
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
flutty-cli-agent
Advanced tools
Flutty CLI Agent - AI-powered development assistant with web chat interface, context memory, and full tool integration using DeepSeek API
A Claude Code CLI clone built using the DeepSeek API. This tool provides an interactive coding assistant that can help with software engineering tasks, code analysis, file operations, and more.
Define custom tools in .flutty_named_tools for:
See the Named Tools Guide for complete documentation.
The project includes comprehensive testing and quality assurance:
npm test runs all test suitesnpm install
npm run build
flutty setup
The setup command will create a .env file with your DeepSeek API key. You can also manually configure:
# Required
DEEPSEEK_API_KEY=your_api_key_here
# CLI Configuration
CLI_LOG_LEVEL=info
CLI_MAX_CONTEXT_TOKENS=32000
CLI_MAX_TURNS=50
# Tool Configuration
ENABLE_BASH_TOOL=true
ENABLE_WEB_FETCH=false
BASH_TIMEOUT_MS=30000
# RAG Configuration (optional - enables enhanced context awareness)
RAG_ENABLED=false
RAG_EMBEDDING_PROVIDER=deepseek
RAG_EMBEDDING_API_KEY=your_openai_api_key_here # if using openai provider
RAG_EMBEDDING_MODEL=text-embedding-3-small
RAG_INDEXING_ENABLED=true
RAG_WATCH_FILES=false
RAG_MAX_RELEVANT_FILES=5
RAG_RELEVANCE_THRESHOLD=0.7
Start an interactive session:
flutty chat
# or
flutty c
Options:
-d, --directory <path>: Set working directory-m, --model <model>: Choose DeepSeek model (deepseek-chat, deepseek-coder)-v, --verbose: Enable debug loggingExecute a single query:
flutty query "Help me fix the bug in src/app.js"
# or
flutty q "Create a new React component for user authentication"
View current settings:
flutty config
Initial setup (creates .env file):
flutty setup
Set API key directly:
flutty key your_deepseek_api_key_here
# Start interactive chat in specific directory
flutty chat -d ./my-project -v
# Quick file analysis
flutty query "What does the main function in app.py do?"
# Code generation
flutty query "Create a TypeScript interface for a user profile"
# Debugging help
flutty query "There's an error in my React component, can you help fix it?"
# Enable RAG for enhanced context
flutty chat --verbose # with RAG_ENABLED=true in .env
# Create files with oneshot mode (streaming)
flutty api-chat --prompt "Create a React todo app" --oneshot --stream
Implementation Notes - Internal development documentation
# Development mode (with TypeScript compilation)
npm run dev
# Build for production
npm run build
# Run built version
npm start
# Run unit tests (Jest framework)
npm test
# Lint code (ESLint with TypeScript support)
npm run lint
# Clean build artifacts
npm run clean
# Build and lint together (for CI/CD)
npm run build && npm run lint
The project maintains high code quality through:
Based on the Claude Code architecture with:
npm run lint to ensure code qualitynpm test to ensure all tests passMIT License - see LICENSE file for details.
API Key not found
flutty setup to configure your environmentflutty key your_api_key to set it directly.env file is in your working directoryBuild or linting errors
npm installnpm run build to check for TypeScript compilation errorsnpm run lint to identify and fix code quality issuesTool not found errors
npm installRAG/Embedding errors
RAG_EMBEDDING_API_KEY in your .env filePermission errors
ENABLE_BASH_TOOL setting matches your security requirementsFAQs
Flutty CLI Agent - AI-powered development assistant with web chat interface, context memory, and full tool integration using DeepSeek API
We found that flutty-cli-agent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.