perf(cli): trim gateway status startup work

src/cli/daemon-cli/probe.ts

@@ -42,32 +42,8 @@ export async function probeGatewayStatus(opts: {
         enabled: opts.json !== true,
       },
       async () => {
-        if (opts.requireRpc) {
-          const { callGateway } = await import("../../gateway/call.js");
-          await callGateway({
-            url: opts.url,
-            token: opts.token,
-            password: opts.password,
-            tlsFingerprint: opts.tlsFingerprint,
-            method: "status",
-            timeoutMs: opts.timeoutMs,
-            ...(opts.configPath ? { configPath: opts.configPath } : {}),
-          });
-          const { probeGateway } = await loadProbeGatewayModule();
-          const authProbe = await probeGateway({
-            url: opts.url,
-            auth: {
-              token: opts.token,
-              password: opts.password,
-            },
-            tlsFingerprint: opts.tlsFingerprint,
-            timeoutMs: opts.timeoutMs,
-            includeDetails: false,
-          }).catch(() => null);
-          return { ok: true as const, authProbe };
-        }
         const { probeGateway } = await loadProbeGatewayModule();
-        return await probeGateway({
+        const probe = await probeGateway({
           url: opts.url,
           auth: {
             token: opts.token,
@@ -75,12 +51,13 @@ export async function probeGatewayStatus(opts: {
           },
           tlsFingerprint: opts.tlsFingerprint,
           timeoutMs: opts.timeoutMs,
-          includeDetails: false,
+          includeDetails: opts.requireRpc === true,
+          detailLevel: opts.requireRpc === true ? "full" : "none",
         });
+        return probe;
       },
     );
-    const auth =
-      "auth" in result ? result.auth : "authProbe" in result ? result.authProbe?.auth : undefined;
+    const auth = result.auth;
     if (result.ok) {
       return {
         ok: true,
@@ -89,8 +66,8 @@ export async function probeGatewayStatus(opts: {
           kind === "read"
             ? auth?.capability && auth.capability !== "unknown"
               ? auth.capability
-              : // The status RPC proves read access even when a follow-up hello probe
-                // cannot recover richer scope metadata.
+              : // A successful detailed probe performs read RPCs, so it proves read access
+                // even when hello metadata cannot recover richer scope metadata.
                 "read_only"
             : auth?.capability,
         auth,

src/cli/daemon-cli/status.gather.test.ts

@@ -207,6 +207,7 @@ describe("gatherDaemonStatus", () => {
     expect(status.gateway?.probeUrl).toBe("wss://127.0.0.1:19001");
     expect(status.rpc?.url).toBe("wss://127.0.0.1:19001");
     expect(status.rpc?.ok).toBe(true);
+    expect(inspectGatewayRestart).not.toHaveBeenCalled();
   });
 
   it("forwards requireRpc and configPath to the daemon probe", async () => {
@@ -542,7 +543,12 @@ describe("gatherDaemonStatus", () => {
     expect(status.rpc).toBeUndefined();
   });
 
-  it("surfaces stale gateway listener pids from restart health inspection", async () => {
+  it("surfaces stale gateway listener pids from restart health inspection when probe fails", async () => {
+    callGatewayStatusProbe.mockResolvedValueOnce({
+      ok: false,
+      url: "ws://127.0.0.1:19001",
+      error: "timeout",
+    });
     inspectGatewayRestart.mockResolvedValueOnce({
       runtime: { status: "running", pid: 8000 },
       portUsage: {

src/cli/daemon-cli/status.gather.ts

@@ -207,13 +207,18 @@ async function loadDaemonConfigContext(
     resolveStateDir(mergedDaemonEnv as NodeJS.ProcessEnv),
   );
 
-  const cliIO = createConfigIO({ env: process.env, configPath: cliConfigPath });
+  const cliIO = createConfigIO({
+    env: process.env,
+    configPath: cliConfigPath,
+    pluginValidation: "skip",
+  });
   const sharesDaemonConfigContext = !serviceEnv && cliConfigPath === daemonConfigPath;
   const daemonIO = sharesDaemonConfigContext
     ? cliIO
     : createConfigIO({
         env: mergedDaemonEnv,
         configPath: daemonConfigPath,
+        pluginValidation: "skip",
       });
 
   const cliSnapshotPromise = cliIO.readConfigFileSnapshot().catch(() => null);
@@ -444,7 +449,7 @@ export async function gatherDaemonStatus(
     rpcAuthWarning = undefined;
   }
   const health =
-    opts.probe && loaded
+    opts.probe && loaded && rpc?.ok !== true
       ? await loadRestartHealthModule()
           .then(({ inspectGatewayRestart }) =>
             inspectGatewayRestart({