fix: make auto update notify by default

Author: stainlu

README.md

@@ -159,15 +159,15 @@ Pure Node.js builtins. No bloat.
 
 ## Updates
 
-Most commands check for new nit releases and install exact npm versions automatically. Configure that behavior per process:
+Most commands check for new nit releases and notify by default. Configure that behavior per process:
 
 ```bash
-NIT_AUTO_UPDATE=install nit status   # default
-NIT_AUTO_UPDATE=notify nit status    # report only
+NIT_AUTO_UPDATE=notify nit status    # default, report only
+NIT_AUTO_UPDATE=install nit status   # install exact npm version and re-run
 NIT_AUTO_UPDATE=off nit status       # skip checks
 ```
 
-`NIT_NO_AUTO_UPDATE=1` still disables automatic updates. Use `nit update --check` or `nit update --install` when you want to handle it explicitly.
+`NIT_NO_AUTO_UPDATE=1` still disables update checks. Use `nit update --check` or `nit update --install` when you want to handle it explicitly.
 
 ## How It Works
 

SKILL.md

@@ -2,7 +2,7 @@
 name: nit
 description: Git for agent identity — one identity, any apps
 metadata:
-  version: 0.6.28
+  version: 0.6.29
 ---
 
 # nit — Git for Agent Identity

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@newtype-ai/nit",
-  "version": "0.6.28",
+  "version": "0.6.29",
   "description": "Version control for agent cards",
   "type": "module",
   "bin": {

package.json

@@ -101,7 +101,7 @@ export function resolveAutoUpdateMode(env: EnvLike = process.env): { mode: Updat
 
   const configured = env.NIT_AUTO_UPDATE;
   if (!configured) {
-    return { mode: 'install' };
+    return { mode: 'notify' };
   }
 
   const mode = parseUpdateMode(configured);
@@ -200,12 +200,12 @@ export function installNitVersion(latest: string, options: InstallUpdateOptions
 }
 
 /**
- * Auto-update nit if a newer version is available on npm.
+ * Check for nit updates and optionally install them.
  * Intended for CLI use only — never call from the library API.
  *
- * On success, re-executes the current command with the updated binary
- * and exits. On failure, warns and returns (caller continues with
- * current version).
+ * Default mode is notify. In install mode, a successful update re-executes the
+ * current command with the updated binary and exits. On failure, warns and
+ * returns so the caller continues with the current version.
  */
 export async function autoUpdate(options: AutoUpdateOptions = {}): Promise<void> {
   const env = options.env ?? process.env;

src/update-check.ts

@@ -61,6 +61,8 @@ async function fingerprintApi() {
 test('auto update policy supports off notify and install modes', async () => {
   const api = await updateApi();
 
+  assert.equal(api.resolveAutoUpdateMode({}).mode, 'notify');
+
   let checked = false;
   await api.autoUpdate({
     env: { NIT_AUTO_UPDATE: 'off' },
@@ -101,6 +103,24 @@ test('auto update policy supports off notify and install modes', async () => {
   assert.match(installStderr, /updating 0\.6\.15 -> 9\.9\.9/);
 });
 
+test('auto update default notifies instead of installing', async () => {
+  const api = await updateApi();
+
+  const calls = [];
+  let stderr = '';
+  await api.autoUpdate({
+    env: {},
+    check: async () => ({ current: '0.6.15', latest: '9.9.9' }),
+    execFile: (file, args, options) => {
+      calls.push({ file, args, options });
+    },
+    stderr: { write: (message) => { stderr += message; } },
+  });
+
+  assert.equal(calls.length, 0);
+  assert.match(stderr, /update available 0\.6\.15 -> 9\.9\.9/);
+});
+
 test('auto update keeps legacy opt out and rejects invalid policy', async () => {
   const api = await updateApi();