@notis_ai/cli 0.2.0-beta.159.1 → 0.2.0-beta.160.1

package/dist/agent-hooks/notis-agent-hook.mjs

@@ -4452,13 +4452,13 @@ async function createLoopbackReceiver({
   let pendingResponse = null;
   const sockets = /* @__PURE__ */ new Set();
   let responseFlushed = Promise.resolve();
-  const result = new Promise((resolve8, reject) => {
-    resolveCode = resolve8;
+  const result = new Promise((resolve9, reject) => {
+    resolveCode = resolve9;
     rejectCode = reject;
   });
   const endResponse = (response, body) => {
-    responseFlushed = new Promise((resolve8) => {
-      response.end(body, resolve8);
+    responseFlushed = new Promise((resolve9) => {
+      response.end(body, resolve9);
     });
   };
   const server = createServer3((request, response) => {
@@ -4507,11 +4507,11 @@ async function createLoopbackReceiver({
     sockets.add(socket);
     socket.on("close", () => sockets.delete(socket));
   });
-  await new Promise((resolve8, reject) => {
+  await new Promise((resolve9, reject) => {
     server.once("error", reject);
     server.listen(0, "127.0.0.1", () => {
       server.off("error", reject);
-      resolve8();
+      resolve9();
     });
   });
   const address = server.address();
@@ -4535,14 +4535,14 @@ async function createLoopbackReceiver({
     }
     await Promise.race([
       responseFlushed,
-      new Promise((resolve8) => {
-        setTimeout(resolve8, RESPONSE_FLUSH_GRACE_MS).unref?.();
+      new Promise((resolve9) => {
+        setTimeout(resolve9, RESPONSE_FLUSH_GRACE_MS).unref?.();
       })
     ]);
     for (const socket of sockets) socket.destroy();
     sockets.clear();
     if (!server.listening) return;
-    await new Promise((resolve8) => server.close(resolve8));
+    await new Promise((resolve9) => server.close(resolve9));
   };
   return {
     port,
@@ -4842,7 +4842,7 @@ async function acquireListenerStartLock(runtime) {
           "Timed out waiting for another CLI process to start browser authorization."
         );
       }
-      await new Promise((resolve8) => setTimeout(resolve8, 50));
+      await new Promise((resolve9) => setTimeout(resolve9, 50));
     }
   }
 }
@@ -4889,7 +4889,7 @@ async function acquireListenerGlobalLock({
           "Timed out waiting for another CLI process to finish OAuth account changes."
         );
       }
-      await new Promise((resolve8) => setTimeout(resolve8, 50));
+      await new Promise((resolve9) => setTimeout(resolve9, 50));
     }
   }
 }
@@ -5066,7 +5066,7 @@ async function startDetachedLoopbackListener(runtime, {
     }
     return null;
   }
-  const port = await new Promise((resolve8) => {
+  const port = await new Promise((resolve9) => {
     let settled = false;
     const finish = (value) => {
       if (settled) return;
@@ -5075,7 +5075,7 @@ async function startDetachedLoopbackListener(runtime, {
       child.off("message", onMessage);
       child.off("error", onFailure);
       child.off("exit", onFailure);
-      resolve8(value);
+      resolve9(value);
     };
     const onMessage = (message) => finish(Number(message?.port) || null);
     const onFailure = () => finish(null);
@@ -5902,7 +5902,7 @@ async function acquireRefreshLock(runtime, waitMs = 6e4) {
       if (Date.now() >= deadline) {
         throw oauthError("oauth_refresh_lock_timeout", "Timed out waiting for another CLI process to refresh OAuth.");
       }
-      await new Promise((resolve8) => setTimeout(resolve8, 100));
+      await new Promise((resolve9) => setTimeout(resolve9, 100));
     }
   }
 }
@@ -7339,7 +7339,7 @@ function applyLegacyFirstRunState(localSkills, scopedState, legacyState) {
     skills: migratedSkills
   };
 }
-async function writePulledSkillsToScopedMirror(pullResponse, localSkills, previousState, syncPaths, deps, failures = []) {
+async function writePulledSkillsToScopedMirror(pullResponse, localSkills, previousState, syncPaths, deps, failures = [], writtenSkillNames = /* @__PURE__ */ new Set()) {
   const localSkillMap = toSkillMap(localSkills);
   const warnSkillSync = (message, error) => {
     console.warn(`[Notis] ${message}`, error);
@@ -7355,6 +7355,7 @@ async function writePulledSkillsToScopedMirror(pullResponse, localSkills, previo
       onWarning: warnSkillSync
     })) {
       downloaded += 1;
+      writtenSkillNames.add(cloudSkill.name);
     } else {
       failures.push({ name: cloudSkill.name, error: "Skill content could not be downloaded or written; sync will retry" });
     }
@@ -7379,19 +7380,21 @@ async function materializeCloudSkillsForLocalShell(serverUrl, jwt, dependencies
       "Cannot materialize skills without a valid authenticated desktop session."
     );
   }
-  const syncPaths = getSkillSyncPathsForUser(authUserId);
+  const syncPaths = getSkillSyncPathsForUser(options.canonicalUserId?.trim() || authUserId);
   const pullResponse = await deps.pullSkills(serverUrl, jwt);
   assertSkillsPullAuthorized(pullResponse);
   const previousState = await deps.readSyncState(syncPaths);
   const localSkills = await deps.scanLocalSkills(syncPaths);
   const failedDownloads = [];
+  const writtenSkillNames = /* @__PURE__ */ new Set();
   const downloaded = await writePulledSkillsToScopedMirror(
     pullResponse,
     localSkills,
     previousState,
     syncPaths,
     deps,
-    failedDownloads
+    failedDownloads,
+    writtenSkillNames
   );
   const finalLocalSkills = await deps.scanLocalSkills(syncPaths);
   const lastSyncedAt = pullResponse.last_synced_at || (/* @__PURE__ */ new Date()).toISOString();
@@ -7418,11 +7421,27 @@ async function materializeCloudSkillsForLocalShell(serverUrl, jwt, dependencies
     }
   }
   for (const failure of failedDownloads) delete verifiedLinks[failure.name];
-  await deps.writeSyncState(
-    buildSyncState(pullResponse, finalLocalSkills, lastSyncedAt, verifiedLinks, new Set(failedDownloads.map((item) => item.name))),
-    syncPaths
+  const materializedState = buildSyncState(
+    pullResponse,
+    finalLocalSkills,
+    lastSyncedAt,
+    verifiedLinks,
+    new Set(failedDownloads.map((item) => item.name))
   );
+  for (const [name, entry] of Object.entries(materializedState.skills)) {
+    if (writtenSkillNames.has(name)) continue;
+    const previous = previousState.skills[name];
+    if (previous) {
+      entry.folderHash = previous.folderHash;
+      entry.cloudContentHash = previous.cloudContentHash;
+    } else {
+      delete materializedState.skills[name];
+    }
+  }
+  materializedState.skills = { ...previousState.skills, ...materializedState.skills };
+  await deps.writeSyncState(materializedState, syncPaths);
   return {
+    materializedSkillNames: pullResponse.skills.filter((skill) => finalLocalSkills.some((local) => local.name === skill.name) && !failedDownloads.some((failure) => failure.name === skill.name)).map((skill) => skill.name),
     pulled: pullResponse.skills.length,
     downloaded,
     deleted: 0,
@@ -7711,7 +7730,7 @@ var init_skill_sync = __esm({
 });
 
 // src/cli.js
-import { readFileSync as readFileSync17 } from "node:fs";
+import { readFileSync as readFileSync18 } from "node:fs";
 import { dirname as dirname16, join as join16 } from "node:path";
 import { fileURLToPath as fileURLToPath11 } from "node:url";
 
@@ -7732,6 +7751,10 @@ var {
   Help
 } = import_index.default;
 
+// src/command-specs/reports.js
+import { readFileSync as readFileSync9 } from "node:fs";
+import { resolve as resolve6 } from "node:path";
+
 // src/command-specs/apps.js
 init_errors();
 import { mkdirSync as mkdirSync6, mkdtempSync as mkdtempSync3, readdirSync as readdirSync5, rmSync as rmSync5 } from "node:fs";
@@ -13172,7 +13195,7 @@ ${listing.errors.map((error) => `  - ${error}`).join("\n")}`);
       renderHuman: () => renderVerifyReport({ summary, results, noBrowser })
     });
     if (keepOpen) {
-      process.stderr.write(`[notis apps verify] harness open at ${baseUrl}. Press Ctrl-C to stop.
+      process.stderr.write(`[notis apps verify] harness open at ${urls[0]?.url || baseUrl}. Press Ctrl-C to stop.
 `);
       await new Promise(() => {
       });
@@ -14071,9 +14094,108 @@ var appsCommandSpecs = [
   }
 ];
 
+// src/command-specs/reports.js
+init_errors();
+var reuse = (command, name = command) => {
+  const spec = appsCommandSpecs.find((item) => item.command_path.join(" ") === `apps ${command}`);
+  return {
+    ...spec,
+    handler: async (ctx) => {
+      const output = new Proxy(ctx.output, {
+        get(target, key) {
+          if (key === "emitSuccess") return (result) => {
+            const value2 = { ...result, warnings: (result.warnings || []).filter((warning) => !warning.startsWith("Store readiness:")) };
+            if (value2.data?.listing) {
+              value2.data = { ...value2.data };
+              delete value2.data.listing;
+            }
+            return target.emitSuccess(value2);
+          };
+          const value = Reflect.get(target, key);
+          return typeof value === "function" ? value.bind(target) : value;
+        }
+      });
+      return spec.handler({ ...ctx, options: { ...ctx.options, listing: false, ...name === "preview" ? { keepOpen: true } : {} }, output });
+    },
+    command_path: ["reports", name],
+    summary: `${name[0].toUpperCase() + name.slice(1)} a record-owned SDK report locally.${name === "preview" ? " Keeps the preview server and browser session open." : ""}`,
+    args_schema: {
+      ...spec.args_schema,
+      options: (spec.args_schema?.options || []).map((option) => option.flags === "--listing" ? { ...option, description: "Ignored for reports; saving a report does not publish a Store listing." } : option)
+    },
+    examples: (spec.examples || []).filter((example) => !example.includes("--listing")).map((example) => example.replace(`apps ${command}`, `reports ${name}`)),
+    when_to_use: "Author an independent report without deploying its owning app."
+  };
+};
+var reportsCommandSpecs = [
+  reuse("init"),
+  reuse("build"),
+  reuse("verify"),
+  reuse("verify", "preview"),
+  {
+    command_path: ["reports", "save"],
+    summary: "Build, verify and save a report into an app-owned database record.",
+    when_to_use: "Persist an independently authored report, not an app release.",
+    args_schema: {
+      arguments: [{ token: "[dir]", key: "dir", description: "Report source directory." }],
+      options: [
+        { flags: "--database-id <id>", description: "Required. Owning app database." },
+        { flags: "--document-id <id>", description: "Existing record to update or attach to." },
+        { flags: "--attach", description: "Attach to an existing non-view record." },
+        { flags: "--expected-revision <revision>", description: "Fresh view revision (0 for a record without a view)." },
+        { flags: "--title <title>", description: "Required, including updates. Record title." },
+        { flags: "--context-file <file>", description: "Required. UTF-8 readable report content and structure." },
+        { flags: "--properties-file <file>", description: "JSON database property values keyed by name." }
+      ]
+    },
+    examples: ['notis reports save ./weekly-report --database-id <id> --title "Weekly review" --context-file ./context.md'],
+    mutates: true,
+    idempotent: true,
+    backend_call: { type: "tool", name: "LOCAL_NOTIS_SAVE_REPORT" },
+    async handler(ctx) {
+      const dir = resolveProjectDir(ctx.args.dir || ".");
+      if (!ctx.options.databaseId || !ctx.options.title || !ctx.options.contextFile) throw usageError("--database-id, --title and --context-file are required.");
+      if (ctx.options.documentId && (!/^\d+$/.test(String(ctx.options.expectedRevision ?? "")) || !Number.isSafeInteger(Number(ctx.options.expectedRevision)))) throw usageError("--expected-revision is required for update/attach.");
+      if (ctx.options.attach && !ctx.options.documentId) throw usageError("--attach requires --document-id.");
+      const context = readFileSync9(resolve6(ctx.options.contextFile), "utf8");
+      const properties = ctx.options.propertiesFile ? JSON.parse(readFileSync9(resolve6(ctx.options.propertiesFile), "utf8")) : {};
+      await buildArtifact(dir, { stdio: ctx.output.isMachineMode() ? "pipe" : "inherit" });
+      const release = prepareAppRelease(dir);
+      try {
+        if (release.manifest.routes?.length !== 1) throw usageError("Reports require exactly one SDK route.");
+        let verification;
+        const verify = appsCommandSpecs.find((item) => item.command_path.join(" ") === "apps verify");
+        const exit = await verify.handler({ ...ctx, args: { dir: release.projectDir }, options: { skipBuild: true, mode: "stub" }, output: { ...ctx.output, isMachineMode: () => true, emitSuccess: (value) => {
+          verification = value;
+        } } });
+        if (exit !== EXIT_CODES.ok || verification?.data?.status !== "passed") throw usageError("Report verification failed; nothing saved.");
+        const files = { ...release.files, ...Object.fromEntries(Object.entries(release.sourceFiles).map(([path3, data]) => [`source/${path3}`, data])) };
+        const result = await runToolCommand({
+          runtime: { ...ctx.runtime, timeoutMs: Math.max(ctx.runtime.timeoutMs || 0, 9e4) },
+          toolName: "LOCAL_NOTIS_SAVE_REPORT",
+          mutating: true,
+          idempotencyKey: nextIdempotencyKey(ctx.globalOptions),
+          arguments_: {
+            operation: ctx.options.attach ? "attach" : ctx.options.documentId ? "update" : "create",
+            database_id: ctx.options.databaseId,
+            title: ctx.options.title,
+            properties,
+            ...ctx.options.documentId ? { document_id: ctx.options.documentId, expected_revision: Number(ctx.options.expectedRevision) } : {},
+            report: { schema: "notis-report/v2", context, artifact: { manifest: release.manifest, files, encoding: "base64" } }
+          }
+        });
+        if (!result?.payload?.document?.id || !result.payload.document.view_revision) throw usageError("Save returned no record identity. Read back before retrying; the outcome may be unknown.");
+        return ctx.output.emitSuccess({ command: "reports save", data: result.payload });
+      } finally {
+        release.close();
+      }
+    }
+  }
+];
+
 // src/command-specs/tools.js
 init_errors();
-import { accessSync, constants as fsConstants2, createReadStream as createReadStream2, existsSync as existsSync8, readFileSync as readFileSync9, statSync as statSync5 } from "node:fs";
+import { accessSync, constants as fsConstants2, createReadStream as createReadStream2, existsSync as existsSync8, readFileSync as readFileSync10, statSync as statSync5 } from "node:fs";
 import { createHash as createHash3 } from "node:crypto";
 import { basename as basename4 } from "node:path";
 async function resolveJsonInput(value, label) {
@@ -14090,7 +14212,7 @@ async function resolveJsonInput(value, label) {
     if (!existsSync8(filePath)) {
       throw usageError(`File not found: ${filePath}`);
     }
-    return parseJson(readFileSync9(filePath, "utf-8"), label);
+    return parseJson(readFileSync10(filePath, "utf-8"), label);
   }
   return parseJson(value, label);
 }
@@ -14978,7 +15100,7 @@ init_errors();
 init_auth_recovery();
 init_profiles();
 init_oauth();
-import { readFileSync as readFileSync12 } from "node:fs";
+import { readFileSync as readFileSync13 } from "node:fs";
 import { dirname as dirname12, join as join11 } from "node:path";
 import { fileURLToPath as fileURLToPath8 } from "node:url";
 
@@ -14994,7 +15116,7 @@ import {
   chmodSync,
   existsSync as existsSync9,
   mkdirSync as mkdirSync7,
-  readFileSync as readFileSync10,
+  readFileSync as readFileSync11,
   readdirSync as readdirSync6,
   renameSync as renameSync4,
   writeFileSync as writeFileSync6
@@ -15019,7 +15141,7 @@ function atomicWrite(filePath, contents, mode = 384) {
   renameSync4(temporaryPath, filePath);
 }
 function readText(filePath) {
-  return existsSync9(filePath) ? readFileSync10(filePath, "utf-8") : "";
+  return existsSync9(filePath) ? readFileSync11(filePath, "utf-8") : "";
 }
 function activeCodexInstructionsPath(home) {
   const overridePath = join9(home, ".codex", "AGENTS.override.md");
@@ -15062,7 +15184,7 @@ function upsertInstructionBlock(filePath, block) {
 }
 function readJsonObject(filePath) {
   if (!existsSync9(filePath)) return {};
-  const raw = readFileSync10(filePath, "utf-8");
+  const raw = readFileSync11(filePath, "utf-8");
   try {
     const parsed = JSON.parse(raw);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
@@ -15114,7 +15236,7 @@ function installManagedHookRuntime({
   nodePath = process.execPath,
   platform = process.platform
 } = {}) {
-  const bundle = readFileSync10(bundlePath2);
+  const bundle = readFileSync11(bundlePath2);
   const digest = createHash4("sha256").update(bundle).digest("hex");
   const runtimePath = join9(
     home,
@@ -15124,7 +15246,7 @@ function installManagedHookRuntime({
     digest,
     "notis-agent-hook.mjs"
   );
-  const existingDigest = existsSync9(runtimePath) ? createHash4("sha256").update(readFileSync10(runtimePath)).digest("hex") : null;
+  const existingDigest = existsSync9(runtimePath) ? createHash4("sha256").update(readFileSync11(runtimePath)).digest("hex") : null;
   if (existingDigest !== digest) atomicWrite(runtimePath, bundle, 320);
   chmodSync(runtimePath, 320);
   const launcherPath = join9(
@@ -15243,7 +15365,7 @@ function installAgentSetup({
   if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(String(profileName || ""))) {
     throw new Error("A valid authenticated Notis profile is required for agent setup");
   }
-  const instructions = readFileSync10(INSTRUCTIONS_PATH, "utf-8").trim();
+  const instructions = readFileSync11(INSTRUCTIONS_PATH, "utf-8").trim();
   const results = [];
   const shouldRepairManagedHooks = memoryHooks === true || memoryHooks === null && agents.some((agentId) => fileHasManagedNotisHook(agentPaths(agentId, home).hooks));
   const hookRuntime = shouldRepairManagedHooks ? installManagedHookRuntime({ home, platform }) : null;
@@ -15289,7 +15411,7 @@ import { createHash as createHash5 } from "node:crypto";
 import {
   existsSync as existsSync10,
   mkdirSync as mkdirSync8,
-  readFileSync as readFileSync11,
+  readFileSync as readFileSync12,
   renameSync as renameSync5,
   writeFileSync as writeFileSync7
 } from "node:fs";
@@ -15308,7 +15430,7 @@ function readState(sessionId, home) {
   const filePath = statePath(sessionId, home);
   if (!filePath || !existsSync10(filePath)) return { seen: [], pending: null };
   try {
-    const parsed = JSON.parse(readFileSync11(filePath, "utf-8"));
+    const parsed = JSON.parse(readFileSync12(filePath, "utf-8"));
     return parsed && typeof parsed === "object" ? {
       seen: Array.isArray(parsed.seen) ? parsed.seen.filter((item) => typeof item === "string") : [],
       pending: parsed.pending && typeof parsed.pending === "object" ? parsed.pending : null,
@@ -15885,7 +16007,7 @@ async function fetchBrief(apiBase, timeoutMs) {
   } catch {
   }
   try {
-    return { markdown: readFileSync12(BUNDLED_BRIEF_PATH, "utf-8"), source: "bundled" };
+    return { markdown: readFileSync13(BUNDLED_BRIEF_PATH, "utf-8"), source: "bundled" };
   } catch {
     return { markdown: null, source: null };
   }
@@ -15941,7 +16063,7 @@ async function authenticatedResult(ctx) {
     base.agent_setup = [];
   }
   if (onboardingComplete) {
-    const name = state?.settings?.full_name;
+    const name = state?.settings?.first_name;
     const setupSummary2 = renderAgentSetup(base.agent_setup);
     return ctx.output.emitSuccess({
       command: "start",
@@ -16054,7 +16176,7 @@ var onboardingCommandSpecs = [
 // src/command-specs/diagnostics.js
 init_errors();
 import { createHash as createHash7, randomUUID as randomUUID5 } from "node:crypto";
-import { existsSync as existsSync11, readFileSync as readFileSync13 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync14 } from "node:fs";
 var ENTITLEMENT_FIELDS = [
   "created_at",
   "included_credit_seat_count",
@@ -16460,7 +16582,7 @@ ORDER BY i.created_at ASC;`;
 function traceFileDiagnostics(path3) {
   if (!path3) return null;
   if (!existsSync11(path3)) throw usageError(`Trace file not found: ${path3}`);
-  const trace = JSON.parse(readFileSync13(path3, "utf-8"));
+  const trace = JSON.parse(readFileSync14(path3, "utf-8"));
   const text = JSON.stringify(trace).toLowerCase();
   const modelCounts = {};
   const generationIds = /* @__PURE__ */ new Set();
@@ -16691,7 +16813,7 @@ init_errors();
 import { createHash as createHash8, randomUUID as randomUUID6 } from "node:crypto";
 import {
   mkdtempSync as mkdtempSync4,
-  readFileSync as readFileSync14,
+  readFileSync as readFileSync15,
   rmSync as rmSync6,
   writeFileSync as writeFileSync8
 } from "node:fs";
@@ -16792,7 +16914,7 @@ unicode=\xE9t\xE9 Z\xFCrich \u6771\u4EAC
     );
   }
   const localHash = await hashFileSha256(fixturePath);
-  const localBytes = readFileSync14(fixturePath);
+  const localBytes = readFileSync15(fixturePath);
   const destination = remotePath(
     ctx.options.remoteFolder,
     `notis-file-upload-${marker}-${basename6(fixturePath)}`
@@ -17320,8 +17442,8 @@ init_errors();
 // src/runtime/git.js
 init_errors();
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { lstatSync as lstatSync2, readFileSync as readFileSync15 } from "node:fs";
-import { basename as basename7, relative as relative4, resolve as resolve6, sep as sep2 } from "node:path";
+import { lstatSync as lstatSync2, readFileSync as readFileSync16 } from "node:fs";
+import { basename as basename7, relative as relative4, resolve as resolve7, sep as sep2 } from "node:path";
 var GIT_TIMEOUT_MS = 12e4;
 var MAX_SECRET_SCAN_BYTES = 1e6;
 var SAFE_ENV_TEMPLATES = /^\.env\.(?:example|sample|template)$/i;
@@ -17375,10 +17497,10 @@ function filesToAutoCommit(repository) {
   ])];
 }
 function sensitiveAutoCommitFiles(repository) {
-  const root = resolve6(repository.toplevel);
+  const root = resolve7(repository.toplevel);
   const sensitive = [];
   for (const path3 of filesToAutoCommit(repository)) {
-    const absolute = resolve6(root, path3);
+    const absolute = resolve7(root, path3);
     const insideRoot = relative4(root, absolute);
     if (insideRoot === ".." || insideRoot.startsWith(`..${sep2}`) || insideRoot === "") continue;
     const name = basename7(path3);
@@ -17389,7 +17511,7 @@ function sensitiveAutoCommitFiles(repository) {
     try {
       const stat2 = lstatSync2(absolute);
       if (!stat2.isFile() || stat2.size > MAX_SECRET_SCAN_BYTES) continue;
-      const content = readFileSync15(absolute, "utf8");
+      const content = readFileSync16(absolute, "utf8");
       if (SENSITIVE_CONTENT.some((pattern) => pattern.test(content))) sensitive.push(path3);
     } catch {
     }
@@ -17785,7 +17907,7 @@ import {
   symlinkSync
 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { dirname as dirname13, join as join13, relative as relative5, resolve as resolve7 } from "node:path";
+import { dirname as dirname13, join as join13, relative as relative5, resolve as resolve8 } from "node:path";
 import { fileURLToPath as fileURLToPath9 } from "node:url";
 var BASE_SKILL_NAMES = Object.freeze([
   "notis-apps",
@@ -17794,8 +17916,8 @@ var BASE_SKILL_NAMES = Object.freeze([
 ]);
 var HERE3 = dirname13(fileURLToPath9(import.meta.url));
 function resolveBundledBaseSkillsRoot({ resourcesPath = process.resourcesPath } = {}) {
-  const sourceCheckout = resolve7(HERE3, "../../../../server/skills");
-  const packaged = resolve7(HERE3, "../../dist/base-skills");
+  const sourceCheckout = resolve8(HERE3, "../../../../server/skills");
+  const packaged = resolve8(HERE3, "../../dist/base-skills");
   const desktopResource = resourcesPath ? join13(resourcesPath, "base-skills") : null;
   const desktopPackagerRoot = resourcesPath || null;
   for (const candidate of [sourceCheckout, packaged, desktopResource, desktopPackagerRoot]) {
@@ -17825,7 +17947,7 @@ function getBaseSkillPaths({ home = homedir6(), userId = null } = {}) {
 function sameLinkTarget(linkPath, expectedTarget) {
   try {
     if (!lstatSync3(linkPath).isSymbolicLink()) return false;
-    return resolve7(dirname13(linkPath), readlinkSync(linkPath)) === resolve7(expectedTarget);
+    return resolve8(dirname13(linkPath), readlinkSync(linkPath)) === resolve8(expectedTarget);
   } catch {
     return false;
   }
@@ -17952,7 +18074,7 @@ function processIsAlive2(pid) {
   }
 }
 function delay3(milliseconds) {
-  return new Promise((resolve8) => setTimeout(resolve8, milliseconds));
+  return new Promise((resolve9) => setTimeout(resolve9, milliseconds));
 }
 async function quarantineStaleLock(lockDirectory, snapshot) {
   const quarantineRoot = join14(dirname14(lockDirectory), ".stale-operation-locks");
@@ -18093,7 +18215,7 @@ init_oauth();
 init_profiles();
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { createHash as createHash11 } from "node:crypto";
-import { existsSync as existsSync13, mkdirSync as mkdirSync10, readFileSync as readFileSync16, renameSync as renameSync7, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync10, readFileSync as readFileSync17, renameSync as renameSync7, writeFileSync as writeFileSync9 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
 import { dirname as dirname15, join as join15 } from "node:path";
 import { fileURLToPath as fileURLToPath10 } from "node:url";
@@ -18117,7 +18239,7 @@ async function maybeInstallSkillSyncService(runtime, {
   if (process.platform !== "darwin" || runtime.credentialKind !== "oauth" || config.current_profile !== runtime.profileName || !["https://api.notis.ai", "https://api-beta.notis.ai"].includes(runtime.apiBase)) return;
   const plist = join15(homedir8(), "Library", "LaunchAgents", `${SKILL_SYNC_SERVICE_LABEL}.plist`);
   if (existsSync13(plist)) {
-    const saved = readFileSync16(plist, "utf8");
+    const saved = readFileSync17(plist, "utf8");
     if (runtime.oauthUserId && [runtime.profileName, runtime.apiBase, runtime.oauthUserId].every((value) => saved.includes(`<string>${xml(value)}</string>`))) return install(runtime);
     return;
   }
@@ -18150,10 +18272,10 @@ async function installSkillSyncServiceLocked(runtime, {
     return { status: "skipped_non_personal_profile" };
   }
   const root = join15(home, ".notis", "skills", "service");
-  const bundle = readFileSync16(source);
+  const bundle = readFileSync17(source);
   const digest = createHash11("sha256").update(bundle).digest("hex");
   const installedBundle = join15(root, "runtime", digest, "worker.mjs");
-  if (!existsSync13(installedBundle) || !readFileSync16(installedBundle).equals(bundle)) atomicWrite2(installedBundle, bundle, 320);
+  if (!existsSync13(installedBundle) || !readFileSync17(installedBundle).equals(bundle)) atomicWrite2(installedBundle, bundle, 320);
   const args = [nodePath, installedBundle, runtime.profileName, runtime.apiBase, runtime.oauthUserId];
   if (!runtime.oauthUserId) return { status: "skipped_missing_account" };
   const plist = `<?xml version="1.0" encoding="UTF-8"?>
@@ -18169,7 +18291,7 @@ async function installSkillSyncServiceLocked(runtime, {
   const plistPath = join15(home, "Library", "LaunchAgents", `${SKILL_SYNC_SERVICE_LABEL}.plist`);
   const domain = `gui/${uid}`;
   const target = `${domain}/${SKILL_SYNC_SERVICE_LABEL}`;
-  const unchanged = existsSync13(plistPath) && readFileSync16(plistPath, "utf8") === plist;
+  const unchanged = existsSync13(plistPath) && readFileSync17(plistPath, "utf8") === plist;
   const loaded = run("/bin/launchctl", ["print", target], { encoding: "utf8", timeout: 5e3 });
   if (unchanged && loaded.status === 0) return { status: "installed", intervalSeconds: 60, profile: runtime.profileName };
   if (loaded.status === 0) {
@@ -18181,7 +18303,7 @@ async function installSkillSyncServiceLocked(runtime, {
   for (let attempt = 0; attempt < 10; attempt++) {
     started = run("/bin/launchctl", ["bootstrap", domain, plistPath], { encoding: "utf8", timeout: 5e3 });
     if (started.status === 0) break;
-    await new Promise((resolve8) => setTimeout(resolve8, 100));
+    await new Promise((resolve9) => setTimeout(resolve9, 100));
   }
   if (started?.status !== 0) throw new Error("Could not register automatic skill sync with macOS");
   return { status: "installed", intervalSeconds: 60, profile: runtime.profileName };
@@ -18256,6 +18378,7 @@ var skillsCommandSpecs = [
 
 // src/command-specs/index.js
 var GROUP_SUMMARIES = {
+  reports: "Build and save independent SDK reports into app database records.",
   apps: "Develop, deploy, and submit Notis Apps.",
   agents: "Install Notis context into local coding agents.",
   handover: "Hand the branch you are on to a Notis agent, hosted or your own Codex/Claude.",
@@ -18272,6 +18395,7 @@ var COMMAND_SPECS = [
   ...agentsCommandSpecs,
   ...skillsCommandSpecs,
   ...appsCommandSpecs,
+  ...reportsCommandSpecs,
   ...handoverCommandSpecs,
   ...toolsCommandSpecs,
   ...diagnosticCommandSpecs,
@@ -18368,7 +18492,7 @@ init_profiles();
 function readCliVersion() {
   try {
     const manifestPath = join16(dirname16(fileURLToPath11(import.meta.url)), "..", "package.json");
-    const version = JSON.parse(readFileSync17(manifestPath, "utf-8")).version;
+    const version = JSON.parse(readFileSync18(manifestPath, "utf-8")).version;
     if (typeof version === "string" && version.trim()) {
       return version.trim();
     }

package/dist/base-skills/notis-apps/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: notis-apps
-description: Design and package Notis apps. Use when users want an app that groups databases, routes, documents, automations, and skills into one installable Notis product.
+description: Design and package Notis apps, or inspect their live views and resources. Use when users want an installable Notis app or need rendered content, charts, or filters that ordinary data tools do not provide.
 feature_flag: store
 mcp_resource: true
 mcp_tool_patterns: ["LOCAL_NOTIS_INSTALL_APP"]
-mcp_references: ["references/release.md", "references/architecture.md", "references/design.md", "references/sdk.md", "references/troubleshooting.md"]
+mcp_references: ["references/release.md", "references/architecture.md", "references/design.md", "references/sdk.md", "references/troubleshooting.md", "references/reading.md", "references/context.md"]
 ---
 
 # Notis Apps
@@ -13,6 +13,14 @@ Build apps that feel native to Notis: compact, readable, responsive, and useful.
 Use Vite + React, `@notis/sdk`, and the existing scaffold components. Use the Notis
 CLI for app operations: `npx --package @notis_ai/cli@latest -- notis ...`.
 
+## Read existing apps and resources
+
+Use ordinary data tools for straightforward reads. When the task needs a live
+render, chart, filter, or visual inspection, follow [Read Notis web content](references/reading.md).
+It covers apps, views, reports, HTML and file documents without requiring the
+user to open Portal or Desktop. Use the agent's available browser capability;
+this is not an app build, deployment, or Portal editing-context workflow.
+
 ## Build → inspect → fix → deliver
 
 For every app UI create/edit task, read both [Design](references/design.md) and
@@ -49,3 +57,14 @@ For every app UI create/edit task, read both [Design](references/design.md) and
 
 The CLI distributes this skill and its references from the canonical product
 source. Do not maintain competing copies.
+
+## Shared views, independent reports and feedback
+
+Use a shared app view when many records should share one implementation. Use
+`notis-reports` when an app-owned record needs its own independently authored
+SDK presentation. A report is not a new app, and changing it must not deploy or
+replace shared app routes. The agent chooses live data versus captured results.
+
+Share selected text, comments, loaded resources or app-defined annotations through
+[generic context pills](references/context.md). Apps own annotation storage and
+presentation; the chat owns unsent context drafts. Passive context is not execution approval.