@tomorrowos/sdk 0.9.4 → 0.9.6

package/REPLIT_SETUP.md

@@ -12,7 +12,7 @@ When a human pastes a prompt like this, **read this file and start Question 1 im
 ```text
 Follow @tomorrowos/sdk REPLIT_SETUP.md and set up my TomorrowOS CMS.
 Ask only the questions listed in REPLIT_SETUP.md, in order. Do not use LLM_PROMPT.md.
-Artifact kind must be **web** (never **api**). Question 4 only updates **brand.json**.
+Artifact kind must be **web** (never **api**). Question 3 only updates **brand.json**.
 After all setup questions are answered (including Cloudinary Secrets if you chose Cloudinary), configure and start — minimal verification only (Web app type + Preview at /). **Never test Supabase connection** — save `SUPABASE_URL` and move on. No Supabase or WebSocket tests.
 Do not skip steps.
 ```
@@ -58,21 +58,20 @@ Replit Agent must ask **only** the questions defined in **this file**, in **this
 
 | Step | Section | When |
 |------|---------|------|
-| 1 | **Question 1** — How many screens / devices? | Always |
-| 2 | **Question 2** — Supabase connection | Only if answer to Q1 is **> 5** |
-| 3 | **Question 3** — Media storage (+ Cloudinary Secrets if chosen) | Always (after Q1 or Q2) |
-| 4 | **Question 4** — Brand / TomorrowOS app look | Always last, before execution |
+| 1 | **Question 1** — Supabase connection string | Always |
+| 2 | **Question 2** — Media storage (+ Cloudinary Secrets if chosen) | Always (after Q1) |
+| 3 | **Question 3** — Brand / TomorrowOS app look | Always last, before execution |
 
-**That is the complete list.** There are no other setup questions. There is **no** “Question 3b” — Cloudinary credentials are collected **inside Question 3**, immediately after the user chooses Cloudinary.
+**That is the complete list.** There are no other setup questions. **Do not** ask how many screens / devices. There is **no** “Question 2b” — Cloudinary credentials are collected **inside Question 2**, immediately after the user chooses Cloudinary.
 
-**Critical:** Question 3 is **not complete** when the user says “Cloudinary” or “yes”. You **must** immediately show the Cloudinary Secrets input (same step — do **not** label a new question) and collect `CLOUDINARY_CLOUD_NAME`, `CLOUDINARY_API_KEY`, and `CLOUDINARY_API_SECRET` **before** Question 4. Do **not** skip to branding with placeholder or invented credentials.
+**Critical:** Question 2 is **not complete** when the user says “Cloudinary” or “yes”. You **must** immediately show the Cloudinary Secrets input (same step — do **not** label a new question) and collect `CLOUDINARY_CLOUD_NAME`, `CLOUDINARY_API_KEY`, and `CLOUDINARY_API_SECRET` **before** Question 3. Do **not** skip to branding with placeholder or invented credentials.
 
 
-If the user volunteers extra info early (e.g. brand name before Q4), **record it** and still ask the current question’s required fields you do not yet have. Do not skip ahead to execution until Q1–Q4 are complete (Question 3 includes Cloudinary Secrets when applicable).
+If the user volunteers extra info early (e.g. brand name before Q3), **record it** and still ask the current question’s required fields you do not yet have. Do not skip ahead to execution until Q1–Q3 are complete (Question 2 includes Cloudinary Secrets when applicable).
 
 If the user says “just set it up, don’t ask questions,” respond:
 
-> I need a few quick answers from REPLIT_SETUP.md (screen count, media storage — plus Cloudinary credentials if you choose Cloudinary — and branding). It takes about a minute and ensures the CMS deploys correctly on Replit.
+> I need a few quick answers from REPLIT_SETUP.md (Supabase connection string, media storage — plus Cloudinary credentials if you choose Cloudinary — and branding). It takes about a minute and ensures the CMS deploys correctly on Replit.
 
 Then ask **Question 1** — do not switch to `LLM_PROMPT.md`.
 
@@ -80,9 +79,9 @@ Then ask **Question 1** — do not switch to `LLM_PROMPT.md`.
 
 ## Hard rules
 
-1. **Ask only REPLIT_SETUP.md questions 1–4** (see **Questionnaire scope**). Never use `LLM_PROMPT.md` on Replit.
-2. **One question at a time.** Wait for the user’s answer before asking the next question (unless they already answered several in one message). **Exception:** If the user chooses Cloudinary in Question 3, **stay on Question 3** and immediately show the Secrets form — do **not** open a separate “3b” step or announce a new question number.
-3. **Do not invent** screen counts, Cloudinary credentials, Supabase URLs, or brand colours.
+1. **Ask only REPLIT_SETUP.md questions 1–3** (see **Questionnaire scope**). Never use `LLM_PROMPT.md` on Replit.
+2. **One question at a time.** Wait for the user’s answer before asking the next question (unless they already answered several in one message). **Exception:** If the user chooses Cloudinary in Question 2, **stay on Question 2** and immediately show the Secrets form — do **not** open a separate “2b” step or announce a new question number.
+3. **Do not invent** Cloudinary credentials, Supabase URLs, or brand colours. **Do not ask** screen / device count.
 4. **Do not use Replit’s reserved `DATABASE_URL` Secret for Supabase.** On Replit, `DATABASE_URL` is often pre-claimed. Always use **`SUPABASE_URL`** for TomorrowOS ↔ Supabase.
 5. **Prefer `npx @tomorrowos/sdk init`** (or the package’s `templates/cms-starter`) as the project seed. Do not rebuild pairing, WebSocket, or playlist APIs from scratch.
 6. **Never commit secrets** into git. Put credentials only in Replit **Secrets** (and optionally mirror non-secret flags in `.env` that reference env vars).
@@ -91,12 +90,11 @@ Then ask **Question 1** — do not switch to `LLM_PROMPT.md`.
 9. **Supabase: configure only — never test.** Save `SUPABASE_URL` + `TOMORROWOS_STORE=supabase` and proceed. **Do not** ping Postgres, run `psql`, start the server solely to verify DB connectivity, or treat log errors like `ENOTFOUND` / `database connection failure` in **Replit dev / Preview** as a failed setup. Supabase often works only after **Publish** (production networking), not in the dev shell.
 10. **Artifact kind = `web` only.** **`kind = "api"` is forbidden** for the TomorrowOS CMS artifact. See **IRON RULE** above. Setup is incomplete if Publish would still see an `api` artifact.
 
-**Question order after Q1:**
+**Question order (always):**
 
-- If **≤ 5 screens:** Q1 → Q3 → Q4 → execution checklist
-- If **> 5 screens:** Q1 → Q2 → Q3 → Q4 → execution checklist
+- Q1 → Q2 → Q3 → execution checklist
 
-Never insert extra questions between these steps. When the user chooses Cloudinary, **Question 3 continues** with the Secrets form immediately — then proceed to Q4 only after secrets are saved.
+Never insert extra questions between these steps. When the user chooses Cloudinary, **Question 2 continues** with the Secrets form immediately — then proceed to Q3 only after secrets are saved.
 
 ---
 
@@ -232,7 +230,7 @@ Allowed extras (optional): `"build-player": "tomorrowos build --platform tizen"`
     "node": ">=20"
   },
   "dependencies": {
-    "@tomorrowos/sdk": "^0.9.4",
+    "@tomorrowos/sdk": "^0.9.6",
     "dotenv": "^17.2.3",
     "tsx": "^4.19.0"
   },
@@ -330,13 +328,13 @@ Replace `YOUR-REPLIT-DOMAIN` with the actual published hostname (e.g. `my-cms.re
 
 ## Post-Q&A: minimal verification only
 
-After Questions 1–4, **configure → `npm install` → `npm run start` → done.**
+After Questions 1–3, **configure → `npm install` → `npm run start` → done.**
 
 ### Supabase: never test in Replit dev (mandatory)
 
-When the user chose Supabase (>5 screens), setup is **save credentials + wire `server.ts` + start** — **nothing else**.
+Setup always uses Supabase: **save credentials + wire `server.ts` + start** — **nothing else**.
 
-**Forbidden after Q&A (and after Question 2):**
+**Forbidden after Q&A (and after Question 1):**
 
 - ❌ “Testing Supabase connection…”
 - ❌ `psql`, `pg`, Prisma `db pull`, or any one-off DB probe script
@@ -374,34 +372,17 @@ Then (and only then) check: API vs Web type → `.replit` ports/`deploymentTarge
 
 ---
 
-## Question 1 — How many screens / devices?
+## Question 1 — Supabase connection (always)
 
-> **This is the first and only “screen count” question.** Do not re-ask later.
+> **This is the first setup question.** Always configure Supabase. **Do not** ask how many screens / devices.
 
-**Ask exactly (copy wording; do not substitute LLM_PROMPT questions):**
-
-> How many TomorrowOS screens (devices) do you expect to manage with this CMS?
->
-> - **5 or fewer** → I’ll use the default **SQLite** database (simple, good for demos and small venues).
-> - **More than 5** → I’ll configure **Supabase (Postgres)** so pairings and playlists scale more reliably.
-
-**Branching:**
-
-| Answer | Store driver | Next |
-|--------|--------------|------|
-| ≤ 5 | `TOMORROWOS_STORE=sqlite` | Skip Question 2 → go to Question 3 |
-| > 5 | `TOMORROWOS_STORE=supabase` | Ask Question 2 |
-| Unclear | Ask again | Do not proceed |
+**Preferred on Replit:** open an **input / Secrets** UI where the user pastes the connection string into a field for:
 
-**Store in `brand.json`:** `cms.expectedScreens` (number), `cms.hostingTarget`: `"here"`.
+- `SUPABASE_URL`
 
----
-
-## Question 2 — Supabase connection (only if > 5 screens)
-
-**Ask exactly:**
+**Ask exactly (copy wording; do not substitute LLM_PROMPT questions):**
 
-> Paste your Supabase Postgres connection string. I will store it as the Replit Secret **`SUPABASE_URL`** (not `DATABASE_URL` — that name is often reserved by Replit).
+> Paste your Supabase Postgres connection string below. I will store it as the Replit Secret **`SUPABASE_URL`** (not `DATABASE_URL` — that name is often reserved by Replit).
 >
 > Example shape: `postgresql://postgres.[PROJECT]:[PASSWORD]@aws-0-[REGION].pooler.supabase.com:6543/postgres`
 >
@@ -449,13 +430,16 @@ DATABASE_SSL=true
 ```
 
 5. **Do not** write the real password into committed files.
-6. **Do not** test the Supabase connection after saving the Secret — **configuration only**. No probe, no `npm run start` just to verify DB, no fixing “connection failure” in dev. Saving `SUPABASE_URL` completes Question 2.
+6. **Do not** test the Supabase connection after saving the Secret — **configuration only**. No probe, no `npm run start` just to verify DB, no fixing “connection failure” in dev. Saving `SUPABASE_URL` completes Question 1.
+7. **Do not** proceed to Question 2 until `SUPABASE_URL` is saved.
 
-If the user refuses Supabase but chose > 5 screens, warn them SQLite on Replit is fragile for fleets, then offer SQLite only after they confirm.
+If the user refuses Supabase, warn that Replit fleets need a durable Postgres store, then offer SQLite only after they explicitly confirm.
+
+**Store in `brand.json` later (Question 3):** `cms.hostingTarget`: `"here"`. Do **not** ask for `expectedScreens`; leave a default (e.g. `5`) when writing `brand.json`.
 
 ---
 
-## Question 3 — Media storage (uploads / thumbnails)
+## Question 2 — Media storage (uploads / thumbnails)
 
 ### Step A — Ask storage choice
 
@@ -471,9 +455,9 @@ If the user refuses Supabase but chose > 5 screens, warn them SQLite on Replit i
 >
 > Do you want me to set up **Cloudinary**? (yes / no)
 
-### Step B — If YES / Cloudinary (same Question 3 — no “3b”, no extra question)
+### Step B — If YES / Cloudinary (same Question 2 — no “2b”, no extra question)
 
-**Do this immediately** when the user chooses Cloudinary. **Do not** say “Question 3b”, “next step”, or “Great — I’ll use Cloudinary” as a separate message before the form. **Go straight to the Secrets input.**
+**Do this immediately** when the user chooses Cloudinary. **Do not** say “Question 2b”, “next step”, or “Great — I’ll use Cloudinary” as a separate message before the form. **Go straight to the Secrets input.**
 
 **Preferred on Replit:** open the **Replit Secrets** UI with fields for:
 
@@ -497,10 +481,10 @@ If the user refuses Supabase but chose > 5 screens, warn them SQLite on Replit i
 1. Save Replit Secrets: `CLOUDINARY_CLOUD_NAME`, `CLOUDINARY_API_KEY`, `CLOUDINARY_API_SECRET` (and optional `CLOUDINARY_FOLDER`).
 2. **Do not** write real secrets into committed files.
 3. **Do not** invent or placeholder credentials.
-4. **Do not** proceed to Question 4 until all three required Secrets exist.
+4. **Do not** proceed to Question 3 until all three required Secrets exist.
 5. **Do not** run a Cloudinary upload test — configuration only.
 
-**If the user does not have a Cloudinary account yet:** tell them to sign up at cloudinary.com and return with API keys. **Wait** on Question 3 — do not skip to Question 4.
+**If the user does not have a Cloudinary account yet:** tell them to sign up at cloudinary.com and return with API keys. **Wait** on Question 2 — do not skip to Question 3.
 
 The SDK auto-detects these env vars and uploads media to Cloudinary. New uploads will return `https://res.cloudinary.com/...` URLs.
 
@@ -513,17 +497,15 @@ The SDK auto-detects these env vars and uploads media to Cloudinary. New uploads
 3. Warn: if Object Storage IAM denies `storage.objects.create`, uploads will fail with a Google Cloud Storage permission error — fix Object Storage permissions or switch to Cloudinary.
 4. Do **not** invent Cloudinary credentials.
 
-**Also persist metadata:** keep `data/tomorrowos.db` (SQLite path) on durable storage when using SQLite.
-
 ---
 
-## Question 4 — Brand / TomorrowOS app look (`brand.json` only)
+## Question 3 — Brand / TomorrowOS app look (`brand.json` only)
 
-> **Scope:** Question 4 answers **only** update **`brand.json`** — colours, name, tagline, logo path, `cms.expectedScreens`, etc. They configure how the **TomorrowOS player app** looks and metadata flags.
+> **Scope:** Question 3 answers **only** update **`brand.json`** — colours, name, tagline, logo path, etc. They configure how the **TomorrowOS player app** looks and metadata flags.
 >
-> **Question 4 does NOT affect:** Replit Publish, artifact `kind`, `.replit`, `server.ts`, Secrets, Supabase, Cloudinary, ports, deployment target, or CMS server wiring. **Never** change deploy/runtime config based on branding answers.
+> **Question 3 does NOT affect:** Replit Publish, artifact `kind`, `.replit`, `server.ts`, Secrets, Supabase, Cloudinary, ports, deployment target, or CMS server wiring. **Never** change deploy/runtime config based on branding answers.
 
-> **This is the only branding / platform / use-case question block.** Do not ask separate LLM_PROMPT “target platform”, “use case”, or “hosting” questions before this.
+> **This is the only branding / platform / use-case question block.** Do not ask separate LLM_PROMPT “target platform”, “use case”, or “hosting” questions before this. **Do not** ask screen count.
 
 **Ask exactly (one message; user may answer in one reply):**
 
@@ -568,7 +550,7 @@ If the user only gives a name and primary colour, use defaults for the rest and
 }
 ```
 
-Set `cms.expectedScreens` from Question 1 (do not ask screen count again). Always set `cms.hostingTarget` to `"here"` on Replit without asking. Set `cmsEndpoint` only if the user already knows their public `wss://…replit.app` URL; otherwise leave it out and tell them to pair TVs using the published HTTPS URL (player converts `https://` → `wss://`).
+Do **not** ask for screen count. Keep a default `cms.expectedScreens` (e.g. `5`) unless the user already volunteered a number. Always set `cms.hostingTarget` to `"here"` on Replit without asking. Set `cmsEndpoint` only if the user already knows their public `wss://…replit.app` URL; otherwise leave it out and tell them to pair TVs using the published HTTPS URL (player converts `https://` → `wss://`).
 
 ---
 
@@ -593,14 +575,7 @@ If `init` is inappropriate (existing customised project), merge carefully:
 
 ### B. Apply store + media Secrets
 
-**SQLite (≤5):**
-
-```env
-TOMORROWOS_STORE=sqlite
-TOMORROWOS_DB_PATH=./data/tomorrowos.db
-```
-
-**Supabase (>5):**
+**Supabase (always from Question 1):**
 
 ```env
 TOMORROWOS_STORE=supabase
@@ -669,8 +644,8 @@ Only investigate further if Preview is empty, server crashed, or user reports Pu
 
 ### Forbidden questionnaire sources
 
-- **`LLM_PROMPT.md`** — not used on Replit setup; its five questions are **replaced** by REPLIT_SETUP Questions 1–4
-- Standalone “target platform” / “hosting target” / “use case” prompts outside Question 4
+- **`LLM_PROMPT.md`** — not used on Replit setup; its questions are **replaced** by REPLIT_SETUP Questions 1–3
+- Standalone “target platform” / “hosting target” / “use case” / **screen count** prompts outside Question 3
 
 Do **not** ask the user how to implement:
 
@@ -685,24 +660,23 @@ Do **not**:
 - Change the production start command away from `tsx server.ts` / `npm run start`
 - Point Supabase at Replit’s reserved `DATABASE_URL` when `SUPABASE_URL` should be used
 - Skip Cloudinary recommendation without stating the persistence tradeoff
-- **Skip Cloudinary Secrets** after the user chooses Cloudinary — always collect `CLOUDINARY_*` inside Question 3 before Question 4
-- **Announce “Question 3b”** or a separate follow-up question — show the Secrets form immediately instead
+- **Skip Cloudinary Secrets** after the user chooses Cloudinary — always collect `CLOUDINARY_*` inside Question 2 before Question 3
+- **Announce “Question 2b”** or a separate follow-up question — show the Secrets form immediately instead
 - Claim uploads are “permanent” on Replit local disk without Object Storage or Cloudinary
 - Leave `tsx` only in `devDependencies` if the Deploy pipeline installs production deps only
 - Use Canvas preview as the primary CMS verification surface
 - Serve a different app or API-only response at `/` instead of the Control Panel
 - Create the Repl as **API-only** or publish with **Static Deployment** only
 - Set or leave artifact **`kind = "api"`** for the TomorrowOS CMS
-- Change `.replit`, `server.ts`, Secrets, or deployment config based on **Question 4** branding answers (those go in **`brand.json` only**)
+- Change `.replit`, `server.ts`, Secrets, or deployment config based on **Question 3** branding answers (those go in **`brand.json` only**)
 - Omit `[[ports]]` / `deploymentTarget` from `.replit` when setting up for Publish
 - Run **Supabase connection tests**, **WebSocket console tests**, or other post-setup smoke tests unless Preview fails or the user asks
 - **Debug or “fix” Supabase** because dev logs show `getaddrinfo ENOTFOUND` or `database connection failure` — save config and finish setup instead
+- Ask how many screens / devices (≤5 vs >5) — always start with Supabase
 
 ---
 
-## SQLite path (≤5) — `server.ts` reference
-
-Default starter is fine:
+## SQLite fallback — `server.ts` reference (only if user refuses Supabase)
 
 ```ts
 const store = createTomorrowOSStore({
@@ -738,14 +712,16 @@ TOMORROWOS_STORE=sqlite
 
 ## Protocol version
 
-`replit-setup/1.7` — aligned with TomorrowOS protocol `1.0` and `@tomorrowos/sdk` store drivers `sqlite` | `supabase` | `postgres` | `memory`.
+`replit-setup/1.8` — aligned with TomorrowOS protocol `1.0` and `@tomorrowos/sdk` store drivers `sqlite` | `supabase` | `postgres` | `memory`.
+
+**Changelog 1.8:** Question 1 is always Supabase connection string (input / Secret). Removed screen-count branching (≤5 SQLite vs >5 Supabase). Media storage is Question 2; branding is Question 3.
 
-**Changelog 1.7:** **IRON RULE** — artifact **`kind = "web"` only** (never `api`); Question 4 **only** writes `brand.json` (no deploy/server changes).
+**Changelog 1.7:** **IRON RULE** — artifact **`kind = "web"` only** (never `api`); Question 4 (**now 3**) **only** writes `brand.json` (no deploy/server changes).
 
 **Changelog 1.6:** **Never test Supabase** in Replit dev — `ENOTFOUND` in Preview logs is expected.
 
-**Changelog 1.5:** Cloudinary Secrets inside Question 3 — no “3b” step.
+**Changelog 1.5:** Cloudinary Secrets inside media question — no “3b” step.
 
-**Changelog 1.4:** mandatory Cloudinary credential collection before Question 4 (superseded by 1.5 flow).
+**Changelog 1.4:** mandatory Cloudinary credential collection before branding (superseded by 1.5 flow).
 
 **Changelog 1.3:** minimal post-Q&A verification — no Supabase/WS smoke tests; prioritize **Web app vs API** only.

package/dist/cloudinary-storage.d.ts

@@ -17,4 +17,6 @@ export declare function uploadBufferToCloudinary(body: Buffer, options: {
     filename: string;
 }): Promise<CloudinaryUploadResult>;
 export declare function deleteCloudinaryAsset(config: CloudinaryStorageConfig, publicId: string, resourceType?: string): Promise<void>;
+/** Lightweight credential / reachability check for CMS status UI. */
+export declare function pingCloudinary(config: CloudinaryStorageConfig): Promise<void>;
 //# sourceMappingURL=cloudinary-storage.d.ts.map

package/dist/cloudinary-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudinary-storage.d.ts","sourceRoot":"","sources":["../src/cloudinary-storage.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAOD,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,uBAAuB,GAAG,IAAI,CAoBhC;AAWD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IACP,MAAM,EAAE,uBAAuB,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,GACA,OAAO,CAAC,sBAAsB,CAAC,CAsCjC;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,uBAAuB,EAC/B,QAAQ,EAAE,MAAM,EAChB,YAAY,SAAU,GACrB,OAAO,CAAC,IAAI,CAAC,CAKf"}
+{"version":3,"file":"cloudinary-storage.d.ts","sourceRoot":"","sources":["../src/cloudinary-storage.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAOD,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,uBAAuB,GAAG,IAAI,CAoBhC;AAWD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IACP,MAAM,EAAE,uBAAuB,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,GACA,OAAO,CAAC,sBAAsB,CAAC,CAsCjC;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,uBAAuB,EAC/B,QAAQ,EAAE,MAAM,EAChB,YAAY,SAAU,GACrB,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,qEAAqE;AACrE,wBAAsB,cAAc,CAClC,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAGf"}

package/dist/cloudinary-storage.js

@@ -68,3 +68,8 @@ export async function deleteCloudinaryAsset(config, publicId, resourceType = "im
         resource_type: resourceType
     });
 }
+/** Lightweight credential / reachability check for CMS status UI. */
+export async function pingCloudinary(config) {
+    configureCloudinary(config);
+    await cloudinary.api.ping();
+}

package/dist/index.d.ts

@@ -1,5 +1,7 @@
 export { TomorrowOS } from "./tomorrowos.js";
 export type { DeviceListItem, DeviceScreenshotInfo, ListenOptions, TomorrowOSBrand, TomorrowOSOptions } from "./tomorrowos.js";
+export type { ConnectorState, ConnectorStatus, ServerStatusReport, StatusBlocker } from "./server-status.js";
+export { buildServerStatus } from "./server-status.js";
 export type { DevicePlaylistAssignment, DeviceRegistryRecord, PairedDeviceRecord, PendingCodeEntry, PendingCodeRecord, DeviceRegistryEntry, PlaylistItemRecord, PlaylistSchedule, PublishedPlaylistSnapshot, StoredPlaylist, TomorrowOSDataSnapshot, TomorrowOSMigratableStore, TomorrowOSStore } from "./store/types.js";
 export { PlaylistCatalog } from "./playlist-catalog.js";
 export type { BuiltDevicePolicy, SavePlaylistInput } from "./playlist-catalog.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,eAAe,EACf,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EACzB,cAAc,EACd,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EACL,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,YAAY,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,eAAe,EACf,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,aAAa,EACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EACzB,cAAc,EACd,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EACL,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,YAAY,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -1,4 +1,5 @@
 export { TomorrowOS } from "./tomorrowos.js";
+export { buildServerStatus } from "./server-status.js";
 export { PlaylistCatalog } from "./playlist-catalog.js";
 export { DEFAULT_PAIRING_CODE_SECRET, generateDeterministicPairingCode, generateRandomPairingCode, isValidPairingCodeFormat, normalizePairingCode, PAIRING_CODE_ALPHABET, PAIRING_CODE_LENGTH, resolvePairingCodeSecret } from "./pairing-code.js";
 export { MemoryStore } from "./store/memory-store.js";

package/dist/server-status.d.ts

@@ -0,0 +1,30 @@
+import type { TomorrowOSStore } from "./store/types.js";
+export type ConnectorState = "ok" | "warn" | "error" | "missing";
+export interface ConnectorStatus {
+    id: string;
+    label: string;
+    provider?: string;
+    state: ConnectorState;
+    detail: string;
+}
+export interface StatusBlocker {
+    connectorId: string;
+    title: string;
+    message: string;
+    fixHint: string;
+}
+export interface ServerStatusReport {
+    status: "success";
+    overall: "ok" | "degraded" | "blocked";
+    checkedAt: string;
+    connectors: ConnectorStatus[];
+    blockers: StatusBlocker[];
+}
+export interface BuildServerStatusOptions {
+    store: TomorrowOSStore;
+    staticRoot?: string | null;
+    env?: NodeJS.ProcessEnv;
+    probeTimeoutMs?: number;
+}
+export declare function buildServerStatus(options: BuildServerStatusOptions): Promise<ServerStatusReport>;
+//# sourceMappingURL=server-status.d.ts.map

package/dist/server-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-status.d.ts","sourceRoot":"","sources":["../src/server-status.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,IAAI,GAAG,UAAU,GAAG,SAAS,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,eAAe,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAyQD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC,CA4B7B"}

package/dist/server-status.js

@@ -0,0 +1,244 @@
+import fs from "fs/promises";
+import path from "path";
+import { pingCloudinary, resolveCloudinaryConfig } from "./cloudinary-storage.js";
+function isReplitHost(env) {
+    return !!(env.REPL_ID ||
+        env.REPLIT_DEV_DOMAIN ||
+        env.REPLIT_DEPLOYMENT ||
+        env.REPL_SLUG);
+}
+function resolveDatabaseProvider(env) {
+    const driver = String(env.TOMORROWOS_STORE || "").trim().toLowerCase();
+    const hasUrl = !!(env.SUPABASE_URL || env.DATABASE_URL);
+    if (driver === "supabase" || (!driver && env.SUPABASE_URL)) {
+        return {
+            provider: "supabase",
+            label: "Supabase",
+            configured: !!env.SUPABASE_URL || !!env.DATABASE_URL
+        };
+    }
+    if (driver === "postgres" || (!driver && hasUrl && !env.SUPABASE_URL)) {
+        return {
+            provider: "postgres",
+            label: "Postgres",
+            configured: hasUrl
+        };
+    }
+    if (driver === "memory") {
+        return { provider: "memory", label: "Memory Store", configured: true };
+    }
+    if (driver === "sqlite" || !driver) {
+        return { provider: "sqlite", label: "SQLite", configured: true };
+    }
+    return {
+        provider: driver || "unknown",
+        label: driver ? `Store (${driver})` : "Database",
+        configured: hasUrl || driver === "sqlite" || driver === "memory"
+    };
+}
+async function withTimeout(promise, timeoutMs, label) {
+    let timer;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error(`${label} probe timed out after ${timeoutMs}ms`)), timeoutMs);
+            })
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+async function probeDatabase(store, env, timeoutMs) {
+    const meta = resolveDatabaseProvider(env);
+    const wantsRemote = meta.provider === "supabase" || meta.provider === "postgres";
+    if (wantsRemote && !meta.configured) {
+        return {
+            id: "database",
+            label: meta.label,
+            provider: meta.provider,
+            state: "missing",
+            detail: "Connection string not set. Add SUPABASE_URL (preferred) or DATABASE_URL."
+        };
+    }
+    try {
+        await withTimeout(store.listPairedDevices(), timeoutMs, meta.label);
+        if (meta.provider === "memory") {
+            return {
+                id: "database",
+                label: meta.label,
+                provider: meta.provider,
+                state: "warn",
+                detail: "In-memory only — data is lost on restart."
+            };
+        }
+        if (meta.provider === "sqlite" && isReplitHost(env)) {
+            return {
+                id: "database",
+                label: meta.label,
+                provider: meta.provider,
+                state: "warn",
+                detail: "SQLite works for demos; pairings may reset on rebuild. Prefer Supabase for production."
+            };
+        }
+        return {
+            id: "database",
+            label: meta.label,
+            provider: meta.provider,
+            state: "ok",
+            detail: `${meta.label} reachable`
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            id: "database",
+            label: meta.label,
+            provider: meta.provider,
+            state: "error",
+            detail: message
+        };
+    }
+}
+async function probeMedia(staticRoot, env, timeoutMs) {
+    const cloudinary = resolveCloudinaryConfig(env);
+    if (cloudinary) {
+        try {
+            await withTimeout(pingCloudinary(cloudinary), timeoutMs, "Cloudinary");
+            return {
+                id: "media",
+                label: "Media Server",
+                provider: "cloudinary",
+                state: "ok",
+                detail: `Cloudinary (${cloudinary.cloudName}) reachable`
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return {
+                id: "media",
+                label: "Media Server",
+                provider: "cloudinary",
+                state: "error",
+                detail: message
+            };
+        }
+    }
+    const hasPartialCloudinary = !!(env.CLOUDINARY_CLOUD_NAME ||
+        env.CLOUDINARY_API_KEY ||
+        env.CLOUDINARY_API_SECRET);
+    if (hasPartialCloudinary) {
+        return {
+            id: "media",
+            label: "Media Server",
+            provider: "cloudinary",
+            state: "error",
+            detail: "Cloudinary config incomplete — set CLOUDINARY_CLOUD_NAME, CLOUDINARY_API_KEY, and CLOUDINARY_API_SECRET."
+        };
+    }
+    const provider = isReplitHost(env) ? "replit-object-storage" : "local";
+    const providerLabel = provider === "replit-object-storage"
+        ? "Replit Object Storage / local uploads"
+        : "Local uploads";
+    if (!staticRoot) {
+        return {
+            id: "media",
+            label: "Media Server",
+            provider,
+            state: "missing",
+            detail: "No Cloudinary and staticRoot is unset — media uploads are unavailable."
+        };
+    }
+    const uploadsDir = path.join(path.resolve(staticRoot), "uploads");
+    try {
+        await fs.mkdir(uploadsDir, { recursive: true });
+        await fs.access(uploadsDir);
+        return {
+            id: "media",
+            label: "Media Server",
+            provider,
+            state: "warn",
+            detail: `${providerLabel} writable. Uploads may not survive rebuilds — Cloudinary recommended.`
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            id: "media",
+            label: "Media Server",
+            provider,
+            state: "error",
+            detail: `Uploads directory not writable (${uploadsDir}): ${message}`
+        };
+    }
+}
+function buildBlockers(connectors) {
+    const blockers = [];
+    for (const c of connectors) {
+        if (c.id === "database" && (c.state === "missing" || c.state === "error")) {
+            blockers.push({
+                connectorId: c.id,
+                title: `${c.label} not connected`,
+                message: c.detail,
+                fixHint: c.state === "missing"
+                    ? "Paste your Supabase Postgres connection string as Secret SUPABASE_URL, set TOMORROWOS_STORE=supabase, then restart the CMS."
+                    : "Check SUPABASE_URL / network / SSL (DATABASE_SSL=true). After Publish, confirm the live URL can reach Supabase."
+            });
+        }
+        if (c.id === "media" && c.state === "error") {
+            blockers.push({
+                connectorId: c.id,
+                title: "Media storage not ready",
+                message: c.detail,
+                fixHint: c.provider === "cloudinary"
+                    ? "Fix Cloudinary Secrets (CLOUDINARY_CLOUD_NAME, CLOUDINARY_API_KEY, CLOUDINARY_API_SECRET) and restart."
+                    : "Enable Object Storage for public/uploads, or configure Cloudinary for durable media URLs."
+            });
+        }
+        if (c.id === "media" && c.state === "missing") {
+            blockers.push({
+                connectorId: c.id,
+                title: "Media storage not configured",
+                message: c.detail,
+                fixHint: "Set Cloudinary Secrets, or ensure the CMS listens with staticRoot pointing at public/ (uploads folder)."
+            });
+        }
+    }
+    return blockers;
+}
+function overallFrom(connectors) {
+    const hardFail = connectors.some((c) => (c.id === "database" || c.id === "media") &&
+        (c.state === "error" || c.state === "missing"));
+    if (hardFail)
+        return "blocked";
+    if (connectors.some((c) => c.state === "warn"))
+        return "degraded";
+    return "ok";
+}
+export async function buildServerStatus(options) {
+    const env = options.env ?? process.env;
+    const timeoutMs = options.probeTimeoutMs ?? 5000;
+    const server = {
+        id: "server",
+        label: "Server",
+        provider: "tomorrowos",
+        state: "ok",
+        detail: "CMS process is running"
+    };
+    const [database, media] = await Promise.all([
+        probeDatabase(options.store, env, timeoutMs),
+        probeMedia(options.staticRoot, env, timeoutMs)
+    ]);
+    const connectors = [server, database, media];
+    const blockers = buildBlockers(connectors);
+    const overall = overallFrom(connectors);
+    return {
+        status: "success",
+        overall,
+        checkedAt: new Date().toISOString(),
+        connectors,
+        blockers
+    };
+}

package/dist/tomorrowos.d.ts

@@ -2,6 +2,7 @@ import { EventEmitter } from "events";
 import http from "http";
 import { PlaylistCatalog, type BuiltDevicePolicy } from "./playlist-catalog.js";
 import type { TomorrowOSStore } from "./store/types.js";
+export type { ConnectorState, ConnectorStatus, ServerStatusReport, StatusBlocker } from "./server-status.js";
 export interface TomorrowOSBrand {
     name?: string;
     cmsEndpoint?: string;

package/dist/tomorrowos.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tomorrowos.d.ts","sourceRoot":"","sources":["../src/tomorrowos.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,IAAI,MAAM,MAAM,CAAC;AAYxB,OAAO,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,KAAK,EAKV,eAAe,EAEhB,MAAM,kBAAkB,CAAC;AAc1B,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,eAAe,CAAC;IACvB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAoED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,kBAAkB,EAAE,KAAK,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE;YACT,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,GAAG,CAAC,EAAE,MAAM,CAAC;SACd,CAAC;KACH,CAAC,CAAC;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,EAAE;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAwKD,qBAAa,UAAW,SAAQ,YAAY;IAC1C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsC;IACxE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuC;IAClE,OAAO,CAAC,UAAU,CAA4B;IAC9C,OAAO,CAAC,GAAG,CAAgC;IAC3C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,eAAe,CAAgB;IACvC,wFAAwF;IACxF,OAAO,CAAC,eAAe,CAAuB;gBAElC,OAAO,EAAE,iBAAiB;IAOtC,yFAAyF;IACnF,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QACxD,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;KACtC,CAAC;YAkBY,iBAAiB;IAY/B,6EAA6E;IACvE,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAyEhE,6EAA6E;IACvE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAuCvF,OAAO;uBACU,MAAM;sBAlHgC,MAAM;;2BAmHxC,MAAM;sBAzCgC,MAAM;sBAAY,OAAO;;MA0ClF;IAEF,kFAAkF;IAC5E,WAAW,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAuExC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QACjE,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IAyBF,0FAA0F;YAC5E,2BAA2B;YAW3B,0BAA0B;IAYxC,qFAAqF;YACvE,8BAA8B;IAY5C,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,gBAAgB;YAoBV,+BAA+B;YAsC/B,iBAAiB;YASjB,iBAAiB;YAqCjB,kBAAkB;IAUhC,uFAAuF;IACvF,OAAO,CAAC,kBAAkB;YAmBZ,gBAAgB;YAMhB,uBAAuB;IA0CrC,MAAM,CAAC,QAAQ,EAAE,MAAM;oBAGD,CAAC,oBACT,MAAM,WACN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;;IAU5E,OAAO,CAAC,mBAAmB;IA6D3B,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM;YAqD7B,iBAAiB;YAgDjB,uBAAuB;IA6ErC,OAAO,CAAC,oBAAoB;YASd,yBAAyB;YAQzB,4BAA4B;YAa5B,2CAA2C;YAO3C,iCAAiC;YA6BjC,wBAAwB;YAiBxB,cAAc;IAiD5B,OAAO,CAAC,uBAAuB;IAO/B,OAAO,CAAC,mBAAmB;YAOb,yBAAyB;YAwBzB,oBAAoB;YAkDpB,yBAAyB;YAsBzB,uBAAuB;YAcvB,UAAU;YA4UV,gBAAgB;IAqG9B,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,gBAAgB;CA+IzB"}
+{"version":3,"file":"tomorrowos.d.ts","sourceRoot":"","sources":["../src/tomorrowos.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,IAAI,MAAM,MAAM,CAAC;AAYxB,OAAO,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,KAAK,EAKV,eAAe,EAEhB,MAAM,kBAAkB,CAAC;AAc1B,YAAY,EACV,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,aAAa,EACd,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,eAAe,CAAC;IACvB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAoED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,kBAAkB,EAAE,KAAK,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE;YACT,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,GAAG,CAAC,EAAE,MAAM,CAAC;SACd,CAAC;KACH,CAAC,CAAC;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,EAAE;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAwKD,qBAAa,UAAW,SAAQ,YAAY;IAC1C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsC;IACxE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuC;IAClE,OAAO,CAAC,UAAU,CAA4B;IAC9C,OAAO,CAAC,GAAG,CAAgC;IAC3C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,eAAe,CAAgB;IACvC,wFAAwF;IACxF,OAAO,CAAC,eAAe,CAAuB;gBAElC,OAAO,EAAE,iBAAiB;IAOtC,yFAAyF;IACnF,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QACxD,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;KACtC,CAAC;YAkBY,iBAAiB;IAY/B,6EAA6E;IACvE,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAyEhE,6EAA6E;IACvE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAuCvF,OAAO;uBACU,MAAM;sBAlHgC,MAAM;;2BAmHxC,MAAM;sBAzCgC,MAAM;sBAAY,OAAO;;MA0ClF;IAEF,kFAAkF;IAC5E,WAAW,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAuExC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QACjE,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IAyBF,0FAA0F;YAC5E,2BAA2B;YAW3B,0BAA0B;IAYxC,qFAAqF;YACvE,8BAA8B;IAY5C,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,gBAAgB;YAoBV,+BAA+B;YAsC/B,iBAAiB;YASjB,iBAAiB;YAqCjB,kBAAkB;IAUhC,uFAAuF;IACvF,OAAO,CAAC,kBAAkB;YAmBZ,gBAAgB;YAMhB,uBAAuB;IA0CrC,MAAM,CAAC,QAAQ,EAAE,MAAM;oBAGD,CAAC,oBACT,MAAM,WACN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;;IAU5E,OAAO,CAAC,mBAAmB;IA6D3B,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM;YAqD7B,iBAAiB;YAgDjB,uBAAuB;IA6ErC,OAAO,CAAC,oBAAoB;YASd,yBAAyB;YAQzB,4BAA4B;YAa5B,2CAA2C;YAO3C,iCAAiC;YA6BjC,wBAAwB;YAiBxB,cAAc;IAiD5B,OAAO,CAAC,uBAAuB;IAO/B,OAAO,CAAC,mBAAmB;YAOb,yBAAyB;YAwBzB,oBAAoB;YAkDpB,yBAAyB;YAsBzB,uBAAuB;YAcvB,UAAU;YAqVV,gBAAgB;IAqG9B,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,gBAAgB;CA+IzB"}

package/dist/tomorrowos.js

@@ -11,6 +11,7 @@ import { resolveBrandLogoPath, syncProjectAssetsToStaticRoot } from "./brand-ass
 import { deleteCloudinaryAsset, resolveCloudinaryConfig, uploadBufferToCloudinary } from "./cloudinary-storage.js";
 import { probeVideoDurationMs } from "./media-probe.js";
 import { contentHashHex, storeUploadIfNeeded } from "./upload-storage.js";
+import { buildServerStatus } from "./server-status.js";
 function normalizeDevicePlatform(platform, system) {
     const explicit = typeof platform === "string" ? platform.trim().toLowerCase() : "";
     if (explicit)
@@ -1024,6 +1025,14 @@ export class TomorrowOS extends EventEmitter {
                 res.end(JSON.stringify(this.brand));
                 return;
             }
+            if (req.method === "GET" && pathname === "/status") {
+                const report = await buildServerStatus({
+                    store: this.store,
+                    staticRoot: this.staticRoot
+                });
+                sendJson(res, 200, report);
+                return;
+            }
             if (req.method === "POST" && pathname === "/media/upload") {
                 await this.handleMediaUpload(req, res, url);
                 return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomorrowos/sdk",
-  "version": "0.9.4",
+  "version": "0.9.6",
   "description": "TomorrowOS CMS server SDK - WebSocket transport, pairing, device commands, optional static CMS UI. Includes CLI (tomorrowos init / build) and starter templates.",
   "type": "module",
   "main": "./dist/index.js",

package/templates/cms-starter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "my-cms",
-  "version": "0.9.4",
+  "version": "0.9.6",
   "description": "CMS server on @tomorrowos/sdk. Add your UI (React, static files, etc.) alongside this server.",
   "private": true,
   "type": "module",
@@ -13,7 +13,7 @@
     "build-player": "tomorrowos build --platform tizen"
   },
   "dependencies": {
-    "@tomorrowos/sdk": "^0.9.4",
+    "@tomorrowos/sdk": "^0.9.6",
     "dotenv": "^17.2.3",
     "tsx": "^4.19.0"
   },

package/templates/cms-starter/public/index.html

@@ -27,6 +27,16 @@
       </aside>
 
       <main class="panel-main">
+        <section class="card server-status-card" id="serverStatusSection" aria-live="polite">
+          <div class="server-status-header">
+            <h2>Server status</h2>
+            <button type="button" id="serverStatusRefreshBtn" title="Refresh status">Refresh</button>
+          </div>
+          <p class="hint server-status-overall" id="serverStatusOverall">Checking connectors…</p>
+          <ul class="server-status-list" id="serverStatusList"></ul>
+          <div id="serverStatusBlockers" class="server-status-blockers hidden"></div>
+        </section>
+
         <section class="card">
           <h2>Pair device</h2>
           <p class="hint">Enter the 6-character code on the screen (A–Z or 0–9).</p>

package/templates/cms-starter/public/methods.js

@@ -27,6 +27,7 @@ let editingDeviceNameId = null;
 let editingDeviceNameValue = "";
 
 let devicePollTimer = null;
+let serverStatusTimer = null;
 /** @type {number|null} CMS server boot time (ms) from GET /devices. */
 let serverStartedAtMs = null;
 /** @type {ReturnType<typeof setTimeout>|null} */
@@ -1857,12 +1858,169 @@ async function downloadMediaAsset(item) {
   openDownloadFailedModal(lastError);
 }
 
+function connectorStateLabel(state) {
+  if (state === "ok") return "OK";
+  if (state === "warn") return "Warning";
+  if (state === "missing") return "Not set";
+  return "Error";
+}
+
+function overallStatusCopy(overall) {
+  if (overall === "ok") return "All connectors look healthy.";
+  if (overall === "degraded") {
+    return "CMS is running with warnings — review media or database durability below.";
+  }
+  if (overall === "blocked") {
+    return "Setup incomplete — fix the blockers below so pairing and media work reliably.";
+  }
+  return "Checking connectors…";
+}
+
+function renderServerStatus(report) {
+  const section = document.getElementById("serverStatusSection");
+  const list = document.getElementById("serverStatusList");
+  const overallEl = document.getElementById("serverStatusOverall");
+  const blockersEl = document.getElementById("serverStatusBlockers");
+  if (!section || !list || !overallEl || !blockersEl) return;
+
+  const overall = report?.overall || "blocked";
+  section.classList.remove(
+    "server-status-card--ok",
+    "server-status-card--degraded",
+    "server-status-card--blocked"
+  );
+  section.classList.add(`server-status-card--${overall}`);
+  overallEl.textContent = overallStatusCopy(overall);
+
+  list.innerHTML = "";
+  const connectors = Array.isArray(report?.connectors) ? report.connectors : [];
+  for (const connector of connectors) {
+    const li = document.createElement("li");
+    li.className = "server-status-row";
+
+    const main = document.createElement("div");
+    main.className = "server-status-row-main";
+
+    const label = document.createElement("span");
+    label.className = "server-status-label";
+    label.textContent = connector.label || connector.id || "Connector";
+    main.appendChild(label);
+
+    if (connector.provider) {
+      const provider = document.createElement("span");
+      provider.className = "server-status-provider";
+      provider.textContent = connector.provider;
+      main.appendChild(provider);
+    }
+
+    const badge = document.createElement("span");
+    const state = connector.state || "error";
+    badge.className = `server-status-badge server-status-badge--${state}`;
+    badge.textContent = connectorStateLabel(state);
+
+    const detail = document.createElement("p");
+    detail.className = "server-status-detail";
+    detail.textContent = connector.detail || "";
+
+    li.appendChild(main);
+    li.appendChild(badge);
+    li.appendChild(detail);
+    list.appendChild(li);
+  }
+
+  const blockers = Array.isArray(report?.blockers) ? report.blockers : [];
+  blockersEl.innerHTML = "";
+  if (blockers.length === 0) {
+    blockersEl.classList.add("hidden");
+    return;
+  }
+
+  blockersEl.classList.remove("hidden");
+  for (const blocker of blockers) {
+    const card = document.createElement("div");
+    card.className = "server-status-blocker";
+
+    const title = document.createElement("h3");
+    title.textContent = blocker.title || "Connector issue";
+
+    const message = document.createElement("p");
+    message.textContent = blocker.message || "";
+
+    const fix = document.createElement("p");
+    fix.className = "server-status-blocker-fix";
+    fix.textContent = blocker.fixHint
+      ? `How to fix: ${blocker.fixHint}`
+      : "How to fix: update Secrets / env and restart the CMS.";
+
+    card.appendChild(title);
+    card.appendChild(message);
+    card.appendChild(fix);
+    blockersEl.appendChild(card);
+  }
+}
+
+async function fetchServerStatus() {
+  try {
+    const res = await fetch("/status", { cache: "no-store" });
+    const data = await res.json();
+    if (!res.ok) {
+      renderServerStatus({
+        overall: "blocked",
+        connectors: [
+          {
+            id: "server",
+            label: "Server",
+            state: "error",
+            detail: data?.error || `HTTP ${res.status}`
+          }
+        ],
+        blockers: [
+          {
+            connectorId: "server",
+            title: "Could not load server status",
+            message: data?.error || `HTTP ${res.status}`,
+            fixHint: "Confirm the CMS is running with @tomorrowos/sdk that includes GET /status."
+          }
+        ]
+      });
+      return;
+    }
+    renderServerStatus(data);
+  } catch (err) {
+    renderServerStatus({
+      overall: "blocked",
+      connectors: [
+        {
+          id: "server",
+          label: "Server",
+          state: "error",
+          detail: err?.message || "Network error"
+        }
+      ],
+      blockers: [
+        {
+          connectorId: "server",
+          title: "CMS unreachable",
+          message: err?.message || "Network error",
+          fixHint: "Start the CMS (`npm run start`) and reload this page."
+        }
+      ]
+    });
+  }
+}
+
 function startDevicePolling() {
   if (devicePollTimer) clearInterval(devicePollTimer);
   void fetchDevices();
   devicePollTimer = setInterval(() => void fetchDevices(), 8000);
 }
 
+function startServerStatusPolling() {
+  if (serverStatusTimer) clearInterval(serverStatusTimer);
+  void fetchServerStatus();
+  serverStatusTimer = setInterval(() => void fetchServerStatus(), 30000);
+}
+
 document.addEventListener("DOMContentLoaded", () => {
   const cmsUrlSection = document.getElementById("cmsUrlSection");
   if (cmsUrlSection && !isLocalPanelHost(window.location.hostname)) {
@@ -1876,6 +2034,11 @@ document.addEventListener("DOMContentLoaded", () => {
   updatePlaylistEditorVisibility();
   void fetchPlaylists();
   startDevicePolling();
+  startServerStatusPolling();
+
+  document
+    .getElementById("serverStatusRefreshBtn")
+    ?.addEventListener("click", () => void fetchServerStatus());
 
   document.getElementById("newPlaylistBtn")?.addEventListener("click", newPlaylistDraft);
   document.getElementById("savePlaylistBtn")?.addEventListener("click", () => void saveCurrentPlaylist());

package/templates/cms-starter/public/panel.css

@@ -118,6 +118,153 @@ body {
   color: #666;
 }
 
+.server-status-card {
+  border-color: #e4e1dc;
+}
+
+.server-status-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.75rem;
+  margin-bottom: 0.35rem;
+}
+
+.server-status-header h2 {
+  margin: 0;
+}
+
+.server-status-header button {
+  font-size: 0.78rem;
+  padding: 0.35rem 0.65rem;
+}
+
+.server-status-overall {
+  margin-bottom: 0.65rem;
+}
+
+.server-status-list {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+  display: grid;
+  gap: 0.45rem;
+}
+
+.server-status-row {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  gap: 0.35rem 0.75rem;
+  align-items: baseline;
+  padding: 0.55rem 0.65rem;
+  border: 1px solid #ece8e2;
+  border-radius: 8px;
+  background: #fafaf9;
+}
+
+.server-status-row-main {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: baseline;
+  gap: 0.35rem 0.55rem;
+  min-width: 0;
+}
+
+.server-status-label {
+  font-size: 0.85rem;
+  font-weight: 600;
+  color: #0a0908;
+}
+
+.server-status-provider {
+  font-size: 0.72rem;
+  color: #888;
+}
+
+.server-status-detail {
+  grid-column: 1 / -1;
+  margin: 0;
+  font-size: 0.75rem;
+  color: #555;
+  line-height: 1.4;
+}
+
+.server-status-badge {
+  font-size: 0.72rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  text-transform: uppercase;
+  padding: 0.18rem 0.45rem;
+  border-radius: 999px;
+  border: 1px solid transparent;
+  white-space: nowrap;
+}
+
+.server-status-badge--ok {
+  color: #067647;
+  background: #ecfdf3;
+  border-color: #abefc6;
+}
+
+.server-status-badge--warn {
+  color: #b54708;
+  background: #fffaeb;
+  border-color: #fedf89;
+}
+
+.server-status-badge--error,
+.server-status-badge--missing {
+  color: #b42318;
+  background: #fff5f5;
+  border-color: #fecdca;
+}
+
+.server-status-blockers {
+  margin-top: 0.75rem;
+  display: grid;
+  gap: 0.55rem;
+}
+
+.server-status-blocker {
+  padding: 0.7rem 0.8rem;
+  border-radius: 8px;
+  border: 1px solid #fecdca;
+  background: #fff8f7;
+}
+
+.server-status-blocker h3 {
+  margin: 0 0 0.3rem;
+  font-size: 0.85rem;
+  color: #b42318;
+}
+
+.server-status-blocker p {
+  margin: 0;
+  font-size: 0.78rem;
+  color: #444;
+  line-height: 1.45;
+}
+
+.server-status-blocker p + p {
+  margin-top: 0.35rem;
+}
+
+.server-status-blocker-fix {
+  color: #0a0908;
+}
+
+.server-status-card--ok {
+  border-color: #abefc6;
+}
+
+.server-status-card--degraded {
+  border-color: #fedf89;
+}
+
+.server-status-card--blocked {
+  border-color: #fecdca;
+}
+
 .devices-grid {
   display: grid;
   grid-template-columns: repeat(auto-fill, minmax(308px, 1fr));