需要 Node.js 24 或更新版本。CLI 和 TUI 使用同一个 npm 包：
npm install -g ligule
在项目目录中执行单次任务：
ligule run "检查项目结构并提出建议"
运行 ligule 打开交互式 TUI，可进行持续对话、查看会话与审批，并选择模型及工具模式。
/model 选择模型，/permission 与 /policy 分别管理 Session 权限和审批规则。/control 创建、查看和撤销项目专属 Grant，允许其他 Agent 通过本地 MCP 控制 Ligule；Grant 上限与 Policy 硬拒绝仍然生效。以当前受信任项目为目标启动 stdio MCP Server：
ligule mcp-server --project /path/to/project
默认不授予写入权限。已通过 /control 创建授权后，可在 MCP 客户端配置中指定 --grant <id>，需要代答普通审批时再选择 --operator；两者都不会自行赋予超出 Grant 的权限。受限 Shell 在缺少足够 OS Sandbox 时仍会拒绝执行。
CLI/TUI 与 Desktop 共享 Agent Core 的会话及工具语义。模型配置、凭据来源、MCP 配置和权限详见：
FAQs
共享会话与工具内核的命令行和终端 AI 助手。An AI agent harness for the command line and terminal.
The npm package ligule receives a total of 0 weekly downloads. As such, ligule popularity was classified as not popular.
We found that ligule demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.
Security News
Cloudflare introduces tsrs, a Rust port of TypeScript’s compiler promising faster checks and lower memory use, with the TypeScript team’s help.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.