@mutmutco/cli 3.81.0 → 3.82.0

package/dist/main.cjs

@@ -5295,9 +5295,6 @@ function explicitRepoWorktreesRoot(root, repoRoot2, rootDirs) {
   const repoDir = rootDirs.find((name) => name.toLowerCase() === repoName.toLowerCase());
   return repoDir ? (0, import_node_path7.join)(root, repoDir) : root;
 }
-function strayWorktreeRootPaths(container, names, authoritativeRoot) {
-  return names.filter((name) => /worktrees/i.test(name)).map((name) => (0, import_node_path7.join)(container, name)).filter((path2) => !samePath(path2, authoritativeRoot));
-}
 function classifySiblingWorktreeDir(entry) {
   if (!entry.ownedByCurrentRepo) {
     return { skip: { path: entry.path, reason: "unknown-git-state", detail: entry.detail ?? "not proven current-repo owned" } };
@@ -6261,7 +6258,7 @@ function readSettingsAutoUpdate(raw, name) {
 var AUTO_UPDATE_TOGGLE_STEPS = "`/plugin` \u2192 Marketplaces tab \u2192 select the marketplace \u2192 Enable auto-update";
 var CATALOG_CONTENT_REF = "main";
 var CATALOG_REF_PIN_STEPS = `add \`"ref": "${CATALOG_CONTENT_REF}"\` to this marketplace's \`source\` in ~/.claude/plugins/known_marketplaces.json, then restart Claude`;
-var PIN_HEAL_COMMAND = "run `mmi-cli doctor --apply`";
+var PIN_HEAL_COMMAND = "run `mmi-cli doctor`";
 var ORG_MARKETPLACE_PINS = { autoUpdate: true, ref: CATALOG_CONTENT_REF };
 function resolveCatalogRef(probe) {
   const { name, registered, ref, autoUpdate } = probe;
@@ -6352,32 +6349,6 @@ var DEFAULT_SURFACE = "claude";
 function activityLogPath(cwd) {
   return repoRuntimeStatePath(cwd, "hooks", "activity.jsonl");
 }
-var REDACTOR_WINDOW_MS = 48 * 60 * 60 * 1e3;
-var REDACTOR_SCAN_BYTES = 512 * 1024;
-function redactorLivenessProbe(cwd, now = /* @__PURE__ */ new Date()) {
-  try {
-    const raw = (0, import_node_fs10.readFileSync)(activityLogPath(cwd), "utf8");
-    const tail = raw.length > REDACTOR_SCAN_BYTES ? raw.slice(raw.length - REDACTOR_SCAN_BYTES) : raw;
-    const floor = now.getTime() - REDACTOR_WINDOW_MS;
-    let failed = 0;
-    let lastTs;
-    for (const line of tail.split("\n")) {
-      if (!line.includes('"secret-redact"') || !line.includes('"failed"')) continue;
-      try {
-        const row = JSON.parse(line);
-        if (row.script !== "secret-redact" || row.outcome !== "failed") continue;
-        const ts = row.ts ? Date.parse(row.ts) : Number.NaN;
-        if (Number.isNaN(ts) || ts < floor) continue;
-        failed += 1;
-        if (!lastTs || row.ts > lastTs) lastTs = row.ts;
-      } catch {
-      }
-    }
-    return { failed, ...lastTs ? { lastTs } : {} };
-  } catch {
-    return void 0;
-  }
-}
 function appendHookActivity(cwd, entry) {
   try {
     const path2 = activityLogPath(cwd);
@@ -13943,62 +13914,6 @@ async function branchesMergedIntoBase(remote) {
   }
   return [...out];
 }
-var STRAY_ROOT_WALK_BUDGET_MS = 4e3;
-function measureWorktreeRoot(root, deadline) {
-  let dirs = 0;
-  let bytes = 0;
-  let partial = false;
-  const stack = [root];
-  let depth0 = true;
-  while (stack.length) {
-    if (Date.now() > deadline) {
-      partial = true;
-      break;
-    }
-    const current = stack.pop();
-    let entries;
-    try {
-      entries = (0, import_node_fs17.readdirSync)(current, { withFileTypes: true });
-    } catch {
-      continue;
-    }
-    for (const ent of entries) {
-      const child2 = (0, import_node_path15.join)(current, ent.name);
-      if (ent.isDirectory()) {
-        if (depth0) dirs++;
-        let isLink = false;
-        try {
-          (0, import_node_fs17.readlinkSync)(child2);
-          isLink = true;
-        } catch {
-        }
-        if (!isLink) stack.push(child2);
-      } else if (ent.isFile()) {
-        try {
-          bytes += (0, import_node_fs17.statSync)(child2).size;
-        } catch {
-        }
-      }
-    }
-    depth0 = false;
-  }
-  return partial ? { dirs, bytes, partial } : { dirs, bytes };
-}
-function worktreeRootsProbe(repoRoot2) {
-  const authoritative = siblingMmiWorktreesRoot(repoRoot2);
-  const container = (0, import_node_path15.dirname)(authoritative);
-  let names;
-  try {
-    names = (0, import_node_fs17.readdirSync)(container, { withFileTypes: true }).filter((ent) => ent.isDirectory()).map((ent) => ent.name);
-  } catch {
-    return { authoritative, stray: [] };
-  }
-  const deadline = Date.now() + STRAY_ROOT_WALK_BUDGET_MS;
-  return {
-    authoritative,
-    stray: strayWorktreeRootPaths(container, names, authoritative).map((path2) => ({ path: path2, ...measureWorktreeRoot(path2, deadline) }))
-  };
-}
 
 // src/repo-resolve.ts
 function slugOf(repoOrSlug) {
@@ -20901,6 +20816,13 @@ async function mintInstallationToken(deps) {
   }
   return { token: body.token, expiresAt: body.expires_at };
 }
+async function pollTokenOrUndefined(deps) {
+  try {
+    return (await mintInstallationToken(deps)).token;
+  } catch {
+    return void 0;
+  }
+}
 async function activateAppActor(commandPath3, env, mint) {
   const requested = (env[APP_ACTOR_ENV] ?? "").trim();
   if (!requested) return "personal";
@@ -20916,43 +20838,6 @@ async function activateAppActor(commandPath3, env, mint) {
   env.GH_TOKEN = minted.token;
   return "app";
 }
-async function probeRatePools(fetchLike, token) {
-  if (!token) return null;
-  try {
-    const res = await fetchLike("https://api.github.com/rate_limit", {
-      method: "GET",
-      headers: {
-        accept: "application/vnd.github+json",
-        "user-agent": "mmi-cli-app-actor",
-        authorization: `Bearer ${token}`
-      }
-    });
-    if (!res.ok) return null;
-    const body = await res.json();
-    const pool = (p) => typeof p?.remaining === "number" && typeof p?.limit === "number" && typeof p?.reset === "number" ? { remaining: p.remaining, limit: p.limit, reset: p.reset } : null;
-    const core = pool(body.resources?.core);
-    const graphql = pool(body.resources?.graphql);
-    if (!core || !graphql) return null;
-    return { core, graphql };
-  } catch {
-    return null;
-  }
-}
-function renderPoolDetail(probe) {
-  const fmt = (p) => `${p.remaining}/${p.limit} (resets ${new Date(p.reset * 1e3).toISOString().slice(11, 16)}Z)`;
-  return `core ${fmt(probe.core)}, graphql ${fmt(probe.graphql)}`;
-}
-function checkGithubPools(probe) {
-  if (!probe) return [];
-  const lines = [];
-  lines.push(probe.personal ? { id: "github-pools-personal", ok: true, label: "github pools (personal)", detail: renderPoolDetail(probe.personal) } : { id: "github-pools-personal", ok: false, label: "github pools (personal)", detail: "rate_limit unreadable", fix: "check `gh auth status`" });
-  if (typeof probe.app === "string") {
-    lines.push({ id: "github-pools-app", ok: false, label: "github pools (app actor)", fix: probe.app });
-  } else if (probe.app) {
-    lines.push({ id: "github-pools-app", ok: true, label: "github pools (app actor)", detail: renderPoolDetail(probe.app) });
-  }
-  return lines;
-}
 
 // src/box-commands.ts
 var import_node_fs25 = require("node:fs");
@@ -21461,12 +21346,6 @@ function spliceDoc(docText, generatedSection) {
   }
   return docText.slice(0, start) + generatedSection + docText.slice(end + DOC_END_MARKER.length);
 }
-function driftClearableFrom(drift, repoName) {
-  if (drift.class !== "file-vs-registry-stale") return false;
-  const slash = drift.name.indexOf("/");
-  if (slash <= 0) return false;
-  return drift.name.slice(0, slash).toLowerCase() === repoName.toLowerCase();
-}
 var HARBOUR_LLM_LAUNCHERS = /* @__PURE__ */ new Set(["cursor-agent"]);
 function isHarbourLlmLauncher(executor) {
   return HARBOUR_LLM_LAUNCHERS.has(executor);
@@ -24939,8 +24818,25 @@ function teardownWorktreeStage(worktreePath) {
 
 // src/pr-checks-rest.ts
 var REST_GH_TIMEOUT_MS = 2e4;
+var pollTokenProvider;
+var pollTokenOnce;
+function setPollTokenProvider(provider) {
+  pollTokenProvider = provider;
+  pollTokenOnce = void 0;
+}
+async function pollToken() {
+  if (!pollTokenProvider) return void 0;
+  pollTokenOnce ??= pollTokenProvider().catch(() => void 0);
+  return pollTokenOnce;
+}
 async function defaultGhApi(args) {
-  const { stdout } = await execFileP2("gh", ["api", ...args], { timeout: REST_GH_TIMEOUT_MS });
+  const token = await pollToken();
+  const { stdout } = await execFileP2("gh", ["api", ...args], {
+    timeout: REST_GH_TIMEOUT_MS,
+    // Only when a token was actually minted: passing `env` at all would otherwise replace the
+    // inherited environment wholesale, and `gh` needs the rest of it (PATH, GH_HOST, config home).
+    ...token ? { env: { ...process.env, GH_TOKEN: token } } : {}
+  });
   return stdout;
 }
 function classifyCheckRun(run) {
@@ -28235,7 +28131,7 @@ function planSurfaceRepair(diagnosis) {
     owner: "mmi-cli",
     command: "mmi-cli plugin heal",
     changes: ["replace the active MMI plugin installation", `reload via ${descriptor.reload}`],
-    instruction: `run \`mmi-cli doctor --apply\` (or \`mmi-cli plugin heal\`), then ${reloadInstruction(descriptor)}`
+    instruction: `run \`mmi-cli doctor\` (or \`mmi-cli plugin heal\`), then ${reloadInstruction(descriptor)}`
   };
 }
 function buildSurfaceDoctorCheck(diagnosis) {
@@ -28341,34 +28237,6 @@ function checkRepoWorktrees(probe) {
     ]
   };
 }
-function formatBytes(bytes, partial) {
-  const prefix = partial ? "\u2265" : "";
-  return bytes >= 1e9 ? `${prefix}${(bytes / 1e9).toFixed(2)} GB` : `${prefix}${(bytes / 1e6).toFixed(1)} MB`;
-}
-function checkWorktreeRoots(probe) {
-  if (!probe) return null;
-  const evidence = [
-    `scanned by worktree gc/list: ${probe.authoritative}`,
-    ...probe.stray.length ? probe.stray.map((s) => `unreachable by any gc: ${s.path} \u2014 ${s.dirs} dir(s), ${formatBytes(s.bytes, s.partial)}`) : ["no other *worktrees* directory beside this repo"]
-  ];
-  if (!probe.stray.length) return { ok: true, id: "worktree-roots", label: "worktree roots", verbose: evidence };
-  const named = probe.stray.map((s) => `${s.path} (${s.dirs} dir(s), ${formatBytes(s.bytes, s.partial)})`).join("; ");
-  const cutShort = probe.stray.some((s) => s.partial) ? " (a \u2265 figure is a floor \u2014 the size walk hit its time budget, so the real total is larger)" : "";
-  return {
-    ok: false,
-    id: "worktree-roots",
-    label: "worktree roots",
-    // #3485: report-only in EVERY mode means report-only in the exit code too. `worktree gc --root` does
-    // exist and is the eventual fix, but this row is deliberately not a gate: the remedy is a human
-    // review of directories that may hold unlanded work, and a size-based auto-sweep once nearly deleted
-    // an unlanded correctness fix. Counting it made `mmi-cli doctor` exit 1 until someone swept by hand.
-    reportOnly: true,
-    // The fix is a review, never a delete: `gc --root` still refuses anything it cannot classify as dead,
-    // and doctor itself — with or without --apply — never touches these directories.
-    fix: `${probe.stray.length} worktrees root(s) outside ${probe.authoritative} \u2014 ${named}; no gc scans them. Review, then sweep deliberately from the owning repo with \`mmi-cli worktree gc --root <path> --apply\` (report-only here: doctor never deletes these)${cutShort}`,
-    verbose: evidence
-  };
-}
 function checkCodexHookTrust(probe, displayName = "Codex") {
   if (!probe?.applicable) return null;
   const evidence = [
@@ -28479,81 +28347,6 @@ function checkTrainSync(result) {
     verbose: evidence
   };
 }
-function checkSchedules(probe) {
-  if (!probe) return null;
-  const evidence = [
-    `${probe.armed} armed (${probe.live} live, ${probe.declared} declared)`,
-    ...probe.incomplete.map((i) => `incomplete: ${i}`),
-    ...probe.drift.map((d) => `drift: ${d}`)
-  ];
-  const clearableHere = probe.clearableHere ?? 0;
-  if (probe.incomplete.length) {
-    return {
-      ok: false,
-      id: "schedules",
-      label: "schedules",
-      // #3485: ruled report-only — an unreadable source is a read failure somewhere in the org, and
-      // nothing in this checkout clears it.
-      reportOnly: true,
-      detail: `${probe.incomplete.length} source(s) unreadable`,
-      fix: "run `mmi-cli org schedules` for the full report \u2014 the notebook may be missing armed entries",
-      verbose: evidence
-    };
-  }
-  if (probe.drift.length) {
-    return {
-      ok: false,
-      id: "schedules",
-      label: "schedules",
-      // #3485 ruled this row report-only because the drift classes are owned by other repos. #3492 makes
-      // that conditional rather than blanket: when a finding IS clearable from this checkout — a
-      // `file-vs-registry-stale` row for this repo, one `org schedules register` away — the row gates
-      // like any other actionable red. Exempting a fault the operator can fix in one command is the
-      // tolerated-red failure the tier exists to prevent, not an instance of it.
-      ...clearableHere > 0 ? {} : { reportOnly: true },
-      detail: `${probe.drift.length} drift finding(s)`,
-      fix: clearableHere > 0 ? `${clearableHere} of ${probe.drift.length} clearable from this repo \u2014 from an up-to-date checkout run \`mmi-cli org schedules register\` here, then \`mmi-cli org schedules\` for the rest (each line names its own per-class remedy, applied in the owning repo)` : "run `mmi-cli org schedules` \u2014 each drift line names its per-class remedy (file/registry/live mismatch or harbour enforcement), applied in the owning repo",
-      verbose: evidence
-    };
-  }
-  return { ok: true, id: "schedules", label: "schedules", detail: `${probe.armed} armed`, verbose: evidence };
-}
-function checkDocsAudit(probe) {
-  if (!probe) return null;
-  if (!probe.armed) {
-    return { ok: true, id: "docs-audit", label: "docs-audit", detail: "janitor not armed", verbose: [probe.detail] };
-  }
-  if (!probe.ok) {
-    return {
-      ok: false,
-      id: "docs-audit",
-      label: "docs-audit",
-      // #3485: ruled report-only — the remedy is re-running or re-arming the janitor in the repo that
-      // owns it. `mmi-cli docs audit record` can write a verdict from here, but hand-writing one to clear
-      // a dead-man check defeats the check (#3067 pillar 4: silence is an alarm, never a success).
-      reportOnly: true,
-      fix: `${probe.detail} \u2014 re-run the janitor in the owning repo or re-arm its schedule (the remedy never lives in this doctor)`,
-      verbose: [probe.detail]
-    };
-  }
-  return { ok: true, id: "docs-audit", label: "docs-audit", detail: probe.detail, verbose: [probe.detail] };
-}
-function checkRedactorLiveness(probe) {
-  if (!probe) return null;
-  const evidence = [`secret-redact failed rows in the last 48h: ${probe.failed}${probe.lastTs ? ` (last ${probe.lastTs})` : ""}`];
-  if (probe.failed === 0) {
-    return { ok: true, id: "redactor-liveness", label: "secret-redact liveness", verbose: evidence };
-  }
-  return {
-    ok: false,
-    id: "redactor-liveness",
-    label: "secret-redact liveness",
-    reportOnly: true,
-    detail: `${probe.failed} crash marker${probe.failed === 1 ? "" : "s"} in 48h`,
-    fix: "the redactor is crashing during scans \u2014 read `.git/mmi-runtime/hooks/activity.jsonl` for the error and fix it; every crash is a scan that never ran",
-    verbose: evidence
-  };
-}
 function checkSessionPayload(probe) {
   if (!probe) return null;
   const { chars } = probe;
@@ -28608,13 +28401,14 @@ function gcReapable(plan) {
   return plan.branches.length + plan.trackingRefs.length + plan.worktreeDirs.length;
 }
 async function runDoctorClean(opts, io, deps) {
-  const applyEnv = Boolean(opts.apply) || Boolean(opts.preflight);
-  const applyRepo = Boolean(opts.apply) && opts.repoWrites !== false;
+  const full = !opts.fast && !opts.banner && !opts.preflight;
+  const applyEnv = full || Boolean(opts.preflight);
+  const applyRepo = full && opts.repoWrites !== false;
   const lane = {
     banner: Boolean(opts.banner),
     fast: Boolean(opts.fast),
     preflight: Boolean(opts.preflight),
-    full: !opts.fast && !opts.banner && !opts.preflight
+    full
   };
   const probeReleased = !opts.fast || Boolean(opts.self);
   const probeAws = !opts.fast && !opts.banner;
@@ -28712,9 +28506,6 @@ async function runDoctorClean(opts, io, deps) {
   async function runGithubAuthRow() {
     emitNow(checkGithubAuth({ login, ghInstalled: ghInstalled2, reach }));
   }
-  async function runGithubPoolsRows() {
-    for (const pool of checkGithubPools(await deps.githubPools())) emitNow(pool);
-  }
   async function runAwsRow() {
     const aws = checkAwsIdentity({ isOrgRepo, probed: probeAws, callerArn });
     if (aws) emitNow(aws);
@@ -28735,7 +28526,7 @@ async function runDoctorClean(opts, io, deps) {
       emitNow({ ok: true, id: "gitignore-block", label: "gitignore block", detail: "rewrote managed block", verbose: giEvidence });
       restartPending = true;
     } else {
-      emitNow({ ok: false, id: "gitignore-block", label: "gitignore block", fix: "run `mmi-cli doctor --apply` to write the org-managed .gitignore block", verbose: giEvidence });
+      emitNow({ ok: false, id: "gitignore-block", label: "gitignore block", fix: "run `mmi-cli doctor` (without --no-repo-writes) to write the org-managed .gitignore block", verbose: giEvidence });
     }
   }
   async function runPluginCacheRow() {
@@ -28755,35 +28546,6 @@ async function runDoctorClean(opts, io, deps) {
     }
     for (const row of deps.marketplaceRows()) emitNow(row);
   }
-  async function runSchedulesRow() {
-    const probe = await deps.schedulesNotebook().catch((e) => ({
-      armed: 0,
-      live: 0,
-      declared: 0,
-      incomplete: [`schedules probe failed \u2014 ${e.message}`],
-      drift: []
-    }));
-    const sched = checkSchedules(probe);
-    if (sched) emitNow(sched);
-  }
-  async function runRedactorRow() {
-    const redactor = checkRedactorLiveness(deps.redactorLiveness());
-    if (redactor) emitNow(redactor);
-  }
-  async function runDocsAuditRow() {
-    const probe = await deps.docsAudit().catch((e) => ({
-      armed: true,
-      ok: false,
-      detail: `docs-audit probe failed \u2014 ${e.message}`
-    }));
-    const docsAudit2 = checkDocsAudit(probe);
-    if (docsAudit2) emitNow(docsAudit2);
-  }
-  async function runWorktreeRootsRow() {
-    const probe = await deps.worktreeRoots().catch(() => void 0);
-    const roots = checkWorktreeRoots(probe);
-    if (roots) emitNow(roots);
-  }
   async function runTrainSyncRow() {
     try {
       emitNow(checkTrainSync(await deps.syncTrain()));
@@ -28839,7 +28601,7 @@ async function runDoctorClean(opts, io, deps) {
           // #3574: `${n} stale` was prepended to `fix` because the ✗ branch would not render `detail` —
           // the same fact this row already puts in `detail` on its ✓ path four lines up. One convention now.
           detail: `${n} stale`,
-          fix: "run `mmi-cli doctor --apply` to reap merged branches, stale refs, and dead worktrees",
+          fix: "run `mmi-cli doctor` (without --no-repo-writes) to reap merged branches, stale refs, and dead worktrees",
           verbose: gcEvidence
         });
       }
@@ -28853,7 +28615,7 @@ async function runDoctorClean(opts, io, deps) {
       emitNow({ id: "scratch", ok: true, label: "scratch", detail: pruned ? `removed ${pruned} aged item(s)` : "nothing stale", verbose: scratchEvidence });
       if (pruned) restartPending = true;
     } else {
-      emitNow(scratch.plan.safeAuto.length === 0 ? { id: "scratch", ok: true, label: "scratch", verbose: scratchEvidence } : { id: "scratch", ok: false, label: "scratch", detail: `${scratch.plan.safeAuto.length} aged item(s)`, fix: "run `mmi-cli doctor --apply`", verbose: scratchEvidence });
+      emitNow(scratch.plan.safeAuto.length === 0 ? { id: "scratch", ok: true, label: "scratch", verbose: scratchEvidence } : { id: "scratch", ok: false, label: "scratch", detail: `${scratch.plan.safeAuto.length} aged item(s)`, fix: "run `mmi-cli doctor` (without --no-repo-writes)", verbose: scratchEvidence });
     }
   }
   const table = [
@@ -28862,17 +28624,12 @@ async function runDoctorClean(opts, io, deps) {
     { id: "plugin", when: true, run: runPluginRow },
     { id: "cli-version", when: true, run: runCliRow },
     { id: "github-auth", when: true, run: runGithubAuthRow },
-    { id: "github-pools", when: lane.full, run: runGithubPoolsRows },
     { id: "aws-identity", when: true, run: runAwsRow },
     { id: "repo-worktrees", when: true, run: runRepoWorktreesRow },
     { id: "gitignore-block", when: isOrgRepo, run: runGitignoreRow },
     { id: "plugin-cache", when: true, run: runPluginCacheRow },
     { id: "sessionstart-payload", when: true, run: runSessionPayloadRow },
     { id: "marketplace", when: true, run: runMarketplaceRows },
-    { id: "schedules", when: lane.full, run: runSchedulesRow },
-    { id: "redactor-liveness", when: lane.full, run: runRedactorRow },
-    { id: "docs-audit", when: lane.full, run: runDocsAuditRow },
-    { id: "worktree-roots", when: lane.full, run: runWorktreeRootsRow },
     // The two most expensive things in this file — a real `git fetch` plus train-branch fast-forward,
     // and a `gh`-backed gc sweep with a 20s timeout — so org repos on the full lane only (#3485).
     { id: "train-branches", when: isOrgRepo && lane.full, run: runTrainSyncRow },
@@ -29170,9 +28927,6 @@ async function withEnvHealLock(what, run) {
     return { ok: false, detail: `${what} could not take the env-heal lock \u2014 ${e.message}` };
   }
 }
-function docsJanitorScheduleId(repo) {
-  return `${repo.split("/").pop()}/docs-janitor`;
-}
 function throttledReleasedVersion() {
   let note;
   return {
@@ -29193,8 +28947,6 @@ function throttledReleasedVersion() {
 }
 function mmiDoctorDeps(opts = {}) {
   const throttled = opts.throttleReleasedRead ? throttledReleasedVersion() : void 0;
-  let notebook;
-  const notebookOnce = () => notebook ??= fetchNotebook();
   let surfaceEvidence;
   let surfaceEvidenceRead = false;
   const surfaceEvidenceOnce = (isOrgRepo) => {
@@ -29218,11 +28970,6 @@ function mmiDoctorDeps(opts = {}) {
     };
     return surfaceEvidence;
   };
-  const docsJanitorArmedAt = async (repo) => {
-    const wanted = docsJanitorScheduleId(repo);
-    const { entries } = await notebookOnce();
-    return entries.find((e) => e.scheduleId === wanted)?.armedAt;
-  };
   return {
     githubLogin,
     ghInstalled,
@@ -29261,24 +29008,6 @@ function mmiDoctorDeps(opts = {}) {
     // writes to the harness-owned cache itself. Same plan builder the verb uses, so the two never disagree.
     // No `withBytes` here: doctor runs on EVERY SessionStart, and sizing means recursively stat'ing every
     // stale version tree. The count comes from one cheap readdir; `plugin-prune` reports the MB.
-    // #3025: both identities' rate pools. Personal probes with the ambient token; the App line only exists
-    // when this machine can mint — a vault-denied read means "not an automation host", not a failure.
-    githubPools: async () => {
-      const deps = appActorDeps();
-      const personal = await probeRatePools(deps.fetch, await githubToken());
-      let app = null;
-      try {
-        const minted = await mintInstallationToken(deps);
-        app = await probeRatePools(deps.fetch, minted.token) ?? "token minted but rate_limit probe failed \u2014 check network/App permissions";
-      } catch (e) {
-        if (e instanceof AppActorError) {
-          if (e.code !== "vault-denied") app = e.message;
-        } else {
-          app = "app actor probe failed unexpectedly \u2014 run `MMI_ACTOR=app mmi-cli pr checks-wait --help` to reproduce";
-        }
-      }
-      return { personal, app };
-    },
     pluginCache: () => {
       const surface = detectSurface(process.env);
       const configRoot = surfaceConfigRoot(surface);
@@ -29297,41 +29026,9 @@ function mmiDoctorDeps(opts = {}) {
         stagingBytes: plan.stagingBytes
       };
     },
-    // #3008: the schedules-notebook drift probe, compacted for the check. Full doctor only — the gather in
-    // runDoctorClean skips this dep entirely on fast/banner/preflight runs.
-    schedulesNotebook: async () => {
-      const { entries, incomplete, drift, reconciliation } = await notebookOnce();
-      const repoName = await repoSlug().catch(() => "");
-      const clearableHere = repoName ? reconciliation.filter((d) => driftClearableFrom(d, repoName)).length : 0;
-      return {
-        armed: entries.length,
-        live: entries.filter((e) => e.resolved === "live").length,
-        declared: entries.filter((e) => e.resolved === "declared").length,
-        incomplete,
-        drift,
-        clearableHere
-      };
-    },
-    // #3075: the docs-audit dead-man verdict probe, compacted for the check. Full doctor only, exactly like
-    // schedulesNotebook — a registry read the SessionStart banner / --preflight / --fast lanes never pay for.
-    // The 404/absent route maps to `armed:false` (an informational "not armed" line), never a false RED.
-    docsAudit: async () => {
-      const repo = await currentRepoFullName();
-      const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-      const armedAt = await docsJanitorArmedAt(repo).catch(() => void 0);
-      const status = docsAuditStatus(await readDocsAuditFetch(repo), { repo, today, armedAt });
-      return { armed: status.state !== "not-armed", ok: status.ok, detail: status.line };
-    },
-    // #3471: the competing-worktrees-roots probe. Full doctor only (the gather skips it on
-    // fast/banner/preflight), and READ-ONLY by construction — it stats, it never removes. Nothing here is
-    // wired to a reaper, in either mode.
-    worktreeRoots: async () => worktreeRootsProbe(await repoRoot()),
     // #3470: what the SessionStart hook LAST emitted, measured at emission by the session-start verb below.
     // A local record read — cheap enough for every lane, including the banner.
     sessionPayload: () => readSessionPayload(process.cwd()),
-    // #3630: recent secret-redact crash markers from the shared hook-activity trace — with the Stop
-    // hook retired, the full/scheduled doctor is the trace's only reader. Local tail-scan, fail-soft.
-    redactorLiveness: () => redactorLivenessProbe(process.cwd()),
     // #3485 items 9 and 8: why the MMI plugin has never printed an "updated — please restart" notice, and
     // which branch it would pick one up from. Two local file reads, no network, fail-soft to no rows.
     marketplaceRows: () => {
@@ -29342,8 +29039,8 @@ function mmiDoctorDeps(opts = {}) {
           MMI_MARKETPLACE_NAME,
           readFileSyncSafe((0, import_node_path34.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs35.readFileSync),
           readFileSyncSafe((0, import_node_path34.join)(home, ".claude", "settings.json"), import_node_fs35.readFileSync),
-          // #3974: this CLI heals these rows, so report mode names `doctor --apply` rather than the hand
-          // edit. Unconditional — it is a fact about mmi-cli, not about whether --apply was passed.
+          // #3974: this CLI heals these rows, so report mode names the doctor run rather than the hand
+          // edit. Unconditional — it is a fact about mmi-cli, not about the lane this run is on.
           true
         );
       } catch {
@@ -29536,6 +29233,7 @@ function appActorDeps() {
     fetch: (url, init) => fetch(url, init)
   };
 }
+setPollTokenProvider(() => pollTokenOrUndefined(appActorDeps()));
 function shouldMarkWorktreeActivity(commandPath3) {
   return commandPath3.split(" ")[0] !== "worktree";
 }
@@ -32018,14 +31716,13 @@ access.command("audit").description("audit collaborator roles + train-branch pus
 });
 access.command("capabilities").description("enumerate your effective vault reach \u2014 every credential NAME + tier + scope you can read/use across project + org/master tiers (names only, no values) (#1615)").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--json", "machine-readable output").action((o) => withSecrets((d) => secretsCapabilities(d, o)));
 var isWin2 = process.platform === "win32";
-program2.command("doctor").description("check onboarding gates and auto-heal CLI/plugin wiring; use --verbose for the full audit checklist").option("--banner", "one-line resume summary; silent when all gates pass").option("--fast", "offline-safe fast lane; skips slow checks and network probes").option("--preflight", "eager version/plugin-heal (env repairs only \u2014 never the repo working tree) with upfront notice when stale; silent when healthy (#1871)").option("--verbose", "print the evidence behind every check \u2014 probes, resolved paths, versions compared, and the names behind each count (#2977)").option("--guide", "print the MMI Agentic Onboarding guide URL").option("--json", "machine-readable output (read-only inspection \u2014 performs no repairs)").option("--apply", "perform the same auto-repairs as the interactive run (combine with --json for a machine-readable repair run)").option("--no-repo-writes", "env/plugin repairs only \u2014 never mutate the repo working tree; report pending managed .gitignore repairs with the follow-up command (for train preflights)").option("--self", "verify CLI/plugin version parity and gh auth reach; suggests plugin-heal on a hard gap (reads the published version, so not offline-safe) (#2689)").addHelpText("after", "\nExit codes:\n  0  no hard gaps remain; advisory gaps may exist\n  1  one or more included hard checks failed\n\nThree rows (worktree roots, schedules, docs-audit) are report-only: they still print \u2717 with their fix,\nbut never move the exit code, because their remedy is a deliberate human review or lives in the repo\nthat owns the fault. Every other red row gates, including ones only you can clear by hand (#3485).\n\n--banner keeps the legacy SessionStart contract and returns 0 unless the process crashes.\n").action(async (opts) => {
+program2.command("doctor").description("heal CLI/plugin wiring and clean up repo cruft \u2014 repairs run by default (#3975); use --verbose for the full audit checklist").option("--banner", "one-line resume summary; silent when all gates pass").option("--fast", "offline-safe fast lane; read-only, skips slow checks and network probes").option("--preflight", "eager version/plugin-heal (env repairs only \u2014 never the repo working tree) with upfront notice when stale; silent when healthy (#1871)").option("--verbose", "print the evidence behind every check \u2014 probes, resolved paths, versions compared, and the names behind each count (#2977)").option("--guide", "print the MMI Agentic Onboarding guide URL").option("--json", "machine-readable output (an output format \u2014 repairs still run by lane)").option("--apply", "deprecated no-op: repairs run by default now (#3975); kept so older instructions still parse").option("--no-repo-writes", "env/plugin repairs only \u2014 never mutate the repo working tree; report pending managed .gitignore repairs with the follow-up command (for train preflights)").option("--self", "verify CLI/plugin version parity and gh auth reach; suggests plugin-heal on a hard gap (reads the published version, so not offline-safe) (#2689)").addHelpText("after", "\nExit codes:\n  0  no hard gaps remain; advisory gaps may exist\n  1  one or more included hard checks failed\n\nA plain run heals env drift (CLI, plugin, marketplace pins) and cleans repo cruft (gitignore block,\nmerged branches, dead worktrees, aged scratch) automatically (#3975). --no-repo-writes keeps the\nworking tree untouched for train preflights; --banner/--fast/--self are read-only lanes.\n\n--banner keeps the legacy SessionStart contract and returns 0 unless the process crashes.\n").action(async (opts) => {
   if (opts.guide) {
     consoleIo.log("MMI Agentic Onboarding: docs/Architecture/agentic-dev-environment.md");
     return;
   }
   process.exitCode = await runDoctorClean(
     {
-      apply: Boolean(opts.apply),
       repoWrites: opts.repoWrites,
       banner: opts.banner,
       preflight: opts.preflight,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "3.81.0",
+  "version": "3.82.0",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",