nebula-ai 0.0.21 → 0.0.22-dev.20260601004945.fe57a77

package/README.md

@@ -50,19 +50,20 @@ The TUI gives you a full dashboard with agents, channels, and settings — all n
 
 ### Navigation
 
-- **Ctrl+K command palette** — jump to any agent, channel, or settings page instantly. Start typing to filter, or create channels and send messages directly from the palette.
 - **Tab / Shift+Tab** — cycle between Agents, Channels, and Settings sections on the home screen.
 - **@ / #** — jump directly to the Agents or Channels section.
+- **n** — create a new channel from the home screen. **d** — start a new DM with an agent.
 - **Vim-style motion** — `j`/`k` up/down, `h`/`Esc` back, `l`/`Enter` open. Works everywhere lists are rendered.
 - **Tab bar** — `h`/`l` switch between open tabs, `x` closes the current tab.
-- **Status bar** — always-on mode badge (`NAV` / `INSERT` / `HITL` / `FIND`), breadcrumb, contextual key hints, and a live connection indicator.
-- **q** from any navigation-mode screen exits cleanly.
+- **Status bar** — always-on mode badge (`NAV` / `INSERT` / `HITL`), breadcrumb, contextual key hints, and a live connection indicator.
+- **q** from any navigation-mode screen exits cleanly. Press **Ctrl+C** twice to quit from anywhere.
+- **?** — open the full keyboard shortcut reference.
 
 ### Chat
 
 - **Markdown rendering** — agent responses display bold, italic, inline code, headings, and clickable links.
 - **Per-channel model selection** — press `m` in any DM or channel to open the model picker. Verified and experimental model lists are surfaced separately; a global default model can be set in Settings.
-- **File attachments** — drag and drop files from your file manager into the chat input. Files appear as chips above the message area and are sent with your next message. When the local device daemon is running, files are delivered through the sandbox instead of being uploaded to the cloud.
+- **File attachments** — drag and drop files from your file manager into the chat input. Files appear as chips above the message area and are sent with your next message. When the local device daemon is running with computer control enabled, files are read directly from your host instead of being uploaded to the cloud.
 - **Activity log** — tool calls and execution details are surfaced inline in chat, with `Enter` on a completed turn opening the full activity log.
 - **Entity navigation** — press `Tab` on a selected message to cycle through referenced agents, triggers, files, and skills; `Enter` opens the detail view.
 - **Message history** — press `↑` from an empty input (or `k` in navigation mode) to scroll back through previous turns.
@@ -87,28 +88,29 @@ npx nebula-ai user config set theme tokyo-night
 
 ### Settings
 
-Reachable from the home screen (`Settings` row) or the command palette:
+Reachable from the home screen's `Settings` row:
 
 - **Profile & Account** — username, email, display name.
 - **Default Model** — global LLM fallback for new chats.
 - **Local Device** — daemon status, start/stop/restart controls, device ID.
-- **Mounted Folders** — add/remove host folders that are mounted into the sandbox.
+- **Folders** — add/remove host folders the daemon is allowed to read and write under.
 - **Files** — browse and manage files stored on the platform.
 - **Configuration** — theme, color, verbose, auto-focus, session restore, telemetry.
 
-## Local device & sandbox
+## Local device
 
-For long-running tasks, agents can execute code on your own machine inside a managed microVM sandbox (powered by [Boxlite](https://boxlite.ai)). The sandbox is isolated from your host but can optionally mount folders you choose as read-write or read-only.
+For long-running tasks, agents can execute code on your own machine directly — this is opt-in via the **computer control** prompt during onboarding (`exec_mode = host`). Skip the prompt or pick "No" and the daemon refuses every exec / file / service RPC with `exec_host_disabled` until you opt in from Settings.
 
 ```sh
 npx nebula-ai install              # install and start the background daemon
 npx nebula-ai local-device status  # check daemon state
 npx nebula-ai local-device folders add ~/code/my-project
-npx nebula-ai shell                # open an interactive shell inside the sandbox
+npx nebula-ai local-device exec-mode set host   # opt into computer control
+npx nebula-ai local-device exec-mode set none   # turn it off again
 npx nebula-ai uninstall            # remove the daemon (use --keep-data to keep config/logs)
 ```
 
-The daemon is installed as a native OS service — **launchd** on macOS, **systemd --user** on Linux, **Task Scheduler** on Windows — and runs under your user account so there's no root prompt. The sandbox image is pre-pulled during install so the first real RPC doesn't block on a download.
+The daemon is installed as a native OS service — **launchd** on macOS, **systemd --user** on Linux, **Task Scheduler** on Windows — and runs under your user account so there's no root prompt. Commands run inside the folders you register; the daemon refuses any cwd outside that allowlist.
 
 ## CLI commands
 
@@ -123,10 +125,9 @@ The same surface is available from the command line:
   - `user variables` — manage global or agent-scoped variables and secrets.
   - `user billing` — check balance, view transaction history, and configure auto top-up.
   - `user files` — upload, download, list, share, and manage files and folders.
-  - `user devices` — manage your cloud sandbox device (info, start, stop, rename, visibility, file browse/search, and long-running services: create, start, stop, logs).
-- `local-device` — manage the on-host daemon (status, logs, start, stop, restart, folders add/remove).
+  - `user devices` — manage your cloud devices (info, start, stop, rename, visibility, file browse/search, and long-running services: create, start, stop, logs).
+- `local-device` — manage the on-host daemon (status, logs, start, stop, restart, folders add/remove, exec-mode get/set).
 - `install` / `uninstall` — set up or tear down the on-host daemon as a background service.
-- `shell` — open an interactive shell inside the local sandbox VM (`--shell <path>` to pick a different binary).
 - `status` — current CLI, auth, daemon, device, and folder state.
 - `login` / `logout` — authenticate or clear stored credentials.
 
@@ -146,7 +147,7 @@ No events are sent when telemetry is disabled.
 
 | Path / variable | Purpose |
 |---|---|
-| `~/.nebula/` | Stored auth session, CLI settings, sandbox data, daemon logs. |
+| `~/.nebula/` | Stored auth session, CLI settings, daemon logs. |
 | `~/.cache/nebula-ai/` | Cached prebuilt binary (per-version, per-platform). |
 | `NEBULA_HOME` | Override the `~/.nebula` home directory. |
 | `NEBULA_AI_CACHE_DIR` | Override the binary cache location. |
@@ -162,5 +163,5 @@ No events are sent when telemetry is disabled.
 This CLI is developed in the [`nebula-desktop`](https://github.com/agent-labs-dev/nebula-desktop) Bun-workspaces umbrella alongside the desktop app and shared packages. Contributor docs:
 
 - [`AGENTS.md`](./AGENTS.md) — CLI-specific build, dev, and architecture conventions.
-- [`docs/`](./docs/) — working notes (local-device backend contracts, RPC port mappings, sandbox image directives).
+- [`docs/`](./docs/) — working notes (local-device backend contracts, RPC port mappings).
 - The [workspace README](../../README.md) and [root `AGENTS.md`](../../AGENTS.md) cover umbrella-level conventions (gates, releases, packages).

package/bin/nebula-ai.js

@@ -61,7 +61,7 @@ MCowBQYDK2VwAyEAyAvta5v665Vd82jfFmuCEw3WpneUQboj936gYHQE4/0=
 // the channel-appropriate base URL (dev vs prod). The `__NEBULA_AI_…__`
 // sentinel lets us keep the checked-in source runnable for local tests
 // without pointing at any real host.
-const STAMPED_DOWNLOAD_BASE_URL = "https://app-assets.nebula.gg/cli/stable";
+const STAMPED_DOWNLOAD_BASE_URL = "https://app-assets.nebula-dev.ai/cli/dev";
 const DOWNLOAD_BASE_URL = process.env["NEBULA_AI_DOWNLOAD_BASE"] ?? STAMPED_DOWNLOAD_BASE_URL;
 const SUPPORTED_PLATFORMS = new Set([
     "darwin-arm64",
@@ -149,7 +149,7 @@ function getCacheDir(version) {
 /**
  * Remove cached binaries for versions other than the current one.
  * Only touches directories whose names are `v<semver>` — leaves
- * non-version entries (e.g. `boxlite/`, `update-check.json`) untouched.
+ * non-version entries (e.g. `update-check.json`) untouched.
  * Best-effort: individual removal failures are silently ignored so one
  * stuck directory doesn't prevent the rest from being cleaned up.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nebula-ai",
-  "version": "0.0.21",
+  "version": "0.0.22-dev.20260601004945.fe57a77",
   "description": "CLI/TUI for the nebula.gg AI task orchestration platform",
   "type": "module",
   "bin": {