tide_doctor
FIND AND FIX WHAT IS WRONG WITH A TIDE APP, IN ONE COMMAND. Returns the command that checks an app for the faults behind most broken logins and unprotected APIs. It REPAIRS the mechanical ones itself (re-copies the DPoP page byte-exact, corrects a wrong rewrite path, gitignores .env) and prints the exact fix for the rest, which YOU apply — do not pass the list to the user. Covers: DPoP page missing/stale/served without its headers, useDPoP passed as a JSX prop (silently OFF), createTideCloakProxy called without protectedRoutes (protects nothing), adapter without its embedded key, remote JWKS, Bearer-only token parsing, no server-side verification, secrets about to be committed, a destructive change request pending. CALL THIS after scaffolding or changing auth code, BEFORE telling the user it works, and FIRST whenever a login or an API check misbehaves. This tool call itself only returns the command.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| realm | No | Realm name. Adds read-only realm checks (needs the admin password in .env). | |
| appDir | No | App directory. Default: the current directory. | |
| appUrl | No | URL of the RUNNING app, e.g. http://localhost:3000. Adds checks of what is actually served. | |
| checkOnly | No | Report only and change nothing (for CI). Default false: mechanical faults are repaired. |