Doctor

Built-in diagnostics. Nine modular checks against workspace configuration, reported with severity levels and auto-fix support.

Running

CodeBuddy: Run Doctor

Results → CodeBuddy Doctor output channel + status bar indicator.

Checks

Check	Verifies
API Key Audit	Keys in SecretStorage, not placeholders, no leaked keys in `settings.json`
Input Validator	Guard patterns functional, cover browser refs + keyboard keys
Terminal Restrictions	Blocked command patterns compile, cover catastrophic operations
Directory Permissions	Workspace + `.codebuddy/` dirs exist, readable, writable
MCP Config	Server entries well-formed, commands exist, env vars set
Security Config	`.codebuddy/security.json` loads, regex patterns compile, no invalid entries
Credential Proxy	If enabled: proxy reachable, session tokens valid
Permission Scope	Active profile valid, custom deny patterns compile, tool allow/block lists consistent
Access Control	Mode valid, user lists non-empty when required, identity resolution works

Severity

Severity	Icon	Meaning
Critical	🔴	Blocks agent functionality or exposes a security vulnerability
Warn	🟡	Non-blocking but may cause unexpected behavior
Info	🔵	Suggestion for improvement

Findings sorted: critical → warn → info.

Auto-fix

CodeBuddy: Doctor Auto-Fix

Auto-fixable includes:

Missing .codebuddy/ directories
Starter security.json / permissions.json files
Placeholder API keys in settings

Status bar

Symbol	Meaning
✓	No issues
⚠ N	N warnings
✕ N	N critical

Click to re-run.

Background execution

Auto-runs at extension activation (after a short delay) and on workspace open. Dismiss the status bar item to suppress — Doctor then only runs on manual invocation.

Concurrent invocation: if Doctor is already running when triggered again, the second call joins the in-flight scan rather than starting new. Prevents duplicate work.

Troubleshooting — symptom → fix table complementing Doctor’s checks
Security — the invariants Doctor verifies