CLI

bobby installs, configures and runs the runtime. With no subcommand it runs bobby serve. bobby --version prints the version and bobby <command> --help lists a command's flags.

Global options

Put them before the subcommand. Without them, bobby uses the personal scope.

Commands

bobby install

Interactive setup. Add --yes to accept defaults and --host <claude|vscode|zed|acp|openshell> (repeatable) to choose hosts without prompts. See Installation for the flag list.

bobby init

Writes a credential file (mode 0600) and prints the bearer once.

bobby token

Prints the enrolled bearer for SDK, HTTP and CDP clients. It refuses to write to a redirected stdout unless you pass --stdout.

bobby serve

On loopback, serve creates a credential if none exists and prints it once. Non-loopback binds need one up front. Health is at GET /healthz. bobby mcp-stdio and bobby acp-stdio take the same flags. bobby cdp also takes --cdp-port. See Run the server.

bobby doctor

Read-only checks of configuration, browser selection, credential, storage, sidecars, browsers on PATH and /healthz.

Exit status is 1 when any check fails and 0 for warnings only. An unhealthy report starts with next: bobby doctor --fix, and repairable failures name the fix. Output is plain text when piped or when NO_COLOR is set.

--fix is idempotent. It restores an unrestricted credential's capabilities, creates missing storage directories, normalizes the selected vision provider, starts a loopback Ollama if the selected provider is down, and readiness-tests the provider. It never chooses a provider or model, overwrites a custom endpoint, stores secrets, installs system packages or leaves a daemon running. A missing MLX model stays an action item until you pass --download-model.

bobby runtime

Manage the shared runtime of the current scope.

stop and restart ask before disconnecting attached agents. Without a terminal, pass --disconnect-agents.

bobby firefox-start

Opens the installed Bobby Firefox profile for pairing or browsing. See Firefox companion.

bobby jobs

An HTTP client for /v1/jobs. The scheduler runs inside bobby serve.

bobby jobs submit --name echo --payload '{"message":"hi"}'
bobby jobs submit --name echo --payload-file ./job.json --priority high --idempotency-key run-1
bobby jobs status <job_id>
bobby jobs cancel <job_id>

Shared flags: --config, --bootstrap-env, --base-url <url> and --token <bearer>. submit takes --name (required), --payload, --payload-file, --priority (low, normal, high, critical), --max-retries, --timeout-ms and --idempotency-key. The credential needs job:submit, job:read and job:cancel.

bobby audit

Signed audit bundles for one workflow. See Evidence and checkpoints.

bobby audit key
bobby audit export --workflow <workflowId> --out bundle.tar
bobby audit verify bundle.tar --public-key <hex>
bobby audit replay bundle.tar --out bundle.html

export takes --config and --key <path> (default audit-signing-key.pk8 in the config directory, created on first use). --out must not exist. verify exits non-zero and names the failing file or signature. replay verifies and writes a self-contained page; see Workflow replay.

bobby context

bobby context list --profile <profile-id>
bobby context forget --profile <profile-id> <site>

list shows remembered sites. forget erases everything remembered for one site. Both take --config and --dir. See Context graph.

bobby vision

bobby vision connect --provider ollama
bobby install --vision --vision-provider ollama
bobby install --yes --vision-provider ollama --vision-model llava:7b
bobby vision connect --yes --provider mlx
bobby vision connect --yes --provider mlx --activate --download-model
bobby vision connect --yes --backend acp --provider codex --command codex --arg acp --auth advertised

connect flags: --provider (openai, ollama, lmstudio, mlx, custom), --backend (direct or acp), --base-url, --model, --api-key-env, --command, --arg, --auth, --config, --yes, --activate, --download-model. By default connect only writes configuration. --activate also readiness-tests the provider, and --download-model (which needs --activate) lets it fetch a missing MLX model. See Configuration.

detect and solve take --purpose and either --url for a new session or --session with --page for an existing one. detect is read-only and defaults to a 15 second budget (--timeout-ms). solve defaults to 120 seconds and accepts --zigzagzig for humanized input and fingerprint spoofing. --node picks the vision node (default vision). Both need vision:assist.

bobby vision detect --purpose "check for a captcha blocking signup" --url https://example.com
bobby vision solve --purpose "solve the challenge" --session <id> --page <id>

bobby openshell

install, provision, rotate, list, status and revoke. See OpenShell host.

Environment variables