
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
Terminal workbench for AstrBot Dashboard, built with Node.js, TypeScript, React, and Ink.
astr-tui brings the common AstrBot WebUI workflows into a keyboard-driven terminal UI: chat, status charts, live logs, command/tool toggles, plugins, personas, configuration, providers, and platforms.
npm install -g astr-tui
Node.js 20 or newer is required.
Log in to your AstrBot Dashboard:
astr-tui login --server http://localhost:6185 --username astrbot
Open the TUI:
astr-tui --server http://localhost:6185
If you omit --server, astr-tui uses the saved server from setup/login or falls back to http://localhost:6185.
astr-tui # open the terminal workbench
astr-tui login # log in and store the Dashboard JWT
astr-tui logout # remove the stored Dashboard JWT
astr-tui status # check saved session and AstrBot version
astr-tui --lang zh-CN # run with Chinese UI
astr-tui --lang en-US # run with English UI
login also supports non-interactive password input:
echo "your-password" | astr-tui login --server http://localhost:6185 --username astrbot --password-stdin
Tab: switch main sections.Left / Right: switch tabs or move between row actions.Up / Down: move through lists, rows, settings, and actions.PageUp / PageDown: scroll larger views.Enter: open, toggle, run, edit, or save the selected item depending on context.Esc: close dialogs or return from edit mode.Ctrl+C: exit.The TUI is designed around visible buttons and focused rows. In most screens, move to the action you want and press Enter.
astr-tui logs in through the AstrBot Dashboard API and stores the JWT locally.
When available, tokens are stored in the system keychain through keytar. If keytar is unavailable or fails to load on your platform, astr-tui automatically falls back to:
~/.astr-tui/tokens.json
If keytar prints optional dependency warnings during install, the package can still work through the file-based fallback.
npm install
npm run build
npm run dev -- --server http://localhost:6185
Useful checks:
npm run typecheck
npm test
npm run build
npm pack --dry-run
The package includes a prepublishOnly guard that runs typecheck, tests, and build before publishing.
npm publish
MIT
FAQs
Terminal workbench for AstrBot Dashboard
We found that astr-tui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.