dhal doctor
Run local diagnostics:
npx dhal doctor
npx dhal doctor --json
What it checks
dhal doctor checks:
- Node runtime;
- whether
dhal.jsonexists; - config validity;
- global mode posture;
- runtime fail-open/fail-closed mode;
- runtime bypass setup;
- redaction setup;
- proxy trust posture;
- memory vs Redis rate-limit store;
- IP reputation environment variables;
- webhook signing secrets;
- OpenTelemetry status;
- CI policy findings;
- enabled rule count.
Example output
Dhal doctor: ok
Package: @rokadhq/dhal
CLI: dhal
Mode: monitor
Route profiles: 0
Enabled catalog rules: 15
Rate limit store: memory
WARN mode.monitor: Global mode is monitor
WARN proxy.not_trusted: trustProxy is disabled
WARN rate_limit.memory_store: Rate limiting uses the in-memory store
Warnings are expected during first install. Treat errors as blockers before publishing enforcement config.