@floless/app 0.72.2 → 0.72.3

package/dist/floless-server.cjs

@@ -53022,7 +53022,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.72.2" : void 0,
+    define: true ? "0.72.3" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -53032,7 +53032,7 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.72.2" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.72.3" : void 0 });
 }
 
 // workflow-update.ts
@@ -53329,14 +53329,16 @@ function extractReportHtml(events) {
 var import_node_child_process3 = require("node:child_process");
 var import_node_fs12 = require("node:fs");
 var import_node_path11 = require("node:path");
-var OPENABLE_EXTS = /* @__PURE__ */ new Set([".xls", ".xlsx", ".html", ".htm", ".csv"]);
+var OPEN_EXTS = /* @__PURE__ */ new Set([".xls", ".xlsx", ".html", ".htm", ".csv"]);
+var REVEAL_EXTS = /* @__PURE__ */ new Set([...OPEN_EXTS, ".ifc", ".nc1", ".dstv"]);
 function hasOpenableExt(path) {
-  return OPENABLE_EXTS.has((0, import_node_path11.extname)(path).toLowerCase());
+  return OPEN_EXTS.has((0, import_node_path11.extname)(path).toLowerCase());
 }
-function validateOpenable(path) {
+function validateOpenable(path, mode = "open") {
   if (typeof path !== "string" || !path.trim()) return { ok: false, error: "path required" };
   if (path.includes("%")) return { ok: false, error: "unsupported file path" };
-  if (!hasOpenableExt(path)) return { ok: false, error: "unsupported file type" };
+  const allowed = mode === "reveal" ? REVEAL_EXTS.has((0, import_node_path11.extname)(path).toLowerCase()) : hasOpenableExt(path);
+  if (!allowed) return { ok: false, error: "unsupported file type" };
   let isFile = false;
   try {
     isFile = (0, import_node_fs12.existsSync)(path) && (0, import_node_fs12.statSync)(path).isFile();
@@ -53973,6 +53975,9 @@ function slugify(name) {
 function projectDir(id) {
   return (0, import_node_path17.join)(DIR2, safeProjectId(id));
 }
+function projectExportsDir(id) {
+  return (0, import_node_path17.join)(projectDir(id), "exports");
+}
 var metaPath = (id) => (0, import_node_path17.join)(projectDir(id), "project.json");
 function readMeta(id) {
   const p = metaPath(id);
@@ -54020,9 +54025,19 @@ function renameProject(id, name) {
   writeMeta(next);
   return next;
 }
-function touchProject(id) {
+function markApproved(id) {
   const meta = readMeta(safeProjectId(id));
-  if (meta) writeMeta({ ...meta, updatedAt: (/* @__PURE__ */ new Date()).toISOString() });
+  if (!meta) throw new ProjectError(`unknown project: ${id}`);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const next = { ...meta, approvedAt: now, updatedAt: now };
+  writeMeta(next);
+  return next;
+}
+function clearApproval(id) {
+  const meta = readMeta(safeProjectId(id));
+  if (!meta) return;
+  const { approvedAt: _drop, ...rest } = meta;
+  writeMeta({ ...rest, updatedAt: (/* @__PURE__ */ new Date()).toISOString() });
 }
 function duplicateProject(id, name) {
   const src = readMeta(safeProjectId(id));
@@ -63782,6 +63797,9 @@ async function startServer() {
     if (err2 instanceof ContractError) {
       return reply.status(400).send({ ok: false, error: err2.message });
     }
+    if (err2 instanceof ProjectError) {
+      return reply.status(400).send({ ok: false, error: err2.message });
+    }
     if (err2 instanceof RoutineError) {
       return reply.status(err2.status).send({ ok: false, error: err2.message });
     }
@@ -64226,6 +64244,20 @@ async function startServer() {
     if (p.app !== appId) return `project "${project}" belongs to app "${p.app}", not "${appId}"`;
     return null;
   }
+  function projectExportFiles(appId) {
+    return [
+      { kind: "bom-csv", filename: `${appId}-bom.csv` },
+      { kind: "bom-xlsx", filename: `${appId}-bom.xlsx` },
+      { kind: "ifc", filename: `${appId}.ifc` }
+    ];
+  }
+  function projectExportGate(appId, project) {
+    const p = getProject(project);
+    if (!p) return { status: 404, error: `unknown project: ${project}` };
+    if (p.app !== appId) return { status: 404, error: `project "${project}" belongs to app "${p.app}", not "${appId}"` };
+    if (!p.approvedAt) return { status: 409, error: "Approve the model before exporting \u2014 exports go out only after sign-off." };
+    return null;
+  }
   app.get("/api/contract/:appId", async (req, reply) => {
     const project = req.query.project || void 0;
     if (project) {
@@ -64255,7 +64287,7 @@ async function startServer() {
         if (e instanceof ContractError) return reply.status(400).send({ ok: false, error: e.message });
         throw e;
       }
-      if (project) touchProject(project);
+      if (project) clearApproval(project);
       broadcast({ type: "contract-changed", appId: req.params.appId, project });
       return { ok: true };
     }
@@ -64287,7 +64319,9 @@ async function startServer() {
       });
     }
     broadcast({ type: "compiled", id: req.params.appId, lockPath: result.lockPath });
-    return { ok: true, result };
+    let approvedAt;
+    if (project) approvedAt = markApproved(project).approvedAt;
+    return { ok: true, result, approvedAt };
   });
   app.post(
     "/api/contract/:appId/score",
@@ -64351,6 +64385,24 @@ async function startServer() {
     }
     return null;
   }
+  app.get("/api/contract/:appId/exports", async (req, reply) => {
+    const project = req.query.project;
+    if (!project) return reply.status(400).send({ ok: false, error: "project required" });
+    const bad = projectAppMismatch(req.params.appId, project);
+    if (bad) return reply.status(404).send({ ok: false, error: bad });
+    const dir = projectExportsDir(project);
+    const exports2 = projectExportFiles(req.params.appId).map(({ kind, filename }) => {
+      const path = (0, import_node_path30.join)(dir, filename);
+      let exportedAt = null;
+      try {
+        const st = (0, import_node_fs32.statSync)(path);
+        if (st.isFile()) exportedAt = st.mtime.toISOString();
+      } catch {
+      }
+      return { kind, filename, path, exportedAt };
+    });
+    return { ok: true, approvedAt: getProject(project)?.approvedAt ?? null, exports: exports2 };
+  });
   app.post("/api/contract/:appId/export-3d", async (req, reply) => {
     const doc = readContract(req.params.appId);
     if (doc == null) return reply.status(404).send({ ok: false, error: "no contract to export" });
@@ -64391,7 +64443,12 @@ async function startServer() {
     return { ok: true, report: { ...extracted, interactive: true }, skipped };
   });
   app.post("/api/contract/:appId/export-ifc", async (req, reply) => {
-    const doc = readContractForApp(req.params.appId);
+    const project = req.query.project || void 0;
+    if (project) {
+      const g = projectExportGate(req.params.appId, project);
+      if (g) return reply.status(g.status).send({ ok: false, error: g.error });
+    }
+    const doc = project ? readContract(req.params.appId, project) : readContractForApp(req.params.appId);
     if (doc == null) return reply.status(404).send({ ok: false, error: "no contract to export" });
     const isVector = typeof doc === "object" && doc != null && doc.type === "drawing.vector/v1";
     let scene;
@@ -64422,7 +64479,8 @@ async function startServer() {
     }
     const companionId = `${req.params.appId}-ifc`;
     const filename = `${req.params.appId}.ifc`;
-    const outPath = (0, import_node_path30.join)(appPath(companionId), filename);
+    const outPath = project ? (0, import_node_path30.join)(projectExportsDir(project), filename) : (0, import_node_path30.join)(appPath(companionId), filename);
+    if (project) (0, import_node_fs32.mkdirSync)((0, import_node_path30.dirname)(outPath), { recursive: true });
     let flo;
     try {
       flo = writeIfcApp(appPath(companionId), companionId, scene, outPath, writeOpts);
@@ -64448,10 +64506,15 @@ async function startServer() {
     if (!(0, import_node_fs32.existsSync)(outPath)) return reply.send({ ok: false, error: "the IFC export produced no file" });
     const content = (0, import_node_fs32.readFileSync)(outPath, "utf8");
     broadcast({ type: "apps-changed" });
-    return { ok: true, filename, content, bytes: Buffer.byteLength(content), skipped, ...extrusionsSkipped ? { extrusionsSkipped } : {} };
+    return { ok: true, filename, savedTo: outPath, content, bytes: Buffer.byteLength(content), skipped, ...extrusionsSkipped ? { extrusionsSkipped } : {} };
   });
   app.post("/api/contract/:appId/export-tekla", async (req, reply) => {
-    const doc = readContract(req.params.appId);
+    const project = req.query.project || void 0;
+    if (project) {
+      const g = projectExportGate(req.params.appId, project);
+      if (g) return reply.status(g.status).send({ ok: false, error: g.error });
+    }
+    const doc = project ? readContract(req.params.appId, project) : readContract(req.params.appId);
     if (doc == null) return reply.status(404).send({ ok: false, error: "no contract to bake" });
     const v = validateSteelTakeoff(doc);
     if (!v.valid) return reply.status(400).send({ ok: false, error: "stored contract is invalid \u2014 re-save it in the editor" });
@@ -64510,13 +64573,18 @@ async function startServer() {
   });
   app.post("/api/contract/:appId/export-bom/:format", async (req, reply) => {
     const { appId, format } = req.params;
+    const project = req.query.project || void 0;
     if (format !== "csv" && format !== "xlsx") {
       return reply.status(400).send({ ok: false, error: `unknown format "${format}" \u2014 use csv or xlsx` });
     }
     if (!/^[a-z0-9][a-z0-9._-]*$/i.test(appId)) {
       return reply.status(400).send({ ok: false, error: `invalid appId: ${appId}` });
     }
-    const doc = readContract(appId);
+    if (project) {
+      const g = projectExportGate(appId, project);
+      if (g) return reply.status(g.status).send({ ok: false, error: g.error });
+    }
+    const doc = readContract(appId, project);
     if (doc == null) return reply.status(404).send({ ok: false, error: "no contract to export" });
     const v = validateSteelTakeoff(doc);
     if (!v.valid) return reply.status(400).send({ ok: false, error: "stored contract is invalid \u2014 re-save it in the editor" });
@@ -64524,9 +64592,9 @@ async function startServer() {
     if (bom.rows.filter((r) => r.Profile !== "TOTAL").length === 0) {
       return reply.status(422).send({ ok: false, error: "no priced members to export \u2014 every member is an RFI (no AISC size / weight yet)" });
     }
-    const outPath = bomExportPath(appId, format);
-    const dir = (0, import_node_path30.dirname)(outPath);
     const filename = `${appId}-bom.${format}`;
+    const outPath = project ? (0, import_node_path30.join)(projectExportsDir(project), filename) : bomExportPath(appId, format);
+    const dir = (0, import_node_path30.dirname)(outPath);
     try {
       (0, import_node_fs32.mkdirSync)(dir, { recursive: true });
       if (format === "csv") {
@@ -64916,16 +64984,16 @@ async function startServer() {
     const running = cancelActiveRun();
     return { ok: true, running };
   });
-  function fileVerb(launch) {
+  function fileVerb(launch, mode) {
     return async (req, reply) => {
-      const check = validateOpenable(req.body?.path);
+      const check = validateOpenable(req.body?.path, mode);
       if (!check.ok) return reply.status(400).send({ ok: false, error: check.error });
       launch(check.path);
       return { ok: true };
     };
   }
-  app.post("/api/open-file", fileVerb(launchFile));
-  app.post("/api/reveal", fileVerb(revealFile));
+  app.post("/api/open-file", fileVerb(launchFile, "open"));
+  app.post("/api/reveal", fileVerb(revealFile, "reveal"));
   app.post(
     "/api/trigger-run",
     async (req, reply) => {

package/dist/web/app.css

@@ -3312,7 +3312,7 @@ body {
 /* ── Workspaces (mode shell) — see docs/superpowers/mockups/2026-07-03-workspaces-mockup.html ── */
 /* The display rules below (display:flex etc.) would otherwise override the `hidden` attribute's
    UA display:none — these guards keep hidden winning so nothing leaks across modes. */
-.ws-landing[hidden], .ws-project[hidden], .ws-spine[hidden], .ws-frame[hidden] { display:none !important; }
+.ws-landing[hidden], .ws-project[hidden], .ws-spine[hidden], .ws-frame[hidden], .ws-exports[hidden] { display:none !important; }
 .mode-switch { display:inline-flex; border:1px solid var(--border-strong); border-radius:6px;
   overflow:hidden; background:var(--surface-2); flex:none; }
 .mode-switch button { background:transparent; border:none; border-radius:0; color:var(--text-muted);
@@ -3390,3 +3390,41 @@ body {
 .tabs.ws-step-tabs { background:transparent; padding:0 6px; }
 .tabs.ws-step-tabs button { flex:0 0 auto; padding:11px 16px; }
 .ws-frame { flex:1; min-height:0; width:100%; border:none; background:var(--bg); }
+
+/* ── Workspaces ▸ Exports step (shell-rendered pane; export cards over the project's OWN
+      contract). Ports the mockup's .ecard grid into app tokens; all states baseline-faithful. */
+.ws-exports { flex:1; min-height:0; display:flex; flex-direction:column; }
+/* The Approve gate — a project's Model must be signed off before its exports go out. Not an
+   error (accent-dim rail, never a danger color); the inline "Approve" deep-links the sign-off. */
+.ws-exports-gate { flex:none; margin:12px 20px 0; padding:9px 13px; display:flex; align-items:center; gap:6px;
+  background:var(--surface-2); border:1px solid var(--border); border-left:3px solid var(--accent-dim);
+  border-radius:6px; font-size:12px; color:var(--text-muted); }
+.ws-exports-gate button { background:none; border:none; padding:0; font:inherit; color:var(--accent); cursor:pointer; }
+.ws-exports-gate button:hover { color:var(--accent-bright); text-decoration:underline; }
+.exports-note { flex:none; padding:14px 20px 4px; color:var(--text-muted); font-size:12px; }
+.exports-note b { color:var(--text); font-weight:600; }
+.exports-note code { font-family:var(--mono); color:var(--accent-bright); font-size:11px; }
+.export-grid { flex:1; overflow-y:auto; padding:14px 20px 22px; display:grid; gap:14px;
+  grid-template-columns:repeat(auto-fill,minmax(250px,1fr)); align-content:start;
+  scrollbar-width:thin; scrollbar-color:var(--border-strong) transparent; }
+.ecard { background:var(--surface); border:1px solid var(--border); border-radius:8px; padding:15px;
+  display:flex; flex-direction:column; gap:10px; }
+.ecard .e-top { display:flex; align-items:center; gap:10px; }
+.ecard .e-ico { width:34px; height:34px; border-radius:7px; background:var(--surface-2);
+  border:1px solid var(--border-strong); display:flex; align-items:center; justify-content:center; font-size:15px; }
+.ecard .e-name { font-size:13px; font-weight:600; color:var(--text); }
+.ecard .e-fmt { font-size:10.5px; color:var(--text-dim); font-family:var(--mono); }
+.ecard .e-meta { font-size:11px; color:var(--text-muted); display:flex; align-items:center;
+  justify-content:space-between; gap:8px; min-height:16px; }
+.ecard .e-status { color:var(--text-dim); }
+.ecard .e-done .chk { color:var(--ok); }                                  /* the ✓ */
+.ecard .e-done .t { color:var(--text-muted); font-family:var(--mono); }   /* HH:MM — the scannable datum */
+.ecard .e-links { display:flex; align-items:center; gap:8px; flex:none; }
+.ecard .e-link { background:none; border:none; padding:0; font:inherit; font-size:11px; color:var(--text-muted); cursor:pointer; }
+.ecard .e-link:hover { color:var(--accent); }
+.ecard .e-link + .e-link { border-left:1px solid var(--border); padding-left:8px; }  /* thin divider, keeps them tertiary */
+.ecard .e-act { margin-top:auto; }
+.ecard .e-act button { width:100%; padding:7px 10px; font-size:12px; border-radius:5px; font-family:var(--ui);
+  background:var(--surface-2); border:1px solid var(--border-strong); color:var(--text-muted); cursor:pointer; transition:all .15s; }
+.ecard .e-act button:hover:not(:disabled) { color:var(--text); border-color:var(--accent-dim); background:var(--surface); }
+.ecard .e-act button:disabled { opacity:0.6; cursor:not-allowed; }

package/dist/web/index.html

@@ -167,11 +167,15 @@
         <div class="tabs ws-step-tabs" id="ws-step-tabs" role="tablist" aria-label="Project steps">
           <button type="button" data-step="drawings" role="tab" aria-selected="false">Drawings</button>
           <button type="button" data-step="model" class="active" role="tab" aria-selected="true">Model</button>
+          <button type="button" data-step="exports" role="tab" aria-selected="false">Exports</button>
         </div>
         <!-- Two lazily-srced iframes so switching steps never reloads the editor's 3D state.
              Same-origin like #contract-editor-frame (they call /api/contract directly). -->
         <iframe id="ws-frame-model" class="ws-frame" title="Project model editor" hidden></iframe>
         <iframe id="ws-frame-drawings" class="ws-frame" title="Project drawings & filter" hidden></iframe>
+        <!-- Exports = a SHELL-rendered pane (not an iframe): export cards over the project's own
+             contract. workspaces.js fills it on step-switch (renderExports). -->
+        <div class="ws-exports" id="ws-exports" hidden></div>
       </div>
       <div class="hint" id="canvas-hint">Click any node to inspect. Star ★ a node to save it as a reusable Template. Drag the background to pan — or press Home to fit.</div>
       <div class="fav-bar" id="fav-bar">

package/dist/web/steel-editor.html

@@ -349,6 +349,10 @@
  #propPop .ppfoot .seg2{margin-top:0}
  #propPop .ppfoot label{display:flex;align-items:center;gap:7px;color:var(--text);cursor:pointer;font-size:11px}
  #propPop .ppfoot label input{margin:0;accent-color:var(--brand);cursor:pointer;flex:none;width:auto}
+ /* Connection read-only mode: no labeling, so hide the label footer + Clear-all; rows aren't clickable. */
+ #propPop.connmode .ppfoot{display:none}
+ #propPop.connmode #ppClear{display:none}
+ #propPop.connmode .pprow{cursor:default;padding-left:14px}   /* no checkbox → nudge the name so it doesn't float where the box was */
  /* thin cluster divider in the 3D toolbar */
  #m3dBar .tb-sep{width:1px;height:18px;background:var(--line);flex:0 0 auto;align-self:center}
  /* Themed tooltip — replaces native title= so no OS-default tooltip leaks the dark theme. */
@@ -2018,6 +2022,7 @@ function refreshPropLabels3d(){const V=window.Steel3DView;if(!V||!V.setPropLabel
 
 // ---- The floating Properties popup ----
 let propPopPinned=false;
+let propPopConn=null;   // non-null = read-only Connection mode (a connection selected → connPropRows); null = the member label-picker mode
 function propPopOpen(){const el=document.getElementById('propPop');return !!(el&&el.classList.contains('open'));}
 function propPopEl(){let el=document.getElementById('propPop');if(el)return el;
  el=document.createElement('div');el.id='propPop';el.setAttribute('role','dialog');el.setAttribute('aria-label','Member properties');
@@ -2032,8 +2037,8 @@ function propPopEl(){let el=document.getElementById('propPop');if(el)return el;
    +`<label><input type=checkbox id=ppSel>Selected only</label></div>`;
  document.body.appendChild(el);
  const list=el.querySelector('#ppList');
- list.addEventListener('click',e=>{const row=e.target.closest('.pprow');if(!row||row.classList.contains('dis'))return;if(e.target.tagName==='INPUT')return;togglePropKey(row.dataset.k);});
- list.addEventListener('change',e=>{const cb=e.target;if(cb.tagName!=='INPUT')return;const row=cb.closest('.pprow');if(row)togglePropKey(row.dataset.k,cb.checked);});
+ list.addEventListener('click',e=>{const row=e.target.closest('.pprow');if(!row||row.classList.contains('dis')||!row.dataset.k)return;if(e.target.tagName==='INPUT')return;togglePropKey(row.dataset.k);});   // conn-mode rows carry no data-k → not toggleable
+ list.addEventListener('change',e=>{const cb=e.target;if(cb.tagName!=='INPUT')return;const row=cb.closest('.pprow');if(row&&row.dataset.k)togglePropKey(row.dataset.k,cb.checked);});
  el.querySelector('#ppSearch').addEventListener('input',renderPropPop);
  el.querySelector('#ppClear').onclick=()=>{C.prop_labels.props=[];refreshPropLabels();};
  el.querySelector('#ppClose').onclick=()=>closePropPop(true);
@@ -2053,6 +2058,9 @@ function togglePropKey(k,on){const pl=C.prop_labels,has=pl.props.includes(k);if(
  refreshPropLabels();}
 // rebuild the popup contents against the current selection (chrome + rows), preserving row focus
 function renderPropPop(){const el=document.getElementById('propPop');if(!el||!el.classList.contains('open'))return;
+ if(propPopPinned){const cs=connSelInfo();if(cs)propPopConn=cs;else if(selArr().length)propPopConn=null;}   // a PINNED popup follows the selection across member ↔ connection (an unpinned one re-asserts its mode on each right-click)
+ el.classList.toggle('connmode',!!propPopConn);
+ if(propPopConn){renderConnProps(el);return;}   // read-only Connection view
  const arr=selArr(),pl=C.prop_labels,q=(el.querySelector('#ppSearch').value||'').trim().toLowerCase();
  el.querySelector('#ppTitle').textContent='Properties ('+arr.length+' selected)';
  el.querySelector('#ppLabeled').textContent=pl.props.length?pl.props.length+' labeled':'';
@@ -2072,12 +2080,52 @@ function renderPropPop(){const el=document.getElementById('propPop');if(!el||!el
  if(fk){const cb=el.querySelector('.pprow[data-k="'+fk+'"] input');if(cb)cb.focus();}}
 function dockPropPop(){const el=propPopEl(),st=document.getElementById(view3d?'stage3d':'stage').getBoundingClientRect();
  el.style.left=Math.max(4,st.right-el.offsetWidth-12)+'px';el.style.top=(st.top+12)+'px';}
-function openPropLabels(x,y){if(!selArr().length)return;const el=propPopEl();const sr=el.querySelector('#ppSearch');
+function openPropLabels(x,y){if(!selArr().length)return;propPopConn=null;const el=propPopEl();const sr=el.querySelector('#ppSearch');
  sr.value='';   // clear any prior filter BEFORE rendering rows, so reopening never shows a filtered list under a blank search box
  el.classList.add('open');renderPropPop();
  if(propPopPinned){dockPropPop();}
  else{const r=el.getBoundingClientRect();el.style.left=Math.max(4,Math.min(x,innerWidth-r.width-8))+'px';el.style.top=Math.max(4,Math.min(y,innerHeight-r.height-8))+'px';}
  setTimeout(()=>sr.focus(),0);}
+// ---- Connection read-only Properties popup (right-click a selected connection). Reuses #propPop in
+// `connmode`: the connection's props as read-only name/value rows, label controls hidden. Labeling
+// connection props onto the model is a member-keyed pipeline → deferred; this is a VIEW, not a picker. ----
+function connPropRows(cs){
+ const j=cs.joint,isBP=cs.kind==='base-plate',pp=j.params||{};
+ const plate=(partsById||{})[cs.conn+':plate']||null;
+ const dim=mm=>(mm==null?'—':fmtFtIn(Number(mm)/25.4));
+ const cols=pp.boltCols||(isBP?2:1),rows=pp.boltRows||(isBP?2:3);
+ return [
+   {label:'Type',            value:isBP?'Base plate':'Shear plate'},
+   {label:'On member',       value:cs.main},
+   {label:'Plate width',     value:plate?dim(plate.width):'—'},
+   {label:'Plate height',    value:plate?dim(plate.depth):'—'},
+   {label:'Plate thickness', value:plate?dim(plate.thickness):dim(pp[isBP?'thickness':'plateThickness'])},
+   {label:'Weld leg',        value:dim(pp.weldLeg||(isBP?8:6))},
+   {label:isBP?'Anchor grid':'Bolt grid',         value:cols+' × '+rows},
+   {label:isBP?'Anchor diameter':'Bolt diameter', value:dim(pp.boltDia||(isBP?24:20))},
+   {label:isBP?'Anchor count':'Bolt count',       value:String(cols*rows)},
+   {label:'Parts',           value:String(cs.childIds.length)},
+ ];}
+function openConnProps(x,y,cs){propPopConn=cs;const el=propPopEl();const sr=el.querySelector('#ppSearch');
+ sr.value='';el.classList.add('open');renderPropPop();
+ if(propPopPinned){dockPropPop();}
+ else{const r=el.getBoundingClientRect();el.style.left=Math.max(4,Math.min(x,innerWidth-r.width-8))+'px';el.style.top=Math.max(4,Math.min(y,innerHeight-r.height-8))+'px';}
+ setTimeout(()=>sr.focus(),0);}
+// render the connection read-view; re-derives the connection each call so it self-heals if the selection moves
+function renderConnProps(el){
+ const cs=connSelInfo();
+ if(!cs){ if(!propPopPinned){propPopConn=null;closePropPop(true);return;}
+   el.querySelector('#ppTitle').textContent='Properties';el.querySelector('#ppLabeled').textContent='';
+   el.querySelector('#ppScope').textContent='Right-click a connection';el.querySelector('#ppMeta').textContent='';
+   el.querySelector('#ppList').innerHTML='<div class=ppempty>No connection selected.</div>';return; }
+ propPopConn=cs;
+ const q=(el.querySelector('#ppSearch').value||'').trim().toLowerCase();
+ el.querySelector('#ppTitle').textContent='Properties · '+(cs.kind==='base-plate'?'Base plate':'Shear plate');
+ el.querySelector('#ppLabeled').textContent='';
+ el.querySelector('#ppScope').textContent='On '+cs.main;
+ const all=connPropRows(cs),rows=all.filter(r=>!q||r.label.toLowerCase().includes(q));
+ el.querySelector('#ppList').innerHTML=rows.length?rows.map(r=>`<div class=pprow><span class=pn>${esc(r.label)}</span><span class=pv>${esc(r.value)}</span></div>`).join(''):'<div class=ppempty>No properties match your search.</div>';
+ el.querySelector('#ppMeta').textContent=rows.length+' of '+all.length+' shown';}
 function closePropPop(force){const el=document.getElementById('propPop');if(!el)return;if(propPopPinned&&!force)return;el.classList.remove('open');
  const c=document.getElementById(view3d?'stage3d':'stage');if(c)c.focus&&c.focus();}
 document.addEventListener('pointerdown',e=>{if(propPopOpen()&&!propPopPinned&&!e.target.closest('#propPop'))closePropPop();},true);
@@ -2122,7 +2170,9 @@ document.getElementById('stage').addEventListener('contextmenu',e=>{e.preventDef
 document.getElementById('stage3d').addEventListener('contextmenu',e=>{e.preventDefault();const V=window.Steel3DView;
  if(V&&V.rightDragged&&V.rightDragged())return;                    // that right button was an orbit/pan, not a click — no menu
  if(V&&V.dimToolOn&&V.dimToolOn()){openSnapMenu(e.clientX,e.clientY,true);return;}   // dim tool armed → snap-override menu (unchanged)
- if(mode==='sel'&&!cmTool&&!picking&&selArr().length){openPropLabels(e.clientX,e.clientY);return;}   // a selection → Properties popup
+ if(mode==='sel'&&!cmTool&&!picking){const cs=connSelInfo();
+   if(cs){openConnProps(e.clientX,e.clientY,cs);return;}              // a connection selected → its read-only Properties popup
+   if(selArr().length){openPropLabels(e.clientX,e.clientY);return;}}  // members selected → the member label-picker popup
 });
 document.getElementById('snapStat').onclick=()=>{snapOnly=null;const V=window.Steel3DView;if(V&&V.setSnapOnly)V.setSnapOnly(null);updSnapStat();};
 // --- Dimension tool: armed mode + 3-click placement (anchor, anchor, offset). Shares the editor's

package/dist/web/workspaces.js

@@ -30,10 +30,22 @@
   const $status = document.getElementById('ws-status');
   const $stepTabs = document.getElementById('ws-step-tabs');
   const $projMenu = document.getElementById('ws-proj-menu');
+  const $wsExports = document.getElementById('ws-exports');
   const frames = {
     model: document.getElementById('ws-frame-model'),
     drawings: document.getElementById('ws-frame-drawings'),
   };
+
+  // The Exports step's cards. `file:true` = writes a file on disk (shown with a "✓ exported HH:MM"
+  // line + ⧉ Open / ▤ Reveal); `open:false` (IFC) = reveal-only (no OS default app for a .ifc).
+  // Tekla is an ACTION (host mutation, no file). `kind` matches the server's export route + listing.
+  const EXPORT_CARDS = [
+    { kind: 'bom-csv',  ico: '▤', name: 'Bill of materials', fmt: 'CSV',            verb: 'Export CSV',   file: true,  open: true  },
+    { kind: 'bom-xlsx', ico: '▦', name: 'Bill of materials', fmt: 'XLSX',           verb: 'Export Excel', file: true,  open: true  },
+    { kind: 'ifc',      ico: '◈', name: 'Model',             fmt: 'IFC4',           verb: 'Export IFC',   file: true,  open: false },
+    { kind: 'tekla',    ico: '◧', name: 'Tekla',             fmt: '.ifc → Open API', verb: 'Send to Tekla', file: false },
+  ];
+  let exportState = null; // kind → { path, exportedAt } after a successful list; null = unknown/failed
   if (!$switch || !$landing || !$app) return; // markup absent — nothing to wire
 
   // The picker menu is a `.menu` (display:none by default; `.menu.show` → display:block, which
@@ -185,6 +197,10 @@
       f.hidden = !show;
       if (show && !f.dataset.loaded) { f.src = f.dataset.want; f.dataset.loaded = '1'; }
     }
+    // Exports is a shell-rendered pane (not an iframe): show/hide + (re)paint on open.
+    const showExports = s === 'exports';
+    $wsExports.hidden = !showExports;
+    if (showExports) renderExports();
   }
   $stepTabs.addEventListener('click', (e) => {
     const b = e.target.closest('button[data-step]');
@@ -192,7 +208,10 @@
   });
 
   // ── Approve (per-project) ───────────────────────────────────────────────────
-  document.getElementById('ws-approve').addEventListener('click', async () => {
+  // Shared by the header ✓ Approve and the Exports-tab gate link ("Approve the model"), so the
+  // sign-off is one flow. On success it stamps current.approvedAt (server returns it) so the
+  // Exports gate unlocks without a reload.
+  async function approveProject() {
     if (!current) return;
     const btn = document.getElementById('ws-approve');
     btn.disabled = true;
@@ -204,11 +223,141 @@
       // fires. flushContract() PUTs the live contract and resolves; a save failure aborts the bake.
       const win = frames.model && frames.model.contentWindow;
       if (win && typeof win.flushContract === 'function') await win.flushContract();
-      await api(`/api/contract/${encodeURIComponent(current.app)}/approve?project=${encodeURIComponent(current.id)}`, { method: 'POST' });
+      const res = await api(`/api/contract/${encodeURIComponent(current.app)}/approve?project=${encodeURIComponent(current.id)}`, { method: 'POST' });
+      if (res && res.approvedAt) current.approvedAt = res.approvedAt; // unlock exports
       showToast(`Approved — "${current.name}" is baked into ${current.app}`, 'ok');
+      if (!$wsExports.hidden) renderExports(); // reflect the unlocked gate immediately if it's open
     } catch (err) {
       showToast('Approve failed: ' + (err && err.message || err), 'warn');
     } finally { btn.disabled = false; btn.textContent = prev; }
+  }
+  document.getElementById('ws-approve').addEventListener('click', approveProject);
+
+  // ── Exports step ──────────────────────────────────────────────────────────────
+  const hhmm = (iso) => {
+    const d = new Date(iso);
+    if (isNaN(d.getTime())) return '';
+    return String(d.getHours()).padStart(2, '0') + ':' + String(d.getMinutes()).padStart(2, '0');
+  };
+
+  // The POST export endpoint for a card kind, project-scoped so it reads THIS project's contract
+  // and writes into its own exports folder.
+  function exportUrl(kind) {
+    const qs = `?project=${encodeURIComponent(current.id)}`;
+    const base = `/api/contract/${encodeURIComponent(current.app)}`;
+    if (kind === 'bom-csv') return `${base}/export-bom/csv${qs}`;
+    if (kind === 'bom-xlsx') return `${base}/export-bom/xlsx${qs}`;
+    if (kind === 'ifc') return `${base}/export-ifc${qs}`;
+    return `${base}/export-tekla${qs}`; // tekla
+  }
+
+  function cardHtml(c, approved) {
+    let meta;
+    if (!approved) {
+      meta = `<span class="e-status">Available after approval</span>`;
+    } else if (!c.file) {
+      meta = `<span class="e-status">Creates parts in the open Tekla model</span>`;
+    } else if (exportState == null) {
+      // The listing failed — say so honestly; never a fake "not exported yet" (silent-failure rule).
+      meta = `<span class="e-status">Status unavailable</span>`;
+    } else {
+      const st = exportState[c.kind];
+      if (st && st.exportedAt) {
+        const links = `<span class="e-links">` +
+          (c.open ? `<button type="button" class="e-link" data-openfile="${escapeAttr(c.kind)}" data-tip="Open in its default app">⧉ Open</button>` : '') +
+          `<button type="button" class="e-link" data-reveal="${escapeAttr(c.kind)}" data-tip="Show the file in its folder">▤ Reveal</button>` +
+          `</span>`;
+        meta = `<span class="e-done"><span class="chk">✓</span> exported <span class="t">${escapeHtml(hhmm(st.exportedAt))}</span></span>${links}`;
+      } else {
+        meta = `<span class="e-status">not exported yet</span>`;
+      }
+    }
+    const exported = approved && c.file && exportState && exportState[c.kind] && exportState[c.kind].exportedAt;
+    const label = exported ? 'Re-export' : c.verb;
+    const dis = approved ? '' : ' disabled data-tip="Approve the model first"';
+    return `<div class="ecard">` +
+      `<div class="e-top"><div class="e-ico">${escapeHtml(c.ico)}</div>` +
+      `<div><div class="e-name">${escapeHtml(c.name)}</div><div class="e-fmt">${escapeHtml(c.fmt)}</div></div></div>` +
+      `<div class="e-meta">${meta}</div>` +
+      `<div class="e-act"><button type="button" data-export="${escapeAttr(c.kind)}"${dis}>↗ ${escapeHtml(label)}</button></div>` +
+      `</div>`;
+  }
+
+  async function renderExports() {
+    if (!current) return;
+    const id = current.id, app = current.app;
+    $wsExports.innerHTML = '<div class="exports-note">Loading exports…</div>'; // avoid a blank flash
+    let state = null;
+    let approvedAt = current.approvedAt; // fallback if the fetch fails (best-known)
+    try {
+      const r = await api(`/api/contract/${encodeURIComponent(app)}/exports?project=${encodeURIComponent(id)}`);
+      state = {};
+      for (const e of r.exports || []) state[e.kind] = e;
+      // Authoritative gate state: an in-session edit clears approvedAt server-side, so trust the
+      // server, not the possibly-stale current.approvedAt — and re-sync current to match.
+      approvedAt = r.approvedAt || undefined;
+      current.approvedAt = approvedAt;
+    } catch (err) {
+      // Surface the load failure — don't let it read as "nothing exported yet" (a lie).
+      showToast('Couldn’t load export status: ' + (err && err.message || err), 'warn');
+      state = null;
+    }
+    // The user may have switched project/step during the await — don't paint stale.
+    if (!current || current.id !== id || $wsExports.hidden) return;
+    exportState = state;
+    const approved = !!approvedAt;
+    let html = '';
+    if (!approved) {
+      html += `<div class="ws-exports-gate">Exports go out after sign-off — ` +
+        `<button type="button" id="ws-exports-approve">Approve the model</button> to enable them.</div>`;
+    }
+    html += `<div class="exports-note"><b>Export at any stage</b> — polishing is optional. ` +
+      `Each writes to this project’s <code>exports</code> folder.</div>`;
+    html += '<div class="export-grid">' + EXPORT_CARDS.map((c) => cardHtml(c, approved)).join('') + '</div>';
+    $wsExports.innerHTML = html;
+  }
+
+  async function doExport(kind) {
+    if (!current) return;
+    const btn = $wsExports.querySelector(`[data-export="${kind}"]`);
+    const prev = btn ? btn.textContent : '';
+    if (btn) { btn.disabled = true; btn.textContent = kind === 'tekla' ? 'Baking…' : 'Exporting…'; }
+    try {
+      const res = await api(exportUrl(kind), { method: 'POST' });
+      if (kind === 'tekla') {
+        const dropped = Array.isArray(res.skipped) ? res.skipped.length : 0;
+        showToast((res.message || 'Baked into the Tekla model.') + (dropped ? ` · ${dropped} RFI member(s) skipped` : ''), 'ok');
+      } else {
+        showToast(`Exported — ${res.filename || kind}`, 'ok');
+        return renderExports(); // repaint with the new "✓ exported HH:MM" + Open/Reveal
+      }
+    } catch (err) {
+      const needsTekla = err && err.body && err.body.needsTekla;
+      showToast(err && err.message ? err.message : String(err), needsTekla ? 'info' : 'warn');
+    } finally {
+      if (btn && btn.isConnected) { btn.disabled = false; btn.textContent = prev; }
+    }
+  }
+
+  async function fileAction(endpoint, kind, failMsg) {
+    const st = exportState && exportState[kind];
+    if (!st || !st.path) return; // button only shows when a path exists; belt-and-braces
+    try {
+      await api(endpoint, { method: 'POST', body: JSON.stringify({ path: st.path }) });
+    } catch (err) {
+      const detail = err && err.body && err.body.error;
+      showToast(detail ? `${failMsg} — ${detail}` : failMsg, 'warn');
+    }
+  }
+
+  $wsExports.addEventListener('click', (e) => {
+    if (e.target.closest('#ws-exports-approve')) { approveProject(); return; }
+    const exp = e.target.closest('[data-export]');
+    if (exp && !exp.disabled) { doExport(exp.dataset.export); return; }
+    const open = e.target.closest('[data-openfile]');
+    if (open) { fileAction('/api/open-file', open.dataset.openfile, 'Couldn’t open the file'); return; }
+    const rev = e.target.closest('[data-reveal]');
+    if (rev) { fileAction('/api/reveal', rev.dataset.reveal, 'Couldn’t reveal the file'); return; }
   });
 
   // ── project picker + lifecycle (full set lives HERE; ≡ carries nothing) ────

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floless/app",
-  "version": "0.72.2",
+  "version": "0.72.3",
   "type": "module",
   "description": "Thin localhost host for floless.app — serves web/ and shells the aware CLI. No engine, no LLM.",
   "bin": {