Nuvouch CLI

Command-line interface for Nuvouch Agent Auth runtime flows.

The CLI is the public runtime-facing surface for pairing an agent runtime, requesting user-approved delegation credentials, waiting for approval, and retrieving approved credentials.

Install

bunx @nuvouch/cli --help
npx @nuvouch/cli --help

For local development:

bun install
bun run dev -- --help

Commands

Pair a runtime by scanning the runtime QR in Nuvouch mobile:

nuvouch auth pair \
  --application-id app_openclaw \
  --runtime-name "OpenClaw Desktop"

Request a delegation:

nuvouch auth request \
  --audience aud_github_repos \
  --scope repo.read \
  --scope repo.pull_request.prepare \
  --purpose "Prepare a pull request summary"

Wait for approval:

nuvouch auth wait del_123 --json

Retrieve the approved credential:

nuvouch auth token del_123

Configuration

Config is stored at:

~/.nuvouch/config.json

Override with:

NUVOUCH_CONFIG=/path/to/config.json

Useful environment variables:

NUVOUCH_APPLICATION_ID

The first implementation stores runtime private keys in the config file with mode 0600. A platform keychain backend should replace this before broad public release.