postsale doctor

Preflight checks: build identity, token, network, API auth, carriers, origins, LLM provider.

checks.token names the credential: credential_kind: "session" (with expiry) or "api_key" (with key_prefix, no expiry). On an API key the auth check probes with the scoped carriers read instead of the user profile, which keys cannot reach: checks.auth.probe says so, a key that lacks read:carriers warns (valid but narrower), and a key the backend rejects fails with exit 100. A credential in POSTSALE_TOKEN that a stored session shadows appears as checks.token.ignored_env_credential (informational, never a warning).

checks.build reports the running CLI's version and commit (the short source commit id it was built from; dev for a non-release build). Use it to pin the exact build — --version deliberately stays a bare semver, so the commit lives here.

postsale doctor
postsale doctor --human
postsale doctor --pre-flight   # exit 75 on any warning
postsale doctor --examples

Options

--human, --pre-flight, --examples

Not schema-backed

CLI utility. Guide: Doctor and Schema Introspection.