root@huko:~$ huko -- who are you?

huko agent

Minimalist CLI. Maximalist intelligence. Tool-level control, steel-grade safety.

npm install -g @alexzhaosheng/huko github.com/alexzhaosheng/huko

[01] Full Power, Lean Footprint

Full mode. Commercial-grade planning and context management, full tool suite — built for complex multi-step work. Lean mode. Bash-only, ~400 token overhead, fast on small models — one-shot questions, zero ceremony. Five context-compression presets give each call an absolute conversation budget — same level, same recall across models.

# full mode + large budget — keeps file context in scope for multi-file coding
huko --compact=large -- "review this diff, flag risky changes, suggest fixes"
# lean — bash-only, ~400 token overhead, fast even on small models
huko --lean -- "what's the uptime of this machine"

[02] Project as Context

.huko/ — like .git/, but for your agent. Sessions, config, memory scoped to the directory. cd in, full context. cd out, clean slate. Pass --memory and nothing touches disk at all.

# state lives in .huko/ — scoped to this project, just like git
cd ~/projects/backend && huko -- "continue the auth refactor"
# switch directories, switch worlds — different sessions, different config
cd ~/projects/frontend && huko -- "review the new component"
# one-off, no trace — --memory skips session storage entirely
huko --memory -- "explain this regex"

[03] CLI-Native, Pipe-Friendly

stdin in, stdout out. Pipe logs, scripts, data; pipe results to files, jq, the next command. Output as text, --json, or --jsonl. Works anywhere the terminal does. --chat for REPL mode.

# pipe data IN — agent treats stdin as input, argv as the instruction
cat logs/recent.log | huko -- "are these errors caused by my recent commits? check git history"
# review a diff with file context — agent reads what it needs
git diff | huko -- "review for risky changes, read affected files for context"
# structured output — feed the result into jq, Python, or CI
huko --json -- "audit deps for unmaintained packages and known CVEs" > audit.json
# interactive REPL — keep the conversation going across turns
huko --chat

[04] Tool-Level Security + Redaction

disable tools. deny / allow / requireConfirm regex on every call. huko docker run sandboxing. Secrets scrubbed before the LLM sees them — [REDACTED:name] in, real value out.

# inspect the tool surface — what's available, what's restricted
huko safety tool
# take a tool off the LLM's menu entirely — it can't call what it can't see
huko safety disable web_fetch
# regex-gate dangerous patterns — block, allow, or prompt
huko safety deny bash 're:^rm -rf'
# full container isolation: clean install with zero host risk
huko docker run -- "delete all node_modules, clear npm cache, reinstall everything"
# the LLM never sees your token — but the git push still works
huko -- "push the current branch using my github token"

[05] Provider-Agnostic

Anthropic. OpenAI. DeepSeek. Zhipu. MiniMax. OpenRouter. Moonshot. Your own gateway. huko setup in 30 seconds, huko model current to switch, per-project or global. No lock-in.

# interactive wizard: pick provider, paste key, choose model — done
huko setup
# switch model on the fly — different project, different brain
huko model current anthropic/claude-sonnet-4-6
# per-project overrides: fast model for one repo, full power for another
huko model current deepseek/deepseek-v4-flash --project