Commands

Every command the owner built across rabbit-web, rabbitsoftware-cloudflare and research-agents, for everyone to read.

Your default coding agent: Gemini (saved in this browser only). Change it in the public CloudShell or the owner CloudShell.

Public commands need no secret and write nothing remote. They can be typed into the public CloudShell from its Commands drawer (nothing runs until you press Enter).

Owner commands deploy, use secrets or the owner's vault and data, or need a private checkout. They are listed here to read only and run only in the owner CloudShell or on the owner's own computer. Commands without a cd /workspace prefix are written for the repo root on that computer.

Placeholders such as <vault-path> must be replaced before running. Environment variables are listed by name only.

148 of 148 commands.

rabbit-web

Checks

Run all unit testsPubliclocal
All unit tests with node --test (npm run test:auth). Writes nothing to the repo.
```
cd /workspace/rabbit-web && npm run test:auth
```
Source: package.json

LintPublicnetwork

Installs dependencies in a writable copy under your home folder, then runs ESLint (npm run lint).

rm -rf ~/rabbit-web && cp -r --no-preserve=mode /workspace/rabbit-web ~/rabbit-web && cd ~/rabbit-web && npm ci --ignore-scripts && npm run lint

Source: package.json

Type checkPublicnetwork

Installs dependencies in a writable copy, then runs npx tsc --noEmit (README.md).

rm -rf ~/rabbit-web && cp -r --no-preserve=mode /workspace/rabbit-web ~/rabbit-web && cd ~/rabbit-web && npm ci --ignore-scripts && npx tsc --noEmit

Source: README.md

Build and dev server

Build the vinext appPublicnetwork

Builds the Cloudflare/vinext bundle in a writable copy (npm run build:vinext). Does not deploy.

rm -rf ~/rabbit-web && cp -r --no-preserve=mode /workspace/rabbit-web ~/rabbit-web && cd ~/rabbit-web && npm ci --ignore-scripts && npm run build:vinext

Source: package.json

Start the dev server (port 3001)Publicnetwork
Runs vite dev on port 3001 inside the sandbox (npm run dev:vinext). Stop it with Ctrl+C. No inbound ports are exposed, so use curl localhost:3001.
```
rm -rf ~/rabbit-web && cp -r --no-preserve=mode /workspace/rabbit-web ~/rabbit-web && cd ~/rabbit-web && npm ci --ignore-scripts && npm run dev:vinext
```
Source: package.json
Write static security headersPubliclocal
Writes public/_headers from src/lib/security-headers.ts in a writable copy (scripts/write-static-headers.mjs).
```
rm -rf ~/rabbit-web && cp -r --no-preserve=mode /workspace/rabbit-web ~/rabbit-web && cd ~/rabbit-web && node scripts/write-static-headers.mjs
```
Source: scripts/write-static-headers.mjs
Make twin interop test fixturesPubliclocal
Writes two throwaway TEST identities, a request and a response to ~/ts-twin.json (scripts/make-twin-fixtures.mjs). Test keys only.
```
cd /workspace/rabbit-web && node scripts/make-twin-fixtures.mjs ~/ts-twin.json
```
Source: scripts/make-twin-fixtures.mjs

Public ledger

Download and verify the public chain ledgerPublicnetwork
Reads GET /api/chain/ledger from the public origin, checks every hash link, saves ~/chain.jsonl, then verifies the saved file (scripts/chain-export.mjs).
```
cd /workspace/rabbit-web && node scripts/chain-export.mjs export https://app.rabbitsoftware.io ~/chain.jsonl && node scripts/chain-export.mjs verify ~/chain.jsonl
```
Source: scripts/chain-export.mjs

Public data hub

Data hub: list the datasetsPublicnetwork
Reads GET /api/data: every dataset with columns, row counts, endpoints and the ledger head. Public and read-only (docs/rabbitos.md, Data hub).
```
curl -fsS https://app.rabbitsoftware.io/api/data | jq
```
Source: docs/rabbitos.md
Data hub: Research recordsPublicnetwork
Reads the first 50 rows of the public research_records dataset (GET /api/data/research_records). Add &format=csv or &q=text. Read-only.
```
curl -fsS "https://app.rabbitsoftware.io/api/data/research_records?limit=50" | jq
```
Source: docs/rabbitos.md
Data hub: Research topicsPublicnetwork
Reads the first 50 rows of the public research_topics dataset (GET /api/data/research_topics). Add &format=csv or &q=text. Read-only.
```
curl -fsS "https://app.rabbitsoftware.io/api/data/research_topics?limit=50" | jq
```
Source: docs/rabbitos.md
Data hub: Research runsPublicnetwork
Reads the first 50 rows of the public research_runs dataset (GET /api/data/research_runs). Add &format=csv or &q=text. Read-only.
```
curl -fsS "https://app.rabbitsoftware.io/api/data/research_runs?limit=50" | jq
```
Source: docs/rabbitos.md
Data hub: AI summariesPublicnetwork
Reads the first 50 rows of the public research_summaries dataset (GET /api/data/research_summaries). Add &format=csv or &q=text. Read-only.
```
curl -fsS "https://app.rabbitsoftware.io/api/data/research_summaries?limit=50" | jq
```
Source: docs/rabbitos.md
Data hub: AgentsPublicnetwork
Reads the first 50 rows of the public agents dataset (GET /api/data/agents). Add &format=csv or &q=text. Read-only.
```
curl -fsS "https://app.rabbitsoftware.io/api/data/agents?limit=50" | jq
```
Source: docs/rabbitos.md
Data hub: Network chain blocksPublicnetwork
Reads the first 50 rows of the public chain_blocks dataset (GET /api/data/chain_blocks). Add &format=csv or &q=text. Read-only.
```
curl -fsS "https://app.rabbitsoftware.io/api/data/chain_blocks?limit=50" | jq
```
Source: docs/rabbitos.md
Data hub: Node scoresPublicnetwork
Reads the first 50 rows of the public node_scores dataset (GET /api/data/node_scores). Add &format=csv or &q=text. Read-only.
```
curl -fsS "https://app.rabbitsoftware.io/api/data/node_scores?limit=50" | jq
```
Source: docs/rabbitos.md
Data hub: Merkle batchesPublicnetwork
Reads the first 50 rows of the public merkle_batches dataset (GET /api/data/merkle_batches). Add &format=csv or &q=text. Read-only.
```
curl -fsS "https://app.rabbitsoftware.io/api/data/merkle_batches?limit=50" | jq
```
Source: docs/rabbitos.md
Data hub: Audit entriesPublicnetwork
Reads the first 50 rows of the public audit_entries dataset (GET /api/data/audit_entries). Add &format=csv or &q=text. Read-only.
```
curl -fsS "https://app.rabbitsoftware.io/api/data/audit_entries?limit=50" | jq
```
Source: docs/rabbitos.md
Data hub: Chain ledger metadataPublicnetwork
Reads the first 50 rows of the public ledger dataset (GET /api/data/ledger). Add &format=csv or &q=text. Read-only.
```
curl -fsS "https://app.rabbitsoftware.io/api/data/ledger?limit=50" | jq
```
Source: docs/rabbitos.md
Data hub: Public commandsPublicnetwork
Reads the first 50 rows of the public commands dataset (GET /api/data/commands). Add &format=csv or &q=text. Read-only.
```
curl -fsS "https://app.rabbitsoftware.io/api/data/commands?limit=50" | jq
```
Source: docs/rabbitos.md

PowerShell on your PC

Load the RabbitNet module (run in PowerShell on your PC)Owner onlylocalrepo root, on the owner's computer
Run in PowerShell on your PC, from the rabbit-web folder. Loads Test-RabbitConnection, Get-RabbitChainHead and Sync-RabbitChain. Default connection is your normal one (no proxy).
```
Import-Module ./scripts/powershell/RabbitNet.psd1 -Force
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: scripts/powershell/RabbitNet.psd1
Check the RabbitOS connection (run in PowerShell on your PC)Owner onlynetworkrepo root, on the owner's computer
Run in PowerShell on your PC after Import-Module. DNS, TCP 443, TLS, HTTP status and latency for app.rabbitsoftware.io and /api/chain/head. Add -NetworkTools for extra diagnostics (asks first).
```
Test-RabbitConnection
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: scripts/powershell/RabbitNet.psd1
Pull and verify the public ledger (run in PowerShell on your PC)Owner onlynetworkrepo root, on the owner's computer
Run in PowerShell on your PC after Import-Module. Pulls the public ledger into a local .jsonl, verifies the hash chain, refuses a broken one. Uploads nothing.
```
Sync-RabbitChain
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: scripts/powershell/RabbitNet.psd1

Local development

Next dev serverOwner onlylocalrepo root, on the owner's computer
npm run dev on http://localhost:3000. Needs your .env.local (README.md).
```
npm run dev
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: README.md
Verify AI providers (your keys)Owner onlynetworkrepo root, on the owner's computer
Lists Gemini models, sends one tiny request to each provider whose key is set in your environment, checks the CLI packages with npm view, and prints PASS/FAIL/SKIPPED. Never prints keys. With no keys only the npm checks run.
```
npm run verify:ai
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Reads environment variables: GEMINI_API_KEY, ANTHROPIC_API_KEY, COPILOT_GITHUB_TOKEN
Source: scripts/verify-ai-providers.mjs

Console builds

Build console: local-primaryOwner onlylocalrepo root, on the owner's computer
vite build --mode local-primary, then scripts/check-console-build.mjs. Build only; the latest build replaces the previous target.
```
npm run build:console:local
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Build console: cloud-supabaseOwner onlylocalrepo root, on the owner's computer
Isolated Supabase console build and output check (README.md). Build only.
```
npm run build:console:supabase
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: README.md
Build console: cloud-accessOwner onlylocalrepo root, on the owner's computer
Isolated Cloudflare Access console build and output check (README.md). Build only.
```
npm run build:console:access
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: README.md
Preview the vinext buildOwner onlylocalrepo root, on the owner's computer
vite preview of an existing build.
```
npm run start:vinext
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json

Deploy

Deploy production (app.rabbitsoftware.io)Owner onlydeployrepo root, on the owner's computer
Production deploy to Cloudflare. Run it only deliberately and with an explicit go-ahead (CLAUDE.md, README.md).
```
npm run deploy:vinext
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Deploy console: local-primaryOwner onlydeployrepo root, on the owner's computer
vinext-cloudflare deploy --env local-primary. Main production; README.md says leave it untouched unless separately requested.
```
npm run deploy:console:local
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: README.md
Deploy console: cloud-supabaseOwner onlydeployrepo root, on the owner's computer
Deploys the isolated Supabase console Worker. Only after explicit deployment approval (README.md).
```
npm run deploy:console:supabase
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: README.md
Deploy console: cloud-accessOwner onlydeployrepo root, on the owner's computer
Deploys the isolated Access console Worker. Only after explicit deployment approval (README.md).
```
npm run deploy:console:access
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: README.md
Cloud console deploy script: cloud-supabaseOwner onlysecretrepo root, on the owner's computer
README.md form of scripts/deploy-cloud-console.mjs. Reads an ignored secrets file and your vault; deploys.
```
node scripts/deploy-cloud-console.mjs cloud-supabase --vault "<vault-path>" --shell-secrets "<secrets-file>"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: README.md
Cloud console deploy script: cloud-accessOwner onlysecretrepo root, on the owner's computer
README.md form of scripts/deploy-cloud-console.mjs for the Access console. Reads an ignored secrets file and your vault; deploys.
```
node scripts/deploy-cloud-console.mjs cloud-access --vault "<vault-path>" --shell-secrets "<secrets-file>"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: README.md
Create the chain mirror R2 bucketOwner onlydeployrepo root, on the owner's computer
One-time setup from docs/rabbitos.md, then deploy so the binding exists.
```
npx wrangler r2 bucket create rabbitos-chain-mirror
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: docs/rabbitos.md
List R2 bucketsOwner onlyreadrepo root, on the owner's computer
Checks the chain mirror bucket exists (docs/rabbitos.md). Uses your Cloudflare login.
```
npx wrangler r2 bucket list
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: docs/rabbitos.md

Database

Snapshot the API schemaOwner onlysecretrepo root, on the owner's computer
Writes a structural snapshot of the Supabase public schema into supabase/schema/ (scripts/snapshot-api-schema.mjs). Read-only, uses the service role.
```
npm run schema:snapshot
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Reads environment variables: SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY
Source: scripts/snapshot-api-schema.mjs
Dump the full schemaOwner onlysecretrepo root, on the owner's computer
Writes supabase/schema/full_schema.sql (scripts/dump-schema.mjs). Read-only, needs the database URL.
```
npm run schema:dump
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Reads environment variables: SUPABASE_DB_URL
Source: scripts/dump-schema.mjs
Push missing chain events to the siteOwner onlysecretrepo root, on the owner's computer
Signed POST to /api/chain/import for events the site is missing (scripts/chain-export.mjs). Writes remote data.
```
node scripts/chain-export.mjs import https://app.rabbitsoftware.io ~/chain.jsonl
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Reads environment variables: INGEST_SHARED_SECRET
Source: scripts/chain-export.mjs
Rebuild MeSH concept IDsOwner onlynetworkrepo root, on the owner's computer
Looks up MeSH IDs live and rewrites src/lib/concepts.generated.json (scripts/build-concepts.mjs). Its host is not on the public sandbox allowlist.
```
node scripts/build-concepts.mjs
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: scripts/build-concepts.mjs
Add UMLS CUIs (asks for your key)Owner onlysecretrepo root, on the owner's computer
PowerShell helper that asks for your UMLS key privately and adds CUIs to the body model (scripts/add-umls.ps1).
```
.\scripts\add-umls.ps1
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Reads environment variables: UMLS_API_KEY
Source: scripts/add-umls.ps1

Contact records

Create contact record keysOwner onlysecretrepo root, on the owner's computer
Writes your PRIVATE key outside the repo and the public key to .dev.vars (scripts/contact-keys.mjs). Run it yourself, on your machine.
```
npm run contacts:keys
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: scripts/contact-keys.mjs
Contact key self-testOwner onlysecretrepo root, on the owner's computer
Proves a private key matches the public key the site uses (scripts/contact-lookup.mjs selftest). No database access.
```
npm run contacts:selftest
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: scripts/contact-lookup.mjs
Open a contact record (legal request)Owner onlysecretrepo root, on the owner's computer
Opens one record for a valid legal request and writes an append-only access log (docs/legal-requests.md).
```
npm run contacts:lookup -- --email person@example.com --key "<private-key-path>" --reason "<reason>" --ref "<legal-reference>"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: docs/legal-requests.md
Purge expired contact recordsOwner onlysecretrepo root, on the owner's computer
Retention purge from docs/legal-requests.md.
```
npm run contacts:lookup -- purge-expired --reason "monthly retention purge" --ref "retention policy"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: docs/legal-requests.md

rabbitsoftware-cloudflare

Public sandbox helpers

Show the public ledgerPublicnetwork
Sandbox helper: prints the public chain head, then the ledger (container/ledger). Public endpoints only.
```
ledger
```
Source: workers/public-shell/container
List the read-only reposPublicread
Sandbox helper: lists the public code in /workspace (container/repos).
```
repos
```
Source: workers/public-shell/container
Check the sandbox connection (HTTPS reachability of allowed hosts)Publicnetwork
Sandbox helper: curl --head with a 5 s timeout to each allowlisted host only. No scanning, no ping or DNS tools (not installed). "rabbit-net status" shows the allowlist.
```
rabbit-net check
```
Source: workers/public-shell/container/rabbit-net
Show the PowerShell 7 version in the sandboxPublicread
Prints the PowerShell 7 version installed in the sandbox. Type pwsh alone to start it; the login shell stays bash.
```
pwsh --version
```
Source: workers/public-shell/Dockerfile
Serve the static website (port 8788)Publiclocal
The "Dev site (static, no tooling)" command from DEVELOPMENT.md on the sandbox copy of site/. Stop with Ctrl+C.
```
cd /workspace/rabbitsoftware-site && python3 -m http.server 8788 --bind 127.0.0.1 --directory site
```
Source: DEVELOPMENT.md

Dev servers

Dev: website (Pages)Owner onlylocalrepo root, on the owner's computer
wrangler pages dev site on port 8788.
```
npm run dev:site
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Dev: sync WorkerOwner onlylocalrepo root, on the owner's computer
Local-only wrangler dev for workers/sync on port 8801 (never points at production).
```
npm run dev:sync
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Dev: node-workerOwner onlylocalrepo root, on the owner's computer
Local-only wrangler dev for workers/node-worker on port 8802.
```
npm run dev:node-worker
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Dev: gatewayOwner onlylocalrepo root, on the owner's computer
Local-only wrangler dev for workers/gateway on port 8803.
```
npm run dev:gateway
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Dev: vault-agent WorkerOwner onlylocalrepo root, on the owner's computer
wrangler dev for workers/vault-agent on port 8805 using only simulated -dev storage (DEVELOPMENT.md).
```
npm run dev:vault-agent
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Dev: owner cloudshell WorkerOwner onlylocalrepo root, on the owner's computer
Local wrangler dev for workers/cloudshell on port 8806.
```
npm run dev:cloudshell
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Dev: public-shell WorkerOwner onlylocalrepo root, on the owner's computer
Local wrangler dev for workers/public-shell on port 8807.
```
npm run dev:public-shell
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Local site with a local modelOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: serves the site against a local Ollama model, which must already be pulled.
```
python scripts/local-site.py --model qwen2.5:3b
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md

Tests and checks

Test: tasks WorkerOwner onlylocalrepo root, on the owner's computer
node --test scripts/test-tasks-worker.mjs.
```
npm run test:tasks
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Test: cloudshell and cloud accessOwner onlylocalrepo root, on the owner's computer
Cloudshell, cloud-access and vault cloud-access tests.
```
npm run test:cloudshell
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Test: public-shell WorkerOwner onlylocalrepo root, on the owner's computer
node --test scripts/test-public-shell.mjs.
```
npm run test:public-shell
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Test: website pages (chain viewer, data hub)Owner onlylocalrepo root, on the owner's computer
node --test scripts/test-chain-viewer.mjs scripts/test-site-data.mjs.
```
npm run test:site
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Typecheck: public-shellOwner onlylocalrepo root, on the owner's computer
tsc -p workers/public-shell/tsconfig.json.
```
npm run typecheck:public-shell
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Typecheck: cloudshellOwner onlylocalrepo root, on the owner's computer
tsc -p workers/cloudshell/tsconfig.json.
```
npm run typecheck:cloudshell
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Test: gateway and Qwen quotaOwner onlylocalrepo root, on the owner's computer
Gateway quota and Qwen gateway tests.
```
npm run test:gateway
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Test: coding agentOwner onlylocalrepo root, on the owner's computer
node --test scripts/test-coding-agent.mjs.
```
npm run test:coding-agent
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Test: vault mailbox clientsOwner onlylocalrepo root, on the owner's computer
Strict TypeScript check of the clients, then their node tests (Java client test needs a JDK).
```
npm run test:vault-mailbox-clients
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Check page CSPOwner onlylocalrepo root, on the owner's computer
scripts/check-csp.mjs on changed HTML (DEVELOPMENT.md).
```
npm run check:csp
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Health probe (site, console, API, agent)Owner onlynetworkrepo root, on the owner's computer
scripts/probe.mjs requests several rabbitsoftware.io hosts; most are not on the public sandbox allowlist.
```
npm run probe
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: scripts/probe.mjs
Test: site installers (Python)Owner onlylocalrepo root, on the owner's computer
Offline regression checks for the site installers (DEVELOPMENT.md).
```
python -B scripts/test-site-installers.py
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Test: local site server (Python)Owner onlylocalrepo root, on the owner's computer
Request-guard tests for scripts/local-site.py (DEVELOPMENT.md).
```
python -B scripts/test-local-site.py
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Test: Qwen gateway and quotaOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md; the quota test runs real workerd SQL/RPC.
```
node --test scripts/test-qwen-gateway.mjs scripts/test-qwen-quota.mjs
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md

Deploy

Dry run: Qwen gatewayOwner onlylocalrepo root, on the owner's computer
Packages without deploying.
```
npx wrangler deploy --config workers/qwen/wrangler.jsonc --dry-run
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Dry run: tasks WorkerOwner onlylocalrepo root, on the owner's computer
Packages without deploying.
```
npx wrangler deploy --config workers/tasks/wrangler.jsonc --dry-run
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Dry run: gatewayOwner onlylocalrepo root, on the owner's computer
Packages without deploying.
```
npx wrangler deploy --config workers/gateway/wrangler.toml --dry-run
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Deploy one WorkerOwner onlydeployrepo root, on the owner's computer
README.md "Deploying": one Worker at a time; deploy sync before node-worker. Replace the placeholder first.
```
cd workers/<gateway|node-worker|sync> && npx wrangler deploy
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: README.md
Publish the website previewOwner onlydeployrepo root, on the owner's computer
wrangler pages deploy to the preview branch for review.
```
npm run preview:site
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: README.md
Publish the website to productionOwner onlydeployrepo root, on the owner's computer
README.md: production branch is master.
```
npx wrangler pages deploy site --project-name rabbitsoftware-site --branch master
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: README.md

Vault agent (workers/vault-agent)

Dry run: vault-agent WorkerOwner onlylocalrepo root, on the owner's computer
Packages workers/vault-agent without deploying.
```
npx wrangler deploy --config workers/vault-agent/wrangler.jsonc --dry-run
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:agents planOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: shows what a sync would send. Uploads nothing.
```
npm run vault:agents -- --vault "<vault-path>" --plan
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:agents sync (uploads opted-in notes)Owner onlysecretrepo root, on the owner's computer
DEVELOPMENT.md: uploads opted-in notes to the cloud vault agent.
```
npm run vault:agents -- --vault "<vault-path>" --sync --allow-upload
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:agents pull resultsOwner onlysecretrepo root, on the owner's computer
DEVELOPMENT.md: downloads finished cloud job results into the vault.
```
npm run vault:agents -- --vault "<vault-path>" --pull
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:agents apply a jobOwner onlysecretrepo root, on the owner's computer
DEVELOPMENT.md: applies a reviewed job to the vault.
```
npm run vault:agents -- --vault "<vault-path>" --apply <job-id> --approve-edits
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Test: vault agent suiteOwner onlylocalrepo root, on the owner's computer
The eleven vault-agent test files (DEVELOPMENT.md).
```
npm run test:vault-agent
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:agent searchOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: local Ollama search over your vault.
```
npm run vault:agent -- --vault "<vault-path>" --search "agents workers"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:agent read a noteOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: reads one note.
```
npm run vault:agent -- --vault "<vault-path>" --read "Agents/Agents.md"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:agent taskOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: runs a local research/tool loop on selected notes.
```
npm run vault:agent -- --vault "<vault-path>" --task "<task>"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:agent approve learningOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: promotes a reviewed proposal to a retrieval-memory note.
```
npm run vault:agent -- --vault "<vault-path>" --approve-learning "Cloud Agents/Proposals/<id>-<index>.json"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:agent:install (Obsidian plugin)Owner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: copies the Rabbit Vault Agent plugin into .obsidian/plugins.
```
npm run vault:agent:install -- --vault "<vault-path>"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md

Supabase

Supabase: start local stackOwner onlylocalrepo root, on the owner's computer
npx supabase start.
```
npm run supabase:start
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Supabase: stop local stackOwner onlylocalrepo root, on the owner's computer
npx supabase stop.
```
npm run supabase:stop
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Supabase: link the projectOwner onlysecretrepo root, on the owner's computer
npx supabase link with the project ref; needs your Supabase login.
```
npm run supabase:link
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Supabase: db diffOwner onlylocalrepo root, on the owner's computer
npx supabase db diff.
```
npm run supabase:diff
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json
Supabase: generate typesOwner onlysecretrepo root, on the owner's computer
npx supabase gen types typescript --linked; needs your Supabase login.
```
npm run supabase:types
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: package.json

Vault tasks and dispatch

vault:tasks discoverOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md.
```
npm run vault:tasks -- --vault "<vault-path>" --discover
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:tasks listOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md.
```
npm run vault:tasks -- --vault "<vault-path>" --list
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:tasks enqueueOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md.
```
npm run vault:tasks -- --vault "<vault-path>" --enqueue task.json
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:tasks runOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: each run needs an explicit operator decision.
```
npm run vault:tasks -- --vault "<vault-path>" --run
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:dispatch listOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md.
```
npm run vault:dispatch -- --vault "<vault-path>" --agent vault-dispatcher --list
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:dispatch inspectOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md.
```
npm run vault:dispatch -- --vault "<vault-path>" --agent vault-dispatcher --inspect "<request-id>"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:dispatch reviewOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md.
```
npm run vault:dispatch -- --vault "<vault-path>" --agent vault-dispatcher --review "<task-id>"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md

Vault network

vault:network listOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: store-and-forward mailbox.
```
npm run vault:network -- --vault "<vault-path>" --list
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:network receiveOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md.
```
npm run vault:network -- --vault "<vault-path>" --receive vault-orchestrator
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:network diagnoseOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: checks adapters without needing a vault.
```
npm run vault:network -- --diagnose
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:network serve (port 8810)Owner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md.
```
npm run vault:network -- --vault "<vault-path>" --serve 8810
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md

Vault corpus

vault:corpus planOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: counts only, no network.
```
npm run vault:corpus -- --plan
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:corpus applyOwner onlysecretrepo root, on the owner's computer
DEVELOPMENT.md: uploads changed chunks and deletes removed ones.
```
npm run vault:corpus -- --apply
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
vault:liveOwner onlysecretrepo root, on the owner's computer
Re-indexes the corpus and pulls finished cloud job results; logs to .wrangler/vault-live.log.
```
npm run vault:live
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: scripts/vault-live.mjs

Cloud access and approvals

vault:cloud-accessOwner onlysecretrepo root, on the owner's computer
DEVELOPMENT.md: authenticated cloud-access requests and decisions. See the component guide for the actions.
```
npm run vault:cloud-access -- --vault "<vault-path>" <action>
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
agent:code (coding agent)Owner onlysecretrepo root, on the owner's computer
scripts/coding-agent.mjs: a coding agent that goes through the approval-gated cloud tools. Also reads provider keys from the environment.
```
npm run agent:code
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Reads environment variables: CLOUD_TOOLS_AGENT_TOKEN, RABBIT_CLOUD_TOOLS_URL
Source: scripts/coding-agent.mjs

Vault imports

Sync Hugging Face into the vaultOwner onlynetworkrepo root, on the owner's computer
DEVELOPMENT.md: one note per model, dataset and Space.
```
python scripts/sync-huggingface-vault.py --vault "<vault-path>"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Test: Hugging Face vault syncOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md.
```
python -B scripts/test-sync-huggingface-vault.py
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Import GitHub into the vaultOwner onlynetworkrepo root, on the owner's computer
DEVELOPMENT.md.
```
python scripts/import-github-vault.py --vault "<vault-path>"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Verify the GitHub importOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md.
```
python scripts/import-github-vault.py --vault "<vault-path>" --verify-only
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Sync GitHub vaultOwner onlynetworkrepo root, on the owner's computer
DEVELOPMENT.md.
```
python scripts/sync-github-vault.py --vault "<vault-path>"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Verify the GitHub vault syncOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md.
```
python scripts/sync-github-vault.py --vault "<vault-path>" --verify-only
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
Publish the development notes pageOwner onlylocalrepo root, on the owner's computer
DEVELOPMENT.md: builds the site development page from the vault.
```
node scripts/publish-development.mjs --vault "<vault-path>"
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md

research-agents

Task worker

task_worker dry runOwner onlynetworkrepo root, on the owner's computer
Claims nothing; shows what the handlers would do for a sample task.
```
python task_worker.py --dry-run
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: task_worker.py
task_worker handle one taskOwner onlysecretrepo root, on the owner's computer
Claims at most one filed task, runs it against public sources and sends back a proposal (RABBIT_TASK_NODE_ID is optional).
```
python task_worker.py --once
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Reads environment variables: RABBIT_URL, RABBIT_INGEST_SECRET, RABBIT_TASK_NODE_ID
Source: task_worker.py
task_worker keep pollingOwner onlysecretrepo root, on the owner's computer
Polls every 20 seconds.
```
python task_worker.py
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Reads environment variables: RABBIT_URL, RABBIT_INGEST_SECRET
Source: task_worker.py

Sync to RabbitOS

rabbit_sync dry runOwner onlylocalrepo root, on the owner's computer
Prints what would be sent; sends nothing.
```
python rabbit_sync.py --dry-run
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: rabbit_sync.py
rabbit_sync one passOwner onlysecretrepo root, on the owner's computer
Pushes local state to the signed ingest endpoint (RABBIT_NODE_ID is optional with one node).
```
python rabbit_sync.py
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Reads environment variables: RABBIT_URL, RABBIT_INGEST_SECRET, RABBIT_NODE_ID
Source: rabbit_sync.py
rabbit_sync every 5 minutesOwner onlysecretrepo root, on the owner's computer
Repeats the sync every 300 seconds.
```
python rabbit_sync.py --watch 300
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Reads environment variables: RABBIT_URL, RABBIT_INGEST_SECRET
Source: rabbit_sync.py

Maxwell mirror

maxwell_chain_sync dry run (run on your PC)Owner onlylocalrepo root, on the owner's computer
Run on your PC, from the research-agents folder. Verifies maxwell_chain.json and prints which new blocks would be mirrored to the public ledger; sends nothing and writes no state. Without --dry-run it posts the new blocks to /api/ingest/maxwell-chain (needs RABBIT_URL and RABBIT_INGEST_SECRET).
```
python maxwell_chain_sync.py --dry-run
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: maxwell_chain_sync.py

Agents

run_all (chain, research agent, AI participant, audit)Owner onlynetworkrepo root, on the owner's computer
The single entry point that launches everything under one project identifier.
```
python3 run_all.py
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: run_all.py

Public chain

chain_pull onceOwner onlynetworkrepo root, on the owner's computer
Pulls and verifies the public ledger into a local JSONL copy. No secret needed; a broken chain is refused (exit 2). The repo is not in the public sandbox.
```
python chain_pull.py --once
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Reads environment variables: RABBIT_URL
Source: chain_pull.py
chain_pull once from app.rabbitsoftware.ioOwner onlynetworkrepo root, on the owner's computer
Same, with the origin given explicitly.
```
python chain_pull.py --url https://app.rabbitsoftware.io --out chain_ledger_local.jsonl --once
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: chain_pull.py

Research

brain_researchOwner onlynetworkrepo root, on the owner's computer
Searches PubMed and Europe PMC for EEG, chemistry and gene papers; writes brain_records.json.
```
python brain_research.py
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: brain_research.py
brain_research, 3 per queryOwner onlynetworkrepo root, on the owner's computer
Fewer results per query.
```
python brain_research.py --per-query 3
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: brain_research.py
neuro_variantsOwner onlynetworkrepo root, on the owner's computer
ClinVar variant counts and examples for the brain genes; writes neuro_records.json and neuro_gene_counts.json.
```
python neuro_variants.py
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: neuro_variants.py
neuro_variants for COMTOwner onlynetworkrepo root, on the owner's computer
One gene.
```
python neuro_variants.py --gene COMT
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: neuro_variants.py
bio_networks (ping public data sources)Owner onlynetworkrepo root, on the owner's computer
Pings every public source and prints status and latency (--json for machines).
```
python bio_networks.py
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: .claude/skills/bio-research-sources/SKILL.md

CRISPR

crispr_data (BRCA1)Owner onlynetworkrepo root, on the owner's computer
Transcripts, guides and literature for one gene; writes crispr_records.json. Text and public data only.
```
python crispr_data.py --gene BRCA1
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
crispr_data (BRCA1, no literature)Owner onlynetworkrepo root, on the owner's computer
Skips the literature search.
```
python crispr_data.py --gene BRCA1 --no-literature
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
crispr_research_suiteOwner onlynetworkrepo root, on the owner's computer
All four pieces together.
```
python crispr_research_suite.py
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
crispr_cancer_researchOwner onlynetworkrepo root, on the owner's computer
Literature only (trials, papers, preprints).
```
python crispr_cancer_research.py
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
crispr_tool: guides for BRCA1Owner onlynetworkrepo root, on the owner's computer
Top guides on a built-in gene (RefSeq transcript downloaded once and cached).
```
python crispr_tool.py --gene BRCA1
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md
crispr_tool: preview a 1-base deletionOwner onlynetworkrepo root, on the owner's computer
Edit preview that reports the protein change.
```
python crispr_tool.py --gene BRCA1 --guide 1 --delete 1
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: DEVELOPMENT.md

EEG

brainflow_bridge dry run (synthetic board)Owner onlylocalrepo root, on the owner's computer
Synthetic board; prints and sends nothing (eeg-brainflow skill). Personal EEG stays on your computer.
```
python brainflow_bridge.py --dry-run --seconds 10
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: .claude/skills/eeg-brainflow/SKILL.md

Tests

Test: audit trailOwner onlylocalrepo root, on the owner's computer
Two writers must still produce one unbroken chain.
```
python -m unittest test_audit_trail
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: test_*.py
Test: bio_toolsOwner onlylocalrepo root, on the owner's computer
Offline checks; needs biopython.
```
python -m unittest test_bio_tools
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: test_*.py
Test: brainflow bridgeOwner onlylocalrepo root, on the owner's computer
Band-power maths without hardware.
```
python -m unittest test_brainflow_bridge
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: test_*.py
Test: chain_pullOwner onlylocalrepo root, on the owner's computer
Hash check against a vector made by the web app code.
```
python -I -m unittest test_chain_pull
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: test_*.py
Test: crispr_dataOwner onlylocalrepo root, on the owner's computer
Every guide is a 20-mer followed by NGG on both strands.
```
python -m unittest test_crispr_data
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: test_*.py
Test: crispr_toolOwner onlylocalrepo root, on the owner's computer
The one-stop CLI.
```
python -m unittest test_crispr_tool
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: test_*.py
Test: neuro_variantsOwner onlylocalrepo root, on the owner's computer
ClinVar calls are faked.
```
python -m unittest test_neuro_variants
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: test_*.py
Test: task_workerOwner onlylocalrepo root, on the owner's computer
Task worker handlers.
```
python -m unittest test_task_worker
```
Runs only in the owner CloudShell (with consent) or on the owner's computer. Not available here.
Source: test_*.py