@datalabrotterdam/nova-ai-cli 1.1.0 → 1.2.0-alpha.10

package/CHANGELOG.md

@@ -0,0 +1,165 @@
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.10](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.9...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.10) (2026-10-24)
+
+
+### Bug Fixes
+
+* **cli:** commit the vendored browser host build ([f54c98f](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/f54c98f2ef6319c243ab048842603490cab2e7ed))
+* **cli:** update the vendored browser host ([0a9800a](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0a9800a2e207c42873f0de18138d55f522a10624))
+
+
+### Features
+
+* **agent:** bundled skills are read-only and can only be switched off ([16f480c](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/16f480cb9d8f0da03f718d0c102dfb6485e5f47d))
+* **cli:** depend on @datalabrotterdam/nova-ai-browser-host ([6214053](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/62140534c2f40d1f33d4d20ca81edae604a5d550))
+* **cli:** set up the Nova AI browser integration at start-up ([4c9c049](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/4c9c049ecf8a9019b8d5de3082f841d173e1610e))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.9](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.8...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.9) (2026-10-24)
+
+
+### Features
+
+* **agent:** autopilot mode, and autopilot in agent files ([c9d47ee](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/c9d47ee97f9f5e648592159678c24a71bdda4b5c))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.8](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.7...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.8) (2026-10-24)
+
+
+### Features
+
+* slash commands from markdown files ([305f111](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/305f1112c6f8312ab8a0683954c4e5bc88d7b952))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.7](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.6...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.7) (2026-10-24)
+
+
+### Features
+
+* **agent:** Claude Code compatible hooks ([227fe8b](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/227fe8b273ec2e211e9d57674e76af5c42a473bd))
+* **agent:** install the shared Nova skills ([64139dd](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/64139dd612933343f04f165de1a9ab78832d6864))
+* **agent:** mark and protect bundled skills ([6ef52eb](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/6ef52eb6d048f8a3b4e75686244aabcfd0f62d6e))
+* **agent:** thinking effort for reasoning models ([8551fea](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/8551feacff3e1675f369030e20fb2b5071f0db7f))
+* **agent:** web_search tool ([12985eb](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/12985eb9ca06d6c814d4e0162465c651889d9370))
+* **cli:** /effort slider for thinking models ([8ca67f2](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/8ca67f2f5dcc8f6bff8c36409a2baba5d43c4a02))
+* **cli:** remember the thinking level ([883196c](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/883196c9fdb089f4f26ac82b557cc87dfc0b1c0b))
+* OAuth sign-in for MCP servers ([ba57c79](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/ba57c79642f902ab2bc20f59e4627fb2b774bb4a))
+* the user's agent files as session modes ([3386de8](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/3386de88d07b0351bd1e44960fcacfef26e3d45b))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.6](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.5...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.6) (2026-10-23)
+
+
+### Bug Fixes
+
+* **cli:** start the session before the first prompt ([0c26456](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0c26456b8126e3b42a6de2e38212213ae5380e62))
+
+
+### Features
+
+* **agent:** set workspace trust over ACP ([cec4a89](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/cec4a8949a4232f46448219e4d5363289651215d))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.5](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.4...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.5) (2026-10-23)
+
+
+### Bug Fixes
+
+* **cli:** keep the full-screen frame one row short of the terminal ([37355f4](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/37355f4efb8a237f204c061ad7008faf54a0dd9e))
+* **cli:** pick the account's default model when none is set ([fb0f34c](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/fb0f34c7bac26f1b59c4b6b2245e6fb8365f99f1))
+
+
+### Features
+
+* **cli:** full-screen TUI with a pinned prompt and mouse-wheel scrolling ([a68d693](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/a68d6930945bd6440de22c709fc14ae32a9c9f65))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.4](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.3...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.4) (2026-10-05)
+
+
+### Bug Fixes
+
+* **cli:** depend on the agent version the CLI was released with ([4931439](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/4931439d106063b81e24367d6aa9c3f285f4ad15))
+
+
+### Features
+
+* **cli:** offer npm updates at start-up, remind until installed, /update ([18defca](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/18defcaea988698f9d0909419bb2aa1fdedfa5a9))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.3](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.2...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.3) (2026-10-04)
+
+
+### Bug Fixes
+
+* **agent:** never overwrite an unreadable settings file when switching a skill ([ca989ef](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/ca989ef1810fc903cea069cdadf3041fe164e364))
+* **cli:** install the command as nova-ai only ([eda8064](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/eda806411af1738ff6f6b1404d23d4e84a74ced8))
+
+
+### Features
+
+* **agent,cli:** Nova skill folders, switching skills off, a budgeted skill list ([0891c79](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0891c79248d3a645d638f12f46928a54652b0941))
+* **cli:** update notice from npm for every channel, cached daily ([c3a0014](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/c3a001473336aac14d216cdeec0bedde4df34427))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.2](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.1...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.2) (2026-10-03)
+
+
+### Features
+
+* release the agent separately as @datalabrotterdam/nova-ai-agent ([32ecfc0](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/32ecfc0faa99bd5bb80cb2eaf2363abc050978f0))
+
+# [1.2.0-alpha.1](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/v1.1.0...v1.2.0-alpha.1) (2026-10-03)
+
+
+### Bug Fixes
+
+* **acp:** bounded, cancellable client terminals in the workspace ([81f7099](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/81f70996d9dfc8d78e12282def1582ea859f2784))
+* **acp:** isolate background prompt jobs from live session history ([8328a8b](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/8328a8bfa1f22871ef36ec38247987e6effcd044))
+* **acp:** replay loaded sessions faithfully; page session/list ([d576171](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/d5761710890f7b2f5d1b340cdce7faafcd2e3561))
+* **env:** no shells or Docker probes when a session starts ([dc3a449](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/dc3a4495f394c1a16e48e282efd76b765af09999))
+* **mcp:** connect servers in parallel with timeouts and diagnostics ([db4c62c](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/db4c62cd9c8ec0f197ea1ae1ce76adcf9d397ed5))
+* **models:** offer and default to chat models only ([5d3ade2](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/5d3ade2727110ca7555bfdfa5b174c9e75b151f9))
+* **security:** harden sessions, setup auth, credentials, processes and file access ([7f02a1d](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/7f02a1d203128555c4d00e5ab4dc4786329b6225))
+* **tui:** keep printed lines inside the terminal width ([dd5cd0a](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/dd5cd0a40592af392eca797399ce56c0e672110e))
+* **tui:** redraw cleanly after the terminal width changes ([f0b2ec6](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/f0b2ec6d01b0bd8ebcf087330c8bfd82072aa08d))
+
+
+### Features
+
+* **acp:** agentInfo and env_var authentication in initialize ([b736e11](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/b736e115542b8fef083f9fc75514586327d3ac49))
+* **acp:** namespace Nova extensions under _nova/ ([bf56cb9](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/bf56cb9e093dc90fc43b44008f1ddd86446a8cd0))
+* **acp:** serialized turns, cancel, shutdown and proper error codes ([6688470](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/66884701af129ff2c1e9ad78b9e572d7ec64cc4b))
+* **acp:** the agent owns permissions; clients only answer its questions ([7db651d](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/7db651d8d4883da2c170a831aeaa2952dc4444ac))
+* **acp:** usage, session info, commands and model options as updates ([21d0816](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/21d08160c558ca9431deff8f8ead25e89a93d21c))
+* added alpha stage on TUI ([3415411](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/3415411986ef4aefc2aa94dbb66fc73710fb6a5d))
+* **cli:** proper entry point, -p/--print, login/logout, help and version ([73c8f94](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/73c8f9472099fa7c3cedccdd3c6a315d809e6a00))
+* **core:** allow multiple tool calls per round ([f6a2171](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/f6a217145efac0722fddc49995808a7ad7bb2508))
+* **core:** compact proactively at 80% of the model context window ([96afcbb](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/96afcbb7b68f4686a9b769bb80a73b00eebfe4a4))
+* **core:** native tool calling with learned per-model text fallback ([6d71193](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/6d7119395b39a45026d676813ad3596382e2611a))
+* **core:** share the ~/.nova-ai project layout with the VS Code extension ([aa75dde](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/aa75dde65218fdbd16b9f329bd849cc9ec608a28))
+* **core:** validate tool args centrally before dispatch ([0a88e3e](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0a88e3efb0d7c32611979e408b95e659873ec1e5))
+* expand ACP runtime and terminal workflows ([bfbae15](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/bfbae157c301fbc1b7e88f5e267d25c8da126008))
+* **mcp:** surface tool schemas, respect readOnlyHint, hint cwd args ([2b22be3](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/2b22be327b052788936e4badb010844f7ca3d057))
+* **memory:** shared MEMORY.md index + typed notes, compatible with VS Code ([474c916](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/474c91694f4da58400426f39c290ac6888f4aa19))
+* **modes:** plan mode can read, ask and keep the task list ([e253eaa](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/e253eaa66fd02478d61f34e734a27883068bf357))
+* **policy:** agent-side permission policy with trust-gated rule sources ([234cd3a](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/234cd3adf06423c973c52497e5e31f6868d6b19a))
+* **policy:** rule subjects for the extension's tool names ([5c188b6](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/5c188b610ff6e4ba8a715cc2ee10960736493b86))
+* **tools:** add JSON schema validator for tool args ([24764ef](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/24764ef5100c14404f1923f89cc87c3d64de510d))
+* **tools:** declare args schemas on every built-in tool ([79f6283](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/79f62833144f1a6aba9aaa65a2a19f18eb8793ca))
+* **tools:** whitespace-tolerant edit_file with self-correction hints ([a350e14](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/a350e140e92c8469249d4c6297aad8f8161a217f))
+* **tui:** Ink TUI with inline scrollback replaces pi-tui ([0725bae](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0725bae27790829fd756afbdb5dd20574a1e0f00))
+* **tui:** Shift+Enter inserts a new line where the terminal can report it ([b9c0b70](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/b9c0b7041057e2bdeb1675bbfa33a12fc3a664b9))
+
+# [1.1.0](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/v1.0.1...v1.1.0) (2026-06-23)
+
+
+### Features
+
+* **acp-web:** theme support, favicon, font, and dep bumps ([0576402](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0576402b6888a2cf6bc93123d733c4163358c63f))
+* **acp:** add MCP server support (stdio/http/sse) ([ba98b0c](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/ba98b0c0b2e2461e8553331cafa1985e7673ee43))
+
+## [1.0.1](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/v1.0.0...v1.0.1) (2026-06-22)
+
+
+### Bug Fixes
+
+* correct npm scope to [@datalabrotterdam](https://github.com/datalabrotterdam) ([6ab6bf8](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/6ab6bf88506cc1d4b778c1a30b123cd532a0a8de))
+
+# 1.0.0 (2026-06-22)
+
+
+### Features
+
+* add ACP agent, tool calling, and alpha release channel ([15d19a7](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/15d19a7998b4651ba9ad279fc2607006ea14ed49))

package/README.md

@@ -1,10 +1,10 @@
 <div align="center">
 
-<img src="./assets/logo.png" width="96" height="96" alt="Nova logo" />
+<img src="https://raw.githubusercontent.com/Datalab-Rotterdam/nova-ai-cli/main/assets/logo.png" width="96" height="96" alt="Nova logo" />
 
 # @datalabrotterdam/nova-ai-cli
 
-**CLI for DataLab Rotterdam's Nova AI — also speaks Agent Client Protocol**
+**Agentic coding with DataLab Rotterdam's Nova AI: in your terminal, in scripts, and in your editor over the Agent Client Protocol**
 
 [![npm version](https://img.shields.io/npm/v/@datalabrotterdam/nova-ai-cli?style=flat-square&color=f96743)](https://www.npmjs.com/package/@datalabrotterdam/nova-ai-cli)
 [![npm downloads](https://img.shields.io/npm/dm/@datalabrotterdam/nova-ai-cli?style=flat-square)](https://www.npmjs.com/package/@datalabrotterdam/nova-ai-cli)
@@ -12,136 +12,247 @@
 [![ACP](https://img.shields.io/badge/ACP-agent-blue?style=flat-square)](https://agentclientprotocol.com)
 [![issues](https://img.shields.io/github/issues/Datalab-Rotterdam/nova-ai-cli?style=flat-square)](https://github.com/Datalab-Rotterdam/nova-ai-cli/issues)
 
-Talk to DataLab Rotterdam's Nova AI from your terminal, or point your editor/IDE at it via [Agent Client Protocol](https://agentclientprotocol.com) — both modes share the same auth and run on [`@datalabrotterdam/nova-sdk`](https://www.npmjs.com/package/@datalabrotterdam/nova-sdk).
-
-[npm](https://www.npmjs.com/package/@datalabrotterdam/nova-ai-cli) · [Issues](https://github.com/Datalab-Rotterdam/nova-ai-cli/issues) · [ACP docs](https://agentclientprotocol.com)
+[npm](https://www.npmjs.com/package/@datalabrotterdam/nova-ai-cli) · [Issues](https://github.com/Datalab-Rotterdam/nova-ai-cli/issues) · [ACP reference](https://github.com/Datalab-Rotterdam/nova-ai-cli/blob/main/docs/ACP.md) · [Settings and memory](https://github.com/Datalab-Rotterdam/nova-ai-cli/blob/main/docs/NOVA_HOME.md)
 
 </div>
 
-> **⚠️ Work in progress.** ACP mode (`--acp`) is the only fully implemented mode today — agentic tool use, permissions, and session persistence all work there. Interactive terminal chat (no flags) and the standalone browser UI (`--web`) are stubs that print a "not built yet" message. Expect breaking changes before a 1.0.
+`nova-ai` is a coding agent in the spirit of `claude` and `codex`, backed by
+[Nova AI](https://platform.nova.datalabrotterdam.nl). It reads and edits your
+code, runs commands with your permission, asks when a decision is yours, and
+keeps a task list for longer work. One agent, three front ends:
 
----
+- **Terminal UI**: `nova-ai`
+- **Headless**: `nova-ai -p "…"` for scripts, CI and machines without a GUI
+- **ACP agent**: `nova-ai --acp` for Zed, JetBrains, VS Code and any other
+  [Agent Client Protocol](https://agentclientprotocol.com) client
 
-## Installation
+The terminal UI and headless mode talk to the agent over the same protocol an
+editor uses, so all three behave the same: same tools, permissions, sessions,
+memory, MCP servers and settings.
 
-No install needed — run directly with `npx`:
+## Install
 
-```sh
-npx @datalabrotterdam/nova-ai-cli --setup   # store your Nova API key
-npx @datalabrotterdam/nova-ai-cli           # interactive chat (WIP, stub)
-npx @datalabrotterdam/nova-ai-cli --acp     # speak ACP over stdio (editors/IDEs) — fully working
-npx @datalabrotterdam/nova-ai-cli --web     # standalone browser UI (WIP, stub)
-```
-
-Or install globally / as a project dependency:
+Requires Node.js 22.19 or newer and a Nova AI API key
+([get one](https://platform.nova.datalabrotterdam.nl/dashboard/api-keys)).
 
 ```sh
 npm install -g @datalabrotterdam/nova-ai-cli
+nova-ai login          # opens a local page to enter the key; --no-browser asks in the terminal
+nova-ai                # start the terminal UI in your project
 ```
 
-**Requires:** Node.js >= 18, a [Nova AI](https://api.nova.datalabrotterdam.nl) API key.
+Or without installing: `npx @datalabrotterdam/nova-ai-cli login`, then
+`npx @datalabrotterdam/nova-ai-cli`.
 
----
+When a newer version is on npm, `nova-ai` asks before the terminal UI opens:
+Enter installs it (`npm install -g`) and restarts, `n` asks again tomorrow, `s`
+skips that version. Until it is installed, the status line keeps reminding you,
+and `/update` installs it and restarts in the same session. `-p` and
+`--version` print a notice (on stderr, only in a terminal). npm is asked at
+most once a day; an alpha install also follows the `alpha` channel.
+`NOVA_NO_UPDATE_CHECK=1` turns it off (it is off in CI).
 
-## Overview
+nova-ai installs updates itself only when it was installed with
+`npm install -g`; with npx, another package manager or a project dependency it
+shows the command to run instead.
 
-`nova-ai-cli` is a terminal client for Nova AI, in the same spirit as `claude`/`codex`. Pass `--acp` to run it in Agent Client Protocol mode, where it reads JSON-RPC requests from stdin and writes responses/notifications to stdout so any ACP-aware editor/IDE can drive it like any other coding agent — with tool calling, permission prompts, and persisted session history. Bare/`--web` modes are placeholders for now. All modes share the same stored credentials.
+```
+nova-ai [options]                 Interactive terminal UI
+nova-ai -p [options] [prompt]     Run one request headless (see nova-ai -p --help)
+nova-ai --acp                     Agent Client Protocol over stdio (for editors)
+nova-ai login [--no-browser]      Connect your Nova AI account
+nova-ai logout                    Remove the stored API key
+
+Interactive options:
+      --resume <session-id>       Continue a saved session
+  -c, --continue                  Continue the most recent session in this folder
+      --model <id>                Use this model
+```
 
-```sh
-# 1. one-time setup — opens a browser page to verify the key against Nova AI and store it locally
-npx @datalabrotterdam/nova-ai-cli --setup
+## Terminal UI
+
+The UI runs full screen (the terminal's alternate screen, like `less` or
+`vim`) and gives your shell its screen back on exit. The mouse wheel or
+PgUp/PgDn scroll the transcript, Esc jumps back to the newest output, and
+while you read an answer the prompt that asked for it stays pinned on the top
+row. To select text, hold Shift (Option in some macOS terminals) while dragging.
+
+- **Modes** (Shift+Tab): `agent` does the work; `plan` reads the code, asks
+  questions and builds a task list but changes nothing; `ask` only answers;
+  `autopilot` works on until the task is done, picking defaults instead of
+  asking (approvals still ask you).
+  Your own agents (`~/.nova-ai/agents/<name>.agent.md`, the format the VS Code
+  extension uses) are extra modes after these; `/mode` lists them.
+- **Permissions**: before an edit or command you choose once, for this
+  session, always (saved as an exact rule) or deny. Ctrl+K switches between
+  asking, accepting edits, and bypass (never remembered).
+- **Questions and tasks**: the agent can ask 1–4 multiple-choice questions
+  (with descriptions, a recommended option and your own answer) and shows a
+  live checklist for multi-step work.
+- **Prompt**: history, `@file` mentions, `/command` completion, large pastes
+  as compact markers, Alt+V to paste an image (for models that accept
+  images). Messages typed while Nova works are queued; ↑ edits them.
+  `/steer <text>` reaches the running turn at the next tool boundary.
+
+| Key | Action |
+|---|---|
+| Enter / Shift+Enter | Send / new line (Shift+Enter where the terminal supports the kitty keyboard protocol: VS Code, kitty, WezTerm, Ghostty, foot, Alacritty, recent iTerm2; Alt+Enter, Ctrl+J or a trailing `\` work everywhere) |
+| Esc | Cancel the running turn |
+| Ctrl+C twice | Exit; prints `nova-ai --resume <id>` |
+| Shift+Tab | Cycle agent / ask / plan / autopilot and your own agents |
+| Ctrl+R / Ctrl+P / Ctrl+K | Sessions / models / permission mode |
+| Ctrl+O / Ctrl+T / Ctrl+B | Verbose tool output / tool inspector / background jobs |
+| Alt+V | Paste a clipboard image |
+
+Slash commands: `/help`, `/model`, `/effort` (thinking models), `/mode`, `/permission`, `/session`,
+`/resume`, `/clear`, `/compact`, `/rewind [n]`, `/queue`, `/steer`, `/usage`,
+`/tools`, `/mcp`, `/skills`, `/shell` and `/agent` (background jobs), `/trust`
+and `/exit`. Your own commands are markdown files in `~/.nova-ai/commands/` or
+the repository's `.nova-ai/commands/` (Claude Code's format, so
+`.claude/commands` works too): the file is the prompt, `$ARGUMENTS` what you
+type after the command, and they show up in the `/` menu. Details:
+[`src/tui/README.md`](https://github.com/Datalab-Rotterdam/nova-ai-cli/blob/main/packages/cli/src/tui/README.md).
+
+## Headless
 
-# 2. point your ACP client at this binary
-npx @datalabrotterdam/nova-ai-cli --acp
+```sh
+nova-ai -p "review the changed files"
+git diff | nova-ai -p --output-format json "summarize this diff"
+nova-ai -p --json --permission-mode accept-edits "fix the failing test"
+nova-ai -p -c "and now add a changelog entry"
 ```
 
-Most editors invoke `--acp` for you once configured as an agent — `--setup` is the one command you run by hand first.
-
-**Status:** `--setup` and `--acp` (including tool calling and session persistence) are fully implemented. Interactive terminal chat (no flags) and `--web` are stubs — see the WIP note above.
+| Option | |
+|---|---|
+| `--output-format text\|json\|stream-json` | `text` prints the answer; `json` one object at the end (text, tools, permissions); `stream-json` (or `--json`) JSON Lines while it runs: `session.started`, `message.delta`, `tool.started`/`tool.updated`/`tool.finished`, `permission`, `queue.changed`, `background.update`, `result`, `error` |
+| `--permission-mode` | `read-only` (default): anything that needs approval is refused, since nobody can approve it. `accept-edits`: file edits are accepted, commands still refused. `bypass-all`: everything is accepted. Deny rules always win. |
+| `--resume <id>`, `-c` | Continue a session |
+| `--model`, `--cwd` | Model and workspace |
+| `--trust-workspace` | Trust the workspace (remembered): start the MCP servers and apply the allow rules it declares |
+| `--no-mcp` | Ignore workspace MCP configuration |
 
----
+Exit codes: `0` success, `1` configuration or runtime error, `2` cancelled,
+`3` tool-turn safety limit, `130` interrupted.
 
-## Auth
+## Editors (ACP)
 
-This agent advertises **Agent Auth** (per [`AUTHENTICATION.md`](https://github.com/agentclientprotocol/registry/blob/main/AUTHENTICATION.md)): when the client calls `authenticate`, the agent itself spins up a local HTTP server, opens your browser to it, and resolves once you've connected your account.
+Configure `nova-ai --acp` as a custom agent. For Zed:
 
 ```json
 {
-  "id": "nova-api-key",
-  "name": "Nova API Key"
+  "agent_servers": {
+    "Nova AI": { "command": "npx", "args": ["-y", "@datalabrotterdam/nova-ai-cli", "--acp"] }
+  }
 }
 ```
 
-Today the page served at that local URL is a small Svelte form that:
-1. Collects your Nova API key.
-2. Validates it against `client.models.list()`.
-3. Picks a default model (first enabled model) and stores `{ apiKey, defaultModel }` in `~/.nova-ai/credentials.json`.
-
-You can also trigger this manually:
-
-```sh
-npx @datalabrotterdam/nova-ai-cli --setup
-```
-
-Overrides, no browser flow required:
-
-| Env var | Purpose |
+The agent supports session load/list/resume/fork/close/delete, modes, a
+permission-mode and model selector, permission requests with once / session /
+always options, client file system and terminals, form questions, plans, usage
+and title updates, MCP servers (stdio, HTTP, SSE), image prompts, and three
+login methods (browser, `NOVA_API_KEY`, or `nova-ai login` in a terminal).
+Nova-specific features (prompt queue, rewind, compaction, context usage,
+per-session settings, background jobs) are `_nova/…` extension methods. The agent is also published
+on its own as
+[`@datalabrotterdam/nova-ai-agent`](https://www.npmjs.com/package/@datalabrotterdam/nova-ai-agent)
+(command `nova-ai-agent`), without the terminal UI, for integrations that only
+need ACP. Everything is documented in
+[docs/ACP.md](https://github.com/Datalab-Rotterdam/nova-ai-cli/blob/main/docs/ACP.md).
+
+## Security model
+
+- **The agent enforces permissions**, not the client. Every front end and
+  every editor gets the same policy; a client can only answer the questions
+  it is asked. Anything other than an explicit "allow" counts as "deny".
+- **Deny rules win**, also in bypass mode and for read-only tools.
+- **A repository can't approve itself.** Allow rules in a workspace's
+  `.nova-ai/settings*.json`, and MCP servers it declares (`.mcp.json`), only
+  take effect after you trust that workspace (asked once at startup, `/trust`,
+  or `--trust-workspace`). The trust decision is stored in `~/.nova-ai`, never
+  in the repository. A repository can't set the permission mode either.
+- **"Always allow" saves an exact rule** for that command or path in your
+  private `~/.nova-ai/projects/<key>/settings.json`, outside the repository.
+  Compound commands (`a && b`, pipes) are checked part by part; substitutions
+  and nested shells need an exact rule.
+- **Web pages are fetched only with approval.** `fetch_url` asks every time
+  unless a rule allows that URL (a URL can carry data out), and a redirect to
+  another site needs its own approval. `web_search` asks the same way, since
+  the query goes to the search providers (You.com, DuckDuckGo; your own
+  SearXNG server first when `~/.nova-ai/settings.json` has
+  `"webSearch": { "searxngUrl": "https://…" }`).
+- **File access stays in the workspace** (symlinks resolved); commands run in
+  their own process group with a timeout, and the whole tree is stopped on
+  cancel.
+- **Credentials** are stored in `~/.nova-ai/credentials.json` with mode 0600.
+  The browser login page only accepts a one-time token from the same origin.
+
+## Settings, memory and sessions
+
+Everything lives in `~/.nova-ai` (or `$NOVA_AI_HOME`), shared with the Nova
+VS Code extension: settings, per-project trust, sessions and memory.
+
+- **Rules**: `{"permissions": {"allow": ["run_command(npm test)", "edit_file(src/*)"], "deny": ["read_file(.env)"]}}`
+  in `~/.nova-ai/settings.json`, the private project file, or the workspace's
+  `.nova-ai/settings.json` (team, committed) and `.nova-ai/settings.local.json`
+  (personal). Claude-style aliases such as `Bash(npm run *)` and `Edit(src/**)`
+  work too.
+- **Instructions**: `NOVA.md` and `AGENTS.md` in the workspace.
+- **Memory**: a `MEMORY.md` index plus notes, globally and per project,
+  through the `memory_read` and `memory_write` tools (writes need approval).
+- **Skills**: `SKILL.md` files under `.nova-ai/skills` in the workspace or
+  `~/.nova-ai/skills` for every project (`.agents`, `.claude` and `.codex`
+  skills folders are read too). `/skills` lists them; `/skills off <name>`
+  switches one off in this project (`--global`: everywhere). Only names and
+  short descriptions go into the prompt; Nova loads a skill when it fits.
+  Nova installs its own skills for Word, Excel, PowerPoint and PDF files
+  (`nova-docx`, `nova-xlsx`, `nova-pptx`, `nova-pdf`, from
+  [nova-ai-skills](https://github.com/Datalab-Rotterdam/nova-ai-skills)) in
+  `~/.nova-ai/skills` and keeps them up to date; they need Python 3.
+- **Hooks**: Claude Code's `hooks` format in the same settings files (a
+  repository's own only once you trust the workspace): `PreToolUse`,
+  `PostToolUse`, `UserPromptSubmit`, `SessionStart` and `Stop`, with Claude
+  Code's tool names as matchers, so hooks from `.claude/settings.json` work
+  when copied over.
+- **MCP servers**: `.mcp.json` or `mcpServers` in `.nova-ai/settings.json`.
+  HTTP servers that use OAuth show "needs sign-in" in `/mcp`; `/mcp login
+  <server>` opens the sign-in page in your browser (tokens are kept in
+  `~/.nova-ai/mcp-auth`, refreshed automatically), `/mcp logout <server>`
+  forgets them. A server that wants a client registered by hand takes
+  `"oauth": { "clientId", "clientSecret", "scope", "callbackPort" }` in
+  `.mcp.json`.
+
+The complete layout and rule syntax: [docs/NOVA_HOME.md](https://github.com/Datalab-Rotterdam/nova-ai-cli/blob/main/docs/NOVA_HOME.md).
+
+## Models
+
+The model list shows the chat models of your account. On login Nova picks the
+first one with native tool calling; `/model` or Ctrl+P changes it (and
+remembers the choice), `--model` or `NOVA_MODEL` sets it for one run. Nova uses the gateway's function calling and falls back
+to a text protocol for models that don't support it. When the context window
+fills up, older messages are summarized automatically (`/compact` does it by
+hand).
+
+Thinking models are marked ◆ in the model list. For those with levels the
+status line shows the current one (`· thinking medium`) and `/effort` opens a
+slider (←/→, Enter), or sets one directly (`/effort high`, `/effort off`). The
+choice is remembered like the model; a model without that level uses its own
+default.
+
+| Environment | |
 |---|---|
-| `NOVA_API_KEY` | Skip stored credentials, use this key |
-| `NOVA_MODEL` | Skip stored default model, use this model id |
-
-A future version will swap this for real OAuth once DataLab Rotterdam ships an OAuth provider for Nova AI — same local server (`src/acp/auth-server.ts`), same lifecycle, just a different page/flow. Credential handling stays isolated in `src/acp/credentials.ts` either way.
-
----
-
-## What it implements
-
-| ACP method | Behavior |
-|---|---|
-| `initialize` | Returns protocol version + the `nova-api-key` agent auth method |
-| `session/new` | Allocates a session id with in-memory history |
-| `session/load` | Restores a previously-persisted session and replays its turns as `*_message_chunk` notifications |
-| `session/list` | Lists stored sessions, optionally filtered by `cwd` |
-| `authenticate` | Runs the local browser auth flow (`src/acp/auth-server.ts`) and resolves once a valid key is stored |
-| `session/prompt` | Streams a `chat.completions.stream()` call, forwarding `agent_message_chunk` updates as text arrives; drives the tool-calling loop below |
-| `session/cancel` | Aborts the in-flight Nova AI request via `AbortController` |
-
-Only `text` and `resource_link` content blocks are read from prompts today — images/audio/embeddings supported by `nova-sdk` aren't wired up yet.
-
-Sessions are persisted to disk (`src/acp/sessions.ts`) so `session/load` can rehydrate history, and a title is auto-derived from the conversation.
-
-### Tool calling
-
-While streaming a response, the agent watches for a fenced tool-call marker in the model's output (`src/acp/tools/marker.ts`). When one appears, it stops streaming text and instead:
-
-1. Reports the pending call via `session/update` (`tool_call` with status `pending`).
-2. Requests permission from the client for any **mutating** tool (`allow_once` / `reject_once`), via `session/request_permission`.
-3. Executes the tool and reports the result/error via a `tool_call_update`.
-4. Feeds the tool result back into the conversation and loops (up to 10 rounds per prompt) until the model produces a plain answer.
-
-Built-in tools (`src/acp/tools/registry.ts`):
-
-| Tool | Mutating | Behavior |
-|---|---|---|
-| `read_file` | No | Reads a file's contents, gated by client `fs.readTextFile` capability |
-| `write_file` | Yes | Writes/overwrites a file, gated by client `fs.writeTextFile` capability — requires permission |
-| `run_command` | Yes | Runs a shell command in the session's `cwd` — requires permission |
-
-Tools are filtered per-session by the client's advertised `clientCapabilities`, so a client without filesystem support never sees `read_file`/`write_file` offered.
-
----
+| `NOVA_API_KEY`, `NOVA_MODEL` | Use this key / model instead of the stored ones |
+| `NOVA_BASE_URL` | Another Nova (OpenAI-compatible) gateway |
+| `NOVA_AI_HOME` | Settings folder (default `~/.nova-ai`) |
+| `NOVA_TOOL_PROTOCOL` | Force `native` or `text` tool calling |
+| `NOVA_NES_MODEL` | Separate model for next-edit suggestions (ACP) |
+| `NOVA_KITTY_KEYBOARD` | `1`/`0`: force the kitty keyboard protocol on or off |
+| `NOVA_NO_UPDATE_CHECK` | Don't ask npm for a newer version (also `NO_UPDATE_NOTIFIER`, or `CI`) |
 
 ## Development
 
-```sh
-npm install
-npm test      # tsc --noEmit + node --test on tests/
-npm run build # builds the Svelte setup page, then tsc -> dist/
-```
-
-Releases are automated via `semantic-release` on push to `main` (see `.github/workflows/ci.yml`); commit messages drive version bumps.
-
----
+This package lives in the [nova-ai-cli repository](https://github.com/Datalab-Rotterdam/nova-ai-cli)
+next to the agent package it depends on; see the repository README for
+building and testing.
 
 ## License
 

package/dist/browser-setup-7SWHUQEL.js

@@ -0,0 +1,57 @@
+// src/browser-setup.ts
+import { execFile, spawn } from "child_process";
+import { existsSync } from "fs";
+import { createRequire } from "module";
+import { dirname, join } from "path";
+var runInstaller = (node, args) => new Promise((resolve, reject) => {
+  execFile(node, args, { encoding: "utf8", timeout: 6e4, maxBuffer: 1024 * 1024 }, (error, stdout, stderr) => {
+    if (error) reject(new Error(`${error.message}${stderr ? `
+${stderr}` : ""}`));
+    else resolve(stdout);
+  });
+});
+function browserSetupDisabled(env = process.env) {
+  return env.NOVA_AI_BROWSER_AUTO_SETUP === "0" || Boolean(env.CI);
+}
+function bundledInstaller(from = import.meta.url) {
+  try {
+    const manifest = createRequire(from).resolve("@datalabrotterdam/nova-ai-browser-host/package.json");
+    const installer = join(dirname(manifest), "dist", "cli.js");
+    return existsSync(installer) ? installer : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function parseSetupOutput(output) {
+  const line = output.trim().split("\n").reverse().find((entry) => entry.trim().startsWith("{"));
+  if (!line) throw new Error("The browser host installer printed no result.");
+  return JSON.parse(line);
+}
+var INSTALLER_ARGS = ["install", "--auto", "--json"];
+async function setUpBrowser(run = runInstaller, installer = bundledInstaller()) {
+  if (!installer) throw new Error("The bundled Nova AI Browser host is missing from this installation.");
+  return parseSetupOutput(await run(process.execPath, [installer, ...INSTALLER_ARGS]));
+}
+function setUpBrowserInBackground(installer = bundledInstaller()) {
+  if (browserSetupDisabled() || !installer) return;
+  try {
+    spawn(process.execPath, [installer, ...INSTALLER_ARGS], { detached: true, stdio: "ignore" }).unref();
+  } catch {
+  }
+}
+function describeBrowserSetup(result) {
+  if (!result.browsers.length) {
+    return "Browser: no Chromium-based browser (Chrome, Edge, Brave, \u2026) found for this user.";
+  }
+  const restart = result.newBrowsers.length ? ` Restart ${result.newBrowsers.join(", ")} once so it picks this up.` : "";
+  return `Browser: Nova can use ${result.browsers.join(", ")} through the Nova AI browser extension.${restart}`;
+}
+export {
+  INSTALLER_ARGS,
+  browserSetupDisabled,
+  bundledInstaller,
+  describeBrowserSetup,
+  parseSetupOutput,
+  setUpBrowser,
+  setUpBrowserInBackground
+};

package/dist/chunk-FMHWW3E6.js

@@ -0,0 +1,11 @@
+// src/version.ts
+import { readPackageVersion } from "@datalabrotterdam/nova-ai-agent/core/version.js";
+var CLI_PACKAGE_NAME = "@datalabrotterdam/nova-ai-cli";
+function cliVersion() {
+  return readPackageVersion(CLI_PACKAGE_NAME, import.meta.url);
+}
+
+export {
+  CLI_PACKAGE_NAME,
+  cliVersion
+};