fix(cli): compact stale device status

[thymikee]

Summary

Make normal device status output compact by summarizing proven-stale advisory claims.
Add selector-preserving --stale inspection, help, docs, and coverage without implying unsafe cleanup.

Validation

• pnpm format:check && pnpm typecheck && pnpm lint && pnpm exec vitest run src/tests/cli-device-status.test.ts src/cli-schema/command-schema-guards.test.ts
• pnpm check:fallow --base origin/main
• Live daemonless status verification against the host claim registry
• SkillGym runner invocation crashed before evaluation (Codex and Claude runners)

[github-actions]

PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-07-25 09:44 UTC

[github-actions]

Size Report

Metric	Base	Current	Diff
JS raw	1.82 MB	1.82 MB	+976 B
JS gzip	582.3 kB	582.7 kB	+315 B
npm tarball	696.5 kB	696.8 kB	+298 B
npm unpacked	2.44 MB	2.44 MB	+976 B

Startup median (7 runs, lower is better):

Scenario	Base	Current	Diff
CLI --version	26.7 ms	27.4 ms	+0.7 ms
CLI --help	56.0 ms	57.0 ms	+0.9 ms

Top changed chunks:

Chunk	Raw diff	Gzip diff
dist/src/cli.js	+697 B	+227 B
dist/src/registry.js	+147 B	+46 B

[thymikee]

Reviewed exact head e3be0cd. P1 — shell-quote scoped stale-inspection selectors. buildStaleInspectionCommand interpolates selector values verbatim. A common selector such as --device "iPhone 17 Pro" is rendered as --device iPhone 17 Pro --stale, which no longer parses as the original selector. Use shellQuoteIfNeeded for platform/device/udid/serial and add a spaced/metacharacter regression; the current test covers only a shell-safe serial. Otherwise the daemonless/read-only route, stale classification, bounded default output, schema/help/docs, and green CI look good. No ready label until this is fixed.

[thymikee]

Addressed the confirmed review in 987955a. Generated stale-inspection follow-up commands now apply shellQuoteIfNeeded to platform, device, UDID, and serial selectors. Added a regression using a device name containing spaces and a semicolon, while preserving the daemonless, compact status route. Validation: format, typecheck, lint, focused Vitest, integration-progress, and Fallow all pass.

[thymikee]

Reviewed exact head 987955a3c7c73b512cde276aabd4a5a8d6b85cdd — clean. The stale-inspection follow-up now shell-quotes platform/device/UDID/serial selectors, and the new spaced-plus-semicolon selector regression would fail with the former raw interpolation. The daemonless local-only status route, observational no-cleanup scope, schema/help, and all checks on this head are coherent. Ready for human review.

Residual risk: no separately authorized cross-vendor review ran.