rl doctor

rl doctor [--site ID] [--base URL] [--public-key K] [--offline] [--json] is read-only and safe in CI. It checks:

• the Node version;
• that .resilientlang.json contains no key;
• the permissions of the credentials file;
• the key's shape (rl_sec_, and not a site key);
• that the API URL is https and a site is selected;
• one authenticated call, with each of 401, 403, 402 and 503 explained;
• the key's scopes, when it may list keys (keys:manage);
• the plan allowance;
• and, when delivery settings are given, the published manifest and its signature.

It exits 0 unless a check fails. A failing API call returns the CLI's own exit code (3 for authentication, 5 for a plan limit, 6 for unavailable; see CLI and SDKs); other failures return 1. --offline makes no request. The output never contains the key.

rl doctor lives in tools/cli on the WP-55 branch and was not yet merged when this page was written, so rl help in your checkout may not list it (verify).