NurCLI: Fully-loaded, SOTA cost-efficient coding agent command-line interface.
See the codeUse fewer paid tokens by default.
The harness supersedes stale duplicate reads, spills large tool results, preserves provider prompt caches, and compacts repeatedly using an OMP-style response reserve instead of a premature fixed percentage. It also supports local context estimates when providers omit usage, prompt caching, local models, and focused Oh My Pi delegation through a verified authenticated economy model.
TypeSafe · Jev judgments run inside the harness rather than beside it: one batched request decides which tool calls are still worth their tokens, whether a result actually worked, and what a fresh context can drop - so compaction writes no summary, survivors stay verbatim, and the frontier model is never paid to answer an if-statement. Provider-agnostic (one key lifts every model), and keyless on this machine through three supported local engines - openJev-verdict-2.0, Bespoke-Nimble-9B, and Laya Core ML (docs/jev-local.md). Native failover, cross-provider subagents, and delegated OMP work all report their actual token and cost impact in Nur's session budgets and /usage totals.
Your personal coding agent. Custom Rust harness, dense gold TUI, native vision, tools, knowledge stack, gated execution. Multi-provider /provider plus a unified /auth vault. Any model via --model / /model / config.
nur # interactive gold TUI
One command on every OS:
npx nur-cli
Downloads the prebuilt native binary from GitHub Releases (no Rust toolchain, no clone, no build), drops it in ~/.local/bin, and runs the full stack setup. Keep it permanently with npm i -g nur-cli.
Prefer a one-liner without Node? The classic one-liners (build from source) or the Windows EXE (prebuilt) each drop nur on your PATH, pull in every runtime dependency they can, and wire the full agent stack before the TUI opens.
_-_recommended-a855f7?style=for-the-badge){kind=icon}
irm https://raw.githubusercontent.com/nuroctane/nur-cli/main/install.ps1 | iex
curl -fsSL https://raw.githubusercontent.com/nuroctane/nur-cli/main/install.sh | bash
nur auth login # key -> ~/.nur/auth.json (or set NUR_API_KEY)
nur # open the TUI
nur doctor # health check
Or run nur and use /provider in the TUI (/login remains an alias): pick any of 70 providers
(OpenAI, Anthropic, Gemini, xAI, Groq, OpenRouter, Requesty, local Ollama/LM Studio, Meta Model API, and so on).
For OpenAI, Anthropic, xAI, Kimi Code, Google Gemini, Azure OpenAI, GitHub Models, GitHub Copilot, Cursor, Factory Droid, Cline, Muse Code, DeepSeek Harness, and ZCode (GLM) you can sign in with a browser or an official CLI session (or import an existing Codex / Claude Code / Grok / Kimi / Cursor Agent / Droid / Cline / Muse / dsh / ZCode session) instead of pasting an API key. nur auth login --provider muse --browser (and the same for deepseek / zcode) is the CLI equivalent of TUI /login. OAuth sessions refresh before use, retry once after an authentication rejection, and /model detects the models available to the active credential. Cursor uses cursor-agent login and runs chat through the Agent CLI (no API key required); Factory Droid works the same way through droid exec (NUR_DROID_BIN when the launcher is outside PATH). DeepSeek's official harness is API-key only ($DSH_HOME/.credentials.yaml). No credential on launch and login opens automatically.
Provider requests have a shared five-minute watchdog by default, immediate Esc cancellation, and clean transport teardown. Set NUR_PROVIDER_TURN_TIMEOUT_SECS to adjust the ceiling. On Windows, Nur also recovers successful Cursor Agent turns from Cursor's durable transcript when affected CLI builds emit no redirected stdout.
Keys are kept per provider, so switching with /provider never strands the one you switched away from - it stays available for failover, fusion, and subagents running on another provider's model. /auth opens one scrollable vault for every provider, where you can add, replace, import CLI/OMP, or delete credentials without switching the current chat. Imported OMP credentials retain their real kind, so API keys use API endpoints and OAuth subscriptions use their provider-specific OAuth routes. See docs/authentication.md.
Sign-in handling and its regression coverage are documented in the 65-provider authentication review, including vendor CLI progress, token rotation, credential replacement, and Claude's manual fallback.
nur update
Pulls latest main when a Laboratory checkout exists (~/laboratory/nur-cli or ~/Laboratory/nur-cli), rebuilds, reinstalls nur on PATH, re-provisions the ecosystem. No checkout? Falls back to nur install.
| Also fine | |
|---|---|
Re-run npx nur-cli | Fresh prebuilt binary + stack |
| Re-run the one-liner | Full rebuild from GitHub |
| Re-download + double-click Windows EXE | Prebuilt path |
nur install | Reinstall this binary + stack (no git pull) |
Verify: nur --version · nur doctor. Detail: docs/setup.md → Update.
| 1. npx (above) Prebuilt binary, every OS. Fastest. | 2. One-liner Builds from source + full stack. | -a855f7?style=for-the-badge){kind=icon} Download → double-click → done. | 4. From a clone You already have the repo. |
nur-windows-x86_64.exe.\nur-windows-x86_64.exe in a terminal)Copies itself to ~\.local\bin\nur.exe, PATH, prereqs, ecosystem + browser setup, then opens NurCLI.
3. Already cloned
cd nur-cli
.\install.ps1 # Windows
# ./install.sh # macOS / Linux
4. Manual cargo build
git clone https://github.com/nuroctane/nur-cli.git
cd nur-cli
cargo build --release
./target/release/nur install # Windows: .\target\release\nur.exe install
nur auth login
Everything is local. Secrets never go into the git repo.
| Piece | Why |
|---|---|
| Rust / cargo | Builds the CLI (one-liner / cargo only; npx path needs none) |
| Git | Clone / update |
| Node.js 20+ | PLUR · Ruflo · Executor · skills · browser · AKM (the npx shim itself needs only Node 18+) |
| Bun | omp backend |
| uv | Graphify |
ripgrep (rg) | Fast grep / glob, and the file walk behind sgrep |
| sgrep | Semantic code search (sgrep tool); built with cargo install --git https://github.com/context-dot-dev/sgrep --locked, model (32 MB) downloaded once |
| ffmpeg | extract_frames |
| Piece | Path |
|---|---|
nur binary | ~/.local/bin/nur (Windows: nur.exe) |
| SHA-256 record | ~/.local/bin/nur.sha256 |
| Source checkout (one-liner) | ~/laboratory/nur-cli (override NUR_CLI_DIR) |
| User PATH | ~/.local/bin |
~/.nur/| Path | Purpose |
|---|---|
auth.json | Active credential |
provider_keys.json · provider_sessions.json | Per-provider keys / OAuth sessions (failover + subagents) |
config.toml | Model, effort, budgets, etc. |
sessions/ | Chat sessions |
plugins/ · plugins/registry.json | Marketplace installs (/plugins, nur plugins) |
skills/ · ruflo/ · tool-results/ | Skills, vector memory, spilled tool output |
status.json · usage.jsonl · ade.json | Live usage + host panels |
nur.log | Tracing (not painted into the TUI) |
Graphify · PLUR · Ruflo · Executor · omp · agent-browser-cli · Text-to-CAD ·
mobile-harness · /sc-research whitehat DeFi pack (X bounty intel + historical vuln library) · skill packs. Installed when
Node/uv/Bun are available.
Docs: nuroctane.xyz/cli · docs/setup.md
| Surface | What ships |
|---|---|
| TUI | Streaming · duration chips · thought/tool cards · every transcript piece in a theme-coloured frame · peek · drag-select · scrollbar · sessions · multi-provider /login · /model picker · /plugins marketplace · /goal /bro /adhd /scan /btw /codesearch /mc /feedback /tips · every skill as /name · 41 themes including 18 chromatic studies + transparency mode · provider logo in the busy line + tab title · every path in the transcript is a link that opens · block-structured markdown with theme-role colours · LaTeX rendering (image-peek build) · /receipt verifies the hash chain and exports spans · budgets · doctor |
| Agent | Manual / plan / auto · tools · subagents · todos · auto-compact · session $ / token budgets · Esc cancel · Shift+Tab mid-turn · NL skill auto-activation |
| Vision | look · extract_frames · prompt auto-attach · compact image attachments with on-demand previews (Ctrl+V paste or /image <path>, F4 preview) |
| Tools | read · edit · bash · web · browser (incl. element picking) · git · knowledge · agent · judgments (typesafe) · security agents (enclave) · memory (optmem connectome mem) · diagrams (excalidraw tldraw penecho) · policy (dogwood) · background (bg) · async (admission goal proposal message question) · docs (anydoc) · python REPL (repl) · excalidraw |
| Ecosystem | Graphify · GraphJin · PLUR · Ruflo · Executor · TypeSafe/Jev (+ keyless local engines) · Enclave (security agents over native MCP) · OptMem · Headroom · Connectome · dogwood · omp · browser · AKM · 1,000+ skills · /sc-research whitehat DeFi + X bounty intel + historical vuln library · plugin marketplace (Fable, Superpowers, Vercel, …) |
| Hardening | Approval modes · parsed bash denylist · per-domain fetch approval · SSRF blocks · atomic ~/.nur IO · permissions/hooks · signed releases (minisign + SHA-256) · nur doctor |
| Real agent, not a wrapper | Modes, tools, streaming, cancel, subagents, auto-compact |
| Sees media | Multimodal images/short video. Sparse frames, not spam. |
| One-shot install | npx nur-cli, one-liner, or Windows EXE · PATH · ecosystem · browser |
| Easy updates | nur update |
| Knowledge stack | Graph · engrams · vector memory · MCP · skills |
| Plugin marketplace | /plugins picker · Superpowers, Fable, Matt Pocock, Addy Osmani, Google, NVIDIA, finance/marketing packs, … → ~/.nur/plugins |
| Natural-language + slash skills | think like fable · TDD this · site cli · HAR file · polish the UI — or /fable-method /adhd /site-cli /<any-skill> |
| Take over other agents | /takeover (alias /hijack) imports Claude Code · Codex · Cursor · Nur · Grok Build sessions |
| Secrets stay local | Keys only in ~/.nur/auth.json (or env) · prefer NUR_API_KEY |
/login (70); Responses or Chat Completions adapter/budget), tool-result spill, smarter auto-compactpermissions.toml / hooks.toml/poor cost-saver promptnur ledger · /ledger totals seven agent log formats locally, without importing keys or prompt content (docs/ledger.md)/startup-skill routes to the installed startup validation, competitor research, positioning, and pitch workflowsNUR.md · AGENTS.md · CLAUDE.md-c, -r, /sessions (alias /resume)/takeover · /hijack): import a session from Claude Code · Codex · Cursor · Grok Build into a native nur session and resume it. Two windows in one modal — press c to switch between /sessions and /takeover/model opens a live model list for the active provider (or /model <id> to set one directly)/theme previews align with their click targets; Enter saves and Esc restores the previous palette./plugins marketplace picker (same UX as /login): install Superpowers, Vercel, Firecrawl, Chrome DevTools, Fable, and more into ~/.nur/plugins/skill-name / /skill-name <prompt> inject the skill body (Fable, TDD, site-cli, adhd, design-eng, resume-*, Excalidraw, …). Palette lists matching skills as you type. Docs/fusion — multi-model debate → one synthesized answer (panel of providers, active model judges)--continuous — sovereign/autonomous mode: loop headless turns toward a goal until DONE or Ctrl+C/local — run a model locally with bundled llama.cpp (auto-fetch llama-server + a GGUF sized to your RAM); no API key/bench — benchmark models on your own tasks, replayed in isolated git worktrees and scorednur gateway --chat <id> — run headless as a Telegram bot answering one chat; each message is an agent turn in your project (without --chat it only pairs: it replies with your chat id and runs nothing)| Family | Tools |
|---|---|
| read | read_file list_dir sgrep (semantic, Context.dev sgrep, first choice for "where is the code that…") grep glob |
| edit | write_file edit_file multi_edit apply_patch |
| shell | bash |
| vision | look · extract_frames |
| web | web_search web_fetch |
| browser | real default browser via agent-browser-cli |
| terminal_browser | in-terminal Chromium (terminal-browser.com); Windows host fallback |
| git | git_status git_diff |
| knowledge | graphify graphjin plur ruflo executor skill memory |
| diagrams | excalidraw (hand-drawn .excalidraw via excalidraw-cli) · tldraw (offline desktop boards) · penecho (20k canvas: ink, MathJax, plots) |
| judgments | typesafe (System One typed decisions: gate a call, judge a result, rank, route) |
| security | enclave (Enclave security agents over native MCP: pentests, code security review, findings) |
| memory | optmem (permanent, ~/.optmem) · connectome (hierarchical + chronicle) · mem (vector/graph router) · memory · plur ruflo |
| policy | dogwood (Cedar + temporal policy over an agent event stream) |
| context | context (RLM store: register/peek/slice/search) · anydoc (PDF/DOCX/XLSX → markdown) |
| background | bg (jobs that outlive the turn) · admission (async subagent handles) · goal · proposal (staged outputs) · message (peer mail) |
| python | repl (long-lived kernel; state survives compaction) |
| agent | todo_write submit_plan agent omp · skill harness · codemode (one JS script, several read-only tool calls, one model round) |
| Tool | What it does |
|---|---|
look | Attach workspace images or short video so the model sees them |
extract_frames | Sparse keyframes via ffmpeg → .nur/frames/<name>/ |
nur "steal UI design tokens from demo.mp4 and scaffold a matching component"
Image attachments: pasted screenshots (Ctrl+V) and /image <path>
stay in a compact composer row until sent. F4 previews or cycles images;
Shift+F4 removes one. Sent attachments offer click-to-peek. Previews render
as real pixels on terminals that support the
kitty graphics protocol,
sixel, or iTerm2 inline images. Queued follow-ups keep their own attachments.
Personal accent colors ([theme] accent = "#..." in config.toml)
layer over any /theme pick. Details: docs/vision.md.
TypeSafe (Jev): a system-one boost layer for whatever provider you are using -
tool gate, result judge, compaction with no summary, skill checks, routing. One
key, every provider. The full Jev library (nur jev models
· /jev models) lists every engine with its native endpoint, local adapter, or
connection recipe; keys are selected per engine. Details:
docs/typesafe.md.
Enclave: Enclave's autonomous security agents (pentests,
code security review, findings, CVE monitoring) through Enclave's MCP server,
spoken natively - no gateway. Enclave is not a chat provider, so its key is a
sidecar like TypeSafe's: nur auth login --provider enclave, then ask for
security work or run /enclave. Details: docs/enclave.md.
The TUI includes an F6 session inspector for changes, tools, agents, and context, with compact completed-tool rows and viewport-based transcript rendering. See TUI controls.
| Piece | Role |
|---|---|
| Graphify | Code knowledge graph (graphify-out/ in the workspace; gitignored, regenerable) |
| Excalidraw | Architecture / flow diagrams → .excalidraw (npm i -g excalidraw-cli; auto-provisioned) |
| PLUR | Shared engram memory |
| Ruflo | Vector memory / swarm helpers under ~/.nur/ruflo/ |
| Executor | MCP / OpenAPI gateway |
| Skills | Progressive packs via skill |
| AKM | Skill package manager |
| fractal | Hierarchical recursive agent loops in git worktrees (/fractal). Apache-2.0. Unix only — fractal 1.0.0 imports fcntl, so use WSL on Windows. Python 3.12–3.14 |
| Connectome | Agent-native memory: hierarchical self-authored notes + an append-only chronicle (connectome) |
| dogwood | Cedar + temporal policy language for governing tool calls (dogwood; on-demand checker, not a runtime gate) |
| tldraw | Offline desktop boards and interactive demos (tldraw) |
| penecho | 20k canvas beyond chat: ink, MathJax, plots (/pen · /drawings) |
| akarso | Post/schedule across 14 social platforms (/akarso; outward-facing calls ask first) |
| Headroom | Inline tool-result compression (default on; [headroom] enabled = false to disable) |
| TypeSafe · Jev | System One typed judgments woven through the harness (/typesafe · tool typesafe): tool gate, result judge, Jev-scored compaction with no summary, skill checks, routing. Provider-agnostic - one key boosts every provider. See docs/typesafe.md |
| Enclave | Autonomous security agents over native MCP (/enclave · tool enclave): pentests, code security review, findings, CVE monitoring. Sidecar key, every provider; calls are approval-gated. See docs/enclave.md |
| Local Jev engines | Same typed contract on this machine, no key: openJev-verdict-2.0 (CPU), Bespoke-Nimble-9B (NVIDIA GPU / Apple Silicon MLX), Laya Core ML (Apple Silicon ANE), plus a mock backend. nur jev start · nur jev use |
| OptMem | Permanent memory at ~/.optmem (/optmem · /memo) |
| egaki | Image/video gen (/egaki; ChatGPT-sub login supported. /image <path> is vision attach) |
| terminal-browser | In-terminal Chromium (/tb); Windows host fallback via agent-browser-cli |
| HelixDB | Optional graph-vector resident behind mem: local-first durable outbox, background mirror, scoped vector/text recall (mem helix_status / helix_sync) |
| Text-to-CAD | Auto-provisioned STEP-first CAD, DXF, G-code, robot-description, sourcing, validation, and review skills (/cad, /cad-viewer, …). MIT |
| DroidRun Mobile Harness | Auto-provisioned Android, iOS, and cloud-phone operating harness for mobilerun-core (/mobile-harness). MIT |
| penecho | Infinite thinking canvas run as a sidecar (/penecho). AGPL-3.0 |
| t3code | Vendor-CLI auth delegation — driver probing, env isolation, pairing. MIT |
~/.nur/*.json.bak · compaction .precompact.baknur doctor · install SHA-256~/.nur/nur.log| On GitHub | On your PC only |
|---|---|
| Source, install scripts | ~/.nur/auth.json |
| No keys in the repo | sessions, usage, frames under ~/.nur / workspace |
Env: NUR_API_KEY preferred. Vendor keys (OPENAI_API_KEY, META_API_KEY for Meta Model API, etc.) still work. Home override: NUR_HOME.
nur # interactive TUI
nur "fix the bug" # start with a prompt
nur "design from ref.mp4" # vision: auto-attach media if path exists
nur -c # continue last session in this directory
nur -r <session-id> # resume a session
nur --mode plan "..." # plan mode
nur run "..." -y # headless + auto-approve
nur sessions
nur usage
nur auth status
nur ecosystem status
nur ecosystem ensure --force
nur doctor
nur doctor and nur ecosystem status are read-only snapshots. Use
nur ecosystem ensure --force when you want Nur to install or upgrade ecosystem tools.
Launching from a drive root (C:\) auto-picks a safe workspace (git / last session / Laboratory).
| Mode | Behavior |
|---|---|
| manual | Reads free; writes / shell need approval |
| plan | Explore + shell freely; blocks code authoring and VCS mutation |
| auto | Auto-approve tools (-y) |
| Key | Action |
|---|---|
| ↑ ↓ · wheel · scrollbar | Scroll transcript |
| Drag chat text | Select + auto-copy |
Click ↓ N · End | Jump to latest |
| Ctrl+A / C / V / X | Select-all · copy · paste · cut |
| Enter | Send |
| Shift+Enter | Newline |
| Shift+Tab | Cycle permission mode |
| Ctrl+R | Reverse-search prompt history (Ctrl+R steps older, Esc cancels) |
| y / a / n | Approve once / always (the tool, or for bash the programs it runs) / deny |
| Esc | Close peek → cancel turn |
| Command | Purpose |
|---|---|
/help | Keys + commands |
/provider /login | Choose and activate provider (/login is an alias) |
/auth /logout | Manage all provider credentials / clear active provider |
/model | Show and switch models for the active provider |
/plugins | Browse and install marketplace plugins (provider-picker UX) |
/goal /btw | Session goal / one-off note |
/bro | Chill mode: plain words, straight answers (toggle) |
/adhd | Sticky ADHD-friendly output (toggle) |
/<skill> | Any installed skill — sticky, or /<skill> <prompt> one-shot |
/scan | Map the codebase → shareable foglamp architecture scan |
/codesearch /cs | Workspace ripgrep |
/mc /mcp | MCP via Executor |
/feedback /tips | Issue / interaction tips |
/budget /poor | Spend ceiling / lean prompt |
/cd /pwd /doctor /status | Workspace + health |
/sessions /resume | Session browser — press c to switch to the takeover window |
/takeover /hijack | Cross-agent migration: import a Claude/Codex/Cursor/Grok session into nur and resume it. Press c to switch back to sessions; /takeover ls [agent] lists; /takeover <agent> [id|latest] imports one |
/akarso /openseo /dialkit | Deep-integrated tools: akarso (native tool — post/schedule across 14 social platforms), OpenSEO (SEO research/audits via MCP), dialkit (live-tune interface parameters) |
/failover | Cross-provider failover + privacy tiers (provider-picker; Space adds a fallback, Alt+P sets its privacy tier) |
/fusion | Multi-model debate → one synthesized answer (/fusion panel <ids>, then /fusion <question>) |
/local | Run a model locally via bundled llama.cpp: /local up [tier|url] · status · models · down |
/bench | Benchmark models on your tasks: /bench add|list|run <name> [models]|remove |
/undo | Revert the last file edit (write / edit / multi_edit) this session |
/receipt | Session receipt — verify what actually ran (models, tools, privacy tiers), hash-chained |
/cua | Computer-use desktop driver: /cua on = always-on background desktop control (elevated), off = on-demand only, status |
/graph | Inline live execution-graph card for the current turn (tools · subagents · status) |
/draw | Open / build interactive tldraw offline boards: /draw <file.tldraw> opens · /draw install · /draw <idea> builds |
/steer | Inject a message into the running turn without cancelling it (or click steer on a queued follow-up) |
Full list: docs/commands.md → TUI slash commands.
| Path | Role |
|---|---|
~/.nur/status.json | Live tokens · cost · model · state |
~/.nur/usage.jsonl | Per-request log |
~/.nur/ade.json | Discovery manifest |
~/.nur/config.toml (created on first run):
provider = "meta" # or openai, openrouter, ollama, ...
model = "muse-spark-1.2"
base_url = "https://api.meta.ai/v1"
reasoning_effort = "high"
max_turns = 0 # 0 = unlimited agent rounds per prompt
See docs/configuration.md and docs/authentication.md.
GNU General Public License v3.0 (or later) — see LICENSE.
Meta CLI is free software: you may redistribute it and/or modify it under the terms of the GPL as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. It is distributed in the hope that it will be useful, but without any warranty; without even the implied warranty of merchantability or fitness for a particular purpose.
NurCLI: Fully-loaded, SOTA cost-efficient coding agent command-line interface.
See the codeUse fewer paid tokens by default.
The harness supersedes stale duplicate reads, spills large tool results, preserves provider prompt caches, and compacts repeatedly using an OMP-style response reserve instead of a premature fixed percentage. It also supports local context estimates when providers omit usage, prompt caching, local models, and focused Oh My Pi delegation through a verified authenticated economy model.
TypeSafe · Jev judgments run inside the harness rather than beside it: one batched request decides which tool calls are still worth their tokens, whether a result actually worked, and what a fresh context can drop - so compaction writes no summary, survivors stay verbatim, and the frontier model is never paid to answer an if-statement. Provider-agnostic (one key lifts every model), and keyless on this machine through three supported local engines - openJev-verdict-2.0, Bespoke-Nimble-9B, and Laya Core ML (docs/jev-local.md). Native failover, cross-provider subagents, and delegated OMP work all report their actual token and cost impact in Nur's session budgets and /usage totals.
Your personal coding agent. Custom Rust harness, dense gold TUI, native vision, tools, knowledge stack, gated execution. Multi-provider /provider plus a unified /auth vault. Any model via --model / /model / config.
nur # interactive gold TUI
One command on every OS:
npx nur-cli
Downloads the prebuilt native binary from GitHub Releases (no Rust toolchain, no clone, no build), drops it in ~/.local/bin, and runs the full stack setup. Keep it permanently with npm i -g nur-cli.
Prefer a one-liner without Node? The classic one-liners (build from source) or the Windows EXE (prebuilt) each drop nur on your PATH, pull in every runtime dependency they can, and wire the full agent stack before the TUI opens.
irm https://raw.githubusercontent.com/nuroctane/nur-cli/main/install.ps1 | iex
curl -fsSL https://raw.githubusercontent.com/nuroctane/nur-cli/main/install.sh | bash
nur auth login # key -> ~/.nur/auth.json (or set NUR_API_KEY)
nur # open the TUI
nur doctor # health check
Or run nur and use /provider in the TUI (/login remains an alias): pick any of 70 providers
(OpenAI, Anthropic, Gemini, xAI, Groq, OpenRouter, Requesty, local Ollama/LM Studio, Meta Model API, and so on).
For OpenAI, Anthropic, xAI, Kimi Code, Google Gemini, Azure OpenAI, GitHub Models, GitHub Copilot, Cursor, Factory Droid, Cline, Muse Code, DeepSeek Harness, and ZCode (GLM) you can sign in with a browser or an official CLI session (or import an existing Codex / Claude Code / Grok / Kimi / Cursor Agent / Droid / Cline / Muse / dsh / ZCode session) instead of pasting an API key. nur auth login --provider muse --browser (and the same for deepseek / zcode) is the CLI equivalent of TUI /login. OAuth sessions refresh before use, retry once after an authentication rejection, and /model detects the models available to the active credential. Cursor uses cursor-agent login and runs chat through the Agent CLI (no API key required); Factory Droid works the same way through droid exec (NUR_DROID_BIN when the launcher is outside PATH). DeepSeek's official harness is API-key only ($DSH_HOME/.credentials.yaml). No credential on launch and login opens automatically.
Provider requests have a shared five-minute watchdog by default, immediate Esc cancellation, and clean transport teardown. Set NUR_PROVIDER_TURN_TIMEOUT_SECS to adjust the ceiling. On Windows, Nur also recovers successful Cursor Agent turns from Cursor's durable transcript when affected CLI builds emit no redirected stdout.
Keys are kept per provider, so switching with /provider never strands the one you switched away from - it stays available for failover, fusion, and subagents running on another provider's model. /auth opens one scrollable vault for every provider, where you can add, replace, import CLI/OMP, or delete credentials without switching the current chat. Imported OMP credentials retain their real kind, so API keys use API endpoints and OAuth subscriptions use their provider-specific OAuth routes. See docs/authentication.md.
Sign-in handling and its regression coverage are documented in the 65-provider authentication review, including vendor CLI progress, token rotation, credential replacement, and Claude's manual fallback.
nur update
Pulls latest main when a Laboratory checkout exists (~/laboratory/nur-cli or ~/Laboratory/nur-cli), rebuilds, reinstalls nur on PATH, re-provisions the ecosystem. No checkout? Falls back to nur install.
| Also fine | |
|---|---|
Re-run npx nur-cli | Fresh prebuilt binary + stack |
| Re-run the one-liner | Full rebuild from GitHub |
| Re-download + double-click Windows EXE | Prebuilt path |
nur install | Reinstall this binary + stack (no git pull) |
Verify: nur --version · nur doctor. Detail: docs/setup.md → Update.
| 1. npx (above) Prebuilt binary, every OS. Fastest. | 2. One-liner Builds from source + full stack. | Download → double-click → done. | 4. From a clone You already have the repo. |
nur-windows-x86_64.exe.\nur-windows-x86_64.exe in a terminal)Copies itself to ~\.local\bin\nur.exe, PATH, prereqs, ecosystem + browser setup, then opens NurCLI.
3. Already cloned
cd nur-cli
.\install.ps1 # Windows
# ./install.sh # macOS / Linux
4. Manual cargo build
git clone https://github.com/nuroctane/nur-cli.git
cd nur-cli
cargo build --release
./target/release/nur install # Windows: .\target\release\nur.exe install
nur auth login
Everything is local. Secrets never go into the git repo.
| Piece | Why |
|---|---|
| Rust / cargo | Builds the CLI (one-liner / cargo only; npx path needs none) |
| Git | Clone / update |
| Node.js 20+ | PLUR · Ruflo · Executor · skills · browser · AKM (the npx shim itself needs only Node 18+) |
| Bun | omp backend |
| uv | Graphify |
ripgrep (rg) | Fast grep / glob, and the file walk behind sgrep |
| sgrep | Semantic code search (sgrep tool); built with cargo install --git https://github.com/context-dot-dev/sgrep --locked, model (32 MB) downloaded once |
| ffmpeg | extract_frames |
| Piece | Path |
|---|---|
nur binary | ~/.local/bin/nur (Windows: nur.exe) |
| SHA-256 record | ~/.local/bin/nur.sha256 |
| Source checkout (one-liner) | ~/laboratory/nur-cli (override NUR_CLI_DIR) |
| User PATH | ~/.local/bin |
~/.nur/| Path | Purpose |
|---|---|
auth.json | Active credential |
provider_keys.json · provider_sessions.json | Per-provider keys / OAuth sessions (failover + subagents) |
config.toml | Model, effort, budgets, etc. |
sessions/ | Chat sessions |
plugins/ · plugins/registry.json | Marketplace installs (/plugins, nur plugins) |
skills/ · ruflo/ · tool-results/ | Skills, vector memory, spilled tool output |
status.json · usage.jsonl · ade.json | Live usage + host panels |
nur.log | Tracing (not painted into the TUI) |
Graphify · PLUR · Ruflo · Executor · omp · agent-browser-cli · Text-to-CAD ·
mobile-harness · /sc-research whitehat DeFi pack (X bounty intel + historical vuln library) · skill packs. Installed when
Node/uv/Bun are available.
Docs: nuroctane.xyz/cli · docs/setup.md
| Surface | What ships |
|---|---|
| TUI | Streaming · duration chips · thought/tool cards · every transcript piece in a theme-coloured frame · peek · drag-select · scrollbar · sessions · multi-provider /login · /model picker · /plugins marketplace · /goal /bro /adhd /scan /btw /codesearch /mc /feedback /tips · every skill as /name · 41 themes including 18 chromatic studies + transparency mode · provider logo in the busy line + tab title · every path in the transcript is a link that opens · block-structured markdown with theme-role colours · LaTeX rendering (image-peek build) · /receipt verifies the hash chain and exports spans · budgets · doctor |
| Agent | Manual / plan / auto · tools · subagents · todos · auto-compact · session $ / token budgets · Esc cancel · Shift+Tab mid-turn · NL skill auto-activation |
| Vision | look · extract_frames · prompt auto-attach · compact image attachments with on-demand previews (Ctrl+V paste or /image <path>, F4 preview) |
| Tools | read · edit · bash · web · browser (incl. element picking) · git · knowledge · agent · judgments (typesafe) · security agents (enclave) · memory (optmem connectome mem) · diagrams (excalidraw tldraw penecho) · policy (dogwood) · background (bg) · async (admission goal proposal message question) · docs (anydoc) · python REPL (repl) · excalidraw |
| Ecosystem | Graphify · GraphJin · PLUR · Ruflo · Executor · TypeSafe/Jev (+ keyless local engines) · Enclave (security agents over native MCP) · OptMem · Headroom · Connectome · dogwood · omp · browser · AKM · 1,000+ skills · /sc-research whitehat DeFi + X bounty intel + historical vuln library · plugin marketplace (Fable, Superpowers, Vercel, …) |
| Hardening | Approval modes · parsed bash denylist · per-domain fetch approval · SSRF blocks · atomic ~/.nur IO · permissions/hooks · signed releases (minisign + SHA-256) · nur doctor |
| Real agent, not a wrapper | Modes, tools, streaming, cancel, subagents, auto-compact |
| Sees media | Multimodal images/short video. Sparse frames, not spam. |
| One-shot install | npx nur-cli, one-liner, or Windows EXE · PATH · ecosystem · browser |
| Easy updates | nur update |
| Knowledge stack | Graph · engrams · vector memory · MCP · skills |
| Plugin marketplace | /plugins picker · Superpowers, Fable, Matt Pocock, Addy Osmani, Google, NVIDIA, finance/marketing packs, … → ~/.nur/plugins |
| Natural-language + slash skills | think like fable · TDD this · site cli · HAR file · polish the UI — or /fable-method /adhd /site-cli /<any-skill> |
| Take over other agents | /takeover (alias /hijack) imports Claude Code · Codex · Cursor · Nur · Grok Build sessions |
| Secrets stay local | Keys only in ~/.nur/auth.json (or env) · prefer NUR_API_KEY |
/login (70); Responses or Chat Completions adapter/budget), tool-result spill, smarter auto-compactpermissions.toml / hooks.toml/poor cost-saver promptnur ledger · /ledger totals seven agent log formats locally, without importing keys or prompt content (docs/ledger.md)/startup-skill routes to the installed startup validation, competitor research, positioning, and pitch workflowsNUR.md · AGENTS.md · CLAUDE.md-c, -r, /sessions (alias /resume)/takeover · /hijack): import a session from Claude Code · Codex · Cursor · Grok Build into a native nur session and resume it. Two windows in one modal — press c to switch between /sessions and /takeover/model opens a live model list for the active provider (or /model <id> to set one directly)/theme previews align with their click targets; Enter saves and Esc restores the previous palette./plugins marketplace picker (same UX as /login): install Superpowers, Vercel, Firecrawl, Chrome DevTools, Fable, and more into ~/.nur/plugins/skill-name / /skill-name <prompt> inject the skill body (Fable, TDD, site-cli, adhd, design-eng, resume-*, Excalidraw, …). Palette lists matching skills as you type. Docs/fusion — multi-model debate → one synthesized answer (panel of providers, active model judges)--continuous — sovereign/autonomous mode: loop headless turns toward a goal until DONE or Ctrl+C/local — run a model locally with bundled llama.cpp (auto-fetch llama-server + a GGUF sized to your RAM); no API key/bench — benchmark models on your own tasks, replayed in isolated git worktrees and scorednur gateway --chat <id> — run headless as a Telegram bot answering one chat; each message is an agent turn in your project (without --chat it only pairs: it replies with your chat id and runs nothing)| Family | Tools |
|---|---|
| read | read_file list_dir sgrep (semantic, Context.dev sgrep, first choice for "where is the code that…") grep glob |
| edit | write_file edit_file multi_edit apply_patch |
| shell | bash |
| vision | look · extract_frames |
| web | web_search web_fetch |
| browser | real default browser via agent-browser-cli |
| terminal_browser | in-terminal Chromium (terminal-browser.com); Windows host fallback |
| git | git_status git_diff |
| knowledge | graphify graphjin plur ruflo executor skill memory |
| diagrams | excalidraw (hand-drawn .excalidraw via excalidraw-cli) · tldraw (offline desktop boards) · penecho (20k canvas: ink, MathJax, plots) |
| judgments | typesafe (System One typed decisions: gate a call, judge a result, rank, route) |
| security | enclave (Enclave security agents over native MCP: pentests, code security review, findings) |
| memory | optmem (permanent, ~/.optmem) · connectome (hierarchical + chronicle) · mem (vector/graph router) · memory · plur ruflo |
| policy | dogwood (Cedar + temporal policy over an agent event stream) |
| context | context (RLM store: register/peek/slice/search) · anydoc (PDF/DOCX/XLSX → markdown) |
| background | bg (jobs that outlive the turn) · admission (async subagent handles) · goal · proposal (staged outputs) · message (peer mail) |
| python | repl (long-lived kernel; state survives compaction) |
| agent | todo_write submit_plan agent omp · skill harness · codemode (one JS script, several read-only tool calls, one model round) |
| Tool | What it does |
|---|---|
look | Attach workspace images or short video so the model sees them |
extract_frames | Sparse keyframes via ffmpeg → .nur/frames/<name>/ |
nur "steal UI design tokens from demo.mp4 and scaffold a matching component"
Image attachments: pasted screenshots (Ctrl+V) and /image <path>
stay in a compact composer row until sent. F4 previews or cycles images;
Shift+F4 removes one. Sent attachments offer click-to-peek. Previews render
as real pixels on terminals that support the
kitty graphics protocol,
sixel, or iTerm2 inline images. Queued follow-ups keep their own attachments.
Personal accent colors ([theme] accent = "#..." in config.toml)
layer over any /theme pick. Details: docs/vision.md.
TypeSafe (Jev): a system-one boost layer for whatever provider you are using -
tool gate, result judge, compaction with no summary, skill checks, routing. One
key, every provider. The full Jev library (nur jev models
· /jev models) lists every engine with its native endpoint, local adapter, or
connection recipe; keys are selected per engine. Details:
docs/typesafe.md.
Enclave: Enclave's autonomous security agents (pentests,
code security review, findings, CVE monitoring) through Enclave's MCP server,
spoken natively - no gateway. Enclave is not a chat provider, so its key is a
sidecar like TypeSafe's: nur auth login --provider enclave, then ask for
security work or run /enclave. Details: docs/enclave.md.
The TUI includes an F6 session inspector for changes, tools, agents, and context, with compact completed-tool rows and viewport-based transcript rendering. See TUI controls.
| Piece | Role |
|---|---|
| Graphify | Code knowledge graph (graphify-out/ in the workspace; gitignored, regenerable) |
| Excalidraw | Architecture / flow diagrams → .excalidraw (npm i -g excalidraw-cli; auto-provisioned) |
| PLUR | Shared engram memory |
| Ruflo | Vector memory / swarm helpers under ~/.nur/ruflo/ |
| Executor | MCP / OpenAPI gateway |
| Skills | Progressive packs via skill |
| AKM | Skill package manager |
| fractal | Hierarchical recursive agent loops in git worktrees (/fractal). Apache-2.0. Unix only — fractal 1.0.0 imports fcntl, so use WSL on Windows. Python 3.12–3.14 |
| Connectome | Agent-native memory: hierarchical self-authored notes + an append-only chronicle (connectome) |
| dogwood | Cedar + temporal policy language for governing tool calls (dogwood; on-demand checker, not a runtime gate) |
| tldraw | Offline desktop boards and interactive demos (tldraw) |
| penecho | 20k canvas beyond chat: ink, MathJax, plots (/pen · /drawings) |
| akarso | Post/schedule across 14 social platforms (/akarso; outward-facing calls ask first) |
| Headroom | Inline tool-result compression (default on; [headroom] enabled = false to disable) |
| TypeSafe · Jev | System One typed judgments woven through the harness (/typesafe · tool typesafe): tool gate, result judge, Jev-scored compaction with no summary, skill checks, routing. Provider-agnostic - one key boosts every provider. See docs/typesafe.md |
| Enclave | Autonomous security agents over native MCP (/enclave · tool enclave): pentests, code security review, findings, CVE monitoring. Sidecar key, every provider; calls are approval-gated. See docs/enclave.md |
| Local Jev engines | Same typed contract on this machine, no key: openJev-verdict-2.0 (CPU), Bespoke-Nimble-9B (NVIDIA GPU / Apple Silicon MLX), Laya Core ML (Apple Silicon ANE), plus a mock backend. nur jev start · nur jev use |
| OptMem | Permanent memory at ~/.optmem (/optmem · /memo) |
| egaki | Image/video gen (/egaki; ChatGPT-sub login supported. /image <path> is vision attach) |
| terminal-browser | In-terminal Chromium (/tb); Windows host fallback via agent-browser-cli |
| HelixDB | Optional graph-vector resident behind mem: local-first durable outbox, background mirror, scoped vector/text recall (mem helix_status / helix_sync) |
| Text-to-CAD | Auto-provisioned STEP-first CAD, DXF, G-code, robot-description, sourcing, validation, and review skills (/cad, /cad-viewer, …). MIT |
| DroidRun Mobile Harness | Auto-provisioned Android, iOS, and cloud-phone operating harness for mobilerun-core (/mobile-harness). MIT |
| penecho | Infinite thinking canvas run as a sidecar (/penecho). AGPL-3.0 |
| t3code | Vendor-CLI auth delegation — driver probing, env isolation, pairing. MIT |
~/.nur/*.json.bak · compaction .precompact.baknur doctor · install SHA-256~/.nur/nur.log| On GitHub | On your PC only |
|---|---|
| Source, install scripts | ~/.nur/auth.json |
| No keys in the repo | sessions, usage, frames under ~/.nur / workspace |
Env: NUR_API_KEY preferred. Vendor keys (OPENAI_API_KEY, META_API_KEY for Meta Model API, etc.) still work. Home override: NUR_HOME.
nur # interactive TUI
nur "fix the bug" # start with a prompt
nur "design from ref.mp4" # vision: auto-attach media if path exists
nur -c # continue last session in this directory
nur -r <session-id> # resume a session
nur --mode plan "..." # plan mode
nur run "..." -y # headless + auto-approve
nur sessions
nur usage
nur auth status
nur ecosystem status
nur ecosystem ensure --force
nur doctor
nur doctor and nur ecosystem status are read-only snapshots. Use
nur ecosystem ensure --force when you want Nur to install or upgrade ecosystem tools.
Launching from a drive root (C:\) auto-picks a safe workspace (git / last session / Laboratory).
| Mode | Behavior |
|---|---|
| manual | Reads free; writes / shell need approval |
| plan | Explore + shell freely; blocks code authoring and VCS mutation |
| auto | Auto-approve tools (-y) |
| Key | Action |
|---|---|
| ↑ ↓ · wheel · scrollbar | Scroll transcript |
| Drag chat text | Select + auto-copy |
Click ↓ N · End | Jump to latest |
| Ctrl+A / C / V / X | Select-all · copy · paste · cut |
| Enter | Send |
| Shift+Enter | Newline |
| Shift+Tab | Cycle permission mode |
| Ctrl+R | Reverse-search prompt history (Ctrl+R steps older, Esc cancels) |
| y / a / n | Approve once / always (the tool, or for bash the programs it runs) / deny |
| Esc | Close peek → cancel turn |
| Command | Purpose |
|---|---|
/help | Keys + commands |
/provider /login | Choose and activate provider (/login is an alias) |
/auth /logout | Manage all provider credentials / clear active provider |
/model | Show and switch models for the active provider |
/plugins | Browse and install marketplace plugins (provider-picker UX) |
/goal /btw | Session goal / one-off note |
/bro | Chill mode: plain words, straight answers (toggle) |
/adhd | Sticky ADHD-friendly output (toggle) |
/<skill> | Any installed skill — sticky, or /<skill> <prompt> one-shot |
/scan | Map the codebase → shareable foglamp architecture scan |
/codesearch /cs | Workspace ripgrep |
/mc /mcp | MCP via Executor |
/feedback /tips | Issue / interaction tips |
/budget /poor | Spend ceiling / lean prompt |
/cd /pwd /doctor /status | Workspace + health |
/sessions /resume | Session browser — press c to switch to the takeover window |
/takeover /hijack | Cross-agent migration: import a Claude/Codex/Cursor/Grok session into nur and resume it. Press c to switch back to sessions; /takeover ls [agent] lists; /takeover <agent> [id|latest] imports one |
/akarso /openseo /dialkit | Deep-integrated tools: akarso (native tool — post/schedule across 14 social platforms), OpenSEO (SEO research/audits via MCP), dialkit (live-tune interface parameters) |
/failover | Cross-provider failover + privacy tiers (provider-picker; Space adds a fallback, Alt+P sets its privacy tier) |
/fusion | Multi-model debate → one synthesized answer (/fusion panel <ids>, then /fusion <question>) |
/local | Run a model locally via bundled llama.cpp: /local up [tier|url] · status · models · down |
/bench | Benchmark models on your tasks: /bench add|list|run <name> [models]|remove |
/undo | Revert the last file edit (write / edit / multi_edit) this session |
/receipt | Session receipt — verify what actually ran (models, tools, privacy tiers), hash-chained |
/cua | Computer-use desktop driver: /cua on = always-on background desktop control (elevated), off = on-demand only, status |
/graph | Inline live execution-graph card for the current turn (tools · subagents · status) |
/draw | Open / build interactive tldraw offline boards: /draw <file.tldraw> opens · /draw install · /draw <idea> builds |
/steer | Inject a message into the running turn without cancelling it (or click steer on a queued follow-up) |
Full list: docs/commands.md → TUI slash commands.
| Path | Role |
|---|---|
~/.nur/status.json | Live tokens · cost · model · state |
~/.nur/usage.jsonl | Per-request log |
~/.nur/ade.json | Discovery manifest |
~/.nur/config.toml (created on first run):
provider = "meta" # or openai, openrouter, ollama, ...
model = "muse-spark-1.2"
base_url = "https://api.meta.ai/v1"
reasoning_effort = "high"
max_turns = 0 # 0 = unlimited agent rounds per prompt
See docs/configuration.md and docs/authentication.md.
GNU General Public License v3.0 (or later) — see LICENSE.
Meta CLI is free software: you may redistribute it and/or modify it under the terms of the GPL as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. It is distributed in the hope that it will be useful, but without any warranty; without even the implied warranty of merchantability or fitness for a particular purpose.