sneakoscope 6.7.0 → 7.0.2

package/dist/native/sks-menubar/Sources/AlertFactory.swift

@@ -26,20 +26,39 @@ enum AlertFactory {
         alert.beginSheetModal(for: window) { completion($0 == .alertFirstButtonReturn) }
     }
 
-    static func textSheet(window: NSWindow, title: String, message: String, secure: Bool = false, completion: @escaping (String?) -> Void) {
+    static func textSheet(
+        window: NSWindow,
+        title: String,
+        message: String,
+        secure: Bool = false,
+        placeholder: String? = nil,
+        completion: @escaping (String?) -> Void
+    ) {
         let alert = NSAlert()
         alert.messageText = title
         alert.informativeText = message
         alert.addButton(withTitle: "Apply")
         alert.addButton(withTitle: "Cancel")
-        let field: NSTextField = secure ? NSSecureTextField(frame: NSRect(x: 0, y: 0, width: 360, height: 24)) : NSTextField(frame: NSRect(x: 0, y: 0, width: 360, height: 24))
+        let field: NSTextField = secure
+            ? NSSecureTextField(frame: NSRect(x: 0, y: 0, width: 420, height: 24))
+            : NSTextField(frame: NSRect(x: 0, y: 0, width: 420, height: 24))
+        field.isEditable = true
+        field.isSelectable = true
+        field.placeholderString = placeholder
         field.setAccessibilityLabel(title)
+        if let placeholder, !placeholder.isEmpty {
+            field.setAccessibilityPlaceholderValue(placeholder)
+        }
         alert.accessoryView = field
+        alert.window.initialFirstResponder = field
         AppIdentity.applyIcon(to: alert)
         alert.beginSheetModal(for: window) { response in
             let value = field.stringValue.trimmingCharacters(in: .whitespacesAndNewlines)
             completion(response == .alertFirstButtonReturn && !value.isEmpty ? value : nil)
         }
+        DispatchQueue.main.async {
+            alert.window.makeFirstResponder(field)
+        }
     }
 
     static func choiceSheet(window: NSWindow, title: String, message: String, choices: [(String, String)], completion: @escaping (String?) -> Void) {

package/dist/native/sks-menubar/Sources/AppDelegate.swift

@@ -10,6 +10,9 @@ final class AppDelegate: NSObject, NSApplicationDelegate {
     func applicationDidFinishLaunching(_ notification: Notification) {
         NSApp.setActivationPolicy(.accessory)
         AppIdentity.configure()
+        // Accessory/menubar apps have no system Edit menu by default, so Cmd+C/V
+        // never reaches NSTextField/NSTextView responders without an explicit menu.
+        AppIdentity.installStandardEditMenu()
         processClient = ProcessClient(actionScript: AppRuntime.actionScript, logPath: AppRuntime.lastActionLogPath, projectRoot: AppRuntime.projectRoot)
         operations = OperationCoordinator(directory: AppRuntime.operationDirectory)
         notifications = NotificationCoordinator()

package/dist/native/sks-menubar/Sources/AppIdentity.swift

@@ -8,12 +8,39 @@ enum AppIdentity {
         }
     }
 
+    /// Install a minimal main menu so Cut/Copy/Paste/Select All key equivalents
+    /// work in Control Center sheets and editable fields under `.accessory` policy.
+    static func installStandardEditMenu() {
+        let mainMenu = NSMenu()
+        let appItem = NSMenuItem()
+        mainMenu.addItem(appItem)
+        let appMenu = NSMenu()
+        appItem.submenu = appMenu
+        appMenu.addItem(withTitle: "Quit SKS Center", action: #selector(NSApplication.terminate(_:)), keyEquivalent: "q")
+
+        let editItem = NSMenuItem()
+        mainMenu.addItem(editItem)
+        let editMenu = NSMenu(title: "Edit")
+        editItem.submenu = editMenu
+        editMenu.addItem(withTitle: "Undo", action: Selector(("undo:")), keyEquivalent: "z")
+        editMenu.addItem(withTitle: "Redo", action: Selector(("redo:")), keyEquivalent: "Z")
+        editMenu.addItem(.separator())
+        editMenu.addItem(withTitle: "Cut", action: #selector(NSText.cut(_:)), keyEquivalent: "x")
+        editMenu.addItem(withTitle: "Copy", action: #selector(NSText.copy(_:)), keyEquivalent: "c")
+        editMenu.addItem(withTitle: "Paste", action: #selector(NSText.paste(_:)), keyEquivalent: "v")
+        editMenu.addItem(withTitle: "Delete", action: #selector(NSText.delete(_:)), keyEquivalent: "")
+        editMenu.addItem(withTitle: "Select All", action: #selector(NSText.selectAll(_:)), keyEquivalent: "a")
+        NSApp.mainMenu = mainMenu
+    }
+
     static func applyIcon(to alert: NSAlert) {
         alert.icon = NSApplication.shared.applicationIconImage
     }
 
     static func statusImage(resource: String, symbol: String) -> NSImage? {
-        let image = NSImage(systemSymbolName: symbol, accessibilityDescription: "SKS status") ?? Bundle.main.image(forResource: resource)
+        // Prefer the validated custom status PDFs; fall back to SF Symbols only when missing.
+        let image = Bundle.main.image(forResource: resource)
+            ?? NSImage(systemSymbolName: symbol, accessibilityDescription: "SKS status")
         image?.isTemplate = true
         return image
     }

package/dist/native/sks-menubar/Sources/ControlCenterWindowController.swift

@@ -6,6 +6,7 @@ final class ControlCenterWindowController: NSWindowController, NSTableViewDataSo
     private let controllers: [SidebarItem: NSViewController]
     private let overviewController: OverviewViewController
     private var selected: SidebarItem = .overview
+    private var hasPresented = false
 
     init(processClient: ProcessClient, operations: OperationCoordinator, notifications: NotificationCoordinator) {
         let overview = OverviewViewController(processClient: processClient, operations: operations)
@@ -14,9 +15,9 @@ final class ControlCenterWindowController: NSWindowController, NSTableViewDataSo
             .overview: overview,
             .updates: UpdatesViewController(processClient: processClient, operations: operations, notifications: notifications),
             .mcpServers: MCPServersViewController(processClient: processClient, operations: operations, notifications: notifications),
-            .providers: ProvidersViewController(processClient: processClient),
+            .providers: ProvidersViewController(processClient: processClient, operations: operations),
             .remoteTelegram: RemoteTelegramViewController(processClient: processClient),
-            .diagnostics: DiagnosticsViewController(processClient: processClient),
+            .diagnostics: DiagnosticsViewController(processClient: processClient, operations: operations),
             .settings: SettingsViewController(notifications: notifications)
         ]
         let window = NSWindow(
@@ -38,7 +39,10 @@ final class ControlCenterWindowController: NSWindowController, NSTableViewDataSo
         if let row = SidebarItem.allCases.firstIndex(of: section) { sidebar.selectRowIndexes(IndexSet(integer: row), byExtendingSelection: false) }
         display(section)
         NSApp.activate(ignoringOtherApps: true)
-        window?.center()
+        if !hasPresented {
+            window?.center()
+            hasPresented = true
+        }
         showWindow(nil)
         window?.makeKeyAndOrderFront(nil)
     }
@@ -97,12 +101,14 @@ final class ControlCenterWindowController: NSWindowController, NSTableViewDataSo
     private func display(_ section: SidebarItem) {
         contentHost.subviews.forEach { $0.removeFromSuperview() }
         guard let controller = controllers[section] else { return }
-        let view = controller.view
-        view.translatesAutoresizingMaskIntoConstraints = false
-        contentHost.addSubview(view)
+        let page = NativeView.scrollable(controller.view)
+        contentHost.addSubview(page)
         NSLayoutConstraint.activate([
-            view.leadingAnchor.constraint(equalTo: contentHost.leadingAnchor), view.trailingAnchor.constraint(equalTo: contentHost.trailingAnchor),
-            view.topAnchor.constraint(equalTo: contentHost.topAnchor), view.bottomAnchor.constraint(equalTo: contentHost.bottomAnchor)
+            page.leadingAnchor.constraint(equalTo: contentHost.leadingAnchor),
+            page.trailingAnchor.constraint(equalTo: contentHost.trailingAnchor),
+            page.topAnchor.constraint(equalTo: contentHost.topAnchor),
+            page.bottomAnchor.constraint(equalTo: contentHost.bottomAnchor)
         ])
+        (controller as? ControlCenterPage)?.refreshOnAppear()
     }
 }

package/dist/native/sks-menubar/Sources/DiagnosticsViewController.swift

@@ -1,9 +1,16 @@
 import Cocoa
 
-final class DiagnosticsViewController: NSViewController {
+final class DiagnosticsViewController: NSViewController, ControlCenterPage {
     private let processClient: ProcessClient
+    private let operations: OperationCoordinator
     private let status = NativeView.detail("Diagnostics are idle.")
-    init(processClient: ProcessClient) { self.processClient = processClient; super.init(nibName: nil, bundle: nil) }
+    private var busy = false
+
+    init(processClient: ProcessClient, operations: OperationCoordinator) {
+        self.processClient = processClient
+        self.operations = operations
+        super.init(nibName: nil, bundle: nil)
+    }
     required init?(coder: NSCoder) { nil }
 
     override func loadView() {
@@ -15,15 +22,72 @@ final class DiagnosticsViewController: NSViewController {
         buttons.orientation = .horizontal; buttons.spacing = 8
         view = NativeView.stack([
             NativeView.title("Diagnostics"),
-            NativeView.detail("Diagnostic output is bounded, redacted, and written with owner-only permissions."),
+            NativeView.detail("Diagnostic output is bounded, redacted, and written with owner-only permissions. Use this page when another Center action reports a blocker."),
             status, buttons
         ])
+        refreshOnAppear()
+    }
+
+    func refreshOnAppear() {
+        guard !busy else { return }
+        if let latest = operations.latestSnapshot() {
+            status.stringValue = "Last operation: \(latest.kind) · \(latest.state.rawValue) · \(latest.publicSummary)"
+        } else if FileManager.default.fileExists(atPath: AppRuntime.lastActionLogPath) {
+            status.stringValue = "Diagnostics idle. A previous action log is available via Open Last Log."
+        } else {
+            status.stringValue = "Diagnostics are idle. No operation log exists yet."
+        }
+    }
+
+    @objc private func doctor() {
+        busy = true
+        status.stringValue = "Doctor is running…"
+        processClient.run(["doctor", "--json"], timeout: NativeView.mutationTimeout) { [weak self] result in
+            guard let self = self else { return }
+            self.busy = false
+            if result.code == 0 {
+                self.status.stringValue = "Doctor completed with no blocking issue."
+                return
+            }
+            if let json = self.json(result.output) {
+                let ok = json["ok"] as? Bool
+                let blockers = (json["blockers"] as? [String])?.count ?? (json["issues"] as? [Any])?.count
+                if let blockers = blockers {
+                    self.status.stringValue = "Doctor reported \(blockers) issue\(blockers == 1 ? "" : "s"). Open Last Log for redacted detail."
+                    return
+                }
+                if ok == false {
+                    self.status.stringValue = "Doctor reported a blocker. Open Last Log for redacted detail."
+                    return
+                }
+            }
+            self.status.stringValue = "Doctor reported a blocker · \(NativeView.redactPreview(result.output))"
+        }
     }
 
-    @objc private func doctor() { status.stringValue = "Doctor is running…"; processClient.run(["doctor", "--json"]) { [weak self] result in self?.status.stringValue = result.code == 0 ? "Doctor completed." : "Doctor reported a blocker." } }
     @objc private func openLog() {
-        if FileManager.default.fileExists(atPath: AppRuntime.lastActionLogPath) { NSWorkspace.shared.open(URL(fileURLWithPath: AppRuntime.lastActionLogPath)) }
-        else { status.stringValue = "No operation log exists yet." }
+        if FileManager.default.fileExists(atPath: AppRuntime.lastActionLogPath) {
+            NSWorkspace.shared.open(URL(fileURLWithPath: AppRuntime.lastActionLogPath))
+            status.stringValue = "Opened the latest redacted action log."
+        } else {
+            status.stringValue = "No operation log exists yet. Run Doctor or another Center action first."
+        }
+    }
+
+    @objc private func restart() {
+        busy = true
+        status.stringValue = "Restarting Menu Bar…"
+        processClient.run(["menubar", "restart", "--json"], timeout: NativeView.mutationTimeout) { [weak self] result in
+            guard let self = self else { return }
+            self.busy = false
+            self.status.stringValue = result.code == 0
+                ? "Restart requested. Control Center will reopen after the Menu Bar process returns."
+                : "Restart failed · \(NativeView.redactPreview(result.output))"
+        }
+    }
+
+    private func json(_ text: String) -> [String: Any]? {
+        guard let data = text.data(using: .utf8) else { return nil }
+        return try? JSONSerialization.jsonObject(with: data) as? [String: Any]
     }
-    @objc private func restart() { processClient.run(["menubar", "restart", "--json"]) { [weak self] result in self?.status.stringValue = result.code == 0 ? "Restart requested." : "Restart failed." } }
 }

package/dist/native/sks-menubar/Sources/MCPServersViewController.swift

@@ -65,7 +65,7 @@ private struct McpRow {
 
 private struct McpDraft { let scope: String; let payload: [String: Any] }
 
-final class MCPServersViewController: NSViewController, NSTableViewDataSource, NSTableViewDelegate {
+final class MCPServersViewController: NSViewController, NSTableViewDataSource, NSTableViewDelegate, ControlCenterPage {
     private let processClient: ProcessClient
     private let operations: OperationCoordinator
     private let notifications: NotificationCoordinator
@@ -197,11 +197,18 @@ final class MCPServersViewController: NSViewController, NSTableViewDataSource, N
         }
     }
 
+    func refreshOnAppear() { refresh() }
+
     @objc private func testConnection() {
-        guard let selection = selected(), isWritable(selection.row) else { return }
+        guard let selection = selected(), selection.row.managedBy != "plugin" else { return }
         status.stringValue = "Testing \(selection.row.name) with bounded initialize and tools/list…"
-        processClient.run(["mcp", "config", "test", selection.row.name, "--scope", selection.row.scope] + scopeContext(selection.row.scope, mutation: false) + ["--json"]) { [weak self] result in
-            guard let self = self, let json = self.json(result.output) else { self?.status.stringValue = "Connection test failed without a readable receipt."; return }
+        processClient.run(["mcp", "config", "test", selection.row.name, "--scope", selection.row.scope] + scopeContext(selection.row.scope, mutation: false) + ["--json"], timeout: NativeView.mutationTimeout) { [weak self] result in
+            guard let self = self, let json = self.json(result.output) else {
+                self?.status.stringValue = result.code == 0
+                    ? "Connection test failed without a readable receipt."
+                    : "Connection test failed · \(NativeView.redactPreview(result.output))"
+                return
+            }
             let state = json["status"] as? String ?? "unknown"
             let latency = json["latency_ms"] as? Int
             let tools = json["tool_count"] as? Int
@@ -363,6 +370,8 @@ private final class McpEditorSheet: NSObject {
 
     private func build() {
         panel.title = row == nil ? "Add MCP Server" : "Edit \(row!.name)"
+        panel.styleMask = [.titled, .resizable]
+        panel.minSize = NSSize(width: 560, height: 480)
         let grid = NSGridView(views: [
             pair("Scope", scope), pair("Transport", transport), pair("Name", name), pair("Executable", command), pair("Remote URL", url),
             pair("Arguments — one per line", area(args, "Command arguments")), pair("Working directory", cwd), pair("Environment names — no values", area(env, "Environment-variable names")),
@@ -399,20 +408,52 @@ private final class McpEditorSheet: NSObject {
         guard (payload["startup_timeout_sec"] as? Int).map({ 1...30 ~= $0 }) == true, (payload["tool_timeout_sec"] as? Int).map({ 1...3600 ~= $0 }) == true else { return nil }
         if selectedTransport == "stdio" {
             let executable = command.stringValue.trimmingCharacters(in: .whitespacesAndNewlines); if row == nil || row?.transport != selectedTransport { guard !executable.isEmpty else { return nil } }; if !executable.isEmpty { payload["command"] = executable }
-            let argv = lines(args.string); if argv.contains(where: { $0.contains("=") || $0.lowercased().contains("token") || $0.lowercased().contains("secret") }) { return nil }; if !argv.isEmpty { payload["args"] = argv }
-            let names = lines(env.string); guard names.allSatisfy({ $0.range(of: #"^[A-Za-z_][A-Za-z0-9_]*$"#, options: .regularExpression) != nil }) else { return nil }; if !names.isEmpty { payload["env_vars"] = names }
+            let argv = orderedLines(args.string); if argv.contains(where: { $0.contains("=") || $0.lowercased().contains("token") || $0.lowercased().contains("secret") }) { return nil }; if !argv.isEmpty { payload["args"] = argv }
+            let names = uniqueSortedLines(env.string); guard names.allSatisfy({ $0.range(of: #"^[A-Za-z_][A-Za-z0-9_]*$"#, options: .regularExpression) != nil }) else { return nil }; if !names.isEmpty { payload["env_vars"] = names }
             let directory = cwd.stringValue.trimmingCharacters(in: .whitespacesAndNewlines); if !directory.isEmpty { guard directory.hasPrefix("/") else { return nil }; payload["cwd"] = directory }
             if remote.state == .on { payload["experimental_environment"] = "remote" }
         } else {
             let endpoint = url.stringValue.trimmingCharacters(in: .whitespacesAndNewlines); if row == nil || row?.transport != selectedTransport { guard !endpoint.isEmpty else { return nil } }; if !endpoint.isEmpty { guard let parsed = URL(string: endpoint), ["http", "https"].contains(parsed.scheme?.lowercased() ?? ""), parsed.user == nil, parsed.password == nil else { return nil }; payload["url"] = endpoint }
             let envName = bearer.stringValue.trimmingCharacters(in: .whitespacesAndNewlines); if !envName.isEmpty { guard envName.range(of: #"^[A-Za-z_][A-Za-z0-9_]*$"#, options: .regularExpression) != nil else { return nil }; payload["bearer_token_env_var"] = envName }
         }
-        let allow = lines(enabledTools.string); let deny = lines(disabledTools.string); guard Set(allow).isDisjoint(with: Set(deny)) else { return nil }; if !allow.isEmpty { payload["enabled_tools"] = allow }; if !deny.isEmpty { payload["disabled_tools"] = deny }
+        let allow = uniqueSortedLines(enabledTools.string); let deny = uniqueSortedLines(disabledTools.string); guard Set(allow).isDisjoint(with: Set(deny)) else { return nil }; if !allow.isEmpty { payload["enabled_tools"] = allow }; if !deny.isEmpty { payload["disabled_tools"] = deny }
         return McpDraft(scope: scope.titleOfSelectedItem?.lowercased() ?? "global", payload: payload)
     }
 
-    private func validationMessage() -> String { "Check the server name, selected connection field, timeout ranges, environment names, tool lists, and secret-free arguments before review." }
+    private func validationMessage() -> String {
+        let server = name.stringValue.trimmingCharacters(in: .whitespacesAndNewlines)
+        if server.range(of: #"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"#, options: .regularExpression) == nil {
+            return "Fix the server name: use 1–64 letters, numbers, underscores, or hyphens."
+        }
+        if transport.indexOfSelectedItem == 0 {
+            let executable = command.stringValue.trimmingCharacters(in: .whitespacesAndNewlines)
+            if (row == nil || row?.transport != "stdio") && executable.isEmpty { return "Executable is required for a local command server." }
+            if orderedLines(args.string).contains(where: { $0.contains("=") || $0.lowercased().contains("token") || $0.lowercased().contains("secret") }) {
+                return "Arguments must stay secret-free. Remove token/secret values and inline assignments."
+            }
+            if !uniqueSortedLines(env.string).allSatisfy({ $0.range(of: #"^[A-Za-z_][A-Za-z0-9_]*$"#, options: .regularExpression) != nil }) {
+                return "Environment names must be bare variable names with no values."
+            }
+        } else {
+            let endpoint = url.stringValue.trimmingCharacters(in: .whitespacesAndNewlines)
+            if (row == nil || row?.transport != "streamable-http") && endpoint.isEmpty { return "Remote URL is required for a remote MCP server." }
+        }
+        let startupSec = Int(startup.stringValue) ?? 0
+        let toolSec = Int(tool.stringValue) ?? 0
+        if !(1...30 ~= startupSec) { return "Startup timeout must be between 1 and 30 seconds." }
+        if !(1...3600 ~= toolSec) { return "Tool timeout must be between 1 and 3600 seconds." }
+        let allow = uniqueSortedLines(enabledTools.string); let deny = uniqueSortedLines(disabledTools.string)
+        if !Set(allow).isDisjoint(with: Set(deny)) { return "Enabled and disabled tool lists must not overlap." }
+        return "Check the selected connection field, timeout ranges, environment names, tool lists, and secret-free arguments before review."
+    }
     private func pair(_ label: String, _ control: NSView) -> [NSView] { [NSTextField(labelWithString: label), control] }
     private func area(_ text: NSTextView, _ label: String) -> NSScrollView { text.isRichText = false; text.font = NSFont.systemFont(ofSize: 12); text.setAccessibilityLabel(label); let scroll = NSScrollView(); scroll.documentView = text; scroll.hasVerticalScroller = true; scroll.borderType = .bezelBorder; scroll.heightAnchor.constraint(equalToConstant: 52).isActive = true; return scroll }
-    private func lines(_ value: String) -> [String] { Array(Set(value.split(whereSeparator: \.isNewline).map { $0.trimmingCharacters(in: .whitespacesAndNewlines) }.filter { !$0.isEmpty })).sorted() }
+    private func uniqueSortedLines(_ value: String) -> [String] { Array(Set(rawLines(value))).sorted() }
+    private func orderedLines(_ value: String) -> [String] {
+        var seen = Set<String>()
+        return rawLines(value).filter { seen.insert($0).inserted }
+    }
+    private func rawLines(_ value: String) -> [String] {
+        value.split(whereSeparator: \.isNewline).map { $0.trimmingCharacters(in: .whitespacesAndNewlines) }.filter { !$0.isEmpty }
+    }
 }

package/dist/native/sks-menubar/Sources/OverviewViewController.swift

@@ -1,6 +1,14 @@
 import Cocoa
 
+/// Pages that should reload local status whenever the Control Center section becomes visible.
+protocol ControlCenterPage: AnyObject {
+    func refreshOnAppear()
+}
+
 enum NativeView {
+    static let statusTimeout: TimeInterval = 8
+    static let mutationTimeout: TimeInterval = 90
+
     static func title(_ value: String) -> NSTextField {
         let field = NSTextField(labelWithString: value)
         field.font = NSFont.systemFont(ofSize: 18, weight: .semibold)
@@ -29,6 +37,35 @@ enum NativeView {
         stack.edgeInsets = NSEdgeInsets(top: 22, left: 24, bottom: 22, right: 24)
         return stack
     }
+
+    static func scrollable(_ document: NSView) -> NSScrollView {
+        let scroll = NSScrollView()
+        scroll.drawsBackground = false
+        scroll.hasVerticalScroller = true
+        scroll.hasHorizontalScroller = false
+        scroll.borderType = .noBorder
+        scroll.autohidesScrollers = true
+        scroll.translatesAutoresizingMaskIntoConstraints = false
+        document.translatesAutoresizingMaskIntoConstraints = false
+        scroll.documentView = document
+        if let content = scroll.contentView.documentView {
+            NSLayoutConstraint.activate([
+                content.leadingAnchor.constraint(equalTo: scroll.contentView.leadingAnchor),
+                content.trailingAnchor.constraint(equalTo: scroll.contentView.trailingAnchor),
+                content.topAnchor.constraint(equalTo: scroll.contentView.topAnchor)
+            ])
+        }
+        return scroll
+    }
+
+    static func redactPreview(_ output: String, limit: Int = 160) -> String {
+        let compact = output
+            .replacingOccurrences(of: "\n", with: " ")
+            .trimmingCharacters(in: .whitespacesAndNewlines)
+        guard !compact.isEmpty else { return "No public detail was returned." }
+        if compact.count <= limit { return compact }
+        return String(compact.prefix(limit)) + "…"
+    }
 }
 
 enum OverviewSummary {
@@ -182,12 +219,14 @@ enum OverviewSummary {
     }
 }
 
-final class OverviewViewController: NSViewController {
+final class OverviewViewController: NSViewController, ControlCenterPage {
     private let processClient: ProcessClient
     private let operations: OperationCoordinator
     private let status = NativeView.detail("Loading local SKS status…")
     private let notificationInbox = NativeView.detail("Notifications: checking authorization…")
     private var generation = 0
+    private var doctorButton: NSButton!
+    private var refreshButton: NSButton!
 
     init(processClient: ProcessClient, operations: OperationCoordinator) {
         self.processClient = processClient
@@ -197,9 +236,9 @@ final class OverviewViewController: NSViewController {
     required init?(coder: NSCoder) { nil }
 
     override func loadView() {
-        let runDoctor = NativeView.button("Run Doctor", target: self, action: #selector(doctor))
-        let refresh = NativeView.button("Refresh", target: self, action: #selector(refreshStatus))
-        let buttons = NSStackView(views: [runDoctor, refresh])
+        doctorButton = NativeView.button("Run Doctor", target: self, action: #selector(doctor))
+        refreshButton = NativeView.button("Refresh", target: self, action: #selector(refreshStatus))
+        let buttons = NSStackView(views: [doctorButton, refreshButton])
         buttons.orientation = .horizontal
         buttons.spacing = 8
         view = NativeView.stack([
@@ -212,6 +251,10 @@ final class OverviewViewController: NSViewController {
         loadStatus(forceUpdateRefresh: false)
     }
 
+    func refreshOnAppear() {
+        loadStatus(forceUpdateRefresh: false)
+    }
+
     func setNotificationAuthorizationDenied(_ denied: Bool) {
         notificationInbox.stringValue = denied
             ? "Notifications: permission denied — operation results remain available in this Control Center inbox."
@@ -225,6 +268,7 @@ final class OverviewViewController: NSViewController {
     private func loadStatus(forceUpdateRefresh: Bool) {
         generation += 1
         let requestGeneration = generation
+        refreshButton?.isEnabled = false
         status.stringValue = "Checking versions, MCP servers, Telegram Hub, remote fleet, and operations…"
         var update: [String: Any]?
         var mcp: [String: Any]?
@@ -234,7 +278,7 @@ final class OverviewViewController: NSViewController {
         var updateArguments = ["update", "status"]
         if forceUpdateRefresh { updateArguments.append("--refresh") }
         updateArguments.append("--json")
-        processClient.run(updateArguments) { [weak self] result in
+        processClient.run(updateArguments, timeout: NativeView.statusTimeout) { [weak self] result in
             update = result.code == 0 ? self?.json(result.output) : nil
             group.leave()
         }
@@ -247,24 +291,33 @@ final class OverviewViewController: NSViewController {
             group.leave()
         }
         group.enter()
-        processClient.run(["telegram", "status", "--project-root", AppRuntime.projectRoot, "--json"]) { [weak self] result in
+        processClient.run(["telegram", "status", "--project-root", AppRuntime.projectRoot, "--json"], timeout: NativeView.statusTimeout) { [weak self] result in
             telegram = result.code == 0 ? self?.json(result.output) : nil
             group.leave()
         }
         group.notify(queue: .main) { [weak self] in
             guard let self = self, self.generation == requestGeneration else { return }
+            self.refreshButton?.isEnabled = true
             self.status.stringValue = self.summary(update: update, mcp: mcp, telegram: telegram)
         }
         DispatchQueue.main.asyncAfter(deadline: .now() + 5) { [weak self] in
             guard let self = self, self.generation == requestGeneration else { return }
+            self.refreshButton?.isEnabled = true
             self.status.stringValue = self.summary(update: update, mcp: mcp, telegram: telegram)
         }
     }
 
     @objc private func doctor() {
+        doctorButton?.isEnabled = false
         status.stringValue = "Doctor is running…"
-        processClient.run(["doctor", "--json"]) { [weak self] result in
-            self?.status.stringValue = result.code == 0 ? "Doctor completed. No blocking issue was reported." : "Doctor found an issue. Open Diagnostics or the operation log."
+        processClient.run(["doctor", "--json"], timeout: NativeView.mutationTimeout) { [weak self] result in
+            guard let self = self else { return }
+            self.doctorButton?.isEnabled = true
+            if result.code == 0 {
+                self.status.stringValue = "Doctor completed. No blocking issue was reported."
+            } else {
+                self.status.stringValue = "Doctor found an issue. Open Diagnostics · \(NativeView.redactPreview(result.output))"
+            }
         }
     }