reachpad

reachpad [global-options] [command] [args ...]

reachpad is the command-line client for Reachpad cloud workspaces: Linux VMs whose disk is sealed to durable storage when you pause, so a later run or attach resumes from that disk. The VM comes and goes; the disk is the workspace. Workspaces have three states — running (compute billed, holds a concurrency slot), paused (disk kept, no VM), and archived (no slot, unusable until forked).First reachpad with no arguments signs in through hosted WorkOS (MFA/SSO happen there; the CLI never sees the password), then lists workspaces. The production endpoint (m1.reachpad.dev) and a user credential are saved mode 0600. Per-workspace credentials are cached under ~/.local/state/reachpad/.The binary is the Rust reach crate, shipped as reachpad. Install via Homebrew tap reachpad/tap/reachpad, npm install -g @reachpad/cli (a launcher around the same binary), or `curl -fsSL https://reachpad.dev/install | sh` (checksum-verified into ~/.local/bin/reachpad). Do not mix installers on the same path.

-w id, REACHPAD_WORKSPACE

Supply the workspace id for verbs that take one. Must appear before the verb (`reachpad -w id run -- ls`).

One JSON object per command instead of prose.

Print ids only, one per line. Overrides --json.

Use an API key instead of the saved login credential. src is - (stdin), @path, or env:VAR. A key on the argv is refused.

Client-side deadline (default 10m). A single run still cannot exceed ten minutes on the server.

Separate endpoint, credential, and cache under this name.

Override the saved API endpoint (rarely needed).

create [name]

Create a workspace and print its id. The name is a label; the id is the handle.

List workspaces. Archived entries are hidden unless requested.

Report one workspace. --wait blocks until that state or --timeout.

Run argv in the guest (not a shell). -s line runs a shell string instead. --cwd, --env, --stdin, --timeout are accepted. Wakes a paused workspace. Exits with the guest command's status.

Interactive terminal. Ctrl-C goes to the guest; Ctrl-] detaches. --new opens another terminal in the same workspace.

Seal the disk and stop compute. Returns when the save has started; --wait until it is durable.

Branch a new workspace from the last save.

Free the live slot. Must be paused first (else exit 5). Snapshots are kept but the workspace can no longer be used.

Stream the workspace event log; --since replays committed history first.

Sign in. Default opens hosted WorkOS login. --no-browser prints a URL. --operator-token - pastes a one-shot credential from stdin (recovery/automation).

Show the saved identity and limits, or revoke and delete credentials (this machine, or --all machines).

Print an rpak1. API key once (last line is the secret). Default role collaborator; default lifetime 90 days (max 365). Without -w the key covers the account.

List or revoke minted keys.

Health check (prints no secrets); update an installer-managed binary (Homebrew/npm installs are directed to those tools); emit bash, zsh, or fish completions.

Link GitHub so clones work inside the workspace; publish a guest port; cap brokered model spend; account-wide stop.

v0.1 spellings kept until they get first-class verbs. Fork/rewind history of a workspace.

Requires a Reachpad account and network access to the fleet. One run is capped at ten minutes and four concurrent commands per workspace (a fifth exits 6). Workspace-scoped API keys cannot call account-wide verbs (list, budget, keys, auth). Archiving a running workspace is refused. Source is published for inspection but is not an open-source license (copyright Tako Research). The public GitHub tree is a release snapshot; file issues rather than PRs.

The CLI is developed by Tako Research as part of Reachpad. Workspace crate version around 0.4.5 in the published source snapshot.

ssh(1), claude(1), opencode(1), docker(1)

Source code · Homepage · Documentation