@datalabrotterdam/nova-ai-cli 1.2.0-alpha.1 → 1.2.0-alpha.10

package/CHANGELOG.md

@@ -0,0 +1,165 @@
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.10](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.9...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.10) (2026-10-24)
+
+
+### Bug Fixes
+
+* **cli:** commit the vendored browser host build ([f54c98f](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/f54c98f2ef6319c243ab048842603490cab2e7ed))
+* **cli:** update the vendored browser host ([0a9800a](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0a9800a2e207c42873f0de18138d55f522a10624))
+
+
+### Features
+
+* **agent:** bundled skills are read-only and can only be switched off ([16f480c](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/16f480cb9d8f0da03f718d0c102dfb6485e5f47d))
+* **cli:** depend on @datalabrotterdam/nova-ai-browser-host ([6214053](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/62140534c2f40d1f33d4d20ca81edae604a5d550))
+* **cli:** set up the Nova AI browser integration at start-up ([4c9c049](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/4c9c049ecf8a9019b8d5de3082f841d173e1610e))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.9](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.8...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.9) (2026-10-24)
+
+
+### Features
+
+* **agent:** autopilot mode, and autopilot in agent files ([c9d47ee](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/c9d47ee97f9f5e648592159678c24a71bdda4b5c))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.8](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.7...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.8) (2026-10-24)
+
+
+### Features
+
+* slash commands from markdown files ([305f111](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/305f1112c6f8312ab8a0683954c4e5bc88d7b952))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.7](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.6...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.7) (2026-10-24)
+
+
+### Features
+
+* **agent:** Claude Code compatible hooks ([227fe8b](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/227fe8b273ec2e211e9d57674e76af5c42a473bd))
+* **agent:** install the shared Nova skills ([64139dd](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/64139dd612933343f04f165de1a9ab78832d6864))
+* **agent:** mark and protect bundled skills ([6ef52eb](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/6ef52eb6d048f8a3b4e75686244aabcfd0f62d6e))
+* **agent:** thinking effort for reasoning models ([8551fea](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/8551feacff3e1675f369030e20fb2b5071f0db7f))
+* **agent:** web_search tool ([12985eb](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/12985eb9ca06d6c814d4e0162465c651889d9370))
+* **cli:** /effort slider for thinking models ([8ca67f2](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/8ca67f2f5dcc8f6bff8c36409a2baba5d43c4a02))
+* **cli:** remember the thinking level ([883196c](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/883196c9fdb089f4f26ac82b557cc87dfc0b1c0b))
+* OAuth sign-in for MCP servers ([ba57c79](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/ba57c79642f902ab2bc20f59e4627fb2b774bb4a))
+* the user's agent files as session modes ([3386de8](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/3386de88d07b0351bd1e44960fcacfef26e3d45b))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.6](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.5...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.6) (2026-10-23)
+
+
+### Bug Fixes
+
+* **cli:** start the session before the first prompt ([0c26456](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0c26456b8126e3b42a6de2e38212213ae5380e62))
+
+
+### Features
+
+* **agent:** set workspace trust over ACP ([cec4a89](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/cec4a8949a4232f46448219e4d5363289651215d))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.5](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.4...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.5) (2026-10-23)
+
+
+### Bug Fixes
+
+* **cli:** keep the full-screen frame one row short of the terminal ([37355f4](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/37355f4efb8a237f204c061ad7008faf54a0dd9e))
+* **cli:** pick the account's default model when none is set ([fb0f34c](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/fb0f34c7bac26f1b59c4b6b2245e6fb8365f99f1))
+
+
+### Features
+
+* **cli:** full-screen TUI with a pinned prompt and mouse-wheel scrolling ([a68d693](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/a68d6930945bd6440de22c709fc14ae32a9c9f65))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.4](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.3...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.4) (2026-10-05)
+
+
+### Bug Fixes
+
+* **cli:** depend on the agent version the CLI was released with ([4931439](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/4931439d106063b81e24367d6aa9c3f285f4ad15))
+
+
+### Features
+
+* **cli:** offer npm updates at start-up, remind until installed, /update ([18defca](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/18defcaea988698f9d0909419bb2aa1fdedfa5a9))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.3](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.2...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.3) (2026-10-04)
+
+
+### Bug Fixes
+
+* **agent:** never overwrite an unreadable settings file when switching a skill ([ca989ef](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/ca989ef1810fc903cea069cdadf3041fe164e364))
+* **cli:** install the command as nova-ai only ([eda8064](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/eda806411af1738ff6f6b1404d23d4e84a74ced8))
+
+
+### Features
+
+* **agent,cli:** Nova skill folders, switching skills off, a budgeted skill list ([0891c79](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0891c79248d3a645d638f12f46928a54652b0941))
+* **cli:** update notice from npm for every channel, cached daily ([c3a0014](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/c3a001473336aac14d216cdeec0bedde4df34427))
+
+# [@datalabrotterdam/nova-ai-cli-v1.2.0-alpha.2](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/@datalabrotterdam/nova-ai-cli@1.2.0-alpha.1...@datalabrotterdam/nova-ai-cli@1.2.0-alpha.2) (2026-10-03)
+
+
+### Features
+
+* release the agent separately as @datalabrotterdam/nova-ai-agent ([32ecfc0](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/32ecfc0faa99bd5bb80cb2eaf2363abc050978f0))
+
+# [1.2.0-alpha.1](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/v1.1.0...v1.2.0-alpha.1) (2026-10-03)
+
+
+### Bug Fixes
+
+* **acp:** bounded, cancellable client terminals in the workspace ([81f7099](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/81f70996d9dfc8d78e12282def1582ea859f2784))
+* **acp:** isolate background prompt jobs from live session history ([8328a8b](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/8328a8bfa1f22871ef36ec38247987e6effcd044))
+* **acp:** replay loaded sessions faithfully; page session/list ([d576171](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/d5761710890f7b2f5d1b340cdce7faafcd2e3561))
+* **env:** no shells or Docker probes when a session starts ([dc3a449](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/dc3a4495f394c1a16e48e282efd76b765af09999))
+* **mcp:** connect servers in parallel with timeouts and diagnostics ([db4c62c](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/db4c62cd9c8ec0f197ea1ae1ce76adcf9d397ed5))
+* **models:** offer and default to chat models only ([5d3ade2](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/5d3ade2727110ca7555bfdfa5b174c9e75b151f9))
+* **security:** harden sessions, setup auth, credentials, processes and file access ([7f02a1d](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/7f02a1d203128555c4d00e5ab4dc4786329b6225))
+* **tui:** keep printed lines inside the terminal width ([dd5cd0a](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/dd5cd0a40592af392eca797399ce56c0e672110e))
+* **tui:** redraw cleanly after the terminal width changes ([f0b2ec6](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/f0b2ec6d01b0bd8ebcf087330c8bfd82072aa08d))
+
+
+### Features
+
+* **acp:** agentInfo and env_var authentication in initialize ([b736e11](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/b736e115542b8fef083f9fc75514586327d3ac49))
+* **acp:** namespace Nova extensions under _nova/ ([bf56cb9](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/bf56cb9e093dc90fc43b44008f1ddd86446a8cd0))
+* **acp:** serialized turns, cancel, shutdown and proper error codes ([6688470](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/66884701af129ff2c1e9ad78b9e572d7ec64cc4b))
+* **acp:** the agent owns permissions; clients only answer its questions ([7db651d](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/7db651d8d4883da2c170a831aeaa2952dc4444ac))
+* **acp:** usage, session info, commands and model options as updates ([21d0816](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/21d08160c558ca9431deff8f8ead25e89a93d21c))
+* added alpha stage on TUI ([3415411](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/3415411986ef4aefc2aa94dbb66fc73710fb6a5d))
+* **cli:** proper entry point, -p/--print, login/logout, help and version ([73c8f94](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/73c8f9472099fa7c3cedccdd3c6a315d809e6a00))
+* **core:** allow multiple tool calls per round ([f6a2171](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/f6a217145efac0722fddc49995808a7ad7bb2508))
+* **core:** compact proactively at 80% of the model context window ([96afcbb](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/96afcbb7b68f4686a9b769bb80a73b00eebfe4a4))
+* **core:** native tool calling with learned per-model text fallback ([6d71193](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/6d7119395b39a45026d676813ad3596382e2611a))
+* **core:** share the ~/.nova-ai project layout with the VS Code extension ([aa75dde](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/aa75dde65218fdbd16b9f329bd849cc9ec608a28))
+* **core:** validate tool args centrally before dispatch ([0a88e3e](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0a88e3efb0d7c32611979e408b95e659873ec1e5))
+* expand ACP runtime and terminal workflows ([bfbae15](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/bfbae157c301fbc1b7e88f5e267d25c8da126008))
+* **mcp:** surface tool schemas, respect readOnlyHint, hint cwd args ([2b22be3](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/2b22be327b052788936e4badb010844f7ca3d057))
+* **memory:** shared MEMORY.md index + typed notes, compatible with VS Code ([474c916](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/474c91694f4da58400426f39c290ac6888f4aa19))
+* **modes:** plan mode can read, ask and keep the task list ([e253eaa](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/e253eaa66fd02478d61f34e734a27883068bf357))
+* **policy:** agent-side permission policy with trust-gated rule sources ([234cd3a](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/234cd3adf06423c973c52497e5e31f6868d6b19a))
+* **policy:** rule subjects for the extension's tool names ([5c188b6](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/5c188b610ff6e4ba8a715cc2ee10960736493b86))
+* **tools:** add JSON schema validator for tool args ([24764ef](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/24764ef5100c14404f1923f89cc87c3d64de510d))
+* **tools:** declare args schemas on every built-in tool ([79f6283](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/79f62833144f1a6aba9aaa65a2a19f18eb8793ca))
+* **tools:** whitespace-tolerant edit_file with self-correction hints ([a350e14](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/a350e140e92c8469249d4c6297aad8f8161a217f))
+* **tui:** Ink TUI with inline scrollback replaces pi-tui ([0725bae](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0725bae27790829fd756afbdb5dd20574a1e0f00))
+* **tui:** Shift+Enter inserts a new line where the terminal can report it ([b9c0b70](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/b9c0b7041057e2bdeb1675bbfa33a12fc3a664b9))
+
+# [1.1.0](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/v1.0.1...v1.1.0) (2026-06-23)
+
+
+### Features
+
+* **acp-web:** theme support, favicon, font, and dep bumps ([0576402](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/0576402b6888a2cf6bc93123d733c4163358c63f))
+* **acp:** add MCP server support (stdio/http/sse) ([ba98b0c](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/ba98b0c0b2e2461e8553331cafa1985e7673ee43))
+
+## [1.0.1](https://github.com/Datalab-Rotterdam/nova-ai-cli/compare/v1.0.0...v1.0.1) (2026-06-22)
+
+
+### Bug Fixes
+
+* correct npm scope to [@datalabrotterdam](https://github.com/datalabrotterdam) ([6ab6bf8](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/6ab6bf88506cc1d4b778c1a30b123cd532a0a8de))
+
+# 1.0.0 (2026-06-22)
+
+
+### Features
+
+* add ACP agent, tool calling, and alpha release channel ([15d19a7](https://github.com/Datalab-Rotterdam/nova-ai-cli/commit/15d19a7998b4651ba9ad279fc2607006ea14ed49))

package/README.md

@@ -1,6 +1,6 @@
 <div align="center">
 
-<img src="./assets/logo.png" width="96" height="96" alt="Nova logo" />
+<img src="https://raw.githubusercontent.com/Datalab-Rotterdam/nova-ai-cli/main/assets/logo.png" width="96" height="96" alt="Nova logo" />
 
 # @datalabrotterdam/nova-ai-cli
 
@@ -12,7 +12,7 @@
 [![ACP](https://img.shields.io/badge/ACP-agent-blue?style=flat-square)](https://agentclientprotocol.com)
 [![issues](https://img.shields.io/github/issues/Datalab-Rotterdam/nova-ai-cli?style=flat-square)](https://github.com/Datalab-Rotterdam/nova-ai-cli/issues)
 
-[npm](https://www.npmjs.com/package/@datalabrotterdam/nova-ai-cli) · [Issues](https://github.com/Datalab-Rotterdam/nova-ai-cli/issues) · [ACP reference](./docs/ACP.md) · [Settings and memory](./docs/NOVA_HOME.md)
+[npm](https://www.npmjs.com/package/@datalabrotterdam/nova-ai-cli) · [Issues](https://github.com/Datalab-Rotterdam/nova-ai-cli/issues) · [ACP reference](https://github.com/Datalab-Rotterdam/nova-ai-cli/blob/main/docs/ACP.md) · [Settings and memory](https://github.com/Datalab-Rotterdam/nova-ai-cli/blob/main/docs/NOVA_HOME.md)
 
 </div>
 
@@ -44,6 +44,18 @@ nova-ai                # start the terminal UI in your project
 Or without installing: `npx @datalabrotterdam/nova-ai-cli login`, then
 `npx @datalabrotterdam/nova-ai-cli`.
 
+When a newer version is on npm, `nova-ai` asks before the terminal UI opens:
+Enter installs it (`npm install -g`) and restarts, `n` asks again tomorrow, `s`
+skips that version. Until it is installed, the status line keeps reminding you,
+and `/update` installs it and restarts in the same session. `-p` and
+`--version` print a notice (on stderr, only in a terminal). npm is asked at
+most once a day; an alpha install also follows the `alpha` channel.
+`NOVA_NO_UPDATE_CHECK=1` turns it off (it is off in CI).
+
+nova-ai installs updates itself only when it was installed with
+`npm install -g`; with npx, another package manager or a project dependency it
+shows the command to run instead.
+
 ```
 nova-ai [options]                 Interactive terminal UI
 nova-ai -p [options] [prompt]     Run one request headless (see nova-ai -p --help)
@@ -59,12 +71,18 @@ Interactive options:
 
 ## Terminal UI
 
-The UI renders inline below your shell prompt. Finished messages go to the
-terminal's own scrollback (scroll, search and copy as usual); only the
-streaming answer, running tools, the prompt and the status rows are redrawn.
+The UI runs full screen (the terminal's alternate screen, like `less` or
+`vim`) and gives your shell its screen back on exit. The mouse wheel or
+PgUp/PgDn scroll the transcript, Esc jumps back to the newest output, and
+while you read an answer the prompt that asked for it stays pinned on the top
+row. To select text, hold Shift (Option in some macOS terminals) while dragging.
 
 - **Modes** (Shift+Tab): `agent` does the work; `plan` reads the code, asks
-  questions and builds a task list but changes nothing; `ask` only answers.
+  questions and builds a task list but changes nothing; `ask` only answers;
+  `autopilot` works on until the task is done, picking defaults instead of
+  asking (approvals still ask you).
+  Your own agents (`~/.nova-ai/agents/<name>.agent.md`, the format the VS Code
+  extension uses) are extra modes after these; `/mode` lists them.
 - **Permissions**: before an edit or command you choose once, for this
   session, always (saved as an exact rule) or deny. Ctrl+K switches between
   asking, accepting edits, and bypass (never remembered).
@@ -81,16 +99,19 @@ streaming answer, running tools, the prompt and the status rows are redrawn.
 | Enter / Shift+Enter | Send / new line (Shift+Enter where the terminal supports the kitty keyboard protocol: VS Code, kitty, WezTerm, Ghostty, foot, Alacritty, recent iTerm2; Alt+Enter, Ctrl+J or a trailing `\` work everywhere) |
 | Esc | Cancel the running turn |
 | Ctrl+C twice | Exit; prints `nova-ai --resume <id>` |
-| Shift+Tab | Cycle agent / ask / plan |
+| Shift+Tab | Cycle agent / ask / plan / autopilot and your own agents |
 | Ctrl+R / Ctrl+P / Ctrl+K | Sessions / models / permission mode |
 | Ctrl+O / Ctrl+T / Ctrl+B | Verbose tool output / tool inspector / background jobs |
 | Alt+V | Paste a clipboard image |
 
-Slash commands: `/help`, `/model`, `/mode`, `/permission`, `/session`,
+Slash commands: `/help`, `/model`, `/effort` (thinking models), `/mode`, `/permission`, `/session`,
 `/resume`, `/clear`, `/compact`, `/rewind [n]`, `/queue`, `/steer`, `/usage`,
 `/tools`, `/mcp`, `/skills`, `/shell` and `/agent` (background jobs), `/trust`
-and `/exit`. Details:
-[`src/tui/README.md`](./src/tui/README.md).
+and `/exit`. Your own commands are markdown files in `~/.nova-ai/commands/` or
+the repository's `.nova-ai/commands/` (Claude Code's format, so
+`.claude/commands` works too): the file is the prompt, `$ARGUMENTS` what you
+type after the command, and they show up in the `/` menu. Details:
+[`src/tui/README.md`](https://github.com/Datalab-Rotterdam/nova-ai-cli/blob/main/packages/cli/src/tui/README.md).
 
 ## Headless
 
@@ -131,8 +152,12 @@ always options, client file system and terminals, form questions, plans, usage
 and title updates, MCP servers (stdio, HTTP, SSE), image prompts, and three
 login methods (browser, `NOVA_API_KEY`, or `nova-ai login` in a terminal).
 Nova-specific features (prompt queue, rewind, compaction, context usage,
-background jobs) are `_nova/…` extension methods. Everything is documented in
-[docs/ACP.md](./docs/ACP.md).
+per-session settings, background jobs) are `_nova/…` extension methods. The agent is also published
+on its own as
+[`@datalabrotterdam/nova-ai-agent`](https://www.npmjs.com/package/@datalabrotterdam/nova-ai-agent)
+(command `nova-ai-agent`), without the terminal UI, for integrations that only
+need ACP. Everything is documented in
+[docs/ACP.md](https://github.com/Datalab-Rotterdam/nova-ai-cli/blob/main/docs/ACP.md).
 
 ## Security model
 
@@ -149,6 +174,12 @@ background jobs) are `_nova/…` extension methods. Everything is documented in
   private `~/.nova-ai/projects/<key>/settings.json`, outside the repository.
   Compound commands (`a && b`, pipes) are checked part by part; substitutions
   and nested shells need an exact rule.
+- **Web pages are fetched only with approval.** `fetch_url` asks every time
+  unless a rule allows that URL (a URL can carry data out), and a redirect to
+  another site needs its own approval. `web_search` asks the same way, since
+  the query goes to the search providers (You.com, DuckDuckGo; your own
+  SearXNG server first when `~/.nova-ai/settings.json` has
+  `"webSearch": { "searxngUrl": "https://…" }`).
 - **File access stays in the workspace** (symlinks resolved); commands run in
   their own process group with a timeout, and the whole tree is stopped on
   cancel.
@@ -168,11 +199,29 @@ VS Code extension: settings, per-project trust, sessions and memory.
 - **Instructions**: `NOVA.md` and `AGENTS.md` in the workspace.
 - **Memory**: a `MEMORY.md` index plus notes, globally and per project,
   through the `memory_read` and `memory_write` tools (writes need approval).
-- **Skills**: `SKILL.md` files under `.agents/skills`, `.claude/skills` or
-  `.codex/skills`, in the workspace or your home folder.
+- **Skills**: `SKILL.md` files under `.nova-ai/skills` in the workspace or
+  `~/.nova-ai/skills` for every project (`.agents`, `.claude` and `.codex`
+  skills folders are read too). `/skills` lists them; `/skills off <name>`
+  switches one off in this project (`--global`: everywhere). Only names and
+  short descriptions go into the prompt; Nova loads a skill when it fits.
+  Nova installs its own skills for Word, Excel, PowerPoint and PDF files
+  (`nova-docx`, `nova-xlsx`, `nova-pptx`, `nova-pdf`, from
+  [nova-ai-skills](https://github.com/Datalab-Rotterdam/nova-ai-skills)) in
+  `~/.nova-ai/skills` and keeps them up to date; they need Python 3.
+- **Hooks**: Claude Code's `hooks` format in the same settings files (a
+  repository's own only once you trust the workspace): `PreToolUse`,
+  `PostToolUse`, `UserPromptSubmit`, `SessionStart` and `Stop`, with Claude
+  Code's tool names as matchers, so hooks from `.claude/settings.json` work
+  when copied over.
 - **MCP servers**: `.mcp.json` or `mcpServers` in `.nova-ai/settings.json`.
+  HTTP servers that use OAuth show "needs sign-in" in `/mcp`; `/mcp login
+  <server>` opens the sign-in page in your browser (tokens are kept in
+  `~/.nova-ai/mcp-auth`, refreshed automatically), `/mcp logout <server>`
+  forgets them. A server that wants a client registered by hand takes
+  `"oauth": { "clientId", "clientSecret", "scope", "callbackPort" }` in
+  `.mcp.json`.
 
-The complete layout and rule syntax: [docs/NOVA_HOME.md](./docs/NOVA_HOME.md).
+The complete layout and rule syntax: [docs/NOVA_HOME.md](https://github.com/Datalab-Rotterdam/nova-ai-cli/blob/main/docs/NOVA_HOME.md).
 
 ## Models
 
@@ -183,6 +232,12 @@ to a text protocol for models that don't support it. When the context window
 fills up, older messages are summarized automatically (`/compact` does it by
 hand).
 
+Thinking models are marked ◆ in the model list. For those with levels the
+status line shows the current one (`· thinking medium`) and `/effort` opens a
+slider (←/→, Enter), or sets one directly (`/effort high`, `/effort off`). The
+choice is remembered like the model; a model without that level uses its own
+default.
+
 | Environment | |
 |---|---|
 | `NOVA_API_KEY`, `NOVA_MODEL` | Use this key / model instead of the stored ones |
@@ -191,26 +246,13 @@ hand).
 | `NOVA_TOOL_PROTOCOL` | Force `native` or `text` tool calling |
 | `NOVA_NES_MODEL` | Separate model for next-edit suggestions (ACP) |
 | `NOVA_KITTY_KEYBOARD` | `1`/`0`: force the kitty keyboard protocol on or off |
+| `NOVA_NO_UPDATE_CHECK` | Don't ask npm for a newer version (also `NO_UPDATE_NOTIFIER`, or `CI`) |
 
 ## Development
 
-```sh
-npm ci
-npm test          # type check, unit tests (node:test) and the real-terminal (PTY) scenario
-npm run build     # the login page and the CLI bundle in dist/
-npm run dev       # run from source with tsx
-```
-
-Tests never touch your `~/.nova-ai` or the real Nova API: they run with a
-throwaway home folder and point the client at a local port. The ACP
-conformance test starts the real `--acp` process against a fake gateway. CI
-runs the suite on Linux, macOS and Windows with Node 22 and 24 (the PTY
-scenario on Linux and macOS). Releases are cut by `semantic-release` from
-`main` and `alpha`.
-
-Planned: OIDC login against the Nova platform instead of a pasted API key,
-and Remote Control (driving a running session from the Nova web UI or mobile
-app). The standalone browser UI (`--web`) is experimental.
+This package lives in the [nova-ai-cli repository](https://github.com/Datalab-Rotterdam/nova-ai-cli)
+next to the agent package it depends on; see the repository README for
+building and testing.
 
 ## License
 

package/dist/browser-setup-7SWHUQEL.js

@@ -0,0 +1,57 @@
+// src/browser-setup.ts
+import { execFile, spawn } from "child_process";
+import { existsSync } from "fs";
+import { createRequire } from "module";
+import { dirname, join } from "path";
+var runInstaller = (node, args) => new Promise((resolve, reject) => {
+  execFile(node, args, { encoding: "utf8", timeout: 6e4, maxBuffer: 1024 * 1024 }, (error, stdout, stderr) => {
+    if (error) reject(new Error(`${error.message}${stderr ? `
+${stderr}` : ""}`));
+    else resolve(stdout);
+  });
+});
+function browserSetupDisabled(env = process.env) {
+  return env.NOVA_AI_BROWSER_AUTO_SETUP === "0" || Boolean(env.CI);
+}
+function bundledInstaller(from = import.meta.url) {
+  try {
+    const manifest = createRequire(from).resolve("@datalabrotterdam/nova-ai-browser-host/package.json");
+    const installer = join(dirname(manifest), "dist", "cli.js");
+    return existsSync(installer) ? installer : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function parseSetupOutput(output) {
+  const line = output.trim().split("\n").reverse().find((entry) => entry.trim().startsWith("{"));
+  if (!line) throw new Error("The browser host installer printed no result.");
+  return JSON.parse(line);
+}
+var INSTALLER_ARGS = ["install", "--auto", "--json"];
+async function setUpBrowser(run = runInstaller, installer = bundledInstaller()) {
+  if (!installer) throw new Error("The bundled Nova AI Browser host is missing from this installation.");
+  return parseSetupOutput(await run(process.execPath, [installer, ...INSTALLER_ARGS]));
+}
+function setUpBrowserInBackground(installer = bundledInstaller()) {
+  if (browserSetupDisabled() || !installer) return;
+  try {
+    spawn(process.execPath, [installer, ...INSTALLER_ARGS], { detached: true, stdio: "ignore" }).unref();
+  } catch {
+  }
+}
+function describeBrowserSetup(result) {
+  if (!result.browsers.length) {
+    return "Browser: no Chromium-based browser (Chrome, Edge, Brave, \u2026) found for this user.";
+  }
+  const restart = result.newBrowsers.length ? ` Restart ${result.newBrowsers.join(", ")} once so it picks this up.` : "";
+  return `Browser: Nova can use ${result.browsers.join(", ")} through the Nova AI browser extension.${restart}`;
+}
+export {
+  INSTALLER_ARGS,
+  browserSetupDisabled,
+  bundledInstaller,
+  describeBrowserSetup,
+  parseSetupOutput,
+  setUpBrowser,
+  setUpBrowserInBackground
+};

package/dist/chunk-FMHWW3E6.js

@@ -0,0 +1,11 @@
+// src/version.ts
+import { readPackageVersion } from "@datalabrotterdam/nova-ai-agent/core/version.js";
+var CLI_PACKAGE_NAME = "@datalabrotterdam/nova-ai-cli";
+function cliVersion() {
+  return readPackageVersion(CLI_PACKAGE_NAME, import.meta.url);
+}
+
+export {
+  CLI_PACKAGE_NAME,
+  cliVersion
+};