memory doctor: make provenance command non-mutating by default

- add provenance audit command for missing LEARNED_IN reporting

- route 'memory doctor provenance' to audit instead of prune

- keep prune-missing-provenance as explicit destructive action

- add CLI regression test for provenance audit routing

Co-Authored-By: GPT-5 Codex <codex@openai.com>

Author: dcramer

src/ash/cli/commands/memory/__init__.py

@@ -295,6 +295,7 @@ async def _run_memory_action(
             memory_doctor_embed_missing,
             memory_doctor_fix_names,
             memory_doctor_normalize_semantics,
+            memory_doctor_provenance_audit,
             memory_doctor_prune_missing_provenance,
             memory_doctor_quality,
             memory_doctor_reclassify,
@@ -335,7 +336,9 @@ async def _run_memory_action(
             await memory_doctor_embed_missing(store, force=force)
         elif subcommand == "normalize-semantics":
             await memory_doctor_normalize_semantics(store, force=force)
-        elif subcommand in ("prune-missing-provenance", "provenance"):
+        elif subcommand == "provenance":
+            await memory_doctor_provenance_audit(store)
+        elif subcommand == "prune-missing-provenance":
             await memory_doctor_prune_missing_provenance(store, force=force)
         elif subcommand == "self-facts":
             await memory_doctor_self_facts(store, force=force)

src/ash/cli/commands/memory/doctor/__init__.py

@@ -12,6 +12,7 @@
     memory_doctor_normalize_semantics,
 )
 from ash.cli.commands.memory.doctor.prune_missing_provenance import (
+    memory_doctor_provenance_audit,
     memory_doctor_prune_missing_provenance,
 )
 from ash.cli.commands.memory.doctor.quality import memory_doctor_quality
@@ -26,6 +27,7 @@
     "memory_doctor_embed_missing",
     "memory_doctor_fix_names",
     "memory_doctor_normalize_semantics",
+    "memory_doctor_provenance_audit",
     "memory_doctor_prune_missing_provenance",
     "memory_doctor_quality",
     "memory_doctor_reclassify",

src/ash/cli/commands/memory/doctor/prune_missing_provenance.py

@@ -11,6 +11,44 @@
     from ash.store.store import Store
 
 
+async def memory_doctor_provenance_audit(store: Store) -> None:
+    """Report active memories missing LEARNED_IN provenance (non-mutating)."""
+    missing_ids = store.missing_learned_in_provenance_ids()
+    if not missing_ids:
+        success("No active memories are missing LEARNED_IN provenance")
+        return
+
+    table = create_table(
+        "Active Memories Missing Provenance",
+        [
+            ("ID", {"style": "dim", "max_width": 8}),
+            ("Owner", {"style": "yellow", "max_width": 16}),
+            ("Chat", {"style": "cyan", "max_width": 8}),
+            ("Content", {"style": "white", "max_width": 42}),
+        ],
+    )
+    for memory_id in missing_ids[:10]:
+        memory = store.graph.memories.get(memory_id)
+        if memory is None:
+            continue
+        table.add_row(
+            memory.id[:8],
+            memory.owner_user_id or "-",
+            (memory.chat_id[:8] if memory.chat_id else "-"),
+            truncate(memory.content),
+        )
+    if len(missing_ids) > 10:
+        table.add_row("...", "...", "...", f"... and {len(missing_ids) - 10} more")
+
+    console.print(table)
+    console.print(
+        f"\n[bold]{len(missing_ids)} active memories are missing LEARNED_IN provenance[/bold]"
+    )
+    console.print(
+        "[dim]Run 'ash memory doctor prune-missing-provenance --force' to archive them.[/dim]"
+    )
+
+
 async def memory_doctor_prune_missing_provenance(store: Store, force: bool) -> None:
     """Archive active memories with no LEARNED_IN edge."""
     missing_ids = store.missing_learned_in_provenance_ids()

tests/test_cli.py

@@ -195,6 +195,41 @@ async def _fake_embed_missing(*args, **kwargs):
         assert result.exit_code == 0
         assert calls == [False]
 
+    def test_memory_doctor_provenance_is_non_mutating_audit(
+        self, cli_runner, config_file, monkeypatch
+    ):
+        calls: list[str] = []
+
+        class DummyStore:
+            pass
+
+        async def _fake_get_store(_config):
+            return DummyStore()
+
+        async def _fake_audit(*_args, **_kwargs):
+            calls.append("audit")
+
+        async def _fake_prune(*_args, **_kwargs):
+            calls.append("prune")
+
+        monkeypatch.setattr(
+            "ash.cli.commands.memory._helpers.get_store", _fake_get_store
+        )
+        monkeypatch.setattr(
+            "ash.cli.commands.memory.doctor.memory_doctor_provenance_audit",
+            _fake_audit,
+        )
+        monkeypatch.setattr(
+            "ash.cli.commands.memory.doctor.memory_doctor_prune_missing_provenance",
+            _fake_prune,
+        )
+
+        result = cli_runner.invoke(
+            app, ["memory", "doctor", "provenance", "--config", str(config_file)]
+        )
+        assert result.exit_code == 0
+        assert calls == ["audit"]
+
     def test_memory_doctor_all_runs_force_mode(
         self, cli_runner, config_file, monkeypatch
     ):