@gmickel/gno 1.12.4 → 1.13.0

package/README.md

@@ -92,9 +92,13 @@ gno daemon --detach  # headless continuous indexing (background; --status / --st
 
 ## What's New
 
-> Latest release: [v1.8.0](./CHANGELOG.md#180---2026-06-05)  
+> Latest release: see [CHANGELOG.md](./CHANGELOG.md)
 > Full release history: [CHANGELOG.md](./CHANGELOG.md)
 
+- **Retrieval-proven activation**: `gno status`, `gno doctor`, REST, and the
+  Web/Desktop dashboard now share a per-folder lexical retrieval proof. Local
+  semantic readiness remains independent, and installed MCP targets can run an
+  explicit read-only retrieval smoke from Connectors.
 - **Second-brain capture**: `gno capture`, REST `/api/capture`, SDK
   `client.capture()`, MCP `gno_capture`, and Web UI Quick Capture write
   provenance-rich notes from text, stdin, or files, including typed presets for
@@ -209,12 +213,18 @@ bun install -g @gmickel/gno
 brew install sqlite3
 ```
 
-Verify everything works:
+Verify the local installation and corpus-derived lexical retrieval:
 
 ```bash
 gno doctor
+gno status --json
 ```
 
+`gno status` is passive with respect to models and connectors and exits 0 even
+when its structured activation state is degraded. `gno doctor` exits 2 when any
+configured folder fails the lexical proof; semantic models may still be pending
+without blocking BM25 search.
+
 **Windows**: current validated target is `windows-x64`, with a packaged
 desktop beta zip now published on GitHub Releases. See
 [docs/WINDOWS.md](./docs/WINDOWS.md) for support scope and validation notes.
@@ -248,9 +258,16 @@ gno mcp install --target codex       # OpenAI Codex CLI
 gno mcp install --target opencode    # OpenCode
 gno mcp install --target amp         # Amp
 gno mcp install --target lmstudio    # LM Studio
-gno mcp install --target librechat   # LibreChat
+gno mcp install --target librechat --scope project # LibreChat
 ```
 
+Each install records an absolute Bun/package entrypoint plus the active index,
+config, data directory, and model cache, so desktop clients open the same GNO
+workspace without relying on shell `PATH` or `GNO_*` inheritance. Inspect the
+exact command, arguments, and workspace values with
+`gno mcp install --dry-run --json`. If GNO is already configured in that
+target, add `--force` to preview the replacement without writing it.
+
 Check status: `gno mcp status`
 
 #### Skills (Claude Code, Codex, OpenCode, OpenClaw)
@@ -340,6 +357,7 @@ import { createGnoClient } from "@gmickel/gno";
 
 const client = await createGnoClient({
   configPath: "/Users/me/.config/gno/index.yml",
+  indexName: "research",
 });
 
 // Fast exact search
@@ -372,7 +390,7 @@ await client.close();
 
 Core SDK surface:
 
-- `createGnoClient({ config | configPath, dbPath? })`
+- `createGnoClient({ config | configPath, dbPath?, indexName? })`
 - `search`, `vsearch`, `query`, `ask`
 - `get`, `multiGet`, `list`, `status`
 - `update`, `embed`, `index`
@@ -556,7 +574,11 @@ Open `http://localhost:3000` to:
 - **Same capture contract everywhere**: CLI, MCP `gno_capture`, REST `/api/capture`, SDK `client.capture()`, and Web UI Quick Capture return the same provenance receipt shape
 - **Ask**: AI-powered Q&A with citations
 - **Manage Collections**: Add, remove, and re-index collections
-- **Connect agents**: Install core Skill/MCP integrations from the app
+- **Verify retrieval**: See each folder's lexical proof, exact failed stage,
+  and remediation without waiting for semantic models
+- **Connect agents**: Install core Skill/MCP integrations; explicitly verify
+  configured MCP retrieval without changing client config. Skill installation
+  is visible, but client runtime execution cannot be proven automatically
 - **Manage files safely**: Rename, reveal, or move editable files to Trash with explicit index-vs-disk semantics
 - **Refactor files safely**: Move, duplicate, and organize editable notes with reference warnings
 - **Switch presets**: Change models live without restart
@@ -697,32 +719,37 @@ curl -X POST http://localhost:3000/api/ask \
 
 # Index status
 curl http://localhost:3000/api/status
-```
 
-| Endpoint                      | Method | Description                 |
-| :---------------------------- | :----- | :-------------------------- |
-| `/api/query`                  | POST   | Hybrid search (recommended) |
-| `/api/search`                 | POST   | BM25 keyword search         |
-| `/api/ask`                    | POST   | AI-powered Q&A              |
-| `/api/docs`                   | GET    | List documents              |
-| `/api/docs`                   | POST   | Create document             |
-| `/api/docs/:id`               | PUT    | Update document content     |
-| `/api/docs/:id/move`          | POST   | Move editable document      |
-| `/api/docs/:id/duplicate`     | POST   | Duplicate editable document |
-| `/api/docs/:id/refactor-plan` | POST   | Preview file-op warnings    |
-| `/api/docs/:id/deactivate`    | POST   | Remove from index           |
-| `/api/doc`                    | GET    | Get document content        |
-| `/api/doc/:id/sections`       | GET    | Get document sections       |
-| `/api/collections`            | POST   | Add collection              |
-| `/api/collections/:name`      | DELETE | Remove collection           |
-| `/api/folders`                | POST   | Create folder               |
-| `/api/sync`                   | POST   | Trigger re-index            |
-| `/api/status`                 | GET    | Index statistics            |
-| `/api/note-presets`           | GET    | List note presets           |
-| `/api/presets`                | GET    | List model presets          |
-| `/api/presets`                | POST   | Switch preset               |
-| `/api/models/pull`            | POST   | Download models             |
-| `/api/models/status`          | GET    | Download progress           |
+# Process liveness only
+curl http://localhost:3000/api/health
+```
+
+| Endpoint                      | Method | Description                  |
+| :---------------------------- | :----- | :--------------------------- |
+| `/api/query`                  | POST   | Hybrid search (recommended)  |
+| `/api/search`                 | POST   | BM25 keyword search          |
+| `/api/ask`                    | POST   | AI-powered Q&A               |
+| `/api/docs`                   | GET    | List documents               |
+| `/api/docs`                   | POST   | Create document              |
+| `/api/docs/:id`               | PUT    | Update document content      |
+| `/api/docs/:id/move`          | POST   | Move editable document       |
+| `/api/docs/:id/duplicate`     | POST   | Duplicate editable document  |
+| `/api/docs/:id/refactor-plan` | POST   | Preview file-op warnings     |
+| `/api/docs/:id/deactivate`    | POST   | Remove from index            |
+| `/api/doc`                    | GET    | Get document content         |
+| `/api/doc/:id/sections`       | GET    | Get document sections        |
+| `/api/collections`            | POST   | Add collection               |
+| `/api/collections/:name`      | DELETE | Remove collection            |
+| `/api/folders`                | POST   | Create folder                |
+| `/api/sync`                   | POST   | Trigger re-index             |
+| `/api/status`                 | GET    | Index and activation state   |
+| `/api/health`                 | GET    | Process liveness only        |
+| `/api/connectors/verify`      | POST   | Explicit read-only MCP proof |
+| `/api/note-presets`           | GET    | List note presets            |
+| `/api/presets`                | GET    | List model presets           |
+| `/api/presets`                | POST   | Switch preset                |
+| `/api/models/pull`            | POST   | Download models              |
+| `/api/models/status`          | GET    | Download progress            |
 
 No authentication. No rate limits. Build custom tools, automate workflows, integrate with any language.
 

package/assets/skill/SKILL.md

@@ -226,6 +226,11 @@ gno graph --from gno://notes/a.md --to gno://notes/b.md
 --no-pager        Disable paging
 ```
 
+Index names follow the CLI filesystem-identity contract: 1–64 UTF-16 code
+units, letter/number first, no trailing space or `.`, no `..`, separators, or
+platform-invalid punctuation. NFC/case-equivalent names share one identity.
+See `docs/CLI.md` under Global Options for the complete byte limits.
+
 Non-default index search results may include `?index=<name>` on `gno://` URIs.
 Keep that query string when passing the URI to `gno get`, SDK `get()`, MCP
 `gno_get`, or an MCP resource read: it selects the named database. Batch reads

package/assets/skill/cli-reference.md

@@ -17,6 +17,11 @@ All commands accept:
 | `--no-pager`      | Disable automatic paging                 |
 | `--offline`       | Use cached models only                   |
 
+Index names use 1–64 UTF-16 code units, start with a letter or number, and
+reject trailing space/dot, `..`, separators, controls, and platform-invalid
+punctuation. NFC/case-equivalent spellings share one identity. See
+`docs/CLI.md` under Global Options for the complete canonical-byte contract.
+
 ## Initialization
 
 ### gno init
@@ -523,12 +528,17 @@ Install GNO as MCP server in client configurations.
 gno mcp install [options]
 ```
 
-| Option         | Default        | Description                                      |
-| -------------- | -------------- | ------------------------------------------------ |
-| `-t, --target` | claude-desktop | Target: `claude-desktop`, `claude-code`, `codex` |
-| `-s, --scope`  | user           | Scope: `user`, `project`                         |
-| `-f, --force`  | false          | Overwrite existing config                        |
-| `--dry-run`    | false          | Preview changes                                  |
+| Option         | Default        | Description               |
+| -------------- | -------------- | ------------------------- |
+| `-t, --target` | claude-desktop | Target client (see below) |
+| `-s, --scope`  | target default | Scope: `user`, `project`  |
+| `-f, --force`  | false          | Overwrite existing config |
+| `--dry-run`    | false          | Preview changes           |
+
+Targets: `claude-desktop`, `claude-code`, `codex`, `cursor`, `zed`,
+`windsurf`, `opencode`, `amp`, `lmstudio`, and `librechat`. Project scope is
+supported by Claude Code, Codex, Cursor, OpenCode, and LibreChat.
+LibreChat is project-only; all other targets default to user scope.
 
 Examples:
 

package/assets/skill/mcp-reference.md

@@ -21,14 +21,27 @@ gno mcp install --enable-write
 
 ### Claude Desktop
 
-Add to `claude_desktop_config.json`:
+Run `gno mcp install --dry-run --json`, then add the reported absolute values to
+`claude_desktop_config.json`:
 
 ```json
 {
   "mcpServers": {
     "gno": {
-      "command": "gno",
-      "args": ["mcp"]
+      "command": "/absolute/path/to/bun",
+      "args": [
+        "run",
+        "/absolute/path/to/@gmickel/gno/src/index.ts",
+        "--index",
+        "default",
+        "--config",
+        "/absolute/path/to/index.yml",
+        "mcp"
+      ],
+      "env": {
+        "GNO_DATA_DIR": "/absolute/path/to/data",
+        "GNO_CACHE_DIR": "/absolute/path/to/cache"
+      }
     }
   }
 }
@@ -47,6 +60,12 @@ gno mcp install -t claude-code -s user    # User scope
 gno mcp install -t claude-code -s project # Project scope
 ```
 
+Installed entries deliberately pin the current Bun/package entrypoint, active
+index, absolute config, data directory, and model cache. Standard clients use
+`env`; OpenCode uses `environment`; Codex uses `~/.codex/config.toml` or project
+`.codex/config.toml` with `[mcp_servers.gno]` and `[mcp_servers.gno.env]`.
+Do not shorten a generated entry to `gno mcp`.
+
 ## Check Status
 
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gmickel/gno",
-  "version": "1.12.4",
+  "version": "1.13.0",
   "description": "Local semantic search for your documents. Index Markdown, PDF, and Office files with hybrid BM25 + vector search.",
   "keywords": [
     "embeddings",
@@ -160,6 +160,7 @@
     "commander": "14.0.3",
     "embla-carousel-react": "8.6.0",
     "franc": "6.2.0",
+    "jsonc-parser": "3.3.1",
     "lucide-react": "1.8.0",
     "markitdown-ts": "0.0.9",
     "minimatch": "10.2.3",

package/src/app/constants.ts

@@ -10,6 +10,11 @@ import { basename, join } from "node:path";
 
 // Bun supports JSON imports natively - version single source of truth
 import pkg from "../../package.json";
+import {
+  assertValidIndexName,
+  indexNamesMatch,
+  resolveIndexDbFilename,
+} from "./index-name";
 
 // ─────────────────────────────────────────────────────────────────────────────
 // Brand / Product Identity
@@ -218,7 +223,26 @@ export function getIndexDbPath(
   indexName: string = DEFAULT_INDEX_NAME,
   dirs: ResolvedDirs = resolveDirs()
 ): string {
-  return join(dirs.data, `index-${indexName}.sqlite`);
+  assertValidIndexName(indexName);
+  let existingFilenames: string[] = [];
+  try {
+    existingFilenames = [
+      ...new Bun.Glob("index-*.sqlite").scanSync({
+        cwd: dirs.data,
+        onlyFiles: false,
+      }),
+    ];
+  } catch (error) {
+    if (
+      !error ||
+      typeof error !== "object" ||
+      !("code" in error) ||
+      error.code !== "ENOENT"
+    ) {
+      throw error;
+    }
+  }
+  return join(dirs.data, resolveIndexDbFilename(indexName, existingFilenames));
 }
 
 /**
@@ -265,8 +289,12 @@ export function buildUri(
     .map((segment) => encodeURIComponent(segment))
     .join("/");
   const uri = `${URI_PREFIX}${collection}/${encodedPath}`;
-  const indexName = options.indexName?.trim();
-  if (!indexName || indexName === DEFAULT_INDEX_NAME) {
+  const indexName = options.indexName;
+  if (indexName === undefined) {
+    return uri;
+  }
+  assertValidIndexName(indexName);
+  if (indexNamesMatch(indexName, DEFAULT_INDEX_NAME)) {
     return uri;
   }
   return `${uri}?index=${encodeURIComponent(indexName)}`;
@@ -287,8 +315,8 @@ export function parseUri(uri: string): ParsedGnoUri | null {
   if (slashIndex === -1) {
     // gno://collection (no path)
     const [collectionWithQuery, query = ""] = rest.split("?", 2);
-    const indexName = new URLSearchParams(query).get("index")?.trim();
-    return indexName
+    const indexName = new URLSearchParams(query).get("index");
+    return indexName !== null
       ? {
           collection: collectionWithQuery ?? rest,
           path: "",
@@ -307,8 +335,10 @@ export function parseUri(uri: string): ParsedGnoUri | null {
   // decodeURIComponent throws on malformed percent-encoding
   try {
     const path = decodeURIComponent(encodedPath);
-    const indexName = new URLSearchParams(query).get("index")?.trim();
-    return indexName ? { collection, path, indexName } : { collection, path };
+    const indexName = new URLSearchParams(query).get("index");
+    return indexName !== null
+      ? { collection, path, indexName }
+      : { collection, path };
   } catch {
     return null;
   }
@@ -319,12 +349,15 @@ export function parseUri(uri: string): ParsedGnoUri | null {
  */
 export function decorateUriForIndex(uri: string, indexName?: string): string {
   const parsed = parseUri(uri);
-  const normalizedIndex = indexName?.trim();
-  if (!parsed || !normalizedIndex || normalizedIndex === DEFAULT_INDEX_NAME) {
+  if (!parsed || indexName === undefined) {
+    return stripUriIndex(uri);
+  }
+  assertValidIndexName(indexName);
+  if (indexNamesMatch(indexName, DEFAULT_INDEX_NAME)) {
     return stripUriIndex(uri);
   }
   return buildUri(parsed.collection, parsed.path, {
-    indexName: normalizedIndex,
+    indexName,
   });
 }
 

package/src/app/index-name.ts

@@ -0,0 +1,127 @@
+/** Shared index-name contract for filesystem paths and connector trust checks. */
+
+export const MAX_INDEX_NAME_LENGTH = 64;
+
+const SAFE_INDEX_NAME_REGEX = /^[\p{L}\p{N}][\p{L}\p{M}\p{N} ._-]*$/u;
+const INDEX_DB_PREFIX = "index-";
+const INDEX_DB_SUFFIX = ".sqlite";
+const MAX_PORTABLE_FILENAME_COMPONENT_LENGTH = 255;
+const MAX_INDEX_IDENTITY_STORAGE_LENGTH =
+  MAX_PORTABLE_FILENAME_COMPONENT_LENGTH -
+  INDEX_DB_PREFIX.length -
+  INDEX_DB_SUFFIX.length;
+const UTF8_ENCODER = new TextEncoder();
+
+export const INDEX_NAME_REQUIREMENTS =
+  "use 1-64 letters, marks, numbers, internal spaces, '.', '_' or '-', start with a letter or number, do not end with a space or '.', do not include '..', and fit the portable database filename limit";
+
+function hasSafeIndexNameSyntax(value: string): boolean {
+  return (
+    SAFE_INDEX_NAME_REGEX.test(value) &&
+    !/[ .]$/.test(value) &&
+    !value.includes("..")
+  );
+}
+
+function canonicalizeIndexNameUnchecked(value: string): string {
+  return value
+    .normalize("NFC")
+    .toLowerCase()
+    .toUpperCase()
+    .toLowerCase()
+    .normalize("NFC");
+}
+
+function fitsIndexIdentityStorage(value: string): boolean {
+  return (
+    value.length <= MAX_INDEX_IDENTITY_STORAGE_LENGTH &&
+    UTF8_ENCODER.encode(value).byteLength <= MAX_INDEX_IDENTITY_STORAGE_LENGTH
+  );
+}
+
+/** Return whether a value is a canonical, filesystem-safe GNO index name. */
+export function isValidIndexName(value: unknown): value is string {
+  if (
+    typeof value !== "string" ||
+    value.length > MAX_INDEX_NAME_LENGTH ||
+    !hasSafeIndexNameSyntax(value)
+  ) {
+    return false;
+  }
+  return fitsIndexIdentityStorage(canonicalizeIndexNameUnchecked(value));
+}
+
+/** Fail closed before an index name can influence a database path. */
+export function assertValidIndexName(value: unknown): asserts value is string {
+  if (!isValidIndexName(value)) {
+    throw new TypeError(`Invalid index name: ${INDEX_NAME_REQUIREMENTS}.`);
+  }
+}
+
+/**
+ * Return the cross-platform logical identity for an index name.
+ *
+ * APFS and Windows filesystems collapse canonical Unicode and case variants,
+ * while common Linux filesystems do not. GNO applies one identity everywhere
+ * so URI routing and database selection cannot disagree by platform.
+ */
+export function canonicalizeIndexName(value: string): string {
+  assertValidIndexName(value);
+  // The lower/upper/lower closure covers multi-character folds (ß/SS),
+  // compatibility case pairs (ſ/S), and positional forms (ς/Σ) that a plain
+  // lowercase pass misses but case-insensitive APFS aliases on disk.
+  return canonicalizeIndexNameUnchecked(value);
+}
+
+/** Compare two validated names using GNO's cross-platform identity rules. */
+export function indexNamesMatch(left: string, right: string): boolean {
+  return canonicalizeIndexName(left) === canonicalizeIndexName(right);
+}
+
+function indexNameFromDbFilename(filename: string): string | null {
+  if (
+    !filename.startsWith(INDEX_DB_PREFIX) ||
+    !filename.endsWith(INDEX_DB_SUFFIX)
+  ) {
+    return null;
+  }
+  const name = filename.slice(INDEX_DB_PREFIX.length, -INDEX_DB_SUFFIX.length);
+  const isCanonicalStoredIdentity =
+    hasSafeIndexNameSyntax(name) &&
+    fitsIndexIdentityStorage(name) &&
+    canonicalizeIndexNameUnchecked(name) === name;
+  return isValidIndexName(name) || isCanonicalStoredIdentity ? name : null;
+}
+
+/**
+ * Select one database filename for a logical index identity.
+ *
+ * New indexes use the canonical filename. A single existing mixed-case or
+ * pre-normalized filename remains addressable for backward compatibility.
+ * Multiple legacy files with the same identity are unsafe on case-sensitive
+ * filesystems and fail closed instead of selecting one by directory order.
+ */
+export function resolveIndexDbFilename(
+  indexName: string,
+  existingFilenames: Iterable<string> = []
+): string {
+  const identity = canonicalizeIndexName(indexName);
+  const matches: string[] = [];
+  for (const filename of existingFilenames) {
+    const existingName = indexNameFromDbFilename(filename);
+    if (
+      existingName !== null &&
+      canonicalizeIndexNameUnchecked(existingName) === identity
+    ) {
+      matches.push(filename);
+    }
+  }
+
+  const uniqueMatches = [...new Set(matches)].sort();
+  if (uniqueMatches.length > 1) {
+    throw new TypeError(
+      `Ambiguous index name "${indexName}": multiple database files share its canonical identity (${uniqueMatches.join(", ")}).`
+    );
+  }
+  return uniqueMatches[0] ?? `${INDEX_DB_PREFIX}${identity}${INDEX_DB_SUFFIX}`;
+}

package/src/cli/commands/doctor-activation.ts

@@ -0,0 +1,151 @@
+/** Passive retrieval activation diagnostics shared by `gno doctor`. */
+
+import type { Config } from "../../config/types";
+import type { ActivationStatus } from "../../core/activation-status";
+import type { StorePort } from "../../store/types";
+import type { DoctorCheck } from "./doctor";
+
+import { getIndexDbPath, getModelsCachePath } from "../../app/constants";
+import { buildActivationStatus } from "../../core/activation-status";
+import { ModelCache } from "../../llm/cache";
+import { getActivePreset } from "../../llm/registry";
+import { getConnectorVerificationTargets } from "../../serve/connectors";
+import { SqliteAdapter } from "../../store/sqlite/adapter";
+
+export interface DoctorActivationOptions {
+  configPath?: string;
+  indexName?: string;
+}
+
+async function unavailableActivation(
+  config: Config
+): Promise<ActivationStatus> {
+  return buildActivationStatus(
+    {} as StorePort,
+    config.collections.map(({ name }) => name),
+    {
+      verifyCollection: async () => ({
+        ok: false,
+        error: { code: "QUERY_FAILED", message: "Activation unavailable" },
+      }),
+    }
+  );
+}
+
+export async function buildDoctorActivation(
+  config: Config,
+  options: DoctorActivationOptions
+): Promise<ActivationStatus> {
+  const dbPath = getIndexDbPath(options.indexName);
+  if (!(await Bun.file(dbPath).exists())) {
+    return unavailableActivation(config);
+  }
+
+  const store = new SqliteAdapter();
+  store.setConfigPath(options.configPath ?? "");
+  const opened = await store.open(dbPath, config.ftsTokenizer);
+  if (!opened.ok) {
+    return unavailableActivation(config);
+  }
+
+  try {
+    const indexStatus = await store.getStatus();
+    const embedCached = await new ModelCache(getModelsCachePath()).isCached(
+      getActivePreset(config).embed
+    );
+    return await buildActivationStatus(
+      store,
+      config.collections.map(({ name }) => name),
+      {
+        semantic: {
+          modelsCached: embedCached,
+          embeddingBacklog: indexStatus.ok
+            ? indexStatus.value.embeddingBacklog
+            : 0,
+        },
+        connectorTargets: await getConnectorVerificationTargets(),
+      }
+    );
+  } finally {
+    await store.close();
+  }
+}
+
+export function checkRetrievalActivation(
+  activation: ActivationStatus
+): DoctorCheck {
+  if (activation.healthy) {
+    const semanticStates = [
+      ...new Set(
+        activation.collections.map(
+          ({ semanticAvailability }) => semanticAvailability.code
+        )
+      ),
+    ];
+    return {
+      name: "retrieval-activation",
+      status: "ok",
+      message: `${activation.collections.length} collection${activation.collections.length === 1 ? "" : "s"} passed lexical retrieval proof`,
+      details: [
+        `Semantic retrieval remains separate (${semanticStates.join(", ")}).`,
+      ],
+    };
+  }
+
+  const failed = activation.collections.filter(({ ready }) => !ready);
+  const details = failed.flatMap(({ collection, remediation }) =>
+    remediation
+      ? [
+          `${collection}: ${remediation.stage}/${remediation.code}`,
+          `Run: ${remediation.command}`,
+        ]
+      : [`${collection}: activation unavailable`]
+  );
+  return {
+    name: "retrieval-activation",
+    status: "error",
+    message:
+      activation.collections.length === 0
+        ? "No collections configured. Run: gno collection add"
+        : activation.usable
+          ? `${failed.length} collection${failed.length === 1 ? "" : "s"} failed lexical retrieval proof`
+          : "No configured collection passed lexical retrieval proof",
+    details,
+  };
+}
+
+export function checkConnectorActivation(
+  activation: ActivationStatus
+): DoctorCheck | null {
+  const { projected, total, truncated } = activation.connectorProjection;
+  const omitted = total - projected;
+  const observed = activation.connectors.filter(
+    ({ code }) =>
+      code !== "connector_not_configured" &&
+      code !== "target_runtime_unverifiable"
+  );
+  if (observed.length === 0 && !truncated) {
+    return null;
+  }
+  const incomplete = observed.filter(({ status }) => status !== "passed");
+  const details = incomplete.map(
+    ({ collection, target, status, code, remediation }) =>
+      `${target}/${collection}: ${status}${code ? `/${code}` : ""}${remediation ? `. ${remediation}` : ""}`
+  );
+  if (truncated) {
+    details.unshift(
+      `${omitted} target/collection checks were omitted by the bounded status projection; no result is claimed for them.`
+    );
+  }
+  return {
+    name: "connector-activation",
+    status: incomplete.length > 0 || truncated ? "warn" : "ok",
+    message:
+      incomplete.length > 0
+        ? `${incomplete.length} connector proof${incomplete.length === 1 ? "" : "s"} pending or failed`
+        : truncated
+          ? `${projected} of ${total} connector target/collection checks projected`
+          : `${observed.length} connector proof${observed.length === 1 ? "" : "s"} passed`,
+    details,
+  };
+}