@notis_ai/cli 0.2.0-beta.175.1 → 0.2.0-beta.178.1

package/{template/packages → dist}/sdk/src/config.ts

@@ -196,6 +196,10 @@ export interface NotisAppToolBinding {
 }
 
 export interface NotisAppConfig {
+  /** Standalone reports share the view engine without app installation. */
+  kind?: 'app' | 'report';
+  /** Existing data sources, never owned or materialized by a report. */
+  databaseAccess?: Array<{ id: string; access: 'read' | 'write' }>;
   /** URL-safe app slug. Existing apps may still use a display name here. */
   name: string;
   /** Human display title, Raycast-style. Falls back to `name`. */

package/{template/packages → dist}/sdk/src/hooks/useNotis.ts

@@ -1,9 +1,10 @@
 'use client';
 
 import { useNotisRuntime } from '../provider';
-import type { AppDescriptor, CollectionItemDetail, DatabaseDescriptor, RouteDescriptor } from '../runtime';
+import type { RuntimeResource, AppDescriptor, CollectionItemDetail, DatabaseDescriptor, RouteDescriptor } from '../runtime';
 
 interface NotisContext {
+  resource: RuntimeResource | null;
   /** App metadata (id, name, icon, description). Null before runtime loads. */
   app: AppDescriptor | null;
   /** Current route descriptor. Null before runtime loads. */
@@ -27,6 +28,7 @@ export function useNotis(): NotisContext {
   const runtime = useNotisRuntime();
 
   return {
+    resource: runtime?.resource ?? null,
     app: runtime?.app ?? null,
     route: runtime?.route ?? null,
     databases: runtime?.databases ?? [],

package/{template/packages → dist}/sdk/src/index.ts

@@ -139,6 +139,7 @@ export type {
   NotisMarkdownEditorSavePayload,
   NotisMarkdownEditorSaveResult,
   NotisRuntime,
+  RuntimeResource,
   NotisRuntimeContext,
   NotisRuntimeUI,
   QueryFilter,

package/{template/packages → dist}/sdk/src/runtime.ts

@@ -364,7 +364,20 @@ export interface CloudComputerFacts {
   cli_auth: { gh: CloudComputerCliAuthFacts };
 }
 
+export interface RuntimeResource {
+  kind: 'app' | 'report';
+  /** Host-provided adoption eligibility, never report-authored authority. */
+  analytics_eligible?: boolean;
+  id: string;
+  revision: number;
+  name?: string;
+  icon?: string | null;
+  description?: string | null;
+}
+
 export interface NotisRuntime {
+  /** Authenticated runtime identity; app below is presentation metadata only. */
+  resource?: RuntimeResource;
   /** Optional host-scoped in-memory read cache. Older hosts remain supported. */
   queryClient?: NotisQueryClient;
   app: AppDescriptor;

package/{template/packages → dist}/sdk/src/styles.css

@@ -30,93 +30,91 @@ dialog.notis-dialog::backdrop { background: rgb(0 0 0 / 0.45); }
 .notis-dialog-description { margin: 0.5rem 0 0; color: hsl(var(--muted-foreground)); font-size: 0.875rem; line-height: 1.5; }
 
 /* Framework-neutral styles: the app owns its Tailwind entry point. This file
- * is also consumed in shadow roots and by apps on older Tailwind versions. */
-@layer base {
-  * {
-    border-color: hsl(var(--border));
-  }
-  [data-notis-app-root] {
-    color: hsl(var(--foreground));
-    display: block;
-    min-height: 100%;
-  }
+ * is also consumed in shadow roots and by apps on older Tailwind versions.
+ * Keep rules outside Tailwind-owned @layer blocks: Vite processes this import
+ * separately from the app stylesheet, so Tailwind 3 has no matching directives. */
+* {
+  border-color: hsl(var(--border));
+}
+[data-notis-app-root] {
+  color: hsl(var(--foreground));
+  display: block;
+  min-height: 100%;
 }
 
-@layer components {
-  .notis-app-shell {
-    margin-inline: auto;
-    width: 100%;
-    max-width: var(--portal-page-max-width);
-    padding: 1.5rem 1rem;
-  }
+.notis-app-shell {
+  margin-inline: auto;
+  width: 100%;
+  max-width: var(--portal-page-max-width);
+  padding: 1.5rem 1rem;
+}
 
-  /* Flat panel: no border or shadow around items. */
-  .notis-app-surface {
-    border-radius: 1rem;
-    background-color: hsl(var(--muted));
-    color: hsl(var(--card-foreground));
-  }
+/* Flat panel: no border or shadow around items. */
+.notis-app-surface {
+  border-radius: 1rem;
+  background-color: hsl(var(--muted));
+  color: hsl(var(--card-foreground));
+}
 
-  .list-row {
-    border-radius: 0.75rem;
-    background-color: hsl(var(--muted));
-    padding: 0.75rem 1rem;
-    transition-property: color, background-color, border-color, text-decoration-color, fill, stroke;
-    transition-duration: 150ms;
-    transition-timing-function: cubic-bezier(0.4, 0, 0.2, 1);
-  }
+.list-row {
+  border-radius: 0.75rem;
+  background-color: hsl(var(--muted));
+  padding: 0.75rem 1rem;
+  transition-property: color, background-color, border-color, text-decoration-color, fill, stroke;
+  transition-duration: 150ms;
+  transition-timing-function: cubic-bezier(0.4, 0, 0.2, 1);
+}
 
-  .list-row-selected {
-    background-color: hsl(var(--primary) / 0.06);
-  }
+.list-row-selected {
+  background-color: hsl(var(--primary) / 0.06);
+}
 
-  /* Split pages are full-bleed; only the list pane carries a hairline. */
-  .notis-app-split {
-    display: flex;
-    height: 100%;
-    min-height: 0;
-    width: 100%;
-    max-width: none;
-    flex-direction: column;
-  }
+/* Split pages are full-bleed; only the list pane carries a hairline. */
+.notis-app-split {
+  display: flex;
+  height: 100%;
+  min-height: 0;
+  width: 100%;
+  max-width: none;
+  flex-direction: column;
+}
 
-  .notis-app-pane-list {
-    width: 100%;
-    flex-shrink: 0;
-    background-color: hsl(var(--muted) / 0.4);
-  }
+.notis-app-pane-list {
+  width: 100%;
+  flex-shrink: 0;
+  background-color: hsl(var(--muted) / 0.4);
+}
 
-  .notis-app-pane-detail {
-    min-width: 0;
-    flex: 1 1 0%;
-    background-color: hsl(var(--background));
-  }
+.notis-app-pane-detail {
+  min-width: 0;
+  flex: 1 1 0%;
+  background-color: hsl(var(--background));
+}
 
-  .notis-app-section {
-    padding: 1.25rem;
-  }
+.notis-app-section {
+  padding: 1.25rem;
+}
 
-  @media (min-width: 768px) {
-    .notis-app-shell { padding-block: 2rem; }
-    .notis-app-section { padding: 1.5rem; }
-  }
+@media (min-width: 768px) {
+  .notis-app-shell { padding-block: 2rem; }
+  .notis-app-section { padding: 1.5rem; }
+}
 
-  @media (min-width: 1024px) {
-    .list-row { background-color: transparent; }
-    .list-row:hover { background-color: hsl(var(--muted) / 0.6); }
-    .list-row-selected,
-    .list-row-selected:hover { background-color: hsl(var(--primary) / 0.06); }
-    .notis-app-split { flex-direction: row; }
-    .notis-app-pane-list {
-      width: 20rem;
-      border-right-width: 1px;
-      border-right-color: hsl(var(--border));
-    }
+@media (min-width: 1024px) {
+  .list-row { background-color: transparent; }
+  .list-row:hover { background-color: hsl(var(--muted) / 0.6); }
+  .list-row-selected,
+  .list-row-selected:hover { background-color: hsl(var(--primary) / 0.06); }
+  .notis-app-split { flex-direction: row; }
+  .notis-app-pane-list {
+    width: 20rem;
+    border-right-width: 1px;
+    border-right-color: hsl(var(--border));
   }
+}
 
-  @media (min-width: 1280px) {
-    .notis-app-pane-list { width: 24rem; }
-  }
+@media (min-width: 1280px) {
+  .notis-app-pane-list { width: 24rem; }
 }
 
 /*

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@notis_ai/cli",
-  "version": "0.2.0-beta.175.1",
+  "version": "0.2.0-beta.178.1",
   "description": "Agent-first Notis CLI for apps and generic tool execution",
   "type": "module",
   "bin": {

package/skills/notis-apps/cli.md

@@ -28,7 +28,7 @@ change the package release label, check resource compatibility and deploy as a n
 
 ## Reports
 
-For a record-owned report, use `reports init → build → verify/preview → save` instead of the app deployment workflow above. Author exactly one route, select an existing app-owned database, and supply a readable context file. Revisions preserve the record ID and require its freshly read revision. See the product `notis-reports` skill for source recovery, ownership and readback. These commands do not deploy the owning app or publish a Store listing.
+For a standalone live report, use `reports init → build → verify/preview → save` instead of the app deployment workflow above. Author exactly one route with kind: report, declare its tools, and supply a readable context file. No installed app or database is required. Revisions preserve the record ID and require its freshly read revision. See the product `notis-reports` skill for source recovery, ownership and readback. These commands do not deploy an app or publish a Store listing.
 
 ## Commands
 
@@ -229,85 +229,71 @@ Examples:
 
 ### `npx --package @notis_ai/cli@latest -- notis reports init <name> [dir]`
 
-Init a record-owned SDK report locally.
+Init a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
-
-Options:
-- `--from <slug>` — Start from a published Store app listed by `notis apps scaffolds list`. Downloads its source from the public app registry.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis apps scaffolds list`
-- `npx --package @notis_ai/cli@latest -- notis reports init "Mind the Flo"`
-- `npx --package @notis_ai/cli@latest -- notis reports init "My CRM" --from databases`
-- `npx --package @notis_ai/cli@latest -- notis reports init "My App" ~/code/my-app`
+- `npx --package @notis_ai/cli@latest -- notis reports init "Weekly report" ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports build [dir]`
 
-Build a record-owned SDK report locally.
+Build a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports build`
-- `npx --package @notis_ai/cli@latest -- notis reports build ./my-app`
+- `npx --package @notis_ai/cli@latest -- notis reports build ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports verify [dir]`
 
-Verify a record-owned SDK report locally.
+Verify a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Options:
 - `--routes <slugs>` — Comma-separated route slugs. Default: every route in manifest.
 - `--port <n>` — Loopback port. Default: auto-pick.
 - `--skip-build` — Skip notis apps build; reuse existing .notis/output/.
 - `--mode <mode>` — stub | live. Default stub. Live posts to /portal_views/runtime_query with the CLI JWT and fails routes whose runtime calls all errored.
-- `--listing` — Ignored for reports; saving a report does not publish a Store listing.
 - `--no-browser` — Start the harness server and print URLs; do not drive agent-browser.
 - `--keep-open` — Leave server + browser session running after report (for manual triage).
+- `--document-id <id>` — Saved report for live verification.
+- `--expected-revision <revision>` — Saved report revision for live verification.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports verify`
-- `npx --package @notis_ai/cli@latest -- notis reports verify --routes notes`
-- `npx --package @notis_ai/cli@latest -- notis reports verify --mode live`
-- `npx --package @notis_ai/cli@latest -- notis reports verify --no-browser  # start the harness, drive agent-browser yourself`
+- `npx --package @notis_ai/cli@latest -- notis reports verify ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports preview [dir]`
 
-Preview a record-owned SDK report locally. Keeps the preview server and browser session open.
+Preview a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Options:
 - `--routes <slugs>` — Comma-separated route slugs. Default: every route in manifest.
 - `--port <n>` — Loopback port. Default: auto-pick.
 - `--skip-build` — Skip notis apps build; reuse existing .notis/output/.
 - `--mode <mode>` — stub | live. Default stub. Live posts to /portal_views/runtime_query with the CLI JWT and fails routes whose runtime calls all errored.
-- `--listing` — Ignored for reports; saving a report does not publish a Store listing.
 - `--no-browser` — Start the harness server and print URLs; do not drive agent-browser.
 - `--keep-open` — Leave server + browser session running after report (for manual triage).
+- `--document-id <id>` — Saved report for live verification.
+- `--expected-revision <revision>` — Saved report revision for live verification.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports preview`
-- `npx --package @notis_ai/cli@latest -- notis reports preview --routes notes`
-- `npx --package @notis_ai/cli@latest -- notis reports preview --mode live`
-- `npx --package @notis_ai/cli@latest -- notis reports preview --no-browser  # start the harness, drive agent-browser yourself`
+- `npx --package @notis_ai/cli@latest -- notis reports preview ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports save [dir]`
 
-Build, verify and save a report into an app-owned database record.
+Build, verify and save a standalone live report document.
 
-When to use: Persist an independently authored report, not an app release.
+When to use: Persist an independently owned report, not an app release.
 
 Options:
-- `--database-id <id>` — Required. Owning app database.
-- `--document-id <id>` — Existing record to update or attach to.
-- `--attach` — Attach to an existing non-view record.
-- `--expected-revision <revision>` — Fresh view revision (0 for a record without a view).
-- `--title <title>` — Required, including updates. Record title.
+- `--document-id <id>` — Existing report document to update.
+- `--expected-revision <revision>` — Current saved report revision; required for updates.
+- `--title <title>` — Required, including updates. Document title.
 - `--context-file <file>` — Required. UTF-8 readable report content and structure.
-- `--properties-file <file>` — JSON database property values keyed by name.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports save ./weekly-report --database-id <id> --title "Weekly review" --context-file ./context.md`
+- `npx --package @notis_ai/cli@latest -- notis reports save ./weekly-report --title "Weekly review" --context-file ./context.md`

package/src/command-specs/apps.js

@@ -276,6 +276,9 @@ function assertHarnessResult(result, route, databaseSlugs, mode = 'stub', capabi
     });
   }
   if (mode === 'live') {
+    if (runtimeCalls.some(call => call?.ok == null)) {
+      assertions.push({ ok: false, code: 'runtime_calls_pending', message: 'Live verification ended before every started runtime call settled.' });
+    }
     // In live mode an app that catches every failed call and renders its error
     // state still mounts cleanly, so the render assertions above all pass. Only
     // the recorded outcomes reveal that nothing real came back.
@@ -379,7 +382,7 @@ async function appsListHandler(ctx) {
   });
 }
 
-async function appsInitHandler(ctx) {
+export async function appsInitHandler(ctx) {
   const projectDir = ctx.args.dir
     ? resolveProjectDir(ctx.args.dir)
     : defaultAppProjectDir(slugify(ctx.args.name));
@@ -504,7 +507,7 @@ async function appsCreateHandler(ctx) {
   });
 }
 
-async function appsBuildHandler(ctx) {
+export async function appsBuildHandler(ctx) {
   const projectDir = resolveProjectDir(ctx.args.dir || '.');
   const problems = detectProjectProblems(projectDir);
   if (problems.length) {
@@ -563,13 +566,15 @@ async function closeHarnessResources(sessionNames, testServer, rawOutputDir = nu
   }
 }
 
-async function appsVerifyHandler(ctx) {
+export async function appsVerifyHandler(ctx) {
   const projectDir = resolveProjectDir(ctx.args.dir || '.');
   const problems = detectProjectProblems(projectDir);
   if (problems.length) {
     throw usageError(`Project has problems:\n${problems.map((p) => `  - ${p}`).join('\n')}`);
   }
 
+  const appConfig = await loadAppConfig(projectDir);
+  const isReport = appConfig.kind === 'report';
   const mode = ctx.options.mode || 'stub';
   if (!['stub', 'live'].includes(mode)) {
     throw usageError('--mode must be either "stub" or "live".');
@@ -586,8 +591,10 @@ async function appsVerifyHandler(ctx) {
     if (!ctx.runtime.jwt) {
       throw usageError('Live verify mode requires CLI auth. Run notis login and retry.');
     }
-    linkedState = readLinkedState(projectDir, linkedStateProfileKey(ctx.runtime));
-    if (!linkedState?.app_id) {
+    if (isReport) {
+      if (!ctx.options.documentId || !/^\d+$/.test(String(ctx.options.expectedRevision ?? ''))) throw usageError('Live report verification requires --document-id and --expected-revision of the saved report.');
+    } else linkedState = readLinkedState(projectDir, linkedStateProfileKey(ctx.runtime));
+    if (!isReport && !linkedState?.app_id) {
       throw usageError('Live verify mode requires a linked app. Run `notis apps link <app-id> .` first.');
     }
   }
@@ -599,8 +606,7 @@ async function appsVerifyHandler(ctx) {
   }
 
   const manifest = readManifest(projectDir);
-  const appConfig = await loadAppConfig(projectDir);
-  const listing = inspectListingReadiness(projectDir, appConfig);
+  const listing = isReport ? { ready: true, errors: [], warnings: [] } : inspectListingReadiness(projectDir, appConfig);
   // Store readiness is a publish concern, not a render concern. Verify reports
   // it so the gaps stay visible while the app is still being built; only
   // --listing (and `apps publish`) turn it back into a hard gate.
@@ -609,7 +615,7 @@ async function appsVerifyHandler(ctx) {
   }
   const listingWarnings = [
     ...[...listing.errors, ...listing.warnings].map((message) => `Store readiness: ${message}`),
-    ...findUnknownScreenshotScenarios(projectDir, resolveListingScreenshots(projectDir, appConfig)),
+    ...(isReport ? [] : findUnknownScreenshotScenarios(projectDir, resolveListingScreenshots(projectDir, appConfig))),
   ];
   const routes = routeSelection(manifest, parseRouteSlugs(ctx.options.routes));
   const port = parsePort(ctx.options.port) || await getAvailablePort();
@@ -635,6 +641,7 @@ async function appsVerifyHandler(ctx) {
         slug: appSlug,
         projectDir,
         appId: linkedState?.app_id || 'harness-app',
+        resource: isReport ? { kind: 'report', id: ctx.options.documentId || 'preview', revision: Number(ctx.options.expectedRevision || 0) } : undefined,
       }],
       port,
       harness: {
@@ -708,7 +715,8 @@ async function appsVerifyHandler(ctx) {
         const result = await runHarnessRoute({
           url,
           sessionName: browserSessionName,
-          timeoutMs: Number.parseInt(ctx.globalOptions.timeoutMs || '', 10) || 10_000,
+          timeoutMs: Number.parseInt(ctx.globalOptions.timeoutMs || '', 10) || (mode === 'live' ? 90_000 : 10_000),
+          waitForRuntime: mode === 'live',
           snapshotPath,
         });
         const assertions = assertHarnessResult(
@@ -766,11 +774,7 @@ async function appsVerifyHandler(ctx) {
       },
       summary,
       results,
-      listing: {
-        ready: listing.ready,
-        gated: ctx.options.listing === true,
-        problems: listing.errors,
-      },
+      ...(!isReport ? { listing: { ready: listing.ready, gated: ctx.options.listing === true, problems: listing.errors } } : {}),
     };
 
     if (!keepOpen) await cleanup();

package/src/command-specs/diagnostics.js

@@ -58,7 +58,8 @@ async function discoverSupabaseSqlTool(runtime) {
 
 export function unwrapToolExecutionPayload(payload) {
   return (
-    payload?.data?.results?.[0]?.response?.data
+    payload?.data?.data?.results?.[0]?.response?.data
+    ?? payload?.data?.results?.[0]?.response?.data
     ?? payload?.results?.[0]?.response?.data
     ?? payload?.data?.result
     ?? payload?.result
@@ -74,30 +75,30 @@ function parseJsonCandidate(value) {
     return JSON.parse(trimmed);
   } catch {
     const boundaryEnd = trimmed.lastIndexOf('</untrusted-data');
-    const boundaryStart = boundaryEnd >= 0
-      ? trimmed.lastIndexOf('<untrusted-data', boundaryEnd)
-      : -1;
-    const contentStart = boundaryStart >= 0 ? trimmed.indexOf('>', boundaryStart) + 1 : -1;
-    if (contentStart > 0 && boundaryEnd > contentStart) {
+    const boundaryName = boundaryEnd >= 0
+      ? trimmed.slice(boundaryEnd + 2, trimmed.indexOf('>', boundaryEnd)) : null;
+    const opening = boundaryName ? `<${boundaryName}>` : null;
+    for (let boundaryStart = opening ? trimmed.indexOf(opening) : -1;
+      boundaryStart >= 0 && boundaryStart < boundaryEnd;
+      boundaryStart = trimmed.indexOf(opening, boundaryStart + opening.length)) {
+      const contentStart = boundaryStart + opening.length;
       // Supabase MCP sometimes returns the prose envelope with literal "\\n"
       // separators. Strip those only at the boundary: globally replacing them
       // corrupts valid escaped newlines inside JSON string values.
       const inner = trimmed
         .slice(contentStart, boundaryEnd)
         .trim()
-        .replace(/^(?:\\r?\\n)+/, '')
-        .replace(/(?:\\r?\\n)+$/, '')
+        .replace(/^(?:(?:\\r)?\\n)+/, '')
+        .replace(/(?:(?:\\r)?\\n)+$/, '')
         .trim();
       try {
         return JSON.parse(inner);
-      } catch (error) {
-        const nested = parseJsonCandidate(inner);
-        if (nested !== null) return nested;
-        throw usageError(
-          `Supabase diagnostic rows were not valid JSON: ${error instanceof Error ? error.message : String(error)}; prefix=${JSON.stringify(inner.slice(0, 100))}`,
-        );
+      } catch {
+        // The provider also mentions this marker in its introductory prose.
+        // Try its actual opening, never a nested tool result's different marker.
       }
     }
+    if (boundaryEnd >= 0) throw usageError('Supabase diagnostic rows were not valid JSON.');
     const arrayMatch = trimmed.match(/(\[[\s\S]*\])/);
     if (arrayMatch) {
       try {