@floless/app 0.69.0 → 0.70.0

package/dist/templates/dummy-report.flo

@@ -4,10 +4,11 @@ display-name:  Dummy Report
 description: |
   A self-contained test workflow that produces a styled HTML report — no Tekla
   model required. Neither node touches `model`, so it runs on the host bridge with
-  nothing open. Use it to preview the in-app HTML Viewer and the "Made with
-  FloLess" report badge end to end without a real model. Two real tekla/exec nodes:
-  a title input → a report node that builds the HTML inline and is the terminal the
-  viewer renders.
+  nothing open. Use it to preview the in-app HTML Viewer, the "Made with FloLess"
+  report badge, and the viewer's "Open file" / "Reveal in folder" buttons end to
+  end without a real model. Two real tekla/exec nodes: a title input → a report
+  node that builds the HTML inline, saves a copy to a file in your temp folder, and
+  is the terminal the viewer renders.
 exposes-as-agent: false
 inputs:
   title:
@@ -47,11 +48,14 @@ nodes:
       args:
         title: "{{ title-input.result.title }}"
       code: |
-        // Dummy report — builds a styled HTML report inline and returns it as this
-        // terminal node's `html`, so the floless.app HTML Viewer renders it on
-        // double-click. Touches NO `model` (runs with no Tekla open) and writes no
-        // file. Pure string build, manual HTML-escape (no System.Net available).
+        // Dummy report — builds a styled HTML report inline, saves a copy to a file
+        // in your temp folder, and returns the report as this terminal node's `html`
+        // (so the floless.app HTML Viewer renders it on double-click) plus that file's
+        // path as `saved_path` (so the viewer's "Open file" / "Reveal in folder"
+        // buttons have a real file to act on). Touches NO `model`, so it runs with no
+        // Tekla open. Manual HTML-escape (no System.Net available).
         using System;
+        using System.IO;
         using System.Text;
 
         string title = "FloLess Test Report";
@@ -99,6 +103,20 @@ nodes:
         sb.Append("<div class=\"ft\">This is a dummy report for testing the FloLess HTML viewer.</div>");
         sb.Append("</div></body></html>");
 
-        return new { ok = true, title, html = sb.ToString() };
+        string html = sb.ToString();
+
+        // Also SAVE the report to a real file on disk so the viewer's "Open file" /
+        // "Reveal in folder" buttons have something to act on. Best-effort: a write
+        // failure just means no saved file (the report still renders inline).
+        string savedPath = null;
+        try
+        {
+            var outPath = Path.Combine(Path.GetTempPath(), "floless-dummy-report.html");
+            File.WriteAllText(outPath, html);
+            savedPath = outPath;
+        }
+        catch { savedPath = null; }
+
+        return new { ok = true, title, html, saved_path = savedPath };
 connections:
   - { from: title-input, to: report }

package/dist/web/aware.js

@@ -24,6 +24,8 @@
   const $reportSub = document.getElementById('report-sub');
   const $reportOpen = document.getElementById('report-open');
   const $reportShare = document.getElementById('report-share');
+  const $reportOpenFile = document.getElementById('report-open-file');
+  const $reportRevealFile = document.getElementById('report-reveal-file');
   const $reportClose = document.getElementById('report-close');
   const $reportStop = document.getElementById('report-stop');
   const $stopRunBtn = document.getElementById('stop-run-btn');
@@ -1699,12 +1701,26 @@
   // never a disabled affordance with no path forward).
   // The last HTML painted (static or 3D) — so ↗ Open works for both surfaces.
   let lastPaintedHtml = '';
+  // The workflow-written output file the current report reported (its run's
+  // `saved_path`), or '' when the run wrote none. Drives the ⧉ Open file / ▤ Reveal
+  // buttons — both hide together when there's no file (#209). Hidden is the default:
+  // paintReport clears it every paint, and only a run/cached-show with a real path
+  // re-shows it — so a trigger/3D/other paint can never leak a previous file's path.
+  let currentSavedPath = '';
+  function showSavedPathActions(path) {
+    currentSavedPath = typeof path === 'string' ? path : '';
+    const has = !!currentSavedPath;
+    $reportOpenFile.hidden = !has;
+    $reportRevealFile.hidden = !has;
+  }
+
   // Paint a report into the viewer. A STATIC report uses the scriptless srcdoc frame; an
   // INTERACTIVE 3D doc (viewer-3d) uses the script-enabled frame via a data: URL (opaque
   // origin, cannot touch the app page) and keeps a "Loading 3D view…" overlay until the doc
   // posts `viewer-ready`. Exactly one frame is shown at a time.
   function paintReport(html, interactive) {
     lastPaintedHtml = html || '';
+    showSavedPathActions(''); // default off; the caller re-shows if this report saved a file
     if (interactive) {
       $reportFrame.hidden = true; $reportFrame.srcdoc = '';
       $reportFrame3d.hidden = false;
@@ -1727,6 +1743,7 @@
     $reportFrame.srcdoc = ''; $reportFrame.hidden = false;
     $reportFrame3d.hidden = true; $reportFrame3d.removeAttribute('src');
     lastPaintedHtml = '';
+    showSavedPathActions(''); // no report shown → no saved-file actions
   }
 
   // Double-click the HTML Viewer node → LOAD the last report (no run; running is
@@ -1748,6 +1765,7 @@
         $reportSub.textContent = `Last report${sfx} — rendered from the run's output, never composed by the UI.`;
       }
       paintReport(cached.html, cached.interactive);
+      showSavedPathActions(cached.savedPath); // re-show Open file / Reveal if this run saved one
     } else {
       clearReportFrames();
       $reportShare.hidden = true; // nothing to share — hide, don't disable
@@ -2109,8 +2127,12 @@
         $reportSub.innerHTML = `Live 3D view from <code>${escapeHtml(nodeId)}</code>${inputBadge ? ' · ' + escapeHtml(inputBadge) : ''} — drag to orbit, scroll to zoom, click an element to inspect.`;
       }
       paintReport(html, interactive);
+      // If a node wrote an output file, the run reports its path — surface the
+      // ⧉ Open file / ▤ Reveal buttons and cache it so a later double-click restores them (#209).
+      const savedPath = res && typeof res.savedPath === 'string' ? res.savedPath : '';
+      showSavedPathActions(savedPath);
       markFirstRunDone(app.id); // a real run rendered → this workflow is no longer "new" (app captured pre-await; a mid-run switch must not mark the wrong workflow)
-      lastReportByApp.set(currentId, { nodeId, label: inputBadge, html, interactive });
+      lastReportByApp.set(currentId, { nodeId, label: inputBadge, html, interactive, savedPath });
       $reportModal.dataset.html = '1';
       appendNarration(`Rendered the ${interactive ? '3D view' : 'report'} from <strong>${escapeHtml(nodeId)}</strong>${inputBadge ? ' (' + escapeHtml(inputBadge) + ')' : ''} — live run against the model.`);
     } catch (e) {
@@ -2664,6 +2686,22 @@
   });
   // The header ■ Stop run — the always-reachable twin of the overlay Stop (#39).
   if ($stopRunBtn) $stopRunBtn.onclick = () => stopRun();
+  // ⧉ Open file / ▤ Reveal in folder — act on the run's saved output file via the OS.
+  // The sandboxed report can't (file:// is blocked from an http page), so the local
+  // host shells it (#209). Fire-and-forget: a 400 (file moved/deleted, or bad type)
+  // surfaces as a toast, never a console error.
+  async function savedFileAction(endpoint, failMsg) {
+    if (!currentSavedPath) return; // button is hidden in this state; belt-and-braces
+    try {
+      await api(endpoint, { method: 'POST', body: JSON.stringify({ path: currentSavedPath }) });
+    } catch (e) {
+      const detail = e && e.body && e.body.error;
+      showToast(detail ? `${failMsg} — ${detail}` : failMsg, 'warn');
+    }
+  }
+  $reportOpenFile.onclick = () => savedFileAction('/api/open-file', 'Couldn’t open the file');
+  $reportRevealFile.onclick = () => savedFileAction('/api/reveal', 'Couldn’t reveal the file');
+
   $reportOpen.onclick = () => {
     const html = lastPaintedHtml || $reportFrame.srcdoc;
     if (!html) return;
@@ -6392,12 +6430,15 @@
   window.flolessBridge = {
     api,
     // Open report HTML in the existing sandboxed HTML Viewer (same modal + srcdoc
-    // iframe the canvas report node uses — no new sandbox surface).
-    showHtmlReport(title, html) {
+    // iframe the canvas report node uses — no new sandbox surface). `savedPath` is
+    // optional: pass the run's saved_path so a dashboard-panel run surfaces the same
+    // ⧉ Open file / ▤ Reveal buttons as a canvas run (#209); omit → they stay hidden.
+    showHtmlReport(title, html, savedPath) {
       $reportTitle.textContent = title;
       $reportSub.textContent = "Rendered from the run's output — never composed by the UI.";
       showModal($reportModal);
       paintReport(html);
+      showSavedPathActions(savedPath);
     },
     // Refresh the footer requests counter after the Customize box queues a request.
     loadRequests,

package/dist/web/index.html

@@ -395,6 +395,8 @@
         <div class="report-actions">
           <button id="report-stop" class="ghost report-stop" hidden data-tip="Stop the live session — the report stops updating on each change">■ Stop run</button>
           <button id="report-share" class="ghost" hidden data-tip="Share this report as a link anyone can view — hosted on floless.io">↗ Share</button>
+          <button id="report-open-file" class="ghost" hidden data-tip="Open the saved file in its default app">⧉ Open file</button>
+          <button id="report-reveal-file" class="ghost" hidden data-tip="Show the saved file in its folder">▤ Reveal in folder</button>
           <button id="report-open" class="ghost" data-tip="Open the report in a new browser tab">↗ Open</button>
           <button id="report-close" data-tip="Close">×</button>
         </div>

package/dist/web/panels.js

@@ -398,7 +398,8 @@
     const payload = payloadFor(source);
     const html = payload && typeof payload === 'object' && typeof payload.html === 'string' ? payload.html : null;
     if (!html) { showToast('No report yet — run the workflow first.', 'info'); return; }
-    if (bridge.showHtmlReport) bridge.showHtmlReport(title || 'Report', html);
+    const savedPath = payload && typeof payload.saved_path === 'string' ? payload.saved_path : null;
+    if (bridge.showHtmlReport) bridge.showHtmlReport(title || 'Report', html, savedPath);
   }
 
   async function runAction(btn) {
@@ -415,7 +416,7 @@
         return;
       }
       const html = res.report && res.report.html;
-      if (html && bridge.showHtmlReport) bridge.showHtmlReport(`${appId} · report`, html);
+      if (html && bridge.showHtmlReport) bridge.showHtmlReport(`${appId} · report`, html, res.savedPath);
       else showToast(`Run complete · ${appId}`, 'ok');
     } catch (err) {
       const cred = err && err.body && err.body.credentialIssue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floless/app",
-  "version": "0.69.0",
+  "version": "0.70.0",
   "type": "module",
   "description": "Thin localhost host for floless.app — serves web/ and shells the aware CLI. No engine, no LLM.",
   "bin": {