
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
OpenHarness-ts 终端 CLI:在终端里跑 AI Agent。默认进入交互式 TUI(需 Bun),也可一次性打印结果后退出。会话由本机 daemon 持久化,可与 Desktop 等客户端共用同一后端。
命令行入口:ohs 与 openharness(等价)。
npm install -g @rzx/ohs
# 或
pnpm add -g @rzx/ohs
验证:
ohs --version
ohs doctor
# 首次配置(Provider / API Key / 模型)
ohs setup
# 或手动登录
ohs auth login <provider> <api-key>
ohs provider list
ohs provider use <name> -m <model>
# 交互式 TUI(默认;会 attach 或启动本机 daemon)
ohs
# 单次提问后退出
ohs "explain this codebase"
ohs -p "explain this codebase"
# 只检查配置,不调模型
ohs --dry-run
用户配置与数据默认在 ~/.openharness-ts/(例如 settings.json、daemon registry、会话库)。
ohs -m <model> "你的问题"
ohs --provider <name> --permission-mode full_auto "重构这段代码"
ohs --cwd /path/to/project
ohs --tui "带初始提示打开 TUI"
| 选项 | 说明 |
|---|---|
-p, --print | 经 daemon 打印结果后退出(有 prompt 时默认即此模式) |
--tui | 显式启动 TUI(无 prompt 时默认已是 TUI) |
-m, --model | 模型名 |
--provider | 强制指定 Provider |
--permission-mode | default |
--max-turns | 最大 agent 轮次 |
--effort | low |
--no-plugins | 本次会话不加载已安装插件贡献 |
--dangerously-skip-permissions | 跳过权限确认 |
--dry-run | 预览解析后的配置,不调模型 |
--daemon-url / --daemon-token | 连接到指定 daemon,而不是本机自动启动 |
完整参数见 ohs --help。
ohs setup
ohs doctor
ohs auth login <provider> <api-key>
ohs auth status
ohs provider list|use|add|edit|remove
ohs mcp list|add|remove
ohs plugin list|install|uninstall|enable|disable
ohs sandbox on|off|status|doctor
ohs daemon start|status|stop|install|uninstall
ohs config show
ohs config set <key> <value>
ohs workflow list|status|validate|template|reconcile|cancel
ohs channels status|serve
开启登录后自动拉起 daemon(可选):
ohs daemon install
# 或
ohs config set daemon.autoStart true
-p / 带 prompt 的 print 模式。sharp、better-sqlite3、node-pty;全局安装时会由 npm/pnpm 一并安装对应平台包。vX.Y.Z 发布,和 Desktop 安装包同一版本。详见仓库 docs/release-process.md。本地从源码开发请看仓库根目录 README.md。
FAQs
OpenHarness terminal CLI — interactive TUI and headless agent for your codebase
The npm package @rzx/ohs receives a total of 465 weekly downloads. As such, @rzx/ohs popularity was classified as not popular.
We found that @rzx/ohs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.