code-context-control 2.145.2__tar.gz → 2.146.0__tar.gz

{code_context_control-2.145.2 → code_context_control-2.146.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-context-control
-Version: 2.145.2
+Version: 2.146.0
 Summary: Local MCP code-intelligence for AI coding tools: surgical search/read/edit, agent-config version history, path-level access + masking guards, and a multi-project hub.
 Author-email: Dimitri Tselenchuk <dtselenc@gmail.com>
 License-Expression: Apache-2.0

{code_context_control-2.145.2 → code_context_control-2.146.0}/cli/c3.py

@@ -91,7 +91,7 @@ console = Console() if HAS_RICH else None
 # Config
 CONFIG_DIR = ".c3"
 CONFIG_FILE = ".c3/config.json"
-__version__ = "2.145.2"
+__version__ = "2.146.0"
 
 # The PreToolUse matcher for native subagent calls (installer and hub migration).
 AGENT_MATCHER = "Agent|Task"
@@ -6685,10 +6685,10 @@ def _creds_cmd_list(args, project_path: str) -> None:
               "(add --global for all projects).")
         return
     print(f"{len(entries)} credential(s) — project scope shadows global:")
+    present = cred_store.presence_for(entries, project_path)
     missing = 0
     for name, entry in entries.items():
-        gone = not cred_store.is_resolvable(
-            name, project_path=project_path, scope=entry["scope"])
+        gone = not present[name]
         missing += gone
         print("  " + _creds_entry_line(name, entry, gone))
     if missing:

{code_context_control-2.145.2 → code_context_control-2.146.0}/cli/hub_server.py

@@ -1804,7 +1804,7 @@ def api_projects_browse():
         return jsonify({"error": str(e)}), 400
     if not resolved.is_dir():
         return jsonify({"error": f"Not a directory: {resolved}"}), 404
-    registered = {os.path.normcase(p.get("path", "")) for p in _pm()._read_projects()}
+    registered = {os.path.normcase(p.get("path", "")) for p in _pm().list_registered()}
     dirs = []
     try:
         for child in sorted(resolved.iterdir(), key=lambda c: c.name.lower()):
@@ -1913,7 +1913,7 @@ def api_search_global():
                    if wanted else None)
 
     candidates, skipped = [], []
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = p.get("path") or ""
         if wanted_norm is not None and os.path.normcase(ppath) not in wanted_norm:
             continue
@@ -2138,14 +2138,15 @@ def api_projects_credentials():
     usage = cred_store.read_usage_state(str(resolved))
     home = cred_store.global_base()
     global_names = set(cred_store.list_entries(str(home))) if home else set()
+    listed = cred_store.list_entries(str(resolved))
+    present = cred_store.presence_for(listed, str(resolved))
     entries = []
-    for name, entry in cred_store.list_entries(str(resolved)).items():
+    for name, entry in listed.items():
         entries.append(_cred_entry_public(
             name, entry, usage=usage,
             shadows_global=(entry.get("scope") == "project"
                             and name in global_names),
-            value_ok=cred_store.is_resolvable(
-                name, project_path=str(resolved), scope=entry["scope"])))
+            value_ok=present[name]))
     return jsonify({"path": str(resolved), "entries": entries})
 
 
@@ -2360,7 +2361,7 @@ def api_hub_credentials_audit():
     only_global = (request.args.get("scope") or "").strip().lower() == "global"
 
     events, errors = [], []
-    for p in ([] if only_global else _pm().list_projects()):
+    for p in ([] if only_global else _pm().list_registered()):
         ppath = str(p.get("path") or "")
         if not (Path(ppath) / ".c3").is_dir():
             continue
@@ -2417,9 +2418,12 @@ def api_hub_credentials_overview():
     from services import credential_store as cred_store
     home = cred_store.global_base()
     global_entries = cred_store.list_entries(str(home)) if home else {}
+    # realm -> {name: value decodes}, probed once per vault and shared with
+    # the backup banner, which asks the same question of the same entries.
+    present = {"global": cred_store.value_presence("global", str(home))} if home else {}
     shadowed_in = {name: [] for name in global_entries}
     projects_out = []
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or "", "path": ppath,
                "initialized": True, "error": None, "entries": []}
@@ -2428,14 +2432,15 @@ def api_hub_credentials_overview():
                 row["initialized"] = False
             else:
                 usage = cred_store.read_usage_state(ppath)
+                ok = cred_store.value_presence("project", ppath)
+                present[cred_store.realm("project", ppath)] = ok
                 for name, entry in cred_store.list_entries(ppath).items():
                     if entry.get("scope") != "project":
                         continue
                     row["entries"].append(_cred_entry_public(
                         name, entry, usage=usage,
                         shadows_global=name in global_entries,
-                        value_ok=cred_store.is_resolvable(
-                            name, project_path=ppath, scope="project")))
+                        value_ok=ok.get(name, False)))
                     if name in shadowed_in:
                         shadowed_in[name].append(
                             {"name": row["name"], "path": ppath})
@@ -2446,21 +2451,21 @@ def api_hub_credentials_overview():
     global_out = [
         {**_cred_entry_public(
             name, entry, usage=global_usage,
-            value_ok=cred_store.is_resolvable(
-                name, project_path=str(home), scope="global")),
+            value_ok=present.get("global", {}).get(name, False)),
          "shadowed_in": shadowed_in.get(name, [])}
         for name, entry in global_entries.items()
     ]
     return jsonify({"global": {"entries": global_out}, "projects": projects_out,
                     "backup": _cred_backup_summary(
-                        [row["path"] for row in projects_out if row["initialized"]])})
+                        [row["path"] for row in projects_out if row["initialized"]],
+                        present)})
 
 
-def _cred_backup_summary(project_paths) -> dict:
+def _cred_backup_summary(project_paths, present) -> dict:
     """Backup state as counts for the Hub banner; a broken file reports its error."""
     from services import credential_backup
     try:
-        st = credential_backup.status(project_paths)
+        st = credential_backup.status(project_paths, presence=present)
     except credential_backup.BackupError as exc:
         return {"enabled": True, "error": str(exc), "restorable": 0, "lost": 0}
     return {"enabled": st["enabled"], "restorable": len(st["restorable"]),
@@ -2612,7 +2617,7 @@ def api_hub_tokens_overview():
     days = _hub_tokens_days(request.args.get("days"))
     rows, totals = [], {"tool_calls": 0, "tool_tokens": 0,
                         "session_tokens": 0, "saved": 0}
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or "", "path": ppath, "initialized": True,
                "error": None, "tool_calls": 0, "tool_tokens": 0,
@@ -2662,7 +2667,7 @@ def api_hub_locks_overview():
     from services import agent_locks as al
 
     rows, total = [], 0
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or "", "path": ppath, "initialized": True,
                "error": None, "enabled": True, "mode": "advisory",
@@ -2752,7 +2757,7 @@ def api_hub_enforcement_overview():
 
     rows = []
     totals = {"discipline": 0, "access": 0}
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or "", "path": ppath, "initialized": True,
                "error": None, "mode": None, "scope": "", "set_by": "",
@@ -3428,7 +3433,7 @@ def api_hub_override_policy_overview():
     from services import override_policy as opol
 
     rows = []
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or Path(ppath).name, "path": ppath,
                "initialized": True, "error": None, "policy": None,
@@ -3740,7 +3745,7 @@ def api_hub_access_overview():
     empty = {"deny": [], "read_only": [], "confirm": [], "mask": 0,
              "corrupt": False}
     rows = []
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or Path(ppath).name, "path": ppath,
                "initialized": True, "error": None, "rules": dict(empty)}
@@ -4268,7 +4273,7 @@ def api_pm_global():
     from services.task_store import TaskStore
 
     tasks, skipped, by_project = [], [], {}
-    entries = _pm()._read_projects()
+    entries = _pm().list_registered()
     for p in entries:
         ppath = p.get("path") or ""
         if not Path(ppath).is_dir():
@@ -4808,7 +4813,7 @@ def _session_project(raw: str):
     if not raw:
         return None
     want = os.path.normcase(os.path.normpath(raw))
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         path = str(p.get("path") or "")
         if path and os.path.normcase(os.path.normpath(path)) == want:
             return {"name": str(p.get("name") or Path(path).name), "path": path}
@@ -4847,7 +4852,7 @@ def api_hub_sessions_overview():
         return row
 
     with ThreadPoolExecutor(max_workers=8) as pool:
-        rows = list(pool.map(one, _pm().list_projects()))
+        rows = list(pool.map(one, _pm().list_registered()))
     rows.sort(key=lambda r: r.get("last_active") or "", reverse=True)
     return jsonify({"projects": rows, "features": _SESSIONS_FEATURES})
 
@@ -4876,7 +4881,7 @@ def api_hub_sessions_list():
             res["errors"] = []
         else:
             projects = [{"name": str(p.get("name") or ""), "path": str(p.get("path") or "")}
-                        for p in _pm().list_projects()]
+                        for p in _pm().list_registered()]
             res = sc.list_many(projects, stale=stale, q=q, limit=limit, before=before)
         return jsonify(res)
     except Exception as e:

{code_context_control-2.145.2 → code_context_control-2.146.0}/cli/hub_ui/app.js

@@ -50,7 +50,10 @@ function App() {
   }, []);
 
   useEffect(() => { loadConfig(); loadProjects(); }, []);
-  usePoll(loadProjects, 5000);
+  // Live status matters on the project list and in a drill-in. Elsewhere it
+  // only refreshes the sidebar and top-bar counts, which may lag 30 s, and
+  // each poll reads every project's activity log.
+  usePoll(loadProjects, mainView === 'projects' || drill ? 5000 : 30000);
 
   // Persisted preferences
   const toggleTheme = () => {

{code_context_control-2.145.2 → code_context_control-2.146.0}/cli/hub_ui/components/hub_credentials.js

@@ -1381,7 +1381,10 @@ function CredSourcesStrip({ sources, onResync, busy }) {
 
 // path=null → the global vault (~/.c3): scope locked to 'global'.
 // path=string → that project's merged view (global entries + project shadows).
-function CredsManager({ path, projectName, onChanged, bindSlash }) {
+// Global vault (path null): rows arrive as `globalEntries` (null while the
+// page's overview loads) and `onChanged` refills them; loading the overview
+// here as well fetched the whole cross-project index twice.
+function CredsManager({ path, projectName, onChanged, bindSlash, globalEntries }) {
   const isGlobal = !path;
   const [entries, setEntries] = useState([]);
   const [loading, setLoading] = useState(true);
@@ -1408,14 +1411,10 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
   const withPath = (obj) => (path ? Object.assign({ path }, obj) : obj);
 
   const load = useCallback(async () => {
+    if (!path) return;
     try {
-      if (path) {
-        const data = await api.get('/api/projects/credentials?path=' + encodeURIComponent(path));
-        setEntries((data && data.entries) || []);
-      } else {
-        const data = await api.get('/api/hub/credentials/overview');
-        setEntries((((data || {}).global) || {}).entries || []);
-      }
+      const data = await credApi.listProject(path);
+      setEntries((data && data.entries) || []);
       setError('');
     } catch (e) { setError(String(e)); }
     setLoading(false);
@@ -1426,6 +1425,14 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
     load();
   }, [load]);
 
+  useEffect(() => {
+    if (path) return;
+    setEntries(globalEntries || []);
+    setLoading(globalEntries == null);
+  }, [path, globalEntries]);
+
+  const refresh = () => { load(); if (onChanged) onChanged(); };
+
   // `/` focuses the filter, as it does on every other hub board — but only
   // where nothing above already claims the key. The hub Credentials page owns
   // `/` for its cross-project search, so the manager binds it solely when
@@ -1447,7 +1454,7 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
     return () => window.removeEventListener('keydown', onKey);
   }, [bindSlash, drawer, menu, confirm]);
 
-  const done = (msg) => { notify(msg); load(); if (onChanged) onChanged(); };
+  const done = (msg) => { notify(msg); refresh(); };
 
   const saveForm = async () => {
     if (!form || !form.name.trim()) return;
@@ -1507,8 +1514,7 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
       if (resp && resp.error) setError(resp.error);
       else {
         notify(`${field === 'inject' ? 'Auto-inject' : 'Agent access'} ${next ? 'enabled' : 'disabled'} for '${entry.name}'`);
-        load();
-        if (onChanged) onChanged();
+        refresh();
       }
     } catch (e) { setError(apiErr(e)); }
   };
@@ -1619,7 +1625,7 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
       } else {
         notify(`${label}: ${ok} ${ok === 1 ? 'entry' : 'entries'}`);
       }
-      if (action !== 'check') { exitSelect(); load(); if (onChanged) onChanged(); }
+      if (action !== 'check') { exitSelect(); refresh(); }
     } catch (e) { notify(apiErr(e), 'err'); }
     setBulkBusy(false);
   };
@@ -2012,7 +2018,7 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
         <CredDrawer entry={drawer} path={path} projectName={projectName}
           initialReplace={replaceOnOpen}
           onClose={() => { setDrawer(null); setReplaceOnOpen(false); }}
-          onChanged={() => { load(); if (onChanged) onChanged(); }} />
+          onChanged={refresh} />
       )}
       {confirm && <CredConfirm spec={confirm} onClose={() => setConfirm(null)} />}
     </div>
@@ -2420,7 +2426,8 @@ function HubCredentials({ projects, onOpenDrill }) {
         <CredAuditView path={null} initialName={auditName}
           onOpenDrill={onOpenDrill} />
       ) : sub === 'global' ? (
-        <CredsManager path={null} onChanged={loadOverview} />
+        <CredsManager path={null} onChanged={loadOverview}
+          globalEntries={ov ? ((ov.global || {}).entries || []) : null} />
       ) : !ov ? (
         <div style={{ color: T.textMuted, fontSize: 13 }}>Loading…</div>
       ) : (ov.projects || []).length === 0 ? (

{code_context_control-2.145.2 → code_context_control-2.146.0}/cli/hub_ui/state.js

@@ -24,11 +24,15 @@ const IDE_OPTIONS = [
 
 const ideLabel = (ide) => IDE_LABELS[ide] || ide || 'unknown';
 
-// Repeating poll that pauses while the tab is hidden.
+// Repeating poll that pauses while the tab is hidden and skips a tick while
+// the previous call is still running, so a slow route never stacks requests.
 const usePoll = (fn, ms) => {
   React.useEffect(() => {
-    const iv = setInterval(() => {
-      if (!document.hidden) fn();
+    let running = false;
+    const iv = setInterval(async () => {
+      if (document.hidden || running) return;
+      running = true;
+      try { await fn(); } finally { running = false; }
     }, ms);
     return () => clearInterval(iv);
   }, [fn, ms]);

{code_context_control-2.145.2 → code_context_control-2.146.0}/cli/hub_ui.html

@@ -137,7 +137,7 @@
 
 <body>
   <div id="root"></div>
-  <script type="text/babel">
+  <script type="text/babel" data-presets="react">
     /* __C3_HUB_SCRIPTS__ */
   </script>
 </body>

{code_context_control-2.145.2 → code_context_control-2.146.0}/cli/server.py

@@ -2764,12 +2764,12 @@ def api_credentials_list():
     from services import credential_store as cred_store
     pp = str(PROJECT_PATH)
     usage = cred_store.read_usage_state(pp)
+    listed = cred_store.list_entries(pp)
+    present = cred_store.presence_for(listed, pp)
     out = []
-    for name, entry in cred_store.list_entries(pp).items():
+    for name, entry in listed.items():
         out.append(cred_store.public_entry(
-            name, entry, usage=usage,
-            value_ok=cred_store.is_resolvable(
-                name, project_path=pp, scope=entry["scope"])))
+            name, entry, usage=usage, value_ok=present[name]))
     return jsonify({"entries": out})
 
 

{code_context_control-2.145.2 → code_context_control-2.146.0}/cli/tools/credentials.py

@@ -98,8 +98,7 @@ def _act_list(project_path: str) -> str:
             "The user manages them via the Credentials UI tab or `c3 creds set`."
         )
     usage = cs.read_usage_state(project_path)
-    missing = {n for n, e in entries.items() if not cs.is_resolvable(
-        n, project_path=project_path, scope=e["scope"])}
+    missing = {n for n, ok in cs.presence_for(entries, project_path).items() if not ok}
     lines = [f"[creds] {len(entries)} entries (project scope shadows global):"]
     lines += [_format_entry_line(n, e, usage, n in missing)
               for n, e in entries.items()]

{code_context_control-2.145.2 → code_context_control-2.146.0}/cli/ui.html

@@ -160,7 +160,7 @@
 
 <body>
   <div id="root"></div>
-  <script type="text/babel">
+  <script type="text/babel" data-presets="react">
     /* __C3_UI_SCRIPTS__ */
   </script>
 </body>

{code_context_control-2.145.2 → code_context_control-2.146.0}/code_context_control.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-context-control
-Version: 2.145.2
+Version: 2.146.0
 Summary: Local MCP code-intelligence for AI coding tools: surgical search/read/edit, agent-config version history, path-level access + masking guards, and a multi-project hub.
 Author-email: Dimitri Tselenchuk <dtselenc@gmail.com>
 License-Expression: Apache-2.0

{code_context_control-2.145.2 → code_context_control-2.146.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "code-context-control"
-version = "2.145.2"
+version = "2.146.0"
 description = "Local MCP code-intelligence for AI coding tools: surgical search/read/edit, agent-config version history, path-level access + masking guards, and a multi-project hub."
 readme = "README.md"
 requires-python = ">=3.10"

{code_context_control-2.145.2 → code_context_control-2.146.0}/services/activity_log.py

@@ -1,6 +1,6 @@
 """ActivityLog — Append-only JSONL activity log for C3 events."""
 import json
-from collections import Counter, deque
+from collections import Counter
 from datetime import datetime, timezone
 from pathlib import Path
 
@@ -75,6 +75,9 @@ class ActivityLog:
         """
         if not self.log_file.exists():
             return []
+        # A row of this type holds its JSON-encoded name, so a chunk or line
+        # without those bytes cannot match and is skipped unparsed.
+        needle = json.dumps(event_type).encode("utf-8")
         events: list = []
         try:
             with open(self.log_file, "rb") as handle:
@@ -86,12 +89,19 @@ class ActivityLog:
                     position -= step
                     handle.seek(position)
                     block = handle.read(step) + tail
-                    lines = block.split(b"\n")
-                    # The first element may be a partial line: keep it for the
-                    # next (earlier) chunk unless we are at the file start.
-                    tail = lines.pop(0) if position > 0 else b""
-                    for raw in reversed(lines):
-                        if not raw.strip():
+                    # The first line may be partial: keep it for the next
+                    # (earlier) chunk unless we are at the file start.
+                    tail = b""
+                    if position > 0:
+                        cut = block.find(b"\n")
+                        if cut < 0:
+                            tail = block
+                            continue
+                        tail, block = block[:cut], block[cut + 1:]
+                    if needle not in block:
+                        continue
+                    for raw in reversed(block.split(b"\n")):
+                        if needle not in raw:
                             continue
                         try:
                             entry = json.loads(raw.decode("utf-8", "replace"))
@@ -119,15 +129,13 @@ class ActivityLog:
         # far back in the log behind many tool_call entries.  Use a larger scan
         # window so they aren't missed.
         scan_factor = 100 if event_type else 5
-        tail = deque(maxlen=max(1, limit * scan_factor))
-        with open(self.log_file, encoding="utf-8") as handle:
-            for line in handle:
-                if line.strip():
-                    tail.append(line)
-        for line in reversed(tail):
+        needle = json.dumps(event_type).encode("utf-8") if event_type else b""
+        for raw in self._tail_lines(max(1, limit * scan_factor)):
+            if needle not in raw:
+                continue
             try:
-                entry = json.loads(line)
-            except json.JSONDecodeError:
+                entry = json.loads(raw)
+            except ValueError:
                 continue
             if event_type and entry.get("type") != event_type:
                 continue
@@ -141,6 +149,26 @@ class ActivityLog:
                 break
         return events
 
+    def _tail_lines(self, count: int, chunk_bytes: int = 64 * 1024) -> list:
+        """The last ``count`` non-blank lines as bytes, newest first."""
+        lines: list = []
+        with open(self.log_file, "rb") as handle:
+            handle.seek(0, 2)
+            position = handle.tell()
+            tail = b""
+            while position > 0 and len(lines) < count:
+                step = min(chunk_bytes, position)
+                position -= step
+                handle.seek(position)
+                parts = (handle.read(step) + tail).split(b"\n")
+                tail = parts.pop(0) if position > 0 else b""
+                for raw in reversed(parts):
+                    if raw.strip():
+                        lines.append(raw)
+                        if len(lines) >= count:
+                            break
+        return lines
+
     def get_stats(self) -> dict:
         """Counts by event type, total events, time range."""
         if not self.log_file.exists():

{code_context_control-2.145.2 → code_context_control-2.146.0}/services/ci_act.py

@@ -88,12 +88,33 @@ def _probe(cmd: list, timeout: int = 30) -> tuple:
         return 127, f"{type(exc).__name__}: {exc}"
 
 
-def availability() -> dict:
+#: How old an engine probe a display surface may reuse. The hub CI tab
+#: re-inspects every 2-10 s, and each fresh probe spawns act and docker.
+DISPLAY_PROBE_TTL_S = 30.0
+_display_probe: tuple = (0.0, None)
+
+
+def availability(max_age: float = 0.0) -> dict:
     """Can this engine run at all? Reports WHY not, never just False.
 
     Both halves are checked because they fail independently and a user with
     act installed but Docker stopped deserves to be told which one to fix.
+
+    ``max_age`` > 0 reuses a result at most that many seconds old from an
+    earlier call that also passed it; the default always probes, which is
+    what a run and ``doctor`` need.
     """
+    global _display_probe
+    if max_age <= 0:
+        return _probe_engine()
+    at, info = _display_probe
+    if info is None or time.monotonic() - at > max_age:
+        info = _probe_engine()
+        _display_probe = (time.monotonic(), info)
+    return dict(info)
+
+
+def _probe_engine() -> dict:
     act = find_act()
     info: dict = {"ok": False, "act": act, "act_version": "",
                   "docker": False, "docker_version": "", "reason": ""}

{code_context_control-2.145.2 → code_context_control-2.146.0}/services/ci_workflow.py

@@ -800,8 +800,11 @@ def inspect_project(project_path, event: str = "", engine: str = "auto") -> dict
     # Lazy: keeps parsing independent of the execution engines, and avoids
     # paying for a `docker version` probe on every import.
     from services import ci_act
-    engines = ci_act.availability() if engine in ("auto", "act") else {
-        "ok": False, "reason": "engine='native' — containers not considered"}
+    if engine in ("auto", "act"):
+        engines = ci_act.availability(max_age=ci_act.DISPLAY_PROBE_TTL_S)
+    else:
+        engines = {"ok": False,
+                   "reason": "engine='native' — containers not considered"}
     act_ok = bool(engines.get("ok"))
 
     native, container, foreign, unsupported = [], [], [], []

{code_context_control-2.145.2 → code_context_control-2.146.0}/services/credential_backup.py

@@ -310,20 +310,26 @@ def sync(project_paths=()) -> dict:
     return out
 
 
-def status(project_paths=()) -> dict:
+def status(project_paths=(), presence=None) -> dict:
     """Counts only — never a value. ``not_backed_up`` lists registered entries
     with a live value but no sealed copy; ``restorable`` lists entries whose
-    value is gone but whose copy is here."""
+    value is gone but whose copy is here.
+
+    ``presence`` maps realm to a ``credential_store.value_presence`` result
+    the caller already holds; any other vault is probed here, once."""
     data = _load()
     records = data.get("records", {}) if data else {}
     out: dict = {"enabled": bool(data), "path": str(backup_path() or ""),
                  "created": data.get("created", "") if data else "",
                  "backed_up": sum(len(r) for r in records.values()),
                  "restorable": [], "lost": [], "not_backed_up": []}
+    known = dict(presence or {})
     for scope, pp, realm_s, name in _realm_entries(project_paths):
         label = name if scope == "global" else f"{name} ({pp})"
         has_copy = name in records.get(realm_s, {})
-        if cs.is_resolvable(name, project_path=pp, scope=scope):
+        if realm_s not in known:
+            known[realm_s] = cs.value_presence(scope, pp)
+        if known[realm_s].get(name, False):
             if not has_copy:
                 out["not_backed_up"].append(label)
         elif has_copy: