@codyswann/lisa 2.227.0 → 2.229.0

package/all/copy-contents/gitignore

@@ -170,6 +170,8 @@ tasks.json
 **/.claude/debug/
 **/.claude/worktrees/
 **/.claude/scheduled_tasks.lock
+**/.claude/.lisa-plugins-synced
+**/.claude/.lisa-marketplace-heal-v2
 .roo
 .roo/
 .roomodes

package/dist/cli/ui-cmd.d.ts

@@ -1,5 +1,7 @@
 import * as http from "node:http";
 import { type JsonObject } from "../sync/json-path.js";
+import { type StatusProbe } from "./ui-status.js";
+export { createGithubAuthProbe, runProbe, type GitRemoteReader, type GithubAuthCheck, type ProbeResult, type StatusProbe, } from "./ui-status.js";
 /** Default port for the settings console. */
 export declare const DEFAULT_UI_PORT = 4780;
 /** CLI options for `lisa ui`. */
@@ -9,6 +11,30 @@ export interface UiCmdOptions {
     /** Set false (via --no-sync) to skip the config sync on startup */
     readonly sync?: boolean;
 }
+/** Injectable runtime collaborators for `lisa ui`. */
+export interface UiRuntimeDependencies {
+    /** Status probes exposed by GET /api/status. */
+    readonly probes?: readonly StatusProbe[];
+}
+/** Secret/variable and generated-artifact status exposed to the console. */
+export interface RemoteEnvironmentStatus {
+    /** Whether each supported variable is visible to the `lisa ui` process. */
+    readonly variables: Readonly<Record<string, boolean>>;
+    /** Whether each remote-environment startup artifact exists in the project. */
+    readonly artifacts: Readonly<Record<string, boolean>>;
+}
+/** Variables the remote AWS bootstrap understands. Values are never exposed. */
+export declare const REMOTE_ENVIRONMENT_VARIABLES: readonly ["LISA_AWS_BOOTSTRAP_JSON", "LISA_REMOTE_AGENT", "LISA_AWS_DEFAULT_PROFILE"];
+/** Project-relative artifacts used by remote coding environments. */
+export declare const REMOTE_ENVIRONMENT_ARTIFACTS: readonly ["scripts/remote-agent-aws-setup.sh", ".cursor/environment.json", ".github/workflows/copilot-setup-steps.yml"];
+/**
+ * Inspect remote-environment readiness without ever reading a variable value
+ * into the browser payload.
+ * @param destDir - Project root
+ * @param environment - Environment visible to the Lisa process
+ * @returns Boolean-only variable and artifact status
+ */
+export declare function inspectRemoteEnvironment(destDir: string, environment?: NodeJS.ProcessEnv): RemoteEnvironmentStatus;
 /**
  * Locate the packaged `ui/index.html` by walking up from this module until a
  * directory containing `ui/index.html` is found (works from both `src/` and
@@ -22,14 +48,16 @@ export declare function findUiHtml(startDir: string): string;
  * escaped so a value containing `</script>` cannot break out of the tag.
  * @param html - Packaged console HTML
  * @param config - Merged live config
+ * @param remoteEnvironment - Boolean-only secret and startup-artifact status
  * @returns HTML with the injected config
  */
-export declare function injectLiveConfig(html: string, config: JsonObject): string;
+export declare function injectLiveConfig(html: string, config: JsonObject, remoteEnvironment?: RemoteEnvironmentStatus): string;
 /**
  * Run the `lisa ui` command: sync, then serve the console until interrupted.
  * @param targetPath - Project path argument (defaults to the current directory)
  * @param options - CLI options
+ * @param dependencies - Optional status probes for tests and extensions
  * @returns The listening server (callers/tests are responsible for closing it)
  */
-export declare function runUi(targetPath: string | undefined, options?: UiCmdOptions): Promise<http.Server>;
+export declare function runUi(targetPath: string | undefined, options?: UiCmdOptions, dependencies?: UiRuntimeDependencies): Promise<http.Server>;
 //# sourceMappingURL=ui-cmd.d.ts.map

package/dist/cli/ui-cmd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ui-cmd.d.ts","sourceRoot":"","sources":["../../src/cli/ui-cmd.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAIrE,6CAA6C;AAC7C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,iCAAiC;AACjC,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUnD;AAmBD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAIzE;AAED;;;;;GAKG;AACH,wBAAsB,KAAK,CACzB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAoCtB"}
+{"version":3,"file":"ui-cmd.d.ts","sourceRoot":"","sources":["../../src/cli/ui-cmd.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGrE,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,QAAQ,EACR,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC;AAExB,6CAA6C;AAC7C,eAAO,MAAM,eAAe,OAAO,CAAC;AAKpC,iCAAiC;AACjC,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;CAC1C;AAED,4EAA4E;AAC5E,MAAM,WAAW,uBAAuB;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,uFAI/B,CAAC;AAEX,qEAAqE;AACrE,eAAO,MAAM,4BAA4B,yHAI/B,CAAC;AAYX;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,MAAM,CAAC,UAAoC,GACvD,uBAAuB,CAezB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUnD;AAmBD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,EAClB,iBAAiB,GAAE,uBAGlB,GACA,MAAM,CAQR;AA0JD;;;;;;GAMG;AACH,wBAAsB,KAAK,CACzB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,YAAiB,EAC1B,YAAY,GAAE,qBAA0B,GACvC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CA4BtB"}

package/dist/cli/ui-cmd.js

@@ -16,8 +16,53 @@ import { runConfigSync } from "../sync/config-sync.js";
 import { isJsonObject } from "../sync/json-path.js";
 import { deepMerge, readJsonOrNull } from "../utils/index.js";
 import { printSyncReport } from "./sync-cmd.js";
+import { createGithubAuthProbe, readStatusSnapshot, validateStatusProbes, } from "./ui-status.js";
+export { createGithubAuthProbe, runProbe, } from "./ui-status.js";
 /** Default port for the settings console. */
 export const DEFAULT_UI_PORT = 4780;
+const JSON_CONTENT_TYPE = "application/json; charset=utf-8";
+const NO_STORE = "no-store";
+const TEXT_CONTENT_TYPE = "text/plain; charset=utf-8";
+/** Variables the remote AWS bootstrap understands. Values are never exposed. */
+export const REMOTE_ENVIRONMENT_VARIABLES = [
+    "LISA_AWS_BOOTSTRAP_JSON",
+    "LISA_REMOTE_AGENT",
+    "LISA_AWS_DEFAULT_PROFILE",
+];
+/** Project-relative artifacts used by remote coding environments. */
+export const REMOTE_ENVIRONMENT_ARTIFACTS = [
+    "scripts/remote-agent-aws-setup.sh",
+    ".cursor/environment.json",
+    ".github/workflows/copilot-setup-steps.yml",
+];
+/**
+ * Read the CLI process environment through one explicit, reviewable exception.
+ * Only boolean presence checks derived from this map reach the browser.
+ * @returns Current process environment
+ */
+function getProcessEnvironment() {
+    // eslint-disable-next-line no-restricted-syntax -- CLI status view must inspect externally supplied remote-environment variables once
+    return process.env;
+}
+/**
+ * Inspect remote-environment readiness without ever reading a variable value
+ * into the browser payload.
+ * @param destDir - Project root
+ * @param environment - Environment visible to the Lisa process
+ * @returns Boolean-only variable and artifact status
+ */
+export function inspectRemoteEnvironment(destDir, environment = getProcessEnvironment()) {
+    return {
+        variables: Object.fromEntries(REMOTE_ENVIRONMENT_VARIABLES.map(name => [
+            name,
+            typeof environment[name] === "string" && environment[name].length > 0,
+        ])),
+        artifacts: Object.fromEntries(REMOTE_ENVIRONMENT_ARTIFACTS.map(relativePath => [
+            relativePath,
+            existsSync(path.join(destDir, relativePath)),
+        ])),
+    };
+}
 /**
  * Locate the packaged `ui/index.html` by walking up from this module until a
  * directory containing `ui/index.html` is found (works from both `src/` and
@@ -53,20 +98,159 @@ async function readMergedConfig(destDir) {
  * escaped so a value containing `</script>` cannot break out of the tag.
  * @param html - Packaged console HTML
  * @param config - Merged live config
+ * @param remoteEnvironment - Boolean-only secret and startup-artifact status
  * @returns HTML with the injected config
  */
-export function injectLiveConfig(html, config) {
+export function injectLiveConfig(html, config, remoteEnvironment = {
+    variables: {},
+    artifacts: {},
+}) {
     const payload = JSON.stringify(config).replace(/<\//g, "<\\/");
-    const tag = `<script>window.LISA_LIVE_CONFIG = ${payload};</script>`;
+    const remotePayload = JSON.stringify(remoteEnvironment).replace(/<\//g, "<\\/");
+    const tag = `<script>window.LISA_LIVE_CONFIG = ${payload}; window.LISA_REMOTE_ENVIRONMENT = ${remotePayload};</script>`;
     return html.replace("</body>", `${tag}\n</body>`);
 }
+/**
+ * Create a single-flight reader that coalesces concurrent status requests.
+ * @param probes - Validated live-status probes
+ * @returns Snapshot reader shared by one UI server
+ */
+function createStatusSnapshotReader(probes) {
+    // eslint-disable-next-line functional/no-let -- single-flight state clears after settlement
+    let inFlight;
+    return () => {
+        if (inFlight === undefined) {
+            const pending = readStatusSnapshot(probes);
+            inFlight = pending;
+            const clear = () => {
+                if (inFlight === pending) {
+                    inFlight = undefined;
+                }
+            };
+            void pending.then(clear, clear);
+        }
+        return inFlight;
+    };
+}
+/**
+ * Serve the same-origin live-status endpoint.
+ * @param request - Incoming loopback request
+ * @param response - Response associated with the request
+ * @param readSnapshot - Single-flight status snapshot reader
+ */
+function serveStatus(request, response, readSnapshot) {
+    if (request.method === "HEAD") {
+        response.writeHead(200, {
+            "cache-control": NO_STORE,
+            "content-type": JSON_CONTENT_TYPE,
+        });
+        response.end();
+        return;
+    }
+    if (request.method !== "GET") {
+        response.writeHead(405, {
+            allow: "GET, HEAD",
+            "cache-control": NO_STORE,
+            "content-type": TEXT_CONTENT_TYPE,
+        });
+        response.end("Method not allowed");
+        return;
+    }
+    void readSnapshot()
+        .then(snapshot => {
+        response.writeHead(200, {
+            "cache-control": NO_STORE,
+            "content-type": JSON_CONTENT_TYPE,
+        });
+        response.end(JSON.stringify({ probes: snapshot }));
+    })
+        .catch(error => {
+        response.writeHead(500, {
+            "cache-control": NO_STORE,
+            "content-type": JSON_CONTENT_TYPE,
+        });
+        response.end(JSON.stringify({
+            error: error instanceof Error ? error.message : String(error),
+        }));
+    });
+}
+/**
+ * Parse an HTTP request target without allowing malformed input to escape.
+ * @param requestUrl - Raw request target supplied by Node HTTP
+ * @returns Parsed pathname, or undefined for an invalid target
+ */
+function requestPathname(requestUrl) {
+    try {
+        return new URL(requestUrl, "http://127.0.0.1").pathname;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Restrict loopback requests to the authority advertised by `lisa ui`.
+ * @param host - Incoming HTTP Host header
+ * @returns Whether the authority is 127.0.0.1 with an optional valid port
+ */
+function isLoopbackHost(host) {
+    if (host === "127.0.0.1") {
+        return true;
+    }
+    const prefix = "127.0.0.1:";
+    if (host === undefined || !host.startsWith(prefix)) {
+        return false;
+    }
+    const portText = host.slice(prefix.length);
+    const digitsOnly = Array.from(portText).every(character => character >= "0" && character <= "9");
+    const port = Number(portText);
+    return (portText.length > 0 &&
+        portText.length <= 5 &&
+        digitsOnly &&
+        port > 0 &&
+        port <= 65_535);
+}
+/**
+ * Build the request handler after validating the complete probe registry.
+ * @param page - Hydrated settings console HTML
+ * @param probes - Live-status probes registered for this server
+ * @returns Loopback HTTP request handler
+ */
+function createUiRequestHandler(page, probes) {
+    const readSnapshot = createStatusSnapshotReader(probes);
+    validateStatusProbes(probes);
+    return (request, response) => {
+        if (!isLoopbackHost(request.headers.host)) {
+            response.writeHead(400, { "content-type": TEXT_CONTENT_TYPE });
+            response.end("Bad request");
+            return;
+        }
+        const pathname = requestPathname(request.url ?? "/");
+        if (pathname === undefined) {
+            response.writeHead(400, { "content-type": TEXT_CONTENT_TYPE });
+            response.end("Bad request");
+            return;
+        }
+        if (pathname === "/api/status") {
+            serveStatus(request, response, readSnapshot);
+            return;
+        }
+        if (pathname === "/" || pathname === "/index.html") {
+            response.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+            response.end(page);
+            return;
+        }
+        response.writeHead(404, { "content-type": "text/plain" });
+        response.end("Not found");
+    };
+}
 /**
  * Run the `lisa ui` command: sync, then serve the console until interrupted.
  * @param targetPath - Project path argument (defaults to the current directory)
  * @param options - CLI options
+ * @param dependencies - Optional status probes for tests and extensions
  * @returns The listening server (callers/tests are responsible for closing it)
  */
-export async function runUi(targetPath, options = {}) {
+export async function runUi(targetPath, options = {}, dependencies = {}) {
     const destDir = path.resolve(targetPath ?? ".");
     const port = Number.parseInt(options.port ?? `${DEFAULT_UI_PORT}`, 10);
     if (Number.isNaN(port) || port < 0 || port > 65535) {
@@ -80,17 +264,10 @@ export async function runUi(targetPath, options = {}) {
     const htmlPath = findUiHtml(moduleDir);
     const html = await readFile(htmlPath, "utf8");
     const config = await readMergedConfig(destDir);
-    const page = injectLiveConfig(html, config);
-    const server = http.createServer((request, response) => {
-        const url = request.url ?? "/";
-        if (url === "/" || url.startsWith("/index.html") || url.startsWith("/#")) {
-            response.writeHead(200, { "content-type": "text/html; charset=utf-8" });
-            response.end(page);
-            return;
-        }
-        response.writeHead(404, { "content-type": "text/plain" });
-        response.end("Not found");
-    });
+    const remoteEnvironment = inspectRemoteEnvironment(destDir);
+    const page = injectLiveConfig(html, config, remoteEnvironment);
+    const probes = dependencies.probes ?? [createGithubAuthProbe(destDir)];
+    const server = http.createServer(createUiRequestHandler(page, probes));
     await new Promise(resolve => {
         server.listen(port, "127.0.0.1", resolve);
     });

package/dist/cli/ui-cmd.js.map

@@ -1 +1 @@
-{"version":3,"file":"ui-cmd.js","sourceRoot":"","sources":["../../src/cli/ui-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAmB,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,6CAA6C;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAUpC;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IAC1D,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,OAAe;IAC7C,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CACxC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,cAAc,CAChC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAC9C,CAAC;IACF,MAAM,eAAe,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,OAAO,SAAS,CAAC,eAAe,EAAE,WAAW,CAAe,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAAkB;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,qCAAqC,OAAO,YAAY,CAAC;IACrE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,UAA8B,EAC9B,UAAwB,EAAE;IAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5C,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;QAC/B,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACxE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1D,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;QAChC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,SAAS,GACb,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,wBAAwB,SAAS,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"ui-cmd.js","sourceRoot":"","sources":["../../src/cli/ui-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAmB,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,GAGrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,QAAQ,GAKT,MAAM,gBAAgB,CAAC;AAExB,6CAA6C;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,iBAAiB,GAAG,iCAAiC,CAAC;AAC5D,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AAwBtD,gFAAgF;AAChF,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,yBAAyB;IACzB,mBAAmB;IACnB,0BAA0B;CAClB,CAAC;AAEX,qEAAqE;AACrE,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,mCAAmC;IACnC,0BAA0B;IAC1B,2CAA2C;CACnC,CAAC;AAEX;;;;GAIG;AACH,SAAS,qBAAqB;IAC5B,sIAAsI;IACtI,OAAO,OAAO,CAAC,GAAG,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,cAAiC,qBAAqB,EAAE;IAExD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,WAAW,CAC3B,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI;YACJ,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAE,CAAC,MAAM,GAAG,CAAC;SACvE,CAAC,CACH;QACD,SAAS,EAAE,MAAM,CAAC,WAAW,CAC3B,4BAA4B,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/C,YAAY;YACZ,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;SAC7C,CAAC,CACH;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IAC1D,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,OAAe;IAC7C,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CACxC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,cAAc,CAChC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAC9C,CAAC;IACF,MAAM,eAAe,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,OAAO,SAAS,CAAC,eAAe,EAAE,WAAW,CAAe,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,MAAkB,EAClB,oBAA6C;IAC3C,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,EAAE;CACd;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAC7D,MAAM,EACN,MAAM,CACP,CAAC;IACF,MAAM,GAAG,GAAG,qCAAqC,OAAO,sCAAsC,aAAa,YAAY,CAAC;IACxH,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,0BAA0B,CACjC,MAA8B;IAE9B,4FAA4F;IAC5F,IAAI,QAA0D,CAAC;IAC/D,OAAO,GAAG,EAAE;QACV,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC3C,QAAQ,GAAG,OAAO,CAAC;YACnB,MAAM,KAAK,GAAG,GAAS,EAAE;gBACvB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACzB,QAAQ,GAAG,SAAS,CAAC;gBACvB,CAAC;YACH,CAAC,CAAC;YACF,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,OAA6B,EAC7B,QAA6B,EAC7B,YAAwD;IAExD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,eAAe,EAAE,QAAQ;YACzB,cAAc,EAAE,iBAAiB;SAClC,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,KAAK,EAAE,WAAW;YAClB,eAAe,EAAE,QAAQ;YACzB,cAAc,EAAE,iBAAiB;SAClC,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,KAAK,YAAY,EAAE;SAChB,IAAI,CAAC,QAAQ,CAAC,EAAE;QACf,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,eAAe,EAAE,QAAQ;YACzB,cAAc,EAAE,iBAAiB;SAClC,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC;SACD,KAAK,CAAC,KAAK,CAAC,EAAE;QACb,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,eAAe,EAAE,QAAQ;YACzB,cAAc,EAAE,iBAAiB;SAClC,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,UAAkB;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAwB;IAC9C,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAC3C,SAAS,CAAC,EAAE,CAAC,SAAS,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,CAClD,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,OAAO,CACL,QAAQ,CAAC,MAAM,GAAG,CAAC;QACnB,QAAQ,CAAC,MAAM,IAAI,CAAC;QACpB,UAAU;QACV,IAAI,GAAG,CAAC;QACR,IAAI,IAAI,MAAM,CACf,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAC7B,IAAY,EACZ,MAA8B;IAE9B,MAAM,YAAY,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACxD,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3B,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC/D,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACrD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC/D,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC/B,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YACnD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACxE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1D,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,UAA8B,EAC9B,UAAwB,EAAE,EAC1B,eAAsC,EAAE;IAExC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5C,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;QAChC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,SAAS,GACb,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,wBAAwB,SAAS,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli/ui-status-json.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Runtime-safe JSON normalization for live-status probe results.
+ * @module cli/ui-status-json
+ */
+import type { JsonValue } from "../sync/json-path.js";
+/** A probe result that never conflates missing evidence with a real value. */
+export type ProbeResult<T extends JsonValue = JsonValue> = {
+    readonly state: "value";
+    readonly value: T;
+    readonly reason?: never;
+    readonly message?: never;
+} | {
+    readonly state: "unknown";
+    readonly reason: string;
+    readonly message: string;
+    readonly value?: never;
+} | {
+    readonly state: "not-applicable";
+    readonly value?: never;
+    readonly reason?: never;
+    readonly message?: never;
+};
+/**
+ * Detach and validate an entire probe result before transport.
+ * @param result - Runtime probe output
+ * @returns Safe tri-state result, or unknown for unsafe runtime data
+ */
+export declare function normalizeProbeResult<T extends JsonValue>(result: ProbeResult<T>): ProbeResult<T>;
+//# sourceMappingURL=ui-status-json.d.ts.map

package/dist/cli/ui-status-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-status-json.d.ts","sourceRoot":"","sources":["../../src/cli/ui-status-json.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAWtD,8EAA8E;AAC9E,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,IACnD;IACE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CACxB,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;CAC1B,CAAC;AAuMN;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,SAAS,EACtD,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,GACrB,WAAW,CAAC,CAAC,CAAC,CAahB"}

package/dist/cli/ui-status-json.js

@@ -0,0 +1,162 @@
+/** Transport budgets prevent status probes from monopolizing the UI process. */
+const MAX_JSON_DEPTH = 64;
+const MAX_JSON_NODES = 10_000;
+/**
+ * Require enumerable data without invoking accessors.
+ * @param descriptor - Candidate property descriptor
+ * @param message - Error text for an unsafe descriptor
+ * @returns The descriptor's inert data value
+ */
+function requireData(descriptor, message) {
+    if (descriptor === undefined ||
+        !descriptor.enumerable ||
+        !("value" in descriptor)) {
+        throw new TypeError(message);
+    }
+    return descriptor.value;
+}
+/**
+ * Clone one JSON array without invoking accessors or custom hooks.
+ * @param value - Candidate array
+ * @param ancestors - Active recursion path
+ * @param depth - Current tree depth
+ * @param budget - Remaining traversal budget
+ * @returns Detached JSON array
+ */
+function cloneArray(value, ancestors, depth, budget) {
+    if (value.length > budget.nodesRemaining) {
+        throw new TypeError("Probe value exceeds the JSON node limit");
+    }
+    const allowedKeys = new Set([
+        "length",
+        ...Array.from({ length: value.length }, (_entry, index) => String(index)),
+    ]);
+    if (Reflect.ownKeys(value).some(key => typeof key !== "string" || !allowedKeys.has(key))) {
+        throw new TypeError("Probe arrays must contain only indexed JSON data");
+    }
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    return Array.from({ length: value.length }, (_entry, index) => cloneJsonValue(requireData(descriptors[String(index)], "Probe arrays cannot contain holes or accessors"), ancestors, depth, budget));
+}
+/**
+ * Clone one plain JSON object without invoking accessors or custom hooks.
+ * @param value - Candidate object
+ * @param ancestors - Active recursion path
+ * @param depth - Current tree depth
+ * @param budget - Remaining traversal budget
+ * @returns Detached JSON object
+ */
+function cloneObject(value, ancestors, depth, budget) {
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null) {
+        throw new TypeError("Probe objects must use a plain object prototype");
+    }
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    const entries = Reflect.ownKeys(value).map(key => {
+        if (typeof key !== "string") {
+            throw new TypeError("Probe objects cannot contain symbol properties");
+        }
+        return [
+            key,
+            cloneJsonValue(requireData(descriptors[key], "Probe objects cannot contain hidden properties or accessors"), ancestors, depth, budget),
+        ];
+    });
+    return Object.fromEntries(entries);
+}
+/**
+ * Clone a scalar supported by JSON.
+ * @param value - Candidate scalar
+ * @returns Valid JSON scalar
+ */
+function cloneScalar(value) {
+    if (value === null ||
+        typeof value === "string" ||
+        typeof value === "boolean" ||
+        (typeof value === "number" && Number.isFinite(value))) {
+        return value;
+    }
+    throw new TypeError("Probe scalar is not finite or is not JSON data");
+}
+/**
+ * Clone runtime input into a detached JSON data tree.
+ * @param value - Candidate value
+ * @param ancestors - Active recursion path
+ * @param depth - Current tree depth
+ * @param budget - Remaining traversal budget
+ * @returns Detached JSON data
+ */
+function cloneJsonValue(value, ancestors = [], depth = 0, budget = { nodesRemaining: MAX_JSON_NODES }) {
+    if (depth > MAX_JSON_DEPTH) {
+        throw new TypeError("Probe value exceeds the JSON depth limit");
+    }
+    if (budget.nodesRemaining <= 0) {
+        throw new TypeError("Probe value exceeds the JSON node limit");
+    }
+    // eslint-disable-next-line functional/immutable-data -- one private counter bounds a single traversal
+    budget.nodesRemaining -= 1;
+    if (typeof value !== "object" || value === null) {
+        return cloneScalar(value);
+    }
+    if (ancestors.includes(value)) {
+        throw new TypeError("Probe value is cyclic");
+    }
+    const next = [...ancestors, value];
+    return Array.isArray(value)
+        ? cloneArray(value, next, depth + 1, budget)
+        : cloneObject(value, next, depth + 1, budget);
+}
+/**
+ * Validate an exact set of own keys on a detached object.
+ * @param value - Detached object
+ * @param expected - Required unique keys
+ * @returns True when no key is missing or extra
+ */
+function hasExactKeys(value, expected) {
+    const actual = Object.keys(value);
+    return (actual.length === expected.length &&
+        expected.every(key => Object.hasOwn(value, key)));
+}
+/**
+ * Convert a detached JSON tree back into the strict result union.
+ * @param value - Detached JSON tree
+ * @returns Strict tri-state result
+ */
+function parseResult(value) {
+    if (value === null || Array.isArray(value) || typeof value !== "object") {
+        throw new TypeError("Probe result must be a plain object");
+    }
+    if (value.state === "value" && hasExactKeys(value, ["state", "value"])) {
+        return { state: "value", value: value.value };
+    }
+    if (value.state === "unknown" &&
+        hasExactKeys(value, ["message", "reason", "state"]) &&
+        typeof value.reason === "string" &&
+        value.reason.trim().length > 0 &&
+        typeof value.message === "string" &&
+        value.message.trim().length > 0) {
+        return { state: "unknown", reason: value.reason, message: value.message };
+    }
+    if (value.state === "not-applicable" && hasExactKeys(value, ["state"])) {
+        return { state: "not-applicable" };
+    }
+    throw new TypeError("Probe result does not match the tri-state contract");
+}
+/**
+ * Detach and validate an entire probe result before transport.
+ * @param result - Runtime probe output
+ * @returns Safe tri-state result, or unknown for unsafe runtime data
+ */
+export function normalizeProbeResult(result) {
+    try {
+        return parseResult(cloneJsonValue(result));
+    }
+    catch (error) {
+        return {
+            state: "unknown",
+            reason: "non-serializable-value",
+            message: error instanceof Error
+                ? `Probe returned unsafe JSON data: ${error.message}`
+                : "Probe returned unreadable data",
+        };
+    }
+}
+//# sourceMappingURL=ui-status-json.js.map

package/dist/cli/ui-status-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-status-json.js","sourceRoot":"","sources":["../../src/cli/ui-status-json.ts"],"names":[],"mappings":"AAMA,gFAAgF;AAChF,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,cAAc,GAAG,MAAM,CAAC;AA4B9B;;;;;GAKG;AACH,SAAS,WAAW,CAClB,UAA0C,EAC1C,OAAe;IAEf,IACE,UAAU,KAAK,SAAS;QACxB,CAAC,UAAU,CAAC,UAAU;QACtB,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EACxB,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CACjB,KAAyB,EACzB,SAA4B,EAC5B,KAAa,EACb,MAAkB;IAElB,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;QAC1B,QAAQ;QACR,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KAC1E,CAAC,CAAC;IACH,IACE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CACzB,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CACxD,EACD,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAC5D,cAAc,CACZ,WAAW,CACT,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAC1B,gDAAgD,CACjD,EACD,SAAS,EACT,KAAK,EACL,MAAM,CACP,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAClB,KAAa,EACb,SAA4B,EAC5B,KAAa,EACb,MAAkB;IAElB,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAY,CAAC;IAC1D,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;QACxE,CAAC;QACD,OAAO;YACL,GAAG;YACH,cAAc,CACZ,WAAW,CACT,WAAW,CAAC,GAAG,CAAC,EAChB,6DAA6D,CAC9D,EACD,SAAS,EACT,KAAK,EACL,MAAM,CACP;SACO,CAAC;IACb,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAA0C,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAc;IACjC,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS;QAC1B,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,KAAkB,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CACrB,KAAc,EACd,YAA+B,EAAE,EACjC,KAAK,GAAG,CAAC,EACT,SAAqB,EAAE,cAAc,EAAE,cAAc,EAAE;IAEvD,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IACD,sGAAsG;IACtG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC;QAC5C,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,KAA4C,EAC5C,QAA2B;IAE3B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACjC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CACjD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAsB,KAAgB;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAU,EAAE,CAAC;IACrD,CAAC;IACD,IACE,KAAK,CAAC,KAAK,KAAK,SAAS;QACzB,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAC/B,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,gBAAgB,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,WAAW,CAAI,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,wBAAwB;YAChC,OAAO,EACL,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,oCAAoC,KAAK,CAAC,OAAO,EAAE;gBACrD,CAAC,CAAC,gCAAgC;SACvC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/ui-status.d.ts

@@ -0,0 +1,42 @@
+import type { JsonValue } from "../sync/json-path.js";
+import { type ProbeResult } from "./ui-status-json.js";
+export type { ProbeResult } from "./ui-status-json.js";
+/** One bounded, independently executable live-status probe. */
+export interface StatusProbe<T extends JsonValue = JsonValue> {
+    /** Stable identifier used as the status endpoint's object key. */
+    readonly id: string;
+    /** Abort-aware operation returning an explicit tri-state result. */
+    readonly run: (signal: AbortSignal) => Promise<ProbeResult<T>>;
+    /** Maximum time the status endpoint will await this probe. */
+    readonly timeoutMs: number;
+}
+/** Injectable check used by the reference GitHub authentication probe. */
+export type GithubAuthCheck = (cwd: string, timeoutMs: number, signal: AbortSignal, hostname: string) => Promise<"authenticated" | "not-authenticated">;
+/** Injectable effective-origin reader used by the GitHub reference probe. */
+export type GitRemoteReader = (cwd: string, timeoutMs: number, signal: AbortSignal) => Promise<string>;
+/**
+ * Run one probe without allowing it to block siblings or fabricate data.
+ * @param probe - Probe to execute
+ * @returns Explicit result, or unknown for invalid input, failure, or timeout
+ */
+export declare function runProbe<T extends JsonValue>(probe: StatusProbe<T>): Promise<ProbeResult<T>>;
+/**
+ * Create the reference GitHub authentication probe.
+ * @param cwd - Project root used as the command working directory
+ * @param check - Injectable command check used by focused tests
+ * @param readRemote - Injectable effective-origin reader used by focused tests
+ * @returns Reference probe for the live-status transport
+ */
+export declare function createGithubAuthProbe(cwd: string, check?: GithubAuthCheck, readRemote?: GitRemoteReader): StatusProbe<boolean>;
+/**
+ * Validate probe keys before binding a server so status snapshots cannot lose data.
+ * @param probes - Registered status probes
+ */
+export declare function validateStatusProbes(probes: readonly StatusProbe[]): void;
+/**
+ * Execute all probes concurrently, with failures isolated per probe.
+ * @param probes - Probes to execute
+ * @returns Results keyed by stable probe identifier
+ */
+export declare function readStatusSnapshot(probes: readonly StatusProbe[]): Promise<Record<string, ProbeResult>>;
+//# sourceMappingURL=ui-status.d.ts.map

package/dist/cli/ui-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-status.d.ts","sourceRoot":"","sources":["../../src/cli/ui-status.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAwB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC7E,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,+DAA+D;AAC/D,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS;IAC1D,kEAAkE;IAClE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,0EAA0E;AAC1E,MAAM,MAAM,eAAe,GAAG,CAC5B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,eAAe,GAAG,mBAAmB,CAAC,CAAC;AAEpD,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GAAG,CAC5B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,MAAM,CAAC,CAAC;AAyCrB;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,CAAC,SAAS,SAAS,EAChD,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAiCzB;AA6HD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,KAAK,GAAE,eAAqC,EAC5C,UAAU,GAAE,eAAkC,GAC7C,WAAW,CAAC,OAAO,CAAC,CAkBtB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,IAAI,CASzE;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,WAAW,EAAE,GAC7B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAKtC"}