Diagnostics

Four commands answer the four questions that come up when something looks wrong. None of them reads or changes a memory.

Question	Command	Healthy answer
Which vault is this?	kscope where	the root you expected
Is my key working?	kscope gate	"status":"enforcing" and a key file path
Is the engine complete?	kscope model	"status":"bundled"
Is the vault intact?	kscope vault-verify ROOT	"status":"complete"

Which vault is this?

kscope where

Prints the vault this directory resolves to, the workspace, principal and journal inside it, and where each of those came from. Run it when you are not sure which project’s memory your agent is talking to.

It also reports the vault’s format, how long an upgrade can still be undone, the version of the kscope you ran, and the version of the copy your agents run, under registered_copy.

--root-only narrows the output to the root and the project it was resolved from.

Is my key working?

kscope gate

Reports whether this build enforces the licence check, which commands the check refuses, and the directory it reads the key from. It reads no key and makes no authorization decision, so it answers even on a binary that is refusing everything else.

kscope activate

Installs a key and waits for the verdict. It takes the key as an argument, from KALEIDOSCOPE_API_KEY, from the key file, or from standard input. "entitled":true means you are set up.

	Commands
Need a key	mcp, call
Work without one	where, schema, model, gate, vault-preview, vault-verify, vault-migrate

Is the engine complete?

kscope model

Prints the semantic embedding model this build carries, its dimensions, and the SHA-256 of its two files. Anything but "status":"bundled" means search gets quietly worse rather than failing, so check it directly.

Is the vault intact?

kscope vault-verify ~/your-project/.kaleidoscope

Counts what is stored and reports whether the copies agree. It reads only. Add --cross-backend to widen the check.

For the full report, call doctor reads one JSON request from standard input and returns JSON. inspect is the mode that only looks:

echo '{"mode":"inspect"}' | kscope call doctor

call needs a key. It is an operator command, so your agent is never offered it.