finnest doctor

Run preflight checks for a deployment target.

Check local state. OPIN receiver: [opin] participant_role = "receiver".

Examples

finnest doctor --cloud=aws --environment=sandbox

finnest doctor --cloud=azure --environment=sandbox

finnest doctor --json

Options

• --cloud <cloud> — Target cloud for setup, deploy, and diagnostics.
• --environment <environment> — Target environment: sandbox or prod.
• --region <region> — Target cloud region or Azure location.
• --config <path> — Path to an explicit Finnest TOML configuration file.
• --json — Emit a schema-versioned JSON envelope to stdout.
• --output <format> — Select text, json, or ndjson output.
• --no-color — Disable ANSI color without changing the output content mode.
• --no-evidence — Do not write .finnest run evidence.
• --verbose — Enable debug-level diagnostics.
• --all — Run full diagnostics, including heavier runtime checks.
• --runtime-source <path> — Finnest runtime bundle source directory.
• --check-cves — Run local CVE checks in doctor when Trivy is available.
• --non-interactive — Disable interactive prompts where a command supports a prompt-based flow.
• --allow-demo-trust-anchors — Accept a resolved Azure-sandbox demo trust anchor (Kong admin CA / OPIN probe pair) as a warning instead of a deploy-preflight failure.
• --brcac-cert <path> — Path to the BRCAC client certificate PEM used for mTLS.
• --brcac-key <path> — Path to the BRCAC client key PEM used for mTLS.
• --ca-bundle <path> — Optional extra CA bundle PEM trusted for the mTLS endpoints.