@asathinkeroops/nova-code 0.1.0-beta.5 → 0.1.0-beta.6

package/README.md

@@ -2,11 +2,15 @@
   <img src="https://static-1453154645.cos.ap-guangzhou.myqcloud.com/logo.svg" alt="NOVA-CODE" width="600">
 </p>
 
+<p align="center">
+  <b>为 DeepSeek 量身打造的编程代理 — 95%+ 缓存命中 · OS 级沙箱 · 工具齐全 · 开箱即用</b>
+</p>
+
 ![Nova 截图](https://static-1453154645.cos.ap-guangzhou.myqcloud.com/screen.png)
 
 > 为 DeepSeek 量身打造的编程代理 — 95%+ 缓存命中 · OS 级沙箱 · 工具齐全 · 开箱即用。
 
-Nova 读代码、跑命令、改文件——通过工具调用把任务推到完成。模型层围绕 **DeepSeek** 构建：thinking 映射到 effort（而非 `budget_tokens`）、wire format 按模型 id 自动判别、整个请求管线为 DeepSeek 的自动上下文缓存做了调优，让缓存持续命中。其他 Anthropic 兼容端点也能跑，DeepSeek 是第一优先级。
+Nova 读代码、跑命令、改文件——通过工具调用把任务推到完成。模型层围绕 **DeepSeek** 构建：thinking 映射到 effort（而非 `budget_tokens`）、错误码翻译成人话、余额与定价内建，整个请求管线为 DeepSeek 的自动上下文缓存做了调优，让缓存持续命中。各家 provider 都走 Anthropic 兼容协议，差异（thinking 形状、错误码、余额探针）由 provider profile（按 `settings.provider` 选择）吸收——DeepSeek 是第一优先级，Kimi（Moonshot）有专用适配（beta），其余端点走通用 `other` 档。
 
 ## 为什么选 Nova
 
@@ -36,7 +40,9 @@ nova -p "解释这段代码"              # headless 模式：只跑一轮，输
 nova upgrade                       # 更新到最新版本（启动时也会自动检查并提示）
 ```
 
-首次启动进入交互式配置向导，写入 `~/.nova/nova.config.json`（API key、模型、session 目录等）。模型按 `lite` / `pro` / `max` 三档配置，各档可单独设置 thinking 等级；`/model`、`--model` 切换的是档位而非裸 provider id。
+首次启动进入交互式配置向导，写入 `~/.nova/nova.config.json`（API key、模型、session 目录等）。模型按 `lite` / `pro` / `max` 三档配置，每档可单独设定 thinking 等级与定价（`models.<档>.pricing`，支持 USD / CNY）；`/model`、`--model` 切换的是档位而非裸 provider id。默认 provider 为 `deepseek`，`settings.provider` 可切到 `moonshot`（Kimi，beta）或通用 `other`。
+
+`nova` 还带子命令：`nova doctor`（体检全局配置）、`nova mcp`（管理 MCP 服务器）、`nova plugin`（安装 / 启停插件）、`nova upgrade`（升级 CLI）。
 
 ## 功能概览
 
@@ -69,7 +75,7 @@ nova upgrade                       # 更新到最新版本（启动时也会自
 | `/rename` | 给当前会话起个名字（显示在输入框边框上） |
 | `/plan` | 只读调研出实现方案，不动手 |
 | `/goal` | 设定成功条件后自动推进直到达成 |
-| `/diff` · `/review` | 浏览、评审未提交改动 |
+| `/diff` · `/review` | 浏览、评审未提交改动；`/review <PR#\|#PR\|github-pr-url>` 经 `gh` 只读评审指定 GitHub PR |
 | `/init` | 分析代码库生成 `NOVA.md` |
 | `/agents` · `/agent` | 查看子 agent 类型、委派任务 |
 | `/nova-code-guide` · `/nova-code-guide-update` | 就 Nova 自身答疑的只读 Q&A agent；后者拉取最新源码 |
@@ -94,7 +100,7 @@ nova upgrade                       # 更新到最新版本（启动时也会自
 | Markdown 扩展 | 自定义 slash 命令、子 agent、生命周期 hooks，丢 `.md` 进 `.nova/`、frontmatter 配置，免改代码 |
 | 插件 | `nova plugin` 从本地路径 / GitHub / git url / marketplace 安装、启停插件；一个插件可贡献命令、agent、skill、hooks、MCP / LSP server 与 `bin/` 可执行文件，兼容 Claude Code 插件格式 |
 | 三层记忆 | 全局 → 用户 → 项目，按 `NOVA.md` > `CLAUDE.md` > `AGENTS.md` 优先级加载 |
-| 交互体验 | 全屏 Ink/React REPL，流式输出 + 鼠标；`@path` / `/` 补全、`↑` `↓` 翻历史；实时状态行显示 token 用量、缓存命中、花费、DeepSeek 余额、git 分支、上下文占用 |
+| 交互体验 | 全屏 Ink/React REPL，流式输出 + 鼠标；`@path` / `/` 补全、`↑` `↓` 翻历史；实时状态行显示 token 用量、缓存命中、花费、provider 余额（DeepSeek / Kimi）、git 分支、上下文占用 |
 
 ## 架构
 

package/dist/index.js

@@ -1220,8 +1220,10 @@ var DEFAULT_SANDBOX_ALLOW_WRITE = [
   // pnpm store/bin (Linux)
   "~/Library/pnpm",
   // pnpm store/bin (macOS)
-  "~/.yarn"
+  "~/.yarn",
   // yarn global
+  "~/.config/gh"
+  // gh CLI auth/token refresh (git/PR workflow)
 ];
 var modelPricingSchema = z2.object({
   input: z2.number().nonnegative().describe("Price per 1M uncached (cache-miss) input tokens."),
@@ -2424,6 +2426,11 @@ When I ask you to commit, follow the repo's own version-control conventions:
 - Default to Conventional Commits (\`type(scope): summary\` \u2014 imperative subject \u226472 chars, a short body explaining the *why* when the change is non-trivial), but defer to the repo's own convention where it differs.
 - Never push, and never add co-author or tool-attribution trailers, unless I ask.
 
+When I ask you to open a pull request, use the \`gh\` CLI (it is already authenticated \u2014 don't build a GitHub API client):
+- Gather context first: \`git status\` / \`git diff\`, \`git log <base>..HEAD\` for the commits, and the default branch (\`gh repo view --json defaultBranchRef\`) for the PR base.
+- Push the branch if it has no upstream (never straight to main/master), then run \`gh pr create\`. Pass the body via a quoted HEREDOC so its markdown survives: \`gh pr create --title "\u2026" --body "$(cat <<'EOF' \u2026 EOF)"\`.
+- Structure the body as \`## Summary\` (1\u20133 bullets on what changed and why) and \`## Test plan\` (a checklist of how to verify) \u2014 keep it to what the diff actually supports.
+
 Act, don't explain.
 
 <identity name="Nova"></identity>
@@ -9238,6 +9245,9 @@ var DENY_RULES = [
   { re: /\bgit\s+clean\s+-[a-z]*f/i, reason: "git clean -f (deletes untracked files)" },
   { re: /\bgit\s+stash\s+(?:drop|clear)\b/i, reason: "git stash drop/clear (loses stashed work)" },
   { re: /\bgit\s+commit\b[^|&;]*--amend\b/i, reason: "git commit --amend (rewrites history)" },
+  // Irreversible GitHub (gh) operations — merging or deleting.
+  { re: /\bgh\s+pr\s+merge\b/i, reason: "gh pr merge (merges a pull request)" },
+  { re: /\bgh\s+repo\s+delete\b/i, reason: "gh repo delete" },
   // Infrastructure-as-code teardown.
   { re: /\b(?:terraform|terragrunt|pulumi|cdk|cdktf)\s+destroy\b/i, reason: "infrastructure destroy" },
   // Mass cloud deletion.
@@ -9298,6 +9308,18 @@ var READ_ONLY_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set([
   "tag",
   "config"
 ]);
+var READ_ONLY_GH_SIGNATURES = /* @__PURE__ */ new Set([
+  "pr view",
+  "pr diff",
+  "pr list",
+  "pr checks",
+  "pr status",
+  "issue view",
+  "issue list",
+  "repo view",
+  "run view",
+  "run list"
+]);
 var COMPOUND_RE = /[|&;<>`]|\$\(|\bxargs\b|\beval\b|\bexec\b/;
 function effectiveTokens(command) {
   const tokens = command.trim().split(/\s+/);
@@ -9316,9 +9338,10 @@ function classifyCommandStatic(command) {
     if (re.test(cmd)) return "deny";
   }
   if (!COMPOUND_RE.test(cmd)) {
-    const [verb, sub] = effectiveTokens(cmd);
+    const [verb, sub, action] = effectiveTokens(cmd);
     if (verb && READ_ONLY_COMMANDS.has(verb)) return "allow";
     if (verb === "git" && sub && READ_ONLY_GIT_SUBCOMMANDS.has(sub)) return "allow";
+    if (verb === "gh" && sub && action && READ_ONLY_GH_SIGNATURES.has(`${sub} ${action}`)) return "allow";
   }
   return "unknown";
 }
@@ -18323,8 +18346,17 @@ async function handleResume(ctx, arg) {
 }
 
 // src/commands/review.ts
+var DEFAULT_FOCUS = "correctness and regressions in adjacent code";
+var PR_REF_RE = /^(?:#?(\d+)|https?:\/\/github\.com\/[^/\s]+\/[^/\s]+\/pull\/(\d+))\b\s*/;
 function handleReview(args) {
-  const focus = args.trim() || "correctness and regressions in adjacent code";
+  const trimmed = args.trim();
+  const pr = trimmed.match(PR_REF_RE);
+  if (pr) {
+    const number = pr[1] ?? pr[2] ?? "";
+    const focus2 = trimmed.slice(pr[0].length).trim() || DEFAULT_FOCUS;
+    return { kind: "prompt", text: prReviewText(number, focus2) };
+  }
+  const focus = trimmed || DEFAULT_FOCUS;
   const text = `Review the repository's uncommitted changes. Do NOT edit anything \u2014 this is a review only.
 
 1. Run \`git status\` and \`git diff\` (include \`git diff --staged\`) to see every pending change.
@@ -18334,6 +18366,15 @@ function handleReview(args) {
 Write your review in the same language and script as this request.`;
   return { kind: "prompt", text };
 }
+function prReviewText(pr, focus) {
+  return `Review GitHub pull request #${pr}. Do NOT edit anything and do NOT post any comment to GitHub \u2014 this is a read-only review.
+
+1. Fetch it with \`gh pr view ${pr}\` (title, description, checks) and \`gh pr diff ${pr}\` (the full diff). If \`gh\` is missing or not authenticated, say so and stop.
+2. Review the diff with a focus on ${focus}. Flag anything risky, surprising, broken, or inconsistent with the surrounding code and conventions. Note missing tests or edge cases where they matter.
+3. Be concrete \u2014 reference file paths and line numbers, group findings by severity, and skip praise and restating the obvious. If the diff looks clean, say so plainly.
+
+Write your review in the same language and script as this request.`;
+}
 
 // src/commands/rewind.ts
 import { relative as relative4 } from "path";
@@ -18936,8 +18977,8 @@ function registerBuiltinSlashCommands(ctx) {
   });
   ctx.registry.register({
     name: "review",
-    description: "review the current uncommitted diff (read-only)",
-    argHint: "[focus\u2026]",
+    description: "review the uncommitted diff, or a GitHub PR by number (read-only)",
+    argHint: "[PR# | focus\u2026]",
     source: { kind: "builtin" },
     run: (_c, args) => handleReview(args)
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@asathinkeroops/nova-code",
-  "version": "0.1.0-beta.5",
+  "version": "0.1.0-beta.6",
   "description": "A terminal coding agent, deeply tuned for DeepSeek.",
   "type": "module",
   "license": "MIT",
@@ -36,7 +36,7 @@
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "0.0.52",
-    "@anthropic-ai/sdk": "^0.27.0",
+    "@anthropic-ai/sdk": "^0.111.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@vscode/ripgrep": "^1.18.0",
     "cli-highlight": "^2.1.11",
@@ -59,21 +59,22 @@
     "@types/react": "^18.3.0",
     "tsup": "^8.0.2",
     "tsx": "^4.7.2",
-    "@nova/core": "0.1.0",
     "@nova/context": "0.1.0",
     "@nova/agent": "0.1.0",
+    "@nova/core": "0.1.0",
     "@nova/external": "0.1.0",
-    "@nova/lsp": "0.1.0",
     "@nova/observability": "0.1.0",
-    "@nova/sandbox": "0.1.0",
     "@nova/runtime": "0.1.0",
-    "@nova/tools": "0.1.0",
+    "@nova/sandbox": "0.1.0",
     "@nova/subagent": "0.1.0",
-    "@nova/safety": "0.1.0"
+    "@nova/safety": "0.1.0",
+    "@nova/tools": "0.1.0",
+    "@nova/lsp": "0.1.0"
   },
   "scripts": {
     "build": "tsup",
     "dev": "tsx src/index.ts",
+    "prepub": "pnpm publish --access public --tag beta --no-git-checks --registry=https://registry.npmjs.org/ && npm dist-tag add $npm_package_name@$npm_package_version latest --registry=https://registry.npmjs.org/",
     "typecheck": "tsc --noEmit"
   }
 }