CloudShell

A real terminal in a public, throwaway sandbox. Not the owner shell.

Read this first

Public and shared: anyone can open a sandbox, so never type a secret you want to keep.
Ephemeral: a session ends after 10 idle minutes or 30 minutes in total, and everything in it is deleted.
Small: a quarter of a vCPU, 1 GiB of memory, limited disk, one sandbox per visitor, a daily command quota.
Limited network: package registries, public GitHub, api.anthropic.com, generativelanguage.googleapis.com, the Copilot CLI hosts and the public ledger only.
Bring your own API key. Keys stay in this tab and are sent only to your own sandbox process; use a low-limit key.

Default coding agentStyle:

Your own throwaway sandbox, your own key, and every command is typed by you. Auto-run is not available. The button only types gemini; press Enter yourself. Saved in this browser only. The style toggle changes colors and the banner only. Start PowerShell types pwsh (PowerShell 7, press Enter yourself); the login shell is bash, and PowerShell uses the normal connection through the sandbox allowlist. ping, DNS tools, traceroute and port scanners are intentionally not installed here.

visitor@rabbitos: ~ (bash)not connected

Guide

First steps

Pass the human check, press Start sandbox, wait for the prompt.
Type repos to see the read-only code in /workspace, then cp -r /workspace/rabbit-web ~/work/ to get a writable copy.
Type help-rabbit in the terminal to print this guide there.

Bring your own key

Open API keys, paste a Gemini, Anthropic or Copilot key, then start the sandbox. Keys apply to the next session.
The key stays in this tab and goes only to your sandbox process. Use a low-limit key.

Default agent

Pick Gemini, Claude or Copilot, then Start my default agent. It types the name; you press Enter.

Copilot sign-in

Needs a GitHub Copilot subscription. Either run /login inside copilot (device code: open the printed URL in your own browser),
or paste a fine-grained GitHub token with the "Copilot Requests" permission as COPILOT_GITHUB_TOKEN before starting.

PowerShell and the network

Start PowerShell types pwsh (PowerShell 7); press Enter yourself. The login shell stays bash; exit returns to it.
Default is the normal connection: Invoke-WebRequest and Invoke-RestMethod work only through the same allowlist as curl.
rabbit-net status shows the allowed hosts; rabbit-net check tests them with HTTPS HEAD requests (5 s timeout).
ping, DNS lookup tools, traceroute, nmap, netcat and port scanners are not installed on purpose: only HTTPS to named hosts can leave this box, so they could not work, and they are the tools used to scan other machines. Use the RabbitNet module on your own PC for that.

Common commands

cd DIR, ls -la, cat FILE, rg PATTERN, git status, git log, node FILE.js, python3 FILE.py

Limits

Login shell is bash (type pwsh for PowerShell 7; the PowerShell-look style is colors only). 10 idle minutes or 30 minutes total, then everything is deleted.
Network: package registries, public GitHub, Anthropic, Google AI and Copilot APIs, the public ledger.