viewer: expose app-status v1 for the live OpenWorlds surface

[100yenadmin]

Summary

Expose a machine-readable read-only status probe for the actual OpenWorlds viewer that the native app and harness are driving.

Interface

• GET /app-status
• GET /__worldos/app-status.json

Both return schema worldos.app-status.v1.

Required fields

• build: SHA and app/version string
• viewer: port, repo root, state root, provider, transcript/chat paths, chat line count
• art: art repo root, private image root, private-root-present boolean
• live session: attached campaign id, viewed campaign id, active session id, run id, move path, whether moves are writable, can_act, active actor id/name/kind, enabled action IDs/count
• endpoints: app-status, session-surface, campaign catalog, move, chat, activity, image

Acceptance criteria

• Route is read-only and never writes snapshot.json, move logs, chat logs, or provider state.
• Alias route returns the same payload as /app-status.
• Viewer config advertises the app-status endpoint.
• Static/route tests prove a live campaign returns actor, run id, enabled actions, and endpoint metadata.
• qa/ui_playtest_app.sh captures launcher and minted app-status snapshots as native evidence.

[100yenadmin]

Implementation PR opened: #488 (stacked on #487/#475). It adds read-only /app-status and /__worldos/app-status.json plus native harness evidence capture.

[100yenadmin]

App-status implementation PR #488 is live and green; architecture follow-up #489 documents the v1 contract, and evidence-export follow-up #490 consumes the endpoint for bundle creation.

[100yenadmin]

Current app-status v1 implementation is consolidated into PR #475 (draft #488 closed as superseded). It exposes read-only /app-status and /__worldos/app-status.json with build, provider, repo/state roots, private-art presence, live campaign/run, move sink, actor, enabled actions, and canonical endpoints; qa/ui_playtest_app.sh now captures launcher and minted-provider app-status JSON. Keep open until PR #475 merges. Richer ready/failure-bucket fields remain tracked by the agent-grade testability follow-up.

[100yenadmin]

Closed by PR #475 with follow-up hardening in #496. /app-status and /__worldos/app-status.json now expose the read-only live OpenWorlds status contract, qa/ui_playtest_app.sh captures launcher/minted app-status evidence, and failure/readiness buckets are represented for harness triage. #485/#486 remain open for bundle completion and gate-split follow-through.

[100yenadmin]

Fresh-main #497 extends app-status v1 with read-only readiness/health fields. Local deterministic smoke on 080497e reached ready_for_smoke=true and ready_for_play=true on same-port http://127.0.0.1:8899/app-status with private art, actor Abby, 5 enabled actions, and 5/5 accepted moves. Leaving open until #497 merges.