需要 Node.js 24 或更新版本。CLI 和 TUI 使用同一个 npm 包：
npm install -g ligule
在项目目录中执行单次任务：
ligule run "检查项目结构并提出建议"
运行 ligule 打开交互式 TUI，可进行持续对话、查看会话与审批，并选择模型及工具模式。
/model 选择模型，/permission 与 /policy 分别管理 Session 权限和审批规则。/control 创建、查看和撤销项目专属 Grant，允许其他 Agent 通过本地 MCP 控制 Ligule；Grant 上限与 Policy 硬拒绝仍然生效。以当前受信任项目为目标启动 stdio MCP Server：
ligule mcp-server --project /path/to/project
默认不授予写入权限。已通过 /control 创建授权后，可在 MCP 客户端配置中指定 --grant <id>，需要代答普通审批时再选择 --operator；两者都不会自行赋予超出 Grant 的权限。受限 Shell 在缺少足够 OS Sandbox 时仍会拒绝执行。
CLI/TUI 与 Desktop 共享 Agent Core 的会话及工具语义。模型配置、凭据来源、MCP 配置和权限详见：
FAQs
共享会话与工具内核的命令行和终端 AI 助手。An AI agent harness for the command line and terminal.
The npm package ligule receives a total of 564 weekly downloads. As such, ligule popularity was classified as not popular.
We found that ligule demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.
Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.