Nook sees a lot, so it is built to keep it. The assistant runs on your own Mac by default, what you mark stays on this Mac, and every message, command or pull request waits for your click.
A model that runs on your computer, sized to your Mac's memory. Nothing leaves it, and a question costs nothing.
Add a provider's key in Settings › Brain and switch per question with the model chip. Its answers are often stronger; the choice is yours.
Mark your memory, your screen, your mail or any other source as Only on this Mac. With a cloud model active, those sources are left out completely: their context, their tools and their searches.
A reply to a friend, an event in your calendar, a command from a coding agent or a pull request: it all goes through the same approval card, shown in full, and lands in a local audit log.
rm -rf node_modules && npm ci && npm test
Nook works in the background so answers are ready at once. One policy slows that down on battery and pauses it when the battery runs low, your Mac is hot or busy, or you are away. What you ask for always runs at full speed.
Nook is MIT licensed and built in the open. Found a security issue? Report it privately through GitHub, and you'll hear back within seven days.
Not by default. The assistant runs on your Mac and reads your screen there. If you switch to a cloud model, you choose who reads the screen: that model, nobody, or a model on your Mac. Mark the screen as Only on this Mac and a cloud model never sees it.
No. Nook works out of the box with a model on your Mac. Cloud keys are optional and stored in your Mac's Keychain.
Read‑only work runs on its own. Anything else waits for your Allow, unless you gave a session "Allow everything". Dangerous commands are refused either way, and every decision is written to the audit log.
On your Mac: memories, chats with Nook and the audit log live in a local database you can inspect and delete in Settings. Keys and tokens are kept in the Keychain.
That kind of prompt injection is exactly why every action needs your yes. Reports about it are especially welcome through the security policy.