
Security News
US Government Forces Anthropic to Pull Claude Fable Days After Launch
Anthropic says the directive cited national security concerns over a narrow jailbreak, but offered no specific technical details.
@nomad-e/bluma-cli
Advanced tools

BluMa is an independent AI agent CLI for automation and advanced software engineering. It combines powerful tool orchestration, multi-agent coordination, and intelligent context management to help you build software faster and with higher quality.
# Install globally
npm install -g @nomad-e/bluma-cli
# Run BluMa (new session)
bluma
# Resume a previous session
bluma resume {session_id}
# Or run from source
npm install
npm run build
npm start
Comprehensive toolset organized by category with risk levels and auto-approve policies.
Tools are now modularly structured in src/app/agent/tools/ with separate UI components:
Filesystem (10 tools):
ls_tool, read_file_lines, count_file_lines, find_by_name, grep_searchview_file_outline, edit_tool, file_write, notebook_edit, lsp_queryExecution (6 tools):
shell_command, command_status, send_command_input, kill_commandrepl (interactive code execution for Python/Node/Bash)task_output (real-time output following)Communication (7 tools):
message, ask_user_question, brief, send_messagelist_mailbox_messages, poll_mailbox, signal_mailboxPlanning (11 tools):
todo, task_boundary, task_create, task_update, task_stoptask_list, task_get, enter_plan_mode, exit_plan_modecron_create, cron_list, cron_deleteKnowledge (10 tools):
search_web, web_fetch, load_skill, coding_memoryctx_inspect, dream, context_collapse, sniplist_mcp_resources, read_mcp_resourceAgent Coordination (4 tools):
spawn_agent, wait_agent, list_agents, kill_agentFactorAI Sandbox (5 tools):
factorai.sh.create_next_app, factorai.sh.deploy_appfactorai.sh.get_app_status, factorai.sh.apply_app_changesfactorai.sh.redeploy_appsend_message, list_mailbox_messages, poll_mailbox, signal_mailboxQuick access to common operations across 5 categories:
/clear, /sessions, /attach, /follow, /bridge, /status, /logs, /resume, /kill, /compact, /export, /summarize, /history, /share, /copy, /commit, /pr, /release, /snip, /collapse, /brief, /undo, /redo, /thread (with subcommands: list/new/resume/fork/rename/archive/delete)/plugins, /plugin, /diagnostics, /permissions, /features, /hooks, /model, /effort, /style, /sandbox, /worktree, /statusline, /skills, /tools, /mcp, /debug-workers, /cost, /memory, /stats, /theme, /keybindings, /vim, /ctx, /dream, /diff, /editor, /config, /file, /search, /context, /token, /settings, /alias, /macro, /thread stats/agent, /agents, /img, /image, /init, /review, /explain, /fix, /debug, /bug, /test, /optimize, /refactor, /document, /chat, /code, /terminal, /template/helpCtrl+V/Cmd+V (paste image/text/file), Ctrl+Shift+I (same as Ctrl+V)coding_memory)ctx_inspectStructured problem-solving workflow with 3 phases:
Extendable expertise modules with progressive disclosure:
rm -rf protection, sudo blocking, dangerous command detectionโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ BluMa CLI (Ink UI) โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโค
โ BlumaShell โ BlumaViewport โ BlumaTranscript โ
โ BlumaBottomDock โ BlumaWorkersOverlay โ PlanPopup โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโค
โ useBlumaSessionRuntime (Hook) โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโค
โ Session Registry โ Agent Core โ Tool Invoker โ
โ Thread Manager โ Prompt Builder โ Mailbox IPC โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโค
โ Native Tools (45+) โ Skills (6) โ MCP Clients โ
โ FactorAI Sandbox โ Hook Registry โ Feature Flags โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
Each tool in src/app/agent/tools/ follows a consistent structure:
ToolName/
โโโ index.ts # Public API exports
โโโ ToolName.ts # Core implementation logic
โโโ UI.tsx # React/Ink UI component
โโโ types.ts # Type definitions
This modular design enables:
src/main.ts: Entry point with CLI mode, agent mode, session managementsrc/app/ui/: React/Ink UI components
App.tsx: Main orchestratorBlumaSession.tsx: Session management and UI lifecyclecomponents/: Reusable UI elements (40+ components)hooks/: React hooks for state managementtheme/: Theme system and terminal stylingutils/: Utility functions and slash command registrysrc/app/agent/: AI agent core
core/: Prompt building, context management, LLM integration, thread managementtools/: Modular tool architecture โ 43+ tool directories, each with:
*.ts)UI.tsx)types.ts)index.ts)runtime/: Session runtime, sandbox policy, plugin system, hook registrysession_manager/: Multi-session orchestrationsubagents/: Worker system with base LLM subagent and coordinator toolsbluma/: BluMa-specific core logic and turn start payloadsrc/app/agent/config/: Configuration files and skill definitionssrc/ink/: Ink renderer shims and compatibility layersrc/shims/: Build-time shims for react-compiler-runtime and bidi-jsnative/: Rust-based native modules (clipboard, yoga-layout)vscode-extension/: VS Code extension for chat integrationCreate a .env file in your project root:
# Required for AI features
FACTOR_ROUTER_KEY=your_key
FACTOR_ROUTER_URL=https://api.factorai.sh
# Optional: MCP Server
MCP_SSE_URL=http://localhost:3000/sse
# Optional: FactorAI Sandbox
FACTORAI_BASE_URL=http://localhost:8080
FACTORAI_API_KEY=your-sandbox-key
BluMa supports different permission modes:
Set via environment or runtime config:
BLUMA_PERMISSION_MODE=sandbox
# Clone the repository
git clone https://github.com/Nomad-e/bluma-cli.git
cd bluma-cli
# Install dependencies
npm install
# Build the project
npm run build
# Start BluMa
npm start
| Script | Description |
|---|---|
npm run build | TypeScript check + bundle |
npm run build:native | Build native modules |
npm run build:all | Build native + TypeScript |
npm run precommit | Run pre-commit validation |
npm start | Build + run BluMa |
npm test | Run Jest tests |
npm run test:watch | Watch mode for tests |
npm run test:parallel | Parallel test execution |
npm run test:parallel:fast | Fast parallel tests with 8 workers |
npm run lint | ESLint check |
npm run lint:fix | Auto-fix lint errors |
# Run all tests
npm test
# Run specific test file
npm test -- tests/tool_invocation.spec.ts
# Watch mode
npm run test:watch
# Parallel tests (faster)
npm run test:parallel:fast
See CONTRIBUTING.md for detailed contribution guidelines.
# Ask BluMa to analyze your codebase
bluma
# Then use slash commands
/explain src/app/agent/core/prompt_builder.ts
/refactor src/utils/helpers.ts
/fix src/components/Button.tsx
# Coordinator mode: delegate to workers
"Build a new feature with research, implementation, and verification"
# BluMa automatically spawns:
# - Researcher: Investigate codebase structure
# - Implementer: Write the code
# - Verifier: Run tests and validate
/release patch # Auto-detect version bump
/release minor --dry-run # Preview release
/pr "feat: add new authentication" # Create PR with conventional commit
Apache 2.0 โ see LICENSE for details.
Alex Fonseca โ @nomad-e
BluMa CLI v0.3.1 โ Built with TypeScript, React/Ink, and ES modules.
FAQs
BluMa independent agent for automation and advanced software engineering.
The npm package @nomad-e/bluma-cli receives a total of 65 weekly downloads. As such, @nomad-e/bluma-cli popularity was classified as not popular.
We found that @nomad-e/bluma-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.ย It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Anthropic says the directive cited national security concerns over a narrow jailbreak, but offered no specific technical details.

Security News
A network of 152 Chrome live wallpaper extensions hid ad tracking and made extension-driven traffic look like Google search clicks.

Company News
Socketโs first CISO brings deep experience securing high-growth SaaS companies as open source supply chain threats accelerate.