Nova
API not deployed yet · preview mode — / $5.00 this month
Joey

Where should we start?

Idle · listening for “Ok Computer”

Website preview — the API at api.nova-us.app isn’t deployed yet, so chat answers here are local samples. Sign in is disabled until deployment.

Gemini 3.8 Flash · speech stays on this device
Nova
Evening, boss — this is the new look, running as a preview before the cloud exists. In the real build, Gemini will be primary, your PC the fallback when it’s on, and the morning sweep will run around 5 AM. Below is an example of the approval card you’ll get for anything ask-first.
action: gmail_search
args: { "window": "since 5:00 AM", "unread": true }
result: 14 messages scanned · 3 flagged for you · 0 sent, 0 archived
tier: Auto — read-only, inside its token cap

Agenda

Your day in one place — shift, brief, spending, and what Nova has been up to.

Shift: Gerresheimer, Berlin OH — Department & Systems Support. Next start Monday 7:00 AM.

Heads-up: Rebecca’s note — your Developing Effective Teams one-year clock starts at your first Challenge, not enrollment. Nothing is burning.

Today at a glance

Morning brief · Shared limit · Jobs

Today’s timeline

Agent activity
Loading recent activity…

Jump back in

Files & apps · 3

Agent jobs

Nova runs in the background — but on a short leash. Every job has a permission tier and a token cap. Hit the cap and the job stops and reports; it never quietly keeps spending.

The tiers: AUTO read-only, runs alone  ·  ASK-FIRST prepares work, waits for your tap  ·  NEVER-AUTO only when you say so, in the moment. A job can never promote itself — tap a job’s tier tag to switch it between AUTO and ASK-FIRST.

Morning email read

Scans the inbox around 5 AM, surfaces what needs you. Never sends, replies, or archives anything important on its own.

Next: tomorrow 5:12 AMLast run: 14 messages, 3 flaggedCap: 6,000 tokens/run · used 3,910

Calendar & deadline check

Today’s shift at Gerresheimer, upcoming deadlines, and anything you’d kick yourself for missing.

Next: 6:00 AM dailyCap: 2,000 tokens/run

Device watch

Phone battery, clock and Home Mini online, PC awake or asleep — the quiet stuff that breaks mornings when it’s ignored.

Runs: every 30 minCap: 500 tokens/run · Flash-Lite
More jobs Weather · Spending · Self-update ▾

Weather drive-home heads-up

Only speaks up when weather actually changes the plan — rain, cold snap, bad roads home from Berlin.

Runs: before your drive homeCap: 1,000 tokens/run

Spending & account watch

Flags unusual movement against the shared limit with Zach. It can point at money — it can never move it.

Off — turn on when you’re readyCap: 3,000 tokens/run

Self-update NEVER-AUTO

Your tap only

Checking for a new Nova version is automatic. Applying one never is — it always waits for you, exactly like today.

Current: v0.3.41No schedule · no cap needed

Scheduled tasks

Recurring runs that actually execute: Cloud Scheduler wakes the API, Nova gathers live data from the home daemon, composes the result, and posts it into your chat. A task only runs once its Scheduler job exists — each task below shows the exact command to create it.

Loading scheduled tasks…

New scheduled task

Templates only use capabilities Nova really has — email reads, lights, and the daily brief. Nothing here sends mail, moves money, or changes a device unattended.

Daily ceiling: all jobs together stop at the daily token cap, and the $5/month Google Cloud budget alert is the backstop behind that. On local fallback, only AUTO read-only jobs run — ask-first work queues up for you instead.

Devices

Every client signs in — except the clock, which carries its own narrow, revocable token.

📱 Phone — companion app

Signed in · Google SSO

Speech-to-text and speech happen on the phone itself. Tokens live in the Android Keystore, never in plain text.

Last seen: nowScope: full, as you

🕐 Lenovo Smart Clock 2 — living room

Device token

Dedicated APK, logic on-device, no web interface. Its token covers voice and timers only — no files, no email sends, no purchases. If the APK ever leaked, the worst case is someone setting a timer.

Token: clock-lenovo-01 · rotates every 90 daysLast seen: now
More devices Home Mini · Main PC ▾

🔊 Google Home Mini

Via local daemon

Not a signed-in client — it speaks through the daemon’s session and can’t act on its own.

Quiet hours: 10 PM – 7 AMLast seen: now

🖥 Main PC — fallback brain

Asleep

GTX 1060 6GB running qwen3:4b on Ollama. It only becomes the brain if Gemini goes down and this PC is on — it no longer has to run 24/7.

Heartbeat: none in 90s = treated as offLast seen: earlier today

Set up Nova

Start from a shape that fits how you actually use her. You can change any of this later.

More shapes Media · Work · Blank ▾
Parity rule: whatever you pick here applies to both interfaces — the new website and the current web UI stay equals until you’ve lived with the new look and choose a main one.

Your domain, hosted on Google

You asked how this becomes “type nova-us.app at work and sign in.” Here’s the exact shape — one Google Cloud project, everything behind login, about $5 a month with an alert on it.

1

Cloudflare — the domain

nova-us.app — registered 2026-11-14 at Cloudflare. Cloudflare hosts the DNS; the records point the name at Google.

~$10–15per year
2

Firebase Hosting — the website

This UI, served from Google with HTTPS built in and your domain attached. Push an update, it deploys itself. No server to babysit.

$0–1per month
3

Firebase Authentication — sign-in

Google SSO as the front door, username/password as the backup. Two accounts are allow-listed: Joey (owner) and Zach (member). Everyone else gets “not authorised” — there’s no sign-up page.

Freeat your scale
Steps 4–6 — doorway, brain & hands ▾
4

Cloud Run — the doorway

The only public entrance to the brain. It checks your sign-in, validates every request against the tool list, and enforces the token and rate caps.

Centsper month
5

Gemini — the brain

Gemini 3.8 Flash does the real thinking and tool-calling; Flash-Lite runs the cheap gatekeeper that screens emails and web pages for planted instructions before the main model ever sees them.

~$1–5per month
6

Pub/Sub queue → your PC — hands, outbound only

Actions travel as signed JSON (HMAC + 30-second timestamp, no replays) to the daemon on the HomeLab Linux server that polls out — nothing on your network listens to the internet. It runs only whitelisted actions, as an unprivileged user, and checks the kill switch before every single one.

Freeat your scale
If Google Cloud goes down: clients notice within about a minute (3 failed checks), and if your main PC is on and heartbeating, Nova flips to the local Ollama brain with a “Fallback” badge up top. When Gemini is healthy again for ~3 minutes, she flips back and tells you once. PC off + Google down = offline mode: timers, alarms, and lights still work, messages queue instead of pretending to send.
Status 2026-11-14: the domain is registered and Google’s billing account is in good standing (the Nov 7 block was cleared the same day the $30 prepayment landed). Gemini is the brain now — the old cloud account was denied, so the website moved to Google. This website package is built and verified locally — deployment (Firebase Hosting + Cloud Run + Firebase Auth) happens after the daemon goes live with a Gemini key on the Linux box. The $5 budget alert is set on day one, before the first real call.

Settings & security

The controls that keep a helpful agent from becoming a hijackable one.

BrainGemini is primary. “Local only” pins Nova to your PC; “Cloud only” disables fallback.
Kill switchOne tap drops Nova to read-only: chat works, nothing changes. It’s checked outside the AI’s control, so a compromised brain can’t switch it back.
Sign-inGoogle SSO preferred, password as fallback. Sessions last 30 days; sign out everywhere also revokes the clock token.
What Nova remembersYour facts and preferences — view, edit, delete, or export them any time. Memory stays single-user: yours.
Audit log Every action, allowed or not ▾
Health probe OK — GeminiOK
gmail_search ran (Auto tier, read-only)ALLOWED
Gatekeeper flagged an instruction hidden in a forwarded email — stripped before the model saw itBLOCKED
Email send held for approval (ask-first)WAITING
Signed in — Google SSO, this phoneOK

Library

Your files and your chats, in one place.

Images

Describe an image and Nova draws it with Nano Banana — it’s saved to your Library automatically.

Files & apps

3

Chat history

Chat history loads from the API when you sign in. In preview mode you’ll see the sample chats in the sidebar instead.

Saved chats

Tap “Save” on any chat above to keep a copy here as a file you can download later.

Daily brief

Your morning, before you’ve had coffee — built from live data: unread email, recent chats, and tasks due today.

Loading today's brief…

The brief runs automatically around 5 AM when its scheduled task is set up. Asking now just runs it early — Nova reports what she actually finds; a section she couldn’t reach is left out and marked, never invented. No calendar, weather, or spending in here yet — those sources aren’t connected.

Personal Intelligence

What Nova remembers about you — and what you’ve told her to keep in mind. Memory is yours alone: your memories never mix with Zach’s.

Memory

Memories load from the API when you sign in.

Memory summary

Instructions for Nova

Standing instructionsSaved for you alone and added to Nova’s instructions on every chat — no more sending “Remember: …” through chat. Leave it blank to clear them.

Instructions load from the API when you sign in.

Connected apps

States are verified live — “Not verified” means Nova hasn’t checked yet, not that something is down.

Skills

What Nova can actually do right now — 21 of 75 whitelisted actions are live. Everything else is a stub waiting on its service, so it isn’t listed as a skill.

⌂ Smart home

Lights and switches through Home Assistant. Plain on/off/dim is approval-free; locks, alarms, and covers always ask first.

home_assistant

✉ Email

Search and read your Gmail. Read-only — Nova can’t send mail from here.

gmail_searchgmail_read

🎵 Music — Spotify

Playback and library on your Spotify account. Playback needs Spotify Premium.

spotify_playspotify_play_urispotify_pausespotify_resumespotify_nextspotify_previousspotify_volumespotify_shufflespotify_repeatspotify_now_playingspotify_queuespotify_add_to_queuespotify_likespotify_searchspotify_devices

✦ Utilities

Maths and the current time, answered on the spot — no service needed.

calculatecurrent_time

📄 Files

Write a file on the home daemon. Always asks first, every single time.

write_file
Not live yet: browser automation, calendar, GitHub, maps, Plex, Roku, weather, file reading, and scheduled tasks — 54 actions that exist in the whitelist but have no connected service. They’ll show up here when their service lands. Anything that changes something either asks first or is blocked outright by the kill switch.

Browser

How this browser talks to Nova — mic permission, transcription, and voice.

Microphone permissionChecking…
TranscriptionYour voice is recorded on this device with MediaRecorder (Opus in WebM when the browser supports it) and transcribed server-side by Gemini via POST /transcribe. Audio is never stored. If Gemini is down or unconfigured, the mic reports that instead of guessing.
VoiceWake word “Ok Computer” for now. Speech-to-text stays on the client. Spoken replies come from the server (POST /tts): Auto uses ElevenLabs when it's set up, Gemini otherwise; pick one to pin it. Chat stays text-first unless the speaker toggle in the composer is on; Live speaks replies aloud unless muted.