Skip to main content
Check the local install and configured cloud connection. With a configured cloud origin, this probes service access and can refresh a saved OAuth credential. Diagnostic state is saved under the writer lock; ledger records are not repaired.

​
Example

Prints local ledger, verifier and configuration diagnostics. When a cloud origin is configured, it also checks reachability and token access and can save probe state. Exit 1 identifies a failed diagnostic.

​
Options

No flags accepted.

​
Exit status

0 when checks pass or are skipped; 1 when a diagnostic check fails; 2 on usage/configuration failure.
Checks the ledger, optional receipts, activity state and verifier. With a cloud origin it probes /healthz without credentials, then tests watches:read through the configured API-key REST or saved OAuth MCP connection.OAuth can refresh its private stored credential before that read; macOS, Windows or unverified custody returns an actionable refusal. A saved cloud record without a usable origin is a failed connection diagnostic, distinct from an unconfigured local-only repository.To save diagnostics, doctor acquires the native writer lock, rereads current state and merges only its diagnostic record. It reports NOT recorded when the lock is busy, unknown or unsupported and preserves newer cursors, mappings and other state fields.Prints checks and suggested fixes; repairs no ledger data.
Read configuration and file ownership for environment variables, compatibility aliases and writer locks. Read local file contracts for artifact fields. Browse the CLI index for related commands.
Check the selected environment and workspace access before calling hosted operations. See capability status.