Zenovay CLI

The Zenovay terminal — AI install wizard, live analytics, and full MCP integration.

Install

# one-liner (macOS, Linux, Windows via WSL)
curl -fsSL https://cli.zenovay.com/install.sh | sh

# Windows (native) — PowerShell 7+
iex ((iwr https://cli.zenovay.com/install.ps1).Content)

# npm (requires Node.js >= 20)
npm install -g @zenovay/cli

# one-shot install wizard (no global install)
npx @zenovay/cli@latest init

Commands

zenovay init          # AI install wizard — adds tracking to your codebase
zenovay login         # OAuth device flow — works over SSH, in IDE terminals, in CI
zenovay ai            # 3-mode AI assistant (install / chat / MCP management)
zenovay overview      # live TUI dashboard (updates in place)
zenovay stats         # one-shot dashboard summary — scriptable with --json
zenovay live          # real-time visitor / event stream
zenovay globe         # standalone 3D Braille Earth (press [o] for the photoreal web globe)
zenovay events tail   # stream every analytics event in real time
zenovay status-agent  # background daemon → tmux status bar + threshold alerts (see below)
zenovay telemetry     # manage anonymous CLI usage telemetry (on / off / status)
zenovay health        # self-diagnostic
zenovay doctor        # AI-assisted self-healing
zenovay update        # manual update (auto-update runs implicitly)

Most data commands support --json for scripting. Auto-detects CI=true and headless stdout.

Status-agent

Background daemon that polls your live + errors + revenue every 60s and writes a tmux-format status line to ~/.zenovay/tmux-status. Optional desktop notifications when threshold rules trigger.

# Start
zenovay status-agent --daemonize --notify-on "error_rate>5"

# Wire into tmux (~/.tmux.conf)
zenovay status-agent --install-tmux   # prints the conf line; copy + reload tmux

# Auto-start on boot
zenovay status-agent --install-systemd  # → ~/.config/systemd/user/zenovay-status.service
zenovay status-agent --install-launchd  # macOS → ~/Library/LaunchAgents/

# Stop
zenovay status-agent --stop

Notification platforms (auto-detected, with graceful fallback to OSC 9 bell):

• macOS: terminal-notifier (brew install terminal-notifier)
• Linux: notify-send (apt install libnotify-bin)
• Windows + others: OSC 9 (works in Windows Terminal, iTerm2, WezTerm, Konsole)

Security & privacy

The CLI is a thin HTTPS client — all sensitive logic runs server-side. For full transparency:

• No install scripts. There is no postinstall/preinstall/prepare script — installing the package runs no code. (Install scripts are the primary npm supply-chain attack vector; this package has none.)
• Network access is limited to Zenovay's own endpoints — api.zenovay.com (analytics + the AI install proxy), cli.zenovay.com (version manifest + self-update, with a zenovay.workers.dev fallback mirror when the zone is unreachable), and the npm registry (self-update). The CLI never holds an OpenAI/model key; the AI install model runs server-side. (zenovay webhooks forward additionally POSTs to a local URL you supply — a dev forwarder, not phone-home.) Socket.dev's "Network access" capability flag reflects this expected behaviour — it is informational, not a vulnerability (the CLI's job is to talk to your analytics API).
• The AI install agent is sandboxed. File writes go through a root-jailed allowlist (src/lib/fs-sandbox.ts): writes are confined to your project, restricted to framework entry/config files, with read-blocklists for secrets (.env, *.pem, ~/.ssh, .npmrc), a 256 KB size cap, per-session round/read/write caps, and a full undo journal — every write is copied to ~/.zenovay/undo/<session>/ (with .bak backups) so any change can be restored by hand. Secret-shaped strings are scrubbed before any file content reaches the model.
• Auth tokens are stored 0600 and are refused if the permissions are looser. --no-first-party and --review give you opt-outs for the proxy setup and per-write approval.
• The published tarball ships only dist/ + README + LICENSE — never src/, tests, or any .env.

Documentation

• CLI reference: https://docs.zenovay.com/en/integrations/cli
• Changelog: https://cli.zenovay.com/changelog

Feedback

Found a bug or have a feature request? Let us know at https://cli.zenovay.com/feedback.

Status

Private repository. Compiled binaries are public; source is not.

Licensed under the Zenovay CLI License — see LICENSE.