fix(doctor): pass allow-exec into workspace lint drift

giodl73-repo · giodl73-repo · commit 3221889fa968 · 2026-06-30T19:09:45.000-07:00
diff --git a/src/flows/doctor-health-contributions.test.ts b/src/flows/doctor-health-contributions.test.ts
@@ -703,6 +703,7 @@ describe("doctor health contributions", () => {
     const ctx = {
       cfg: { plugins: { entries: { codex: { enabled: true } } } },
       mode: "lint",
+      allowExecSecretRefs: true,
       runtime: { log: vi.fn(), error: vi.fn(), exit: vi.fn() },
     } as const;
 
@@ -722,6 +723,16 @@ describe("doctor health contributions", () => {
     expect(mocks.collectWorkspaceStatusHealthFindings).toHaveBeenCalledWith(ctx.cfg, {
       pluginVersionDrift,
     });
+    expect(mocks.gatherDaemonStatus).toHaveBeenCalledWith({
+      rpc: {
+        timeout: "3000",
+        json: true,
+      },
+      probe: true,
+      requireRpc: false,
+      deep: false,
+      allowExecSecretRefs: true,
+    });
   });
 
   it("passes daemon-context plugin drift into the workspace status note", async () => {
diff --git a/src/flows/doctor-health-contributions.ts b/src/flows/doctor-health-contributions.ts
@@ -1698,7 +1698,10 @@ export function resolveDoctorHealthContributions(): DoctorHealthContribution[] {
             await import("../commands/doctor-workspace-status.js");
           const pluginVersionDrift = await collectWorkspaceStatusPluginVersionDrift({
             cfg: ctx.cfg,
-            options: { nonInteractive: true },
+            options: {
+              nonInteractive: true,
+              allowExec: ctx.allowExecSecretRefs === true,
+            },
           });
           return collectWorkspaceStatusHealthFindings(ctx.cfg, { pluginVersionDrift });
         },
