Reachpad CLI

Linux x86_64/arm64 (musl, static) and macOS arm64/x86_64. The script fetches

All three deliver the same binary. @reachpad/cli is a launcher around it, not

lists your workspaces. WorkOS handles the account login and any required MFA or

SSO. After approval, Reachpad exchanges the short-lived WorkOS token once and

• No password or authentication factor is entered into Reachpad.

On a remote machine without a usable browser, run reachpad auth login --no-browser and open the displayed URL on another device. The manual

after the release checksum is verified. Whoever installed the binary owns it —

a second writer is how a working install becomes a broken one.

the config and tracing shell). Release binaries are built from this source

runners, and every release carries a SHA256SUMS the install script verifies.

gh attestation verify reachpad- < target > .tar.gz --repo Reachpad/reachpad-cli

commit the tag names. It rests on no key of ours — the signing identity is a

next sync (the sync script and its header in Cargo.toml say the same).