theo status for humans, theo verify for scripts.
theo status
theo.verify() against the configured baseUrl, and also probes the other host (apex vs www) to catch the apex-redirect 401 trap — the #1 cause of first-time 401s.
Sample output (healthy)
Sample output (401 from apex redirect)
theo verify
1 when authenticated is false, so you can gate CI on it.
Scripted use
theo.verify() in the SDK.