arkgate 4.6.1 → 4.6.3

package/bin/ark.mjs

@@ -35,6 +35,7 @@ import {
 } from './lib/prepare-change.mjs';
 import { runStatusCommand } from './lib/status-command.mjs';
 import { runAgentProjectionCommand } from './lib/agent-projection-command.mjs';
+import { setupUsage, setupUsageAll, upgradeUsage } from './lib/first-run-help.mjs';
 
 const here = path.dirname(fileURLToPath(import.meta.url));
 const arkCheck = path.join(here, 'ark-check.mjs');
@@ -90,13 +91,14 @@ function parseArgs(argv) {
     check: false,
     stdout: false,
     help: false,
+    all: false,
     version: false,
   };
 
   const requireValue = (flag, index) => {
     const value = argv[index + 1];
     if (value === undefined || value.startsWith('-')) {
-      throw new Error(`Missing value for ${flag}. Run ark --help for usage.`);
+      throw new Error(`Missing value for ${flag}. Run arkgate --help for usage.`);
     }
     return value;
   };
@@ -143,79 +145,15 @@ function parseArgs(argv) {
     else if (arg === '--check') args.check = true;
     else if (arg === '--stdout') args.stdout = true;
     else if (arg === '--help' || arg === '-h' || arg === 'help') args.help = true;
+    else if (arg === '--all') args.all = true;
     else if (arg === '--version' || arg === '-V') args.version = true;
     else if (!arg.startsWith('-') && args.command === undefined) args.command = arg;
-    else throw new Error(`Unknown argument: ${arg}. Run ark --help for usage.`);
+    else throw new Error(`Unknown argument: ${arg}. Run arkgate --help for usage.`);
   }
 
   return args;
 }
 
-function usage() {
-  return `Usage:
-  ark start   [--root <project>] [--tools <host>] [--require-write-hook <host>] [--install] [--apply] [--json]
-  ark init    [--root <project>] [--preset hexagonal|layered|feature-sliced|monorepo|ui-surface|vertical-slice|ddd-bounded-contexts|clean-architecture|onion-architecture]
-              [--archetype <playbook-id>] [--tools <list>] [--require-write-hook <host>] [--yes] [--force] [--no-strict]
-  ark upgrade [--root <project>] [--tools <list>] [--apply] [--plan-digest <sha256>] [--accept-conflicts] [--refresh-skills] [--json] [--no-install] [--no-strict]
-  ark preflight --changes <change-set.json> [--change-map <map.json>] [--root <project>] [--config ark.config.json] [--manifest <manifest.json>] [--tsconfig <tsconfig.json>] [--json]
-  ark status  [--root <project>] [--config ark.config.json] [--json] [--vs <git-ref>]
-              [--expected-root <abs>] [--expected-project-id sha256:…] [--tools <host>]
-  ark agents-md [--root <project>] [--config ark.config.json] [--write] [--check] [--stdout] [--json]
-                [--tools <host>]
-
-Commands:
-  start     New here? Analyze and preview the complete setup. Read-only unless --apply.
-  init      Configure Ark project enforcement with explicit prompts.
-  upgrade   Preview identity-proven Ark-managed asset updates. With package install,
-            --apply bumps toward registry latest when behind (not only when CLI ≠ pin)
-            and recomputes the preview; a second explicit --apply --no-install applies
-            those exact bytes and verifies them. --refresh-skills opts in to rewrite
-            customized managed skills to package templates (never silent default).
-            (alias: ark update)
-  preflight Validate one atomic create/update/delete set without writing project files.
-  status    Unified session/project manifest (identity, activation, last check, rules).
-            Never prompts. Prefer --json for agents; CI=1 forces JSON.
-  agents-md Version-matched agent contract projection (ACS04). Stamps package version +
-            contract summary into a managed AGENTS.md block. Non-authoritative — not a
-            gate input. Preview by default; --write merges without clobbering outside
-            regions; --check fails on version drift; --stdout prints the block only.
-            (aliases: agents-md, agent-projection)
-
-Options:
-  --yes        Non-interactive defaults: create config if needed, install gate templates, run strict check.
-               (Also the implicit default when stdin/stdout are not a TTY — agents never hang on prompts.)
-  --force      Allow generated files to overwrite existing files.
-  --no-strict  Skip the final strict ark-check run.
-  --install    Pin and install arkgate as a project devDependency (default for start).
-  --no-install Skip adding/installing arkgate as a project devDependency (start/upgrade).
-  --apply       Apply a start plan; for upgrade, update/repreview or apply managed bytes.
-  --accept-conflicts
-                Allow upgrade to recreate deleted managed assets or replace recorded conflicts.
-  --plan-digest Digest emitted by an upgrade preview; required to apply managed bytes.
-  --json        Emit the start/upgrade/status/agents-md preview as deterministic machine-readable JSON.
-  --write       For agents-md: merge the version-matched projection into AGENTS.md.
-  --check       For agents-md: exit 1 when projection stamp drifts from package version.
-  --stdout      For agents-md: print the projection block only (no file write).
-  --expected-root / --expected-project-id
-                Optional project expectation for status (MCP-compatible binding check).
-  --preset     Start from a named architecture preset instead of detection.
-  --archetype  Application shape from templates/architecture-playbook.json (maps to the matching preset).
-               Valid ids: crud-product, api-backend, frontend-surface, library-sdk, cli-utility,
-               worker-pipeline, event-coordinator, integration-bridge, multi-app-workspace, prototype-spike,
-               vertical-slice-product, ddd-bounded-contexts.
-  --tools      One active agent host for start (claude,cursor,codex,grok,windsurf,cline,copilot,kiro,roo,continue,gemini).
-               Omit to use the active host; an unknown host creates only the shared compact router.
-  --remove-host <host>
-               Preview or apply removal of that compact host integration; re-add it with --tools <host>.
-  --require-write-hook <host>
-               Require and verify a hard local write hook for Claude, Grok, Antigravity, or Cursor.
-               Codex/OpenCode are advisory-write plus hard CI merge only; impossible requests fail before any write.
-
-Interactive mode (TTY, no --yes): asks what application shape you are building and maps it to a preset.
-Non-interactive (no TTY): uses the same defaults as --yes — never calls readline on a null interface.
-`;
-}
-
 function cliVersion() {
   try {
     const pkg = JSON.parse(fs.readFileSync(path.join(here, '..', 'package.json'), 'utf8'));
@@ -796,23 +734,22 @@ async function start(args) {
     }
     console.log('');
     console.log('Next (the only flow you need):');
+    console.log(`  1. Status: ${arkCommand(root, 'arkgate-check', '--doctor')} — do primary next action #1`);
     if (falseGreenGap) {
-      console.log('  1. In your agent:  /ark-adopt — fix the architecture config first');
-      console.log('     → reclassify I/O dirs out of Application; then /ark-autopilot for residual debt.');
+      console.log('  2. Session 0 in your agent:  /ark-adopt — fix the architecture config first');
+      console.log('     → reclassify I/O dirs out of Application; leftover design later via /ark-explore then /ark-autopilot.');
     } else {
-      console.log('  1. In your agent:  /ark-autopilot');
-      console.log('     → explore first, dual plan (remediation + pattern bets), safe fixes, leave gates on.');
+      console.log('  2. Session 0 in your agent:  /ark-adopt');
+      console.log('     → mark the path (greenfield or brownfield). Day-to-day new files: /ark-place.');
     }
-    console.log(`  2. Status anytime: ${arkCommand(root, 'ark-check', '--doctor')}`);
-    console.log(`  3. After edits:    ${arkCommand(root, 'ark-check', '--root . --config ark.config.json --strict-merge')}`);
+    console.log(`  3. After edits:    ${arkCommand(root, 'arkgate-check', '--root . --config ark.config.json --strict-merge')}`);
     if (mode === 'adapt' && planOk && !falseGreenGap) {
       console.log(
-        `  4. When green but cores still optional: ${arkCommand(root, 'ark-check', '--ratchet-cores')} → honest ENFORCE`
+        `  4. When green but cores still optional: ${arkCommand(root, 'arkgate-check', '--ratchet-cores')} → honest ENFORCE`
       );
     }
     console.log('');
-    console.log('Optional later: ark-check --report ark-report.html (captures a day-zero/evolution report).');
-    console.log('Optional later: --plan · --coverage · /ark-explore · /ark-autopilot · /ark-place · ark upgrade');
+    console.log('Optional later: leftover design → /ark-explore then /ark-autopilot; bump → arkgate upgrade.');
     return 0;
   } finally {
     rl?.close();
@@ -831,8 +768,12 @@ async function main() {
     console.log(cliVersion());
     return 0;
   }
+  if (args.help && (args.command === 'upgrade' || args.command === 'update')) {
+    console.log(upgradeUsage());
+    return 0;
+  }
   if (args.help || !args.command) {
-    console.log(usage());
+    console.log(args.all ? setupUsageAll() : setupUsage());
     return 0;
   }
 
@@ -961,7 +902,7 @@ async function main() {
   }
 
   console.error(`Unknown command: ${args.command}`);
-  console.error(usage());
+  console.error(setupUsage());
   return 2;
 }
 

package/bin/lib/ci-and-commands.mjs

@@ -370,9 +370,10 @@ ${steps}
 ${placementBody}
 
 The project is only considered Ark-enforced when its host-appropriate write path is configured
-and the CI check passes. Only Claude/Grok/Antigravity/Cursor provide a hard local write boundary
-(Cursor: Write/StrReplace when .cursor/hooks.json is trusted); Codex/OpenCode use
-advisory MCP plus CI. The experimental runtime is not required.
+and the CI check passes. Claude/Grok/Antigravity/Cursor provide hard local boundaries for their
+listed operations. Codex provides a hard boundary for complete local apply_patch when
+.codex/hooks.json is trusted and runtime-observed; hosted/specialized/direct-write paths remain
+CI-backed. OpenCode uses advisory MCP plus CI. The experimental runtime is not required.
 `;
 }
 

package/bin/lib/doctor-next-actions.mjs

@@ -0,0 +1,92 @@
+/**
+ * Rank doctor next actions from already-computed facts (no I/O).
+ * Lets the human printer show light + #1 before honesty/compass sections.
+ */
+import { arkCommand } from '../ark-shared.mjs';
+import { skillGapsForActiveHost } from './agent-gates.mjs';
+import { agentHomeConcernIsActive, agentHomeRefreshCommand } from './agent-homes.mjs';
+import { mergePostGreenTopActions } from './post-green-path.mjs';
+
+export function collectDoctorNextActions(ctx) {
+  const actions = [];
+  if (!ctx.analysisComplete) actions.push('restore complete analysis, then rerun ark-check --doctor');
+  if (ctx.designSmells.length > 0 && ctx.postGreenPath) actions.push(ctx.postGreenPath.action);
+  if (ctx.coverageHonesty.greenIsNotEnforcement && ctx.coverageHonesty.worseThanNoGate) {
+    actions.push('raise governed coverage above a minority slice before treating green as enforcement');
+  }
+  if (ctx.cov.suggestions.length > 0) actions.push('classify the ungoverned directories (/ark-adopt)');
+  if (ctx.packageVersionTruth?.dualTruth) {
+    actions.push(
+      ctx.dualTruthNext ||
+        'bump package.json arkgate pin to match this CLI (or install without --no-install)'
+    );
+  } else if (ctx.packageVersionTruth?.code === 'PACKAGE_PIN_ABSENT') {
+    actions.push(
+      ctx.dualTruthNext ||
+        'Add arkgate to package.json and install so CI/npx resolve this CLI (PACKAGE_PIN_ABSENT)'
+    );
+  }
+  if (ctx.activeCount > 0) {
+    actions.push(
+      `resolve the non-baselined violations — see the classified plan (${arkCommand(ctx.root, 'ark-check', '--plan')}), then /ark-autopilot`
+    );
+  }
+  if (ctx.writePath?.gap?.fix) actions.push(ctx.writePath.gap.fix);
+  if (ctx.gatesMissing.length > 0) {
+    actions.push(`install gates (${arkCommand(ctx.root, 'ark-check', '--install-agent-gates')})`);
+  }
+  const humanSkillGaps = skillGapsForActiveHost(ctx.skillGaps);
+  const legacyCodex = humanSkillGaps.some((g) => g.tool === 'codex' && g.legacyPromptsOnly);
+  const remainingGaps = humanSkillGaps.filter(
+    (g) => !(g.tool === 'codex' && (g.legacyPromptsOnly || g.legacyAdvisory))
+  );
+  const remMiss = remainingGaps.reduce((s, g) => s + g.missing, 0);
+  const remStale = remainingGaps.reduce((s, g) => s + g.stale, 0);
+  if (legacyCodex) {
+    actions.push('install Codex SKILL.md catalog (--install-agent-gates --skills-only --tools codex --force)');
+  }
+  if (remMiss + remStale > 0) {
+    actions.push('refresh /ark-* skills (--install-agent-gates --skills-only --force)');
+  }
+  if (ctx.codexHomeGap && ctx.codexConcernActive) {
+    actions.push(
+      ctx.codexHomeGap.catalogMetadataInvalid
+        ? 'repair invalid Codex home catalog metadata after verifying the newest installed version'
+        : 'refresh Codex home skills (--install-agent-gates --skills-only --codex-home --force)'
+    );
+  }
+  for (const gap of ctx.agentHomeGaps) {
+    if (agentHomeConcernIsActive(gap.host)) {
+      actions.push(
+        gap.catalogMetadataInvalid
+          ? `repair invalid ${gap.label} home catalog metadata after verifying the newest installed version`
+          : `refresh ${gap.label} shared agent skills (${agentHomeRefreshCommand(ctx.root, gap)})`
+      );
+    }
+  }
+  if (ctx.analysisComplete && ctx.baselineHonesty?.dirtyBaselineRisk) {
+    actions.push('review dirty baseline freezes — fix the contract before trusting green-via-freeze');
+  }
+  if (ctx.analysisComplete && ctx.staleBaseline > 0) {
+    actions.push('tighten the baseline (--update-baseline)');
+  }
+  if (ctx.staleRunners.length > 0) {
+    actions.push(
+      `migrate command runners (${arkCommand(ctx.root, 'ark-check', '--install-agent-gates --migrate-commands')})`
+    );
+  }
+  for (const gap of ctx.adoption.gaps) {
+    if (!gap.deferred) actions.push(gap.fix || gap.message);
+  }
+  if (ctx.safety && ctx.safetyHasEntries) {
+    actions.push('resolve strict safety diagnostics before treating CI as enforcement');
+  }
+  if (ctx.showNewHere) {
+    actions.unshift('finish ark start (preview + --apply), then re-run --doctor');
+  }
+  const unique = mergePostGreenTopActions(actions, ctx.postGreenPath);
+  if (ctx.designFitness.designWeak && unique.length === 0 && ctx.postGreenPath) {
+    unique.push(ctx.postGreenPath.action);
+  }
+  return unique;
+}

package/bin/lib/doctor-plan.mjs

@@ -15,9 +15,9 @@ import { describePackageVersionDualTruth } from './field-install.mjs';
 import {
   detectAgentHomeGaps,
   agentHomeConcernIsActive,
-  agentHomeRefreshCommand,
 } from './agent-homes.mjs';
 import { operatingModeTitle } from './product-copy.mjs';
+import { collectDoctorNextActions } from './doctor-next-actions.mjs';
 export { summarizeRulesUnderContract };
 
 /** Optional S3 dual-match classifier when ark-shared exports it (soft dep for S5 landing). */
@@ -50,7 +50,6 @@ import {
 } from './design-smells.mjs';
 import {
   buildPostGreenNextAction,
-  mergePostGreenTopActions,
   isDoctorHealthyNothingToDo,
   DESIGN_WEAK_HONESTY_FLAGS,
 } from './post-green-path.mjs';
@@ -825,9 +824,7 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
   const ok = color.green('✓');
   const warn = color.yellow('!');
   const bad = color.red('✗');
-  const actions = [];
   const line = (mark, text) => console.log(`  ${mark} ${text}`);
-  if (!analysisComplete) actions.push('restore complete analysis, then rerun ark-check --doctor');
   console.log(color.bold(`Ark doctor — ${path.basename(path.resolve(root)) || '.'}`));
   if (!analysisComplete) line(warn, analysisIncompleteStatement(completeness));
 
@@ -866,6 +863,63 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
     );
   }
 
+  const safetyHasEntries = Boolean(
+    options.safety &&
+      [
+        options.safety.nonLiteralDynamicImports,
+        options.safety.tsSuppressions,
+        options.safety.anyCasts,
+        options.safety.inMemoryProductionStores,
+        options.safety.disabledPeerIsolationRules,
+      ].some((entries) => Array.isArray(entries) && entries.length > 0)
+  );
+  const uniqueActions = collectDoctorNextActions({
+    root,
+    analysisComplete,
+    designSmells,
+    postGreenPath,
+    coverageHonesty,
+    cov,
+    packageVersionTruth,
+    dualTruthNext,
+    activeCount,
+    writePath,
+    gatesMissing,
+    skillGaps,
+    codexHomeGap: detectCodexHomeGap(root),
+    codexConcernActive: codexConcernIsActive(),
+    agentHomeGaps,
+    baselineHonesty,
+    staleBaseline,
+    staleRunners,
+    adoption,
+    safety: options.safety,
+    safetyHasEntries,
+    showNewHere,
+    designFitness,
+  });
+  console.log('');
+  if (isDoctorHealthyNothingToDo(designFitness, uniqueActions)) {
+    console.log(color.green('✔ Healthy — nothing to do.'));
+    console.log(color.dim('  Contract edges and design residual are clear. Keep write path + CI.'));
+  } else {
+    console.log(color.bold('Primary next action'));
+    console.log(`  1. ${uniqueActions[0]}`);
+    if (uniqueActions.length > 1) {
+      console.log(color.bold(`Also (${uniqueActions.length - 1}):`));
+      uniqueActions.slice(1).forEach((action, index) => console.log(`  ${index + 2}. ${action}`));
+    }
+    if (postGreenPath) {
+      console.log(
+        color.dim(
+          `  Shape residual is the primary door under ${modeTitle} — do not skill-shop explore vs coverage vs think.`
+        )
+      );
+    } else {
+      console.log(color.dim('  Doctor is the control plane: do #1 first, then re-run --doctor.'));
+    }
+  }
+
   // P0-B — single honesty surface (never a score; never "all good" when residual remains).
   if (productHonesty) {
     console.log('');
@@ -907,11 +961,7 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
         line(' ', color.dim(`evidence: ${smell.evidence.slice(0, 4).join(', ')}`));
       }
     }
-    if (postGreenPath) {
-      // Rank first via mergePostGreenTopActions at the end (Q01 single door).
-      actions.push(postGreenPath.action);
-    }
-    // Q04 — surface one next pilot under design-weak.
+    // Q04 — surface one next pilot under leftover design work.
     if (pilotLoop?.active && pilotLoop.nextPilot) {
       const np = pilotLoop.nextPilot;
       line(
@@ -967,13 +1017,9 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
   line(govMark, `Governed: ${cov.governed.percent}% (${cov.governed.classifiedFiles}/${cov.governed.totalFiles} files)`);
   if (coverageHonesty.greenIsNotEnforcement) {
     line(coverageHonesty.worseThanNoGate ? bad : warn, coverageHonesty.message);
-    if (coverageHonesty.worseThanNoGate) {
-      actions.push('raise governed coverage above a minority slice before treating green as enforcement');
-    }
   }
   if (cov.suggestions.length > 0) {
     line(warn, `${cov.suggestions.length} ungoverned director(y/ies) — proposals: ${arkCommand(root, 'ark-check', '--coverage')}`);
-    actions.push('classify the ungoverned directories (/ark-adopt)');
   }
   if (cov.emptyLayers.length > 0) line(warn, `Empty layers (pattern matches nothing): ${cov.emptyLayers.join(', ')}`);
   if (cov.layersWithoutRules.length > 0) line(warn, `Layers with no rule edge: ${cov.layersWithoutRules.join(', ')}`);
@@ -989,18 +1035,10 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
     console.log('');
     console.log(color.bold('Package pin (dual-truth)'));
     line(warn, packageVersionTruth.note);
-    actions.push(
-      dualTruthNext ||
-        'bump package.json arkgate pin to match this CLI (or install without --no-install)'
-    );
   } else if (packageVersionTruth?.code === 'PACKAGE_PIN_ABSENT') {
     console.log('');
     console.log(color.bold('Package pin'));
     line(warn, packageVersionTruth.note);
-    actions.push(
-      dualTruthNext ||
-        'Add arkgate to package.json and install so CI/npx resolve this CLI (PACKAGE_PIN_ABSENT)'
-    );
   }
   if (options.configWalkedUp && options.configRoot) {
     line(
@@ -1030,7 +1068,6 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
       line(warn, 'Low governed coverage or fresh config — finish start, then re-run doctor before adding layers of code.');
     }
     line(ok, `Optional sensor detail: ${arkCommand(root, 'ark-check', '--recommend')}`);
-    actions.unshift('finish ark start (preview + --apply), then re-run --doctor');
   }
 
   console.log('');
@@ -1058,11 +1095,6 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
     if (summary.concentrated) {
       line(warn, color.dim(`${Math.round(summary.dominantShare * 100)}% on one edge (${summary.dominant}) — likely a contract fix, not debt`));
     }
-    if (activeCount > 0) {
-      actions.push(
-        `resolve the non-baselined violations — see the classified plan (${arkCommand(root, 'ark-check', '--plan')}), then /ark-autopilot`
-      );
-    }
   }
 
   console.log('');
@@ -1105,7 +1137,6 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
     line(writePath.gap.severity === 'warn' ? warn : warn, writePath.gap.message);
     if (writePath.gap.fix) {
       line(' ', color.dim(`Fix: ${writePath.gap.fix}`));
-      actions.push(writePath.gap.fix);
     }
   }
 
@@ -1114,7 +1145,6 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
   if (gatesMissing.length === 0) line(ok, 'Shared gate artifacts found on disk (AGENTS.md, .mcp.json, CI); runtime activation is reported separately');
   else {
     line(bad, `Missing gates: ${gatesMissing.join(', ')}`);
-    actions.push(`install gates (${arkCommand(root, 'ark-check', '--install-agent-gates')})`);
   }
   const humanSkillGaps = skillGapsForActiveHost(skillGaps);
   const legacyCodex = humanSkillGaps.some((g) => g.tool === 'codex' && g.legacyPromptsOnly);
@@ -1129,7 +1159,6 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
   if (remMiss + remStale === 0 && !legacyCodex) line(ok, '/ark-* skills current for detected tools');
   if (legacyCodex) {
     line(warn, 'Codex: legacy flat .codex/prompts only (not a loadable skill catalog)');
-    actions.push('install Codex SKILL.md catalog (--install-agent-gates --skills-only --tools codex --force)');
   }
   if (codexLegacySafeDelete) {
     line(
@@ -1144,7 +1173,6 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
       warn,
       `${remMiss} missing / ${remStale} content-behind-package /ark-* skill(s) for ${remainingGaps.map((g) => g.tool).join(', ')}`
     );
-    actions.push('refresh /ark-* skills (--install-agent-gates --skills-only --force)');
   }
   const codexHomeGap = detectCodexHomeGap(root);
   if (codexHomeGap) {
@@ -1159,7 +1187,6 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
       line(color.dim('·'), color.dim(`Codex home skills ${parts.join(', ')} (deferred — not on Codex session)`));
     } else {
       line(warn, `Codex home skills ${parts.join(', ')}`);
-      actions.push(codexHomeGap.catalogMetadataInvalid ? 'repair invalid Codex home catalog metadata after verifying the newest installed version' : 'refresh Codex home skills (--install-agent-gates --skills-only --codex-home --force)');
     }
   }
   for (const gap of agentHomeGaps) {
@@ -1174,11 +1201,6 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
       line(color.dim('·'), color.dim(`${summary} (deferred — not this session)`));
     } else {
       line(warn, summary);
-      actions.push(
-        gap.catalogMetadataInvalid
-          ? `repair invalid ${gap.label} home catalog metadata after verifying the newest installed version`
-          : `refresh ${gap.label} shared agent skills (${agentHomeRefreshCommand(root, gap)})`
-      );
     }
   }
 
@@ -1193,11 +1215,9 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
     line(baseMark, `${baseline.keys.size} frozen key(s)${analysisComplete ? '' : ' — stale comparison not verified'}`);
     if (analysisComplete && baselineHonesty.dirtyBaselineRisk) {
       line(warn, baselineHonesty.message);
-      actions.push('review dirty baseline freezes — fix the contract before trusting green-via-freeze');
     }
     if (analysisComplete && staleBaseline > 0) {
       line(warn, `${staleBaseline} stale entr(y/ies) no longer occur — tighten with --update-baseline`);
-      actions.push('tighten the baseline (--update-baseline)');
     }
   }
 
@@ -1206,7 +1226,6 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
   if (staleRunners.length === 0) line(ok, 'Emitted commands match the package manager');
   else {
     line(warn, `Stale runner in ${staleRunners.join(', ')}`);
-    actions.push(`migrate command runners (${arkCommand(root, 'ark-check', '--install-agent-gates --migrate-commands')})`);
   }
 
   // Adoption completeness (hosts, MCP health, codex home, core optionality, origin, baseline policy)
@@ -1232,7 +1251,6 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
       if (gap.fix) {
         line(' ', color.dim(gap.deferred ? `When using Codex: ${gap.fix}` : `Fix: ${gap.fix}`));
       }
-      if (!gap.deferred) actions.push(gap.fix || gap.message);
     }
     if (adoption.layerBalance) {
       line(warn, color.dim(adoption.layerBalance.educational));
@@ -1269,34 +1287,6 @@ export function runDoctor(root, config, files, rules, violations, asJson, option
     for (const [label, entries] of rows) {
       line(entries.length === 0 ? ok : warn, `${label}: ${entries.length}`);
     }
-    if (rows.some(([, entries]) => entries.length > 0)) {
-      actions.push('resolve strict safety diagnostics before treating CI as enforcement');
-    }
   }
 
-  console.log('');
-  const uniqueActions = mergePostGreenTopActions(actions, postGreenPath);
-  if (isDoctorHealthyNothingToDo(designFitness, uniqueActions)) {
-    console.log(color.green('✔ Healthy — nothing to do.'));
-    console.log(color.dim('  Contract edges and design residual are clear. Keep write path + CI.'));
-  } else {
-    if (designFitness.designWeak && uniqueActions.length === 0 && postGreenPath) {
-      uniqueActions.push(postGreenPath.action);
-    }
-    console.log(color.bold(`Primary next action`));
-    console.log(`  1. ${uniqueActions[0]}`);
-    if (uniqueActions.length > 1) {
-      console.log(color.bold(`Also (${uniqueActions.length - 1}):`));
-      uniqueActions.slice(1).forEach((action, index) => console.log(`  ${index + 2}. ${action}`));
-    }
-    if (postGreenPath) {
-      console.log(
-        color.dim(
-          `  Shape residual is the primary door under ${modeTitle} — do not skill-shop explore vs coverage vs think.`
-        )
-      );
-    } else {
-      console.log(color.dim('  Doctor is the control plane: do #1 first, then re-run --doctor.'));
-    }
-  }
 }