@qodalis/cli 2.0.0-beta.12 → 2.0.0-beta.13

package/public-api.js

@@ -409,9 +409,11 @@ var ICliPingServerService_TOKEN = "cli-ping-server-service";
 var CliModuleRegistry_TOKEN = "cli-module-registry";
 var CliBackgroundServiceRegistry_TOKEN = "cli-background-service-registry";
 var CliPackageManagerService_TOKEN = "cli-package-manager-service";
+var CliKeyValueStore_TOKEN = "cli-key-value-store";
+var SyntaxHighlighterRegistry_TOKEN = "syntax-highlighter-registry";
 
 // src/lib/version.ts
-var LIBRARY_VERSION = "2.0.0-beta.12";
+var LIBRARY_VERSION = "2.0.0-beta.13";
 var API_VERSION = 2;
 var CliAliasCommandProcessor = class {
   constructor() {
@@ -474,7 +476,7 @@ var CliAliasCommandProcessor = class {
     );
   }
   async processCommand(command2, context2) {
-    const registry = context2.services.get(
+    const registry = context2.services.getRequired(
       CliProcessorsRegistry_TOKEN
     );
     const { writer } = context2;
@@ -2814,7 +2816,7 @@ var CliConfigureCommandProcessor = class _CliConfigureCommandProcessor {
     ];
   }
   async processCommand(command2, context2) {
-    const registry = context2.services.get(
+    const registry = context2.services.getRequired(
       CliProcessorsRegistry_TOKEN
     );
     const pluginCategories = cliCore.resolveConfigurationCategories(registry);
@@ -2911,10 +2913,10 @@ var CliConfigureCommandProcessor = class _CliConfigureCommandProcessor {
     if (stateKey === "system") {
       const langOption = options.find((o) => o.key === "language");
       if (langOption) {
-        try {
-          const translator = context2.services.get(
-            cliCore.ICliTranslationService_TOKEN
-          );
+        const translator = context2.services.get(
+          cliCore.ICliTranslationService_TOKEN
+        );
+        if (translator) {
           const locales = translator.getAvailableLocales();
           if (locales.length > 0) {
             langOption.options = locales.map((l) => ({
@@ -2922,7 +2924,6 @@ var CliConfigureCommandProcessor = class _CliConfigureCommandProcessor {
               value: l
             }));
           }
-        } catch {
         }
       }
     }
@@ -3067,13 +3068,10 @@ var CliConfigureCommandProcessor = class _CliConfigureCommandProcessor {
       }
     }
     if (settings["language"]) {
-      try {
-        const translator = context2.services.get(
-          cliCore.ICliTranslationService_TOKEN
-        );
-        translator.setLocale(settings["language"]);
-      } catch {
-      }
+      const translator = context2.services.get(
+        cliCore.ICliTranslationService_TOKEN
+      );
+      translator?.setLocale(settings["language"]);
     }
     if (context2.terminal?.options) {
       if (settings["cursorBlink"] !== void 0) {
@@ -3103,7 +3101,7 @@ var CliConfigureCommandProcessor = class _CliConfigureCommandProcessor {
       aliases: ["ls"],
       description: "List all configuration options and their current values",
       processCommand: async (_, context2) => {
-        const registry = context2.services.get(
+        const registry = context2.services.getRequired(
           CliProcessorsRegistry_TOKEN
         );
         const allOptions = this.getAllOptions(registry);
@@ -3165,7 +3163,7 @@ var CliConfigureCommandProcessor = class _CliConfigureCommandProcessor {
         }
         const category = path.substring(0, dotIndex);
         const key = path.substring(dotIndex + 1);
-        const registry = context2.services.get(
+        const registry = context2.services.getRequired(
           CliProcessorsRegistry_TOKEN
         );
         const allOptions = this.getAllOptions(registry);
@@ -3217,7 +3215,7 @@ var CliConfigureCommandProcessor = class _CliConfigureCommandProcessor {
         }
         const category = path.substring(0, dotIndex);
         const key = path.substring(dotIndex + 1);
-        const registry = context2.services.get(
+        const registry = context2.services.getRequired(
           CliProcessorsRegistry_TOKEN
         );
         const allOptions = this.getAllOptions(registry);
@@ -3277,7 +3275,7 @@ var CliConfigureCommandProcessor = class _CliConfigureCommandProcessor {
               t.t("cli.configure.system_reset", "System configuration reset to defaults")
             );
           } else {
-            const registry = context2.services.get(
+            const registry = context2.services.getRequired(
               CliProcessorsRegistry_TOKEN
             );
             const categories2 = cliCore.resolveConfigurationCategories(registry);
@@ -3673,7 +3671,7 @@ var CliHelpCommandProcessor = class {
   async processCommand(command2, context2) {
     const { writer } = context2;
     const t = context2.translator;
-    const registry = context2.services.get(
+    const registry = context2.services.getRequired(
       CliProcessorsRegistry_TOKEN
     );
     const [_, ...commandsToHelp] = command2.command.split(" ");
@@ -3773,24 +3771,23 @@ var CliHelpCommandProcessor = class {
   writeProcessorDescription(processor, context2) {
     const { writer } = context2;
     const t = context2.translator;
-    const icon = processor.metadata?.icon || "";
-    const name = `${BOLD}${writer.wrapInColor(processor.command, cliCore.CliForegroundColor.Cyan)}${RESET}`;
     const version = `${DIM}v${processor.version || "1.0.0"}${RESET}`;
-    writer.writeln();
-    writer.writeln(`  ${icon}${icon ? "  " : ""}${name} ${version}`);
+    const headerLines = [];
     if (processor.description) {
-      const desc = this.translateDescription(
-        processor.description,
-        processor.command,
-        context2
+      headerLines.push(
+        this.translateDescription(processor.description, processor.command, context2)
       );
-      writer.writeln(`  ${desc}`);
     }
     if (processor.aliases?.length) {
-      writer.writeln(
-        `  ${DIM}${t.t("cli.help.aliases", "Aliases:")}${RESET} ${processor.aliases.map((a) => writer.wrapInColor(a, cliCore.CliForegroundColor.Magenta)).join(", ")}`
+      headerLines.push(
+        `${DIM}${t.t("cli.help.aliases", "Aliases:")}${RESET} ${processor.aliases.map((a) => writer.wrapInColor(a, cliCore.CliForegroundColor.Magenta)).join(", ")}`
       );
     }
+    writer.writeln();
+    writer.writeBox(headerLines, {
+      title: `${writer.wrapInColor(processor.command, cliCore.CliForegroundColor.Cyan)} ${version}`,
+      borderColor: cliCore.CliForegroundColor.White
+    });
     if (processor.originalProcessor) {
       writer.writeln();
       writer.writeln(
@@ -3956,20 +3953,13 @@ var CliVersionCommandProcessor = class {
     writer.writeln(
       writer.wrapInColor(getCliNameArt(context2.terminal.cols), cliCore.CliForegroundColor.Cyan)
     );
-    writer.writeln(
-      `  ${DIM2}CLI${RESET2}  ${writer.wrapInColor(`v${LIBRARY_VERSION}`, cliCore.CliForegroundColor.Green)}    ${DIM2}Core${RESET2}  ${writer.wrapInColor(`v${cliCore.LIBRARY_VERSION}`, cliCore.CliForegroundColor.Green)}`
-    );
-    let framework = "vanilla";
-    try {
-      framework = context2.services.get("cli-framework");
-    } catch {
-    }
-    writer.writeln(
-      `  ${DIM2}Framework${RESET2}  ${writer.wrapInColor(framework, cliCore.CliForegroundColor.Cyan)}`
-    );
-    writer.writeln(
-      `  ${DIM2}Docs${RESET2}  ${writer.wrapInColor("https://cli.qodalis.com/docs/", cliCore.CliForegroundColor.Blue)}`
-    );
+    const framework = context2.services.get("cli-framework") ?? "vanilla";
+    writer.writeBox([
+      `${DIM2}CLI${RESET2}        ${writer.wrapInColor(`v${LIBRARY_VERSION}`, cliCore.CliForegroundColor.Green)}`,
+      `${DIM2}Core${RESET2}       ${writer.wrapInColor(`v${cliCore.LIBRARY_VERSION}`, cliCore.CliForegroundColor.Green)}`,
+      `${DIM2}Framework${RESET2}  ${writer.wrapInColor(framework, cliCore.CliForegroundColor.Cyan)}`,
+      `${DIM2}Docs${RESET2}       ${writer.wrapInColor("https://cli.qodalis.com/docs/", cliCore.CliForegroundColor.Blue)}`
+    ], { borderColor: cliCore.CliForegroundColor.White });
     writer.writeln();
   }
   writeDescription(context2) {
@@ -4027,11 +4017,7 @@ function collectSystemInfo(context2) {
   const lines = [];
   lines.push(`- **CLI Version:** ${LIBRARY_VERSION}`);
   lines.push(`- **Core Version:** ${cliCore.LIBRARY_VERSION}`);
-  let framework = "vanilla";
-  try {
-    framework = context2.services.get("cli-framework");
-  } catch {
-  }
+  const framework = context2.services.get("cli-framework") ?? "vanilla";
   lines.push(`- **Framework:** ${framework}`);
   lines.push(`- **Terminal:** ${context2.terminal.cols}x${context2.terminal.rows}`);
   if (typeof navigator !== "undefined") {
@@ -4103,12 +4089,8 @@ async function runInteractiveFlow(type, initialTitle, context2) {
     `${writer.wrapInColor("\u2500\u2500 System Info (auto-attached) \u2500\u2500", cliCore.CliForegroundColor.Cyan)}`
   );
   writer.writeln(`  CLI: ${LIBRARY_VERSION}  Core: ${cliCore.LIBRARY_VERSION}`);
-  let framework = "vanilla";
-  try {
-    framework = context2.services.get("cli-framework");
-  } catch {
-  }
-  writer.writeln(`  Framework: ${framework}  Terminal: ${context2.terminal.cols}x${context2.terminal.rows}`);
+  const previewFramework = context2.services.get("cli-framework") ?? "vanilla";
+  writer.writeln(`  Framework: ${previewFramework}  Terminal: ${context2.terminal.cols}x${context2.terminal.rows}`);
   if (typeof navigator !== "undefined") {
     writer.writeln(`  Platform: ${navigator.platform}  Language: ${navigator.language}`);
   }
@@ -4250,7 +4232,7 @@ var CliHistoryCommandProcessor = class {
       command: "clear",
       description: "Clears the command history",
       processCommand: async (_, context2) => {
-        const commandHistory = context2.services.get(
+        const commandHistory = context2.services.getRequired(
           CliCommandHistory_TOKEN
         );
         await commandHistory.clearHistory();
@@ -4273,7 +4255,7 @@ var CliHistoryCommandProcessor = class {
       description: "Search command history for a pattern",
       parameters: searchParameters,
       processCommand: async (cmd, context2) => {
-        const commandHistory = context2.services.get(
+        const commandHistory = context2.services.getRequired(
           CliCommandHistory_TOKEN
         );
         const query = (cmd.value ?? "").trim();
@@ -4327,7 +4309,7 @@ var CliHistoryCommandProcessor = class {
   }
   async processCommand(_, context2) {
     const { writer } = context2;
-    const commandHistory = context2.services.get(
+    const commandHistory = context2.services.getRequired(
       CliCommandHistory_TOKEN
     );
     const history = commandHistory.getHistory();
@@ -4774,7 +4756,7 @@ var CliPackagesCommandProcessor = class {
           const { progressBar, writer } = context2;
           const { signal, cleanup } = scope.createAbortSignal(context2);
           progressBar.show();
-          context2.setStatusText("Browsing packages");
+          context2.notifier.info("Browsing packages");
           const prefix = packagesManager.QODALIS_COMMAND_PREFIX;
           const knownShortNames = [
             "browser-storage",
@@ -4967,7 +4949,7 @@ var CliPackagesCommandProcessor = class {
           const packages = command2.value.split(" ");
           for (const pkg of packages) {
             if (signal.aborted) break;
-            context2.setStatusText(`Installing ${pkg}`);
+            context2.notifier.info(`Installing ${pkg}`);
             await scope.addPackage(pkg, context2, signal);
           }
           cleanup();
@@ -5008,7 +4990,7 @@ var CliPackagesCommandProcessor = class {
           const packages = command2.value.split(" ");
           for (const pkg of packages) {
             if (signal.aborted) break;
-            context2.setStatusText(`Removing ${pkg}`);
+            context2.notifier.info(`Removing ${pkg}`);
             await scope.removePackage(pkg, context2);
           }
           cleanup();
@@ -5044,7 +5026,7 @@ var CliPackagesCommandProcessor = class {
           const fullName = name.startsWith(prefix) ? name : `${prefix}${name}`;
           progressBar.show();
           progressBar.setText(`Fetching versions for ${name}`);
-          context2.setStatusText(`Fetching versions for ${name}`);
+          context2.notifier.info(`Fetching versions for ${name}`);
           try {
             const response = await scriptsLoader.getScript(
               `https://registry.npmjs.org/${encodeURIComponent(fullName)}`,
@@ -5508,11 +5490,11 @@ var CliPackagesCommandProcessor = class {
     );
   }
   async initialize(context2) {
-    this.registry = context2.services.get(
+    this.registry = context2.services.getRequired(
       CliProcessorsRegistry_TOKEN
     );
-    const store = context2.services.get(
-      "cli-key-value-store"
+    const store = context2.services.getRequired(
+      CliKeyValueStore_TOKEN
     );
     this.packagesManager.setStore(store);
     context2.services.set([{
@@ -5778,10 +5760,11 @@ var CliPackagesCommandProcessor = class {
   }
 };
 var CliServerConnection = class _CliServerConnection {
-  constructor(_config, _backgroundServices, _logger) {
+  constructor(_config, _backgroundServices, _logger, _authService) {
     this._config = _config;
     this._backgroundServices = _backgroundServices;
     this._logger = _logger;
+    this._authService = _authService;
     this._connected = false;
     this._commands = [];
     this._capabilities = null;
@@ -5820,10 +5803,21 @@ var CliServerConnection = class _CliServerConnection {
   get apiVersion() {
     return this._apiVersion;
   }
+  /**
+   * Resolve auth headers for this server connection.
+   * Uses the auth service (which merges config headers with registered
+   * ICliServerAuthTokenProviders), or falls back to config headers directly.
+   */
+  resolveAuthHeaders() {
+    if (this._authService) {
+      return this._authService.getHeaders(this._config.name, this._config.headers);
+    }
+    return cliCore.resolveHeaders(this._config.headers);
+  }
   async connect() {
     try {
       const baseUrl = this.normalizeUrl(this._config.url);
-      const negotiated = await cliCore.ServerVersionNegotiator.discover(baseUrl);
+      const negotiated = await cliCore.ServerVersionNegotiator.discover(baseUrl, () => this.resolveAuthHeaders());
       if (negotiated) {
         this._apiVersion = negotiated.apiVersion;
         this._basePath = negotiated.basePath;
@@ -6018,7 +6012,10 @@ var CliServerConnection = class _CliServerConnection {
         type: "daemon",
         onStart: async (ctx) => {
           const baseUrl = this.normalizeUrl(this._config.url);
-          const wsUrl = this.toWebSocketUrl(baseUrl) + "/ws/v1/qcli/events";
+          const wsUrl = cliCore.buildAuthenticatedWebSocketUrl(
+            this.toWebSocketUrl(baseUrl) + "/ws/v1/qcli/events",
+            () => this.resolveAuthHeaders()
+          );
           ctx.log(`Connecting to ${wsUrl}`);
           this._eventSocket = new WebSocket(wsUrl);
           this._eventSocket.onopen = () => {
@@ -6068,7 +6065,10 @@ var CliServerConnection = class _CliServerConnection {
   connectEventSocketDirect() {
     try {
       const baseUrl = this.normalizeUrl(this._config.url);
-      const wsUrl = this.toWebSocketUrl(baseUrl) + "/ws/v1/qcli/events";
+      const wsUrl = cliCore.buildAuthenticatedWebSocketUrl(
+        this.toWebSocketUrl(baseUrl) + "/ws/v1/qcli/events",
+        () => this.resolveAuthHeaders()
+      );
       this._eventSocket = new WebSocket(wsUrl);
       this._eventSocket.onopen = () => {
         this._wsReconnectAttempts = 0;
@@ -6171,7 +6171,7 @@ var CliServerConnection = class _CliServerConnection {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeout);
     const headers = {
-      ...this._config.headers ?? {},
+      ...this.resolveAuthHeaders(),
       ...init?.headers ?? {}
     };
     return fetch(url, {
@@ -6252,7 +6252,7 @@ async function executeOnServer(connection, serverName, descriptor, command2, con
     chainCommands: commandPath && commandPath.length > 1 ? commandPath.slice(1) : []
   };
   const cmdLabel = commandPath && commandPath.length > 0 ? commandPath.join(" ") : descriptor.command;
-  context2.setStatusText(`executing command: ${cmdLabel} on server ${serverName}`);
+  context2.notifier.info(`executing command: ${cmdLabel} on server ${serverName}`);
   try {
     if (connection.capabilities?.streaming) {
       const result = await connection.executeStream(
@@ -6440,8 +6440,9 @@ var CliServerMultiProxyProcessor = class _CliServerMultiProxyProcessor {
 // src/lib/server/cli-server-manager.ts
 var CliServerManager_TOKEN = "cli-server-manager";
 var CliServerManager = class {
-  constructor(registry) {
+  constructor(registry, authService) {
     this.registry = registry;
+    this.authService = authService;
     this.connections = /* @__PURE__ */ new Map();
     this._defaultServer = null;
   }
@@ -6462,7 +6463,7 @@ var CliServerManager = class {
     this._backgroundServices = backgroundServices;
     for (const config of servers) {
       if (config.enabled === false) continue;
-      const connection = new CliServerConnection(config, backgroundServices, cliLogger);
+      const connection = new CliServerConnection(config, backgroundServices, cliLogger, this.authService);
       this.connections.set(config.name, connection);
       connection.onDisconnect = () => {
         this.handleDisconnect(config.name);
@@ -7013,7 +7014,7 @@ var CliDebugCommandProcessor = class {
         metadata: { icon: cliCore.CliIcon.Extension, module: "system" },
         processCommand: async (_, context2) => {
           const { writer } = context2;
-          const registry = context2.services.get(
+          const registry = context2.services.getRequired(
             CliProcessorsRegistry_TOKEN
           );
           writer.writeln(
@@ -7064,12 +7065,10 @@ var CliDebugCommandProcessor = class {
         metadata: { icon: cliCore.CliIcon.Module, module: "system" },
         processCommand: async (_, context2) => {
           const { writer } = context2;
-          let moduleRegistry;
-          try {
-            moduleRegistry = context2.services.get(
-              CliModuleRegistry_TOKEN
-            );
-          } catch {
+          const moduleRegistry = context2.services.get(
+            CliModuleRegistry_TOKEN
+          );
+          if (!moduleRegistry) {
             writer.writeError("Module registry not available.");
             return;
           }
@@ -7110,7 +7109,7 @@ var CliDebugCommandProcessor = class {
         metadata: { icon: cliCore.CliIcon.Database, module: "system" },
         processCommand: async (_, context2) => {
           const { writer } = context2;
-          const storeManager = context2.services.get(
+          const storeManager = context2.services.getRequired(
             CliStateStoreManager_TOKEN
           );
           const entries = storeManager.getStoreEntries();
@@ -7189,11 +7188,7 @@ var CliDebugCommandProcessor = class {
           writer.writeln(
             `  ${writer.wrapInColor("CLI Version:", cliCore.CliForegroundColor.Cyan)} ${LIBRARY_VERSION}`
           );
-          let framework = "vanilla";
-          try {
-            framework = context2.services.get("cli-framework");
-          } catch {
-          }
+          const framework = context2.services.get("cli-framework") ?? "vanilla";
           writer.writeln(
             `  ${writer.wrapInColor("Framework:", cliCore.CliForegroundColor.Cyan)} ${framework}`
           );
@@ -7234,7 +7229,7 @@ var CliDebugCommandProcessor = class {
         metadata: { icon: cliCore.CliIcon.Logs, module: "system" },
         processCommand: async (_, context2) => {
           const { writer } = context2;
-          const history = context2.services.get(
+          const history = context2.services.getRequired(
             CliCommandHistory_TOKEN
           );
           const commands = history.getHistory();
@@ -7323,14 +7318,14 @@ var CliDebugCommandProcessor = class {
           writer.writeln(
             `  ${online ? cliCore.CliIcon.CheckIcon : cliCore.CliIcon.CrossIcon} Network: ${online ? "online" : "offline"}`
           );
-          const registry = context2.services.get(
+          const registry = context2.services.getRequired(
             CliProcessorsRegistry_TOKEN
           );
           writer.writeln(
             `  ${cliCore.CliIcon.CheckIcon} Processors: ${registry.processors.length} loaded`
           );
           try {
-            const moduleRegistry = context2.services.get(
+            const moduleRegistry = context2.services.getRequired(
               CliModuleRegistry_TOKEN
             );
             const modules = moduleRegistry.getAll();
@@ -7346,7 +7341,7 @@ var CliDebugCommandProcessor = class {
           writer.writeln(
             `  ${wasmActive ? cliCore.CliIcon.CheckIcon : cliCore.CliIcon.WarningIcon} WASM Accelerator: ${wasmActive ? "loaded" : "using JS fallback"}`
           );
-          const historyService = context2.services.get(
+          const historyService = context2.services.getRequired(
             CliCommandHistory_TOKEN
           );
           writer.writeln(
@@ -7360,13 +7355,13 @@ var CliDebugCommandProcessor = class {
         metadata: { icon: cliCore.CliIcon.Save, module: "system" },
         processCommand: async (_, context2) => {
           const { writer } = context2;
-          const registry = context2.services.get(
+          const registry = context2.services.getRequired(
             CliProcessorsRegistry_TOKEN
           );
-          const history = context2.services.get(
+          const history = context2.services.getRequired(
             CliCommandHistory_TOKEN
           );
-          const storeManager = context2.services.get(
+          const storeManager = context2.services.getRequired(
             CliStateStoreManager_TOKEN
           );
           const report = {
@@ -7399,7 +7394,7 @@ var CliDebugCommandProcessor = class {
             state: storeManager.getStoreEntries()
           };
           try {
-            const moduleRegistry = context2.services.get(
+            const moduleRegistry = context2.services.getRequired(
               CliModuleRegistry_TOKEN
             );
             report["modules"] = moduleRegistry.getAll().map((m) => ({
@@ -7417,7 +7412,7 @@ var CliDebugCommandProcessor = class {
             report["services"] = container.getRegisteredTokens();
           }
           try {
-            const serverManager = context2.services.get(
+            const serverManager = context2.services.getRequired(
               CliServerManager_TOKEN
             );
             if (serverManager && serverManager.connections.size > 0) {
@@ -7441,13 +7436,9 @@ var CliDebugCommandProcessor = class {
         metadata: { icon: cliCore.CliIcon.Server, module: "system" },
         processCommand: async (_, context2) => {
           const { writer } = context2;
-          let manager;
-          try {
-            manager = context2.services.get(
-              CliServerManager_TOKEN
-            );
-          } catch {
-          }
+          const manager = context2.services.get(
+            CliServerManager_TOKEN
+          );
           if (!manager || manager.connections.size === 0) {
             writer.writeInfo("No servers configured.");
             return;
@@ -7487,70 +7478,48 @@ var CliDebugCommandProcessor = class {
   }
   async processCommand(_, context2) {
     const { writer } = context2;
-    const registry = context2.services.get(
+    const registry = context2.services.getRequired(
       CliProcessorsRegistry_TOKEN
     );
-    writer.writeln(
-      writer.wrapInColor(
-        `${cliCore.CliIcon.Bug}  CLI Debug Info`,
-        cliCore.CliForegroundColor.Yellow
-      )
-    );
-    writer.writeDivider({ char: "=" });
-    writer.writeln(
-      `  ${writer.wrapInColor("Core Version:", cliCore.CliForegroundColor.Cyan)} ${cliCore.LIBRARY_VERSION}`
-    );
-    writer.writeln(
-      `  ${writer.wrapInColor("CLI Version:", cliCore.CliForegroundColor.Cyan)} ${LIBRARY_VERSION}`
+    const summaryFramework = context2.services.get("cli-framework") ?? "vanilla";
+    const summaryModuleRegistry = context2.services.get(
+      CliModuleRegistry_TOKEN
     );
-    let framework = "vanilla";
-    try {
-      framework = context2.services.get("cli-framework");
-    } catch {
-    }
-    writer.writeln(
-      `  ${writer.wrapInColor("Framework:", cliCore.CliForegroundColor.Cyan)} ${framework}`
-    );
-    writer.writeln(
-      `  ${writer.wrapInColor("Terminal:", cliCore.CliForegroundColor.Cyan)} ${context2.terminal.cols}x${context2.terminal.rows}`
+    const summaryServerManager = context2.services.get(
+      CliServerManager_TOKEN
     );
-    writer.writeln(
-      `  ${writer.wrapInColor("Processors:", cliCore.CliForegroundColor.Cyan)} ${registry.processors.length}`
+    const history = context2.services.getRequired(
+      CliCommandHistory_TOKEN
     );
-    try {
-      const moduleRegistry = context2.services.get(
-        CliModuleRegistry_TOKEN
-      );
-      writer.writeln(
-        `  ${writer.wrapInColor("Modules:", cliCore.CliForegroundColor.Cyan)} ${moduleRegistry.getAll().length}`
+    const wasmStatus = isWasmAccelerated() ? "active" : "inactive (JS fallback)";
+    const lines = [
+      `${writer.wrapInColor("Core Version:", cliCore.CliForegroundColor.Cyan)}      ${cliCore.LIBRARY_VERSION}`,
+      `${writer.wrapInColor("CLI Version:", cliCore.CliForegroundColor.Cyan)}       ${LIBRARY_VERSION}`,
+      `${writer.wrapInColor("Framework:", cliCore.CliForegroundColor.Cyan)}         ${summaryFramework}`,
+      `${writer.wrapInColor("Terminal:", cliCore.CliForegroundColor.Cyan)}          ${context2.terminal.cols}x${context2.terminal.rows}`,
+      `${writer.wrapInColor("Processors:", cliCore.CliForegroundColor.Cyan)}        ${registry.processors.length}`
+    ];
+    if (summaryModuleRegistry) {
+      lines.push(
+        `${writer.wrapInColor("Modules:", cliCore.CliForegroundColor.Cyan)}           ${summaryModuleRegistry.getAll().length}`
       );
-    } catch {
     }
-    try {
-      const serverManager = context2.services.get(
-        CliServerManager_TOKEN
+    if (summaryServerManager && summaryServerManager.connections.size > 0) {
+      const connected = Array.from(
+        summaryServerManager.connections.values()
+      ).filter((c) => c.connected).length;
+      lines.push(
+        `${writer.wrapInColor("Servers:", cliCore.CliForegroundColor.Cyan)}           ${connected}/${summaryServerManager.connections.size} connected`
       );
-      if (serverManager && serverManager.connections.size > 0) {
-        const connected = Array.from(
-          serverManager.connections.values()
-        ).filter((c) => c.connected).length;
-        writer.writeln(
-          `  ${writer.wrapInColor("Servers:", cliCore.CliForegroundColor.Cyan)} ${connected}/${serverManager.connections.size} connected`
-        );
-      }
-    } catch {
     }
-    const history = context2.services.get(
-      CliCommandHistory_TOKEN
-    );
-    writer.writeln(
-      `  ${writer.wrapInColor("History:", cliCore.CliForegroundColor.Cyan)} ${history.getHistory().length} commands`
-    );
-    const wasmStatus = isWasmAccelerated() ? "active" : "inactive (JS fallback)";
-    writer.writeln(
-      `  ${writer.wrapInColor("WASM Accelerator:", cliCore.CliForegroundColor.Cyan)} ${wasmStatus}`
+    lines.push(
+      `${writer.wrapInColor("History:", cliCore.CliForegroundColor.Cyan)}           ${history.getHistory().length} commands`,
+      `${writer.wrapInColor("WASM Accelerator:", cliCore.CliForegroundColor.Cyan)}  ${wasmStatus}`
     );
-    writer.writeDivider({ char: "=" });
+    writer.writeBox(lines, {
+      title: "CLI Debug Info",
+      borderColor: cliCore.CliForegroundColor.Yellow
+    });
     writer.writeln();
     writer.writeln(`${cliCore.CliIcon.Light} Subcommands:`);
     for (const sub of this.processors || []) {
@@ -8136,7 +8105,7 @@ var CliNanoCommandProcessor = class {
     this.replaceWith = "";
     this.statusMessage = void 0;
     try {
-      this.fs = context2.services.get(FS_TOKEN);
+      this.fs = context2.services.getRequired(FS_TOKEN);
     } catch {
       this.fs = null;
     }
@@ -8475,8 +8444,8 @@ var CliNanoCommandProcessor = class {
       return;
     }
     try {
-      const registry = this.context.services.get(
-        "syntax-highlighter-registry"
+      const registry = this.context.services.getRequired(
+        SyntaxHighlighterRegistry_TOKEN
       );
       const ext = "." + filePath.split(".").pop()?.toLowerCase();
       const highlighter = registry.getByExtension(ext);
@@ -9113,7 +9082,7 @@ var CliPsCommandProcessor = class {
   async processCommand(_command, context2) {
     let registry;
     try {
-      registry = context2.services.get(
+      registry = context2.services.getRequired(
         CliProcessRegistry_TOKEN
       );
     } catch {
@@ -9152,7 +9121,7 @@ var CliKillCommandProcessor = class {
   async processCommand(command2, context2) {
     let registry;
     try {
-      registry = context2.services.get(
+      registry = context2.services.getRequired(
         CliProcessRegistry_TOKEN
       );
     } catch {
@@ -9267,11 +9236,10 @@ var CliHtopCommandProcessor = class {
     this.errorTimeout = null;
   }
   async processCommand(_command, context2) {
-    try {
-      this.registry = context2.services.get(
-        CliProcessRegistry_TOKEN
-      );
-    } catch {
+    this.registry = context2.services.get(
+      CliProcessRegistry_TOKEN
+    ) ?? null;
+    if (!this.registry) {
       context2.writer.writeError("Process registry not available");
       return;
     }
@@ -10411,7 +10379,7 @@ var CliPingCommandProcessor = class {
     context2.writer.writeln(
       `PING ${host} (${url}):`
     );
-    context2.setStatusText(`ping ${host}`);
+    context2.notifier.info(`ping ${host}`);
     const times = [];
     let transmitted = 0;
     let received = 0;
@@ -10426,18 +10394,17 @@ var CliPingCommandProcessor = class {
         transmitted++;
         const start = performance.now();
         try {
-          const response = await fetch(url, {
+          const response = await context2.http.fetch(url, {
             method: "HEAD",
             mode: "no-cors",
-            cache: "no-store",
-            signal: context2.signal
+            cache: "no-store"
           });
           const elapsed = performance.now() - start;
           const ms = elapsed.toFixed(1);
           received++;
           times.push(elapsed);
           const status = response.type === "opaque" ? "ok" : `status=${response.status}`;
-          context2.setStatusText(`ping ${host}: seq=${seq} time=${ms}ms`);
+          context2.notifier.info(`ping ${host}: seq=${seq} time=${ms}ms`);
           context2.writer.writeln(
             `${url}: seq=${seq} ${status} time=${ms} ms`
           );
@@ -10571,7 +10538,7 @@ var CliExportCommandProcessor = class {
     this.metadata = { icon: "\u{1F4E6}", module: "system" };
   }
   async processCommand(command2, context2) {
-    const env = context2.services.get(
+    const env = context2.services.getRequired(
       ICliEnvironment_TOKEN
     );
     const raw = (command2.value || "").trim();
@@ -10625,7 +10592,7 @@ var CliUnsetCommandProcessor = class {
     this.metadata = { icon: "\u{1F5D1}\uFE0F", module: "system" };
   }
   async processCommand(command2, context2) {
-    const env = context2.services.get(
+    const env = context2.services.getRequired(
       ICliEnvironment_TOKEN
     );
     const varName = (command2.value || "").trim();
@@ -10659,7 +10626,7 @@ var CliEnvCommandProcessor = class {
     this.metadata = { icon: "\u{1F30D}", module: "system" };
   }
   async processCommand(command2, context2) {
-    const env = context2.services.get(
+    const env = context2.services.getRequired(
       ICliEnvironment_TOKEN
     );
     const varName = (command2.value || "").trim();
@@ -10907,16 +10874,9 @@ var CliCommandExecutionContext = class {
     this.createInterval = (cb, ms) => context2.createInterval(cb, ms);
     this.createTimeout = (cb, ms) => context2.createTimeout(cb, ms);
     this.backgroundServices = context2.backgroundServices;
-    this.state = context2.services.get(CliStateStoreManager_TOKEN).getProcessorStateStore(processor);
-  }
-  setStatusText(text) {
-    this.context.setStatusText(text);
-  }
-  clearStatusText() {
-    this.context.clearStatusText();
-  }
-  getStatusText() {
-    return this.context.getStatusText();
+    this.http = context2.http;
+    this.notifier = context2.notifier;
+    this.state = context2.services.getRequired(CliStateStoreManager_TOKEN).getProcessorStateStore(processor);
   }
   get promptLength() {
     return this.context.promptLength;
@@ -11467,6 +11427,172 @@ var CliBackgroundServiceRegistry = class {
   }
 };
 
+// src/lib/services/cli-http-client.ts
+var CliHttpClient = class {
+  constructor(signal) {
+    this.signal = signal;
+  }
+  async fetch(url, init) {
+    return fetch(url, {
+      ...init,
+      signal: this.mergeSignal(init?.signal)
+    });
+  }
+  async get(url, options) {
+    return this.jsonRequest("GET", url, void 0, options);
+  }
+  async post(url, body, options) {
+    return this.jsonRequest("POST", url, body, options);
+  }
+  async put(url, body, options) {
+    return this.jsonRequest("PUT", url, body, options);
+  }
+  async patch(url, body, options) {
+    return this.jsonRequest("PATCH", url, body, options);
+  }
+  async delete(url, options) {
+    return this.jsonRequest("DELETE", url, void 0, options);
+  }
+  async head(url, options) {
+    const { timeout, signal: callerSignal, ...fetchOptions } = options ?? {};
+    let timeoutController;
+    let timeoutId;
+    if (timeout) {
+      timeoutController = new AbortController();
+      timeoutId = setTimeout(() => timeoutController.abort(), timeout);
+    }
+    try {
+      return await fetch(url, {
+        ...fetchOptions,
+        method: "HEAD",
+        signal: this.mergeSignal(callerSignal, timeoutController?.signal)
+      });
+    } finally {
+      if (timeoutId !== void 0) clearTimeout(timeoutId);
+    }
+  }
+  async options(url, options) {
+    return this.jsonRequest("OPTIONS", url, void 0, options);
+  }
+  // ── Internals ────────────────────────────────────────────────────
+  async jsonRequest(method, url, body, options) {
+    const { timeout, ...fetchOptions } = options ?? {};
+    const headers = {
+      ...fetchOptions.headers ?? {}
+    };
+    let resolvedBody;
+    if (body !== void 0 && body !== null) {
+      if (this.isRawBody(body)) {
+        resolvedBody = body;
+      } else {
+        resolvedBody = JSON.stringify(body);
+        if (!headers["Content-Type"]) {
+          headers["Content-Type"] = "application/json";
+        }
+      }
+    }
+    let timeoutId;
+    let timeoutController;
+    if (timeout) {
+      timeoutController = new AbortController();
+      timeoutId = setTimeout(() => timeoutController.abort(), timeout);
+    }
+    const signal = this.mergeSignal(
+      fetchOptions.signal,
+      timeoutController?.signal
+    );
+    try {
+      const response = await fetch(url, {
+        ...fetchOptions,
+        method,
+        headers,
+        body: resolvedBody,
+        signal
+      });
+      if (!response.ok) {
+        let errorMessage = `${response.status} ${response.statusText}`;
+        try {
+          const errorBody = await response.json();
+          if (errorBody.error) {
+            errorMessage = errorBody.error;
+          } else if (errorBody.message) {
+            errorMessage = errorBody.message;
+          }
+        } catch {
+        }
+        throw new Error(errorMessage);
+      }
+      const text = await response.text();
+      if (!text) {
+        return void 0;
+      }
+      return JSON.parse(text);
+    } finally {
+      if (timeoutId !== void 0) {
+        clearTimeout(timeoutId);
+      }
+    }
+  }
+  isRawBody(body) {
+    return typeof body === "string" || body instanceof FormData || body instanceof Blob || body instanceof ArrayBuffer || body instanceof URLSearchParams || body instanceof ReadableStream;
+  }
+  /**
+   * Merge the command signal with any additional signals (caller, timeout).
+   * Uses AbortSignal.any() when available, falls back to a manual composite
+   * controller for older browsers (pre-Chrome 116 / Safari 17.4).
+   */
+  mergeSignal(...additional) {
+    const signals = [];
+    if (this.signal) signals.push(this.signal);
+    for (const s of additional) {
+      if (s) signals.push(s);
+    }
+    if (signals.length === 0) return void 0;
+    if (signals.length === 1) return signals[0];
+    if (typeof AbortSignal.any === "function") {
+      return AbortSignal.any(signals);
+    }
+    const controller = new AbortController();
+    for (const s of signals) {
+      if (s.aborted) {
+        controller.abort(s.reason);
+        return controller.signal;
+      }
+      s.addEventListener("abort", () => controller.abort(s.reason), { once: true });
+    }
+    return controller.signal;
+  }
+};
+var CliNotifier = class {
+  constructor() {
+    this._change$ = new rxjs.Subject();
+    this.change$ = this._change$.asObservable();
+  }
+  get current() {
+    return this._current;
+  }
+  info(message) {
+    this.set("info", message);
+  }
+  success(message) {
+    this.set("success", message);
+  }
+  warn(message) {
+    this.set("warn", message);
+  }
+  error(message) {
+    this.set("error", message);
+  }
+  clear() {
+    this._current = void 0;
+    this._change$.next(void 0);
+  }
+  set(level, message) {
+    this._current = { level, message, timestamp: Date.now() };
+    this._change$.next(this._current);
+  }
+};
+
 // src/lib/context/cli-fullscreen-manager.ts
 var CliFullScreenManager = class {
   constructor(terminal, backgroundServices) {
@@ -14489,7 +14615,6 @@ var CliExecutionContext = class {
      * Set by the command executor at start/end of executeCommand().
      */
     this.isExecuting = false;
-    this.statusTextChange$ = new rxjs.Subject();
     this.lineBuffer = new CliLineBuffer();
     this.modeStack = [];
     this.timerManager = new CliTimerManager();
@@ -14534,6 +14659,8 @@ var CliExecutionContext = class {
     this.logger.setCliLogLevel(cliOptions?.logLevel || cliCore.CliLogLevel.ERROR);
     this.commandHistory = deps.commandHistory;
     this.lineRenderer = new CliTerminalLineRenderer(terminal, this.writer);
+    this.http = new CliHttpClient();
+    this.notifier = new CliNotifier();
     this.backgroundServices = new CliBackgroundServiceRegistry(
       this.state,
       deps.services,
@@ -14544,17 +14671,6 @@ var CliExecutionContext = class {
       this.backgroundServices
     );
   }
-  setStatusText(text) {
-    this._statusText = text;
-    this.statusTextChange$.next(text);
-  }
-  clearStatusText() {
-    this._statusText = void 0;
-    this.statusTextChange$.next(void 0);
-  }
-  getStatusText() {
-    return this._statusText;
-  }
   // -- Public API (ICliExecutionContext) --
   writeToTerminal(text) {
     this.terminal.write(text);
@@ -14748,12 +14864,8 @@ var CliExecutionContext = class {
   }
   // -- CommandLineModeHost interface --
   getPromptOptions() {
-    let hideUserName = false;
-    try {
-      const config = this.services.get("cli-users-module-config");
-      hideUserName = config?.hideUserName ?? false;
-    } catch {
-    }
+    const usersConfig = this.services.get("cli-users-module-config");
+    const hideUserName = usersConfig?.hideUserName ?? false;
     return {
       userName: this.userSession?.displayName,
       hideUserName,
@@ -15001,10 +15113,8 @@ var contextGlobalParameter = {
 // src/lib/executor/cli-io-redirect-handler.ts
 var FS_TOKEN2 = "cli-file-system-service";
 async function writeOutputToFile(filePath, context2) {
-  let fs;
-  try {
-    fs = context2.services.get(FS_TOKEN2);
-  } catch {
+  const fs = context2.services.get(FS_TOKEN2);
+  if (!fs) {
     context2.writer.writeError(
       "> redirect requires @qodalis/cli-files plugin"
     );
@@ -15028,10 +15138,8 @@ async function writeOutputToFile(filePath, context2) {
   }
 }
 async function appendOutputToFile(filePath, context2) {
-  let fs;
-  try {
-    fs = context2.services.get(FS_TOKEN2);
-  } catch {
+  const fs = context2.services.get(FS_TOKEN2);
+  if (!fs) {
     context2.writer.writeError(
       ">> redirect requires @qodalis/cli-files plugin"
     );
@@ -15057,10 +15165,8 @@ async function appendOutputToFile(filePath, context2) {
 async function writeStderrToFile(filePath, context2, capturingWriter) {
   const stderr = capturingWriter?.getCapturedStderr();
   if (!stderr) return;
-  let fs;
-  try {
-    fs = context2.services.get(FS_TOKEN2);
-  } catch {
+  const fs = context2.services.get(FS_TOKEN2);
+  if (!fs) {
     context2.writer.writeError(
       "2> redirect requires @qodalis/cli-files plugin"
     );
@@ -15081,10 +15187,8 @@ async function writeStderrToFile(filePath, context2, capturingWriter) {
 async function appendStderrToFile(filePath, context2, capturingWriter) {
   const stderr = capturingWriter?.getCapturedStderr();
   if (!stderr) return;
-  let fs;
-  try {
-    fs = context2.services.get(FS_TOKEN2);
-  } catch {
+  const fs = context2.services.get(FS_TOKEN2);
+  if (!fs) {
     context2.writer.writeError(
       "2>> redirect requires @qodalis/cli-files plugin"
     );
@@ -15104,10 +15208,8 @@ async function appendStderrToFile(filePath, context2, capturingWriter) {
 }
 async function tryExecuteScript(filePath, context2, executeCommand) {
   const FS_TOKEN3 = "cli-file-system-service";
-  let fs;
-  try {
-    fs = context2.services.get(FS_TOKEN3);
-  } catch {
+  const fs = context2.services.get(FS_TOKEN3);
+  if (!fs) {
     return false;
   }
   const resolved = fs.resolvePath(filePath);
@@ -15184,10 +15286,8 @@ function substituteVars(input, variables) {
   return result;
 }
 function expandEnvironmentVars(command2, context2) {
-  let env;
-  try {
-    env = context2.services.get(ICliEnvironment_TOKEN);
-  } catch {
+  const env = context2.services.get(ICliEnvironment_TOKEN);
+  if (!env) {
     return command2;
   }
   const parts = command2.split("'");
@@ -15332,7 +15432,7 @@ var CliCommandExecutor = class {
       }
     } finally {
       rootContext.isExecuting = false;
-      rootContext.clearStatusText?.();
+      rootContext.notifier?.clear();
     }
   }
   async executeSingleCommand(command2, data, context2) {
@@ -15340,8 +15440,8 @@ var CliCommandExecutor = class {
     command2 = expandEnvironmentVars(command2, context2);
     const assignMatch = command2.match(/^([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);
     if (assignMatch) {
-      try {
-        const env = context2.services.get(ICliEnvironment_TOKEN);
+      const env = context2.services.get(ICliEnvironment_TOKEN);
+      if (env) {
         let val = assignMatch[2];
         if (val.startsWith('"') && val.endsWith('"') || val.startsWith("'") && val.endsWith("'")) {
           val = val.slice(1, -1);
@@ -15350,15 +15450,13 @@ var CliCommandExecutor = class {
         process.start();
         process.end();
         return;
-      } catch {
       }
     }
     process.start();
     let processEntry;
-    try {
-      const procRegistry = context2.services.get(CliProcessRegistry_TOKEN);
+    const procRegistry = context2.services.get(CliProcessRegistry_TOKEN);
+    if (procRegistry) {
       processEntry = procRegistry.register(command2);
-    } catch {
     }
     const parsed = this.commandParser.parse(command2);
     let { commandName } = parsed;
@@ -15471,6 +15569,7 @@ var CliCommandExecutor = class {
     );
     const commandAbortController = new AbortController();
     commandContext.signal = commandAbortController.signal;
+    commandContext.http = new CliHttpClient(commandAbortController.signal);
     const abortSub = context2.onAbort.subscribe(() => {
       commandAbortController.abort();
     });
@@ -15535,19 +15634,13 @@ var CliCommandExecutor = class {
   }
   completeProcess(processEntry, context2, exitCode) {
     if (!processEntry) return;
-    try {
-      const procRegistry = context2.services.get(CliProcessRegistry_TOKEN);
-      procRegistry.complete(processEntry.pid, exitCode);
-    } catch {
-    }
+    const procRegistry = context2.services.get(CliProcessRegistry_TOKEN);
+    procRegistry?.complete(processEntry.pid, exitCode);
   }
   failProcess(processEntry, context2) {
     if (!processEntry) return;
-    try {
-      const procRegistry = context2.services.get(CliProcessRegistry_TOKEN);
-      procRegistry.fail(processEntry.pid);
-    } catch {
-    }
+    const failRegistry = context2.services.get(CliProcessRegistry_TOKEN);
+    failRegistry?.fail(processEntry.pid);
   }
   async showHelp(command2, context2) {
     try {
@@ -15629,29 +15722,94 @@ var CliCommandExecutor = class {
 // src/lib/services/cli-service-container.ts
 var CliServiceContainer = class {
   constructor() {
-    /** Stores single-value providers (resolved or pending). */
+    /** Stores single-value providers (resolved singletons). */
     this.services = /* @__PURE__ */ new Map();
     /** Stores multi-provider arrays. */
     this.multiServices = /* @__PURE__ */ new Map();
+    /** Tokens that cannot be overwritten by subsequent `set()` calls. */
+    this.sealedTokens = /* @__PURE__ */ new Set();
+    /** Stores provider recipes for transient tokens (re-resolved on every get). */
+    this.transientRecipes = /* @__PURE__ */ new Map();
   }
   /**
    * Retrieve a service by its token.
+   * Returns `undefined` when no provider is registered for the token.
+   * For multi-provider tokens, returns the last registered value (use `getAll` for the full array).
    *
    * @param token The token used to register the service.
-   * @returns The resolved service instance (or array for multi providers).
-   * @throws Error if the token has not been registered.
+   * @returns The resolved service instance, or `undefined` if not registered.
    */
   get(token) {
+    if (this.transientRecipes.has(token)) {
+      return this.resolveProvider(this.transientRecipes.get(token));
+    }
     if (this.multiServices.has(token)) {
-      return this.multiServices.get(token);
+      const arr = this.multiServices.get(token);
+      return arr[arr.length - 1];
     }
     if (this.services.has(token)) {
       return this.services.get(token);
     }
-    const tokenName = typeof token === "string" ? token : typeof token === "function" ? token.name : String(token);
-    throw new Error(
-      `CliServiceContainer: No provider found for token "${tokenName}".`
-    );
+    return void 0;
+  }
+  /**
+   * Retrieve all registered services for a multi-provider token.
+   * Returns an empty array when no provider is registered for the token.
+   *
+   * @param token The token used to register the service.
+   * @returns Array of all resolved service instances.
+   */
+  getAll(token) {
+    if (this.multiServices.has(token)) {
+      return this.multiServices.get(token);
+    }
+    const single = this.get(token);
+    return single !== void 0 ? [single] : [];
+  }
+  /**
+   * Retrieve a service by its token, throwing if not registered.
+   * Use this when the service is required and its absence is a programming error.
+   * For multi-provider tokens, returns the last registered value (use `getAll` for the full array).
+   *
+   * @param token The token used to register the service.
+   * @returns The resolved service instance.
+   * @throws Error if the token has not been registered.
+   */
+  getRequired(token) {
+    const value = this.get(token);
+    if (value === void 0 && !this.has(token)) {
+      throw new Error(
+        `CliServiceContainer: No provider found for token "${this.tokenToString(token)}".`
+      );
+    }
+    return value;
+  }
+  /**
+   * Check whether a service is registered for the given token.
+   */
+  has(token) {
+    return this.services.has(token) || this.multiServices.has(token) || this.transientRecipes.has(token);
+  }
+  /**
+   * Mark a token as sealed so it cannot be overwritten by future `set()` calls.
+   * Only available on the concrete container — not exposed on `ICliServiceProvider`.
+   */
+  seal(token) {
+    this.sealedTokens.add(token);
+  }
+  /**
+   * Mark multiple tokens as sealed at once.
+   */
+  sealAll(tokens) {
+    for (const token of tokens) {
+      this.sealedTokens.add(token);
+    }
+  }
+  /**
+   * Check whether a token is sealed.
+   */
+  isSealed(token) {
+    return this.sealedTokens.has(token);
   }
   /**
    * Register one or more providers.
@@ -15673,13 +15831,13 @@ var CliServiceContainer = class {
   getRegisteredTokens() {
     const tokens = [];
     for (const key of this.services.keys()) {
-      tokens.push(
-        typeof key === "string" ? key : typeof key === "function" ? key.name : String(key)
-      );
+      tokens.push(this.tokenToString(key));
+    }
+    for (const key of this.transientRecipes.keys()) {
+      tokens.push(`${this.tokenToString(key)} (transient)`);
     }
     for (const key of this.multiServices.keys()) {
-      const name = typeof key === "string" ? key : typeof key === "function" ? key.name : String(key);
-      tokens.push(`${name} (multi)`);
+      tokens.push(`${this.tokenToString(key)} (multi)`);
     }
     return tokens;
   }
@@ -15690,20 +15848,34 @@ var CliServiceContainer = class {
     const details = [];
     for (const [key, value] of this.services.entries()) {
       details.push({
-        token: typeof key === "string" ? key : typeof key === "function" ? key.name : String(key),
+        token: this.tokenToString(key),
         type: this.describeValue(value),
         multi: false
       });
     }
+    for (const [key, provider] of this.transientRecipes.entries()) {
+      const className = provider["useClass"]?.name ?? provider["useFactory"]?.name ?? "transient";
+      details.push({
+        token: this.tokenToString(key),
+        type: `transient(${className})`,
+        multi: false
+      });
+    }
     for (const [key, values] of this.multiServices.entries()) {
       details.push({
-        token: typeof key === "string" ? key : typeof key === "function" ? key.name : String(key),
+        token: this.tokenToString(key),
         type: `[${values.map((v) => this.describeValue(v)).join(", ")}]`,
         multi: true
       });
     }
     return details;
   }
+  /**
+   * Convert a token to a human-readable string for diagnostics/errors.
+   */
+  tokenToString(token) {
+    return typeof token === "string" ? token : typeof token === "function" ? token.name : String(token);
+  }
   /**
    * Describe a resolved value for diagnostic display.
    */
@@ -15723,27 +15895,45 @@ var CliServiceContainer = class {
    * Register a single provider.
    */
   registerProvider(provider) {
-    const value = this.resolveProvider(provider);
-    if (provider.multi) {
-      const existing = this.multiServices.get(provider.provide) ?? [];
-      existing.push(value);
-      this.multiServices.set(provider.provide, existing);
+    if (!provider.multi && this.sealedTokens.has(provider.provide)) {
+      throw new Error(
+        `CliServiceContainer: Cannot override sealed service "${this.tokenToString(provider.provide)}".`
+      );
+    }
+    if (provider["transient"] && !provider.multi) {
+      this.transientRecipes.set(provider.provide, provider);
+      this.services.delete(provider.provide);
     } else {
-      this.services.set(provider.provide, value);
+      const value = this.resolveProvider(provider);
+      if (provider.multi) {
+        const existing = this.multiServices.get(provider.provide) ?? [];
+        existing.push(value);
+        this.multiServices.set(provider.provide, existing);
+      } else {
+        this.services.set(provider.provide, value);
+        this.transientRecipes.delete(provider.provide);
+      }
+    }
+    if (provider.sealed) {
+      this.sealedTokens.add(provider.provide);
     }
   }
   /**
    * Resolve a provider definition to a concrete value.
+   *
+   * Note: `deps` are resolved eagerly at registration time, so
+   * dependency tokens must be registered before the provider that needs them.
    */
   resolveProvider(provider) {
     if ("useValue" in provider) {
       return provider.useValue;
     }
+    const deps = (provider["deps"] ?? []).map((dep) => this.getRequired(dep));
     if ("useFactory" in provider) {
-      return provider.useFactory();
+      return provider.useFactory(...deps);
     }
     if ("useClass" in provider) {
-      return new provider.useClass();
+      return new provider.useClass(...deps);
     }
     throw new Error(
       "CliServiceContainer: Provider must specify useValue, useFactory, or useClass."
@@ -15884,10 +16074,10 @@ var welcomeModule = {
   async onAfterBoot(context2) {
     const config = this.config || {};
     let showOption = config.show;
-    try {
-      const storeManager = context2.services.get(
-        CliStateStoreManager_TOKEN
-      );
+    const storeManager = context2.services.get(
+      CliStateStoreManager_TOKEN
+    );
+    if (storeManager) {
       const configureStore = storeManager.getStateStore(
         cliCore.CLI_CONFIGURE_STORE_NAME
       );
@@ -15896,7 +16086,6 @@ var welcomeModule = {
       if (state?.["system"]?.["welcomeMessage"]) {
         showOption = state["system"]["welcomeMessage"];
       }
-    } catch {
     }
     if (showOption) {
       if (!shouldDisplayWelcomeMessage(showOption)) {
@@ -15924,11 +16113,11 @@ var welcomeModule = {
     recordWelcomeMessageDisplay();
     context2.showPrompt();
     let showGreeting = true;
-    try {
-      const storeManager = context2.services.get(
-        CliStateStoreManager_TOKEN
-      );
-      const configureStore = storeManager.getStateStore(
+    const greetingStoreManager = context2.services.get(
+      CliStateStoreManager_TOKEN
+    );
+    if (greetingStoreManager) {
+      const configureStore = greetingStoreManager.getStateStore(
         cliCore.CLI_CONFIGURE_STORE_NAME
       );
       await configureStore.initialize();
@@ -15936,7 +16125,6 @@ var welcomeModule = {
       if (configState?.["system"]?.["greeting"] === false) {
         showGreeting = false;
       }
-    } catch {
     }
     if (showGreeting) {
       await context2.textAnimator?.showText(getGreetingBasedOnTime(), {
@@ -16056,8 +16244,8 @@ var CliBoot = class {
       }
     }
     if (module.onSetup) {
-      const kvStore = context2.services.get(
-        "cli-key-value-store"
+      const kvStore = context2.services.getRequired(
+        CliKeyValueStore_TOKEN
       );
       const setupKey = `cli-module-setup:${module.name}`;
       const setupState = await kvStore.get(setupKey);
@@ -16437,16 +16625,19 @@ var CliStateStore = class {
     this.state$.next(this.initialState);
   }
   async persist() {
-    const keyValueStore = this.services.get(
-      "cli-key-value-store"
+    const keyValueStore = this.services.getRequired(
+      CliKeyValueStore_TOKEN
     );
     await keyValueStore.set(this.storageKey, this.getState());
   }
   async initialize() {
+    const keyValueStore = this.services.get(
+      CliKeyValueStore_TOKEN
+    );
+    if (!keyValueStore) {
+      return;
+    }
     try {
-      const keyValueStore = this.services.get(
-        "cli-key-value-store"
-      );
       const state = await keyValueStore.get(this.storageKey);
       if (state) {
         this.state$.next(state);
@@ -16513,6 +16704,23 @@ var CliStateStoreManager = class {
     this.stores.clear();
   }
 };
+var CliServerAuthService = class {
+  constructor(services) {
+    this.services = services;
+  }
+  getHeaders(serverName, configHeaders) {
+    const merged = {
+      ...cliCore.resolveHeaders(configHeaders)
+    };
+    const providers = this.services.getAll(
+      cliCore.ICliServerAuthTokenProvider_TOKEN
+    );
+    for (const provider of providers) {
+      Object.assign(merged, provider.getHeaders(serverName));
+    }
+    return merged;
+  }
+};
 
 // src/lib/completion/cli-command-completion-provider.ts
 var CliCommandCompletionProvider = class {
@@ -16660,12 +16868,10 @@ var CliPackageNameCompletionProvider = class {
     if (!INSTALLED_PKG_SUBCOMMANDS.has(subCommand)) {
       return [];
     }
-    let manager;
-    try {
-      manager = this.services.get(
-        CliPackageManagerService_TOKEN
-      );
-    } catch {
+    const manager = this.services.get(
+      CliPackageManagerService_TOKEN
+    );
+    if (!manager) {
       return [];
     }
     const packages = await manager.getPackages();
@@ -16868,7 +17074,7 @@ var ServerListProcessor = class {
     this.description = "Show configured servers and their connection status";
   }
   async processCommand(_command, context2) {
-    const manager = context2.services.get(
+    const manager = context2.services.getRequired(
       CliServerManager_TOKEN
     );
     if (!manager || manager.connections.size === 0) {
@@ -16907,7 +17113,7 @@ var ServerStatusProcessor = class {
       context2.process.exit(1);
       return;
     }
-    const manager = context2.services.get(
+    const manager = context2.services.getRequired(
       CliServerManager_TOKEN
     );
     const connection = manager?.getConnection(serverName);
@@ -16917,7 +17123,7 @@ var ServerStatusProcessor = class {
       return;
     }
     context2.spinner?.show(`Pinging ${serverName}...`);
-    context2.setStatusText(`Pinging ${serverName}`);
+    context2.notifier.info(`Pinging ${serverName}`);
     const reachable = await connection.ping();
     context2.spinner?.hide();
     if (reachable) {
@@ -16948,7 +17154,7 @@ var ServerReconnectProcessor = class {
       context2.process.exit(1);
       return;
     }
-    const manager = context2.services.get(
+    const manager = context2.services.getRequired(
       CliServerManager_TOKEN
     );
     if (!manager) {
@@ -16957,7 +17163,7 @@ var ServerReconnectProcessor = class {
       return;
     }
     context2.spinner?.show(`Reconnecting to ${serverName}...`);
-    context2.setStatusText(`Reconnecting to ${serverName}`);
+    context2.notifier.info(`Reconnecting to ${serverName}`);
     const result = await manager.reconnect(serverName);
     context2.spinner?.hide();
     if (result.success) {
@@ -16987,7 +17193,7 @@ var ServerDefaultProcessor = class {
     ];
   }
   async processCommand(command2, context2) {
-    const manager = context2.services.get(
+    const manager = context2.services.getRequired(
       CliServerManager_TOKEN
     );
     if (!manager) {
@@ -17023,8 +17229,6 @@ var ServerDefaultProcessor = class {
     }
   }
 };
-
-// src/lib/server/cli-ssh-command-processor.ts
 var CliSshCommandProcessor = class {
   constructor() {
     this.command = "ssh";
@@ -17048,7 +17252,7 @@ var CliSshCommandProcessor = class {
     this.resolved = false;
   }
   async processCommand(command2, context2) {
-    const manager = context2.services.get(
+    const manager = context2.services.getRequired(
       CliServerManager_TOKEN
     );
     if (!manager) {
@@ -17142,7 +17346,7 @@ var CliSshCommandProcessor = class {
         connection: shellServers[0].connection
       };
     }
-    const manager = context2.services.get(
+    const manager = context2.services.getRequired(
       CliServerManager_TOKEN
     );
     if (manager?.defaultServer) {
@@ -17335,7 +17539,10 @@ var CliSshCommandProcessor = class {
     if (cmd) {
       url += `&cmd=${encodeURIComponent(cmd)}`;
     }
-    return url;
+    return cliCore.buildAuthenticatedWebSocketUrl(
+      url,
+      () => connection.resolveAuthHeaders()
+    );
   }
   cleanup() {
     if (this.socket) {
@@ -17384,6 +17591,11 @@ function initializeTerminal(container, opts) {
   terminal.open(container);
   fitAddon.fit();
   requestAnimationFrame(() => fitAddon.fit());
+  if (document.fonts?.ready) {
+    document.fonts.ready.then(() => {
+      requestAnimationFrame(() => fitAddon.fit());
+    });
+  }
   container.classList.add("terminal-container");
   container.style.background = opts.theme?.background ?? "#000";
   const wheelListener = (e) => e.preventDefault();
@@ -17626,19 +17838,21 @@ async function initializeServices(options) {
   const logger = new CliLogger();
   const commandHistory = new CliCommandHistory(store);
   await commandHistory.initialize();
-  services.set([{ provide: "cli-key-value-store", useValue: store }]);
+  services.set([{ provide: CliKeyValueStore_TOKEN, useValue: store, sealed: true }]);
   const stateStoreManager = new CliStateStoreManager(services, registry);
   const processRegistry = new CliProcessRegistry();
   services.set([
     {
       provide: CliStateStoreManager_TOKEN,
-      useValue: stateStoreManager
+      useValue: stateStoreManager,
+      sealed: true
     },
-    { provide: CliProcessorsRegistry_TOKEN, useValue: registry },
-    { provide: CliCommandHistory_TOKEN, useValue: commandHistory },
+    { provide: CliProcessorsRegistry_TOKEN, useValue: registry, sealed: true },
+    { provide: CliCommandHistory_TOKEN, useValue: commandHistory, sealed: true },
     {
       provide: CliProcessRegistry_TOKEN,
-      useValue: processRegistry
+      useValue: processRegistry,
+      sealed: true
     }
   ]);
   if (pendingServices.length > 0) {
@@ -17649,7 +17863,8 @@ async function initializeServices(options) {
     services.set([
       {
         provide: ICliPingServerService_TOKEN,
-        useValue: new CliDefaultPingServerService()
+        useClass: CliDefaultPingServerService,
+        sealed: true
       }
     ]);
   }
@@ -17659,25 +17874,27 @@ async function initializeServices(options) {
   syntaxRegistry.register(new MarkdownHighlighter());
   syntaxRegistry.register(new YamlHighlighter());
   services.set([
-    { provide: "syntax-highlighter-registry", useValue: syntaxRegistry }
+    { provide: SyntaxHighlighterRegistry_TOKEN, useValue: syntaxRegistry, sealed: true }
   ]);
   if (!pendingTokens.has(ICliEnvironment_TOKEN)) {
     services.set([
       {
         provide: ICliEnvironment_TOKEN,
-        useValue: new CliEnvironment()
+        useClass: CliEnvironment,
+        sealed: true
       }
     ]);
   }
   services.set([
     {
       provide: cliCore.ICliDragDropService_TOKEN,
-      useValue: dragDropService
+      useValue: dragDropService,
+      sealed: true
     }
   ]);
   const translator = new CliTranslationService();
   services.set([
-    { provide: cliCore.ICliTranslationService_TOKEN, useValue: translator }
+    { provide: cliCore.ICliTranslationService_TOKEN, useValue: translator, sealed: true }
   ]);
   return {
     services,
@@ -17789,10 +18006,18 @@ var CliEngine = class {
       provide: CliBackgroundServiceRegistry_TOKEN,
       useValue: this.executionContext.backgroundServices
     }]);
-    const serverManager = new CliServerManager(this.registry);
+    const serverAuthService = new CliServerAuthService(services);
+    services.set([
+      { provide: cliCore.ICliServerAuthService_TOKEN, useValue: serverAuthService, sealed: true }
+    ]);
     services.set([
-      { provide: CliServerManager_TOKEN, useValue: serverManager }
+      {
+        provide: CliServerManager_TOKEN,
+        useClass: CliServerManager,
+        deps: [CliProcessorsRegistry_TOKEN, cliCore.ICliServerAuthService_TOKEN]
+      }
     ]);
+    const serverManager = services.getRequired(CliServerManager_TOKEN);
     if (this.options?.servers && this.options.servers.length > 0) {
       await serverManager.connectAll(this.options.servers, {
         warn: (msg) => this.executionContext.logger.warn(msg),
@@ -17812,13 +18037,9 @@ var CliEngine = class {
       new CliCommandCompletionProvider(this.registry),
       new CliParameterCompletionProvider(this.registry, executor)
     ];
-    let pluginProviders = [];
-    try {
-      pluginProviders = services.get(
-        cliCore.ICliCompletionProvider_TOKEN
-      ) ?? [];
-    } catch {
-    }
+    const pluginProviders = services.getAll(
+      cliCore.ICliCompletionProvider_TOKEN
+    );
     this.executionContext.completionEngine.setProviders([
       ...pluginProviders,
       ...defaultProviders
@@ -17926,7 +18147,7 @@ var CliEngine = class {
     if (!this.executionContext) {
       throw new Error("Cannot snapshot before engine has started");
     }
-    const stateStoreManager = this.executionContext.services.get(
+    const stateStoreManager = this.executionContext.services.getRequired(
       CliStateStoreManager_TOKEN
     );
     return {
@@ -17953,7 +18174,7 @@ var CliEngine = class {
       });
     }
     await this.executionContext.commandHistory.setHistory(snap.commandHistory);
-    const stateStoreManager = this.executionContext.services.get(
+    const stateStoreManager = this.executionContext.services.getRequired(
       CliStateStoreManager_TOKEN
     );
     for (const entry of snap.stateStores) {
@@ -18013,7 +18234,7 @@ var CliTestHarness = class {
     this.services = new CliServiceContainer();
     this.processRegistry = new CliProcessRegistry();
     this.services.set({
-      provide: "cli-key-value-store",
+      provide: CliKeyValueStore_TOKEN,
       useValue: createInMemoryKvStore()
     });
     this.services.set({
@@ -18123,6 +18344,7 @@ var CliTestHarness = class {
       userSession: this.userSession,
       state: this.stateStoreManager.getStateStore("shared"),
       backgroundServices: createNoopBackgroundServices(),
+      http: new CliHttpClient(),
       promptLength: 0,
       currentLine: "",
       cursorPosition: 0,
@@ -18145,11 +18367,7 @@ var CliTestHarness = class {
       submitCommand: async (command2) => {
         await this.executor.executeCommand(command2, context2);
       },
-      setStatusText: () => {
-      },
-      clearStatusText: () => {
-      },
-      getStatusText: () => void 0,
+      notifier: new CliNotifier(),
       createInterval: (cb, ms) => {
         const id = setInterval(cb, ms);
         return {
@@ -18402,14 +18620,17 @@ exports.CliHelpCommandProcessor = CliHelpCommandProcessor;
 exports.CliHistoryCommandProcessor = CliHistoryCommandProcessor;
 exports.CliHotKeysCommandProcessor = CliHotKeysCommandProcessor;
 exports.CliHtopCommandProcessor = CliHtopCommandProcessor;
+exports.CliHttpClient = CliHttpClient;
 exports.CliInputReader = CliInputReader;
 exports.CliJsonCommandProcessor = CliJsonCommandProcessor;
 exports.CliKeyValueStore = CliKeyValueStore;
+exports.CliKeyValueStore_TOKEN = CliKeyValueStore_TOKEN;
 exports.CliKillCommandProcessor = CliKillCommandProcessor;
 exports.CliLogger = CliLogger;
 exports.CliLoremCommandProcessor = CliLoremCommandProcessor;
 exports.CliModuleRegistry_TOKEN = CliModuleRegistry_TOKEN;
 exports.CliNanoCommandProcessor = CliNanoCommandProcessor;
+exports.CliNotifier = CliNotifier;
 exports.CliOpenCommandProcessor = CliOpenCommandProcessor;
 exports.CliPackageManagerService = CliPackageManagerService;
 exports.CliPackageManagerService_TOKEN = CliPackageManagerService_TOKEN;
@@ -18459,6 +18680,7 @@ exports.LIBRARY_VERSION = LIBRARY_VERSION;
 exports.OverlayAddon = OverlayAddon;
 exports.ProcessExitedError = ProcessExitedError;
 exports.ScriptLoaderService = ScriptLoaderService;
+exports.SyntaxHighlighterRegistry_TOKEN = SyntaxHighlighterRegistry_TOKEN;
 exports.appendOutputToFile = appendOutputToFile;
 exports.appendStderrToFile = appendStderrToFile;
 exports.builtinProcessors = builtinProcessors;