@notis_ai/cli 0.2.0-beta.177.1 → 0.2.0-beta.178.1

package/dist/sdk/src/config.ts

@@ -196,6 +196,10 @@ export interface NotisAppToolBinding {
 }
 
 export interface NotisAppConfig {
+  /** Standalone reports share the view engine without app installation. */
+  kind?: 'app' | 'report';
+  /** Existing data sources, never owned or materialized by a report. */
+  databaseAccess?: Array<{ id: string; access: 'read' | 'write' }>;
   /** URL-safe app slug. Existing apps may still use a display name here. */
   name: string;
   /** Human display title, Raycast-style. Falls back to `name`. */

package/dist/sdk/src/hooks/useNotis.ts

@@ -1,9 +1,10 @@
 'use client';
 
 import { useNotisRuntime } from '../provider';
-import type { AppDescriptor, CollectionItemDetail, DatabaseDescriptor, RouteDescriptor } from '../runtime';
+import type { RuntimeResource, AppDescriptor, CollectionItemDetail, DatabaseDescriptor, RouteDescriptor } from '../runtime';
 
 interface NotisContext {
+  resource: RuntimeResource | null;
   /** App metadata (id, name, icon, description). Null before runtime loads. */
   app: AppDescriptor | null;
   /** Current route descriptor. Null before runtime loads. */
@@ -27,6 +28,7 @@ export function useNotis(): NotisContext {
   const runtime = useNotisRuntime();
 
   return {
+    resource: runtime?.resource ?? null,
     app: runtime?.app ?? null,
     route: runtime?.route ?? null,
     databases: runtime?.databases ?? [],

package/dist/sdk/src/index.ts

@@ -139,6 +139,7 @@ export type {
   NotisMarkdownEditorSavePayload,
   NotisMarkdownEditorSaveResult,
   NotisRuntime,
+  RuntimeResource,
   NotisRuntimeContext,
   NotisRuntimeUI,
   QueryFilter,

package/dist/sdk/src/runtime.ts

@@ -364,7 +364,20 @@ export interface CloudComputerFacts {
   cli_auth: { gh: CloudComputerCliAuthFacts };
 }
 
+export interface RuntimeResource {
+  kind: 'app' | 'report';
+  /** Host-provided adoption eligibility, never report-authored authority. */
+  analytics_eligible?: boolean;
+  id: string;
+  revision: number;
+  name?: string;
+  icon?: string | null;
+  description?: string | null;
+}
+
 export interface NotisRuntime {
+  /** Authenticated runtime identity; app below is presentation metadata only. */
+  resource?: RuntimeResource;
   /** Optional host-scoped in-memory read cache. Older hosts remain supported. */
   queryClient?: NotisQueryClient;
   app: AppDescriptor;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@notis_ai/cli",
-  "version": "0.2.0-beta.177.1",
+  "version": "0.2.0-beta.178.1",
   "description": "Agent-first Notis CLI for apps and generic tool execution",
   "type": "module",
   "bin": {

package/skills/notis-apps/cli.md

@@ -28,7 +28,7 @@ change the package release label, check resource compatibility and deploy as a n
 
 ## Reports
 
-For a record-owned report, use `reports init → build → verify/preview → save` instead of the app deployment workflow above. Author exactly one route, select an existing app-owned database, and supply a readable context file. Revisions preserve the record ID and require its freshly read revision. See the product `notis-reports` skill for source recovery, ownership and readback. These commands do not deploy the owning app or publish a Store listing.
+For a standalone live report, use `reports init → build → verify/preview → save` instead of the app deployment workflow above. Author exactly one route with kind: report, declare its tools, and supply a readable context file. No installed app or database is required. Revisions preserve the record ID and require its freshly read revision. See the product `notis-reports` skill for source recovery, ownership and readback. These commands do not deploy an app or publish a Store listing.
 
 ## Commands
 
@@ -229,85 +229,71 @@ Examples:
 
 ### `npx --package @notis_ai/cli@latest -- notis reports init <name> [dir]`
 
-Init a record-owned SDK report locally.
+Init a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
-
-Options:
-- `--from <slug>` — Start from a published Store app listed by `notis apps scaffolds list`. Downloads its source from the public app registry.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis apps scaffolds list`
-- `npx --package @notis_ai/cli@latest -- notis reports init "Mind the Flo"`
-- `npx --package @notis_ai/cli@latest -- notis reports init "My CRM" --from databases`
-- `npx --package @notis_ai/cli@latest -- notis reports init "My App" ~/code/my-app`
+- `npx --package @notis_ai/cli@latest -- notis reports init "Weekly report" ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports build [dir]`
 
-Build a record-owned SDK report locally.
+Build a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports build`
-- `npx --package @notis_ai/cli@latest -- notis reports build ./my-app`
+- `npx --package @notis_ai/cli@latest -- notis reports build ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports verify [dir]`
 
-Verify a record-owned SDK report locally.
+Verify a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Options:
 - `--routes <slugs>` — Comma-separated route slugs. Default: every route in manifest.
 - `--port <n>` — Loopback port. Default: auto-pick.
 - `--skip-build` — Skip notis apps build; reuse existing .notis/output/.
 - `--mode <mode>` — stub | live. Default stub. Live posts to /portal_views/runtime_query with the CLI JWT and fails routes whose runtime calls all errored.
-- `--listing` — Ignored for reports; saving a report does not publish a Store listing.
 - `--no-browser` — Start the harness server and print URLs; do not drive agent-browser.
 - `--keep-open` — Leave server + browser session running after report (for manual triage).
+- `--document-id <id>` — Saved report for live verification.
+- `--expected-revision <revision>` — Saved report revision for live verification.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports verify`
-- `npx --package @notis_ai/cli@latest -- notis reports verify --routes notes`
-- `npx --package @notis_ai/cli@latest -- notis reports verify --mode live`
-- `npx --package @notis_ai/cli@latest -- notis reports verify --no-browser  # start the harness, drive agent-browser yourself`
+- `npx --package @notis_ai/cli@latest -- notis reports verify ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports preview [dir]`
 
-Preview a record-owned SDK report locally. Keeps the preview server and browser session open.
+Preview a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Options:
 - `--routes <slugs>` — Comma-separated route slugs. Default: every route in manifest.
 - `--port <n>` — Loopback port. Default: auto-pick.
 - `--skip-build` — Skip notis apps build; reuse existing .notis/output/.
 - `--mode <mode>` — stub | live. Default stub. Live posts to /portal_views/runtime_query with the CLI JWT and fails routes whose runtime calls all errored.
-- `--listing` — Ignored for reports; saving a report does not publish a Store listing.
 - `--no-browser` — Start the harness server and print URLs; do not drive agent-browser.
 - `--keep-open` — Leave server + browser session running after report (for manual triage).
+- `--document-id <id>` — Saved report for live verification.
+- `--expected-revision <revision>` — Saved report revision for live verification.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports preview`
-- `npx --package @notis_ai/cli@latest -- notis reports preview --routes notes`
-- `npx --package @notis_ai/cli@latest -- notis reports preview --mode live`
-- `npx --package @notis_ai/cli@latest -- notis reports preview --no-browser  # start the harness, drive agent-browser yourself`
+- `npx --package @notis_ai/cli@latest -- notis reports preview ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports save [dir]`
 
-Build, verify and save a report into an app-owned database record.
+Build, verify and save a standalone live report document.
 
-When to use: Persist an independently authored report, not an app release.
+When to use: Persist an independently owned report, not an app release.
 
 Options:
-- `--database-id <id>` — Required. Owning app database.
-- `--document-id <id>` — Existing record to update or attach to.
-- `--attach` — Attach to an existing non-view record.
-- `--expected-revision <revision>` — Fresh view revision (0 for a record without a view).
-- `--title <title>` — Required, including updates. Record title.
+- `--document-id <id>` — Existing report document to update.
+- `--expected-revision <revision>` — Current saved report revision; required for updates.
+- `--title <title>` — Required, including updates. Document title.
 - `--context-file <file>` — Required. UTF-8 readable report content and structure.
-- `--properties-file <file>` — JSON database property values keyed by name.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports save ./weekly-report --database-id <id> --title "Weekly review" --context-file ./context.md`
+- `npx --package @notis_ai/cli@latest -- notis reports save ./weekly-report --title "Weekly review" --context-file ./context.md`

package/src/command-specs/apps.js

@@ -276,6 +276,9 @@ function assertHarnessResult(result, route, databaseSlugs, mode = 'stub', capabi
     });
   }
   if (mode === 'live') {
+    if (runtimeCalls.some(call => call?.ok == null)) {
+      assertions.push({ ok: false, code: 'runtime_calls_pending', message: 'Live verification ended before every started runtime call settled.' });
+    }
     // In live mode an app that catches every failed call and renders its error
     // state still mounts cleanly, so the render assertions above all pass. Only
     // the recorded outcomes reveal that nothing real came back.
@@ -379,7 +382,7 @@ async function appsListHandler(ctx) {
   });
 }
 
-async function appsInitHandler(ctx) {
+export async function appsInitHandler(ctx) {
   const projectDir = ctx.args.dir
     ? resolveProjectDir(ctx.args.dir)
     : defaultAppProjectDir(slugify(ctx.args.name));
@@ -504,7 +507,7 @@ async function appsCreateHandler(ctx) {
   });
 }
 
-async function appsBuildHandler(ctx) {
+export async function appsBuildHandler(ctx) {
   const projectDir = resolveProjectDir(ctx.args.dir || '.');
   const problems = detectProjectProblems(projectDir);
   if (problems.length) {
@@ -563,13 +566,15 @@ async function closeHarnessResources(sessionNames, testServer, rawOutputDir = nu
   }
 }
 
-async function appsVerifyHandler(ctx) {
+export async function appsVerifyHandler(ctx) {
   const projectDir = resolveProjectDir(ctx.args.dir || '.');
   const problems = detectProjectProblems(projectDir);
   if (problems.length) {
     throw usageError(`Project has problems:\n${problems.map((p) => `  - ${p}`).join('\n')}`);
   }
 
+  const appConfig = await loadAppConfig(projectDir);
+  const isReport = appConfig.kind === 'report';
   const mode = ctx.options.mode || 'stub';
   if (!['stub', 'live'].includes(mode)) {
     throw usageError('--mode must be either "stub" or "live".');
@@ -586,8 +591,10 @@ async function appsVerifyHandler(ctx) {
     if (!ctx.runtime.jwt) {
       throw usageError('Live verify mode requires CLI auth. Run notis login and retry.');
     }
-    linkedState = readLinkedState(projectDir, linkedStateProfileKey(ctx.runtime));
-    if (!linkedState?.app_id) {
+    if (isReport) {
+      if (!ctx.options.documentId || !/^\d+$/.test(String(ctx.options.expectedRevision ?? ''))) throw usageError('Live report verification requires --document-id and --expected-revision of the saved report.');
+    } else linkedState = readLinkedState(projectDir, linkedStateProfileKey(ctx.runtime));
+    if (!isReport && !linkedState?.app_id) {
       throw usageError('Live verify mode requires a linked app. Run `notis apps link <app-id> .` first.');
     }
   }
@@ -599,8 +606,7 @@ async function appsVerifyHandler(ctx) {
   }
 
   const manifest = readManifest(projectDir);
-  const appConfig = await loadAppConfig(projectDir);
-  const listing = inspectListingReadiness(projectDir, appConfig);
+  const listing = isReport ? { ready: true, errors: [], warnings: [] } : inspectListingReadiness(projectDir, appConfig);
   // Store readiness is a publish concern, not a render concern. Verify reports
   // it so the gaps stay visible while the app is still being built; only
   // --listing (and `apps publish`) turn it back into a hard gate.
@@ -609,7 +615,7 @@ async function appsVerifyHandler(ctx) {
   }
   const listingWarnings = [
     ...[...listing.errors, ...listing.warnings].map((message) => `Store readiness: ${message}`),
-    ...findUnknownScreenshotScenarios(projectDir, resolveListingScreenshots(projectDir, appConfig)),
+    ...(isReport ? [] : findUnknownScreenshotScenarios(projectDir, resolveListingScreenshots(projectDir, appConfig))),
   ];
   const routes = routeSelection(manifest, parseRouteSlugs(ctx.options.routes));
   const port = parsePort(ctx.options.port) || await getAvailablePort();
@@ -635,6 +641,7 @@ async function appsVerifyHandler(ctx) {
         slug: appSlug,
         projectDir,
         appId: linkedState?.app_id || 'harness-app',
+        resource: isReport ? { kind: 'report', id: ctx.options.documentId || 'preview', revision: Number(ctx.options.expectedRevision || 0) } : undefined,
       }],
       port,
       harness: {
@@ -708,7 +715,8 @@ async function appsVerifyHandler(ctx) {
         const result = await runHarnessRoute({
           url,
           sessionName: browserSessionName,
-          timeoutMs: Number.parseInt(ctx.globalOptions.timeoutMs || '', 10) || 10_000,
+          timeoutMs: Number.parseInt(ctx.globalOptions.timeoutMs || '', 10) || (mode === 'live' ? 90_000 : 10_000),
+          waitForRuntime: mode === 'live',
           snapshotPath,
         });
         const assertions = assertHarnessResult(
@@ -766,11 +774,7 @@ async function appsVerifyHandler(ctx) {
       },
       summary,
       results,
-      listing: {
-        ready: listing.ready,
-        gated: ctx.options.listing === true,
-        problems: listing.errors,
-      },
+      ...(!isReport ? { listing: { ready: listing.ready, gated: ctx.options.listing === true, problems: listing.errors } } : {}),
     };
 
     if (!keepOpen) await cleanup();

package/src/command-specs/reports.js

@@ -1,82 +1,93 @@
-import { readFileSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { appsCommandSpecs } from './apps.js';
-import { buildArtifact, prepareAppRelease, resolveProjectDir } from '../runtime/app-platform.js';
+import { readFileSync, writeFileSync, rmSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { appsCommandSpecs, appsInitHandler, appsBuildHandler, appsVerifyHandler } from './apps.js';
+import { buildArtifact, prepareAppRelease, resolveProjectDir, loadAppConfig } from '../runtime/app-platform.js';
 import { nextIdempotencyKey, runToolCommand } from './helpers.js';
 import { usageError, EXIT_CODES } from '../runtime/errors.js';
 
-const reuse = (command, name = command) => {
-  const spec = appsCommandSpecs.find(item => item.command_path.join(' ') === `apps ${command}`);
-  return {
-    ...spec,
+async function assertReportProject(ctx) {
+  const dir = resolveProjectDir(ctx.args.dir || '.');
+  if ((await loadAppConfig(dir)).kind !== 'report') throw usageError('Set kind: "report" in notis.config.ts. Reports have no app installation or owned resources.');
+  return dir;
+}
+
+async function initReport(ctx) {
+  const dir = resolveProjectDir(ctx.args.dir || `./${ctx.args.name.toLowerCase().replace(/[^a-z0-9]+/g, '-')}`);
+  const result = await appsInitHandler({ ...ctx, args: { ...ctx.args, dir }, options: {}, output: { emitSuccess: value => value } });
+  writeFileSync(join(dir, 'notis.config.ts'), `import { defineNotisApp } from '@notis/sdk/config';
+export default defineNotisApp({
+  kind: 'report', name: ${JSON.stringify(ctx.args.name)},
+  routes: [{ path: '/', slug: 'home', name: 'Report', default: true }],
+  tools: [],
+});
+`);
+  writeFileSync(join(dir, 'app/page.tsx'), `'use client';
+import { useNotis, NotisCommentBoundary } from '@notis/sdk';
+export default function Report() {
+  const { app } = useNotis();
+  return <NotisCommentBoundary><main className="notis-app-shell space-y-6">
+    <h1 className="text-2xl font-semibold">{app?.name || 'Report'}</h1>
+    <p className="text-muted-foreground">Your report is ready to build.</p>
+  </main></NotisCommentBoundary>;
+}
+`);
+  rmSync(join(dir, 'CHANGELOG.md'), { force: true });
+  return ctx.output.emitSuccess({ ...result, command: 'reports init', hints: [
+    { command: `cd ${dir} && npm install`, reason: 'Install dependencies' },
+    { command: `notis reports build ${dir}`, reason: 'Build the standalone report' },
+  ] });
+}
+
+const localReportCommand = (command, name = command) => {
+  const app = appsCommandSpecs.find(item => item.command_path.join(' ') === `apps ${command}`);
+  return { ...app, command_path: ['reports', name],
+    summary: `${name[0].toUpperCase() + name.slice(1)} a standalone live SDK report.`,
+    when_to_use: 'Author a private standalone document using the shared view runtime; no app or database is required.',
+    args_schema: { ...app.args_schema, options: [...(app.args_schema.options || []).filter(option => !['--listing', '--from <slug>'].includes(option.flags)), ...(command === 'verify' ? [{ flags: '--document-id <id>', description: 'Saved report for live verification.' }, { flags: '--expected-revision <revision>', description: 'Saved report revision for live verification.' }] : [])] },
+    examples: [`notis reports ${name} ${command === 'init' ? '"Weekly report" ./weekly-report' : './weekly-report'}`],
     handler: async ctx => {
-      const output = new Proxy(ctx.output, {
-        get(target, key) {
-          if (key === 'emitSuccess') return result => {
-            const value = { ...result, warnings: (result.warnings || []).filter(warning => !warning.startsWith('Store readiness:')) };
-            if (value.data?.listing) { value.data = { ...value.data }; delete value.data.listing; }
-            return target.emitSuccess(value);
-          };
-          const value = Reflect.get(target, key);
-          return typeof value === 'function' ? value.bind(target) : value;
-        },
-      });
-      return spec.handler({ ...ctx, options: { ...ctx.options, listing: false, ...(name === 'preview' ? { keepOpen: true } : {}) }, output });
-    },
-    command_path: ['reports', name],
-    summary: `${name[0].toUpperCase() + name.slice(1)} a record-owned SDK report locally.${name === 'preview' ? ' Keeps the preview server and browser session open.' : ''}`,
-    args_schema: {
-      ...spec.args_schema,
-      options: (spec.args_schema?.options || []).map(option => option.flags === '--listing'
-        ? { ...option, description: 'Ignored for reports; saving a report does not publish a Store listing.' }
-        : option),
+      if (command === 'init') return initReport(ctx);
+      await assertReportProject(ctx);
+      return (command === 'build' ? appsBuildHandler : appsVerifyHandler)({ ...ctx, options: { ...ctx.options, ...(name === 'preview' ? { keepOpen: true } : {}) } });
     },
-    examples: (spec.examples || []).filter(example => !example.includes('--listing')).map(example => example.replace(`apps ${command}`, `reports ${name}`)),
-    when_to_use: 'Author an independent report without deploying its owning app.',
   };
 };
 export const reportsCommandSpecs = [
-  reuse('init'), reuse('build'), reuse('verify'), reuse('verify', 'preview'),
+  localReportCommand('init'), localReportCommand('build'), localReportCommand('verify'), localReportCommand('verify', 'preview'),
   {
     command_path: ['reports', 'save'],
-    summary: 'Build, verify and save a report into an app-owned database record.',
-    when_to_use: 'Persist an independently authored report, not an app release.',
+    summary: 'Build, verify and save a standalone live report document.',
+    when_to_use: 'Persist an independently owned report, not an app release.',
     args_schema: {
       arguments: [{ token: '[dir]', key: 'dir', description: 'Report source directory.' }],
       options: [
-        { flags: '--database-id <id>', description: 'Required. Owning app database.' },
-        { flags: '--document-id <id>', description: 'Existing record to update or attach to.' },
-        { flags: '--attach', description: 'Attach to an existing non-view record.' },
-        { flags: '--expected-revision <revision>', description: 'Fresh view revision (0 for a record without a view).' },
-        { flags: '--title <title>', description: 'Required, including updates. Record title.' },
+        { flags: '--document-id <id>', description: 'Existing report document to update.' },
+        { flags: '--expected-revision <revision>', description: 'Current saved report revision; required for updates.' },
+        { flags: '--title <title>', description: 'Required, including updates. Document title.' },
         { flags: '--context-file <file>', description: 'Required. UTF-8 readable report content and structure.' },
-        { flags: '--properties-file <file>', description: 'JSON database property values keyed by name.' },
       ],
     },
-    examples: ['notis reports save ./weekly-report --database-id <id> --title \"Weekly review\" --context-file ./context.md'], mutates: true, idempotent: true,
+    examples: ['notis reports save ./weekly-report --title \"Weekly review\" --context-file ./context.md'], mutates: true, idempotent: true,
     backend_call: { type: 'tool', name: 'LOCAL_NOTIS_SAVE_REPORT' },
     async handler(ctx) {
-      const dir = resolveProjectDir(ctx.args.dir || '.');
-      if (!ctx.options.databaseId || !ctx.options.title || !ctx.options.contextFile) throw usageError('--database-id, --title and --context-file are required.');
-      if (ctx.options.documentId && (!/^\d+$/.test(String(ctx.options.expectedRevision ?? '')) || !Number.isSafeInteger(Number(ctx.options.expectedRevision)))) throw usageError('--expected-revision is required for update/attach.');
-      if (ctx.options.attach && !ctx.options.documentId) throw usageError('--attach requires --document-id.');
+      const dir = await assertReportProject(ctx);
+      if (!ctx.options.title || !ctx.options.contextFile) throw usageError('--title and --context-file are required.');
+      if (ctx.options.documentId && (!/^\d+$/.test(String(ctx.options.expectedRevision ?? '')) || !Number.isSafeInteger(Number(ctx.options.expectedRevision)))) throw usageError('--expected-revision is required for update.');
       const context = readFileSync(resolve(ctx.options.contextFile), 'utf8');
-      const properties = ctx.options.propertiesFile ? JSON.parse(readFileSync(resolve(ctx.options.propertiesFile), 'utf8')) : {};
       await buildArtifact(dir, { stdio: ctx.output.isMachineMode() ? 'pipe' : 'inherit' });
       const release = prepareAppRelease(dir);
       try {
         if (release.manifest.routes?.length !== 1) throw usageError('Reports require exactly one SDK route.');
         let verification;
-        const verify = appsCommandSpecs.find(item => item.command_path.join(' ') === 'apps verify');
-        const exit = await verify.handler({ ...ctx, args: { dir: release.projectDir }, options: { skipBuild: true, mode: 'stub' }, output: { ...ctx.output, isMachineMode: () => true, emitSuccess: value => { verification = value; } } });
+        const exit = await appsVerifyHandler({ ...ctx, args: { dir: release.projectDir }, options: { skipBuild: true, mode: 'stub' }, output: { ...ctx.output, isMachineMode: () => true, emitSuccess: value => { verification = value; } } });
         if (exit !== EXIT_CODES.ok || verification?.data?.status !== 'passed') throw usageError('Report verification failed; nothing saved.');
         const files = { ...release.files, ...Object.fromEntries(Object.entries(release.sourceFiles).map(([path, data]) => [`source/${path}`, data])) };
         const result = await runToolCommand({ runtime: { ...ctx.runtime, timeoutMs: Math.max(ctx.runtime.timeoutMs || 0, 90000) }, toolName: 'LOCAL_NOTIS_SAVE_REPORT', mutating: true,
           idempotencyKey: nextIdempotencyKey(ctx.globalOptions), arguments_: {
-            operation: ctx.options.attach ? 'attach' : ctx.options.documentId ? 'update' : 'create',
-            database_id: ctx.options.databaseId, title: ctx.options.title, properties,
+            operation: ctx.options.documentId ? 'update' : 'create',
+            title: ctx.options.title,
             ...(ctx.options.documentId ? { document_id: ctx.options.documentId, expected_revision: Number(ctx.options.expectedRevision) } : {}),
-            report: { schema: 'notis-report/v2', context, artifact: { manifest: release.manifest, files, encoding: 'base64' } },
+            report: { schema: 'notis-report/v3', context, artifact: { manifest: release.manifest, files, encoding: 'base64' } },
           } });
         if (!result?.payload?.document?.id || !result.payload.document.view_revision) throw usageError('Save returned no record identity. Read back before retrying; the outcome may be unknown.');
         return ctx.output.emitSuccess({ command: 'reports save', data: result.payload });

package/src/runtime/agent-browser.js

@@ -228,6 +228,7 @@ export async function runHarnessRoute({
   timeoutMs = 10_000,
   snapshotPath = null,
   designViewports = DEFAULT_DESIGN_VIEWPORTS,
+  waitForRuntime = false,
 }) {
   const opened = await runAgentBrowser(['--session', sessionName, 'open', url], {
     timeoutMs: Math.min(Math.max(timeoutMs, 5000), 30_000),
@@ -244,17 +245,21 @@ export async function runHarnessRoute({
   }
 
   const deadline = Date.now() + timeoutMs;
+  let readySince = null;
   while (Date.now() < deadline) {
     const lastRead = await readHarness(sessionName, 5000);
     if (!lastRead.ok) {
+      readySince = null;
       await delay(250);
       continue;
     }
     const harness = lastRead.harness;
-    if (harness?.mounted || (Array.isArray(harness?.errors) && harness.errors.length > 0)) {
-      await delay(250);
-      break;
-    }
+    if (Array.isArray(harness?.errors) && harness.errors.length > 0) break;
+    const pending = (harness?.runtimeCalls || []).some(call => call?.ok == null);
+    if (harness?.mounted && (!waitForRuntime || !pending)) {
+      readySince ??= Date.now();
+      if (Date.now() - readySince >= 250) break;
+    } else readySince = null;
     await delay(250);
   }
 
@@ -283,8 +288,8 @@ export async function runHarnessRoute({
     }
   }
 
-  const timedOut = !harness.mounted && Date.now() >= deadline;
   const runtimeCalls = Array.isArray(harness.runtimeCalls) ? harness.runtimeCalls : [];
+  const timedOut = (!harness.mounted || (waitForRuntime && runtimeCalls.some(call => call?.ok == null))) && Date.now() >= deadline;
 
   // Design assertions only mean something on a mounted route. Loading
   // placeholders are excused while a runtime call is still in flight.

package/src/runtime/app-platform.js

@@ -286,13 +286,14 @@ export function detectProjectWarnings(projectDir, appConfig = null) {
     appConfig?.capabilities?.workspaceDatabases === 'read';
   if (
     appConfig
+    && appConfig.kind !== 'report'
     && !readsWorkspaceDatabases
     && (!Array.isArray(appConfig.databases) || appConfig.databases.length === 0)
   ) {
     warnings.push('No database references declared in notis.config.ts.');
   }
 
-  if (appConfig) {
+  if (appConfig && appConfig.kind !== 'report') {
     try {
       const listing = inspectListingReadiness(projectDir, appConfig);
       warnings.push(...listing.errors, ...listing.warnings);
@@ -813,6 +814,29 @@ export function generateManifest(appConfig, projectDir) {
     return entry;
   });
 
+  if (appConfig.kind === 'report') {
+    if (routes.length !== 1 || routes[0].collection || routes[0].resourceDeepLinks) {
+      throw usageError('Reports require one standalone route, without app collections or resource deep links.');
+    }
+    if (['databases', 'skills', 'automations', 'onboarding', 'tagline', 'categories', 'author', 'screenshots'].some(key => {
+      const value = appConfig[key];
+      return Array.isArray(value) ? value.length > 0 : Boolean(value);
+    })) throw usageError('Reports cannot own databases, skills, automations or Store metadata.');
+    if (Object.values(appConfig.capabilities || {}).some(value => value !== 'read')) {
+      throw usageError('Reports support read capabilities only; shell grants require an installed app.');
+    }
+    const databaseAccess = appConfig.databaseAccess || [];
+    if (!Array.isArray(databaseAccess) || databaseAccess.some(entry =>
+      !entry || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(entry.id || '') ||
+      !['read', 'write'].includes(entry.access)
+    )) throw usageError('databaseAccess entries require an existing database UUID and read/write access.');
+    return { kind: 'report', version: 1, spec_version: 4,
+      routes: routes.map(route => ({ ...route, default: true, tool_access: { base: { tools: appConfig.tools || [] } } })),
+      bundle: { js: 'bundle/app.js', css: 'bundle/app.css' },
+      tools: appConfig.tools || [], tool_bindings: normalizeAppToolBindings(appConfig.toolBindings),
+      capabilities: normalizeAppCapabilities(appConfig.capabilities), database_access: databaseAccess };
+  }
+
   // Database entries may be a bare slug (structure only) or an object opting
   // into shipping rows to installers. Normalize to the manifest's snake_case.
   const databases = (appConfig.databases || []).map((entry) => {

package/src/runtime/app-test-server.js

@@ -164,6 +164,7 @@ function buildHarnessDescriptor({ state, manifest, appConfig, route, scenario =
   );
 
   return {
+    ...(state.resource ? { resource: state.resource } : {}),
     app: {
       id: state.appId || 'harness-app',
       slug: state.slug,

package/template/.harness/index.html.tmpl

@@ -207,8 +207,8 @@
     }
 
     async function runtimeQuery(body) {
-      if (!apiBase || !jwt || !descriptor.app || !descriptor.app.id) {
-        throw new Error('live harness mode requires apiBase, jwt, and app id');
+      if (!apiBase || !jwt || !(descriptor.resource?.kind === 'report' ? descriptor.resource.id : descriptor.app?.id)) {
+        throw new Error('live harness mode requires apiBase, jwt, and runtime resource identity');
       }
       const response = await fetch(`${String(apiBase).replace(/\/$/, '')}/portal_views/runtime_query`, {
         method: 'POST',
@@ -217,7 +217,9 @@
           Authorization: `Bearer ${jwt}`,
         },
         body: JSON.stringify({
-          app_id: descriptor.app.id,
+          ...(descriptor.resource?.kind === 'report'
+            ? { document_id: descriptor.resource.id, revision: descriptor.resource.revision }
+            : { app_id: descriptor.app.id }),
           route_slug: descriptor.route && descriptor.route.slug,
           ...body,
         }),
@@ -230,7 +232,10 @@
       if (!payload) {
         throw new Error(snippet ? `Runtime response was not JSON: ${snippet}` : 'Runtime response was empty');
       }
-      if (payload.status === 'error' || payload.error) {
+      if (payload.status === 'error' || payload.error || (descriptor.resource?.kind === 'report' && (
+        ['error', 'failed', 'failure'].includes(String(payload.status || '').trim().toLowerCase())
+        || payload.ok === false || payload.success === false || payload.successful === false
+      ))) {
         throw new Error(payload.message || payload.error || 'Runtime request failed');
       }
       return payload;
@@ -238,6 +243,7 @@
 
     function stubRuntime() {
       return {
+        resource: descriptor.resource,
         app: descriptor.app,
         route: descriptor.route,
         context: descriptor.context || {},
@@ -287,6 +293,7 @@
         request: async (path, options) => tracked(
           record('request', { path, options }),
           async () => {
+            if (descriptor.resource?.kind === 'report') throw new Error('Reports access data through declared tools.');
             if (fixtures && fixtures.requests && Object.prototype.hasOwnProperty.call(fixtures.requests, path)) {
               return structuredClone(fixtures.requests[path]);
             }
@@ -349,6 +356,7 @@
         request: async (path, options) => tracked(
           record('request', { path, options }),
           async () => {
+            if (descriptor.resource?.kind === 'report') throw new Error('Reports access data through declared tools.');
             const response = await fetch(`${String(apiBase).replace(/\/$/, '')}${path}`, {
               method: (options && options.method) || 'GET',
               headers: {