2 = parseFloat(arr[1]))) {
+        if (arr[3] != null) return num2 * SEC;
+        if (arr[4] != null) return num2 * MIN;
+        if (arr[5] != null) return num2 * HOUR;
+        if (arr[6] != null) return num2 * DAY;
+        if (arr[7] != null) return num2 * DAY * 7;
+        if (arr[8] != null) return num2 * YEAR;
+        return num2;
       }
     }
     function fmt(val, pfx, str, long) {
-      var num = (val | 0) === val ? val : ~~(val + 0.5);
-      return pfx + num + (long ? " " + str + (num != 1 ? "s" : "") : str[0]);
+      var num2 = (val | 0) === val ? val : ~~(val + 0.5);
+      return pfx + num2 + (long ? " " + str + (num2 != 1 ? "s" : "") : str[0]);
     }
-    function format(num, long) {
-      var pfx = num < 0 ? "-" : "", abs = num < 0 ? -num : num;
-      if (abs < SEC) return num + (long ? " ms" : "ms");
+    function format(num2, long) {
+      var pfx = num2 < 0 ? "-" : "", abs = num2 < 0 ? -num2 : num2;
+      if (abs < SEC) return num2 + (long ? " ms" : "ms");
       if (abs < MIN) return fmt(abs / SEC, pfx, "second", long);
       if (abs < HOUR) return fmt(abs / MIN, pfx, "minute", long);
       if (abs < DAY) return fmt(abs / HOUR, pfx, "hour", long);
@@ -41991,7 +41991,7 @@ var require_send = __commonJS({
     var { parseTokenList } = require_parseTokenList();
     var { createHttpError } = require_createHttpError();
     var extname2 = path.extname;
-    var join29 = path.join;
+    var join30 = path.join;
     var normalize2 = path.normalize;
     var resolve6 = path.resolve;
     var sep4 = path.sep;
@@ -42078,7 +42078,7 @@ var require_send = __commonJS({
           return { statusCode: 403 };
         }
         parts = path2.split(sep4);
-        path2 = normalize2(join29(root, path2));
+        path2 = normalize2(join30(root, path2));
       } else {
         if (UP_PATH_REGEXP.test(path2)) {
           debug('malicious path "%s"', path2);
@@ -42361,7 +42361,7 @@ var require_send = __commonJS({
       let err2;
       for (let i = 0; i < options.index.length; i++) {
         const index = options.index[i];
-        const p = join29(path2, index);
+        const p = join30(path2, index);
         const { error, stat: stat4 } = await tryStat(p);
         if (error) {
           err2 = error;
@@ -43145,8 +43145,8 @@ var require_static = __commonJS({
               }
             }
           }
-          for (const [dirname12, rootPath] of indexDirs.entries()) {
-            const pathname = dirname12 + (dirname12.endsWith("/") ? "" : "/");
+          for (const [dirname13, rootPath] of indexDirs.entries()) {
+            const pathname = dirname13 + (dirname13.endsWith("/") ? "" : "/");
             const file = "/" + pathname.replace(prefix, "");
             setUpHeadAndGet(routeOpts, pathname, file, rootPath);
             if (opts.redirect === true) {
@@ -45784,9 +45784,9 @@ var require_stringifyNumber = __commonJS({
     function stringifyNumber({ format, minFractionDigits, tag, value }) {
       if (typeof value === "bigint")
         return String(value);
-      const num = typeof value === "number" ? value : Number(value);
-      if (!isFinite(num))
-        return isNaN(num) ? ".nan" : num < 0 ? "-.inf" : ".inf";
+      const num2 = typeof value === "number" ? value : Number(value);
+      if (!isFinite(num2))
+        return isNaN(num2) ? ".nan" : num2 < 0 ? "-.inf" : ".inf";
       let n = Object.is(value, -0) ? "-0" : JSON.stringify(value);
       if (!format && minFractionDigits && (!tag || tag === "tag:yaml.org,2002:float") && /^-?\d/.test(n) && !n.includes("e")) {
         let i = n.indexOf(".");
@@ -45826,8 +45826,8 @@ var require_float = __commonJS({
       test: /^[-+]?(?:\.[0-9]+|[0-9]+(?:\.[0-9]*)?)[eE][-+]?[0-9]+$/,
       resolve: (str) => parseFloat(str),
       stringify(node) {
-        const num = Number(node.value);
-        return isFinite(num) ? num.toExponential() : stringifyNumber.stringifyNumber(node);
+        const num2 = Number(node.value);
+        return isFinite(num2) ? num2.toExponential() : stringifyNumber.stringifyNumber(node);
       }
     };
     var float = {
@@ -46266,8 +46266,8 @@ var require_float2 = __commonJS({
       test: /^[-+]?(?:[0-9][0-9_]*)?(?:\.[0-9_]*)?[eE][-+]?[0-9]+$/,
       resolve: (str) => parseFloat(str.replace(/_/g, "")),
       stringify(node) {
-        const num = Number(node.value);
-        return isFinite(num) ? num.toExponential() : stringifyNumber.stringifyNumber(node);
+        const num2 = Number(node.value);
+        return isFinite(num2) ? num2.toExponential() : stringifyNumber.stringifyNumber(node);
       }
     };
     var float = {
@@ -46469,23 +46469,23 @@ var require_timestamp2 = __commonJS({
     function parseSexagesimal(str, asBigInt) {
       const sign = str[0];
       const parts = sign === "-" || sign === "+" ? str.substring(1) : str;
-      const num = (n) => asBigInt ? BigInt(n) : Number(n);
-      const res = parts.replace(/_/g, "").split(":").reduce((res2, p) => res2 * num(60) + num(p), num(0));
-      return sign === "-" ? num(-1) * res : res;
+      const num2 = (n) => asBigInt ? BigInt(n) : Number(n);
+      const res = parts.replace(/_/g, "").split(":").reduce((res2, p) => res2 * num2(60) + num2(p), num2(0));
+      return sign === "-" ? num2(-1) * res : res;
     }
     function stringifySexagesimal(node) {
       let { value } = node;
-      let num = (n) => n;
+      let num2 = (n) => n;
       if (typeof value === "bigint")
-        num = (n) => BigInt(n);
+        num2 = (n) => BigInt(n);
       else if (isNaN(value) || !isFinite(value))
         return stringifyNumber.stringifyNumber(node);
       let sign = "";
       if (value < 0) {
         sign = "-";
-        value *= num(-1);
+        value *= num2(-1);
       }
-      const _60 = num(60);
+      const _60 = num2(60);
       const parts = [value % _60];
       if (value < 60) {
         parts.unshift(0);
@@ -47113,28 +47113,28 @@ var require_errors5 = __commonJS({
   "node_modules/yaml/dist/errors.js"(exports2) {
     "use strict";
     var YAMLError = class extends Error {
-      constructor(name, pos, code, message) {
+      constructor(name, pos2, code, message) {
         super();
         this.name = name;
         this.code = code;
         this.message = message;
-        this.pos = pos;
+        this.pos = pos2;
       }
     };
     var YAMLParseError = class extends YAMLError {
-      constructor(pos, code, message) {
-        super("YAMLParseError", pos, code, message);
+      constructor(pos2, code, message) {
+        super("YAMLParseError", pos2, code, message);
       }
     };
     var YAMLWarning = class extends YAMLError {
-      constructor(pos, code, message) {
-        super("YAMLWarning", pos, code, message);
+      constructor(pos2, code, message) {
+        super("YAMLWarning", pos2, code, message);
       }
     };
     var prettifyError = (src, lc2) => (error) => {
       if (error.pos[0] === -1)
         return;
-      error.linePos = error.pos.map((pos) => lc2.linePos(pos));
+      error.linePos = error.pos.map((pos2) => lc2.linePos(pos2));
       const { line, col } = error.linePos[0];
       error.message += ` at line ${line}, column ${col}`;
       let ci = col - 1;
@@ -48117,8 +48117,8 @@ var require_resolve_flow_scalar = __commonJS({
         return source;
       let res = match[1];
       let sep4 = " ";
-      let pos = first.lastIndex;
-      line.lastIndex = pos;
+      let pos2 = first.lastIndex;
+      line.lastIndex = pos2;
       while (match = line.exec(source)) {
         if (match[1] === "") {
           if (sep4 === "\n")
@@ -48129,10 +48129,10 @@ var require_resolve_flow_scalar = __commonJS({
           res += sep4 + match[1];
           sep4 = " ";
         }
-        pos = line.lastIndex;
+        pos2 = line.lastIndex;
       }
       const last = /[ \t]*(.*)/sy;
-      last.lastIndex = pos;
+      last.lastIndex = pos2;
       match = last.exec(source);
       return res + sep4 + (match?.[1] ?? "");
     }
@@ -48332,10 +48332,10 @@ var require_compose_scalar = __commonJS({
 var require_util_empty_scalar_position = __commonJS({
   "node_modules/yaml/dist/compose/util-empty-scalar-position.js"(exports2) {
     "use strict";
-    function emptyScalarPosition(offset, before, pos) {
+    function emptyScalarPosition(offset, before, pos2) {
       if (before) {
-        pos ?? (pos = before.length);
-        for (let i = pos - 1; i >= 0; --i) {
+        pos2 ?? (pos2 = before.length);
+        for (let i = pos2 - 1; i >= 0; --i) {
           let st = before[i];
           switch (st.type) {
             case "space":
@@ -48425,10 +48425,10 @@ var require_compose_node = __commonJS({
         node.srcToken = token;
       return node;
     }
-    function composeEmptyNode(ctx, offset, before, pos, { spaceBefore, comment, anchor, tag, end }, onError) {
+    function composeEmptyNode(ctx, offset, before, pos2, { spaceBefore, comment, anchor, tag, end }, onError) {
       const token = {
         type: "scalar",
-        offset: utilEmptyScalarPosition.emptyScalarPosition(offset, before, pos),
+        offset: utilEmptyScalarPosition.emptyScalarPosition(offset, before, pos2),
         indent: -1,
         source: ""
       };
@@ -48559,11 +48559,11 @@ var require_composer = __commonJS({
         this.errors = [];
         this.warnings = [];
         this.onError = (source, code, message, warning) => {
-          const pos = getErrorPos(source);
+          const pos2 = getErrorPos(source);
           if (warning)
-            this.warnings.push(new errors.YAMLWarning(pos, code, message));
+            this.warnings.push(new errors.YAMLWarning(pos2, code, message));
           else
-            this.errors.push(new errors.YAMLParseError(pos, code, message));
+            this.errors.push(new errors.YAMLParseError(pos2, code, message));
         };
         this.directives = new directives.Directives({ version: options.version || "1.2" });
         this.options = options;
@@ -48634,9 +48634,9 @@ ${cb}` : comment;
         switch (token.type) {
           case "directive":
             this.directives.add(token.source, (offset, message, warning) => {
-              const pos = getErrorPos(token);
-              pos[0] += offset;
-              this.onError(pos, "BAD_DIRECTIVE", message, warning);
+              const pos2 = getErrorPos(token);
+              pos2[0] += offset;
+              this.onError(pos2, "BAD_DIRECTIVE", message, warning);
             });
             this.prelude.push(token.source);
             this.atDirectives = true;
@@ -48725,8 +48725,8 @@ var require_cst_scalar = __commonJS({
     var stringifyString = require_stringifyString();
     function resolveAsScalar(token, strict = true, onError) {
       if (token) {
-        const _onError = (pos, code, message) => {
-          const offset = typeof pos === "number" ? pos : Array.isArray(pos) ? pos[0] : pos.offset;
+        const _onError = (pos2, code, message) => {
+          const offset = typeof pos2 === "number" ? pos2 : Array.isArray(pos2) ? pos2[0] : pos2.offset;
           if (onError)
             onError(offset, code, message);
           else
@@ -50649,7 +50649,7 @@ var require_public_api = __commonJS({
         return docs;
       return Object.assign([], { empty: true }, composer$1.streamInfo());
     }
-    function parseDocument4(source, options = {}) {
+    function parseDocument5(source, options = {}) {
       const { lineCounter: lineCounter2, prettyErrors } = parseOptions(options);
       const parser$1 = new parser.Parser(lineCounter2?.addNewLine);
       const composer$1 = new composer.Composer(options);
@@ -50675,7 +50675,7 @@ var require_public_api = __commonJS({
       } else if (options === void 0 && reviver && typeof reviver === "object") {
         options = reviver;
       }
-      const doc = parseDocument4(src, options);
+      const doc = parseDocument5(src, options);
       if (!doc)
         return null;
       doc.warnings.forEach((warning) => log2.warn(doc.options.logLevel, warning));
@@ -50711,7 +50711,7 @@ var require_public_api = __commonJS({
     }
     exports2.parse = parse;
     exports2.parseAllDocuments = parseAllDocuments;
-    exports2.parseDocument = parseDocument4;
+    exports2.parseDocument = parseDocument5;
     exports2.stringify = stringify;
   }
 });
@@ -50827,9 +50827,9 @@ var import_node_readline2 = require("node:readline");
 
 // index.ts
 var import_node_url5 = require("node:url");
-var import_node_path27 = require("node:path");
-var import_node_os19 = require("node:os");
-var import_node_fs29 = require("node:fs");
+var import_node_path28 = require("node:path");
+var import_node_os20 = require("node:os");
+var import_node_fs30 = require("node:fs");
 var import_node_child_process7 = require("node:child_process");
 
 // log.mjs
@@ -50875,19 +50875,180 @@ var import_static = __toESM(require_static(), 1);
 
 // aware-adapter.ts
 var import_node_child_process = require("node:child_process");
-var import_node_fs4 = require("node:fs");
-var import_node_path3 = require("node:path");
-var import_node_os3 = require("node:os");
-var import_node_crypto2 = require("node:crypto");
+var import_node_fs6 = require("node:fs");
+var import_node_path5 = require("node:path");
+var import_node_os5 = require("node:os");
+var import_node_crypto3 = require("node:crypto");
 var import_node_module = require("node:module");
 
 // app-reader.ts
+var import_node_crypto2 = require("node:crypto");
+var import_node_fs5 = require("node:fs");
+var import_node_os4 = require("node:os");
+var import_node_path4 = require("node:path");
+var import_yaml = __toESM(require_dist6(), 1);
+
+// app-origin-store.ts
+var import_node_fs4 = require("node:fs");
+var import_node_os3 = require("node:os");
+var import_node_path3 = require("node:path");
+
+// visual-input-store.ts
 var import_node_crypto = require("node:crypto");
 var import_node_fs3 = require("node:fs");
 var import_node_os2 = require("node:os");
 var import_node_path2 = require("node:path");
-var import_yaml = __toESM(require_dist6(), 1);
-var APPS_DIR = process.env.AWARE_HOME ? (0, import_node_path2.join)(process.env.AWARE_HOME, "apps") : (0, import_node_path2.join)((0, import_node_os2.homedir)(), ".aware", "apps");
+var MAX_BYTES2 = 25 * 1024 * 1024;
+var VisualInputError = class extends Error {
+};
+function inputsDir() {
+  const root = process.env.FLOLESS_HOME ?? (0, import_node_path2.join)((0, import_node_os2.homedir)(), ".floless");
+  return (0, import_node_path2.join)(root, "inputs");
+}
+function sniffExt(buf) {
+  if (buf.length >= 8 && buf[0] === 137 && buf[1] === 80 && buf[2] === 78 && buf[3] === 71) return "png";
+  if (buf.length >= 3 && buf[0] === 255 && buf[1] === 216 && buf[2] === 255) return "jpg";
+  if (buf.length >= 12 && buf.toString("ascii", 0, 4) === "RIFF" && buf.toString("ascii", 8, 12) === "WEBP") return "webp";
+  if (buf.length >= 5 && buf.toString("ascii", 0, 5) === "%PDF-") return "pdf";
+  return null;
+}
+var RESERVED = /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(\..*)?$/i;
+function safeSegment(s) {
+  if (!s || s === "." || s.includes("..")) return false;
+  if (s.includes("/") || s.includes("\\") || s.includes(import_node_path2.sep)) return false;
+  for (let i = 0; i < s.length; i++) {
+    const c = s.charCodeAt(i);
+    if (c < 32 || c === 58) return false;
+  }
+  if (/[. ]$/.test(s)) return false;
+  return !RESERVED.test(s);
+}
+function storeVisualInput(appId, dataUrl) {
+  if (!safeSegment(appId)) throw new VisualInputError("invalid app id");
+  const m = /^data:([\w/+.-]+);base64,(.*)$/s.exec(dataUrl || "");
+  if (!m) throw new VisualInputError("visual input must be a base64 data URL");
+  const buf = Buffer.from(m[2] ?? "", "base64");
+  if (buf.length === 0) throw new VisualInputError("empty visual input");
+  if (buf.length > MAX_BYTES2) throw new VisualInputError("visual input too large (max 25 MB)");
+  const ext = sniffExt(buf);
+  if (!ext) throw new VisualInputError("visual input must be PNG, JPEG, WebP, or PDF");
+  const sha2562 = (0, import_node_crypto.createHash)("sha256").update(buf).digest("hex");
+  const dir = (0, import_node_path2.join)(inputsDir(), appId);
+  const path = (0, import_node_path2.join)(dir, `${sha2562}.${ext}`);
+  const root = (0, import_node_path2.resolve)(inputsDir());
+  const target = (0, import_node_path2.resolve)(path);
+  if (target !== root && !target.startsWith(root + import_node_path2.sep)) {
+    throw new VisualInputError("refusing to write outside the inputs root");
+  }
+  (0, import_node_fs3.mkdirSync)(dir, { recursive: true });
+  if (!(0, import_node_fs3.existsSync)(path)) {
+    const tmp = `${path}.tmp`;
+    (0, import_node_fs3.writeFileSync)(tmp, buf);
+    (0, import_node_fs3.renameSync)(tmp, path);
+  }
+  return { path, ext, bytes: (0, import_node_fs3.statSync)(path).size, sha256: sha2562 };
+}
+function renameVisualInputs(oldId, newId) {
+  if (!safeSegment(oldId) || !safeSegment(newId)) throw new VisualInputError("invalid app id");
+  const from = (0, import_node_path2.join)(inputsDir(), oldId);
+  if (!(0, import_node_fs3.existsSync)(from)) return;
+  const to = (0, import_node_path2.join)(inputsDir(), newId);
+  if ((0, import_node_fs3.existsSync)(to)) (0, import_node_fs3.rmSync)(to, { recursive: true, force: true });
+  (0, import_node_fs3.mkdirSync)(inputsDir(), { recursive: true });
+  (0, import_node_fs3.renameSync)(from, to);
+}
+function copyVisualInputs(srcId, newId) {
+  if (!safeSegment(srcId) || !safeSegment(newId)) throw new VisualInputError("invalid app id");
+  const from = (0, import_node_path2.join)(inputsDir(), srcId);
+  if (!(0, import_node_fs3.existsSync)(from)) return;
+  (0, import_node_fs3.cpSync)(from, (0, import_node_path2.join)(inputsDir(), newId), { recursive: true });
+}
+function deleteVisualInputs(id) {
+  if (!safeSegment(id)) throw new VisualInputError("invalid app id");
+  const dir = (0, import_node_path2.join)(inputsDir(), id);
+  if ((0, import_node_fs3.existsSync)(dir)) (0, import_node_fs3.rmSync)(dir, { recursive: true, force: true });
+}
+
+// app-origin-store.ts
+function storeFile() {
+  const root = process.env.FLOLESS_HOME ?? (0, import_node_path3.join)((0, import_node_os3.homedir)(), ".floless");
+  return (0, import_node_path3.join)(root, "app-origin.json");
+}
+function loadAll() {
+  try {
+    const parsed = JSON.parse((0, import_node_fs4.readFileSync)(storeFile(), "utf8"));
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+function saveAll(map) {
+  const file = storeFile();
+  const dir = (0, import_node_path3.dirname)(file);
+  if (!(0, import_node_fs4.existsSync)(dir)) (0, import_node_fs4.mkdirSync)(dir, { recursive: true });
+  const tmp = `${file}.${process.pid}.tmp`;
+  (0, import_node_fs4.writeFileSync)(tmp, JSON.stringify(map, null, 2));
+  (0, import_node_fs4.renameSync)(tmp, file);
+}
+function readOrigin(id) {
+  if (!safeSegment(id)) return null;
+  return loadAll()[id] ?? null;
+}
+function patch(id, fields) {
+  if (!safeSegment(id)) return;
+  const all = loadAll();
+  all[id] = { ...all[id] ?? {}, ...fields };
+  saveAll(all);
+}
+function setDerivedFrom(id, derivedFrom) {
+  patch(id, { derivedFrom });
+}
+function resolveTemplateId(id) {
+  return readOrigin(id)?.derivedFrom ?? id;
+}
+function markForked(id, who, ts) {
+  patch(id, { forkedAt: ts, forkedFromVersion: who.version, liabilityAcceptedAt: ts, liabilityAcceptedBy: who.acceptedBy });
+}
+function clearFork(id) {
+  if (!safeSegment(id)) return;
+  const all = loadAll();
+  const prev = all[id];
+  if (!prev) return;
+  const next = {};
+  if (prev.derivedFrom) next.derivedFrom = prev.derivedFrom;
+  all[id] = next;
+  saveAll(all);
+}
+function renameOrigin(oldId, newId) {
+  if (!safeSegment(oldId) || !safeSegment(newId)) return;
+  const all = loadAll();
+  const prev = all[oldId] ?? { derivedFrom: oldId };
+  delete all[oldId];
+  all[newId] = prev;
+  saveAll(all);
+}
+function copyOrigin(srcId, newId) {
+  setDerivedFrom(newId, resolveTemplateId(srcId));
+}
+function deleteOrigin(id) {
+  if (!safeSegment(id)) return;
+  const all = loadAll();
+  if (id in all) {
+    delete all[id];
+    saveAll(all);
+  }
+}
+function appOrigin(id) {
+  try {
+    const rec = readOrigin(id);
+    return { templateId: rec?.derivedFrom ?? id, forked: !!rec?.forkedAt, derivedFrom: rec?.derivedFrom ?? null };
+  } catch {
+    return { templateId: id, forked: false, derivedFrom: null };
+  }
+}
+
+// app-reader.ts
+var APPS_DIR = process.env.AWARE_HOME ? (0, import_node_path4.join)(process.env.AWARE_HOME, "apps") : (0, import_node_path4.join)((0, import_node_os4.homedir)(), ".aware", "apps");
 function normalizeNote(n) {
   if (n && typeof n === "object") {
     const o = n;
@@ -50916,24 +51077,24 @@ var AppNotFoundError = class extends Error {
 };
 function appDir(id) {
   if (id.includes("/") || id.includes("\\") || id.includes("..")) throw new AppNotFoundError(id);
-  const dir = (0, import_node_path2.join)(APPS_DIR, id);
-  if (!(0, import_node_fs3.existsSync)(dir)) throw new AppNotFoundError(id);
+  const dir = (0, import_node_path4.join)(APPS_DIR, id);
+  if (!(0, import_node_fs5.existsSync)(dir)) throw new AppNotFoundError(id);
   return dir;
 }
 function appPath(id) {
   if (id.includes("/") || id.includes("\\") || id.includes("..")) throw new AppNotFoundError(id);
-  return (0, import_node_path2.join)(APPS_DIR, id);
+  return (0, import_node_path4.join)(APPS_DIR, id);
 }
 function appExists(id) {
   if (id.includes("/") || id.includes("\\") || id.includes("..")) return false;
-  return (0, import_node_fs3.existsSync)((0, import_node_path2.join)(APPS_DIR, id));
+  return (0, import_node_fs5.existsSync)((0, import_node_path4.join)(APPS_DIR, id));
 }
 function firstWithExt(dir, ext) {
-  const hit = (0, import_node_fs3.readdirSync)(dir).find((f) => f.toLowerCase().endsWith(ext));
-  return hit ? (0, import_node_path2.join)(dir, hit) : null;
+  const hit = (0, import_node_fs5.readdirSync)(dir).find((f) => f.toLowerCase().endsWith(ext));
+  return hit ? (0, import_node_path4.join)(dir, hit) : null;
 }
 function sha256(text) {
-  return (0, import_node_crypto.createHash)("sha256").update(text).digest("hex");
+  return (0, import_node_crypto2.createHash)("sha256").update(text).digest("hex");
 }
 function asRecord(v) {
   return v && typeof v === "object" && !Array.isArray(v) ? v : {};
@@ -50943,7 +51104,7 @@ function appProvider(id) {
     const dir = appDir(id);
     const sourcePath = firstWithExt(dir, ".app") ?? firstWithExt(dir, ".flo");
     if (!sourcePath) return "other";
-    const src = asRecord((0, import_yaml.parse)((0, import_node_fs3.readFileSync)(sourcePath, "utf8")));
+    const src = asRecord((0, import_yaml.parse)((0, import_node_fs5.readFileSync)(sourcePath, "utf8")));
     const srcNodes = Array.isArray(src.nodes) ? src.nodes : [];
     const counts = /* @__PURE__ */ new Map();
     for (const n of srcNodes) {
@@ -50967,7 +51128,7 @@ function appBaked(id) {
     const dir = appDir(id);
     const sourcePath = firstWithExt(dir, ".app") ?? firstWithExt(dir, ".flo");
     if (!sourcePath) return false;
-    const src = asRecord((0, import_yaml.parse)((0, import_node_fs3.readFileSync)(sourcePath, "utf8")));
+    const src = asRecord((0, import_yaml.parse)((0, import_node_fs5.readFileSync)(sourcePath, "utf8")));
     return src["exposes-as-agent"] === true;
   } catch {
     return false;
@@ -50977,11 +51138,12 @@ function readApp(id) {
   const dir = appDir(id);
   const sourcePath = firstWithExt(dir, ".app") ?? firstWithExt(dir, ".flo");
   if (!sourcePath) throw new AppNotFoundError(id);
-  const sourceText = (0, import_node_fs3.readFileSync)(sourcePath, "utf8");
+  const sourceText = (0, import_node_fs5.readFileSync)(sourcePath, "utf8");
   const sourceHash = sha256(sourceText);
   const src = asRecord((0, import_yaml.parse)(sourceText));
+  const origin = appOrigin(id);
   const lockPath = firstWithExt(dir, ".lock");
-  const lockText = lockPath ? (0, import_node_fs3.readFileSync)(lockPath, "utf8") : null;
+  const lockText = lockPath ? (0, import_node_fs5.readFileSync)(lockPath, "utf8") : null;
   const lockDoc = lockText ? asRecord((0, import_yaml.parse)(lockText)) : {};
   const lockNodes = Array.isArray(lockDoc.nodes) ? lockDoc.nodes : [];
   const lockById = new Map(lockNodes.map((n) => [String(n.id), n]));
@@ -51059,6 +51221,10 @@ function readApp(id) {
     displayName: typeof src["display-name"] === "string" ? src["display-name"] : id,
     description: typeof src.description === "string" ? src.description : "",
     version: src.version != null ? String(src.version) : "0.0.0",
+    publisher: typeof src.publisher === "string" ? src.publisher : null,
+    derivedFrom: origin.derivedFrom,
+    templateId: origin.templateId,
+    forked: origin.forked,
     layout,
     requires: Array.isArray(src.requires) ? src.requires.map(String) : [],
     inputs,
@@ -51082,11 +51248,11 @@ function sourceNodeId(nodes, connections) {
 function readCommandSpec(agent, command, agentsDir = AGENTS_DIR) {
   const safe = (n) => !/[/\\\0]/.test(n) && !n.includes("..");
   if (!safe(agent) || !safe(command)) return null;
-  const manifestPath = (0, import_node_path2.join)(agentsDir, agent, "manifest.yaml");
-  if (!(0, import_node_fs3.existsSync)(manifestPath)) return null;
+  const manifestPath = (0, import_node_path4.join)(agentsDir, agent, "manifest.yaml");
+  if (!(0, import_node_fs5.existsSync)(manifestPath)) return null;
   let doc;
   try {
-    doc = asRecord((0, import_yaml.parse)((0, import_node_fs3.readFileSync)(manifestPath, "utf8")));
+    doc = asRecord((0, import_yaml.parse)((0, import_node_fs5.readFileSync)(manifestPath, "utf8")));
   } catch {
     return null;
   }
@@ -51127,11 +51293,11 @@ function parseManifestInputs(raw) {
 function readNodeSkill(agent, command, agentsDir = AGENTS_DIR) {
   const safe = (n) => !/[/\\\0]/.test(n) && !n.includes("..");
   if (!safe(agent) || !safe(command)) return null;
-  const manifestPath = (0, import_node_path2.join)(agentsDir, agent, "manifest.yaml");
-  if (!(0, import_node_fs3.existsSync)(manifestPath)) return null;
+  const manifestPath = (0, import_node_path4.join)(agentsDir, agent, "manifest.yaml");
+  if (!(0, import_node_fs5.existsSync)(manifestPath)) return null;
   let doc;
   try {
-    doc = asRecord((0, import_yaml.parse)((0, import_node_fs3.readFileSync)(manifestPath, "utf8")));
+    doc = asRecord((0, import_yaml.parse)((0, import_node_fs5.readFileSync)(manifestPath, "utf8")));
   } catch {
     return null;
   }
@@ -51165,13 +51331,13 @@ function detectTriggerSource(nodes, connections, lookup) {
   if (!spec || spec.lifecycle !== "start" || !spec.streaming) return null;
   return { nodeId: src.id, agent: src.agent, command: src.command, inputs: spec.inputs };
 }
-var AGENTS_DIR = process.env.AWARE_HOME ? (0, import_node_path2.join)(process.env.AWARE_HOME, "agents") : (0, import_node_path2.join)((0, import_node_os2.homedir)(), ".aware", "agents");
-var CREDENTIALS_DIR = process.env.AWARE_HOME ? (0, import_node_path2.join)(process.env.AWARE_HOME, "credentials") : (0, import_node_path2.join)((0, import_node_os2.homedir)(), ".aware", "credentials");
+var AGENTS_DIR = process.env.AWARE_HOME ? (0, import_node_path4.join)(process.env.AWARE_HOME, "agents") : (0, import_node_path4.join)((0, import_node_os4.homedir)(), ".aware", "agents");
+var CREDENTIALS_DIR = process.env.AWARE_HOME ? (0, import_node_path4.join)(process.env.AWARE_HOME, "credentials") : (0, import_node_path4.join)((0, import_node_os4.homedir)(), ".aware", "credentials");
 function credentialStatus(secret) {
-  const file = (0, import_node_path2.join)(CREDENTIALS_DIR, `${secret}.json`);
-  if (!(0, import_node_fs3.existsSync)(file)) return { status: "disconnected", expiresAt: null };
+  const file = (0, import_node_path4.join)(CREDENTIALS_DIR, `${secret}.json`);
+  if (!(0, import_node_fs5.existsSync)(file)) return { status: "disconnected", expiresAt: null };
   try {
-    const doc = JSON.parse((0, import_node_fs3.readFileSync)(file, "utf8"));
+    const doc = JSON.parse((0, import_node_fs5.readFileSync)(file, "utf8"));
     const raw = doc["expires_at"] ?? doc["expiresAt"] ?? doc["expiry"];
     if (raw != null) {
       const ms = typeof raw === "number" ? raw * (raw < 1e12 ? 1e3 : 1) : Date.parse(String(raw));
@@ -51184,15 +51350,15 @@ function credentialStatus(secret) {
   return { status: "connected", expiresAt: null };
 }
 function listIntegrations() {
-  if (!(0, import_node_fs3.existsSync)(AGENTS_DIR)) return [];
+  if (!(0, import_node_fs5.existsSync)(AGENTS_DIR)) return [];
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   const safe = (n) => !/[/\\\0]/.test(n) && !n.includes("..");
-  for (const agentId of (0, import_node_fs3.readdirSync)(AGENTS_DIR)) {
+  for (const agentId of (0, import_node_fs5.readdirSync)(AGENTS_DIR)) {
     if (!safe(agentId)) continue;
-    const manifestPath = (0, import_node_path2.join)(AGENTS_DIR, agentId, "manifest.yaml");
-    if (!(0, import_node_fs3.existsSync)(manifestPath)) continue;
-    const manifestText = (0, import_node_fs3.readFileSync)(manifestPath, "utf8");
+    const manifestPath = (0, import_node_path4.join)(AGENTS_DIR, agentId, "manifest.yaml");
+    if (!(0, import_node_fs5.existsSync)(manifestPath)) continue;
+    const manifestText = (0, import_node_fs5.readFileSync)(manifestPath, "utf8");
     if (!manifestText.includes("secrets:")) continue;
     let doc;
     try {
@@ -51283,14 +51449,14 @@ var AwareUnsupportedError = class extends AwareError {
 };
 function resolveInvoker() {
   const envDir = process.env.AWARE_CLI_DIR;
-  if (envDir && (0, import_node_fs4.existsSync)((0, import_node_path3.join)(envDir, "scripts/bin/aware.js"))) {
-    return { head: [nodeExe(), (0, import_node_path3.join)(envDir, "scripts/bin/aware.js")], shell: false, pkgDir: envDir };
+  if (envDir && (0, import_node_fs6.existsSync)((0, import_node_path5.join)(envDir, "scripts/bin/aware.js"))) {
+    return { head: [nodeExe(), (0, import_node_path5.join)(envDir, "scripts/bin/aware.js")], shell: false, pkgDir: envDir };
   }
   try {
     const root = (0, import_node_child_process.execFileSync)("npm", ["root", "-g"], { encoding: "utf8", shell: process.platform === "win32", windowsHide: true, timeout: 1e4 }).trim();
-    const pkgDir = (0, import_node_path3.join)(root, "@aware-aeco", "cli");
-    const bin = (0, import_node_path3.join)(pkgDir, "scripts/bin/aware.js");
-    if ((0, import_node_fs4.existsSync)(bin)) return { head: [nodeExe(), bin], shell: false, pkgDir };
+    const pkgDir = (0, import_node_path5.join)(root, "@aware-aeco", "cli");
+    const bin = (0, import_node_path5.join)(pkgDir, "scripts/bin/aware.js");
+    if ((0, import_node_fs6.existsSync)(bin)) return { head: [nodeExe(), bin], shell: false, pkgDir };
   } catch {
   }
   return { head: ["aware"], shell: process.platform === "win32", pkgDir: null };
@@ -51307,7 +51473,7 @@ function awareNpmVersion() {
   const invoker = currentInvoker();
   if (!invoker.pkgDir) return null;
   try {
-    const pkg = JSON.parse((0, import_node_fs4.readFileSync)((0, import_node_path3.join)(invoker.pkgDir, "package.json"), "utf8"));
+    const pkg = JSON.parse((0, import_node_fs6.readFileSync)((0, import_node_path5.join)(invoker.pkgDir, "package.json"), "utf8"));
     return typeof pkg.version === "string" ? pkg.version : null;
   } catch {
     return null;
@@ -51396,10 +51562,10 @@ async function runJson(args) {
 function resolveTeklaBridge() {
   const invoker = currentInvoker();
   const candidates = [
-    (0, import_node_path3.join)((0, import_node_os3.homedir)(), ".aware", "bridges", "aware-tekla.exe"),
-    invoker.pkgDir ? (0, import_node_path3.join)(invoker.pkgDir, "binaries", "aware-tekla.exe") : null
+    (0, import_node_path5.join)((0, import_node_os5.homedir)(), ".aware", "bridges", "aware-tekla.exe"),
+    invoker.pkgDir ? (0, import_node_path5.join)(invoker.pkgDir, "binaries", "aware-tekla.exe") : null
   ].filter((p) => !!p);
-  return candidates.find((p) => (0, import_node_fs4.existsSync)(p)) ?? null;
+  return candidates.find((p) => (0, import_node_fs6.existsSync)(p)) ?? null;
 }
 function injectDebugger(code) {
   const lines = code.split(/\r?\n/);
@@ -51481,39 +51647,39 @@ function cancelActiveRun() {
 function isRunActive() {
   return activeRun !== null;
 }
-var LOGS_DIR = process.env.AWARE_HOME ? (0, import_node_path3.join)(process.env.AWARE_HOME, "logs") : (0, import_node_path3.join)((0, import_node_os3.homedir)(), ".aware", "logs");
+var LOGS_DIR = process.env.AWARE_HOME ? (0, import_node_path5.join)(process.env.AWARE_HOME, "logs") : (0, import_node_path5.join)((0, import_node_os5.homedir)(), ".aware", "logs");
 var TRIGGER_POLL_MS = 250;
 function parseRunHandle(stdout) {
   const m = stdout.match(/instance\s+([^,\s]+),\s*run-id\s+([0-9a-f-]{36})/i);
   return m ? { instance: m[1], runId: m[2] } : null;
 }
 function traceLogPath(id, instance, runId, logsRoot = LOGS_DIR) {
-  return (0, import_node_path3.join)(logsRoot, id, instance, `${runId}.jsonl`);
+  return (0, import_node_path5.join)(logsRoot, id, instance, `${runId}.jsonl`);
 }
 function latestTracePath(id, logsRoot = LOGS_DIR) {
-  const appDir2 = (0, import_node_path3.join)(logsRoot, id);
-  if (!(0, import_node_fs4.existsSync)(appDir2)) return null;
+  const appDir2 = (0, import_node_path5.join)(logsRoot, id);
+  if (!(0, import_node_fs6.existsSync)(appDir2)) return null;
   let best = null;
   let instances;
   try {
-    instances = (0, import_node_fs4.readdirSync)(appDir2);
+    instances = (0, import_node_fs6.readdirSync)(appDir2);
   } catch {
     return null;
   }
   for (const instance of instances) {
-    const instDir = (0, import_node_path3.join)(appDir2, instance);
+    const instDir = (0, import_node_path5.join)(appDir2, instance);
     let entries;
     try {
-      if (!(0, import_node_fs4.statSync)(instDir).isDirectory()) continue;
-      entries = (0, import_node_fs4.readdirSync)(instDir);
+      if (!(0, import_node_fs6.statSync)(instDir).isDirectory()) continue;
+      entries = (0, import_node_fs6.readdirSync)(instDir);
     } catch {
       continue;
     }
     for (const f of entries) {
       if (!f.endsWith(".jsonl")) continue;
-      const p = (0, import_node_path3.join)(instDir, f);
+      const p = (0, import_node_path5.join)(instDir, f);
       try {
-        const m = (0, import_node_fs4.statSync)(p).mtimeMs;
+        const m = (0, import_node_fs6.statSync)(p).mtimeMs;
         if (!best || m > best.mtimeMs) best = { path: p, mtimeMs: m };
       } catch {
       }
@@ -51522,17 +51688,17 @@ function latestTracePath(id, logsRoot = LOGS_DIR) {
   return best ? best.path : null;
 }
 function readTail(path, maxBytes) {
-  const size = (0, import_node_fs4.statSync)(path).size;
-  if (size <= maxBytes) return { text: (0, import_node_fs4.readFileSync)(path, "utf8"), truncated: false };
-  const fd2 = (0, import_node_fs4.openSync)(path, "r");
+  const size = (0, import_node_fs6.statSync)(path).size;
+  if (size <= maxBytes) return { text: (0, import_node_fs6.readFileSync)(path, "utf8"), truncated: false };
+  const fd2 = (0, import_node_fs6.openSync)(path, "r");
   try {
     const buf = Buffer.alloc(maxBytes);
-    const read = (0, import_node_fs4.readSync)(fd2, buf, 0, maxBytes, size - maxBytes);
+    const read = (0, import_node_fs6.readSync)(fd2, buf, 0, maxBytes, size - maxBytes);
     const nl = buf.indexOf(10, 0);
     const start = nl >= 0 && nl + 1 <= read ? nl + 1 : 0;
     return { text: buf.subarray(start, read).toString("utf8"), truncated: true };
   } finally {
-    (0, import_node_fs4.closeSync)(fd2);
+    (0, import_node_fs6.closeSync)(fd2);
   }
 }
 function readLatestTrace(id, logsRoot = LOGS_DIR, maxBytes) {
@@ -51540,7 +51706,7 @@ function readLatestTrace(id, logsRoot = LOGS_DIR, maxBytes) {
   if (!p) return null;
   let read;
   try {
-    read = maxBytes && maxBytes > 0 ? readTail(p, maxBytes) : { text: (0, import_node_fs4.readFileSync)(p, "utf8"), truncated: false };
+    read = maxBytes && maxBytes > 0 ? readTail(p, maxBytes) : { text: (0, import_node_fs6.readFileSync)(p, "utf8"), truncated: false };
   } catch {
     return null;
   }
@@ -51575,7 +51741,7 @@ function startTrigger(id, opts = {}) {
   const readAndEmit = () => {
     if (!tracePath || !traceCb) return;
     try {
-      const txt = (0, import_node_fs4.readFileSync)(tracePath, "utf8");
+      const txt = (0, import_node_fs6.readFileSync)(tracePath, "utf8");
       if (txt.length !== lastLen) {
         lastLen = txt.length;
         traceCb(parseTrace(txt));
@@ -51636,13 +51802,13 @@ function assertNodeId(id) {
 var SOURCE_EXT = /\.(flo|app|flow|aware)$/i;
 function assertSourcePath(p) {
   if (!SOURCE_EXT.test(p)) throw new AwareError(`source must be a .flo/.app file: ${JSON.stringify(p)}`);
-  if (!(0, import_node_fs4.existsSync)(p)) throw new AwareError(`source path not found: ${JSON.stringify(p)}`);
-  return (0, import_node_fs4.realpathSync)(p);
+  if (!(0, import_node_fs6.existsSync)(p)) throw new AwareError(`source path not found: ${JSON.stringify(p)}`);
+  return (0, import_node_fs6.realpathSync)(p);
 }
 function assertAppDir(p) {
-  if (!(0, import_node_fs4.existsSync)(p)) throw new AwareError(`app dir not found: ${JSON.stringify(p)}`);
-  const real = (0, import_node_fs4.realpathSync)(p);
-  if (!(0, import_node_fs4.statSync)(real).isDirectory()) throw new AwareError(`app dir is not a directory: ${JSON.stringify(p)}`);
+  if (!(0, import_node_fs6.existsSync)(p)) throw new AwareError(`app dir not found: ${JSON.stringify(p)}`);
+  const real = (0, import_node_fs6.realpathSync)(p);
+  if (!(0, import_node_fs6.statSync)(real).isDirectory()) throw new AwareError(`app dir is not a directory: ${JSON.stringify(p)}`);
   return real;
 }
 var GRAFT_PKG_AT_VER_RE = /^[A-Za-z0-9][\w.@/-]{0,127}$/;
@@ -51663,8 +51829,8 @@ function assertSourceRef(kind, ref) {
     case "openapi":
     case "yard":
       if (GRAFT_URL_RE.test(r)) return r;
-      if (!(0, import_node_fs4.existsSync)(r)) throw new AwareError(`${kind}: file/dir not found: ${r}`);
-      return (0, import_node_fs4.realpathSync)(r);
+      if (!(0, import_node_fs6.existsSync)(r)) throw new AwareError(`${kind}: file/dir not found: ${r}`);
+      return (0, import_node_fs6.realpathSync)(r);
     case "nuget":
     case "npm":
     case "ruby":
@@ -51901,8 +52067,8 @@ var aware = {
     try {
       let ref;
       if (inputs !== void 0) {
-        inputsFile = (0, import_node_path3.join)((0, import_node_os3.tmpdir)(), `floless-agent-inputs-${(0, import_node_crypto2.randomUUID)()}.json`);
-        (0, import_node_fs4.writeFileSync)(inputsFile, JSON.stringify(inputs));
+        inputsFile = (0, import_node_path5.join)((0, import_node_os5.tmpdir)(), `floless-agent-inputs-${(0, import_node_crypto3.randomUUID)()}.json`);
+        (0, import_node_fs6.writeFileSync)(inputsFile, JSON.stringify(inputs));
         ref = `@${inputsFile}`;
       }
       const { data } = await runJson(agentInvokeArgv(agent, command, ref));
@@ -51918,7 +52084,7 @@ var aware = {
     } finally {
       if (inputsFile) {
         try {
-          (0, import_node_fs4.rmSync)(inputsFile);
+          (0, import_node_fs6.rmSync)(inputsFile);
         } catch {
         }
       }
@@ -51953,7 +52119,7 @@ var aware = {
     if (code !== 0) throw new AwareError(`aware app compile failed (exit ${code})`, { stdout, stderr });
     const m = stdout.match(/→\s*(.+\.lock)\s*$/m);
     const lockPath = m?.[1]?.trim() ?? null;
-    const lockText = lockPath && (0, import_node_fs4.existsSync)(lockPath) ? (0, import_node_fs4.readFileSync)(lockPath, "utf8") : null;
+    const lockText = lockPath && (0, import_node_fs6.existsSync)(lockPath) ? (0, import_node_fs6.readFileSync)(lockPath, "utf8") : null;
     return { lockPath, lockText, output: stdout.trim() };
   },
   /**
@@ -52114,7 +52280,7 @@ var aware = {
       if (code !== 0) throw new AwareError(`aware app run failed (exit ${code})`, { stdout, stderr });
       const runId = stdout.match(/run-id\s+([0-9a-f-]{36})/i)?.[1] ?? null;
       const tracePath = stdout.match(/trace at\s+(.+\.jsonl)\s*$/m)?.[1]?.trim() ?? null;
-      const traceText = tracePath && (0, import_node_fs4.existsSync)(tracePath) ? (0, import_node_fs4.readFileSync)(tracePath, "utf8") : null;
+      const traceText = tracePath && (0, import_node_fs6.existsSync)(tracePath) ? (0, import_node_fs6.readFileSync)(tracePath, "utf8") : null;
       return { runId, tracePath, traceText, output: stdout.trim() };
     } finally {
       if (activeRun === reg2) activeRun = null;
@@ -52147,20 +52313,20 @@ var aware = {
 };
 
 // extensions-store.ts
-var import_node_fs5 = require("node:fs");
-var import_node_os4 = require("node:os");
-var import_node_path4 = require("node:path");
-var ROOT = process.env.FLOLESS_HOME ?? (0, import_node_path4.join)((0, import_node_os4.homedir)(), ".floless");
-var uiDir = (0, import_node_path4.join)(ROOT, "ui");
-var extensionsFile = (0, import_node_path4.join)(uiDir, "extensions.json");
-var TIMELINE_FILE = (0, import_node_path4.join)(uiDir, "timeline.json");
+var import_node_fs7 = require("node:fs");
+var import_node_os6 = require("node:os");
+var import_node_path6 = require("node:path");
+var ROOT = process.env.FLOLESS_HOME ?? (0, import_node_path6.join)((0, import_node_os6.homedir)(), ".floless");
+var uiDir = (0, import_node_path6.join)(ROOT, "ui");
+var extensionsFile = (0, import_node_path6.join)(uiDir, "extensions.json");
+var TIMELINE_FILE = (0, import_node_path6.join)(uiDir, "timeline.json");
 var HISTORY_KEEP = 20;
 function ensureUiDir() {
-  if (!(0, import_node_fs5.existsSync)(uiDir)) (0, import_node_fs5.mkdirSync)(uiDir, { recursive: true });
+  if (!(0, import_node_fs7.existsSync)(uiDir)) (0, import_node_fs7.mkdirSync)(uiDir, { recursive: true });
 }
 function readExtensionsText() {
   try {
-    return (0, import_node_fs5.readFileSync)(extensionsFile, "utf8");
+    return (0, import_node_fs7.readFileSync)(extensionsFile, "utf8");
   } catch {
     return null;
   }
@@ -52191,7 +52357,7 @@ function panelsCountOf(text) {
 function loadTimeline() {
   let text;
   try {
-    text = (0, import_node_fs5.readFileSync)(TIMELINE_FILE, "utf8");
+    text = (0, import_node_fs7.readFileSync)(TIMELINE_FILE, "utf8");
   } catch {
     return { cursor: -1, entries: [] };
   }
@@ -52215,19 +52381,19 @@ function loadTimeline() {
 function saveTimeline(t) {
   ensureUiDir();
   const tmp = `${TIMELINE_FILE}.${process.pid}.tmp`;
-  (0, import_node_fs5.writeFileSync)(tmp, JSON.stringify(t, null, 2));
-  (0, import_node_fs5.renameSync)(tmp, TIMELINE_FILE);
+  (0, import_node_fs7.writeFileSync)(tmp, JSON.stringify(t, null, 2));
+  (0, import_node_fs7.renameSync)(tmp, TIMELINE_FILE);
 }
 function writeExtensionsText(text) {
   ensureUiDir();
   const tmp = `${extensionsFile}.${process.pid}.tmp`;
-  (0, import_node_fs5.writeFileSync)(tmp, text);
-  (0, import_node_fs5.renameSync)(tmp, extensionsFile);
+  (0, import_node_fs7.writeFileSync)(tmp, text);
+  (0, import_node_fs7.renameSync)(tmp, extensionsFile);
 }
 function applyState(entry2) {
   if (entry2.content === null) {
     try {
-      (0, import_node_fs5.rmSync)(extensionsFile);
+      (0, import_node_fs7.rmSync)(extensionsFile);
     } catch {
     }
   } else {
@@ -52421,13 +52587,13 @@ function runBootstrap(deps) {
 }
 
 // licensing.ts
-var import_node_fs6 = require("node:fs");
-var import_node_path5 = require("node:path");
-var import_node_os5 = require("node:os");
+var import_node_fs8 = require("node:fs");
+var import_node_path7 = require("node:path");
+var import_node_os7 = require("node:os");
 var import_node_child_process2 = require("node:child_process");
-var import_node_crypto3 = require("node:crypto");
+var import_node_crypto4 = require("node:crypto");
 var import_node_module2 = require("node:module");
-var import_node_os6 = require("node:os");
+var import_node_os8 = require("node:os");
 var ENVS = {
   production: { apiBase: "https://api.floless.io/api", webBase: "https://floless.io" },
   staging: { apiBase: "https://api.stage.floless.io/api", webBase: "https://stage.floless.io" }
@@ -52481,26 +52647,26 @@ function isSea() {
 }
 function storeDir() {
   if (process.env.FLOLESS_LICENSE_DIR) return process.env.FLOLESS_LICENSE_DIR;
-  if (isSea() && process.env.LOCALAPPDATA) return (0, import_node_path5.join)(process.env.LOCALAPPDATA, "FlolessApp-data");
-  return (0, import_node_path5.join)((0, import_node_os5.homedir)(), ".aware");
+  if (isSea() && process.env.LOCALAPPDATA) return (0, import_node_path7.join)(process.env.LOCALAPPDATA, "FlolessApp-data");
+  return (0, import_node_path7.join)((0, import_node_os7.homedir)(), ".aware");
 }
-var tokenPath = () => (0, import_node_path5.join)(storeDir(), "floless-license.json");
-var cachePath = () => (0, import_node_path5.join)(storeDir(), "floless-license-cache.json");
+var tokenPath = () => (0, import_node_path7.join)(storeDir(), "floless-license.json");
+var cachePath = () => (0, import_node_path7.join)(storeDir(), "floless-license-cache.json");
 var _migrated = false;
 function migrateLegacyStore() {
   if (_migrated) return;
   _migrated = true;
   if (process.env.FLOLESS_LICENSE_DIR || !(isSea() && process.env.LOCALAPPDATA)) return;
-  const oldDir = (0, import_node_path5.join)(process.env.LOCALAPPDATA, "FlolessApp");
+  const oldDir = (0, import_node_path7.join)(process.env.LOCALAPPDATA, "FlolessApp");
   const newDir = storeDir();
   if (oldDir === newDir) return;
   for (const f of ["floless-license.json", "floless-license-cache.json", "floless-install-id"]) {
     try {
-      const oldP = (0, import_node_path5.join)(oldDir, f);
-      const newP = (0, import_node_path5.join)(newDir, f);
-      if ((0, import_node_fs6.existsSync)(oldP) && !(0, import_node_fs6.existsSync)(newP)) {
-        (0, import_node_fs6.mkdirSync)(newDir, { recursive: true });
-        (0, import_node_fs6.copyFileSync)(oldP, newP);
+      const oldP = (0, import_node_path7.join)(oldDir, f);
+      const newP = (0, import_node_path7.join)(newDir, f);
+      if ((0, import_node_fs8.existsSync)(oldP) && !(0, import_node_fs8.existsSync)(newP)) {
+        (0, import_node_fs8.mkdirSync)(newDir, { recursive: true });
+        (0, import_node_fs8.copyFileSync)(oldP, newP);
       }
     } catch {
     }
@@ -52508,16 +52674,16 @@ function migrateLegacyStore() {
 }
 function readJson(path) {
   try {
-    return (0, import_node_fs6.existsSync)(path) ? JSON.parse((0, import_node_fs6.readFileSync)(path, "utf8")) : null;
+    return (0, import_node_fs8.existsSync)(path) ? JSON.parse((0, import_node_fs8.readFileSync)(path, "utf8")) : null;
   } catch {
     return null;
   }
 }
 function writeJson(path, value) {
-  (0, import_node_fs6.mkdirSync)(storeDir(), { recursive: true });
-  (0, import_node_fs6.writeFileSync)(path, JSON.stringify(value, null, 2), "utf8");
+  (0, import_node_fs8.mkdirSync)(storeDir(), { recursive: true });
+  (0, import_node_fs8.writeFileSync)(path, JSON.stringify(value, null, 2), "utf8");
   try {
-    (0, import_node_fs6.chmodSync)(path, 384);
+    (0, import_node_fs8.chmodSync)(path, 384);
   } catch {
   }
 }
@@ -52657,7 +52823,7 @@ async function ensureSeat(token) {
     const res = await fetch(`${env().apiBase}/seats/claim`, {
       method: "POST",
       headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
-      body: JSON.stringify({ device_fingerprint: installId(), device_name: (0, import_node_os6.hostname)(), os_version: `${process.platform} ${process.arch}` })
+      body: JSON.stringify({ device_fingerprint: installId(), device_name: (0, import_node_os8.hostname)(), os_version: `${process.platform} ${process.arch}` })
     });
     if (!res.ok) return;
     const b = await res.json();
@@ -52678,7 +52844,7 @@ async function seatHeartbeat() {
   try {
     const token = await ensureFreshToken().catch(() => null);
     if (!token) return;
-    const hmac = (0, import_node_crypto3.createHmac)("sha256", seat.hmacSecret).update(seat.nonce).digest("hex");
+    const hmac = (0, import_node_crypto4.createHmac)("sha256", seat.hmacSecret).update(seat.nonce).digest("hex");
     let res;
     try {
       res = await fetch(`${env().apiBase}/seats/heartbeat`, {
@@ -52750,7 +52916,7 @@ function logout() {
   resetSeat();
   for (const p of [tokenPath(), cachePath()]) {
     try {
-      (0, import_node_fs6.rmSync)(p, { force: true });
+      (0, import_node_fs8.rmSync)(p, { force: true });
     } catch {
     }
   }
@@ -52774,7 +52940,7 @@ function openBrowser(url) {
   (0, import_node_child_process2.spawn)(cmd, args, opts).unref();
 }
 async function startLogin() {
-  const sessionId = (0, import_node_crypto3.randomUUID)();
+  const sessionId = (0, import_node_crypto4.randomUUID)();
   const loginUrl = `${env().webBase}/login?desktop=true&session=${sessionId}&app=floless`;
   openBrowser(loginUrl);
   void pollDesktopStatus(sessionId).catch(() => {
@@ -52807,20 +52973,20 @@ async function pollDesktopStatus(sessionId, timeoutMs = 18e4) {
   return false;
 }
 function installId() {
-  const p = (0, import_node_path5.join)(storeDir(), "floless-install-id");
+  const p = (0, import_node_path7.join)(storeDir(), "floless-install-id");
   const existing = readJson(p);
   if (typeof existing === "string" && existing.length >= 80 && existing.length <= 100) {
     return existing;
   }
-  const id = (0, import_node_crypto3.createHash)("sha512").update((0, import_node_crypto3.randomUUID)()).digest("base64");
+  const id = (0, import_node_crypto4.createHash)("sha512").update((0, import_node_crypto4.randomUUID)()).digest("base64");
   writeJson(p, id);
   return id;
 }
 
 // version.ts
 var import_node_module3 = require("node:module");
-var import_node_path6 = require("node:path");
-var import_node_fs7 = require("node:fs");
+var import_node_path8 = require("node:path");
+var import_node_fs9 = require("node:fs");
 function resolveVersion(s) {
   if (s.isSea) {
     const m = s.sqVersionXml?.match(/<version>([^<]+)<\/version>/);
@@ -52839,8 +53005,8 @@ function isSea2() {
 }
 function readSqVersionXml() {
   try {
-    const sq = (0, import_node_path6.join)((0, import_node_path6.dirname)(process.execPath), "sq.version");
-    return (0, import_node_fs7.existsSync)(sq) ? (0, import_node_fs7.readFileSync)(sq, "utf8") : null;
+    const sq = (0, import_node_path8.join)((0, import_node_path8.dirname)(process.execPath), "sq.version");
+    return (0, import_node_fs9.existsSync)(sq) ? (0, import_node_fs9.readFileSync)(sq, "utf8") : null;
   } catch {
     return null;
   }
@@ -52856,7 +53022,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.55.0" : void 0,
+    define: true ? "0.57.0" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -52866,16 +53032,16 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.55.0" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.57.0" : void 0 });
 }
 
 // workflow-update.ts
-var import_node_fs8 = require("node:fs");
-var import_node_os7 = require("node:os");
-var import_node_path7 = require("node:path");
+var import_node_fs10 = require("node:fs");
+var import_node_os9 = require("node:os");
+var import_node_path9 = require("node:path");
 var import_node_url = require("node:url");
 var import_yaml2 = __toESM(require_dist6(), 1);
-var here = (0, import_node_path7.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
+var here = (0, import_node_path9.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
 function compareSemver(a, b) {
   const pa = String(a).split(".");
   const pb = String(b).split(".");
@@ -52890,24 +53056,35 @@ function changelogSince(changelog, installed) {
   return (changelog ?? []).filter((e) => e && compareSemver(String(e.version), installed) > 0);
 }
 function detectUpdates(installed, templates) {
+  const byId = new Map(templates.filter((t) => t.publisher === "floless").map((t) => [t.id, t]));
   const out = [];
-  for (const t of templates) {
-    if (t.publisher !== "floless") continue;
-    const iv = installed[t.id];
-    if (iv == null) continue;
-    if (compareSemver(t.version, iv) <= 0) continue;
+  for (const app of installed) {
+    if (app.forked) continue;
+    if (app.publisher != null && app.publisher !== "floless") continue;
+    const t = byId.get(app.templateId);
+    if (!t) continue;
+    if (compareSemver(t.version, app.version) <= 0) continue;
     out.push({
-      id: t.id,
-      installed: iv,
+      id: app.id,
+      templateId: t.id,
+      installed: app.version,
       available: t.version,
       module: t.module,
-      changelog: changelogSince(t.changelog, iv)
+      changelog: changelogSince(t.changelog, app.version)
     });
   }
   return out;
 }
+function stampSourceAppId(sourcePath, id) {
+  const doc = (0, import_yaml2.parseDocument)((0, import_node_fs10.readFileSync)(sourcePath, "utf8"));
+  if (doc.errors.length > 0) {
+    throw new Error(`stamp app id: source is not valid YAML: ${doc.errors[0]?.message ?? "parse error"}`);
+  }
+  doc.set("app", id);
+  (0, import_node_fs10.writeFileSync)(sourcePath, doc.toString());
+}
 function readTemplateMeta(path) {
-  const doc = (0, import_yaml2.parse)((0, import_node_fs8.readFileSync)(path, "utf8")) ?? {};
+  const doc = (0, import_yaml2.parse)((0, import_node_fs10.readFileSync)(path, "utf8")) ?? {};
   return {
     id: String(doc.app ?? ""),
     version: doc.version != null ? String(doc.version) : "0.0.0",
@@ -52921,24 +53098,24 @@ function templatePaths(roots) {
   const envDir = process.env.FLOLESS_TEMPLATES_DIR;
   const flatDirs = roots ?? [
     ...envDir ? [envDir] : [],
-    (0, import_node_path7.join)(here, "templates"),
+    (0, import_node_path9.join)(here, "templates"),
     // bundled: dist/templates beside the cjs
-    (0, import_node_path7.join)(here, "dist", "templates"),
+    (0, import_node_path9.join)(here, "dist", "templates"),
     // dev: the built bundle at server/dist
-    (0, import_node_path7.join)((0, import_node_path7.dirname)(process.execPath), "templates")
+    (0, import_node_path9.join)((0, import_node_path9.dirname)(process.execPath), "templates")
     // SEA exe
   ];
   for (const d of flatDirs) {
-    if (!(0, import_node_fs8.existsSync)(d)) continue;
-    const flos = (0, import_node_fs8.readdirSync)(d).filter((f) => f.endsWith(".flo"));
-    if (flos.length) return flos.map((f) => (0, import_node_path7.join)(d, f));
+    if (!(0, import_node_fs10.existsSync)(d)) continue;
+    const flos = (0, import_node_fs10.readdirSync)(d).filter((f) => f.endsWith(".flo"));
+    if (flos.length) return flos.map((f) => (0, import_node_path9.join)(d, f));
   }
-  for (const demos of [(0, import_node_path7.join)(here, "..", "demos"), (0, import_node_path7.join)(here, "..", "..", "demos")]) {
-    if (!(0, import_node_fs8.existsSync)(demos)) continue;
+  for (const demos of [(0, import_node_path9.join)(here, "..", "demos"), (0, import_node_path9.join)(here, "..", "..", "demos")]) {
+    if (!(0, import_node_fs10.existsSync)(demos)) continue;
     const out = [];
-    for (const dir of (0, import_node_fs8.readdirSync)(demos)) {
+    for (const dir of (0, import_node_fs10.readdirSync)(demos)) {
       try {
-        for (const f of (0, import_node_fs8.readdirSync)((0, import_node_path7.join)(demos, dir))) if (f.endsWith(".flo")) out.push((0, import_node_path7.join)(demos, dir, f));
+        for (const f of (0, import_node_fs10.readdirSync)((0, import_node_path9.join)(demos, dir))) if (f.endsWith(".flo")) out.push((0, import_node_path9.join)(demos, dir, f));
       } catch {
       }
     }
@@ -52958,19 +53135,19 @@ function loadTemplates(roots) {
   return out;
 }
 function backupDir(id, version, ts) {
-  const root = process.env.FLOLESS_HOME ?? (0, import_node_path7.join)((0, import_node_os7.homedir)(), ".floless");
+  const root = process.env.FLOLESS_HOME ?? (0, import_node_path9.join)((0, import_node_os9.homedir)(), ".floless");
   const safe = (s) => {
     const c = String(s).replace(/[^0-9A-Za-z._-]/g, "_");
     return /^\.+$/.test(c) ? "_" : c || "_";
   };
-  return (0, import_node_path7.join)(root, "app-backups", safe(id), `${safe(version)}-${ts}`);
+  return (0, import_node_path9.join)(root, "app-backups", safe(id), `${safe(version)}-${ts}`);
 }
 
 // oauth-presets.ts
-var import_node_os8 = require("node:os");
-var import_node_path8 = require("node:path");
+var import_node_os10 = require("node:os");
+var import_node_path10 = require("node:path");
 var import_node_net = __toESM(require("node:net"), 1);
-var import_node_fs9 = require("node:fs");
+var import_node_fs11 = require("node:fs");
 var MANAGED_HEADER = "# managed by floless.app - do not edit";
 var OAUTH_PRESETS = {
   "trimble-connect": {
@@ -53000,7 +53177,7 @@ function managedProfileYaml(preset) {
   ].join("\n");
 }
 function oauthDir() {
-  return process.env.AWARE_HOME ? (0, import_node_path8.join)(process.env.AWARE_HOME, "oauth") : (0, import_node_path8.join)((0, import_node_os8.homedir)(), ".aware", "oauth");
+  return process.env.AWARE_HOME ? (0, import_node_path10.join)(process.env.AWARE_HOME, "oauth") : (0, import_node_path10.join)((0, import_node_os10.homedir)(), ".aware", "oauth");
 }
 function isUpgradableLegacyProfile(existing, preset) {
   if (existing.startsWith(MANAGED_HEADER)) return false;
@@ -53014,15 +53191,15 @@ function ensureManagedProfile(id) {
   const preset = OAUTH_PRESETS[id];
   if (!preset) return "not-managed";
   const dir = oauthDir();
-  const file = (0, import_node_path8.join)(dir, `${id}.yaml`);
-  const existing = (0, import_node_fs9.existsSync)(file) ? (0, import_node_fs9.readFileSync)(file, "utf8") : null;
+  const file = (0, import_node_path10.join)(dir, `${id}.yaml`);
+  const existing = (0, import_node_fs11.existsSync)(file) ? (0, import_node_fs11.readFileSync)(file, "utf8") : null;
   if (existing !== null && !existing.startsWith(MANAGED_HEADER) && !isUpgradableLegacyProfile(existing, preset)) {
     return "skipped";
   }
   const desired = managedProfileYaml(preset);
   if (existing === desired) return "unchanged";
-  (0, import_node_fs9.mkdirSync)(dir, { recursive: true });
-  (0, import_node_fs9.writeFileSync)(file, desired, "utf8");
+  (0, import_node_fs11.mkdirSync)(dir, { recursive: true });
+  (0, import_node_fs11.writeFileSync)(file, desired, "utf8");
   return "written";
 }
 function isPortBindable(port, host = "127.0.0.1") {
@@ -53193,16 +53370,16 @@ function buildPreview(m, sourceKind, sourceRef, stagedRef) {
 }
 
 // graft-manifest-reader.ts
-var import_node_fs10 = require("node:fs");
-var import_node_path9 = require("node:path");
+var import_node_fs12 = require("node:fs");
+var import_node_path11 = require("node:path");
 var import_yaml4 = __toESM(require_dist6(), 1);
 var asRecord2 = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
 function readStagedManifest(agentDir) {
-  const manifestPath = (0, import_node_path9.join)(agentDir, "manifest.yaml");
-  if (!(0, import_node_fs10.existsSync)(manifestPath)) return null;
+  const manifestPath = (0, import_node_path11.join)(agentDir, "manifest.yaml");
+  if (!(0, import_node_fs12.existsSync)(manifestPath)) return null;
   let doc;
   try {
-    doc = asRecord2((0, import_yaml4.parse)((0, import_node_fs10.readFileSync)(manifestPath, "utf8")));
+    doc = asRecord2((0, import_yaml4.parse)((0, import_node_fs12.readFileSync)(manifestPath, "utf8")));
   } catch {
     return null;
   }
@@ -53232,10 +53409,10 @@ function readStagedManifest(agentDir) {
   }
   let skillCount = Array.isArray(doc.skills) ? doc.skills.length : 0;
   if (!skillCount) {
-    const skillsDir = (0, import_node_path9.join)(agentDir, "skills");
-    if ((0, import_node_fs10.existsSync)(skillsDir)) {
+    const skillsDir = (0, import_node_path11.join)(agentDir, "skills");
+    if ((0, import_node_fs12.existsSync)(skillsDir)) {
       try {
-        skillCount = (0, import_node_fs10.readdirSync)(skillsDir).filter((f) => f.endsWith(".md")).length;
+        skillCount = (0, import_node_fs12.readdirSync)(skillsDir).filter((f) => f.endsWith(".md")).length;
       } catch {
       }
     }
@@ -53249,7 +53426,7 @@ function readStagedManifest(agentDir) {
 }
 
 // graft-stage-registry.ts
-var import_node_fs11 = require("node:fs");
+var import_node_fs13 = require("node:fs");
 var TTL_MS = 30 * 60 * 1e3;
 var registry = /* @__PURE__ */ new Map();
 function registerStage(token, tempDir, agentId) {
@@ -53271,7 +53448,7 @@ function evict(token) {
   clearTimeout(e.timer);
   registry.delete(token);
   try {
-    (0, import_node_fs11.rmSync)(e.tempDir, { recursive: true, force: true });
+    (0, import_node_fs13.rmSync)(e.tempDir, { recursive: true, force: true });
   } catch {
   }
 }
@@ -53280,8 +53457,8 @@ function clearAllStages() {
 }
 
 // graft-commit.ts
-var import_node_fs12 = require("node:fs");
-var import_node_path10 = require("node:path");
+var import_node_fs14 = require("node:fs");
+var import_node_path12 = require("node:path");
 var GraftCommitError = class extends Error {
   constructor(message, code) {
     super(message);
@@ -53291,34 +53468,34 @@ var GraftCommitError = class extends Error {
   code;
 };
 function commitStaged(tempDir, agentId, targetAgentsDir, force) {
-  const staged = (0, import_node_path10.join)(tempDir, "agents", agentId);
-  const target = (0, import_node_path10.join)(targetAgentsDir, agentId);
-  if ((0, import_node_fs12.existsSync)(target)) {
+  const staged = (0, import_node_path12.join)(tempDir, "agents", agentId);
+  const target = (0, import_node_path12.join)(targetAgentsDir, agentId);
+  if ((0, import_node_fs14.existsSync)(target)) {
     if (!force) throw new GraftCommitError(`an agent named "${agentId}" is already installed`, "collision");
-    (0, import_node_fs12.rmSync)(target, { recursive: true, force: true });
+    (0, import_node_fs14.rmSync)(target, { recursive: true, force: true });
   }
-  (0, import_node_fs12.mkdirSync)(targetAgentsDir, { recursive: true });
+  (0, import_node_fs14.mkdirSync)(targetAgentsDir, { recursive: true });
   try {
-    (0, import_node_fs12.renameSync)(staged, target);
+    (0, import_node_fs14.renameSync)(staged, target);
   } catch {
-    (0, import_node_fs12.cpSync)(staged, target, { recursive: true });
+    (0, import_node_fs14.cpSync)(staged, target, { recursive: true });
   }
-  (0, import_node_fs12.rmSync)(tempDir, { recursive: true, force: true });
+  (0, import_node_fs14.rmSync)(tempDir, { recursive: true, force: true });
   return { agentId };
 }
 function matchAssemblies(globOrDir) {
   let dir;
   let pattern;
-  if ((0, import_node_fs12.existsSync)(globOrDir) && (0, import_node_fs12.statSync)(globOrDir).isDirectory()) {
+  if ((0, import_node_fs14.existsSync)(globOrDir) && (0, import_node_fs14.statSync)(globOrDir).isDirectory()) {
     dir = globOrDir;
     pattern = "*.dll";
   } else {
-    dir = (0, import_node_path10.dirname)(globOrDir);
-    pattern = (0, import_node_path10.basename)(globOrDir);
+    dir = (0, import_node_path12.dirname)(globOrDir);
+    pattern = (0, import_node_path12.basename)(globOrDir);
   }
-  if (!dir || !(0, import_node_fs12.existsSync)(dir) || !(0, import_node_fs12.statSync)(dir).isDirectory()) return [];
+  if (!dir || !(0, import_node_fs14.existsSync)(dir) || !(0, import_node_fs14.statSync)(dir).isDirectory()) return [];
   const re = globToRegExp(pattern);
-  return (0, import_node_fs12.readdirSync)(dir).filter((f) => re.test(f)).sort();
+  return (0, import_node_fs14.readdirSync)(dir).filter((f) => re.test(f)).sort();
 }
 function globToRegExp(p) {
   const esc = p.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
@@ -53326,25 +53503,25 @@ function globToRegExp(p) {
 }
 
 // floless-store.ts
-var import_node_crypto4 = require("node:crypto");
-var import_node_fs13 = require("node:fs");
-var import_node_os9 = require("node:os");
-var import_node_path11 = require("node:path");
-var ROOT2 = process.env.FLOLESS_HOME ?? (0, import_node_path11.join)((0, import_node_os9.homedir)(), ".floless");
-var TEMPLATES_FILE = (0, import_node_path11.join)(ROOT2, "templates.json");
-var REQUESTS_DIR = (0, import_node_path11.join)(ROOT2, "requests");
+var import_node_crypto5 = require("node:crypto");
+var import_node_fs15 = require("node:fs");
+var import_node_os11 = require("node:os");
+var import_node_path13 = require("node:path");
+var ROOT2 = process.env.FLOLESS_HOME ?? (0, import_node_path13.join)((0, import_node_os11.homedir)(), ".floless");
+var TEMPLATES_FILE = (0, import_node_path13.join)(ROOT2, "templates.json");
+var REQUESTS_DIR = (0, import_node_path13.join)(ROOT2, "requests");
 function ensureRoot() {
-  if (!(0, import_node_fs13.existsSync)(ROOT2)) (0, import_node_fs13.mkdirSync)(ROOT2, { recursive: true });
+  if (!(0, import_node_fs15.existsSync)(ROOT2)) (0, import_node_fs15.mkdirSync)(ROOT2, { recursive: true });
 }
 function withinRequestsDir(p) {
-  const base = (0, import_node_path11.resolve)(REQUESTS_DIR);
-  const full = (0, import_node_path11.resolve)(p);
-  return full === base || full.startsWith(base + import_node_path11.sep);
+  const base = (0, import_node_path13.resolve)(REQUESTS_DIR);
+  const full = (0, import_node_path13.resolve)(p);
+  return full === base || full.startsWith(base + import_node_path13.sep);
 }
 function listTemplates() {
-  if (!(0, import_node_fs13.existsSync)(TEMPLATES_FILE)) return [];
+  if (!(0, import_node_fs15.existsSync)(TEMPLATES_FILE)) return [];
   try {
-    const parsed = JSON.parse((0, import_node_fs13.readFileSync)(TEMPLATES_FILE, "utf8"));
+    const parsed = JSON.parse((0, import_node_fs15.readFileSync)(TEMPLATES_FILE, "utf8"));
     return Array.isArray(parsed) ? parsed : [];
   } catch {
     return [];
@@ -53353,8 +53530,8 @@ function listTemplates() {
 function writeTemplates(list) {
   ensureRoot();
   const tmp = `${TEMPLATES_FILE}.${process.pid}.tmp`;
-  (0, import_node_fs13.writeFileSync)(tmp, JSON.stringify(list, null, 2));
-  (0, import_node_fs13.renameSync)(tmp, TEMPLATES_FILE);
+  (0, import_node_fs15.writeFileSync)(tmp, JSON.stringify(list, null, 2));
+  (0, import_node_fs15.renameSync)(tmp, TEMPLATES_FILE);
 }
 function addTemplate(input) {
   const list = listTemplates();
@@ -53365,7 +53542,7 @@ function addTemplate(input) {
     if (dup) return dup;
   }
   const tpl = {
-    id: (0, import_node_crypto4.randomUUID)(),
+    id: (0, import_node_crypto5.randomUUID)(),
     name: input.name.trim(),
     category: (input.category || "Uncategorized").trim(),
     node: input.node,
@@ -53386,12 +53563,12 @@ function deleteTemplate(id) {
 function getTemplate(id) {
   return listTemplates().find((t) => t.id === id) ?? null;
 }
-function updateTemplate(id, patch) {
+function updateTemplate(id, patch2) {
   const list = listTemplates();
   const cur = list.find((t) => t.id === id);
   if (!cur) return null;
-  const name = patch.name?.trim();
-  const category = patch.category?.trim();
+  const name = patch2.name?.trim();
+  const category = patch2.category?.trim();
   cur.name = name || cur.name;
   cur.category = category || cur.category;
   writeTemplates(list);
@@ -53399,13 +53576,13 @@ function updateTemplate(id, patch) {
 }
 function addRequest(req, decoded = []) {
   ensureRoot();
-  if (!(0, import_node_fs13.existsSync)(REQUESTS_DIR)) (0, import_node_fs13.mkdirSync)(REQUESTS_DIR, { recursive: true });
-  const id = (0, import_node_crypto4.randomUUID)();
+  if (!(0, import_node_fs15.existsSync)(REQUESTS_DIR)) (0, import_node_fs15.mkdirSync)(REQUESTS_DIR, { recursive: true });
+  const id = (0, import_node_crypto5.randomUUID)();
   const createdAt = (/* @__PURE__ */ new Date()).toISOString();
   const base = `${createdAt.replace(/[:.]/g, "-")}__${id}`;
   const snapshots = decoded.map((d, i) => {
-    const p = (0, import_node_path11.join)(REQUESTS_DIR, `${base}__snap${i + 1}.${d.ext}`);
-    (0, import_node_fs13.writeFileSync)(p, d.buf);
+    const p = (0, import_node_path13.join)(REQUESTS_DIR, `${base}__snap${i + 1}.${d.ext}`);
+    (0, import_node_fs15.writeFileSync)(p, d.buf);
     return p;
   });
   const full = {
@@ -53415,55 +53592,55 @@ function addRequest(req, decoded = []) {
     ...req,
     ...snapshots.length ? { snapshots } : {}
   };
-  (0, import_node_fs13.writeFileSync)((0, import_node_path11.join)(REQUESTS_DIR, `${base}.json`), JSON.stringify(full, null, 2));
+  (0, import_node_fs15.writeFileSync)((0, import_node_path13.join)(REQUESTS_DIR, `${base}.json`), JSON.stringify(full, null, 2));
   return full;
 }
 function listRequests() {
-  if (!(0, import_node_fs13.existsSync)(REQUESTS_DIR)) return [];
-  return (0, import_node_fs13.readdirSync)(REQUESTS_DIR).filter((f) => f.endsWith(".json")).sort().map((f) => {
+  if (!(0, import_node_fs15.existsSync)(REQUESTS_DIR)) return [];
+  return (0, import_node_fs15.readdirSync)(REQUESTS_DIR).filter((f) => f.endsWith(".json")).sort().map((f) => {
     try {
-      return JSON.parse((0, import_node_fs13.readFileSync)((0, import_node_path11.join)(REQUESTS_DIR, f), "utf8"));
+      return JSON.parse((0, import_node_fs15.readFileSync)((0, import_node_path13.join)(REQUESTS_DIR, f), "utf8"));
     } catch {
       return null;
     }
   }).filter((r) => r !== null);
 }
 function deleteRequest(id) {
-  if (!(0, import_node_fs13.existsSync)(REQUESTS_DIR)) return false;
-  const file = (0, import_node_fs13.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
+  if (!(0, import_node_fs15.existsSync)(REQUESTS_DIR)) return false;
+  const file = (0, import_node_fs15.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
   if (!file) return false;
   try {
-    const parsed = JSON.parse((0, import_node_fs13.readFileSync)((0, import_node_path11.join)(REQUESTS_DIR, file), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs15.readFileSync)((0, import_node_path13.join)(REQUESTS_DIR, file), "utf8"));
     for (const p of parsed.snapshots ?? []) {
       if (!withinRequestsDir(p)) continue;
       try {
-        (0, import_node_fs13.rmSync)(p);
+        (0, import_node_fs15.rmSync)(p);
       } catch {
       }
     }
   } catch {
   }
-  (0, import_node_fs13.rmSync)((0, import_node_path11.join)(REQUESTS_DIR, file));
+  (0, import_node_fs15.rmSync)((0, import_node_path13.join)(REQUESTS_DIR, file));
   return true;
 }
 function clearRequests() {
-  if (!(0, import_node_fs13.existsSync)(REQUESTS_DIR)) return 0;
-  const allFiles = (0, import_node_fs13.readdirSync)(REQUESTS_DIR);
+  if (!(0, import_node_fs15.existsSync)(REQUESTS_DIR)) return 0;
+  const allFiles = (0, import_node_fs15.readdirSync)(REQUESTS_DIR);
   const jsonFiles = allFiles.filter((f) => f.endsWith(".json"));
   for (const f of allFiles) {
     try {
-      (0, import_node_fs13.rmSync)((0, import_node_path11.join)(REQUESTS_DIR, f));
+      (0, import_node_fs15.rmSync)((0, import_node_path13.join)(REQUESTS_DIR, f));
     } catch {
     }
   }
   return jsonFiles.length;
 }
 function snapshotPathFor(id, n) {
-  if (!(0, import_node_fs13.existsSync)(REQUESTS_DIR)) return null;
-  const file = (0, import_node_fs13.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
+  if (!(0, import_node_fs15.existsSync)(REQUESTS_DIR)) return null;
+  const file = (0, import_node_fs15.readdirSync)(REQUESTS_DIR).find((f) => f.endsWith(`__${id}.json`));
   if (!file) return null;
   try {
-    const parsed = JSON.parse((0, import_node_fs13.readFileSync)((0, import_node_path11.join)(REQUESTS_DIR, file), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs15.readFileSync)((0, import_node_path13.join)(REQUESTS_DIR, file), "utf8"));
     const cand = parsed.snapshots?.[n] ?? null;
     return cand && withinRequestsDir(cand) ? cand : null;
   } catch {
@@ -53474,8 +53651,8 @@ var flolessRoot = ROOT2;
 var SnapshotError = class extends Error {
 };
 var MAX_SNAPSHOTS = 8;
-var MAX_BYTES2 = 25 * 1024 * 1024;
-function sniffExt(buf) {
+var MAX_BYTES3 = 25 * 1024 * 1024;
+function sniffExt2(buf) {
   if (buf.length >= 8 && buf[0] === 137 && buf[1] === 80 && buf[2] === 78 && buf[3] === 71) return "png";
   if (buf.length >= 3 && buf[0] === 255 && buf[1] === 216 && buf[2] === 255) return "jpg";
   if (buf.length >= 12 && buf.toString("ascii", 0, 4) === "RIFF" && buf.toString("ascii", 8, 12) === "WEBP") return "webp";
@@ -53488,100 +53665,24 @@ function decodeSnapshots(inputs) {
   return inputs.map((s) => {
     const m = /^data:([\w/+.-]+);base64,(.*)$/s.exec(s.dataUrl || "");
     if (!m) throw new SnapshotError("snapshot must be a base64 data URL");
-    if ((m[2]?.length ?? 0) * 0.75 > MAX_BYTES2) throw new SnapshotError("snapshot too large (max 25 MB)");
+    if ((m[2]?.length ?? 0) * 0.75 > MAX_BYTES3) throw new SnapshotError("snapshot too large (max 25 MB)");
     const buf = Buffer.from(m[2] ?? "", "base64");
     if (buf.length === 0) throw new SnapshotError("empty snapshot");
-    if (buf.length > MAX_BYTES2) throw new SnapshotError("snapshot too large (max 25 MB)");
-    const ext = sniffExt(buf);
+    if (buf.length > MAX_BYTES3) throw new SnapshotError("snapshot too large (max 25 MB)");
+    const ext = sniffExt2(buf);
     if (!ext) throw new SnapshotError("snapshot must be PNG, JPEG, WebP, or PDF");
     return { buf, ext };
   });
 }
 
-// visual-input-store.ts
-var import_node_crypto5 = require("node:crypto");
-var import_node_fs14 = require("node:fs");
-var import_node_os10 = require("node:os");
-var import_node_path12 = require("node:path");
-var MAX_BYTES3 = 25 * 1024 * 1024;
-var VisualInputError = class extends Error {
-};
-function inputsDir() {
-  const root = process.env.FLOLESS_HOME ?? (0, import_node_path12.join)((0, import_node_os10.homedir)(), ".floless");
-  return (0, import_node_path12.join)(root, "inputs");
-}
-function sniffExt2(buf) {
-  if (buf.length >= 8 && buf[0] === 137 && buf[1] === 80 && buf[2] === 78 && buf[3] === 71) return "png";
-  if (buf.length >= 3 && buf[0] === 255 && buf[1] === 216 && buf[2] === 255) return "jpg";
-  if (buf.length >= 12 && buf.toString("ascii", 0, 4) === "RIFF" && buf.toString("ascii", 8, 12) === "WEBP") return "webp";
-  if (buf.length >= 5 && buf.toString("ascii", 0, 5) === "%PDF-") return "pdf";
-  return null;
-}
-var RESERVED = /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(\..*)?$/i;
-function safeSegment(s) {
-  if (!s || s === "." || s.includes("..")) return false;
-  if (s.includes("/") || s.includes("\\") || s.includes(import_node_path12.sep)) return false;
-  for (let i = 0; i < s.length; i++) {
-    const c = s.charCodeAt(i);
-    if (c < 32 || c === 58) return false;
-  }
-  if (/[. ]$/.test(s)) return false;
-  return !RESERVED.test(s);
-}
-function storeVisualInput(appId, dataUrl) {
-  if (!safeSegment(appId)) throw new VisualInputError("invalid app id");
-  const m = /^data:([\w/+.-]+);base64,(.*)$/s.exec(dataUrl || "");
-  if (!m) throw new VisualInputError("visual input must be a base64 data URL");
-  const buf = Buffer.from(m[2] ?? "", "base64");
-  if (buf.length === 0) throw new VisualInputError("empty visual input");
-  if (buf.length > MAX_BYTES3) throw new VisualInputError("visual input too large (max 25 MB)");
-  const ext = sniffExt2(buf);
-  if (!ext) throw new VisualInputError("visual input must be PNG, JPEG, WebP, or PDF");
-  const sha2562 = (0, import_node_crypto5.createHash)("sha256").update(buf).digest("hex");
-  const dir = (0, import_node_path12.join)(inputsDir(), appId);
-  const path = (0, import_node_path12.join)(dir, `${sha2562}.${ext}`);
-  const root = (0, import_node_path12.resolve)(inputsDir());
-  const target = (0, import_node_path12.resolve)(path);
-  if (target !== root && !target.startsWith(root + import_node_path12.sep)) {
-    throw new VisualInputError("refusing to write outside the inputs root");
-  }
-  (0, import_node_fs14.mkdirSync)(dir, { recursive: true });
-  if (!(0, import_node_fs14.existsSync)(path)) {
-    const tmp = `${path}.tmp`;
-    (0, import_node_fs14.writeFileSync)(tmp, buf);
-    (0, import_node_fs14.renameSync)(tmp, path);
-  }
-  return { path, ext, bytes: (0, import_node_fs14.statSync)(path).size, sha256: sha2562 };
-}
-function renameVisualInputs(oldId, newId) {
-  if (!safeSegment(oldId) || !safeSegment(newId)) throw new VisualInputError("invalid app id");
-  const from = (0, import_node_path12.join)(inputsDir(), oldId);
-  if (!(0, import_node_fs14.existsSync)(from)) return;
-  const to = (0, import_node_path12.join)(inputsDir(), newId);
-  if ((0, import_node_fs14.existsSync)(to)) (0, import_node_fs14.rmSync)(to, { recursive: true, force: true });
-  (0, import_node_fs14.mkdirSync)(inputsDir(), { recursive: true });
-  (0, import_node_fs14.renameSync)(from, to);
-}
-function copyVisualInputs(srcId, newId) {
-  if (!safeSegment(srcId) || !safeSegment(newId)) throw new VisualInputError("invalid app id");
-  const from = (0, import_node_path12.join)(inputsDir(), srcId);
-  if (!(0, import_node_fs14.existsSync)(from)) return;
-  (0, import_node_fs14.cpSync)(from, (0, import_node_path12.join)(inputsDir(), newId), { recursive: true });
-}
-function deleteVisualInputs(id) {
-  if (!safeSegment(id)) throw new VisualInputError("invalid app id");
-  const dir = (0, import_node_path12.join)(inputsDir(), id);
-  if ((0, import_node_fs14.existsSync)(dir)) (0, import_node_fs14.rmSync)(dir, { recursive: true, force: true });
-}
-
 // contract-store.ts
-var import_node_fs16 = require("node:fs");
-var import_node_path14 = require("node:path");
-var import_node_os11 = require("node:os");
+var import_node_fs17 = require("node:fs");
+var import_node_path15 = require("node:path");
+var import_node_os12 = require("node:os");
 
 // contract-schema.ts
-var import_node_fs15 = require("node:fs");
-var import_node_path13 = require("node:path");
+var import_node_fs16 = require("node:fs");
+var import_node_path14 = require("node:path");
 var import_node_url2 = require("node:url");
 function validate(doc, schema) {
   const errors = [];
@@ -53682,16 +53783,16 @@ function walk(value, node, root, path, errors) {
 var _cached = null;
 function loadSteelTakeoffSchema() {
   if (_cached) return _cached;
-  const here2 = (0, import_node_path13.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
+  const here2 = (0, import_node_path14.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
   const candidates = [
-    (0, import_node_path13.join)(here2, "..", "schemas", "steel.takeoff.v1.schema.json"),
+    (0, import_node_path14.join)(here2, "..", "schemas", "steel.takeoff.v1.schema.json"),
     // dev: server/ next to schemas/
-    (0, import_node_path13.join)(here2, "schemas", "steel.takeoff.v1.schema.json")
+    (0, import_node_path14.join)(here2, "schemas", "steel.takeoff.v1.schema.json")
     // bundled: dist/ holds ./schemas
   ];
   for (const p of candidates) {
     try {
-      const text = (0, import_node_fs15.readFileSync)(p, "utf8");
+      const text = (0, import_node_fs16.readFileSync)(p, "utf8");
       _cached = JSON.parse(text);
       return _cached;
     } catch (err2) {
@@ -53707,20 +53808,20 @@ function validateSteelTakeoff(doc) {
 // contract-store.ts
 var ContractError = class extends Error {
 };
-var ROOT3 = process.env.FLOLESS_HOME ?? (0, import_node_path14.join)((0, import_node_os11.homedir)(), ".floless");
-var DIR = (0, import_node_path14.join)(ROOT3, "contracts");
+var ROOT3 = process.env.FLOLESS_HOME ?? (0, import_node_path15.join)((0, import_node_os12.homedir)(), ".floless");
+var DIR = (0, import_node_path15.join)(ROOT3, "contracts");
 function safeId(appId) {
   if (!/^[a-z0-9][a-z0-9._-]*$/i.test(appId)) throw new ContractError(`invalid appId: ${appId}`);
   return appId;
 }
 function contractPath(appId) {
-  return (0, import_node_path14.join)(DIR, `${safeId(appId)}.json`);
+  return (0, import_node_path15.join)(DIR, `${safeId(appId)}.json`);
 }
 function readContract(appId) {
   const p = contractPath(appId);
-  if (!(0, import_node_fs16.existsSync)(p)) return null;
+  if (!(0, import_node_fs17.existsSync)(p)) return null;
   try {
-    return JSON.parse((0, import_node_fs16.readFileSync)(p, "utf8"));
+    return JSON.parse((0, import_node_fs17.readFileSync)(p, "utf8"));
   } catch (e) {
     console.warn(`readContract: ignoring unreadable contract at ${p}: ${e instanceof Error ? e.message : e}`);
     return null;
@@ -53733,8 +53834,8 @@ function writeContract(appId, doc) {
     const first = res.errors.slice(0, 5).map((e) => `${e.path}: ${e.message}`).join("; ");
     throw new ContractError(`contract failed schema validation \u2014 ${first}`);
   }
-  if (!(0, import_node_fs16.existsSync)(DIR)) (0, import_node_fs16.mkdirSync)(DIR, { recursive: true });
-  (0, import_node_fs16.writeFileSync)(p, JSON.stringify(doc));
+  if (!(0, import_node_fs17.existsSync)(DIR)) (0, import_node_fs17.mkdirSync)(DIR, { recursive: true });
+  (0, import_node_fs17.writeFileSync)(p, JSON.stringify(doc));
 }
 
 // contract-resolve.ts
@@ -53756,10 +53857,10 @@ function readContractForApp(appId, readAppFn = readApp) {
 }
 
 // contract-bake.ts
-var import_node_fs17 = require("node:fs");
+var import_node_fs18 = require("node:fs");
 var import_yaml5 = __toESM(require_dist6(), 1);
 function bakeContractIntoApp(sourcePath, contract) {
-  const doc = (0, import_yaml5.parseDocument)((0, import_node_fs17.readFileSync)(sourcePath, "utf8"));
+  const doc = (0, import_yaml5.parseDocument)((0, import_node_fs18.readFileSync)(sourcePath, "utf8"));
   if (doc.errors.length > 0) {
     throw new Error(`contract bake: source is not valid YAML: ${doc.errors[0]?.message ?? "parse error"}`);
   }
@@ -53802,7 +53903,389 @@ function bakeContractIntoApp(sourcePath, contract) {
     baked.filter = next;
   }
   doc.setIn(["nodes", idx, "config", "takeoff"], baked);
-  (0, import_node_fs17.writeFileSync)(sourcePath, doc.toString());
+  (0, import_node_fs18.writeFileSync)(sourcePath, doc.toString());
+}
+
+// steel-joints.ts
+var GROUPS = {
+  "base-plate": { key: "base-plate", label: "Base plates", color: "#6b7a8d" },
+  // darkest plate grey
+  "washer-plate": { key: "washer-plate", label: "Washer plates", color: "#9aafc3" },
+  anchor: { key: "anchor", label: "Anchor rods", color: "#b0c4d8" },
+  // cool zinc-grey
+  nut: { key: "nut", label: "Nuts", color: "#7a8a9e" },
+  washer: { key: "washer", label: "Washers", color: "#dde4ed" },
+  // lightest zinc
+  weld: { key: "weld", label: "Welds", color: "#f97316" },
+  // weld orange (heat) — off the UI error-red
+  // Shear-plate kit — same muted steel band; the fin plate a touch lighter than the base plate so the
+  // two connection types are tellable apart in a mixed model, bolts on the zinc fastener grey.
+  "shear-plate": { key: "shear-plate", label: "Shear plates", color: "#7d8ba0" },
+  bolt: { key: "bolt", label: "Bolts", color: "#b0c4d8" },
+  // cool zinc-grey (matches the anchor fasteners)
+  stiffener: { key: "stiffener", label: "Stiffeners", color: "#9aafc3" },
+  cope: { key: "cope", label: "Copes", color: "#c2703a" }
+  // a muted cut/burn amber — the removed corner (subtractive; rendered as the notch, not a swatch mesh)
+};
+var EMBED = 1;
+function num(params, key, def) {
+  const v = params?.[key];
+  return typeof v === "number" && isFinite(v) ? v : def;
+}
+function pos(params, key, def) {
+  const v = num(params, key, def);
+  return v > 0 ? v : def;
+}
+function intMin1(params, key, def) {
+  return Math.max(1, Math.round(num(params, key, def)));
+}
+function finite3(a) {
+  return Array.isArray(a) && a.length >= 3 && a.every((n) => typeof n === "number" && isFinite(n));
+}
+function spread(n, half) {
+  if (n <= 1) return [0];
+  return Array.from({ length: n }, (_, i) => -half + 2 * half * i / (n - 1));
+}
+function profileKind(profile) {
+  const p = (profile || "").toUpperCase().trim();
+  if (/^(W|M|S|HP|UC|UB|UKC|UKB|IPE|HE)/.test(p)) return "I";
+  if (/^(C|MC|PFC)/.test(p)) return "C";
+  if (/^L/.test(p)) return "L";
+  if (/^(HSS|PIPE|TS|SHS|RHS|CHS|TUBE|HSQ)/.test(p)) return "TUBE";
+  return "BOX";
+}
+function profileOutline(profile, w, d) {
+  const hw = w / 2, hd = d / 2;
+  switch (profileKind(profile)) {
+    case "I": {
+      const tf = Math.min(d * 0.5, Math.max(d * 0.1, 6)), tw = Math.min(w * 0.5, Math.max(w * 0.1, 5));
+      return [
+        [-hw, -hd],
+        [hw, -hd],
+        [hw, -hd + tf],
+        [tw / 2, -hd + tf],
+        [tw / 2, hd - tf],
+        [hw, hd - tf],
+        [hw, hd],
+        [-hw, hd],
+        [-hw, hd - tf],
+        [-tw / 2, hd - tf],
+        [-tw / 2, -hd + tf],
+        [-hw, -hd + tf]
+      ];
+    }
+    case "C": {
+      const tf = Math.max(d * 0.1, 5), tw = Math.max(w * 0.12, 5);
+      return [[-hw, -hd], [hw, -hd], [hw, -hd + tf], [-hw + tw, -hd + tf], [-hw + tw, hd - tf], [hw, hd - tf], [hw, hd], [-hw, hd]];
+    }
+    case "L": {
+      const t = Math.max(Math.min(w, d) * 0.18, 5);
+      return [[-hw, -hd], [hw, -hd], [hw, -hd + t], [-hw + t, -hd + t], [-hw + t, hd], [-hw, hd]];
+    }
+    default:
+      return [[-hw, -hd], [hw, -hd], [hw, hd], [-hw, hd]];
+  }
+}
+function expandBasePlate(joint, col) {
+  const p = joint.params;
+  const base = col.from[2] <= col.to[2] ? col.from : col.to;
+  const [bx, by, bz] = base;
+  const { w, d } = col.dims;
+  const thickness = pos(p, "thickness", 25);
+  const margin = Math.max(0, num(p, "margin", 75));
+  const width = pos(p, "plateWidth", Math.max(w, d) + 2 * margin);
+  const depth = pos(p, "plateDepth", Math.max(w, d) + 2 * margin);
+  const boltDia = pos(p, "boltDia", 24);
+  const clearance = num(p, "holeClearance", 6);
+  const edge = num(p, "edgeDist", Math.max(1.5 * boltDia, 40));
+  const cols = intMin1(p, "boltCols", 2);
+  const rows = intMin1(p, "boltRows", 2);
+  const weldLeg = num(p, "weldLeg", 8);
+  const projBelow = num(p, "projBelow", 75);
+  const nutH = pos(p, "nutHeight", 0.8 * boltDia);
+  const nutAF = pos(p, "nutAcrossFlats", 1.6 * boltDia);
+  const wpSide = pos(p, "washerPlateSide", 2.5 * boltDia);
+  const wpThick = pos(p, "washerPlateThickness", Math.max(0.35 * boltDia, 8));
+  const washerOD = pos(p, "washerOuter", 2 * boltDia);
+  const washerID = boltDia + 3;
+  const washerH = pos(p, "washerThickness", Math.max(0.25 * boltDia, 4));
+  const levelingNut = p?.["levelingNut"] !== false;
+  const SEAT = 0.5;
+  const plateTop = bz + EMBED, plateBottom = plateTop - thickness;
+  const us = spread(cols, Math.max(0, width / 2 - edge));
+  const vs = spread(rows, Math.max(0, depth / 2 - edge));
+  const holes = [];
+  const kit = [];
+  let k = 0;
+  for (const v of vs) {
+    for (const u of us) {
+      const ax = bx + u, ay = by + v, jid = joint.id;
+      holes.push({ u, v, d: boltDia + clearance });
+      const wpBot = plateTop + SEAT, wpTop = wpBot + wpThick, washerTop = wpTop + washerH, fnTop = washerTop + nutH;
+      kit.push(
+        { id: `${jid}:rod${k}`, group: "anchor", kind: "rod", from: [ax, ay, plateBottom - projBelow], to: [ax, ay, fnTop + 0.4 * boltDia], d: boltDia, meta: { label: `Anchor rod \u2300${boltDia}` } },
+        { id: `${jid}:wp${k}`, group: "washer-plate", kind: "plate", center: [ax, ay, wpBot + wpThick / 2], uDir: [1, 0, 0], vDir: [0, 1, 0], width: wpSide, depth: wpSide, thickness: wpThick, holes: [{ u: 0, v: 0, d: boltDia + 2 }], meta: { label: `Washer plate ${Math.round(wpSide)}\xD7${Math.round(wpSide)}\xD7${Math.round(wpThick)}` } },
+        { id: `${jid}:wsh${k}`, group: "washer", kind: "washer", from: [ax, ay, wpTop], to: [ax, ay, washerTop], dOuter: washerOD, dInner: washerID, meta: { label: `Washer \u2300${Math.round(washerOD)}` } },
+        { id: `${jid}:fn${k}`, group: "nut", kind: "nut", from: [ax, ay, washerTop], to: [ax, ay, fnTop], acrossFlats: nutAF, meta: { label: `Nut M${boltDia}` } }
+      );
+      if (levelingNut) kit.push({ id: `${jid}:ln${k}`, group: "nut", kind: "nut", from: [ax, ay, plateBottom - SEAT - nutH], to: [ax, ay, plateBottom - SEAT], acrossFlats: nutAF, meta: { label: `Leveling nut M${boltDia}` } });
+      k++;
+    }
+  }
+  const plate = {
+    id: `${joint.id}:plate`,
+    group: "base-plate",
+    kind: "plate",
+    center: [bx, by, plateBottom + thickness / 2],
+    // plate top seats the column (= bz + EMBED); body hangs below
+    uDir: [1, 0, 0],
+    vDir: [0, 1, 0],
+    width,
+    depth,
+    thickness,
+    holes,
+    meta: { label: `Base plate ${Math.round(width)}\xD7${Math.round(depth)}\xD7${Math.round(thickness)}` }
+  };
+  const weld = {
+    id: `${joint.id}:weld`,
+    group: "weld",
+    kind: "weld",
+    path: profileOutline(col.profile, w, d).map(([u, vv]) => [bx + u, by + vv, bz]),
+    leg: weldLeg,
+    meta: { label: `Fillet ${weldLeg}` }
+  };
+  return [plate, ...kit, weld];
+}
+function webHalfThk(profile, w) {
+  return profileKind(profile) === "I" ? Math.min(w * 0.5, Math.max(w * 0.1, 5)) / 2 : 0;
+}
+function flangeThk(profile, d) {
+  return profileKind(profile) === "I" ? Math.min(d * 0.5, Math.max(d * 0.1, 6)) : d / 2;
+}
+var clamp = (x, lo, hi) => Math.max(lo, Math.min(hi, x));
+function supportWorkZAt(support, pt) {
+  const a = support.from, b = support.to;
+  const dx = b[0] - a[0], dy = b[1] - a[1];
+  const len2 = dx * dx + dy * dy;
+  if (!(len2 > 1e-9)) return a[2];
+  const t = clamp(((pt[0] - a[0]) * dx + (pt[1] - a[1]) * dy) / len2, 0, 1);
+  return a[2] + (b[2] - a[2]) * t;
+}
+function beamCopes(beam, support, at, params) {
+  if (!support || !finite3(support.from) || !finite3(support.to) || !support.dims || !(support.dims.d > 0) || !(support.dims.w > 0)) return {};
+  if (!finite3(beam.from) || !finite3(beam.to) || !beam.dims || !(beam.dims.d > 0) || !(beam.dims.w > 0)) return {};
+  if (profileKind(support.profile) !== "I") return {};
+  const endPt = at === "end1" ? beam.to : beam.from;
+  const gap = Math.max(0, num(params, "clearance", 12.7));
+  const beamMidZ = endPt[2] + (typeof beam.posOffset === "number" && isFinite(beam.posOffset) ? beam.posOffset : 0);
+  const beamTopZ = beamMidZ + beam.dims.d / 2, beamBotZ = beamMidZ - beam.dims.d / 2;
+  const supMidZ = supportWorkZAt(support, endPt) + (typeof support.posOffset === "number" && isFinite(support.posOffset) ? support.posOffset : 0);
+  const supTopZ = supMidZ + support.dims.d / 2, supBotZ = supMidZ - support.dims.d / 2;
+  const tfS = flangeThk(support.profile, support.dims.d);
+  const kClear = Math.max(0, num(params, "copeKClear", 12.7));
+  const minLen = Math.max(0, num(params, "copeMinLength", 31.75));
+  const kBand = tfS + kClear;
+  const webLo = supBotZ + kBand, webHi = supTopZ - kBand;
+  if (!(webLo < webHi && beamTopZ > webLo && beamBotZ < webHi)) return {};
+  const length = Math.max(support.dims.w / 2 + gap, minLen);
+  const out = {};
+  if (beamTopZ > webHi) out.top = { depth: clamp(beamTopZ - (webHi - gap), 0, beam.dims.d), length };
+  if (beamBotZ < webLo) out.bottom = { depth: clamp(webLo + gap - beamBotZ, 0, beam.dims.d), length };
+  return out;
+}
+var IN = 25.4;
+function aiscBoltLength(gripMm, diaMm) {
+  const Q = IN / 4;
+  const raw = gripMm + diaMm + Q;
+  const step = raw > 5 * IN ? 2 * Q : Q;
+  return Math.ceil((raw - 1e-6) / step) * step;
+}
+function expandShearPlate(joint, beam, support) {
+  const p = joint.params;
+  const atEnd1 = joint.at === "end1";
+  const endPt = atEnd1 ? beam.to : beam.from;
+  const farPt = atEnd1 ? beam.from : beam.to;
+  let ux = farPt[0] - endPt[0], uy = farPt[1] - endPt[1];
+  const hLen = Math.hypot(ux, uy);
+  if (!(hLen > 1e-6)) return [];
+  ux /= hLen;
+  uy /= hLen;
+  const uDir = [ux, uy, 0];
+  const vDir = [0, 0, 1];
+  const nDir = [uy, -ux, 0];
+  const posOff = typeof beam.posOffset === "number" && isFinite(beam.posOffset) ? beam.posOffset : 0;
+  const webZ = endPt[2] + posOff;
+  const P = (u, v, n) => [
+    endPt[0] + uDir[0] * u + nDir[0] * n,
+    endPt[1] + uDir[1] * u + nDir[1] * n,
+    webZ + v
+  ];
+  const thickness = pos(p, "plateThickness", 10);
+  const width = pos(p, "plateWidth", 120);
+  const boltDia = pos(p, "boltDia", 20);
+  const cols = intMin1(p, "boltCols", 1);
+  const rows = intMin1(p, "boltRows", 3);
+  const pitch = pos(p, "boltPitch", 70);
+  const holeClr = num(p, "holeClearance", 2);
+  const edge = Math.max(0, num(p, "edgeDist", Math.max(1.5 * boltDia, 30)));
+  const weldLeg = num(p, "weldLeg", 6);
+  const clearance = Math.max(0, num(p, "clearance", 12.7));
+  const stiffener = p?.["stiffener"] === true;
+  const height = pos(p, "plateHeight", (rows - 1) * pitch + 2 * edge);
+  const twHalf = webHalfThk(beam.profile, beam.dims.w);
+  const webSide = num(p, "webSide", 1) >= 0 ? 1 : -1;
+  const pOff = webSide * (twHalf + thickness / 2);
+  const edgeV = Math.min(edge, height * 0.4);
+  const pV = rows > 1 ? Math.min(pitch, Math.max(0, height - 2 * edgeV) / (rows - 1)) : 0;
+  const vOffs = Array.from({ length: rows }, (_, i) => (i - (rows - 1) / 2) * pV);
+  const edgeU = Math.min(edge, width * 0.4);
+  const regHi = Math.max(edgeU, width - edgeU);
+  const regLo = Math.min(clearance + edgeU, regHi);
+  const cU = (regLo + regHi) / 2;
+  const pU = cols > 1 ? Math.min(pitch, (regHi - regLo) / (cols - 1)) : 0;
+  const uOffs = Array.from({ length: cols }, (_, j) => cU + (j - (cols - 1) / 2) * pU);
+  const nutH = 0.8 * boltDia, nutAF = 1.6 * boltDia;
+  const plateOuterN = webSide * (twHalf + thickness);
+  const webFarN = -webSide * twHalf;
+  const headTipN = plateOuterN + webSide * nutH;
+  const nutTipN = webFarN - webSide * nutH;
+  const grade = p?.["boltGrade"] === "A490" ? "A490" : "A325";
+  const grip = thickness + 2 * twHalf;
+  const boltLen = aiscBoltLength(grip, boltDia);
+  const callout = `\u2300${Math.round(boltDia)} ${grade} \xD7 ${Math.round(boltLen)}`;
+  const holes = [];
+  const bolts = [];
+  let k = 0;
+  for (const v of vOffs) {
+    for (const u of uOffs) {
+      const jid = joint.id;
+      holes.push({ u: u - width / 2, v, d: boltDia + holeClr });
+      bolts.push(
+        // the shank = the AISC bolt LENGTH, from under the head (plate outer face) into the connection
+        { id: `${jid}:bolt${k}`, group: "bolt", kind: "rod", from: P(u, v, plateOuterN), to: P(u, v, plateOuterN - webSide * boltLen), d: boltDia, meta: { label: `Bolt ${callout}` } },
+        { id: `${jid}:head${k}`, group: "nut", kind: "nut", from: P(u, v, plateOuterN), to: P(u, v, headTipN), acrossFlats: nutAF, meta: { label: `Bolt head ${callout}` } },
+        { id: `${jid}:nut${k}`, group: "nut", kind: "nut", from: P(u, v, webFarN), to: P(u, v, nutTipN), acrossFlats: nutAF, meta: { label: `Bolt nut ${callout}` } }
+      );
+      k++;
+    }
+  }
+  const plate = {
+    id: `${joint.id}:plate`,
+    group: "shear-plate",
+    kind: "plate",
+    center: P(width / 2, 0, pOff),
+    uDir,
+    vDir,
+    // welded edge at u=0 (the support); lapped on the webSide face; cantilevered +uDir toward the beam
+    width,
+    depth: height,
+    thickness,
+    holes,
+    meta: { label: `Shear plate ${Math.round(width)}\xD7${Math.round(height)}\xD7${Math.round(thickness)}` }
+  };
+  const weld = {
+    id: `${joint.id}:weld`,
+    group: "weld",
+    kind: "weld",
+    closed: false,
+    path: [P(0, -height / 2, pOff), P(0, height / 2, pOff)],
+    leg: weldLeg,
+    meta: { label: `Fillet ${weldLeg}` }
+  };
+  const parts = [plate, ...bolts, weld];
+  if (stiffener) {
+    if (support && support.role === "beam" && finite3(support.from) && finite3(support.to) && support.dims && support.dims.d > 0 && support.dims.w > 0) {
+      const supPosOff = typeof support.posOffset === "number" && isFinite(support.posOffset) ? support.posOffset : 0;
+      const twGirder = webHalfThk(support.profile, support.dims.w) * 2;
+      const stiffH = support.dims.d * 0.9;
+      const stiffW = Math.max(support.dims.w / 2 - twGirder / 2, thickness * 2);
+      const girderCentZ = endPt[2] + supPosOff;
+      const cu = -(twGirder / 2 + stiffW / 2);
+      const center = [endPt[0] + uDir[0] * cu, endPt[1] + uDir[1] * cu, girderCentZ];
+      parts.push({ id: `${joint.id}:stiff`, group: "stiffener", kind: "plate", center, uDir, vDir, width: stiffW, depth: stiffH, thickness, holes: [], meta: { label: `Stiffener ${Math.round(stiffW)}\xD7${Math.round(stiffH)}\xD7${Math.round(thickness)}` } });
+      const wfx = endPt[0] - uDir[0] * (twGirder / 2), wfy = endPt[1] - uDir[1] * (twGirder / 2);
+      parts.push({ id: `${joint.id}:stiffweld`, group: "weld", kind: "weld", closed: false, path: [[wfx, wfy, girderCentZ - stiffH / 2], [wfx, wfy, girderCentZ + stiffH / 2]], leg: weldLeg, meta: { label: `Fillet ${weldLeg}` } });
+    } else {
+      const oppOff = -webSide * (twHalf + thickness / 2);
+      parts.push({ id: `${joint.id}:stiff`, group: "stiffener", kind: "plate", center: P(width / 2, 0, oppOff), uDir, vDir, width, depth: height, thickness, holes: [], meta: { label: `Stiffener ${Math.round(width)}\xD7${Math.round(height)}\xD7${Math.round(thickness)}` } });
+      parts.push({ id: `${joint.id}:stiffweld`, group: "weld", kind: "weld", closed: false, path: [P(0, -height / 2, oppOff), P(0, height / 2, oppOff)], leg: weldLeg, meta: { label: `Fillet ${weldLeg}` } });
+    }
+  }
+  const cope = beamCopes(beam, support, joint.at ?? "end0", p);
+  const copeRadius = pos(p, "copeRadius", 12.7);
+  const MIN_COPE = 1;
+  const pushCope = (side, dec) => {
+    if (!(dec.depth > MIN_COPE)) return;
+    const lenU = dec.length + clearance;
+    const vC = side === "top" ? beam.dims.d / 2 - dec.depth / 2 : -beam.dims.d / 2 + dec.depth / 2;
+    parts.push({
+      id: `${joint.id}:cope-${side}`,
+      group: "cope",
+      kind: "cut",
+      member: beam.id,
+      center: P(lenU / 2, vC, 0),
+      uDir,
+      vDir,
+      width: lenU,
+      depth: dec.depth,
+      thickness: beam.dims.w + 2,
+      radius: copeRadius,
+      meta: { label: `${side === "top" ? "Top" : "Bottom"} cope ${Math.round(dec.length)}\xD7${Math.round(dec.depth)}` }
+    });
+  };
+  if (cope.top) pushCope("top", cope.top);
+  if (cope.bottom) pushCope("bottom", cope.bottom);
+  return parts;
+}
+function expandJoints(joints, memberGeo) {
+  const elements = [];
+  const skipped = [];
+  const usedGroups = /* @__PURE__ */ new Set();
+  (joints ?? []).forEach((j, i) => {
+    if (!j || !j.id || !j.main) {
+      skipped.push(j?.id || `joint#${i}`);
+      return;
+    }
+    if (j.kind === "base-plate") {
+      const col = memberGeo.get(j.main);
+      if (!col || col.role !== "column") {
+        skipped.push(j.id);
+        return;
+      }
+      if (!finite3(col.from) || !finite3(col.to) || !col.dims || !(col.dims.w > 0) || !(col.dims.d > 0)) {
+        skipped.push(j.id);
+        return;
+      }
+      for (const part of expandBasePlate(j, col)) {
+        elements.push(part);
+        usedGroups.add(part.group);
+      }
+    } else if (j.kind === "shear-plate") {
+      const beam = memberGeo.get(j.main);
+      if (!beam || beam.role !== "beam") {
+        skipped.push(j.id);
+        return;
+      }
+      if (!finite3(beam.from) || !finite3(beam.to) || !beam.dims || !(beam.dims.w > 0) || !(beam.dims.d > 0)) {
+        skipped.push(j.id);
+        return;
+      }
+      const support = j.secondaries && j.secondaries[0] ? memberGeo.get(j.secondaries[0]) : void 0;
+      const parts = expandShearPlate(j, beam, support);
+      if (!parts.length) {
+        skipped.push(j.id);
+        return;
+      }
+      for (const part of parts) {
+        elements.push(part);
+        if (part.kind !== "cut") usedGroups.add(part.group);
+      }
+    } else {
+      skipped.push(j.id);
+    }
+  });
+  const groups = [...usedGroups].map((k) => GROUPS[k]);
+  return { elements, groups, skipped };
 }
 
 // contract-to-scene.ts
@@ -53850,9 +54333,20 @@ function dispToMm(pt, ptPerFt) {
 function contractToScene(contractInput) {
   const contract = contractInput ?? {};
   const elements = [];
+  const memberGeo = /* @__PURE__ */ new Map();
   const skipped = [];
   const profileOrder = [];
   const seenProfile = /* @__PURE__ */ new Set();
+  const beamClear = /* @__PURE__ */ new Map();
+  for (const j of contract.joints ?? []) {
+    if (!j || j.kind !== "shear-plate" || !j.main || j.at !== "end0" && j.at !== "end1") continue;
+    const pc = j.params?.["clearance"];
+    const cl = typeof pc === "number" && isFinite(pc) ? Math.max(0, pc) : 12.7;
+    const cur = beamClear.get(j.main) ?? { e0: 0, e1: 0 };
+    if (j.at === "end0") cur.e0 = Math.max(cur.e0, cl);
+    else cur.e1 = Math.max(cur.e1, cl);
+    beamClear.set(j.main, cur);
+  }
   for (const plan of contract.plans ?? []) {
     const ptPerFt = plan.pt_per_ft && plan.pt_per_ft > 0 ? plan.pt_per_ft : 1;
     const defaultTosMm = (plan.default_tos ?? 0) * IN_TO_MM;
@@ -53871,19 +54365,37 @@ function contractToScene(contractInput) {
       const [bx, by] = dispToMm(m.wp[1], ptPerFt);
       let from;
       let to;
+      let workFrom;
+      let workTo;
+      let posOffset = 0;
       if (m.role === "column") {
         const bos = m.col?.bos != null ? m.col.bos * IN_TO_MM : 0;
         const tos = m.col?.tos != null ? m.col.tos * IN_TO_MM : defaultTosMm;
         from = [ax, ay, bos];
         to = [ax, ay, tos];
+        workFrom = from;
+        workTo = to;
       } else {
         const z0 = m.ends?.[0]?.tos != null ? m.ends[0].tos * IN_TO_MM : defaultTosMm;
         const z1 = m.ends?.[1]?.tos != null ? m.ends[1].tos * IN_TO_MM : defaultTosMm;
-        const pos = depthPosition(m.position, Math.abs(z1 - z0), Math.hypot(bx - ax, by - ay));
-        const zoff = pos === "top" ? -dims.d / 2 : pos === "bottom" ? dims.d / 2 : 0;
+        workFrom = [ax, ay, z0];
+        workTo = [bx, by, z1];
+        const pos2 = depthPosition(m.position, Math.abs(z1 - z0), Math.hypot(bx - ax, by - ay));
+        const zoff = pos2 === "top" ? -dims.d / 2 : pos2 === "bottom" ? dims.d / 2 : 0;
+        posOffset = zoff;
         from = [ax, ay, z0 + zoff];
         to = [bx, by, z1 + zoff];
       }
+      memberGeo.set(m.id, { id: m.id, role: m.role === "column" ? "column" : "beam", from: workFrom, to: workTo, dims: { w: dims.w, d: dims.d }, profile, posOffset });
+      const clr = beamClear.get(m.id);
+      if (clr && m.role !== "column") {
+        const dx = to[0] - from[0], dy = to[1] - from[1], dz = to[2] - from[2];
+        const L = Math.hypot(dx, dy, dz) || 1;
+        const ex = dx / L, ey = dy / L, ez = dz / L;
+        const e0 = Math.min(Math.max(0, clr.e0), L * 0.4), e1 = Math.min(Math.max(0, clr.e1), L * 0.4);
+        if (e0 > 0) from = [from[0] + ex * e0, from[1] + ey * e0, from[2] + ez * e0];
+        if (e1 > 0) to = [to[0] - ex * e1, to[1] - ey * e1, to[2] - ez * e1];
+      }
       elements.push({ id: m.id, group: profile, kind: "box", from, to, section: { w: dims.w, d: dims.d }, meta: { profile } });
     }
   }
@@ -53892,6 +54404,10 @@ function contractToScene(contractInput) {
     label: profile,
     color: pickColor(profile, i, contract)
   }));
+  const joints = expandJoints(contract.joints, memberGeo);
+  for (const part of joints.elements) elements.push(part);
+  for (const g of joints.groups) groups.push(g);
+  for (const id of joints.skipped) skipped.push(`joint:${id}`);
   return {
     scene: { meta: { name: contract.title || "Steel Model", units: "mm", up: "z" }, groups, elements },
     skipped
@@ -53959,11 +54475,11 @@ function contractToBom(contractInput) {
 }
 
 // bom-export.ts
-var import_node_os12 = require("node:os");
-var import_node_path15 = require("node:path");
+var import_node_os13 = require("node:os");
+var import_node_path16 = require("node:path");
 
 // node_modules/write-excel-file/modules/export/writeXlsxFileNode.js
-var import_node_fs18 = __toESM(require("node:fs"), 1);
+var import_node_fs19 = __toESM(require("node:fs"), 1);
 
 // node_modules/write-excel-file/modules/xlsx/helpers/features/getAdditionalContent.js
 function _createForOfIteratorHelperLoose(r, e) {
@@ -57292,9 +57808,9 @@ var clen = function(cf, cl) {
     l += cf[i] * cl[i];
   return l;
 };
-var wfblk = function(out, pos, dat) {
+var wfblk = function(out, pos2, dat) {
   var s = dat.length;
-  var o = shft(pos + 2);
+  var o = shft(pos2 + 2);
   out[o] = s & 255;
   out[o + 1] = s >> 8;
   out[o + 2] = out[o] ^ 255;
@@ -57374,9 +57890,9 @@ var dflt = function(dat, lvl, plvl, pre, post, st) {
   var o = new u8(pre + s + 5 * (1 + Math.ceil(s / 7e3)) + post);
   var w = o.subarray(pre, o.length - post);
   var lst = st.l;
-  var pos = (st.r || 0) & 7;
+  var pos2 = (st.r || 0) & 7;
   if (lvl) {
-    if (pos)
+    if (pos2)
       w[0] = st.r >> 3;
     var opt = deo[lvl - 1];
     var n = opt >> 13, c = opt & 8191;
@@ -57397,7 +57913,7 @@ var dflt = function(dat, lvl, plvl, pre, post, st) {
       if (wi <= i) {
         var rem = s - i;
         if ((lc_1 > 7e3 || li > 24576) && (rem > 423 || !lst)) {
-          pos = wblk(dat, w, 0, syms, lf, df, eb, li, bs, i - bs, pos);
+          pos2 = wblk(dat, w, 0, syms, lf, df, eb, li, bs, i - bs, pos2);
           li = lc_1 = eb = 0, bs = i;
           for (var j = 0; j < 286; ++j)
             lf[j] = 0;
@@ -57451,24 +57967,24 @@ var dflt = function(dat, lvl, plvl, pre, post, st) {
       syms[li++] = dat[i];
       ++lf[dat[i]];
     }
-    pos = wblk(dat, w, lst, syms, lf, df, eb, li, bs, i - bs, pos);
+    pos2 = wblk(dat, w, lst, syms, lf, df, eb, li, bs, i - bs, pos2);
     if (!lst) {
-      st.r = pos & 7 | w[pos / 8 | 0] << 3;
-      pos -= 7;
+      st.r = pos2 & 7 | w[pos2 / 8 | 0] << 3;
+      pos2 -= 7;
       st.h = head, st.p = prev, st.i = i, st.w = wi;
     }
   } else {
     for (var i = st.w || 0; i < s + lst; i += 65535) {
       var e = i + 65535;
       if (e >= s) {
-        w[pos / 8 | 0] = lst;
+        w[pos2 / 8 | 0] = lst;
         e = s;
       }
-      pos = wfblk(w, pos + 1, dat.subarray(i, e));
+      pos2 = wfblk(w, pos2 + 1, dat.subarray(i, e));
     }
     st.i = s;
   }
-  return slc(o, 0, pre + shft(pos) + post);
+  return slc(o, 0, pre + shft(pos2) + post);
 };
 var crct = /* @__PURE__ */ (function() {
   var t = new Int32Array(256);
@@ -58135,7 +58651,7 @@ function writeXlsxFile(arg1, arg2, arg3) {
     },
     toFile: function toFile(filePath) {
       return createReadableStream().then(function(readableStream) {
-        return pipe(readableStream, import_node_fs18.default.createWriteStream(filePath));
+        return pipe(readableStream, import_node_fs19.default.createWriteStream(filePath));
       });
     }
   };
@@ -58160,8 +58676,8 @@ function pipe(readableStream, writableStream) {
 
 // bom-export.ts
 function bomExportPath(appId, format) {
-  const root = process.env.FLOLESS_HOME ?? (0, import_node_path15.join)((0, import_node_os12.homedir)(), ".floless");
-  return (0, import_node_path15.join)(root, "exports", appId, `${appId}-bom.${format}`);
+  const root = process.env.FLOLESS_HOME ?? (0, import_node_path16.join)((0, import_node_os13.homedir)(), ".floless");
+  return (0, import_node_path16.join)(root, "exports", appId, `${appId}-bom.${format}`);
 }
 function csvField(v) {
   let s = String(v);
@@ -58189,11 +58705,11 @@ async function bomToXlsx(bom) {
 }
 
 // scene-bake.ts
-var import_node_fs19 = require("node:fs");
-var import_node_path16 = require("node:path");
+var import_node_fs20 = require("node:fs");
+var import_node_path17 = require("node:path");
 var import_yaml6 = __toESM(require_dist6(), 1);
 function bakeSceneIntoApp(sourcePath, scene, agent = "viewer-3d") {
-  const doc = (0, import_yaml6.parseDocument)((0, import_node_fs19.readFileSync)(sourcePath, "utf8"));
+  const doc = (0, import_yaml6.parseDocument)((0, import_node_fs20.readFileSync)(sourcePath, "utf8"));
   if (doc.errors.length > 0) {
     throw new Error(`scene bake: source is not valid YAML: ${doc.errors[0]?.message ?? "parse error"}`);
   }
@@ -58202,10 +58718,10 @@ function bakeSceneIntoApp(sourcePath, scene, agent = "viewer-3d") {
   const idx = items.findIndex((it) => ((0, import_yaml6.isMap)(it) ? it.toJSON() : null)?.agent === agent);
   if (idx < 0) throw new Error(`no ${agent} render node to bake the scene into`);
   doc.setIn(["nodes", idx, "config", "scene"], scene);
-  (0, import_node_fs19.writeFileSync)(sourcePath, doc.toString());
+  (0, import_node_fs20.writeFileSync)(sourcePath, doc.toString());
 }
-function bakeNodeConfigById(sourcePath, nodeId, patch) {
-  const doc = (0, import_yaml6.parseDocument)((0, import_node_fs19.readFileSync)(sourcePath, "utf8"));
+function bakeNodeConfigById(sourcePath, nodeId, patch2) {
+  const doc = (0, import_yaml6.parseDocument)((0, import_node_fs20.readFileSync)(sourcePath, "utf8"));
   if (doc.errors.length > 0) {
     throw new Error(`node bake: source is not valid YAML: ${doc.errors[0]?.message ?? "parse error"}`);
   }
@@ -58213,13 +58729,13 @@ function bakeNodeConfigById(sourcePath, nodeId, patch) {
   const items = (0, import_yaml6.isSeq)(seq) ? seq.items : [];
   const idx = items.findIndex((it) => ((0, import_yaml6.isMap)(it) ? it.toJSON() : null)?.id === nodeId);
   if (idx < 0) throw new Error(`no node with id "${nodeId}"`);
-  for (const [key, value] of Object.entries(patch)) doc.setIn(["nodes", idx, "config", key], value);
-  (0, import_node_fs19.writeFileSync)(sourcePath, doc.toString());
+  for (const [key, value] of Object.entries(patch2)) doc.setIn(["nodes", idx, "config", key], value);
+  (0, import_node_fs20.writeFileSync)(sourcePath, doc.toString());
 }
 function writeViewer3dApp(dir, appId, scene) {
-  (0, import_node_fs19.mkdirSync)(dir, { recursive: true });
-  const flo = (0, import_node_path16.join)(dir, `${appId}.flo`);
-  (0, import_node_fs19.writeFileSync)(flo, [
+  (0, import_node_fs20.mkdirSync)(dir, { recursive: true });
+  const flo = (0, import_node_path17.join)(dir, `${appId}.flo`);
+  (0, import_node_fs20.writeFileSync)(flo, [
     `app: ${appId}`,
     "version: 0.1.0",
     "display-name: Steel 3D",
@@ -58240,9 +58756,9 @@ function writeViewer3dApp(dir, appId, scene) {
   return flo;
 }
 function writeIfcApp(dir, appId, scene, outputPath) {
-  (0, import_node_fs19.mkdirSync)(dir, { recursive: true });
-  const flo = (0, import_node_path16.join)(dir, `${appId}.flo`);
-  (0, import_node_fs19.writeFileSync)(flo, [
+  (0, import_node_fs20.mkdirSync)(dir, { recursive: true });
+  const flo = (0, import_node_path17.join)(dir, `${appId}.flo`);
+  (0, import_node_fs20.writeFileSync)(flo, [
     `app: ${appId}`,
     "version: 0.1.0",
     "display-name: Steel IFC",
@@ -58265,9 +58781,9 @@ function writeIfcApp(dir, appId, scene, outputPath) {
   return flo;
 }
 function writeTeklaApp(dir, appId, scene, teklaVersion = "2026.0") {
-  (0, import_node_fs19.mkdirSync)(dir, { recursive: true });
-  const flo = (0, import_node_path16.join)(dir, `${appId}.flo`);
-  (0, import_node_fs19.writeFileSync)(flo, [
+  (0, import_node_fs20.mkdirSync)(dir, { recursive: true });
+  const flo = (0, import_node_path17.join)(dir, `${appId}.flo`);
+  (0, import_node_fs20.writeFileSync)(flo, [
     `app: ${appId}`,
     "version: 0.1.0",
     "display-name: Steel to Tekla",
@@ -58306,11 +58822,11 @@ async function bakeBomExportNodes(sourcePath, appId, contract) {
     xlsx: bom ? (await bomToXlsx(bom)).toString("base64") : null
   };
   for (const { id, format } of EXPORT_NODES) {
-    const patch = { path: bomExportPath(appId, format) };
+    const patch2 = { path: bomExportPath(appId, format) };
     const bytes = bytesFor[format];
-    if (bytes != null) patch.bytes = bytes;
+    if (bytes != null) patch2.bytes = bytes;
     try {
-      bakeNodeConfigById(sourcePath, id, patch);
+      bakeNodeConfigById(sourcePath, id, patch2);
       baked.push(id);
     } catch (e) {
       if (!(e instanceof Error && /no node with id/.test(e.message))) throw e;
@@ -58485,16 +59001,16 @@ function memberTons(contract, m) {
 }
 function rollup(members, countWeighted = false) {
   const counts = emptyCounts();
-  let num = 0, den = 0, tons = 0;
+  let num2 = 0, den = 0, tons = 0;
   for (const m of members) {
     counts[m.band]++;
     if (m.band === "rfi") continue;
     const w = countWeighted ? 1 : m.tons;
-    num += w * BAND_WEIGHT[m.band];
+    num2 += w * BAND_WEIGHT[m.band];
     den += w;
     tons += m.tons;
   }
-  return { score: den > 0 ? Math.round(num / den * 100) : null, tons, counts };
+  return { score: den > 0 ? Math.round(num2 / den * 100) : null, tons, counts };
 }
 function bandEnd(end, rows) {
   const row = end.conn ? rows.get(end.conn) : void 0;
@@ -58530,14 +59046,14 @@ function scoreConnections(contractInput) {
     }
   });
   const counts = emptyCounts();
-  let num = 0, den = 0;
+  let num2 = 0, den = 0;
   for (const e of byEnd) {
     counts[e.band]++;
     if (e.band === "rfi") continue;
-    num += BAND_WEIGHT[e.band];
+    num2 += BAND_WEIGHT[e.band];
     den += 1;
   }
-  const category = { score: den > 0 ? Math.round(num / den * 100) : null, tons: 0, counts };
+  const category = { score: den > 0 ? Math.round(num2 / den * 100) : null, tons: 0, counts };
   return { byEnd, category };
 }
 function scoreContract(contractInput) {
@@ -58584,7 +59100,7 @@ function scoreContract(contractInput) {
   const columns = rollup(byMember.filter((m) => m.role === "column"));
   const details = rollupDetails(byDetail);
   const scored = byMember.filter((m) => m.band !== "rfi");
-  const num = scored.reduce((s, m) => s + m.tons * BAND_WEIGHT[m.band], 0);
+  const num2 = scored.reduce((s, m) => s + m.tons * BAND_WEIGHT[m.band], 0);
   const den = scored.reduce((s, m) => s + m.tons, 0);
   return {
     byMember,
@@ -58602,7 +59118,7 @@ function scoreContract(contractInput) {
       note: "Approximate in v1 \u2014 precise per-segment binding is Slice 2."
     },
     overall: {
-      score: den > 0 ? Math.round(num / den * 100) : null,
+      score: den > 0 ? Math.round(num2 / den * 100) : null,
       tons: den,
       rfiCount: byMember.filter((m) => m.band === "rfi").length
     }
@@ -58614,13 +59130,13 @@ function detailSheet(text) {
 }
 function rollupDetails(details) {
   const counts = emptyCounts();
-  let num = 0, den = 0;
+  let num2 = 0, den = 0;
   for (const d of details) {
     counts[d.band]++;
-    num += BAND_WEIGHT[d.band];
+    num2 += BAND_WEIGHT[d.band];
     den += 1;
   }
-  return { score: den > 0 ? Math.round(num / den * 100) : null, tons: 0, counts };
+  return { score: den > 0 ? Math.round(num2 / den * 100) : null, tons: 0, counts };
 }
 
 // contract-score.ts
@@ -58666,13 +59182,13 @@ function scoreContract2(contractInput) {
 }
 
 // app-lifecycle.ts
-var import_node_fs22 = require("node:fs");
-var import_node_os14 = require("node:os");
-var import_node_path19 = require("node:path");
+var import_node_fs23 = require("node:fs");
+var import_node_os15 = require("node:os");
+var import_node_path20 = require("node:path");
 
 // routines.ts
-var import_node_fs21 = require("node:fs");
-var import_node_path18 = require("node:path");
+var import_node_fs22 = require("node:fs");
+var import_node_path19 = require("node:path");
 
 // sse.ts
 var clients = /* @__PURE__ */ new Set();
@@ -58709,11 +59225,11 @@ function clientCount() {
 }
 
 // trigger-sessions.ts
-var import_node_fs20 = require("node:fs");
-var import_node_os13 = require("node:os");
-var import_node_path17 = require("node:path");
+var import_node_fs21 = require("node:fs");
+var import_node_os14 = require("node:os");
+var import_node_path18 = require("node:path");
 var import_yaml7 = __toESM(require_dist6(), 1);
-var AGENTS_DIR2 = process.env.AWARE_HOME ? (0, import_node_path17.join)(process.env.AWARE_HOME, "agents") : (0, import_node_path17.join)((0, import_node_os13.homedir)(), ".aware", "agents");
+var AGENTS_DIR2 = process.env.AWARE_HOME ? (0, import_node_path18.join)(process.env.AWARE_HOME, "agents") : (0, import_node_path18.join)((0, import_node_os14.homedir)(), ".aware", "agents");
 function summarizeFire(data) {
   if (!data) return "event";
   const type = typeof data.type === "string" ? data.type : "";
@@ -58730,10 +59246,10 @@ function mapTriggerState(phase) {
 function isHostBacked(agent, agentsDir = AGENTS_DIR2) {
   const safe = (n) => !n.includes("/") && !n.includes("\\") && !n.includes("..");
   if (!safe(agent)) return false;
-  const manifestPath = (0, import_node_path17.join)(agentsDir, agent, "manifest.yaml");
-  if (!(0, import_node_fs20.existsSync)(manifestPath)) return false;
+  const manifestPath = (0, import_node_path18.join)(agentsDir, agent, "manifest.yaml");
+  if (!(0, import_node_fs21.existsSync)(manifestPath)) return false;
   try {
-    const doc = (0, import_yaml7.parse)((0, import_node_fs20.readFileSync)(manifestPath, "utf8"));
+    const doc = (0, import_yaml7.parse)((0, import_node_fs21.readFileSync)(manifestPath, "utf8"));
     const transport = doc?.transport;
     return !!(transport && typeof transport === "object" && "cli" in transport);
   } catch {
@@ -59018,7 +59534,7 @@ var RoutineError = class extends Error {
   }
   status;
 };
-var ROUTINES_FILE = (0, import_node_path18.join)(flolessRoot, "routines.json");
+var ROUTINES_FILE = (0, import_node_path19.join)(flolessRoot, "routines.json");
 var routines = [];
 var loaded = false;
 function ensureLoaded() {
@@ -59054,10 +59570,10 @@ function sanitizeRoutine(raw) {
   };
 }
 function loadFromDisk() {
-  if (!(0, import_node_fs21.existsSync)(ROUTINES_FILE)) return [];
+  if (!(0, import_node_fs22.existsSync)(ROUTINES_FILE)) return [];
   let text;
   try {
-    text = (0, import_node_fs21.readFileSync)(ROUTINES_FILE, "utf8");
+    text = (0, import_node_fs22.readFileSync)(ROUTINES_FILE, "utf8");
   } catch {
     return [];
   }
@@ -59066,17 +59582,17 @@ function loadFromDisk() {
     return Array.isArray(parsed) ? parsed.map(sanitizeRoutine).filter((r) => r !== null) : [];
   } catch {
     try {
-      (0, import_node_fs21.renameSync)(ROUTINES_FILE, `${ROUTINES_FILE}.corrupt-${Date.now()}`);
+      (0, import_node_fs22.renameSync)(ROUTINES_FILE, `${ROUTINES_FILE}.corrupt-${Date.now()}`);
     } catch {
     }
     return [];
   }
 }
 function saveRoutines() {
-  if (!(0, import_node_fs21.existsSync)(flolessRoot)) (0, import_node_fs21.mkdirSync)(flolessRoot, { recursive: true });
+  if (!(0, import_node_fs22.existsSync)(flolessRoot)) (0, import_node_fs22.mkdirSync)(flolessRoot, { recursive: true });
   const tmp = `${ROUTINES_FILE}.${process.pid}.tmp`;
-  (0, import_node_fs21.writeFileSync)(tmp, JSON.stringify(routines, null, 2));
-  (0, import_node_fs21.renameSync)(tmp, ROUTINES_FILE);
+  (0, import_node_fs22.writeFileSync)(tmp, JSON.stringify(routines, null, 2));
+  (0, import_node_fs22.renameSync)(tmp, ROUTINES_FILE);
 }
 function listRoutines() {
   ensureLoaded();
@@ -59233,30 +59749,30 @@ function createRoutine(input) {
   broadcast({ type: "routine-changed", id: r.id });
   return r;
 }
-function updateRoutine(id, patch) {
+function updateRoutine(id, patch2) {
   ensureLoaded();
   const r = getRoutine(id);
   if (!r) return null;
-  if (patch.name !== void 0) {
-    const name = String(patch.name).trim();
+  if (patch2.name !== void 0) {
+    const name = String(patch2.name).trim();
     if (!name) throw new RoutineError("name cannot be empty");
     r.name = name;
   }
-  if (patch.schedule !== void 0) {
+  if (patch2.schedule !== void 0) {
     if (r.kind !== "schedule") throw new RoutineError("cannot set a schedule on a trigger routine");
-    const err2 = validateSchedule(patch.schedule);
+    const err2 = validateSchedule(patch2.schedule);
     if (err2) throw new RoutineError(err2);
-    r.schedule = patch.schedule;
+    r.schedule = patch2.schedule;
   }
-  if (patch.inputs !== void 0) {
+  if (patch2.inputs !== void 0) {
     const app = requireApp(r.workflow);
-    r.inputs = coerceInputs(app, patch.inputs);
+    r.inputs = coerceInputs(app, patch2.inputs);
   }
-  if (patch.enabled !== void 0) r.enabled = !!patch.enabled;
+  if (patch2.enabled !== void 0) r.enabled = !!patch2.enabled;
   r.updated = (/* @__PURE__ */ new Date()).toISOString();
   r.nextFireAt = computeNextFire(r);
   saveRoutines();
-  if (r.kind === "trigger" && (patch.enabled !== void 0 || patch.inputs !== void 0)) {
+  if (r.kind === "trigger" && (patch2.enabled !== void 0 || patch2.inputs !== void 0)) {
     syncTriggerSession(r);
   }
   broadcast({ type: "routine-changed", id: r.id });
@@ -59484,13 +60000,13 @@ var AppLifecycleError = class extends Error {
   }
 };
 function appsDir() {
-  return process.env.AWARE_HOME ? (0, import_node_path19.join)(process.env.AWARE_HOME, "apps") : (0, import_node_path19.join)((0, import_node_os14.homedir)(), ".aware", "apps");
+  return process.env.AWARE_HOME ? (0, import_node_path20.join)(process.env.AWARE_HOME, "apps") : (0, import_node_path20.join)((0, import_node_os15.homedir)(), ".aware", "apps");
 }
 function appDirPath(id) {
-  return (0, import_node_path19.join)(appsDir(), id);
+  return (0, import_node_path20.join)(appsDir(), id);
 }
 function appInstalled(id) {
-  return APP_ID3.test(id) && (0, import_node_fs22.existsSync)(appDirPath(id));
+  return APP_ID3.test(id) && (0, import_node_fs23.existsSync)(appDirPath(id));
 }
 function logCascade(what, e) {
   console.error(`[app-lifecycle] cascade step failed (${what}):`, e instanceof Error ? e.message : e);
@@ -59528,6 +60044,11 @@ async function renameApp(oldId, newId, deps = defaultDeps2) {
   } catch (e) {
     logCascade("re-point routines", e);
   }
+  try {
+    renameOrigin(oldId, newId);
+  } catch (e) {
+    logCascade("carry lineage", e);
+  }
   return { id: newId, compiled };
 }
 async function duplicateApp(srcId, newId, deps = defaultDeps2) {
@@ -59540,6 +60061,11 @@ async function duplicateApp(srcId, newId, deps = defaultDeps2) {
   } catch (e) {
     logCascade("copy visual inputs", e);
   }
+  try {
+    copyOrigin(srcId, newId);
+  } catch (e) {
+    logCascade("copy lineage", e);
+  }
   return { id: newId, compiled };
 }
 async function deleteApp(id, deps = defaultDeps2) {
@@ -59555,6 +60081,11 @@ async function deleteApp(id, deps = defaultDeps2) {
   } catch (e) {
     logCascade("remove routines", e);
   }
+  try {
+    deleteOrigin(id);
+  } catch (e) {
+    logCascade("drop lineage", e);
+  }
 }
 
 // route-gate.ts
@@ -59591,9 +60122,9 @@ function isGatedAwareRoute(url, method) {
 
 // autostart.mjs
 var import_node_child_process4 = require("node:child_process");
-var import_node_fs23 = require("node:fs");
-var import_node_os15 = require("node:os");
-var import_node_path20 = require("node:path");
+var import_node_fs24 = require("node:fs");
+var import_node_os16 = require("node:os");
+var import_node_path21 = require("node:path");
 
 // teardown.mjs
 var RUN_KEY = "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";
@@ -59705,8 +60236,8 @@ function removeLegacyRunKey() {
 }
 function logLine(msg) {
   try {
-    (0, import_node_fs23.mkdirSync)(logDir(), { recursive: true });
-    (0, import_node_fs23.appendFileSync)(logFilePath(), `${(/* @__PURE__ */ new Date()).toISOString()} ${msg}
+    (0, import_node_fs24.mkdirSync)(logDir(), { recursive: true });
+    (0, import_node_fs24.appendFileSync)(logFilePath(), `${(/* @__PURE__ */ new Date()).toISOString()} ${msg}
 `);
   } catch {
   }
@@ -59714,8 +60245,8 @@ function logLine(msg) {
 function registerAutostart(exePath) {
   if (!isWin) return;
   const xml = buildAutostartTaskXml(exePath, currentUserId());
-  const tmp = (0, import_node_path20.join)((0, import_node_os15.tmpdir)(), `floless-autostart-${process.pid}-${Date.now()}.xml`);
-  (0, import_node_fs23.writeFileSync)(tmp, "\uFEFF" + xml, { encoding: "utf16le" });
+  const tmp = (0, import_node_path21.join)((0, import_node_os16.tmpdir)(), `floless-autostart-${process.pid}-${Date.now()}.xml`);
+  (0, import_node_fs24.writeFileSync)(tmp, "\uFEFF" + xml, { encoding: "utf16le" });
   try {
     (0, import_node_child_process4.execFileSync)("schtasks", ["/Create", "/TN", TASK_NAME, "/XML", tmp, "/F"], {
       stdio: ["ignore", "ignore", "ignore"],
@@ -59726,7 +60257,7 @@ function registerAutostart(exePath) {
     throw err2;
   } finally {
     try {
-      (0, import_node_fs23.rmSync)(tmp, { force: true });
+      (0, import_node_fs24.rmSync)(tmp, { force: true });
     } catch {
     }
   }
@@ -59761,26 +60292,26 @@ function unregisterAutostart() {
 // updater.ts
 var import_node_child_process5 = require("node:child_process");
 var import_node_crypto6 = require("node:crypto");
-var import_node_fs25 = require("node:fs");
+var import_node_fs26 = require("node:fs");
 var import_node_stream3 = require("node:stream");
 var import_promises = require("node:stream/promises");
-var import_node_path22 = require("node:path");
+var import_node_path23 = require("node:path");
 
 // post-update-marker.mjs
-var import_node_fs24 = require("node:fs");
-var import_node_os16 = require("node:os");
-var import_node_path21 = require("node:path");
+var import_node_fs25 = require("node:fs");
+var import_node_os17 = require("node:os");
+var import_node_path22 = require("node:path");
 var FRESH_MS = 12e4;
 function markerPath() {
   const override = (process.env.FLOLESS_POST_UPDATE_MARKER ?? "").trim();
   if (override) return override;
-  const root = process.env.FLOLESS_HOME ?? (0, import_node_path21.join)((0, import_node_os16.homedir)(), ".floless");
-  return (0, import_node_path21.join)(root, ".post-update");
+  const root = process.env.FLOLESS_HOME ?? (0, import_node_path22.join)((0, import_node_os17.homedir)(), ".floless");
+  return (0, import_node_path22.join)(root, ".post-update");
 }
 function legacyMarkerPath() {
   if ((process.env.FLOLESS_POST_UPDATE_MARKER ?? "").trim()) return null;
   try {
-    return (0, import_node_path21.join)((0, import_node_path21.dirname)((0, import_node_path21.dirname)(process.execPath)), ".floless-post-update");
+    return (0, import_node_path22.join)((0, import_node_path22.dirname)((0, import_node_path22.dirname)(process.execPath)), ".floless-post-update");
   } catch {
     return null;
   }
@@ -59790,7 +60321,7 @@ function writePostUpdateMarker() {
   for (const p of [markerPath(), legacyMarkerPath()]) {
     if (!p) continue;
     try {
-      (0, import_node_fs24.writeFileSync)(p, (/* @__PURE__ */ new Date()).toISOString());
+      (0, import_node_fs25.writeFileSync)(p, (/* @__PURE__ */ new Date()).toISOString());
       wrote = true;
     } catch {
     }
@@ -59802,9 +60333,9 @@ function consumePostUpdateMarker() {
   for (const p of [markerPath(), legacyMarkerPath()]) {
     if (!p) continue;
     try {
-      if (!(0, import_node_fs24.existsSync)(p)) continue;
-      const ageMs = Date.now() - (0, import_node_fs24.statSync)(p).mtimeMs;
-      (0, import_node_fs24.rmSync)(p, { force: true });
+      if (!(0, import_node_fs25.existsSync)(p)) continue;
+      const ageMs = Date.now() - (0, import_node_fs25.statSync)(p).mtimeMs;
+      (0, import_node_fs25.rmSync)(p, { force: true });
       if (ageMs < FRESH_MS) fresh = true;
     } catch {
     }
@@ -59821,13 +60352,13 @@ function currentVersion() {
   return appVersion();
 }
 function installRoot() {
-  return (0, import_node_path22.dirname)((0, import_node_path22.dirname)(process.execPath));
+  return (0, import_node_path23.dirname)((0, import_node_path23.dirname)(process.execPath));
 }
 function updateExePath() {
-  return (0, import_node_path22.join)(installRoot(), "Update.exe");
+  return (0, import_node_path23.join)(installRoot(), "Update.exe");
 }
 function packagesDir() {
-  return (0, import_node_path22.join)(installRoot(), "packages");
+  return (0, import_node_path23.join)(installRoot(), "packages");
 }
 function feedUrl() {
   const env2 = (process.env.FLOLESS_UPDATE_URL ?? "").trim().replace(/\/+$/, "");
@@ -59920,22 +60451,22 @@ async function checkForUpdate() {
 }
 async function sha1OfFile(path) {
   const hash = (0, import_node_crypto6.createHash)("sha1");
-  await (0, import_promises.pipeline)((0, import_node_fs25.createReadStream)(path), hash);
+  await (0, import_promises.pipeline)((0, import_node_fs26.createReadStream)(path), hash);
   return hash.digest("hex").toUpperCase();
 }
 async function downloadPackage(asset) {
   if (!NUPKG_NAME.test(asset.FileName)) throw new Error(`refusing suspicious package name: ${asset.FileName}`);
   const want = asset.SHA1.toUpperCase();
   const dir = packagesDir();
-  (0, import_node_fs25.mkdirSync)(dir, { recursive: true });
-  const dest = (0, import_node_path22.join)(dir, asset.FileName);
-  if ((0, import_node_fs25.existsSync)(dest) && await sha1OfFile(dest) === want) return dest;
+  (0, import_node_fs26.mkdirSync)(dir, { recursive: true });
+  const dest = (0, import_node_path23.join)(dir, asset.FileName);
+  if ((0, import_node_fs26.existsSync)(dest) && await sha1OfFile(dest) === want) return dest;
   const res = await authedFetch(`${feedUrl()}/${encodeURIComponent(asset.FileName)}`, {
     redirect: "follow",
     signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS)
   });
   if (!res.ok || !res.body) throw new Error(`download failed: HTTP ${res.status} for ${asset.FileName}`);
-  await (0, import_promises.pipeline)(import_node_stream3.Readable.fromWeb(res.body), (0, import_node_fs25.createWriteStream)(dest));
+  await (0, import_promises.pipeline)(import_node_stream3.Readable.fromWeb(res.body), (0, import_node_fs26.createWriteStream)(dest));
   const got = await sha1OfFile(dest);
   if (got !== want) throw new Error(`SHA1 mismatch for ${asset.FileName}: feed=${want} got=${got}`);
   return dest;
@@ -59944,7 +60475,7 @@ async function applyUpdate(check, opts) {
   if (!check.supported) return { applied: false, message: check.reason ?? "auto-update not supported in this runtime" };
   if (!check.updateAvailable || !check.asset) return { applied: false, message: check.reason ?? "no update available" };
   const exe = updateExePath();
-  if (!(0, import_node_fs25.existsSync)(exe)) {
+  if (!(0, import_node_fs26.existsSync)(exe)) {
     return { applied: false, message: `Update.exe not found at ${exe} \u2014 is this a Velopack install?` };
   }
   const pkg = await downloadPackage(check.asset);
@@ -60184,12 +60715,12 @@ function isTraceCorrupt(events) {
 
 // launch.mjs
 var import_node_child_process6 = require("node:child_process");
-var import_node_path23 = require("node:path");
+var import_node_path24 = require("node:path");
 var import_node_url3 = require("node:url");
-var import_node_fs26 = require("node:fs");
+var import_node_fs27 = require("node:fs");
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_readline = require("node:readline");
-var __dirname2 = (0, import_node_path23.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
+var __dirname2 = (0, import_node_path24.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
 var PORT = Number(process.env.PORT ?? 4317);
 var HEALTH_URL = `http://127.0.0.1:${PORT}/api/health`;
 var BROWSER_URL = `http://floless.localhost:${PORT}`;
@@ -60261,8 +60792,8 @@ async function waitHealthy(timeoutMs = 3e4) {
 function resolveServerStart() {
   const packaged = /flolessapp\.exe$/i.test(process.execPath);
   if (packaged) return { cmd: process.execPath, args: ["--serve"], shell: false };
-  const bundle = (0, import_node_path23.join)(__dirname2, "dist", "floless-server.cjs");
-  if ((0, import_node_fs26.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
+  const bundle = (0, import_node_path24.join)(__dirname2, "dist", "floless-server.cjs");
+  if ((0, import_node_fs27.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
   return { cmd: "npm", args: ["run", "start"], shell: isWin2 };
 }
 function startServerDetached() {
@@ -60415,8 +60946,8 @@ function taskkillArgs(pid, { tree = true } = {}) {
 }
 function killSupervisor({ tree = true } = {}) {
   if (!isWin2) return;
-  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path23.basename)(process.execPath));
-  const scriptMatch = isNpmChannel ? (0, import_node_path23.basename)((0, import_node_url3.fileURLToPath)(__import_meta_url)) : void 0;
+  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path24.basename)(process.execPath));
+  const scriptMatch = isNpmChannel ? (0, import_node_path24.basename)((0, import_node_url3.fileURLToPath)(__import_meta_url)) : void 0;
   const realExe = resolveRealInstallExe(process.execPath);
   const exeMatch = realExe === process.execPath ? process.execPath : [process.execPath, realExe];
   const pids = supervisorPidsToKill(enumerateProcesses(), process.pid, exeMatch, scriptMatch);
@@ -60581,7 +61112,7 @@ async function runAction(arg, flagArgv = [], selfVersion = null) {
   }
   await action(parseTeardownFlags(flagArgv));
 }
-var entry = (0, import_node_path23.basename)(process.argv[1] ?? "").toLowerCase();
+var entry = (0, import_node_path24.basename)(process.argv[1] ?? "").toLowerCase();
 if (entry === "launch.mjs") {
   runAction(process.argv[2], process.argv.slice(3)).catch((e) => {
     log(`error: ${e?.message ?? e}`);
@@ -60655,9 +61186,9 @@ function awareUpgradeBlockReason(s) {
 }
 
 // skill-sync.ts
-var import_node_fs27 = require("node:fs");
-var import_node_os17 = require("node:os");
-var import_node_path24 = require("node:path");
+var import_node_fs28 = require("node:fs");
+var import_node_os18 = require("node:os");
+var import_node_path25 = require("node:path");
 var import_node_url4 = require("node:url");
 var import_yaml8 = __toESM(require_dist6(), 1);
 
@@ -60665,6 +61196,8 @@ var import_yaml8 = __toESM(require_dist6(), 1);
 var PRODUCT_SKILLS = [
   "floless-app-bridge",
   //        drive the floless.app CLI / desktop bridge from the user's AI
+  "floless-app-new-workflow",
+  //  build a brand-new .flo from scratch, step by step, verifying each step (the create-sibling of onboarding's tour)
   "floless-app-onboarding",
   //    guided, re-runnable tour of AWARE + floless.app for new users
   "floless-app-queue",
@@ -60696,30 +61229,30 @@ function selectShippedSkillNames(names) {
 }
 
 // skill-sync.ts
-var __dirname3 = (0, import_node_path24.dirname)((0, import_node_url4.fileURLToPath)(__import_meta_url));
+var __dirname3 = (0, import_node_path25.dirname)((0, import_node_url4.fileURLToPath)(__import_meta_url));
 function bundledSkillsRoot() {
   const candidates = [
-    (0, import_node_path24.join)(__dirname3, "skills"),
-    (0, import_node_path24.join)((0, import_node_path24.dirname)(process.execPath), "skills"),
-    (0, import_node_path24.join)(__dirname3, "..", ".claude", "skills")
+    (0, import_node_path25.join)(__dirname3, "skills"),
+    (0, import_node_path25.join)((0, import_node_path25.dirname)(process.execPath), "skills"),
+    (0, import_node_path25.join)(__dirname3, "..", ".claude", "skills")
   ];
-  return candidates.find((p) => (0, import_node_fs27.existsSync)(p)) ?? null;
+  return candidates.find((p) => (0, import_node_fs28.existsSync)(p)) ?? null;
 }
 function targetConfigDirs() {
   const override = process.env.FLOLESS_SKILL_TARGETS;
   if (override) {
     return override.split(";").map((d) => d.trim()).filter(Boolean).map((dir) => ({ runtime: "custom", dir }));
   }
-  const home = (0, import_node_os17.homedir)();
+  const home = (0, import_node_os18.homedir)();
   return [
-    { runtime: "claude", dir: (0, import_node_path24.join)(home, ".claude") },
-    { runtime: "codex", dir: (0, import_node_path24.join)(home, ".codex") },
-    { runtime: "opencode", dir: (0, import_node_path24.join)(home, ".opencode") }
+    { runtime: "claude", dir: (0, import_node_path25.join)(home, ".claude") },
+    { runtime: "codex", dir: (0, import_node_path25.join)(home, ".codex") },
+    { runtime: "opencode", dir: (0, import_node_path25.join)(home, ".opencode") }
   ];
 }
 function skillVersion(skillMdPath) {
   try {
-    const text = (0, import_node_fs27.readFileSync)(skillMdPath, "utf8");
+    const text = (0, import_node_fs28.readFileSync)(skillMdPath, "utf8");
     const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(text);
     if (!m || m[1] === void 0) return null;
     const fm = (0, import_yaml8.parse)(m[1]);
@@ -60759,21 +61292,21 @@ function decideAction(installed, bundled) {
 function bundledSkills(root) {
   let entries = [];
   try {
-    entries = selectShippedSkillNames((0, import_node_fs27.readdirSync)(root));
+    entries = selectShippedSkillNames((0, import_node_fs28.readdirSync)(root));
   } catch {
     return [];
   }
   const out = [];
   for (const name of entries) {
-    const dir = (0, import_node_path24.join)(root, name);
+    const dir = (0, import_node_path25.join)(root, name);
     let isDir = false;
     try {
-      isDir = (0, import_node_fs27.statSync)(dir).isDirectory();
+      isDir = (0, import_node_fs28.statSync)(dir).isDirectory();
     } catch {
       isDir = false;
     }
     if (!isDir) continue;
-    const v = skillVersion((0, import_node_path24.join)(dir, "SKILL.md"));
+    const v = skillVersion((0, import_node_path25.join)(dir, "SKILL.md"));
     if (!v) continue;
     out.push({ name, dir, version: v });
   }
@@ -60786,17 +61319,17 @@ function syncSkills() {
   const skills = bundledSkills(root);
   if (!skills.length) return results;
   for (const { runtime, dir: cfg } of targetConfigDirs()) {
-    if (!(0, import_node_fs27.existsSync)(cfg)) continue;
-    const skillsDir = (0, import_node_path24.join)(cfg, "skills");
+    if (!(0, import_node_fs28.existsSync)(cfg)) continue;
+    const skillsDir = (0, import_node_path25.join)(cfg, "skills");
     for (const s of skills) {
-      const dest = (0, import_node_path24.join)(skillsDir, s.name);
-      const installedMd = (0, import_node_path24.join)(dest, "SKILL.md");
-      const installed = (0, import_node_fs27.existsSync)(installedMd) ? skillVersion(installedMd) : null;
+      const dest = (0, import_node_path25.join)(skillsDir, s.name);
+      const installedMd = (0, import_node_path25.join)(dest, "SKILL.md");
+      const installed = (0, import_node_fs28.existsSync)(installedMd) ? skillVersion(installedMd) : null;
       const action = decideAction(installed, s.version);
       if (action === "installed" || action === "updated") {
         try {
-          if (action === "updated") (0, import_node_fs27.rmSync)(dest, { recursive: true, force: true });
-          (0, import_node_fs27.cpSync)(s.dir, dest, { recursive: true });
+          if (action === "updated") (0, import_node_fs28.rmSync)(dest, { recursive: true, force: true });
+          (0, import_node_fs28.cpSync)(s.dir, dest, { recursive: true });
           results.push({ runtime, skill: s.name, action, from: installed, to: s.version });
         } catch {
         }
@@ -60809,9 +61342,9 @@ function syncSkills() {
 }
 
 // watch.ts
-var import_node_os18 = require("node:os");
-var import_node_path26 = require("node:path");
-var import_node_fs28 = require("node:fs");
+var import_node_os19 = require("node:os");
+var import_node_path27 = require("node:path");
+var import_node_fs29 = require("node:fs");
 
 // node_modules/chokidar/esm/index.js
 var import_fs2 = require("fs");
@@ -60822,7 +61355,7 @@ var sysPath2 = __toESM(require("path"), 1);
 // node_modules/readdirp/esm/index.js
 var import_promises2 = require("node:fs/promises");
 var import_node_stream4 = require("node:stream");
-var import_node_path25 = require("node:path");
+var import_node_path26 = require("node:path");
 var EntryTypes = {
   FILE_TYPE: "files",
   DIR_TYPE: "directories",
@@ -60897,7 +61430,7 @@ var ReaddirpStream = class extends import_node_stream4.Readable {
     this._wantsDir = type ? DIR_TYPES.has(type) : false;
     this._wantsFile = type ? FILE_TYPES.has(type) : false;
     this._wantsEverything = type === EntryTypes.EVERYTHING_TYPE;
-    this._root = (0, import_node_path25.resolve)(root);
+    this._root = (0, import_node_path26.resolve)(root);
     this._isDirent = !opts.alwaysStat;
     this._statsProp = this._isDirent ? "dirent" : "stats";
     this._rdOptions = { encoding: "utf8", withFileTypes: this._isDirent };
@@ -60968,8 +61501,8 @@ var ReaddirpStream = class extends import_node_stream4.Readable {
     let entry2;
     const basename5 = this._isDirent ? dirent.name : dirent;
     try {
-      const fullPath = (0, import_node_path25.resolve)((0, import_node_path25.join)(path, basename5));
-      entry2 = { path: (0, import_node_path25.relative)(this._root, fullPath), fullPath, basename: basename5 };
+      const fullPath = (0, import_node_path26.resolve)((0, import_node_path26.join)(path, basename5));
+      entry2 = { path: (0, import_node_path26.relative)(this._root, fullPath), fullPath, basename: basename5 };
       entry2[this._statsProp] = this._isDirent ? dirent : await this._stat(fullPath);
     } catch (err2) {
       this._onError(err2);
@@ -61003,7 +61536,7 @@ var ReaddirpStream = class extends import_node_stream4.Readable {
         }
         if (entryRealPathStats.isDirectory()) {
           const len2 = entryRealPath.length;
-          if (full.startsWith(entryRealPath) && full.substr(len2, 1) === import_node_path25.sep) {
+          if (full.startsWith(entryRealPath) && full.substr(len2, 1) === import_node_path26.sep) {
             const recursiveError = new Error(`Circular symlink detected: "${full}" points to "${entryRealPath}"`);
             recursiveError.code = RECURSIVE_ERROR_CODE;
             return this._onError(recursiveError);
@@ -61542,9 +62075,9 @@ var NodeFsHandler = class {
     if (this.fsw.closed) {
       return;
     }
-    const dirname12 = sysPath.dirname(file);
+    const dirname13 = sysPath.dirname(file);
     const basename5 = sysPath.basename(file);
-    const parent = this.fsw._getWatchedDir(dirname12);
+    const parent = this.fsw._getWatchedDir(dirname13);
     let prevStats = stats;
     if (parent.has(basename5))
       return;
@@ -61571,7 +62104,7 @@ var NodeFsHandler = class {
             prevStats = newStats2;
           }
         } catch (error) {
-          this.fsw._remove(dirname12, basename5);
+          this.fsw._remove(dirname13, basename5);
         }
       } else if (parent.has(basename5)) {
         const at = newStats.atimeMs;
@@ -62511,33 +63044,33 @@ function appIdFromLogPath(path) {
   return i >= 0 && parts[i + 1] ? parts[i + 1] : null;
 }
 function samePath(a, b) {
-  const ra = (0, import_node_path26.resolve)(a);
-  const rb = (0, import_node_path26.resolve)(b);
+  const ra = (0, import_node_path27.resolve)(a);
+  const rb = (0, import_node_path27.resolve)(b);
   return process.platform === "win32" ? ra.toLowerCase() === rb.toLowerCase() : ra === rb;
 }
 function underDir(path, dir) {
-  const rp = (0, import_node_path26.resolve)(path);
-  const rd = (0, import_node_path26.resolve)(dir);
+  const rp = (0, import_node_path27.resolve)(path);
+  const rd = (0, import_node_path27.resolve)(dir);
   const [p, d] = process.platform === "win32" ? [rp.toLowerCase(), rd.toLowerCase()] : [rp, rd];
-  return p === d || p.startsWith(d + import_node_path26.sep);
+  return p === d || p.startsWith(d + import_node_path27.sep);
 }
 function startWatcher() {
-  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path26.join)((0, import_node_os18.homedir)(), ".aware");
-  const credentialsDir = (0, import_node_path26.join)(awareDir, "credentials");
-  if (!(0, import_node_fs28.existsSync)(credentialsDir)) {
+  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path27.join)((0, import_node_os19.homedir)(), ".aware");
+  const credentialsDir = (0, import_node_path27.join)(awareDir, "credentials");
+  if (!(0, import_node_fs29.existsSync)(credentialsDir)) {
     try {
-      (0, import_node_fs28.mkdirSync)(credentialsDir, { recursive: true });
+      (0, import_node_fs29.mkdirSync)(credentialsDir, { recursive: true });
     } catch {
     }
   }
-  if (!(0, import_node_fs28.existsSync)(uiDir)) {
+  if (!(0, import_node_fs29.existsSync)(uiDir)) {
     try {
-      (0, import_node_fs28.mkdirSync)(uiDir, { recursive: true });
+      (0, import_node_fs29.mkdirSync)(uiDir, { recursive: true });
     } catch {
     }
   }
-  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path26.join)(awareDir, d)).filter((p) => (0, import_node_fs28.existsSync)(p));
-  if ((0, import_node_fs28.existsSync)(uiDir)) targets.push(uiDir);
+  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path27.join)(awareDir, d)).filter((p) => (0, import_node_fs29.existsSync)(p));
+  if ((0, import_node_fs29.existsSync)(uiDir)) targets.push(uiDir);
   if (targets.length === 0) {
     return null;
   }
@@ -62566,11 +63099,11 @@ function startWatcher() {
     const isCredential = path.split(/[\\/]/).includes("credentials");
     const kind = isCredential ? "credential" : path.endsWith(".jsonl") ? "trace" : path.endsWith(".lock") ? "lock" : path.endsWith(".flo") || path.endsWith(".app") ? "source" : "file";
     broadcast({ type: "fs-change", kind, event, path });
-    if (kind === "trace" && event !== "unlink" && (0, import_node_fs28.existsSync)(path)) {
+    if (kind === "trace" && event !== "unlink" && (0, import_node_fs29.existsSync)(path)) {
       const id = appIdFromLogPath(path);
       if (!id) return;
       try {
-        broadcast({ type: "trace-file", id, runId: path.split(import_node_path26.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs28.readFileSync)(path, "utf8")) });
+        broadcast({ type: "trace-file", id, runId: path.split(import_node_path27.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs29.readFileSync)(path, "utf8")) });
       } catch {
       }
     }
@@ -62579,10 +63112,10 @@ function startWatcher() {
 }
 
 // index.ts
-var __dirname4 = (0, import_node_path27.dirname)((0, import_node_url5.fileURLToPath)(__import_meta_url));
-var WEB_ROOT = [(0, import_node_path27.join)(__dirname4, "web"), (0, import_node_path27.join)((0, import_node_path27.dirname)(process.execPath), "web"), (0, import_node_path27.join)(__dirname4, "..", "web")].find(
-  (p) => (0, import_node_fs29.existsSync)(p)
-) ?? (0, import_node_path27.join)(__dirname4, "..", "web");
+var __dirname4 = (0, import_node_path28.dirname)((0, import_node_url5.fileURLToPath)(__import_meta_url));
+var WEB_ROOT = [(0, import_node_path28.join)(__dirname4, "web"), (0, import_node_path28.join)((0, import_node_path28.dirname)(process.execPath), "web"), (0, import_node_path28.join)(__dirname4, "..", "web")].find(
+  (p) => (0, import_node_fs30.existsSync)(p)
+) ?? (0, import_node_path28.join)(__dirname4, "..", "web");
 var PORT2 = Number(process.env.PORT ?? 4317);
 var HOST = "127.0.0.1";
 var crashHandlersInstalled = false;
@@ -62598,7 +63131,7 @@ function installCrashHandlers() {
 ${stack}
 `;
     try {
-      (0, import_node_fs29.appendFileSync)(logFilePath(), line);
+      (0, import_node_fs30.appendFileSync)(logFilePath(), line);
     } catch {
     }
     if (process.stderr.isTTY) process.stderr.write(line);
@@ -62766,9 +63299,9 @@ async function startServer() {
       if (!title || !body) {
         return reply.status(400).send({ ok: false, error: "title and body are required" });
       }
-      const clamp = (s, n) => s.length > n ? s.slice(0, n) : s;
+      const clamp2 = (s, n) => s.length > n ? s.slice(0, n) : s;
       const context = b.context && typeof b.context === "object" && !Array.isArray(b.context) && JSON.stringify(b.context).length <= 16e3 ? b.context : void 0;
-      const result = await reportIssue({ category, title: clamp(title, 200), body: clamp(body, 12e3), context });
+      const result = await reportIssue({ category, title: clamp2(title, 200), body: clamp2(body, 12e3), context });
       if (result.ok) return { ok: true, ref: result.ref };
       const status = result.error === "signed_out" ? 401 : result.error === "rate_limited" ? 429 : 503;
       return reply.status(status).send({ ok: false, error: result.error });
@@ -62861,24 +63394,64 @@ async function startServer() {
   });
   app.get("/api/apps", async () => {
     const apps = await aware.list();
-    return { ok: true, apps: apps.map((a) => ({ ...a, provider: appProvider(a.id), baked: appBaked(a.id) })) };
+    return { ok: true, apps: apps.map((a) => ({ ...a, provider: appProvider(a.id), baked: appBaked(a.id), ...appOrigin(a.id) })) };
   });
   app.get("/api/workflows/updates", async () => {
     const apps = await aware.list();
-    const installed = {};
+    const installed = [];
     for (const a of apps) {
       try {
-        installed[a.id] = readApp(a.id).version;
+        const { templateId, forked } = appOrigin(a.id);
+        const app2 = readApp(a.id);
+        installed.push({ id: a.id, version: app2.version, templateId, forked, publisher: app2.publisher });
       } catch {
       }
     }
     return { ok: true, updates: detectUpdates(installed, loadTemplates()) };
   });
   const _wfUpdating = /* @__PURE__ */ new Set();
+  class TemplateSwapError extends Error {
+    code;
+    backupPath;
+    constructor(message, code, backupPath) {
+      super(message);
+      this.name = "TemplateSwapError";
+      this.code = code;
+      this.backupPath = backupPath;
+    }
+  }
+  async function swapTemplateIntoApp(opts) {
+    const { id, templateId, templatePath, srcPath, appDirPath: appDirPath2, fromVersion, contract, verb } = opts;
+    const bdir = backupDir(id, fromVersion, Date.now());
+    try {
+      (0, import_node_fs30.mkdirSync)((0, import_node_path28.dirname)(bdir), { recursive: true });
+      (0, import_node_fs30.cpSync)(appDirPath2, bdir, { recursive: true });
+      (0, import_node_fs30.cpSync)(templatePath, srcPath);
+      if (id !== templateId) stampSourceAppId(srcPath, id);
+      if (contract != null) {
+        bakeContractIntoApp(srcPath, contract);
+        await bakeDownstream(srcPath, id, contract);
+      }
+      await aware.compile(srcPath);
+      return { backupPath: bdir };
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : String(e);
+      try {
+        (0, import_node_fs30.rmSync)(appDirPath2, { recursive: true, force: true });
+        (0, import_node_fs30.cpSync)(bdir, appDirPath2, { recursive: true });
+      } catch (re) {
+        const rmsg = re instanceof Error ? re.message : String(re);
+        throw new TemplateSwapError(`${verb} failed (${msg}) AND rollback failed (${rmsg}) \u2014 restore manually from ${bdir}`, "rollback-failed", bdir);
+      }
+      throw new TemplateSwapError(`${verb} failed (rolled back to ${fromVersion}): ${msg}`, `${verb}-failed`);
+    }
+  }
   app.post("/api/workflows/:id/update", async (req, reply) => {
     const id = req.params.id;
-    const t = loadTemplates().find((x) => x.id === id);
-    if (!t) return reply.status(404).send({ ok: false, error: `no bundled template for "${id}"`, code: "no-template" });
+    const { templateId, forked } = appOrigin(id);
+    if (forked) return reply.status(409).send({ ok: false, error: `"${id}" is a fork (off the update channel) \u2014 restore it to the official version first to rejoin`, code: "forked" });
+    const t = loadTemplates().find((x) => x.id === templateId);
+    if (!t) return reply.status(404).send({ ok: false, error: `no bundled template in the lineage of "${id}"`, code: "no-template" });
     if (t.publisher !== "floless") return reply.status(400).send({ ok: false, error: `"${id}" is not a FloLess-published workflow`, code: "not-published" });
     if (_wfUpdating.has(id)) return reply.status(409).send({ ok: false, error: `an update for "${id}" is already in progress`, code: "in-progress" });
     let fromVersion;
@@ -62896,7 +63469,7 @@ async function startServer() {
       return reply.status(409).send({ ok: false, error: `"${id}" is already at ${fromVersion}`, code: "up-to-date" });
     }
     const contract = readContract(id);
-    if (contract == null && (0, import_node_fs29.existsSync)(contractPath(id))) {
+    if (contract == null && (0, import_node_fs30.existsSync)(contractPath(id))) {
       return reply.status(409).send({ ok: false, error: `"${id}"'s saved data is unreadable \u2014 open it in the editor and re-save before updating`, code: "contract-corrupt" });
     }
     if (contract != null) {
@@ -62904,28 +63477,13 @@ async function startServer() {
       if (!v.valid) return reply.status(409).send({ ok: false, error: `"${id}"'s saved data is invalid \u2014 re-save it in the editor before updating`, code: "contract-invalid" });
     }
     _wfUpdating.add(id);
-    const bdir = backupDir(id, fromVersion, Date.now());
     try {
-      (0, import_node_fs29.mkdirSync)((0, import_node_path27.dirname)(bdir), { recursive: true });
-      (0, import_node_fs29.cpSync)(appDirPath2, bdir, { recursive: true });
-      (0, import_node_fs29.cpSync)(t.path, srcPath);
-      if (contract != null) {
-        bakeContractIntoApp(srcPath, contract);
-        await bakeDownstream(srcPath, id, contract);
-      }
-      await aware.compile(srcPath);
+      const { backupPath } = await swapTemplateIntoApp({ id, templateId, templatePath: t.path, srcPath, appDirPath: appDirPath2, fromVersion, contract, verb: "update" });
       broadcast({ type: "apps-changed", id });
-      return { ok: true, id, fromVersion, toVersion: t.version, backupPath: bdir };
+      return { ok: true, id, fromVersion, toVersion: t.version, backupPath };
     } catch (e) {
-      const msg = e instanceof Error ? e.message : String(e);
-      try {
-        (0, import_node_fs29.rmSync)(appDirPath2, { recursive: true, force: true });
-        (0, import_node_fs29.cpSync)(bdir, appDirPath2, { recursive: true });
-      } catch (re) {
-        const rmsg = re instanceof Error ? re.message : String(re);
-        return reply.status(500).send({ ok: false, error: `update failed (${msg}) AND rollback failed (${rmsg}) \u2014 restore manually from ${bdir}`, code: "rollback-failed", backupPath: bdir });
-      }
-      return reply.status(500).send({ ok: false, error: `update failed (rolled back to ${fromVersion}): ${msg}`, code: "update-failed" });
+      if (e instanceof TemplateSwapError) return reply.status(500).send({ ok: false, error: e.message, code: e.code, ...e.backupPath ? { backupPath: e.backupPath } : {} });
+      throw e;
     } finally {
       _wfUpdating.delete(id);
     }
@@ -63192,7 +63750,7 @@ async function startServer() {
     }
     const companionId = `${req.params.appId}-ifc`;
     const filename = `${req.params.appId}.ifc`;
-    const outPath = (0, import_node_path27.join)(appPath(companionId), filename);
+    const outPath = (0, import_node_path28.join)(appPath(companionId), filename);
     let flo;
     try {
       flo = writeIfcApp(appPath(companionId), companionId, scene, outPath);
@@ -63215,8 +63773,8 @@ async function startServer() {
       }
       throw e;
     }
-    if (!(0, import_node_fs29.existsSync)(outPath)) return reply.send({ ok: false, error: "the IFC export produced no file" });
-    const content = (0, import_node_fs29.readFileSync)(outPath, "utf8");
+    if (!(0, import_node_fs30.existsSync)(outPath)) return reply.send({ ok: false, error: "the IFC export produced no file" });
+    const content = (0, import_node_fs30.readFileSync)(outPath, "utf8");
     broadcast({ type: "apps-changed" });
     return { ok: true, filename, content, bytes: Buffer.byteLength(content), skipped };
   });
@@ -63295,17 +63853,17 @@ async function startServer() {
       return reply.status(422).send({ ok: false, error: "no priced members to export \u2014 every member is an RFI (no AISC size / weight yet)" });
     }
     const outPath = bomExportPath(appId, format);
-    const dir = (0, import_node_path27.dirname)(outPath);
+    const dir = (0, import_node_path28.dirname)(outPath);
     const filename = `${appId}-bom.${format}`;
     try {
-      (0, import_node_fs29.mkdirSync)(dir, { recursive: true });
+      (0, import_node_fs30.mkdirSync)(dir, { recursive: true });
       if (format === "csv") {
         const text = bomToCsv(bom);
-        (0, import_node_fs29.writeFileSync)(outPath, text, "utf8");
+        (0, import_node_fs30.writeFileSync)(outPath, text, "utf8");
         return { ok: true, filename, encoding: "utf8", content: text, bytes: Buffer.byteLength(text), savedTo: outPath };
       }
       const buf = await bomToXlsx(bom);
-      (0, import_node_fs29.writeFileSync)(outPath, buf);
+      (0, import_node_fs30.writeFileSync)(outPath, buf);
       return { ok: true, filename, encoding: "base64", content: buf.toString("base64"), bytes: buf.length, savedTo: outPath };
     } catch (e) {
       app.log.error({ appId, format, err: e instanceof Error ? e.message : e }, "export-bom: generation failed");
@@ -63341,6 +63899,60 @@ async function startServer() {
     broadcast({ type: "apps-changed", id: req.params.id });
     return { ok: true };
   });
+  app.post("/api/app/:id/fork", async (req, reply) => {
+    const id = req.params.id;
+    if (!appExists(id)) return reply.status(404).send({ ok: false, error: `"${id}" is not installed`, code: "not-installed" });
+    if (req.body?.accept !== true) return reply.status(400).send({ ok: false, error: "liability terms not accepted", code: "terms-required" });
+    let version;
+    try {
+      version = readApp(id).version;
+    } catch {
+      return reply.status(404).send({ ok: false, error: `"${id}" is not installed`, code: "not-installed" });
+    }
+    const acceptedBy = typeof req.body?.acceptedBy === "string" ? req.body.acceptedBy : void 0;
+    markForked(id, { version, acceptedBy }, (/* @__PURE__ */ new Date()).toISOString());
+    broadcast({ type: "apps-changed", id });
+    return { ok: true, id, forked: true };
+  });
+  app.post("/api/app/:id/restore", async (req, reply) => {
+    const id = req.params.id;
+    const { templateId } = appOrigin(id);
+    const t = loadTemplates().find((x) => x.id === templateId);
+    if (!t) return reply.status(404).send({ ok: false, error: `no bundled template to restore "${id}" from`, code: "no-template" });
+    if (t.publisher !== "floless") return reply.status(400).send({ ok: false, error: `"${id}" has no FloLess-published template to restore from`, code: "not-published" });
+    if (_wfUpdating.has(id)) return reply.status(409).send({ ok: false, error: `an operation for "${id}" is already in progress`, code: "in-progress" });
+    let fromVersion;
+    let srcPath;
+    let appDirPath2;
+    try {
+      const a = readApp(id);
+      fromVersion = a.version;
+      srcPath = a.source.path;
+      appDirPath2 = appDir(id);
+    } catch {
+      return reply.status(404).send({ ok: false, error: `"${id}" is not installed`, code: "not-installed" });
+    }
+    const contract = readContract(id);
+    if (contract == null && (0, import_node_fs30.existsSync)(contractPath(id))) {
+      return reply.status(409).send({ ok: false, error: `"${id}"'s saved data is unreadable \u2014 open it in the editor and re-save before restoring`, code: "contract-corrupt" });
+    }
+    if (contract != null) {
+      const v = validateSteelTakeoff(contract);
+      if (!v.valid) return reply.status(409).send({ ok: false, error: `"${id}"'s saved data is invalid \u2014 re-save it in the editor before restoring`, code: "contract-invalid" });
+    }
+    _wfUpdating.add(id);
+    try {
+      const { backupPath } = await swapTemplateIntoApp({ id, templateId, templatePath: t.path, srcPath, appDirPath: appDirPath2, fromVersion, contract, verb: "restore" });
+      clearFork(id);
+      broadcast({ type: "apps-changed", id });
+      return { ok: true, id, restored: true, version: t.version, backupPath };
+    } catch (e) {
+      if (e instanceof TemplateSwapError) return reply.status(500).send({ ok: false, error: e.message, code: e.code, ...e.backupPath ? { backupPath: e.backupPath } : {} });
+      throw e;
+    } finally {
+      _wfUpdating.delete(id);
+    }
+  });
   app.post("/api/app/:id/freeze", async (req, reply) => {
     const nodeId = typeof req.body?.nodeId === "string" ? req.body.nodeId.trim() : "";
     if (!nodeId) return reply.status(400).send({ ok: false, error: "nodeId required" });
@@ -63399,11 +64011,11 @@ async function startServer() {
     if (appExists(id)) {
       return reply.status(409).send({ ok: false, error: `a workflow named "${id}" is already installed \u2014 remove it first, or rename the file's app: id`, code: "exists", id });
     }
-    const stageRoot = (0, import_node_fs29.mkdtempSync)((0, import_node_path27.join)((0, import_node_os19.tmpdir)(), "floless-import-"));
+    const stageRoot = (0, import_node_fs30.mkdtempSync)((0, import_node_path28.join)((0, import_node_os20.tmpdir)(), "floless-import-"));
     try {
-      const stageDir = (0, import_node_path27.join)(stageRoot, id);
-      (0, import_node_fs29.mkdirSync)(stageDir);
-      (0, import_node_fs29.writeFileSync)((0, import_node_path27.join)(stageDir, `${id}.flo`), content);
+      const stageDir = (0, import_node_path28.join)(stageRoot, id);
+      (0, import_node_fs30.mkdirSync)(stageDir);
+      (0, import_node_fs30.writeFileSync)((0, import_node_path28.join)(stageDir, `${id}.flo`), content);
       await aware.install(stageDir);
     } catch (err2) {
       try {
@@ -63413,7 +64025,7 @@ async function startServer() {
       const msg = err2 instanceof AwareError ? err2.message : String(err2?.message ?? err2);
       return reply.status(502).send({ ok: false, error: `import failed: ${msg}` });
     } finally {
-      (0, import_node_fs29.rmSync)(stageRoot, { recursive: true, force: true });
+      (0, import_node_fs30.rmSync)(stageRoot, { recursive: true, force: true });
     }
     broadcast({ type: "apps-changed", id });
     return { ok: true, id };
@@ -63427,13 +64039,13 @@ async function startServer() {
     }
     const inputs = appData.inputs.map((i) => ({ name: i.name, type: i.type }));
     const baked = bakeFloSource(appData.source.text, inputs);
-    const tmpRoot = (0, import_node_fs29.mkdtempSync)((0, import_node_path27.join)((0, import_node_os19.tmpdir)(), "floless-bake-"));
-    const backupDir2 = (0, import_node_path27.join)(tmpRoot, `${id}-backup`);
-    const bakeDir = (0, import_node_path27.join)(tmpRoot, id);
-    (0, import_node_fs29.cpSync)(appDir(id), backupDir2, { recursive: true });
-    (0, import_node_fs29.cpSync)(appDir(id), bakeDir, { recursive: true });
+    const tmpRoot = (0, import_node_fs30.mkdtempSync)((0, import_node_path28.join)((0, import_node_os20.tmpdir)(), "floless-bake-"));
+    const backupDir2 = (0, import_node_path28.join)(tmpRoot, `${id}-backup`);
+    const bakeDir = (0, import_node_path28.join)(tmpRoot, id);
+    (0, import_node_fs30.cpSync)(appDir(id), backupDir2, { recursive: true });
+    (0, import_node_fs30.cpSync)(appDir(id), bakeDir, { recursive: true });
     const floName = appData.source.path.split(/[\\/]/).pop();
-    (0, import_node_fs29.writeFileSync)((0, import_node_path27.join)(bakeDir, floName), baked);
+    (0, import_node_fs30.writeFileSync)((0, import_node_path28.join)(bakeDir, floName), baked);
     let appInstalled2 = true;
     try {
       await aware.uninstall(id);
@@ -63455,17 +64067,17 @@ async function startServer() {
         throw installErr;
       }
       try {
-        await aware.compile((0, import_node_path27.join)(appDir(id), floName));
+        await aware.compile((0, import_node_path28.join)(appDir(id), floName));
       } catch (compileErr) {
         app.log.warn({ id, compileErr: String(compileErr) }, "bake: post-install recompile failed (app baked but may need a manual Compile)");
       }
       broadcast({ type: "baked", id });
       return { ok: true, id, agent: id, inputs };
     } finally {
-      if (appInstalled2) (0, import_node_fs29.rmSync)(tmpRoot, { recursive: true, force: true });
+      if (appInstalled2) (0, import_node_fs30.rmSync)(tmpRoot, { recursive: true, force: true });
     }
   });
-  const graftAgentsDir = () => (0, import_node_path27.join)((0, import_node_os19.homedir)(), ".aware", "agents");
+  const graftAgentsDir = () => (0, import_node_path28.join)((0, import_node_os20.homedir)(), ".aware", "agents");
   app.post("/api/graft/match", async (req, reply) => {
     const { glob } = req.body ?? {};
     if (!glob) return reply.status(400).send({ ok: false, error: "glob required" });
@@ -63482,7 +64094,7 @@ async function startServer() {
     if (!sourceKind || !sourceRef) {
       return reply.status(400).send({ ok: false, error: "sourceKind and sourceRef required" });
     }
-    const tempHome = (0, import_node_fs29.mkdtempSync)((0, import_node_path27.join)((0, import_node_os19.tmpdir)(), "floless-graft-"));
+    const tempHome = (0, import_node_fs30.mkdtempSync)((0, import_node_path28.join)((0, import_node_os20.tmpdir)(), "floless-graft-"));
     let result;
     try {
       result = await aware.build({
@@ -63495,19 +64107,19 @@ async function startServer() {
         awareHome: tempHome
       });
     } catch (err2) {
-      (0, import_node_fs29.rmSync)(tempHome, { recursive: true, force: true });
+      (0, import_node_fs30.rmSync)(tempHome, { recursive: true, force: true });
       const msg = err2 instanceof AwareError ? err2.message : String(err2?.message ?? err2);
       return reply.status(422).send({ ok: false, error: msg });
     }
     const manifest = readStagedManifest(result.agentDir);
     if (!manifest) {
-      (0, import_node_fs29.rmSync)(tempHome, { recursive: true, force: true });
+      (0, import_node_fs30.rmSync)(tempHome, { recursive: true, force: true });
       return reply.status(502).send({ ok: false, error: `build produced output at ${result.agentDir} but no manifest.yaml` });
     }
     const token = (0, import_node_crypto7.randomUUID)();
     registerStage(token, tempHome, result.agentId);
     const preview = buildPreview(manifest, sourceKind, sourceRef, token);
-    if ((0, import_node_fs29.existsSync)((0, import_node_path27.join)(graftAgentsDir(), result.agentId))) {
+    if ((0, import_node_fs30.existsSync)((0, import_node_path28.join)(graftAgentsDir(), result.agentId))) {
       preview.warnings.unshift(`An agent named "${result.agentId}" is already installed \u2014 creating it will overwrite it.`);
     }
     return { ok: true, preview };
@@ -63526,7 +64138,7 @@ async function startServer() {
         registerStage(stagedRef, stage.tempDir, stage.agentId);
         return reply.status(409).send({ ok: false, error: err2.message, agentId: stage.agentId, collision: true });
       }
-      (0, import_node_fs29.rmSync)(stage.tempDir, { recursive: true, force: true });
+      (0, import_node_fs30.rmSync)(stage.tempDir, { recursive: true, force: true });
       throw err2;
     }
     broadcast({ type: "grafted", id: stage.agentId });
@@ -63786,11 +64398,11 @@ async function startServer() {
   app.get("/api/requests/:id/snapshot/:n", async (req, reply) => {
     const n = Number.parseInt(req.params.n, 10);
     const p = Number.isInteger(n) ? snapshotPathFor(req.params.id, n) : null;
-    if (!p || !(0, import_node_fs29.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
+    if (!p || !(0, import_node_fs30.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
     const ext = p.split(".").pop().toLowerCase();
     reply.header("Content-Type", ext === "png" ? "image/png" : ext === "webp" ? "image/webp" : ext === "pdf" ? "application/pdf" : "image/jpeg");
     reply.header("Cache-Control", "no-store");
-    return (0, import_node_fs29.readFileSync)(p);
+    return (0, import_node_fs30.readFileSync)(p);
   });
   app.post(
     "/api/tweak",
@@ -63883,6 +64495,11 @@ async function startServer() {
     broadcast({ type: "request-added", request });
     return { ok: true, request };
   });
+  app.post("/api/guide-new", async (_req, _reply) => {
+    const request = addRequest({ type: "new-workflow" });
+    broadcast({ type: "request-added", request });
+    return { ok: true, request };
+  });
   app.delete("/api/requests/:id", async (req, reply) => {
     if (!deleteRequest(req.params.id)) return reply.status(404).send({ ok: false, error: "request not found" });
     broadcast({ type: "requests-changed" });
@@ -63947,7 +64564,7 @@ async function startServer() {
         warn(`last-run-status:${ref} \u2014 trace exists but couldn't be parsed (corrupt/truncated)`);
         let finishedAt2 = null;
         try {
-          finishedAt2 = (0, import_node_fs29.statSync)(latest.path).mtime.toISOString();
+          finishedAt2 = (0, import_node_fs30.statSync)(latest.path).mtime.toISOString();
         } catch {
           finishedAt2 = null;
         }
@@ -63957,7 +64574,7 @@ async function startServer() {
       let finishedAt = typeof runEnd?.ts === "string" ? runEnd.ts : null;
       if (!finishedAt) {
         try {
-          finishedAt = (0, import_node_fs29.statSync)(latest.path).mtime.toISOString();
+          finishedAt = (0, import_node_fs30.statSync)(latest.path).mtime.toISOString();
         } catch {
           finishedAt = null;
         }