Remove legacy runtime autofix agent

.gitignore

@@ -147,6 +147,3 @@ data/*.db-journal
 data/*.db-shm
 data/*.db-wal
 data/.secret-key
-
-# Local agent state
-autofix-state.json

docs/TOOLS.md

@@ -1,6 +1,6 @@
 # Tool Catalog
 
-Generated from the live server at `2026-07-22T21:42:51.331Z`.
+Generated from the live server at `2026-07-23T05:51:06.344Z`.
 
 Total tools: **42**
 
@@ -25,7 +25,7 @@ _Do not edit this file manually. Re-generate with `npm run build && npm run docs
 ## Deploy & observability
 
 - `hv_deploy` - Deploy services to an environment (staging, production, etc.). Plan-gated: builds a plan from the spec and applies it immediately; the planId and applyRunId are returned for the audit trail. Delegated secret slots accept values only through secretRefs={KEY:"env:NAME"|"dotenv:/absolute/path/.env#KEY"|"file:/absolute/path"|"<manager>://..."}; values are resolved locally and encrypted into the plan. Ordinary envVars and env files cannot override delegated keys. By default, .env.<env> then repo .env are considered as deploy input in envFile.mode="runtime". Requires a spec (hv_spec_set). Protected environments require confirm=true.
-- `hv_errors` - Surface production errors: list recent error log lines, summarize error health per service, or manage autofix-tracked error fingerprints.
+- `hv_errors` - Surface production errors: list recent error log lines or summarize error and deployment health per service.
 - `hv_health` - HTTP health-check a deployed service (uses the stored healthCheckPath by default) or an explicit URL.
 - `hv_logs` - Fetch logs and delivery status: runtime service logs, build logs, recent deployments, or Stripe webhook endpoint status.
 - `hv_rollback` - Rollback by redeploying services from the most recent successful deploy run (or a specific run via toRunId). Recorded as a plan/apply run pair (planId + applyRunId returned) with per-service receipts; redeploys current code, not a pinned image. Protected environments require confirm=true.

docs/github-infrastructure.md

@@ -186,3 +186,16 @@ Add an IANA timezone such as `America/Vancouver`; omitted timezones default to
   state and tells you to run `hv_plan`; it no longer writes GitHub directly.
 
 Use `hv_status` after a successful deploy workflow to verify the actual service.
+
+## Runtime error visibility
+
+GitHub workflow autofix repairs failed checks; it does not poll production
+service logs. Use `hv_errors action="list"` for recent runtime error lines and
+`hv_errors action="summary"` for per-service error and deployment health. Both
+read through the configured hosting provider connection and do not create
+branches or pull requests.
+
+The former environment-level `environments.<env>.autofix` runtime repair agent
+has been removed. Existing specs that contain it fail validation with migration
+guidance instead of silently losing intent. Scheduled runtime-error alerts or a
+desktop error inbox can be added later as a separate desired-state capability.