@floless/app 0.6.1 → 0.6.3

package/dist/floless-server.cjs

@@ -50826,11 +50826,11 @@ var import_node_child_process8 = require("node:child_process");
 var import_node_readline2 = require("node:readline");
 
 // index.ts
-var import_node_url2 = require("node:url");
-var import_node_path16 = require("node:path");
+var import_node_url3 = require("node:url");
+var import_node_path17 = require("node:path");
 var import_node_os11 = require("node:os");
-var import_node_fs17 = require("node:fs");
-var import_node_child_process5 = require("node:child_process");
+var import_node_fs18 = require("node:fs");
+var import_node_child_process6 = require("node:child_process");
 
 // log.mjs
 var import_node_path = require("node:path");
@@ -51148,7 +51148,7 @@ function nodeExe() {
   }
   if (!isSea3) return _nodeExe = process.execPath;
   try {
-    const out = (0, import_node_child_process.execFileSync)(process.platform === "win32" ? "where" : "which", ["node"], { encoding: "utf8" });
+    const out = (0, import_node_child_process.execFileSync)(process.platform === "win32" ? "where" : "which", ["node"], { encoding: "utf8", windowsHide: true, timeout: 5e3 });
     _nodeExe = out.split(/\r?\n/).map((s) => s.trim()).find(Boolean) ?? "node";
   } catch {
     _nodeExe = "node";
@@ -51171,7 +51171,7 @@ function resolveInvoker() {
     return { head: [nodeExe(), (0, import_node_path3.join)(envDir, "scripts/bin/aware.js")], shell: false, pkgDir: envDir };
   }
   try {
-    const root = (0, import_node_child_process.execFileSync)("npm", ["root", "-g"], { encoding: "utf8", shell: process.platform === "win32" }).trim();
+    const root = (0, import_node_child_process.execFileSync)("npm", ["root", "-g"], { encoding: "utf8", shell: process.platform === "win32", windowsHide: true, timeout: 1e4 }).trim();
     const pkgDir = (0, import_node_path3.join)(root, "@aware-aeco", "cli");
     const bin = (0, import_node_path3.join)(pkgDir, "scripts/bin/aware.js");
     if ((0, import_node_fs4.existsSync)(bin)) return { head: [nodeExe(), bin], shell: false, pkgDir };
@@ -51345,7 +51345,7 @@ var runChain = Promise.resolve();
 function killTree(child) {
   if (process.platform === "win32" && child.pid) {
     try {
-      (0, import_node_child_process.execFileSync)("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore" });
+      (0, import_node_child_process.execFileSync)("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", windowsHide: true, timeout: 5e3 });
       return;
     } catch {
     }
@@ -52161,8 +52161,12 @@ function browserCommand(url, platform = process.platform) {
   if (platform === "win32") {
     return {
       cmd: "cmd",
+      // NO `detached`: Node #21825 makes it defeat `windowsHide` for cmd.exe (a CUI child),
+      // flashing a console window on sign-in. windowsHide alone hides it; `start` still hands
+      // the URL to the browser via ShellExecute, which outlives this process. windowsVerbatimArguments
+      // keeps `&` literal inside the quoted url (the desktop-session footgun documented above).
       args: ["/c", "start", '""', `"${url}"`],
-      opts: { windowsHide: true, detached: true, windowsVerbatimArguments: true }
+      opts: { windowsHide: true, windowsVerbatimArguments: true }
     };
   }
   return { cmd: platform === "darwin" ? "open" : "xdg-open", args: [url], opts: { detached: true } };
@@ -52254,7 +52258,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.6.1" : void 0,
+    define: true ? "0.6.3" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -52264,7 +52268,7 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.6.1" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.6.3" : void 0 });
 }
 
 // bake.ts
@@ -53733,379 +53737,781 @@ async function applyUpdate(check, opts) {
   return { applied: true, message: `updating to v${check.targetVersion}\u2026 the app will relaunch` };
 }
 
-// aware-update.ts
-var REGISTRY_LATEST = "https://registry.npmjs.org/@aware-aeco/cli/latest";
-var FEED_TIMEOUT_MS2 = 15e3;
-var VERSION_TTL_MS = 5e3;
-var _v = null;
-function awareInstalledVersion(probe = aware.npmVersion) {
-  const now = Date.now();
-  if (_v && now - _v.at < VERSION_TTL_MS) return _v.val;
-  _v = { at: now, val: probe() };
-  return _v.val;
-}
-function invalidateAwareVersion() {
-  _v = null;
-}
-function versionGt2(a, b) {
-  const pa = a.split(".").map((n) => parseInt(n, 10) || 0);
-  const pb = b.split(".").map((n) => parseInt(n, 10) || 0);
-  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
-    const d = (pa[i] ?? 0) - (pb[i] ?? 0);
-    if (d !== 0) return d > 0;
-  }
-  return false;
-}
-function decideAwareUpdate(cur, latest) {
-  const base = { supported: true, currentVersion: cur };
-  if (!latest) return { ...base, updateAvailable: false, reason: "could not read the npm registry latest" };
-  if (!cur) return { ...base, updateAvailable: false, targetVersion: latest, reason: "AWARE not installed yet" };
-  if (versionGt2(latest, cur)) return { ...base, updateAvailable: true, targetVersion: latest };
-  return { ...base, updateAvailable: false, targetVersion: latest, reason: `already up to date (v${cur})` };
-}
-async function fetchAwareLatest() {
+// launch.mjs
+var import_node_child_process5 = require("node:child_process");
+var import_node_path13 = require("node:path");
+var import_node_url = require("node:url");
+var import_node_fs15 = require("node:fs");
+var import_node_http = __toESM(require("node:http"), 1);
+var import_node_readline = require("node:readline");
+var __dirname2 = (0, import_node_path13.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
+var PORT = Number(process.env.PORT ?? 4317);
+var HEALTH_URL = `http://127.0.0.1:${PORT}/api/health`;
+var BROWSER_URL = `http://floless.localhost:${PORT}`;
+var isWin2 = process.platform === "win32";
+var log = (m) => {
   try {
-    const res = await fetch(REGISTRY_LATEST, { redirect: "follow", signal: AbortSignal.timeout(FEED_TIMEOUT_MS2) });
-    if (!res.ok) return null;
-    const body = await res.json();
-    return typeof body.version === "string" ? body.version : null;
+    process.stdout.write(`floless: ${m}
+`);
   } catch {
-    return null;
   }
+};
+function ping() {
+  return new Promise((resolve4) => {
+    const req = import_node_http.default.get(HEALTH_URL, { timeout: 1500 }, (res) => {
+      res.resume();
+      resolve4(res.statusCode === 200);
+    });
+    req.on("error", () => resolve4(false));
+    req.on("timeout", () => {
+      req.destroy();
+      resolve4(false);
+    });
+  });
 }
-async function checkAwareUpdate() {
-  const cur = awareInstalledVersion();
-  const latest = await fetchAwareLatest();
-  return decideAwareUpdate(cur, latest);
+function probeVersion() {
+  return new Promise((resolve4) => {
+    const req = import_node_http.default.get(HEALTH_URL, { timeout: 1500 }, (res) => {
+      let body = "";
+      res.on("data", (c) => {
+        body += c;
+      });
+      res.on("end", () => {
+        try {
+          resolve4(JSON.parse(body).appVersion || null);
+        } catch {
+          resolve4(null);
+        }
+      });
+    });
+    req.on("error", () => resolve4(null));
+    req.on("timeout", () => {
+      req.destroy();
+      resolve4(null);
+    });
+  });
 }
-async function applyAwareUpdate(deps) {
-  try {
-    await deps.install("latest");
-    deps.refresh();
-    invalidateAwareVersion();
-    return { ok: true, version: deps.probe() };
-  } catch (err) {
-    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+function cmpVersion(a, b) {
+  const pa = String(a ?? "").split(".").map((n) => parseInt(n, 10) || 0);
+  const pb = String(b ?? "").split(".").map((n) => parseInt(n, 10) || 0);
+  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+    const d = (pa[i] || 0) - (pb[i] || 0);
+    if (d !== 0) return d > 0 ? 1 : -1;
   }
+  return 0;
 }
-function awareApplyDeps(install) {
-  return { install, refresh: refreshInvoker, probe: aware.npmVersion };
+function shouldTakeOver(runningVersion, selfVersion) {
+  if (!runningVersion || !selfVersion) return false;
+  return cmpVersion(selfVersion, runningVersion) > 0;
 }
-function awareUpgradeBlockReason(s) {
-  if (s.bootstrapInstalling || s.installInFlight) return "an AWARE install is already in progress \u2014 try again in a moment";
-  if (s.runActive) return "a workflow run is in progress \u2014 wait for it to finish before upgrading AWARE";
-  if (s.hostWatcherActive) return "a live trigger/watch session is using the host \u2014 stop it before upgrading AWARE";
-  return null;
+var _selfVersion = null;
+async function waitHealthy(timeoutMs = 3e4) {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    if (await ping()) return true;
+    await new Promise((r) => setTimeout(r, 500));
+  }
+  return false;
 }
-
-// skill-sync.ts
-var import_node_fs15 = require("node:fs");
-var import_node_os9 = require("node:os");
-var import_node_path13 = require("node:path");
-var import_node_url = require("node:url");
-var import_yaml5 = __toESM(require_dist6(), 1);
-
-// build/ship-skills.mjs
-var PRODUCT_SKILLS = [
-  "floless-app-bridge",
-  //     drive the floless.app CLI / desktop bridge from the user's AI
-  "floless-app-onboarding",
-  // guided, re-runnable tour of AWARE + floless.app for new users
-  "floless-app-routines",
-  //   author event-driven ("on trigger") routines
-  "floless-app-workflows"
-  //  author/run .flo workflows
-];
-function selectShippedSkillNames(names) {
-  const present = new Set(names);
-  return PRODUCT_SKILLS.filter((name) => present.has(name));
+function resolveServerStart() {
+  const packaged = /flolessapp\.exe$/i.test(process.execPath);
+  if (packaged) return { cmd: process.execPath, args: ["--serve"], shell: false };
+  const bundle = (0, import_node_path13.join)(__dirname2, "dist", "floless-server.cjs");
+  if ((0, import_node_fs15.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
+  return { cmd: "npm", args: ["run", "start"], shell: isWin2 };
 }
-
-// skill-sync.ts
-var __dirname2 = (0, import_node_path13.dirname)((0, import_node_url.fileURLToPath)(__import_meta_url));
-function bundledSkillsRoot() {
-  const candidates = [
-    (0, import_node_path13.join)(__dirname2, "skills"),
-    (0, import_node_path13.join)((0, import_node_path13.dirname)(process.execPath), "skills"),
-    (0, import_node_path13.join)(__dirname2, "..", ".claude", "skills")
-  ];
-  return candidates.find((p) => (0, import_node_fs15.existsSync)(p)) ?? null;
+function startServerDetached() {
+  const { cmd, args, shell } = resolveServerStart();
+  rotateLog();
+  const fd = openLogFd();
+  const child = (0, import_node_child_process5.spawn)(cmd, args, {
+    cwd: __dirname2,
+    detached: true,
+    stdio: fd == null ? "ignore" : ["ignore", fd, fd],
+    windowsHide: true,
+    shell
+  });
+  child.unref();
 }
-function targetConfigDirs() {
-  const override = process.env.FLOLESS_SKILL_TARGETS;
-  if (override) {
-    return override.split(";").map((d) => d.trim()).filter(Boolean).map((dir) => ({ runtime: "custom", dir }));
-  }
-  const home = (0, import_node_os9.homedir)();
-  return [
-    { runtime: "claude", dir: (0, import_node_path13.join)(home, ".claude") },
-    { runtime: "codex", dir: (0, import_node_path13.join)(home, ".codex") },
-    { runtime: "opencode", dir: (0, import_node_path13.join)(home, ".opencode") }
-  ];
+function openBrowser2(url) {
+  if (isWin2) (0, import_node_child_process5.spawn)("cmd", ["/c", "start", "", url], { windowsHide: true }).unref();
+  else (0, import_node_child_process5.spawn)(process.platform === "darwin" ? "open" : "xdg-open", [url], { detached: true }).unref();
 }
-function skillVersion(skillMdPath) {
+function stopServer() {
+  if (!isWin2) {
+    try {
+      (0, import_node_child_process5.execSync)(`bash -lc "fuser -k ${PORT}/tcp"`, { stdio: "ignore" });
+      return true;
+    } catch {
+      return false;
+    }
+  }
   try {
-    const text = (0, import_node_fs15.readFileSync)(skillMdPath, "utf8");
-    const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(text);
-    if (!m || m[1] === void 0) return null;
-    const fm = (0, import_yaml5.parse)(m[1]);
-    const meta = fm?.metadata;
-    const v = meta?.version;
-    return typeof v === "string" || typeof v === "number" ? String(v) : null;
+    const ps = `$p = Get-NetTCPConnection -LocalPort ${PORT} -State Listen -ErrorAction SilentlyContinue | Select-Object -Expand OwningProcess -Unique; if ($p) { $p | ForEach-Object { taskkill /PID $_ /T /F } } else { exit 9 }`;
+    (0, import_node_child_process5.execSync)(`powershell -NoProfile -Command "${ps}"`, { stdio: "ignore" });
+    return true;
   } catch {
-    return null;
+    return false;
   }
 }
-function compareVersions(a, b) {
-  const split = (v) => {
-    const dash = v.indexOf("-");
-    const core = dash >= 0 ? v.slice(0, dash) : v;
-    const pre = dash >= 0 ? v.slice(dash + 1) : "";
-    return { nums: core.split(".").map((s) => parseInt(s, 10) || 0), pre };
-  };
-  const pa = split(a);
-  const pb = split(b);
-  const n = Math.max(pa.nums.length, pb.nums.length);
-  for (let i = 0; i < n; i++) {
-    const d = (pa.nums[i] ?? 0) - (pb.nums[i] ?? 0);
-    if (d !== 0) return d > 0 ? 1 : -1;
+async function ensureServerUp() {
+  if (await ping()) return;
+  log("starting server\u2026");
+  startServerDetached();
+  if (!await waitHealthy()) {
+    log(`server did not become healthy on ${HEALTH_URL} within 30s \u2014 check for errors with "npm run dev"`);
+    process.exit(1);
   }
-  if (pa.pre === pb.pre) return 0;
-  if (pa.pre === "") return 1;
-  if (pb.pre === "") return -1;
-  return pa.pre < pb.pre ? -1 : 1;
-}
-function decideAction(installed, bundled) {
-  if (installed === null) return "installed";
-  const c = compareVersions(bundled, installed);
-  if (c > 0) return "updated";
-  if (c === 0) return "skipped-current";
-  return "skipped-newer";
+  log("server up");
 }
-function bundledSkills(root) {
-  let entries = [];
-  try {
-    entries = selectShippedSkillNames((0, import_node_fs15.readdirSync)(root));
-  } catch {
-    return [];
-  }
-  const out = [];
-  for (const name of entries) {
-    const dir = (0, import_node_path13.join)(root, name);
-    let isDir = false;
-    try {
-      isDir = (0, import_node_fs15.statSync)(dir).isDirectory();
-    } catch {
-      isDir = false;
+async function cmdOpen() {
+  if (await ping()) {
+    const running = await probeVersion();
+    if (shouldTakeOver(running, _selfVersion)) {
+      log(`floless.app v${running} is already running on ${PORT}; this build is v${_selfVersion} \u2014 taking over`);
+      stopServer();
+      await new Promise((r) => setTimeout(r, 500));
+      await ensureServerUp();
+    } else {
+      log(`already running${running ? ` (v${running})` : ""} \u2014 opening browser`);
     }
-    if (!isDir) continue;
-    const v = skillVersion((0, import_node_path13.join)(dir, "SKILL.md"));
-    if (!v) continue;
-    out.push({ name, dir, version: v });
+  } else {
+    await ensureServerUp();
   }
-  return out;
+  log(`opening ${BROWSER_URL}`);
+  openBrowser2(BROWSER_URL);
 }
-function syncSkills() {
-  const results = [];
-  const root = bundledSkillsRoot();
-  if (!root) return results;
-  const skills = bundledSkills(root);
-  if (!skills.length) return results;
-  for (const { runtime, dir: cfg } of targetConfigDirs()) {
-    if (!(0, import_node_fs15.existsSync)(cfg)) continue;
-    const skillsDir = (0, import_node_path13.join)(cfg, "skills");
-    for (const s of skills) {
-      const dest = (0, import_node_path13.join)(skillsDir, s.name);
-      const installedMd = (0, import_node_path13.join)(dest, "SKILL.md");
-      const installed = (0, import_node_fs15.existsSync)(installedMd) ? skillVersion(installedMd) : null;
-      const action = decideAction(installed, s.version);
-      if (action === "installed" || action === "updated") {
-        try {
-          if (action === "updated") (0, import_node_fs15.rmSync)(dest, { recursive: true, force: true });
-          (0, import_node_fs15.cpSync)(s.dir, dest, { recursive: true });
-          results.push({ runtime, skill: s.name, action, from: installed, to: s.version });
-        } catch {
-        }
-      } else {
-        results.push({ runtime, skill: s.name, action, from: installed, to: s.version });
-      }
-    }
+async function cmdStart() {
+  if (await ping()) {
+    log("already running");
+    return;
   }
-  return results;
+  await ensureServerUp();
 }
-
-// watch.ts
-var import_node_os10 = require("node:os");
-var import_node_path15 = require("node:path");
-var import_node_fs16 = require("node:fs");
-
-// node_modules/chokidar/esm/index.js
-var import_fs2 = require("fs");
-var import_promises4 = require("fs/promises");
-var import_events = require("events");
-var sysPath2 = __toESM(require("path"), 1);
-
-// node_modules/readdirp/esm/index.js
-var import_promises2 = require("node:fs/promises");
-var import_node_stream2 = require("node:stream");
-var import_node_path14 = require("node:path");
-var EntryTypes = {
-  FILE_TYPE: "files",
-  DIR_TYPE: "directories",
-  FILE_DIR_TYPE: "files_directories",
-  EVERYTHING_TYPE: "all"
-};
-var defaultOptions = {
-  root: ".",
-  fileFilter: (_entryInfo) => true,
-  directoryFilter: (_entryInfo) => true,
-  type: EntryTypes.FILE_TYPE,
-  lstat: false,
-  depth: 2147483648,
-  alwaysStat: false,
-  highWaterMark: 4096
-};
-Object.freeze(defaultOptions);
-var RECURSIVE_ERROR_CODE = "READDIRP_RECURSIVE_ERROR";
-var NORMAL_FLOW_ERRORS = /* @__PURE__ */ new Set(["ENOENT", "EPERM", "EACCES", "ELOOP", RECURSIVE_ERROR_CODE]);
-var ALL_TYPES = [
-  EntryTypes.DIR_TYPE,
-  EntryTypes.EVERYTHING_TYPE,
-  EntryTypes.FILE_DIR_TYPE,
-  EntryTypes.FILE_TYPE
-];
-var DIR_TYPES = /* @__PURE__ */ new Set([
-  EntryTypes.DIR_TYPE,
-  EntryTypes.EVERYTHING_TYPE,
-  EntryTypes.FILE_DIR_TYPE
-]);
-var FILE_TYPES = /* @__PURE__ */ new Set([
-  EntryTypes.EVERYTHING_TYPE,
-  EntryTypes.FILE_DIR_TYPE,
-  EntryTypes.FILE_TYPE
-]);
-var isNormalFlowError = (error) => NORMAL_FLOW_ERRORS.has(error.code);
-var wantBigintFsStats = process.platform === "win32";
-var emptyFn = (_entryInfo) => true;
-var normalizeFilter = (filter) => {
-  if (filter === void 0)
-    return emptyFn;
-  if (typeof filter === "function")
-    return filter;
-  if (typeof filter === "string") {
-    const fl = filter.trim();
-    return (entry2) => entry2.basename === fl;
-  }
-  if (Array.isArray(filter)) {
-    const trItems = filter.map((item) => item.trim());
-    return (entry2) => trItems.some((f) => entry2.basename === f);
-  }
-  return emptyFn;
-};
-var ReaddirpStream = class extends import_node_stream2.Readable {
-  constructor(options = {}) {
-    super({
-      objectMode: true,
-      autoDestroy: true,
-      highWaterMark: options.highWaterMark
+var SUPERVISE_POLL_MS = 3e3;
+var SUPERVISE_RESPAWN_ENV = "FLOLESS_SUPERVISE_RESPAWNED";
+async function cmdSupervise() {
+  const isSeaChannel = /flolessapp\.exe$/i.test(process.execPath);
+  if (isSeaChannel && !process.env[SUPERVISE_RESPAWN_ENV]) {
+    rotateLog();
+    const fd = openLogFd();
+    const child = (0, import_node_child_process5.spawn)(process.execPath, ["--supervise"], {
+      detached: true,
+      stdio: fd == null ? "ignore" : ["ignore", fd, fd],
+      windowsHide: true,
+      env: { ...process.env, [SUPERVISE_RESPAWN_ENV]: "1" }
     });
-    const opts = { ...defaultOptions, ...options };
-    const { root, type } = opts;
-    this._fileFilter = normalizeFilter(opts.fileFilter);
-    this._directoryFilter = normalizeFilter(opts.directoryFilter);
-    const statMethod = opts.lstat ? import_promises2.lstat : import_promises2.stat;
-    if (wantBigintFsStats) {
-      this._stat = (path) => statMethod(path, { bigint: true });
-    } else {
-      this._stat = statMethod;
+    child.unref();
+    log("supervisor re-spawned detached");
+    return;
+  }
+  log("supervisor up \u2014 keeping the server alive");
+  for (; ; ) {
+    if (!await ping()) {
+      log("server not responding \u2014 (re)starting");
+      startServerDetached();
+      log(await waitHealthy() ? "server up" : "server not healthy yet \u2014 will retry");
     }
-    this._maxDepth = opts.depth ?? defaultOptions.depth;
-    this._wantsDir = type ? DIR_TYPES.has(type) : false;
-    this._wantsFile = type ? FILE_TYPES.has(type) : false;
-    this._wantsEverything = type === EntryTypes.EVERYTHING_TYPE;
-    this._root = (0, import_node_path14.resolve)(root);
-    this._isDirent = !opts.alwaysStat;
-    this._statsProp = this._isDirent ? "dirent" : "stats";
-    this._rdOptions = { encoding: "utf8", withFileTypes: this._isDirent };
-    this.parents = [this._exploreDir(root, 1)];
-    this.reading = false;
-    this.parent = void 0;
+    await new Promise((r) => setTimeout(r, SUPERVISE_POLL_MS));
   }
-  async _read(batch) {
-    if (this.reading)
+}
+async function cmdStop() {
+  if (!stopServer()) {
+    log("not running \u2014 nothing to stop");
+    return;
+  }
+  log(`stopping server on port ${PORT}\u2026`);
+  for (let i = 0; i < 10; i++) {
+    if (!await ping()) {
+      log("stopped");
       return;
-    this.reading = true;
-    try {
-      while (!this.destroyed && batch > 0) {
-        const par = this.parent;
-        const fil = par && par.files;
-        if (fil && fil.length > 0) {
-          const { path, depth } = par;
-          const slice = fil.splice(0, batch).map((dirent) => this._formatEntry(dirent, path));
-          const awaited = await Promise.all(slice);
-          for (const entry2 of awaited) {
-            if (!entry2)
-              continue;
-            if (this.destroyed)
-              return;
-            const entryType = await this._getEntryType(entry2);
-            if (entryType === "directory" && this._directoryFilter(entry2)) {
-              if (depth <= this._maxDepth) {
-                this.parents.push(this._exploreDir(entry2.fullPath, depth + 1));
-              }
-              if (this._wantsDir) {
-                this.push(entry2);
-                batch--;
-              }
-            } else if ((entryType === "file" || this._includeAsFile(entry2)) && this._fileFilter(entry2)) {
-              if (this._wantsFile) {
-                this.push(entry2);
-                batch--;
-              }
-            }
-          }
-        } else {
-          const parent = this.parents.pop();
-          if (!parent) {
-            this.push(null);
-            break;
-          }
-          this.parent = await parent;
-          if (this.destroyed)
-            return;
-        }
-      }
-    } catch (error) {
-      this.destroy(error);
-    } finally {
-      this.reading = false;
     }
+    await new Promise((r) => setTimeout(r, 300));
   }
-  async _exploreDir(path, depth) {
-    let files;
-    try {
-      files = await (0, import_promises2.readdir)(path, this._rdOptions);
-    } catch (error) {
-      this._onError(error);
-    }
-    return { files, depth, path };
+  log("warning: a process may still be holding the port");
+}
+function parseTeardownFlags(argv = []) {
+  return {
+    purge: argv.includes("--purge"),
+    keepAware: argv.includes("--keep-aware")
+  };
+}
+function parseProcessList(json) {
+  let parsed;
+  try {
+    parsed = JSON.parse(json || "[]");
+  } catch {
+    return [];
   }
-  async _formatEntry(dirent, path) {
-    let entry2;
-    const basename5 = this._isDirent ? dirent.name : dirent;
+  const arr = Array.isArray(parsed) ? parsed : [parsed];
+  return arr.filter((p) => p && p.ProcessId != null).map((p) => ({ pid: Number(p.ProcessId), cmd: String(p.CommandLine ?? "") }));
+}
+function enumerateProcesses() {
+  if (!isWin2) return [];
+  try {
+    const ps = "Get-CimInstance Win32_Process | Select-Object ProcessId,CommandLine | ConvertTo-Json -Compress";
+    const out = (0, import_node_child_process5.execSync)(`powershell -NoProfile -Command "${ps}"`, {
+      encoding: "utf8",
+      windowsHide: true,
+      maxBuffer: 16 * 1024 * 1024
+    });
+    return parseProcessList(out);
+  } catch {
+    return [];
+  }
+}
+function taskkillArgs(pid, { tree = true } = {}) {
+  return tree ? ["/PID", String(pid), "/T", "/F"] : ["/PID", String(pid), "/F"];
+}
+function killSupervisor({ tree = true } = {}) {
+  if (!isWin2) return;
+  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path13.basename)(process.execPath));
+  const scriptMatch = isNpmChannel ? (0, import_node_path13.basename)((0, import_node_url.fileURLToPath)(__import_meta_url)) : void 0;
+  const realExe = resolveRealInstallExe(process.execPath);
+  const exeMatch = realExe === process.execPath ? process.execPath : [process.execPath, realExe];
+  const pids = supervisorPidsToKill(enumerateProcesses(), process.pid, exeMatch, scriptMatch);
+  for (const pid of pids) {
+    log(`stopping supervisor (pid ${pid})\u2026`);
     try {
-      const fullPath = (0, import_node_path14.resolve)((0, import_node_path14.join)(path, basename5));
-      entry2 = { path: (0, import_node_path14.relative)(this._root, fullPath), fullPath, basename: basename5 };
-      entry2[this._statsProp] = this._isDirent ? dirent : await this._stat(fullPath);
-    } catch (err) {
-      this._onError(err);
-      return;
+      (0, import_node_child_process5.execFileSync)("taskkill", taskkillArgs(pid, { tree }), { stdio: "ignore", windowsHide: true });
+    } catch {
     }
-    return entry2;
   }
-  _onError(err) {
-    if (isNormalFlowError(err) && !this.destroyed) {
-      this.emit("warn", err);
+}
+async function cmdTeardown() {
+  killSupervisor();
+  stopServer();
+  const deadline = Date.now() + 3e3;
+  while (Date.now() < deadline) {
+    await new Promise((r) => setTimeout(r, 300));
+    if (await ping()) {
+      log("server respawned after kill \u2014 re-killing supervisor and stopping again");
+      killSupervisor();
+      stopServer();
+    }
+  }
+  if (await ping()) log("warning: a process may still be holding the port");
+  else log("server and supervisor stopped");
+}
+async function cmdRestart() {
+  await cmdStop();
+  await new Promise((r) => setTimeout(r, 500));
+  await cmdOpen();
+}
+function apiJson(path, method = "GET") {
+  return new Promise((resolve4, reject) => {
+    const req = import_node_http.default.request(`http://127.0.0.1:${PORT}${path}`, { method, timeout: 5e3 }, (res) => {
+      let body = "";
+      res.on("data", (c) => body += c);
+      res.on("end", () => {
+        try {
+          resolve4(JSON.parse(body || "{}"));
+        } catch {
+          resolve4({});
+        }
+      });
+    });
+    req.on("error", reject);
+    req.on("timeout", () => {
+      req.destroy();
+      reject(new Error("timeout"));
+    });
+    req.end();
+  });
+}
+async function cmdLogin() {
+  if (!await ping()) {
+    log("starting server\u2026");
+    startServerDetached();
+    if (!await waitHealthy()) {
+      log('server did not start \u2014 try "npm run dev" to see errors');
+      process.exit(1);
+    }
+  }
+  const started = await apiJson("/api/license/start", "POST").catch(() => ({}));
+  log(`opening sign-in in your browser${started.signInUrl ? `: ${started.signInUrl}` : ""}`);
+  log("waiting for sign-in to complete\u2026");
+  const deadline = Date.now() + 185e3;
+  while (Date.now() < deadline) {
+    const s = await apiJson("/api/license/status").catch(() => ({}));
+    if (s.state === "valid" || s.state === "offline-grace") {
+      log("signed in \u2014 subscription active");
+      return;
+    }
+    if (s.state === "expired") {
+      log(`signed in, but the subscription is expired \u2014 subscribe at ${s.signInUrl ?? "floless.io"}`);
+      return;
+    }
+    await new Promise((r) => setTimeout(r, 2e3));
+  }
+  log('sign-in timed out \u2014 run "floless login" again to retry');
+}
+function parseAction(arg) {
+  let cmd = (arg || "open").toLowerCase();
+  if (cmd.startsWith("floless:")) {
+    try {
+      cmd = (new URL(arg).hostname || "open").toLowerCase();
+    } catch {
+      cmd = "open";
+    }
+  }
+  return cmd;
+}
+async function cmdUpdate() {
+  log('this is the npm build \u2014 update it with "npm i -g @floless/app"');
+  log('(the installer build self-updates via "floless-app update")');
+}
+function removeRegistryFootprint() {
+  if (!isWin2) return;
+  try {
+    (0, import_node_child_process5.execFileSync)("reg", ["delete", RUN_KEY, "/v", RUN_VALUE, "/f"], { stdio: "ignore", windowsHide: true });
+  } catch {
+  }
+  try {
+    (0, import_node_child_process5.execFileSync)("reg", ["delete", PROTOCOL_KEY, "/f"], { stdio: "ignore", windowsHide: true });
+  } catch {
+  }
+}
+function promptYesNo(question) {
+  return new Promise((resolve4) => {
+    const rl = (0, import_node_readline.createInterface)({ input: process.stdin, output: process.stdout });
+    rl.question(`${question} `, (answer) => {
+      rl.close();
+      resolve4(/^y(es)?$/i.test((answer ?? "").trim()));
+    });
+  });
+}
+async function cmdUninstall(flags = {}) {
+  const decision = teardownDecision({ ...flags, isTTY: process.stdin.isTTY });
+  log("stopping the server and supervisor\u2026");
+  await cmdTeardown();
+  log("removing the autostart entry and floless:// scheme\u2026");
+  removeRegistryFootprint();
+  let removeAware = decision.removeAware;
+  if (decision.prompt) {
+    removeAware = await promptYesNo("Also remove the AWARE runtime (@aware-aeco/cli)? [y/N]");
+  }
+  if (removeAware) {
+    log("removing the AWARE runtime \u2014 this will affect ANY other tool that uses @aware-aeco/cli.");
+    try {
+      (0, import_node_child_process5.execSync)("npm uninstall -g @aware-aeco/cli", { stdio: "inherit", shell: isWin2 });
+    } catch {
+      log('warning: "npm uninstall -g @aware-aeco/cli" failed \u2014 see the output above.');
+    }
+    let lsJson = "";
+    try {
+      lsJson = (0, import_node_child_process5.execSync)("npm ls -g @aware-aeco/cli --depth=0 --json", {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+        shell: isWin2
+      });
+    } catch (err) {
+      lsJson = String(err?.stdout ?? "");
+    }
+    const stillPresent = awareIsPresent(lsJson);
+    if (stillPresent) {
+      log("AWARE may still be installed \u2014 remove it manually with: npm uninstall -g @aware-aeco/cli");
+      log("(if that fails with a permission error, retry in an elevated shell).");
+    } else {
+      log("AWARE runtime removed.");
+    }
+  } else {
+    log("keeping the AWARE runtime (@aware-aeco/cli). Remove it later with: npm uninstall -g @aware-aeco/cli");
+  }
+  log("done. Finally, remove floless.app itself with: npm uninstall -g @floless/app");
+}
+var ACTIONS = { open: cmdOpen, start: cmdStart, supervise: cmdSupervise, stop: cmdStop, restart: cmdRestart, login: cmdLogin, update: cmdUpdate, uninstall: cmdUninstall };
+async function runAction(arg, flagArgv = [], selfVersion = null) {
+  _selfVersion = selfVersion;
+  const cmd = parseAction(arg);
+  const action = ACTIONS[cmd];
+  if (!action) {
+    log(`unknown command "${cmd}" \u2014 use: open | start | supervise | stop | restart | login | update | uninstall`);
+    process.exit(2);
+  }
+  await action(parseTeardownFlags(flagArgv));
+}
+var entry = (0, import_node_path13.basename)(process.argv[1] ?? "").toLowerCase();
+if (entry === "launch.mjs") {
+  runAction(process.argv[2], process.argv.slice(3)).catch((e) => {
+    log(`error: ${e?.message ?? e}`);
+    process.exit(1);
+  });
+}
+
+// aware-update.ts
+var REGISTRY_LATEST = "https://registry.npmjs.org/@aware-aeco/cli/latest";
+var FEED_TIMEOUT_MS2 = 15e3;
+var VERSION_TTL_MS = 5e3;
+var _v = null;
+function awareInstalledVersion(probe = aware.npmVersion) {
+  const now = Date.now();
+  if (_v && now - _v.at < VERSION_TTL_MS) return _v.val;
+  _v = { at: now, val: probe() };
+  return _v.val;
+}
+function invalidateAwareVersion() {
+  _v = null;
+}
+function versionGt2(a, b) {
+  const pa = a.split(".").map((n) => parseInt(n, 10) || 0);
+  const pb = b.split(".").map((n) => parseInt(n, 10) || 0);
+  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+    const d = (pa[i] ?? 0) - (pb[i] ?? 0);
+    if (d !== 0) return d > 0;
+  }
+  return false;
+}
+function decideAwareUpdate(cur, latest) {
+  const base = { supported: true, currentVersion: cur };
+  if (!latest) return { ...base, updateAvailable: false, reason: "could not read the npm registry latest" };
+  if (!cur) return { ...base, updateAvailable: false, targetVersion: latest, reason: "AWARE not installed yet" };
+  if (versionGt2(latest, cur)) return { ...base, updateAvailable: true, targetVersion: latest };
+  return { ...base, updateAvailable: false, targetVersion: latest, reason: `already up to date (v${cur})` };
+}
+async function fetchAwareLatest() {
+  try {
+    const res = await fetch(REGISTRY_LATEST, { redirect: "follow", signal: AbortSignal.timeout(FEED_TIMEOUT_MS2) });
+    if (!res.ok) return null;
+    const body = await res.json();
+    return typeof body.version === "string" ? body.version : null;
+  } catch {
+    return null;
+  }
+}
+async function checkAwareUpdate() {
+  const cur = awareInstalledVersion();
+  const latest = await fetchAwareLatest();
+  return decideAwareUpdate(cur, latest);
+}
+async function applyAwareUpdate(deps) {
+  try {
+    await deps.install("latest");
+    deps.refresh();
+    invalidateAwareVersion();
+    return { ok: true, version: deps.probe() };
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+function awareApplyDeps(install) {
+  return { install, refresh: refreshInvoker, probe: aware.npmVersion };
+}
+function awareUpgradeBlockReason(s) {
+  if (s.bootstrapInstalling || s.installInFlight) return "an AWARE install is already in progress \u2014 try again in a moment";
+  if (s.runActive) return "a workflow run is in progress \u2014 wait for it to finish before upgrading AWARE";
+  if (s.hostWatcherActive) return "a live trigger/watch session is using the host \u2014 stop it before upgrading AWARE";
+  return null;
+}
+
+// skill-sync.ts
+var import_node_fs16 = require("node:fs");
+var import_node_os9 = require("node:os");
+var import_node_path14 = require("node:path");
+var import_node_url2 = require("node:url");
+var import_yaml5 = __toESM(require_dist6(), 1);
+
+// build/ship-skills.mjs
+var PRODUCT_SKILLS = [
+  "floless-app-bridge",
+  //     drive the floless.app CLI / desktop bridge from the user's AI
+  "floless-app-onboarding",
+  // guided, re-runnable tour of AWARE + floless.app for new users
+  "floless-app-routines",
+  //   author event-driven ("on trigger") routines
+  "floless-app-workflows"
+  //  author/run .flo workflows
+];
+function selectShippedSkillNames(names) {
+  const present = new Set(names);
+  return PRODUCT_SKILLS.filter((name) => present.has(name));
+}
+
+// skill-sync.ts
+var __dirname3 = (0, import_node_path14.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
+function bundledSkillsRoot() {
+  const candidates = [
+    (0, import_node_path14.join)(__dirname3, "skills"),
+    (0, import_node_path14.join)((0, import_node_path14.dirname)(process.execPath), "skills"),
+    (0, import_node_path14.join)(__dirname3, "..", ".claude", "skills")
+  ];
+  return candidates.find((p) => (0, import_node_fs16.existsSync)(p)) ?? null;
+}
+function targetConfigDirs() {
+  const override = process.env.FLOLESS_SKILL_TARGETS;
+  if (override) {
+    return override.split(";").map((d) => d.trim()).filter(Boolean).map((dir) => ({ runtime: "custom", dir }));
+  }
+  const home = (0, import_node_os9.homedir)();
+  return [
+    { runtime: "claude", dir: (0, import_node_path14.join)(home, ".claude") },
+    { runtime: "codex", dir: (0, import_node_path14.join)(home, ".codex") },
+    { runtime: "opencode", dir: (0, import_node_path14.join)(home, ".opencode") }
+  ];
+}
+function skillVersion(skillMdPath) {
+  try {
+    const text = (0, import_node_fs16.readFileSync)(skillMdPath, "utf8");
+    const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(text);
+    if (!m || m[1] === void 0) return null;
+    const fm = (0, import_yaml5.parse)(m[1]);
+    const meta = fm?.metadata;
+    const v = meta?.version;
+    return typeof v === "string" || typeof v === "number" ? String(v) : null;
+  } catch {
+    return null;
+  }
+}
+function compareVersions(a, b) {
+  const split = (v) => {
+    const dash = v.indexOf("-");
+    const core = dash >= 0 ? v.slice(0, dash) : v;
+    const pre = dash >= 0 ? v.slice(dash + 1) : "";
+    return { nums: core.split(".").map((s) => parseInt(s, 10) || 0), pre };
+  };
+  const pa = split(a);
+  const pb = split(b);
+  const n = Math.max(pa.nums.length, pb.nums.length);
+  for (let i = 0; i < n; i++) {
+    const d = (pa.nums[i] ?? 0) - (pb.nums[i] ?? 0);
+    if (d !== 0) return d > 0 ? 1 : -1;
+  }
+  if (pa.pre === pb.pre) return 0;
+  if (pa.pre === "") return 1;
+  if (pb.pre === "") return -1;
+  return pa.pre < pb.pre ? -1 : 1;
+}
+function decideAction(installed, bundled) {
+  if (installed === null) return "installed";
+  const c = compareVersions(bundled, installed);
+  if (c > 0) return "updated";
+  if (c === 0) return "skipped-current";
+  return "skipped-newer";
+}
+function bundledSkills(root) {
+  let entries = [];
+  try {
+    entries = selectShippedSkillNames((0, import_node_fs16.readdirSync)(root));
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const name of entries) {
+    const dir = (0, import_node_path14.join)(root, name);
+    let isDir = false;
+    try {
+      isDir = (0, import_node_fs16.statSync)(dir).isDirectory();
+    } catch {
+      isDir = false;
+    }
+    if (!isDir) continue;
+    const v = skillVersion((0, import_node_path14.join)(dir, "SKILL.md"));
+    if (!v) continue;
+    out.push({ name, dir, version: v });
+  }
+  return out;
+}
+function syncSkills() {
+  const results = [];
+  const root = bundledSkillsRoot();
+  if (!root) return results;
+  const skills = bundledSkills(root);
+  if (!skills.length) return results;
+  for (const { runtime, dir: cfg } of targetConfigDirs()) {
+    if (!(0, import_node_fs16.existsSync)(cfg)) continue;
+    const skillsDir = (0, import_node_path14.join)(cfg, "skills");
+    for (const s of skills) {
+      const dest = (0, import_node_path14.join)(skillsDir, s.name);
+      const installedMd = (0, import_node_path14.join)(dest, "SKILL.md");
+      const installed = (0, import_node_fs16.existsSync)(installedMd) ? skillVersion(installedMd) : null;
+      const action = decideAction(installed, s.version);
+      if (action === "installed" || action === "updated") {
+        try {
+          if (action === "updated") (0, import_node_fs16.rmSync)(dest, { recursive: true, force: true });
+          (0, import_node_fs16.cpSync)(s.dir, dest, { recursive: true });
+          results.push({ runtime, skill: s.name, action, from: installed, to: s.version });
+        } catch {
+        }
+      } else {
+        results.push({ runtime, skill: s.name, action, from: installed, to: s.version });
+      }
+    }
+  }
+  return results;
+}
+
+// watch.ts
+var import_node_os10 = require("node:os");
+var import_node_path16 = require("node:path");
+var import_node_fs17 = require("node:fs");
+
+// node_modules/chokidar/esm/index.js
+var import_fs2 = require("fs");
+var import_promises4 = require("fs/promises");
+var import_events = require("events");
+var sysPath2 = __toESM(require("path"), 1);
+
+// node_modules/readdirp/esm/index.js
+var import_promises2 = require("node:fs/promises");
+var import_node_stream2 = require("node:stream");
+var import_node_path15 = require("node:path");
+var EntryTypes = {
+  FILE_TYPE: "files",
+  DIR_TYPE: "directories",
+  FILE_DIR_TYPE: "files_directories",
+  EVERYTHING_TYPE: "all"
+};
+var defaultOptions = {
+  root: ".",
+  fileFilter: (_entryInfo) => true,
+  directoryFilter: (_entryInfo) => true,
+  type: EntryTypes.FILE_TYPE,
+  lstat: false,
+  depth: 2147483648,
+  alwaysStat: false,
+  highWaterMark: 4096
+};
+Object.freeze(defaultOptions);
+var RECURSIVE_ERROR_CODE = "READDIRP_RECURSIVE_ERROR";
+var NORMAL_FLOW_ERRORS = /* @__PURE__ */ new Set(["ENOENT", "EPERM", "EACCES", "ELOOP", RECURSIVE_ERROR_CODE]);
+var ALL_TYPES = [
+  EntryTypes.DIR_TYPE,
+  EntryTypes.EVERYTHING_TYPE,
+  EntryTypes.FILE_DIR_TYPE,
+  EntryTypes.FILE_TYPE
+];
+var DIR_TYPES = /* @__PURE__ */ new Set([
+  EntryTypes.DIR_TYPE,
+  EntryTypes.EVERYTHING_TYPE,
+  EntryTypes.FILE_DIR_TYPE
+]);
+var FILE_TYPES = /* @__PURE__ */ new Set([
+  EntryTypes.EVERYTHING_TYPE,
+  EntryTypes.FILE_DIR_TYPE,
+  EntryTypes.FILE_TYPE
+]);
+var isNormalFlowError = (error) => NORMAL_FLOW_ERRORS.has(error.code);
+var wantBigintFsStats = process.platform === "win32";
+var emptyFn = (_entryInfo) => true;
+var normalizeFilter = (filter) => {
+  if (filter === void 0)
+    return emptyFn;
+  if (typeof filter === "function")
+    return filter;
+  if (typeof filter === "string") {
+    const fl = filter.trim();
+    return (entry2) => entry2.basename === fl;
+  }
+  if (Array.isArray(filter)) {
+    const trItems = filter.map((item) => item.trim());
+    return (entry2) => trItems.some((f) => entry2.basename === f);
+  }
+  return emptyFn;
+};
+var ReaddirpStream = class extends import_node_stream2.Readable {
+  constructor(options = {}) {
+    super({
+      objectMode: true,
+      autoDestroy: true,
+      highWaterMark: options.highWaterMark
+    });
+    const opts = { ...defaultOptions, ...options };
+    const { root, type } = opts;
+    this._fileFilter = normalizeFilter(opts.fileFilter);
+    this._directoryFilter = normalizeFilter(opts.directoryFilter);
+    const statMethod = opts.lstat ? import_promises2.lstat : import_promises2.stat;
+    if (wantBigintFsStats) {
+      this._stat = (path) => statMethod(path, { bigint: true });
+    } else {
+      this._stat = statMethod;
+    }
+    this._maxDepth = opts.depth ?? defaultOptions.depth;
+    this._wantsDir = type ? DIR_TYPES.has(type) : false;
+    this._wantsFile = type ? FILE_TYPES.has(type) : false;
+    this._wantsEverything = type === EntryTypes.EVERYTHING_TYPE;
+    this._root = (0, import_node_path15.resolve)(root);
+    this._isDirent = !opts.alwaysStat;
+    this._statsProp = this._isDirent ? "dirent" : "stats";
+    this._rdOptions = { encoding: "utf8", withFileTypes: this._isDirent };
+    this.parents = [this._exploreDir(root, 1)];
+    this.reading = false;
+    this.parent = void 0;
+  }
+  async _read(batch) {
+    if (this.reading)
+      return;
+    this.reading = true;
+    try {
+      while (!this.destroyed && batch > 0) {
+        const par = this.parent;
+        const fil = par && par.files;
+        if (fil && fil.length > 0) {
+          const { path, depth } = par;
+          const slice = fil.splice(0, batch).map((dirent) => this._formatEntry(dirent, path));
+          const awaited = await Promise.all(slice);
+          for (const entry2 of awaited) {
+            if (!entry2)
+              continue;
+            if (this.destroyed)
+              return;
+            const entryType = await this._getEntryType(entry2);
+            if (entryType === "directory" && this._directoryFilter(entry2)) {
+              if (depth <= this._maxDepth) {
+                this.parents.push(this._exploreDir(entry2.fullPath, depth + 1));
+              }
+              if (this._wantsDir) {
+                this.push(entry2);
+                batch--;
+              }
+            } else if ((entryType === "file" || this._includeAsFile(entry2)) && this._fileFilter(entry2)) {
+              if (this._wantsFile) {
+                this.push(entry2);
+                batch--;
+              }
+            }
+          }
+        } else {
+          const parent = this.parents.pop();
+          if (!parent) {
+            this.push(null);
+            break;
+          }
+          this.parent = await parent;
+          if (this.destroyed)
+            return;
+        }
+      }
+    } catch (error) {
+      this.destroy(error);
+    } finally {
+      this.reading = false;
+    }
+  }
+  async _exploreDir(path, depth) {
+    let files;
+    try {
+      files = await (0, import_promises2.readdir)(path, this._rdOptions);
+    } catch (error) {
+      this._onError(error);
+    }
+    return { files, depth, path };
+  }
+  async _formatEntry(dirent, path) {
+    let entry2;
+    const basename5 = this._isDirent ? dirent.name : dirent;
+    try {
+      const fullPath = (0, import_node_path15.resolve)((0, import_node_path15.join)(path, basename5));
+      entry2 = { path: (0, import_node_path15.relative)(this._root, fullPath), fullPath, basename: basename5 };
+      entry2[this._statsProp] = this._isDirent ? dirent : await this._stat(fullPath);
+    } catch (err) {
+      this._onError(err);
+      return;
+    }
+    return entry2;
+  }
+  _onError(err) {
+    if (isNormalFlowError(err) && !this.destroyed) {
+      this.emit("warn", err);
     } else {
       this.destroy(err);
     }
@@ -54129,7 +54535,7 @@ var ReaddirpStream = class extends import_node_stream2.Readable {
         }
         if (entryRealPathStats.isDirectory()) {
           const len = entryRealPath.length;
-          if (full.startsWith(entryRealPath) && full.substr(len, 1) === import_node_path14.sep) {
+          if (full.startsWith(entryRealPath) && full.substr(len, 1) === import_node_path15.sep) {
             const recursiveError = new Error(`Circular symlink detected: "${full}" points to "${entryRealPath}"`);
             recursiveError.code = RECURSIVE_ERROR_CODE;
             return this._onError(recursiveError);
@@ -55614,1081 +56020,684 @@ var FSWatcher = class extends import_events.EventEmitter {
     stream.once(STR_CLOSE, () => {
       stream = void 0;
     });
-    stream.once(STR_END, () => {
-      if (stream) {
-        this._streams.delete(stream);
-        stream = void 0;
-      }
-    });
-    return stream;
-  }
-};
-function watch(paths, options = {}) {
-  const watcher = new FSWatcher(options);
-  watcher.add(paths);
-  return watcher;
-}
-var esm_default = { watch, FSWatcher };
-
-// watch.ts
-function appIdFromLogPath(path) {
-  const parts = path.split(/[\\/]/);
-  const i = parts.lastIndexOf("logs");
-  return i >= 0 && parts[i + 1] ? parts[i + 1] : null;
-}
-function startWatcher() {
-  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path15.join)((0, import_node_os10.homedir)(), ".aware");
-  const credentialsDir = (0, import_node_path15.join)(awareDir, "credentials");
-  if (!(0, import_node_fs16.existsSync)(credentialsDir)) {
-    try {
-      (0, import_node_fs16.mkdirSync)(credentialsDir, { recursive: true });
-    } catch {
-    }
-  }
-  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path15.join)(awareDir, d)).filter((p) => (0, import_node_fs16.existsSync)(p));
-  if (targets.length === 0) {
-    return null;
-  }
-  const watcher = esm_default.watch(targets, {
-    ignoreInitial: true,
-    awaitWriteFinish: { stabilityThreshold: 150, pollInterval: 50 }
-  });
-  watcher.on("all", (event, path) => {
-    const isCredential = path.split(/[\\/]/).includes("credentials");
-    const kind = isCredential ? "credential" : path.endsWith(".jsonl") ? "trace" : path.endsWith(".lock") ? "lock" : path.endsWith(".flo") || path.endsWith(".app") ? "source" : "file";
-    broadcast({ type: "fs-change", kind, event, path });
-    if (kind === "trace" && event !== "unlink" && (0, import_node_fs16.existsSync)(path)) {
-      const id = appIdFromLogPath(path);
-      if (!id) return;
-      try {
-        broadcast({ type: "trace-file", id, runId: path.split(import_node_path15.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs16.readFileSync)(path, "utf8")) });
-      } catch {
-      }
-    }
-  });
-  return { close: () => watcher.close() };
-}
-
-// index.ts
-var __dirname3 = (0, import_node_path16.dirname)((0, import_node_url2.fileURLToPath)(__import_meta_url));
-var WEB_ROOT = [(0, import_node_path16.join)(__dirname3, "web"), (0, import_node_path16.join)((0, import_node_path16.dirname)(process.execPath), "web"), (0, import_node_path16.join)(__dirname3, "..", "web")].find(
-  (p) => (0, import_node_fs17.existsSync)(p)
-) ?? (0, import_node_path16.join)(__dirname3, "..", "web");
-var PORT = Number(process.env.PORT ?? 4317);
-var HOST = "127.0.0.1";
-function extractReportHtml(events) {
-  let found = null;
-  for (const ev of events) {
-    const data = ev?.data;
-    if (!data || typeof data !== "object") continue;
-    const result = data.result;
-    const html = typeof data.html === "string" ? data.html : result && typeof result.html === "string" ? result.html : null;
-    if (html) found = { nodeId: ev.node ?? null, html };
-  }
-  return found;
-}
-var crashHandlersInstalled = false;
-function installCrashHandlers() {
-  if (crashHandlersInstalled) return;
-  crashHandlersInstalled = true;
-  ensureLogDir();
-  rotateLog();
-  const record = (kind, err) => {
-    const stack = err instanceof Error && err.stack ? err.stack : String(err);
-    const line = `
-[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind}
-${stack}
-`;
-    try {
-      (0, import_node_fs17.appendFileSync)(logFilePath(), line);
-    } catch {
-    }
-    if (process.stderr.isTTY) process.stderr.write(line);
-  };
-  process.on("uncaughtException", (err) => {
-    record("uncaughtException", err);
-    process.exit(1);
-  });
-  process.on("unhandledRejection", (reason) => {
-    record("unhandledRejection", reason);
-    process.exit(1);
-  });
-}
-async function startServer() {
-  installCrashHandlers();
-  const logger = true ? true : { transport: { target: "pino-pretty" } };
-  const app = (0, import_fastify.default)({ logger });
-  app.addContentTypeParser("application/json", { parseAs: "string" }, (_req, body, done) => {
-    const s = body ?? "";
-    if (s.trim() === "") {
-      done(null, {});
-      return;
-    }
-    try {
-      done(null, JSON.parse(s));
-    } catch (err) {
-      done(err);
-    }
-  });
-  await app.register(import_static.default, { root: WEB_ROOT, prefix: "/" });
-  const MIN_AWARE = "0.51.0";
-  const isWin3 = process.platform === "win32";
-  const has = (cmd) => {
-    try {
-      (0, import_node_child_process5.execFileSync)(isWin3 ? "where" : "which", [cmd], { stdio: "ignore" });
-      return true;
-    } catch {
-      return false;
-    }
-  };
-  function installAwareGlobal(spec, onLine = () => {
-  }) {
-    return new Promise((resolve4, reject) => {
-      const child = (0, import_node_child_process5.spawn)("npm", ["i", "-g", `@aware-aeco/cli@${spec}`], { shell: isWin3, windowsHide: true });
-      let stderrTail = "";
-      let combinedTail = "";
-      const tail = (buf, s) => (buf + s).slice(-4e3);
-      child.stdout.on("data", (d) => {
-        const s = d.toString();
-        combinedTail = tail(combinedTail, s);
-        onLine(s.trimEnd());
-      });
-      child.stderr.on("data", (d) => {
-        const s = d.toString();
-        stderrTail = tail(stderrTail, s);
-        combinedTail = tail(combinedTail, s);
-        onLine(s.trimEnd());
-      });
-      child.on("error", (e) => reject(e));
-      child.on("close", (code) => code === 0 ? resolve4() : reject(new Error(`npm exited ${code}: ${stderrTail || combinedTail}`)));
-    });
-  }
-  const bootstrapDeps = {
-    probeToolchain: () => ({ hasNode: has("node"), hasNpm: has("npm") }),
-    getAware: () => {
-      const v = aware.npmVersion();
-      return { installed: v !== null, version: v };
-    },
-    installAware: installAwareGlobal,
-    smoke: () => aware.smoke(),
-    refreshInvoker,
-    emit: broadcast,
-    floor: MIN_AWARE,
-    skip: process.env.AWARE_SKIP_BOOTSTRAP === "1"
-  };
-  app.setErrorHandler((err, _req, reply) => {
-    if (err instanceof AppNotFoundError) {
-      return reply.status(404).send({ ok: false, error: err.message });
-    }
-    if (err instanceof RoutineError) {
-      return reply.status(err.status).send({ ok: false, error: err.message });
-    }
-    if (err instanceof AwareError) {
-      app.log.warn({ detail: err.detail }, err.message);
-      return reply.status(502).send({ ok: false, error: err.message, detail: err.detail ?? null });
-    }
-    app.log.error(err);
-    return reply.status(500).send({ ok: false, error: err.message });
-  });
-  const SELF_ORIGINS = /* @__PURE__ */ new Set([
-    `http://127.0.0.1:${PORT}`,
-    `http://localhost:${PORT}`,
-    `http://floless.localhost:${PORT}`
-    // branded address (browsers resolve *.localhost → 127.0.0.1)
-  ]);
-  app.addHook("onRequest", async (req, reply) => {
-    if (!req.url.startsWith("/api/")) return;
-    const origin = req.headers.origin;
-    if (origin && !SELF_ORIGINS.has(origin)) {
-      return reply.status(403).send({ ok: false, error: "cross-origin request rejected" });
-    }
-  });
-  app.addHook("onRequest", async (req, reply) => {
-    if (!req.url.startsWith("/api/")) return;
-    if (req.url.startsWith("/api/health") || req.url.startsWith("/api/license/") || req.url.startsWith("/api/bootstrap/") || req.url.startsWith("/api/autostart") || req.url.startsWith("/api/update") || req.url.startsWith("/api/aware/update")) return;
-    const { state: state2, signInUrl: signInUrl2 } = await getLicenseStatus();
-    if (state2 !== "valid" && state2 !== "offline-grace") {
-      return reply.status(402).send({ ok: false, error: "subscription required", state: state2, signInUrl: signInUrl2 });
-    }
-  });
-  app.addHook("onRequest", async (req, reply) => {
-    if (!isGatedAwareRoute(req.url, req.method)) return;
-    const st = getBootstrapState();
-    if (st.status === "ready") return;
-    if (st.status === "failed") return reply.status(503).send({ ok: false, error: "AWARE unavailable", bootstrap: st.status, reason: st.reason, remediation: st.remediation });
-    return reply.status(409).send({ ok: false, error: "AWARE is still setting up", bootstrap: st.status });
-  });
-  app.get("/api/health", async () => {
-    const bs = getBootstrapState();
-    return {
-      ok: true,
-      appVersion: appVersion(),
-      // the installed build (sq.version), so it's scriptable
-      awareVersion: awareInstalledVersion() ?? bs.awareVersion,
-      // fresh (TTL-cached) install version; the boot snapshot is only a fallback
-      awareReady: bs.awareReady,
-      bootstrap: bs.status,
-      bootstrapReason: bs.reason,
-      bootstrapRemediation: bs.remediation,
-      // UI maps reason→fixed copy; this is secondary dev context
-      sseClients: clientCount(),
-      license: (await getLicenseStatus()).state
-      // UI + launcher branch on this
-    };
-  });
-  app.get("/api/license/status", async () => ({ ok: true, ...await getLicenseStatus() }));
-  app.post("/api/license/start", async () => ({ ok: true, ...await startLogin() }));
-  app.post("/api/license/logout", async () => {
-    logout();
-    return { ok: true };
-  });
-  app.get("/api/autostart", async () => {
-    const supported = autostartSupported();
-    return { ok: true, supported, enabled: supported ? autostartPresent() : false };
-  });
-  app.put("/api/autostart", async (req, reply) => {
-    if (!autostartSupported()) return reply.send({ ok: true, supported: false, enabled: false });
-    if (typeof req.body?.enabled !== "boolean") {
-      return reply.status(400).send({ ok: false, error: "body { enabled: boolean } required" });
-    }
-    try {
-      if (req.body.enabled) registerAutostart(resolveRealInstallExe(process.execPath));
-      else unregisterAutostart();
-    } catch (err) {
-      return reply.status(500).send({ ok: false, error: err instanceof Error ? err.message : String(err) });
-    }
-    return { ok: true, supported: true, enabled: autostartPresent() };
-  });
-  app.get("/api/update", async () => {
-    return { ok: true, ...await checkForUpdate() };
-  });
-  app.post("/api/update/apply", async (_req, reply) => {
-    const check = await checkForUpdate();
-    if (!check.supported || !check.updateAvailable) {
-      return reply.status(409).send({ ok: false, ...check, error: check.reason ?? "no update available" });
-    }
-    const result = await applyUpdate(check);
-    if (!result.applied) return reply.status(500).send({ ok: false, error: result.message });
-    reply.send({ ok: true, ...result });
-    setTimeout(() => process.exit(0), 250);
-  });
-  app.get("/api/aware/update", async () => {
-    return { ok: true, ...await checkAwareUpdate() };
-  });
-  let awareInstallInFlight = false;
-  app.post("/api/aware/update/apply", async (_req, reply) => {
-    const block = awareUpgradeBlockReason({
-      bootstrapInstalling: getBootstrapState().status === "installing",
-      installInFlight: awareInstallInFlight,
-      runActive: isRunActive(),
-      hostWatcherActive: hostWatcherActive()
+    stream.once(STR_END, () => {
+      if (stream) {
+        this._streams.delete(stream);
+        stream = void 0;
+      }
     });
-    if (block) return reply.status(409).send({ ok: false, error: block });
-    awareInstallInFlight = true;
+    return stream;
+  }
+};
+function watch(paths, options = {}) {
+  const watcher = new FSWatcher(options);
+  watcher.add(paths);
+  return watcher;
+}
+var esm_default = { watch, FSWatcher };
+
+// watch.ts
+function appIdFromLogPath(path) {
+  const parts = path.split(/[\\/]/);
+  const i = parts.lastIndexOf("logs");
+  return i >= 0 && parts[i + 1] ? parts[i + 1] : null;
+}
+function startWatcher() {
+  const awareDir = process.env.AWARE_HOME ?? (0, import_node_path16.join)((0, import_node_os10.homedir)(), ".aware");
+  const credentialsDir = (0, import_node_path16.join)(awareDir, "credentials");
+  if (!(0, import_node_fs17.existsSync)(credentialsDir)) {
     try {
-      const res = await applyAwareUpdate(awareApplyDeps(installAwareGlobal));
-      if (!res.ok) return reply.status(409).send({ ok: false, error: res.error ?? "aware upgrade failed" });
-      return { ok: true, version: res.version };
-    } finally {
-      awareInstallInFlight = false;
-    }
-  });
-  app.post("/api/bootstrap/retry", async () => {
-    const st = getBootstrapState().status;
-    if (st === "failed" || st === "idle") {
-      void runBootstrap(bootstrapDeps);
+      (0, import_node_fs17.mkdirSync)(credentialsDir, { recursive: true });
+    } catch {
     }
-    return { ok: true, bootstrap: getBootstrapState().status };
-  });
-  onSeatLost((reason) => broadcast({ type: "seat-taken", reason }));
-  app.get("/api/apps", async () => {
-    const apps = await aware.list();
-    return { ok: true, apps: apps.map((a) => ({ ...a, provider: appProvider(a.id) })) };
-  });
-  app.get("/api/agents", async () => {
-    const agents = await aware.agentList();
-    return { ok: true, agents };
-  });
-  app.get("/api/agent/:id", async (req) => {
-    const agent = await aware.agentDescribe(req.params.id);
-    return { ok: true, agent };
+  }
+  const targets = ["apps", "logs", "credentials"].map((d) => (0, import_node_path16.join)(awareDir, d)).filter((p) => (0, import_node_fs17.existsSync)(p));
+  if (targets.length === 0) {
+    return null;
+  }
+  const watcher = esm_default.watch(targets, {
+    ignoreInitial: true,
+    awaitWriteFinish: { stabilityThreshold: 150, pollInterval: 50 }
   });
-  app.get("/api/integrations", async () => {
-    const integrations = listIntegrations();
-    try {
-      const live = await aware.connectList();
-      const byId = new Map(live.map((c) => [c.integration, c]));
-      for (const it of integrations) {
-        const c = byId.get(it.id);
-        if (!c) continue;
-        it.status = c.status === "valid" ? "connected" : c.status === "expired" ? "expired" : "disconnected";
-        it.expiresAt = c.expires_in_secs != null ? new Date(Date.now() + c.expires_in_secs * 1e3).toISOString() : it.expiresAt;
+  watcher.on("all", (event, path) => {
+    const isCredential = path.split(/[\\/]/).includes("credentials");
+    const kind = isCredential ? "credential" : path.endsWith(".jsonl") ? "trace" : path.endsWith(".lock") ? "lock" : path.endsWith(".flo") || path.endsWith(".app") ? "source" : "file";
+    broadcast({ type: "fs-change", kind, event, path });
+    if (kind === "trace" && event !== "unlink" && (0, import_node_fs17.existsSync)(path)) {
+      const id = appIdFromLogPath(path);
+      if (!id) return;
+      try {
+        broadcast({ type: "trace-file", id, runId: path.split(import_node_path16.sep).pop()?.replace(/\.jsonl$/, "") ?? null, events: parseTrace((0, import_node_fs17.readFileSync)(path, "utf8")) });
+      } catch {
       }
-    } catch (err) {
-      app.log.warn({ err: String(err) }, "aware connect --list unavailable; using file-based status");
     }
-    return { ok: true, integrations };
   });
-  const DEFAULT_CONNECT_FLOW = {};
-  app.post("/api/connect/:id", async (req) => {
-    const id = req.params.id;
-    const requested = req.body?.flow;
-    const flow = requested === "device-code" || requested === "oauth" ? requested : DEFAULT_CONNECT_FLOW[id] ?? "oauth";
-    if (flow === "device-code") {
-      const { prompt } = await aware.connectDeviceCode(id, (event) => {
-        if (event.phase === "result") {
-          broadcast({ type: "connect-result", id, status: event.status ?? "unknown", error: event.error ?? null });
-        }
-      });
-      return { ok: true, id, flow, prompt };
+  return { close: () => watcher.close() };
+}
+
+// index.ts
+var __dirname4 = (0, import_node_path17.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
+var WEB_ROOT = [(0, import_node_path17.join)(__dirname4, "web"), (0, import_node_path17.join)((0, import_node_path17.dirname)(process.execPath), "web"), (0, import_node_path17.join)(__dirname4, "..", "web")].find(
+  (p) => (0, import_node_fs18.existsSync)(p)
+) ?? (0, import_node_path17.join)(__dirname4, "..", "web");
+var PORT2 = Number(process.env.PORT ?? 4317);
+var HOST = "127.0.0.1";
+function extractReportHtml(events) {
+  let found = null;
+  for (const ev of events) {
+    const data = ev?.data;
+    if (!data || typeof data !== "object") continue;
+    const result = data.result;
+    const html = typeof data.html === "string" ? data.html : result && typeof result.html === "string" ? result.html : null;
+    if (html) found = { nodeId: ev.node ?? null, html };
+  }
+  return found;
+}
+var crashHandlersInstalled = false;
+function installCrashHandlers() {
+  if (crashHandlersInstalled) return;
+  crashHandlersInstalled = true;
+  ensureLogDir();
+  rotateLog();
+  const record = (kind, err) => {
+    const stack = err instanceof Error && err.stack ? err.stack : String(err);
+    const line = `
+[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind}
+${stack}
+`;
+    try {
+      (0, import_node_fs18.appendFileSync)(logFilePath(), line);
+    } catch {
     }
-    aware.connectOAuth(id, (result) => {
-      broadcast({
-        type: "connect-result",
-        id,
-        status: result.status === "connected" ? "connected" : "failed",
-        error: result.status === "connected" ? null : "sign-in failed or was cancelled"
-      });
-    });
-    return { ok: true, id, flow, started: true };
-  });
-  app.get("/api/app/:id", async (req) => {
-    return { ok: true, app: readApp(req.params.id) };
+    if (process.stderr.isTTY) process.stderr.write(line);
+  };
+  process.on("uncaughtException", (err) => {
+    record("uncaughtException", err);
+    process.exit(1);
   });
-  app.post("/api/compile", async (req, reply) => {
-    const { id, sourcePath } = req.body ?? {};
-    const path = sourcePath ?? (id ? readApp(id).source.path : void 0);
-    if (!path) return reply.status(400).send({ ok: false, error: "id or sourcePath required" });
-    const result = await aware.compile(path);
-    broadcast({ type: "compiled", id: id ?? null, lockPath: result.lockPath });
-    return { ok: true, result };
+  process.on("unhandledRejection", (reason) => {
+    record("unhandledRejection", reason);
+    process.exit(1);
   });
-  app.post("/api/bake", async (req, reply) => {
-    const { id } = req.body ?? {};
-    if (!id) return reply.status(400).send({ ok: false, error: "id required" });
-    const appData = readApp(id);
-    if (!appData.runnable) {
-      return reply.status(409).send({ ok: false, error: "app not runnable \u2014 compile the lock first, then bake" });
+}
+async function startServer() {
+  installCrashHandlers();
+  const logger = true ? true : { transport: { target: "pino-pretty" } };
+  const app = (0, import_fastify.default)({ logger });
+  app.addContentTypeParser("application/json", { parseAs: "string" }, (_req, body, done) => {
+    const s = body ?? "";
+    if (s.trim() === "") {
+      done(null, {});
+      return;
     }
-    const inputs = appData.inputs.map((i) => ({ name: i.name, type: i.type }));
-    const baked = bakeFloSource(appData.source.text, inputs);
-    const tmpRoot = (0, import_node_fs17.mkdtempSync)((0, import_node_path16.join)((0, import_node_os11.tmpdir)(), "floless-bake-"));
-    const backupDir = (0, import_node_path16.join)(tmpRoot, `${id}-backup`);
-    const bakeDir = (0, import_node_path16.join)(tmpRoot, id);
-    (0, import_node_fs17.cpSync)(appDir(id), backupDir, { recursive: true });
-    (0, import_node_fs17.cpSync)(appDir(id), bakeDir, { recursive: true });
-    const floName = appData.source.path.split(/[\\/]/).pop();
-    (0, import_node_fs17.writeFileSync)((0, import_node_path16.join)(bakeDir, floName), baked);
-    let appInstalled = true;
     try {
-      await aware.uninstall(id);
-      appInstalled = false;
-      try {
-        await aware.install(bakeDir);
-        appInstalled = true;
-      } catch (installErr) {
-        try {
-          await aware.install(backupDir);
-          appInstalled = true;
-        } catch (restoreErr) {
-          app.log.error({ id, tmpRoot, restoreErr: String(restoreErr) }, "bake: install AND restore failed \u2014 app uninstalled; backup retained");
-          return reply.status(502).send({
-            ok: false,
-            error: `bake failed and the app could not be restored \u2014 its source is backed up at ${backupDir}. Reinstall it from there with: aware app install "${backupDir}"`
-          });
-        }
-        throw installErr;
-      }
-      try {
-        await aware.compile((0, import_node_path16.join)(appDir(id), floName));
-      } catch (compileErr) {
-        app.log.warn({ id, compileErr: String(compileErr) }, "bake: post-install recompile failed (app baked but may need a manual Compile)");
-      }
-      broadcast({ type: "baked", id });
-      return { ok: true, id, agent: id, inputs };
-    } finally {
-      if (appInstalled) (0, import_node_fs17.rmSync)(tmpRoot, { recursive: true, force: true });
+      done(null, JSON.parse(s));
+    } catch (err) {
+      done(err);
     }
   });
-  const graftAgentsDir = () => (0, import_node_path16.join)((0, import_node_os11.homedir)(), ".aware", "agents");
-  app.post("/api/graft/match", async (req, reply) => {
-    const { glob } = req.body ?? {};
-    if (!glob) return reply.status(400).send({ ok: false, error: "glob required" });
-    let safe;
+  await app.register(import_static.default, { root: WEB_ROOT, prefix: "/" });
+  const MIN_AWARE = "0.51.0";
+  const isWin3 = process.platform === "win32";
+  const has = (cmd) => {
     try {
-      safe = assertSourceRef("dlls", glob);
-    } catch (e) {
-      return reply.status(400).send({ ok: false, error: e.message });
-    }
-    return { ok: true, files: matchAssemblies(safe) };
-  });
-  app.post("/api/graft/introspect", async (req, reply) => {
-    const { sourceKind, sourceRef, decompile, outputId, acceptLicense, referenceDirs } = req.body ?? {};
-    if (!sourceKind || !sourceRef) {
-      return reply.status(400).send({ ok: false, error: "sourceKind and sourceRef required" });
+      (0, import_node_child_process6.execFileSync)(isWin3 ? "where" : "which", [cmd], { stdio: "ignore", windowsHide: true, timeout: 5e3 });
+      return true;
+    } catch {
+      return false;
     }
-    const tempHome = (0, import_node_fs17.mkdtempSync)((0, import_node_path16.join)((0, import_node_os11.tmpdir)(), "floless-graft-"));
-    let result;
-    try {
-      result = await aware.build({
-        sourceKind,
-        sourceRef,
-        decompile,
-        outputId,
-        acceptLicense,
-        referenceDirs,
-        awareHome: tempHome
+  };
+  function installAwareGlobal(spec, onLine = () => {
+  }) {
+    return new Promise((resolve4, reject) => {
+      const child = (0, import_node_child_process6.spawn)("npm", ["i", "-g", `@aware-aeco/cli@${spec}`], { shell: isWin3, windowsHide: true });
+      let stderrTail = "";
+      let combinedTail = "";
+      const tail = (buf, s) => (buf + s).slice(-4e3);
+      child.stdout.on("data", (d) => {
+        const s = d.toString();
+        combinedTail = tail(combinedTail, s);
+        onLine(s.trimEnd());
       });
-    } catch (err) {
-      (0, import_node_fs17.rmSync)(tempHome, { recursive: true, force: true });
-      const msg = err instanceof AwareError ? err.message : String(err?.message ?? err);
-      return reply.status(422).send({ ok: false, error: msg });
+      child.stderr.on("data", (d) => {
+        const s = d.toString();
+        stderrTail = tail(stderrTail, s);
+        combinedTail = tail(combinedTail, s);
+        onLine(s.trimEnd());
+      });
+      child.on("error", (e) => reject(e));
+      child.on("close", (code) => code === 0 ? resolve4() : reject(new Error(`npm exited ${code}: ${stderrTail || combinedTail}`)));
+    });
+  }
+  const bootstrapDeps = {
+    probeToolchain: () => ({ hasNode: has("node"), hasNpm: has("npm") }),
+    getAware: () => {
+      const v = aware.npmVersion();
+      return { installed: v !== null, version: v };
+    },
+    installAware: installAwareGlobal,
+    smoke: () => aware.smoke(),
+    refreshInvoker,
+    emit: broadcast,
+    floor: MIN_AWARE,
+    skip: process.env.AWARE_SKIP_BOOTSTRAP === "1"
+  };
+  app.setErrorHandler((err, _req, reply) => {
+    if (err instanceof AppNotFoundError) {
+      return reply.status(404).send({ ok: false, error: err.message });
     }
-    const manifest = readStagedManifest(result.agentDir);
-    if (!manifest) {
-      (0, import_node_fs17.rmSync)(tempHome, { recursive: true, force: true });
-      return reply.status(502).send({ ok: false, error: `build produced output at ${result.agentDir} but no manifest.yaml` });
+    if (err instanceof RoutineError) {
+      return reply.status(err.status).send({ ok: false, error: err.message });
     }
-    const token = (0, import_node_crypto5.randomUUID)();
-    registerStage(token, tempHome, result.agentId);
-    const preview = buildPreview(manifest, sourceKind, sourceRef, token);
-    if ((0, import_node_fs17.existsSync)((0, import_node_path16.join)(graftAgentsDir(), result.agentId))) {
-      preview.warnings.unshift(`An agent named "${result.agentId}" is already installed \u2014 creating it will overwrite it.`);
+    if (err instanceof AwareError) {
+      app.log.warn({ detail: err.detail }, err.message);
+      return reply.status(502).send({ ok: false, error: err.message, detail: err.detail ?? null });
     }
-    return { ok: true, preview };
+    app.log.error(err);
+    return reply.status(500).send({ ok: false, error: err.message });
   });
-  app.post("/api/graft/commit", async (req, reply) => {
-    const { stagedRef, force = false } = req.body ?? {};
-    if (!stagedRef) return reply.status(400).send({ ok: false, error: "stagedRef required" });
-    const stage = consumeStage(stagedRef);
-    if (!stage) {
-      return reply.status(410).send({ ok: false, error: "staged build expired or not found \u2014 introspect again" });
-    }
-    try {
-      commitStaged(stage.tempDir, stage.agentId, graftAgentsDir(), force);
-    } catch (err) {
-      if (err instanceof GraftCommitError && err.code === "collision") {
-        registerStage(stagedRef, stage.tempDir, stage.agentId);
-        return reply.status(409).send({ ok: false, error: err.message, agentId: stage.agentId, collision: true });
-      }
-      (0, import_node_fs17.rmSync)(stage.tempDir, { recursive: true, force: true });
-      throw err;
+  const SELF_ORIGINS = /* @__PURE__ */ new Set([
+    `http://127.0.0.1:${PORT2}`,
+    `http://localhost:${PORT2}`,
+    `http://floless.localhost:${PORT2}`
+    // branded address (browsers resolve *.localhost → 127.0.0.1)
+  ]);
+  app.addHook("onRequest", async (req, reply) => {
+    if (!req.url.startsWith("/api/")) return;
+    const origin = req.headers.origin;
+    if (origin && !SELF_ORIGINS.has(origin)) {
+      return reply.status(403).send({ ok: false, error: "cross-origin request rejected" });
     }
-    broadcast({ type: "grafted", id: stage.agentId });
-    return { ok: true, agentId: stage.agentId };
   });
-  app.post(
-    "/api/run",
-    async (req, reply) => {
-      const { id, dryRun, simulate, inputs } = req.body ?? {};
-      if (!id) return reply.status(400).send({ ok: false, error: "id required" });
-      const blocked = hostRunBlocked(appProvider(id));
-      if (blocked) return reply.send({ ok: false, error: blocked, blocked: true, simulate: !!simulate });
-      let result;
-      try {
-        result = await aware.run(id, { dryRun, simulate, inputs });
-      } catch (err) {
-        if (err instanceof AwareError) {
-          const detail = err.detail && typeof err.detail === "object" ? err.detail : null;
-          if (detail && detail.cancelled === true) {
-            app.log.info({ id }, "run cancelled by user");
-            return reply.send({ ok: false, error: "Run cancelled", cancelled: true, simulate: !!simulate });
-          }
-          const stderr = detail && typeof detail.stderr === "string" ? detail.stderr.trim() : "";
-          app.log.warn({ detail: err.detail }, err.message);
-          return reply.send({ ok: false, error: err.message, reason: stderr || null, simulate: !!simulate });
-        }
-        throw err;
-      }
-      const events = result.traceText ? parseTrace(result.traceText) : [];
-      broadcast({ type: "run-started", id, dryRun: !!dryRun, simulate: !!simulate, runId: result.runId });
-      for (const ev of events) broadcast({ type: "trace", id, event: ev });
-      broadcast({ type: "run-ended", id, runId: result.runId });
-      const report = extractReportHtml(events);
-      return { ok: true, runId: result.runId, tracePath: result.tracePath, events, report };
+  app.addHook("onRequest", async (req, reply) => {
+    if (!req.url.startsWith("/api/")) return;
+    if (req.url.startsWith("/api/health") || req.url.startsWith("/api/license/") || req.url.startsWith("/api/bootstrap/") || req.url.startsWith("/api/autostart") || req.url.startsWith("/api/update") || req.url.startsWith("/api/aware/update")) return;
+    const { state: state2, signInUrl: signInUrl2 } = await getLicenseStatus();
+    if (state2 !== "valid" && state2 !== "offline-grace") {
+      return reply.status(402).send({ ok: false, error: "subscription required", state: state2, signInUrl: signInUrl2 });
     }
-  );
-  app.post("/api/run/stop", async () => {
-    const running = cancelActiveRun();
-    return { ok: true, running };
   });
-  function resolveArgs(configArgs, inputs) {
-    const out = {};
-    for (const [k, v] of Object.entries(configArgs)) {
-      if (typeof v === "string") {
-        const m = v.match(/^\{\{\s*inputs\.([A-Za-z0-9._-]+)\s*\}\}$/);
-        out[k] = m && m[1] != null && m[1] in inputs ? inputs[m[1]] : v;
-      } else {
-        out[k] = v;
-      }
-    }
-    return out;
-  }
-  app.post(
-    "/api/debug-node",
-    async (req, reply) => {
-      const { id, nodeId, inputs } = req.body ?? {};
-      if (!id || !nodeId) return reply.status(400).send({ ok: false, error: "id and nodeId required" });
-      const appData = readApp(id);
-      if (!appData.runnable) return reply.status(409).send({ ok: false, error: "app not runnable \u2014 compile the lock first" });
-      const node = appData.nodes.find((n) => n.id === nodeId);
-      if (!node) return reply.status(404).send({ ok: false, error: `node not found: ${nodeId}` });
-      const code = node.config?.code;
-      if (typeof code !== "string") return reply.status(400).send({ ok: false, error: `node ${nodeId} has no exec code` });
-      const version = typeof node.config?.version === "string" ? node.config.version : void 0;
-      const configArgs = node.config?.args ?? {};
-      const effectiveInputs = {};
-      for (const inp of appData.inputs) {
-        const d = inp.default;
-        if (typeof d === "string" || typeof d === "number" || typeof d === "boolean") effectiveInputs[inp.name] = d;
-      }
-      Object.assign(effectiveInputs, inputs ?? {});
-      const args = resolveArgs(configArgs, effectiveInputs);
-      broadcast({ type: "debug-started", id, nodeId });
-      const result = await aware.execTekla(code, { version, args, debug: true });
-      broadcast({ type: "debug-ended", id, nodeId });
-      const r = result.result ?? {};
-      const html = typeof r.html === "string" ? r.html : null;
-      return { ok: true, result, report: html ? { nodeId, html } : null };
-    }
-  );
-  app.get("/api/routines", async () => ({
-    // Annotate each with live state so the UI reconciles from the server (a dropped
-    // SSE event can't wedge an indicator): schedule routines carry queued/active
-    // `running`; trigger routines carry their live `session` snapshot
-    // (listening/fired×N/error/stopped).
-    ok: true,
-    routines: listRoutines().map(
-      (r) => r.kind === "trigger" ? { ...r, session: getSnapshot(r.id) } : { ...r, running: isRoutineRunning(r.id) }
-    ),
-    max: MAX_ROUTINES
-  }));
-  app.post(
-    "/api/routines",
-    async (req, reply) => {
-      const routine = createRoutine(req.body ?? {});
-      return reply.status(201).send({ ok: true, routine });
+  app.addHook("onRequest", async (req, reply) => {
+    if (!isGatedAwareRoute(req.url, req.method)) return;
+    const st = getBootstrapState();
+    if (st.status === "ready") return;
+    if (st.status === "failed") return reply.status(503).send({ ok: false, error: "AWARE unavailable", bootstrap: st.status, reason: st.reason, remediation: st.remediation });
+    return reply.status(409).send({ ok: false, error: "AWARE is still setting up", bootstrap: st.status });
+  });
+  app.get("/api/health", async () => {
+    const bs = getBootstrapState();
+    return {
+      ok: true,
+      appVersion: appVersion(),
+      // the installed build (sq.version), so it's scriptable
+      awareVersion: awareInstalledVersion() ?? bs.awareVersion,
+      // fresh (TTL-cached) install version; the boot snapshot is only a fallback
+      awareReady: bs.awareReady,
+      bootstrap: bs.status,
+      bootstrapReason: bs.reason,
+      bootstrapRemediation: bs.remediation,
+      // UI maps reason→fixed copy; this is secondary dev context
+      sseClients: clientCount(),
+      license: (await getLicenseStatus()).state
+      // UI + launcher branch on this
+    };
+  });
+  app.get("/api/license/status", async () => ({ ok: true, ...await getLicenseStatus() }));
+  app.post("/api/license/start", async () => ({ ok: true, ...await startLogin() }));
+  app.post("/api/license/logout", async () => {
+    logout();
+    return { ok: true };
+  });
+  app.get("/api/autostart", async () => {
+    const supported = autostartSupported();
+    return { ok: true, supported, enabled: supported ? autostartPresent() : false };
+  });
+  app.put("/api/autostart", async (req, reply) => {
+    if (!autostartSupported()) return reply.send({ ok: true, supported: false, enabled: false });
+    if (typeof req.body?.enabled !== "boolean") {
+      return reply.status(400).send({ ok: false, error: "body { enabled: boolean } required" });
     }
-  );
-  app.patch(
-    "/api/routines/:id",
-    async (req, reply) => {
-      const routine = updateRoutine(req.params.id, req.body ?? {});
-      if (!routine) return reply.status(404).send({ ok: false, error: "routine not found" });
-      return { ok: true, routine };
+    try {
+      if (req.body.enabled) registerAutostart(resolveRealInstallExe(process.execPath));
+      else unregisterAutostart();
+    } catch (err) {
+      return reply.status(500).send({ ok: false, error: err instanceof Error ? err.message : String(err) });
     }
-  );
-  app.delete("/api/routines/:id", async (req, reply) => {
-    if (!deleteRoutine(req.params.id)) return reply.status(404).send({ ok: false, error: "routine not found" });
-    return { ok: true };
+    return { ok: true, supported: true, enabled: autostartPresent() };
   });
-  app.post("/api/routines/:id/run", async (req, reply) => {
-    if (!runNow(req.params.id)) return reply.status(404).send({ ok: false, error: "routine not found" });
-    return { ok: true };
+  app.get("/api/update", async () => {
+    return { ok: true, ...await checkForUpdate() };
   });
-  app.get("/api/templates", async () => ({ ok: true, templates: listTemplates() }));
-  app.post(
-    "/api/templates",
-    async (req, reply) => {
-      const { name, category, node, source } = req.body ?? {};
-      if (!name || !node) return reply.status(400).send({ ok: false, error: "name and node required" });
-      const tpl = addTemplate({ name, category, node, source });
-      broadcast({ type: "templates-changed" });
-      return { ok: true, template: tpl };
+  app.post("/api/update/apply", async (_req, reply) => {
+    const check = await checkForUpdate();
+    if (!check.supported || !check.updateAvailable) {
+      return reply.status(409).send({ ok: false, ...check, error: check.reason ?? "no update available" });
     }
-  );
-  app.delete("/api/templates/:id", async (req, reply) => {
-    if (!deleteTemplate(req.params.id)) return reply.status(404).send({ ok: false, error: "template not found" });
-    broadcast({ type: "templates-changed" });
-    return { ok: true };
+    const result = await applyUpdate(check, { onBeforeApply: async () => {
+      killSupervisor({ tree: false });
+    } });
+    if (!result.applied) return reply.status(500).send({ ok: false, error: result.message });
+    reply.send({ ok: true, ...result });
+    setTimeout(() => process.exit(0), 250);
   });
-  app.get("/api/requests", async () => ({ ok: true, requests: listRequests() }));
-  app.get("/api/requests/:id/snapshot/:n", async (req, reply) => {
-    const n = Number.parseInt(req.params.n, 10);
-    const p = Number.isInteger(n) ? snapshotPathFor(req.params.id, n) : null;
-    if (!p || !(0, import_node_fs17.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
-    const ext = p.split(".").pop().toLowerCase();
-    reply.header("Content-Type", ext === "png" ? "image/png" : ext === "webp" ? "image/webp" : "image/jpeg");
-    reply.header("Cache-Control", "no-store");
-    return (0, import_node_fs17.readFileSync)(p);
+  app.get("/api/aware/update", async () => {
+    return { ok: true, ...await checkAwareUpdate() };
+  });
+  let awareInstallInFlight = false;
+  app.post("/api/aware/update/apply", async (_req, reply) => {
+    const block = awareUpgradeBlockReason({
+      bootstrapInstalling: getBootstrapState().status === "installing",
+      installInFlight: awareInstallInFlight,
+      runActive: isRunActive(),
+      hostWatcherActive: hostWatcherActive()
+    });
+    if (block) return reply.status(409).send({ ok: false, error: block });
+    awareInstallInFlight = true;
+    try {
+      const res = await applyAwareUpdate(awareApplyDeps(installAwareGlobal));
+      if (!res.ok) return reply.status(409).send({ ok: false, error: res.error ?? "aware upgrade failed" });
+      return { ok: true, version: res.version };
+    } finally {
+      awareInstallInFlight = false;
+    }
   });
-  app.post(
-    "/api/tweak",
-    { bodyLimit: 25 * 1024 * 1024 },
-    async (req, reply) => {
-      const { appId, nodeId, instruction, snapshots } = req.body ?? {};
-      if (!appId || !nodeId || !instruction) {
-        return reply.status(400).send({ ok: false, error: "appId, nodeId, instruction required" });
-      }
-      let decoded;
-      try {
-        decoded = decodeSnapshots(snapshots);
-      } catch (e) {
-        return reply.status(400).send({ ok: false, error: e instanceof Error ? e.message : "bad snapshot" });
-      }
-      const request = addRequest({ type: "tweak", appId, nodeId, instruction }, decoded);
-      broadcast({ type: "request-added", request });
-      return { ok: true, request };
+  app.post("/api/bootstrap/retry", async () => {
+    const st = getBootstrapState().status;
+    if (st === "failed" || st === "idle") {
+      void runBootstrap(bootstrapDeps);
     }
-  );
-  app.post("/api/use-template", async (req, reply) => {
-    const { appId, templateId } = req.body ?? {};
-    if (!appId || !templateId) return reply.status(400).send({ ok: false, error: "appId and templateId required" });
-    const template = getTemplate(templateId);
-    if (!template) return reply.status(404).send({ ok: false, error: "template not found" });
-    const request = addRequest({ type: "use-template", appId, templateId, template });
-    broadcast({ type: "request-added", request });
-    return { ok: true, request };
+    return { ok: true, bootstrap: getBootstrapState().status };
   });
-  app.delete("/api/requests/:id", async (req, reply) => {
-    if (!deleteRequest(req.params.id)) return reply.status(404).send({ ok: false, error: "request not found" });
-    broadcast({ type: "requests-changed" });
-    return { ok: true };
+  onSeatLost((reason) => broadcast({ type: "seat-taken", reason }));
+  app.get("/api/apps", async () => {
+    const apps = await aware.list();
+    return { ok: true, apps: apps.map((a) => ({ ...a, provider: appProvider(a.id) })) };
   });
-  app.delete("/api/requests", async () => {
-    const cleared = clearRequests();
-    broadcast({ type: "requests-changed" });
-    return { ok: true, cleared };
+  app.get("/api/agents", async () => {
+    const agents = await aware.agentList();
+    return { ok: true, agents };
   });
-  app.get("/api/events", async (_req, reply) => {
-    reply.hijack();
-    reply.raw.writeHead(200, {
-      "Content-Type": "text/event-stream",
-      "Cache-Control": "no-cache",
-      Connection: "keep-alive"
-    });
-    reply.raw.write(`data: ${JSON.stringify({ type: "connected" })}
-
-`);
-    addClient(reply);
+  app.get("/api/agent/:id", async (req) => {
+    const agent = await aware.agentDescribe(req.params.id);
+    return { ok: true, agent };
   });
-  const watcher = startWatcher();
-  runBootstrap(bootstrapDeps).then((st) => {
-    if (st.status === "ready") startScheduler();
-    else app.log.warn({ reason: st.reason }, "AWARE bootstrap not ready; scheduler deferred");
-  }).catch((err) => app.log.error({ err: String(err) }, "bootstrap continuation failed"));
-  const close = async () => {
-    cancelAllConnects();
-    clearAllStages();
-    await stopScheduler();
-    await watcher?.close();
-    await app.close();
-    process.exit(0);
-  };
-  process.on("SIGINT", close);
-  process.on("SIGTERM", close);
-  await app.listen({ port: PORT, host: HOST });
-  app.log.info(`floless.app on http://${HOST}:${PORT}  (aware npm ${getBootstrapState().awareVersion ?? "unresolved"})`);
-  try {
-    const synced = syncSkills().filter((r) => r.action === "installed" || r.action === "updated");
-    if (synced.length) {
-      app.log.info(
-        { skills: synced.map((s) => `${s.runtime}:${s.skill}@${s.to}`) },
-        `synced ${synced.length} floless.app skill(s) into AI terminal(s)`
-      );
+  app.get("/api/integrations", async () => {
+    const integrations = listIntegrations();
+    try {
+      const live = await aware.connectList();
+      const byId = new Map(live.map((c) => [c.integration, c]));
+      for (const it of integrations) {
+        const c = byId.get(it.id);
+        if (!c) continue;
+        it.status = c.status === "valid" ? "connected" : c.status === "expired" ? "expired" : "disconnected";
+        it.expiresAt = c.expires_in_secs != null ? new Date(Date.now() + c.expires_in_secs * 1e3).toISOString() : it.expiresAt;
+      }
+    } catch (err) {
+      app.log.warn({ err: String(err) }, "aware connect --list unavailable; using file-based status");
     }
-  } catch (err) {
-    app.log.warn({ err: String(err) }, "skill sync failed (non-fatal)");
-  }
-}
-
-// launch.mjs
-var import_node_child_process6 = require("node:child_process");
-var import_node_path17 = require("node:path");
-var import_node_url3 = require("node:url");
-var import_node_fs18 = require("node:fs");
-var import_node_http = __toESM(require("node:http"), 1);
-var import_node_readline = require("node:readline");
-var __dirname4 = (0, import_node_path17.dirname)((0, import_node_url3.fileURLToPath)(__import_meta_url));
-var PORT2 = Number(process.env.PORT ?? 4317);
-var HEALTH_URL = `http://127.0.0.1:${PORT2}/api/health`;
-var BROWSER_URL = `http://floless.localhost:${PORT2}`;
-var isWin2 = process.platform === "win32";
-var log = (m) => {
-  try {
-    process.stdout.write(`floless: ${m}
-`);
-  } catch {
-  }
-};
-function ping() {
-  return new Promise((resolve4) => {
-    const req = import_node_http.default.get(HEALTH_URL, { timeout: 1500 }, (res) => {
-      res.resume();
-      resolve4(res.statusCode === 200);
-    });
-    req.on("error", () => resolve4(false));
-    req.on("timeout", () => {
-      req.destroy();
-      resolve4(false);
-    });
+    return { ok: true, integrations };
   });
-}
-function probeVersion() {
-  return new Promise((resolve4) => {
-    const req = import_node_http.default.get(HEALTH_URL, { timeout: 1500 }, (res) => {
-      let body = "";
-      res.on("data", (c) => {
-        body += c;
-      });
-      res.on("end", () => {
-        try {
-          resolve4(JSON.parse(body).appVersion || null);
-        } catch {
-          resolve4(null);
+  const DEFAULT_CONNECT_FLOW = {};
+  app.post("/api/connect/:id", async (req) => {
+    const id = req.params.id;
+    const requested = req.body?.flow;
+    const flow = requested === "device-code" || requested === "oauth" ? requested : DEFAULT_CONNECT_FLOW[id] ?? "oauth";
+    if (flow === "device-code") {
+      const { prompt } = await aware.connectDeviceCode(id, (event) => {
+        if (event.phase === "result") {
+          broadcast({ type: "connect-result", id, status: event.status ?? "unknown", error: event.error ?? null });
         }
       });
+      return { ok: true, id, flow, prompt };
+    }
+    aware.connectOAuth(id, (result) => {
+      broadcast({
+        type: "connect-result",
+        id,
+        status: result.status === "connected" ? "connected" : "failed",
+        error: result.status === "connected" ? null : "sign-in failed or was cancelled"
+      });
     });
-    req.on("error", () => resolve4(null));
-    req.on("timeout", () => {
-      req.destroy();
-      resolve4(null);
-    });
+    return { ok: true, id, flow, started: true };
   });
-}
-function cmpVersion(a, b) {
-  const pa = String(a ?? "").split(".").map((n) => parseInt(n, 10) || 0);
-  const pb = String(b ?? "").split(".").map((n) => parseInt(n, 10) || 0);
-  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
-    const d = (pa[i] || 0) - (pb[i] || 0);
-    if (d !== 0) return d > 0 ? 1 : -1;
-  }
-  return 0;
-}
-function shouldTakeOver(runningVersion, selfVersion) {
-  if (!runningVersion || !selfVersion) return false;
-  return cmpVersion(selfVersion, runningVersion) > 0;
-}
-var _selfVersion = null;
-async function waitHealthy(timeoutMs = 3e4) {
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() < deadline) {
-    if (await ping()) return true;
-    await new Promise((r) => setTimeout(r, 500));
-  }
-  return false;
-}
-function resolveServerStart() {
-  const packaged = /flolessapp\.exe$/i.test(process.execPath);
-  if (packaged) return { cmd: process.execPath, args: ["--serve"], shell: false };
-  const bundle = (0, import_node_path17.join)(__dirname4, "dist", "floless-server.cjs");
-  if ((0, import_node_fs18.existsSync)(bundle)) return { cmd: process.execPath, args: [bundle, "--serve"], shell: false };
-  return { cmd: "npm", args: ["run", "start"], shell: isWin2 };
-}
-function startServerDetached() {
-  const { cmd, args, shell } = resolveServerStart();
-  rotateLog();
-  const fd = openLogFd();
-  const child = (0, import_node_child_process6.spawn)(cmd, args, {
-    cwd: __dirname4,
-    detached: true,
-    stdio: fd == null ? "ignore" : ["ignore", fd, fd],
-    windowsHide: true,
-    shell
+  app.get("/api/app/:id", async (req) => {
+    return { ok: true, app: readApp(req.params.id) };
+  });
+  app.post("/api/compile", async (req, reply) => {
+    const { id, sourcePath } = req.body ?? {};
+    const path = sourcePath ?? (id ? readApp(id).source.path : void 0);
+    if (!path) return reply.status(400).send({ ok: false, error: "id or sourcePath required" });
+    const result = await aware.compile(path);
+    broadcast({ type: "compiled", id: id ?? null, lockPath: result.lockPath });
+    return { ok: true, result };
+  });
+  app.post("/api/bake", async (req, reply) => {
+    const { id } = req.body ?? {};
+    if (!id) return reply.status(400).send({ ok: false, error: "id required" });
+    const appData = readApp(id);
+    if (!appData.runnable) {
+      return reply.status(409).send({ ok: false, error: "app not runnable \u2014 compile the lock first, then bake" });
+    }
+    const inputs = appData.inputs.map((i) => ({ name: i.name, type: i.type }));
+    const baked = bakeFloSource(appData.source.text, inputs);
+    const tmpRoot = (0, import_node_fs18.mkdtempSync)((0, import_node_path17.join)((0, import_node_os11.tmpdir)(), "floless-bake-"));
+    const backupDir = (0, import_node_path17.join)(tmpRoot, `${id}-backup`);
+    const bakeDir = (0, import_node_path17.join)(tmpRoot, id);
+    (0, import_node_fs18.cpSync)(appDir(id), backupDir, { recursive: true });
+    (0, import_node_fs18.cpSync)(appDir(id), bakeDir, { recursive: true });
+    const floName = appData.source.path.split(/[\\/]/).pop();
+    (0, import_node_fs18.writeFileSync)((0, import_node_path17.join)(bakeDir, floName), baked);
+    let appInstalled = true;
+    try {
+      await aware.uninstall(id);
+      appInstalled = false;
+      try {
+        await aware.install(bakeDir);
+        appInstalled = true;
+      } catch (installErr) {
+        try {
+          await aware.install(backupDir);
+          appInstalled = true;
+        } catch (restoreErr) {
+          app.log.error({ id, tmpRoot, restoreErr: String(restoreErr) }, "bake: install AND restore failed \u2014 app uninstalled; backup retained");
+          return reply.status(502).send({
+            ok: false,
+            error: `bake failed and the app could not be restored \u2014 its source is backed up at ${backupDir}. Reinstall it from there with: aware app install "${backupDir}"`
+          });
+        }
+        throw installErr;
+      }
+      try {
+        await aware.compile((0, import_node_path17.join)(appDir(id), floName));
+      } catch (compileErr) {
+        app.log.warn({ id, compileErr: String(compileErr) }, "bake: post-install recompile failed (app baked but may need a manual Compile)");
+      }
+      broadcast({ type: "baked", id });
+      return { ok: true, id, agent: id, inputs };
+    } finally {
+      if (appInstalled) (0, import_node_fs18.rmSync)(tmpRoot, { recursive: true, force: true });
+    }
+  });
+  const graftAgentsDir = () => (0, import_node_path17.join)((0, import_node_os11.homedir)(), ".aware", "agents");
+  app.post("/api/graft/match", async (req, reply) => {
+    const { glob } = req.body ?? {};
+    if (!glob) return reply.status(400).send({ ok: false, error: "glob required" });
+    let safe;
+    try {
+      safe = assertSourceRef("dlls", glob);
+    } catch (e) {
+      return reply.status(400).send({ ok: false, error: e.message });
+    }
+    return { ok: true, files: matchAssemblies(safe) };
   });
-  child.unref();
-}
-function openBrowser2(url) {
-  if (isWin2) (0, import_node_child_process6.spawn)("cmd", ["/c", "start", "", url], { windowsHide: true, detached: true }).unref();
-  else (0, import_node_child_process6.spawn)(process.platform === "darwin" ? "open" : "xdg-open", [url], { detached: true }).unref();
-}
-function stopServer() {
-  if (!isWin2) {
+  app.post("/api/graft/introspect", async (req, reply) => {
+    const { sourceKind, sourceRef, decompile, outputId, acceptLicense, referenceDirs } = req.body ?? {};
+    if (!sourceKind || !sourceRef) {
+      return reply.status(400).send({ ok: false, error: "sourceKind and sourceRef required" });
+    }
+    const tempHome = (0, import_node_fs18.mkdtempSync)((0, import_node_path17.join)((0, import_node_os11.tmpdir)(), "floless-graft-"));
+    let result;
     try {
-      (0, import_node_child_process6.execSync)(`bash -lc "fuser -k ${PORT2}/tcp"`, { stdio: "ignore" });
-      return true;
-    } catch {
-      return false;
+      result = await aware.build({
+        sourceKind,
+        sourceRef,
+        decompile,
+        outputId,
+        acceptLicense,
+        referenceDirs,
+        awareHome: tempHome
+      });
+    } catch (err) {
+      (0, import_node_fs18.rmSync)(tempHome, { recursive: true, force: true });
+      const msg = err instanceof AwareError ? err.message : String(err?.message ?? err);
+      return reply.status(422).send({ ok: false, error: msg });
     }
-  }
-  try {
-    const ps = `$p = Get-NetTCPConnection -LocalPort ${PORT2} -State Listen -ErrorAction SilentlyContinue | Select-Object -Expand OwningProcess -Unique; if ($p) { $p | ForEach-Object { taskkill /PID $_ /T /F } } else { exit 9 }`;
-    (0, import_node_child_process6.execSync)(`powershell -NoProfile -Command "${ps}"`, { stdio: "ignore" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function ensureServerUp() {
-  if (await ping()) return;
-  log("starting server\u2026");
-  startServerDetached();
-  if (!await waitHealthy()) {
-    log(`server did not become healthy on ${HEALTH_URL} within 30s \u2014 check for errors with "npm run dev"`);
-    process.exit(1);
-  }
-  log("server up");
-}
-async function cmdOpen() {
-  if (await ping()) {
-    const running = await probeVersion();
-    if (shouldTakeOver(running, _selfVersion)) {
-      log(`floless.app v${running} is already running on ${PORT2}; this build is v${_selfVersion} \u2014 taking over`);
-      stopServer();
-      await new Promise((r) => setTimeout(r, 500));
-      await ensureServerUp();
-    } else {
-      log(`already running${running ? ` (v${running})` : ""} \u2014 opening browser`);
+    const manifest = readStagedManifest(result.agentDir);
+    if (!manifest) {
+      (0, import_node_fs18.rmSync)(tempHome, { recursive: true, force: true });
+      return reply.status(502).send({ ok: false, error: `build produced output at ${result.agentDir} but no manifest.yaml` });
     }
-  } else {
-    await ensureServerUp();
-  }
-  log(`opening ${BROWSER_URL}`);
-  openBrowser2(BROWSER_URL);
-}
-async function cmdStart() {
-  if (await ping()) {
-    log("already running");
-    return;
-  }
-  await ensureServerUp();
-}
-var SUPERVISE_POLL_MS = 3e3;
-var SUPERVISE_RESPAWN_ENV = "FLOLESS_SUPERVISE_RESPAWNED";
-async function cmdSupervise() {
-  const isSeaChannel = /flolessapp\.exe$/i.test(process.execPath);
-  if (isSeaChannel && !process.env[SUPERVISE_RESPAWN_ENV]) {
-    rotateLog();
-    const fd = openLogFd();
-    const child = (0, import_node_child_process6.spawn)(process.execPath, ["--supervise"], {
-      detached: true,
-      stdio: fd == null ? "ignore" : ["ignore", fd, fd],
-      windowsHide: true,
-      env: { ...process.env, [SUPERVISE_RESPAWN_ENV]: "1" }
-    });
-    child.unref();
-    log("supervisor re-spawned detached");
-    return;
-  }
-  log("supervisor up \u2014 keeping the server alive");
-  for (; ; ) {
-    if (!await ping()) {
-      log("server not responding \u2014 (re)starting");
-      startServerDetached();
-      log(await waitHealthy() ? "server up" : "server not healthy yet \u2014 will retry");
+    const token = (0, import_node_crypto5.randomUUID)();
+    registerStage(token, tempHome, result.agentId);
+    const preview = buildPreview(manifest, sourceKind, sourceRef, token);
+    if ((0, import_node_fs18.existsSync)((0, import_node_path17.join)(graftAgentsDir(), result.agentId))) {
+      preview.warnings.unshift(`An agent named "${result.agentId}" is already installed \u2014 creating it will overwrite it.`);
     }
-    await new Promise((r) => setTimeout(r, SUPERVISE_POLL_MS));
-  }
-}
-async function cmdStop() {
-  if (!stopServer()) {
-    log("not running \u2014 nothing to stop");
-    return;
-  }
-  log(`stopping server on port ${PORT2}\u2026`);
-  for (let i = 0; i < 10; i++) {
-    if (!await ping()) {
-      log("stopped");
-      return;
+    return { ok: true, preview };
+  });
+  app.post("/api/graft/commit", async (req, reply) => {
+    const { stagedRef, force = false } = req.body ?? {};
+    if (!stagedRef) return reply.status(400).send({ ok: false, error: "stagedRef required" });
+    const stage = consumeStage(stagedRef);
+    if (!stage) {
+      return reply.status(410).send({ ok: false, error: "staged build expired or not found \u2014 introspect again" });
     }
-    await new Promise((r) => setTimeout(r, 300));
-  }
-  log("warning: a process may still be holding the port");
-}
-function parseTeardownFlags(argv = []) {
-  return {
-    purge: argv.includes("--purge"),
-    keepAware: argv.includes("--keep-aware")
-  };
-}
-function parseProcessList(json) {
-  let parsed;
-  try {
-    parsed = JSON.parse(json || "[]");
-  } catch {
-    return [];
-  }
-  const arr = Array.isArray(parsed) ? parsed : [parsed];
-  return arr.filter((p) => p && p.ProcessId != null).map((p) => ({ pid: Number(p.ProcessId), cmd: String(p.CommandLine ?? "") }));
-}
-function enumerateProcesses() {
-  if (!isWin2) return [];
-  try {
-    const ps = "Get-CimInstance Win32_Process | Select-Object ProcessId,CommandLine | ConvertTo-Json -Compress";
-    const out = (0, import_node_child_process6.execSync)(`powershell -NoProfile -Command "${ps}"`, {
-      encoding: "utf8",
-      windowsHide: true,
-      maxBuffer: 16 * 1024 * 1024
-    });
-    return parseProcessList(out);
-  } catch {
-    return [];
-  }
-}
-function killSupervisor() {
-  if (!isWin2) return;
-  const isNpmChannel = /^node(\.exe)?$/i.test((0, import_node_path17.basename)(process.execPath));
-  const scriptMatch = isNpmChannel ? (0, import_node_path17.basename)((0, import_node_url3.fileURLToPath)(__import_meta_url)) : void 0;
-  const realExe = resolveRealInstallExe(process.execPath);
-  const exeMatch = realExe === process.execPath ? process.execPath : [process.execPath, realExe];
-  const pids = supervisorPidsToKill(enumerateProcesses(), process.pid, exeMatch, scriptMatch);
-  for (const pid of pids) {
-    log(`stopping supervisor (pid ${pid})\u2026`);
     try {
-      (0, import_node_child_process6.execFileSync)("taskkill", ["/PID", String(pid), "/T", "/F"], { stdio: "ignore", windowsHide: true });
-    } catch {
-    }
-  }
-}
-async function cmdTeardown() {
-  killSupervisor();
-  stopServer();
-  const deadline = Date.now() + 3e3;
-  while (Date.now() < deadline) {
-    await new Promise((r) => setTimeout(r, 300));
-    if (await ping()) {
-      log("server respawned after kill \u2014 re-killing supervisor and stopping again");
-      killSupervisor();
-      stopServer();
+      commitStaged(stage.tempDir, stage.agentId, graftAgentsDir(), force);
+    } catch (err) {
+      if (err instanceof GraftCommitError && err.code === "collision") {
+        registerStage(stagedRef, stage.tempDir, stage.agentId);
+        return reply.status(409).send({ ok: false, error: err.message, agentId: stage.agentId, collision: true });
+      }
+      (0, import_node_fs18.rmSync)(stage.tempDir, { recursive: true, force: true });
+      throw err;
     }
-  }
-  if (await ping()) log("warning: a process may still be holding the port");
-  else log("server and supervisor stopped");
-}
-async function cmdRestart() {
-  await cmdStop();
-  await new Promise((r) => setTimeout(r, 500));
-  await cmdOpen();
-}
-function apiJson(path, method = "GET") {
-  return new Promise((resolve4, reject) => {
-    const req = import_node_http.default.request(`http://127.0.0.1:${PORT2}${path}`, { method, timeout: 5e3 }, (res) => {
-      let body = "";
-      res.on("data", (c) => body += c);
-      res.on("end", () => {
-        try {
-          resolve4(JSON.parse(body || "{}"));
-        } catch {
-          resolve4({});
+    broadcast({ type: "grafted", id: stage.agentId });
+    return { ok: true, agentId: stage.agentId };
+  });
+  app.post(
+    "/api/run",
+    async (req, reply) => {
+      const { id, dryRun, simulate, inputs } = req.body ?? {};
+      if (!id) return reply.status(400).send({ ok: false, error: "id required" });
+      const blocked = hostRunBlocked(appProvider(id));
+      if (blocked) return reply.send({ ok: false, error: blocked, blocked: true, simulate: !!simulate });
+      let result;
+      try {
+        result = await aware.run(id, { dryRun, simulate, inputs });
+      } catch (err) {
+        if (err instanceof AwareError) {
+          const detail = err.detail && typeof err.detail === "object" ? err.detail : null;
+          if (detail && detail.cancelled === true) {
+            app.log.info({ id }, "run cancelled by user");
+            return reply.send({ ok: false, error: "Run cancelled", cancelled: true, simulate: !!simulate });
+          }
+          const stderr = detail && typeof detail.stderr === "string" ? detail.stderr.trim() : "";
+          app.log.warn({ detail: err.detail }, err.message);
+          return reply.send({ ok: false, error: err.message, reason: stderr || null, simulate: !!simulate });
         }
-      });
-    });
-    req.on("error", reject);
-    req.on("timeout", () => {
-      req.destroy();
-      reject(new Error("timeout"));
-    });
-    req.end();
+        throw err;
+      }
+      const events = result.traceText ? parseTrace(result.traceText) : [];
+      broadcast({ type: "run-started", id, dryRun: !!dryRun, simulate: !!simulate, runId: result.runId });
+      for (const ev of events) broadcast({ type: "trace", id, event: ev });
+      broadcast({ type: "run-ended", id, runId: result.runId });
+      const report = extractReportHtml(events);
+      return { ok: true, runId: result.runId, tracePath: result.tracePath, events, report };
+    }
+  );
+  app.post("/api/run/stop", async () => {
+    const running = cancelActiveRun();
+    return { ok: true, running };
   });
-}
-async function cmdLogin() {
-  if (!await ping()) {
-    log("starting server\u2026");
-    startServerDetached();
-    if (!await waitHealthy()) {
-      log('server did not start \u2014 try "npm run dev" to see errors');
-      process.exit(1);
+  function resolveArgs(configArgs, inputs) {
+    const out = {};
+    for (const [k, v] of Object.entries(configArgs)) {
+      if (typeof v === "string") {
+        const m = v.match(/^\{\{\s*inputs\.([A-Za-z0-9._-]+)\s*\}\}$/);
+        out[k] = m && m[1] != null && m[1] in inputs ? inputs[m[1]] : v;
+      } else {
+        out[k] = v;
+      }
     }
+    return out;
   }
-  const started = await apiJson("/api/license/start", "POST").catch(() => ({}));
-  log(`opening sign-in in your browser${started.signInUrl ? `: ${started.signInUrl}` : ""}`);
-  log("waiting for sign-in to complete\u2026");
-  const deadline = Date.now() + 185e3;
-  while (Date.now() < deadline) {
-    const s = await apiJson("/api/license/status").catch(() => ({}));
-    if (s.state === "valid" || s.state === "offline-grace") {
-      log("signed in \u2014 subscription active");
-      return;
+  app.post(
+    "/api/debug-node",
+    async (req, reply) => {
+      const { id, nodeId, inputs } = req.body ?? {};
+      if (!id || !nodeId) return reply.status(400).send({ ok: false, error: "id and nodeId required" });
+      const appData = readApp(id);
+      if (!appData.runnable) return reply.status(409).send({ ok: false, error: "app not runnable \u2014 compile the lock first" });
+      const node = appData.nodes.find((n) => n.id === nodeId);
+      if (!node) return reply.status(404).send({ ok: false, error: `node not found: ${nodeId}` });
+      const code = node.config?.code;
+      if (typeof code !== "string") return reply.status(400).send({ ok: false, error: `node ${nodeId} has no exec code` });
+      const version = typeof node.config?.version === "string" ? node.config.version : void 0;
+      const configArgs = node.config?.args ?? {};
+      const effectiveInputs = {};
+      for (const inp of appData.inputs) {
+        const d = inp.default;
+        if (typeof d === "string" || typeof d === "number" || typeof d === "boolean") effectiveInputs[inp.name] = d;
+      }
+      Object.assign(effectiveInputs, inputs ?? {});
+      const args = resolveArgs(configArgs, effectiveInputs);
+      broadcast({ type: "debug-started", id, nodeId });
+      const result = await aware.execTekla(code, { version, args, debug: true });
+      broadcast({ type: "debug-ended", id, nodeId });
+      const r = result.result ?? {};
+      const html = typeof r.html === "string" ? r.html : null;
+      return { ok: true, result, report: html ? { nodeId, html } : null };
     }
-    if (s.state === "expired") {
-      log(`signed in, but the subscription is expired \u2014 subscribe at ${s.signInUrl ?? "floless.io"}`);
-      return;
+  );
+  app.get("/api/routines", async () => ({
+    // Annotate each with live state so the UI reconciles from the server (a dropped
+    // SSE event can't wedge an indicator): schedule routines carry queued/active
+    // `running`; trigger routines carry their live `session` snapshot
+    // (listening/fired×N/error/stopped).
+    ok: true,
+    routines: listRoutines().map(
+      (r) => r.kind === "trigger" ? { ...r, session: getSnapshot(r.id) } : { ...r, running: isRoutineRunning(r.id) }
+    ),
+    max: MAX_ROUTINES
+  }));
+  app.post(
+    "/api/routines",
+    async (req, reply) => {
+      const routine = createRoutine(req.body ?? {});
+      return reply.status(201).send({ ok: true, routine });
     }
-    await new Promise((r) => setTimeout(r, 2e3));
-  }
-  log('sign-in timed out \u2014 run "floless login" again to retry');
-}
-function parseAction(arg) {
-  let cmd = (arg || "open").toLowerCase();
-  if (cmd.startsWith("floless:")) {
-    try {
-      cmd = (new URL(arg).hostname || "open").toLowerCase();
-    } catch {
-      cmd = "open";
+  );
+  app.patch(
+    "/api/routines/:id",
+    async (req, reply) => {
+      const routine = updateRoutine(req.params.id, req.body ?? {});
+      if (!routine) return reply.status(404).send({ ok: false, error: "routine not found" });
+      return { ok: true, routine };
     }
-  }
-  return cmd;
-}
-async function cmdUpdate() {
-  log('this is the npm build \u2014 update it with "npm i -g @floless/app"');
-  log('(the installer build self-updates via "floless-app update")');
-}
-function removeRegistryFootprint() {
-  if (!isWin2) return;
-  try {
-    (0, import_node_child_process6.execFileSync)("reg", ["delete", RUN_KEY, "/v", RUN_VALUE, "/f"], { stdio: "ignore", windowsHide: true });
-  } catch {
-  }
-  try {
-    (0, import_node_child_process6.execFileSync)("reg", ["delete", PROTOCOL_KEY, "/f"], { stdio: "ignore", windowsHide: true });
-  } catch {
-  }
-}
-function promptYesNo(question) {
-  return new Promise((resolve4) => {
-    const rl = (0, import_node_readline.createInterface)({ input: process.stdin, output: process.stdout });
-    rl.question(`${question} `, (answer) => {
-      rl.close();
-      resolve4(/^y(es)?$/i.test((answer ?? "").trim()));
-    });
+  );
+  app.delete("/api/routines/:id", async (req, reply) => {
+    if (!deleteRoutine(req.params.id)) return reply.status(404).send({ ok: false, error: "routine not found" });
+    return { ok: true };
   });
-}
-async function cmdUninstall(flags = {}) {
-  const decision = teardownDecision({ ...flags, isTTY: process.stdin.isTTY });
-  log("stopping the server and supervisor\u2026");
-  await cmdTeardown();
-  log("removing the autostart entry and floless:// scheme\u2026");
-  removeRegistryFootprint();
-  let removeAware = decision.removeAware;
-  if (decision.prompt) {
-    removeAware = await promptYesNo("Also remove the AWARE runtime (@aware-aeco/cli)? [y/N]");
-  }
-  if (removeAware) {
-    log("removing the AWARE runtime \u2014 this will affect ANY other tool that uses @aware-aeco/cli.");
-    try {
-      (0, import_node_child_process6.execSync)("npm uninstall -g @aware-aeco/cli", { stdio: "inherit", shell: isWin2 });
-    } catch {
-      log('warning: "npm uninstall -g @aware-aeco/cli" failed \u2014 see the output above.');
+  app.post("/api/routines/:id/run", async (req, reply) => {
+    if (!runNow(req.params.id)) return reply.status(404).send({ ok: false, error: "routine not found" });
+    return { ok: true };
+  });
+  app.get("/api/templates", async () => ({ ok: true, templates: listTemplates() }));
+  app.post(
+    "/api/templates",
+    async (req, reply) => {
+      const { name, category, node, source } = req.body ?? {};
+      if (!name || !node) return reply.status(400).send({ ok: false, error: "name and node required" });
+      const tpl = addTemplate({ name, category, node, source });
+      broadcast({ type: "templates-changed" });
+      return { ok: true, template: tpl };
     }
-    let lsJson = "";
-    try {
-      lsJson = (0, import_node_child_process6.execSync)("npm ls -g @aware-aeco/cli --depth=0 --json", {
-        encoding: "utf8",
-        stdio: ["ignore", "pipe", "ignore"],
-        shell: isWin2
-      });
-    } catch (err) {
-      lsJson = String(err?.stdout ?? "");
+  );
+  app.delete("/api/templates/:id", async (req, reply) => {
+    if (!deleteTemplate(req.params.id)) return reply.status(404).send({ ok: false, error: "template not found" });
+    broadcast({ type: "templates-changed" });
+    return { ok: true };
+  });
+  app.get("/api/requests", async () => ({ ok: true, requests: listRequests() }));
+  app.get("/api/requests/:id/snapshot/:n", async (req, reply) => {
+    const n = Number.parseInt(req.params.n, 10);
+    const p = Number.isInteger(n) ? snapshotPathFor(req.params.id, n) : null;
+    if (!p || !(0, import_node_fs18.existsSync)(p)) return reply.status(404).send({ ok: false, error: "snapshot not found" });
+    const ext = p.split(".").pop().toLowerCase();
+    reply.header("Content-Type", ext === "png" ? "image/png" : ext === "webp" ? "image/webp" : "image/jpeg");
+    reply.header("Cache-Control", "no-store");
+    return (0, import_node_fs18.readFileSync)(p);
+  });
+  app.post(
+    "/api/tweak",
+    { bodyLimit: 25 * 1024 * 1024 },
+    async (req, reply) => {
+      const { appId, nodeId, instruction, snapshots } = req.body ?? {};
+      if (!appId || !nodeId || !instruction) {
+        return reply.status(400).send({ ok: false, error: "appId, nodeId, instruction required" });
+      }
+      let decoded;
+      try {
+        decoded = decodeSnapshots(snapshots);
+      } catch (e) {
+        return reply.status(400).send({ ok: false, error: e instanceof Error ? e.message : "bad snapshot" });
+      }
+      const request = addRequest({ type: "tweak", appId, nodeId, instruction }, decoded);
+      broadcast({ type: "request-added", request });
+      return { ok: true, request };
     }
-    const stillPresent = awareIsPresent(lsJson);
-    if (stillPresent) {
-      log("AWARE may still be installed \u2014 remove it manually with: npm uninstall -g @aware-aeco/cli");
-      log("(if that fails with a permission error, retry in an elevated shell).");
-    } else {
-      log("AWARE runtime removed.");
+  );
+  app.post("/api/use-template", async (req, reply) => {
+    const { appId, templateId } = req.body ?? {};
+    if (!appId || !templateId) return reply.status(400).send({ ok: false, error: "appId and templateId required" });
+    const template = getTemplate(templateId);
+    if (!template) return reply.status(404).send({ ok: false, error: "template not found" });
+    const request = addRequest({ type: "use-template", appId, templateId, template });
+    broadcast({ type: "request-added", request });
+    return { ok: true, request };
+  });
+  app.delete("/api/requests/:id", async (req, reply) => {
+    if (!deleteRequest(req.params.id)) return reply.status(404).send({ ok: false, error: "request not found" });
+    broadcast({ type: "requests-changed" });
+    return { ok: true };
+  });
+  app.delete("/api/requests", async () => {
+    const cleared = clearRequests();
+    broadcast({ type: "requests-changed" });
+    return { ok: true, cleared };
+  });
+  app.get("/api/events", async (_req, reply) => {
+    reply.hijack();
+    reply.raw.writeHead(200, {
+      "Content-Type": "text/event-stream",
+      "Cache-Control": "no-cache",
+      Connection: "keep-alive"
+    });
+    reply.raw.write(`data: ${JSON.stringify({ type: "connected" })}
+
+`);
+    addClient(reply);
+  });
+  const watcher = startWatcher();
+  runBootstrap(bootstrapDeps).then((st) => {
+    if (st.status === "ready") startScheduler();
+    else app.log.warn({ reason: st.reason }, "AWARE bootstrap not ready; scheduler deferred");
+  }).catch((err) => app.log.error({ err: String(err) }, "bootstrap continuation failed"));
+  const close = async () => {
+    cancelAllConnects();
+    clearAllStages();
+    await stopScheduler();
+    await watcher?.close();
+    await app.close();
+    process.exit(0);
+  };
+  process.on("SIGINT", close);
+  process.on("SIGTERM", close);
+  await app.listen({ port: PORT2, host: HOST });
+  app.log.info(`floless.app on http://${HOST}:${PORT2}  (aware npm ${getBootstrapState().awareVersion ?? "unresolved"})`);
+  try {
+    const synced = syncSkills().filter((r) => r.action === "installed" || r.action === "updated");
+    if (synced.length) {
+      app.log.info(
+        { skills: synced.map((s) => `${s.runtime}:${s.skill}@${s.to}`) },
+        `synced ${synced.length} floless.app skill(s) into AI terminal(s)`
+      );
     }
-  } else {
-    log("keeping the AWARE runtime (@aware-aeco/cli). Remove it later with: npm uninstall -g @aware-aeco/cli");
-  }
-  log("done. Finally, remove floless.app itself with: npm uninstall -g @floless/app");
-}
-var ACTIONS = { open: cmdOpen, start: cmdStart, supervise: cmdSupervise, stop: cmdStop, restart: cmdRestart, login: cmdLogin, update: cmdUpdate, uninstall: cmdUninstall };
-async function runAction(arg, flagArgv = [], selfVersion = null) {
-  _selfVersion = selfVersion;
-  const cmd = parseAction(arg);
-  const action = ACTIONS[cmd];
-  if (!action) {
-    log(`unknown command "${cmd}" \u2014 use: open | start | supervise | stop | restart | login | update | uninstall`);
-    process.exit(2);
+  } catch (err) {
+    app.log.warn({ err: String(err) }, "skill sync failed (non-fatal)");
   }
-  await action(parseTeardownFlags(flagArgv));
-}
-var entry = (0, import_node_path17.basename)(process.argv[1] ?? "").toLowerCase();
-if (entry === "launch.mjs") {
-  runAction(process.argv[2], process.argv.slice(3)).catch((e) => {
-    log(`error: ${e?.message ?? e}`);
-    process.exit(1);
-  });
 }
 
 // protocol.ts
@@ -56816,7 +56825,7 @@ async function main() {
 `);
       return;
     }
-    const result = await applyUpdate(check, { onBeforeApply: () => runAction("stop") });
+    const result = await applyUpdate(check, { onBeforeApply: () => cmdTeardown() });
     process.stdout.write(`floless: ${result.message}
 `);
     process.exit(result.applied ? 0 : 1);