@notis_ai/cli 0.2.0-beta.177.1 → 0.2.0-beta.179.1

package/dist/base-skills/notis-apps/SKILL.md

@@ -46,6 +46,8 @@ For every app UI create/edit task, read both [Design](references/design.md) and
   no-deploy, and explicit-consent requirements. Store publication is separate.
 - Preserve the exact app identity, account/team scope, permissions, and user data.
   Reconcile an uncertain release instead of blindly retrying it.
+- Before Store submission, complete the [publication privacy and portability gate](references/release.md#publication-privacy-and-portability-gate).
+  Public examples must be fictional; never publish the owner's workspace data.
 - Use SDK hooks and declared tools. Let Notis own its sidebar, search, runtime,
   and rendering boundary; do not query host DOM or recreate that chrome in the app.
 

package/dist/base-skills/notis-apps/references/architecture.md

@@ -7,8 +7,11 @@ All Notis apps are built using the Notis CLI, either locally in a repo workspace
 - the portal renders it as a React component inside the portal's React tree
 
 Use standard React pages in `app/`, not Next.js or a custom server. The host
-chooses a trusted shadow root or an isolated Store frame; do not create your own
-iframe, query Portal-owned DOM, or install a window-global runtime. The host owns
+uses one React/Shadow DOM runtime for authored apps, Store installations,
+duplicates and SDK reports. Do not create your own iframe, query Portal-owned
+DOM, or install a window-global runtime. Shadow DOM isolates styles, not
+JavaScript or credentials: loaded bundles share the Portal browser context.
+The host owns
 theme injection and authentication. App code uses SDK hooks and the final tool
 names discovered through the CLI, declared in `notis.config.ts` and enforced by
 the backend. Runtime permissions stay least-authority; releasing an app does not

package/dist/base-skills/notis-apps/references/release.md

@@ -65,6 +65,50 @@ not required for an ordinary Workspace update.
 
 ## Special cases — read only when relevant
 
+### Publication privacy and portability gate
+
+Before submitting or updating a Store listing:
+
+1. Inventory the exact public source archive, listing text/media, database schemas,
+   starter rows, bundled skills (including scripts/references), and automation
+   prompts/configuration. Review their actual contents, not just filenames or
+   a passing secret scan. Exclude personal records, transcripts, health/journal
+   history, customer details, private repository/account identifiers, credentials,
+   local paths, run logs, and private links. Do not merely replace a person's name
+   in otherwise real data. Rebuild examples from wholly fictional scenarios.
+2. Keep live owner databases structure-only (`seedDocuments` absent or false).
+   Opting in seeds the database's live rows, including folders: it is not a
+   fixture selector. Use fictional screenshot fixtures and an explicit, idempotent
+   onboarding demo-data option. If starter rows are needed in the install snapshot,
+   publish only from an isolated, verified fictional dataset; never replace or
+   delete the owner's real data to prepare a submission. When the user asks for
+   examples to come with the app, include them in that verified install snapshot:
+   screenshot fixtures or an optional onboarding seed step do not satisfy this.
+3. Bundle the full dependency closure of every app/automation skill, including
+   referenced helpers and resources. Remove private account-specific defaults;
+   resolve the installer's databases, connections, repository, timezone and
+   delivery choices at runtime. Preserve existing owner's schedules and data.
+4. Declare a source-owned onboarding skill. It must work through available MCP
+   tools or the Notis CLI in any agent harness, without requiring Notis Manager,
+   vendor-specific delegation tools, hidden local files, or publisher access.
+   Discover tools and inspect schemas before calls; reconcile existing resources
+   before creating them. Obtain installer choices before enabling automation or
+   external actions. Installing examples must not activate external deliveries.
+5. Test onboarding as an independent harness-native proof agent using an account
+   isolated from the publisher, then rerun to prove no duplicates. Exercise each
+   route and its interactions with fictional data, including empty/error states.
+   Record exact identities, versions, results and run-created resource cleanup;
+   never use owner records as writable test fixtures.
+   For bundled starter-data claims, install the actual published listing into an
+   empty test account and read back its rows before onboarding or any manual data
+   writes. Confirm the installed listing version and remapped relations; do not
+   substitute an editable-source deployment for this Store-install test.
+6. Inspect the final submitted snapshot and media after packaging. Record the
+   privacy audit and verification against that exact source version. Any unknown
+   provenance, missing dependency, untested onboarding or suspected personal data
+   blocks submission until resolved. Never equate submission with review approval
+   or Store publication.
+
 ### Unreleased container or stale checkout
 
 An unreleased container has no source to pull. Recover its original local source,

package/dist/sdk/src/config.ts

@@ -196,6 +196,10 @@ export interface NotisAppToolBinding {
 }
 
 export interface NotisAppConfig {
+  /** Standalone reports share the view engine without app installation. */
+  kind?: 'app' | 'report';
+  /** Existing data sources, never owned or materialized by a report. */
+  databaseAccess?: Array<{ id: string; access: 'read' | 'write' }>;
   /** URL-safe app slug. Existing apps may still use a display name here. */
   name: string;
   /** Human display title, Raycast-style. Falls back to `name`. */

package/dist/sdk/src/hooks/useNotis.ts

@@ -1,9 +1,10 @@
 'use client';
 
 import { useNotisRuntime } from '../provider';
-import type { AppDescriptor, CollectionItemDetail, DatabaseDescriptor, RouteDescriptor } from '../runtime';
+import type { RuntimeResource, AppDescriptor, CollectionItemDetail, DatabaseDescriptor, RouteDescriptor } from '../runtime';
 
 interface NotisContext {
+  resource: RuntimeResource | null;
   /** App metadata (id, name, icon, description). Null before runtime loads. */
   app: AppDescriptor | null;
   /** Current route descriptor. Null before runtime loads. */
@@ -27,6 +28,7 @@ export function useNotis(): NotisContext {
   const runtime = useNotisRuntime();
 
   return {
+    resource: runtime?.resource ?? null,
     app: runtime?.app ?? null,
     route: runtime?.route ?? null,
     databases: runtime?.databases ?? [],

package/dist/sdk/src/index.ts

@@ -139,6 +139,7 @@ export type {
   NotisMarkdownEditorSavePayload,
   NotisMarkdownEditorSaveResult,
   NotisRuntime,
+  RuntimeResource,
   NotisRuntimeContext,
   NotisRuntimeUI,
   QueryFilter,

package/dist/sdk/src/runtime.ts

@@ -364,7 +364,20 @@ export interface CloudComputerFacts {
   cli_auth: { gh: CloudComputerCliAuthFacts };
 }
 
+export interface RuntimeResource {
+  kind: 'app' | 'report';
+  /** Host-provided adoption eligibility, never report-authored authority. */
+  analytics_eligible?: boolean;
+  id: string;
+  revision: number;
+  name?: string;
+  icon?: string | null;
+  description?: string | null;
+}
+
 export interface NotisRuntime {
+  /** Authenticated runtime identity; app below is presentation metadata only. */
+  resource?: RuntimeResource;
   /** Optional host-scoped in-memory read cache. Older hosts remain supported. */
   queryClient?: NotisQueryClient;
   app: AppDescriptor;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@notis_ai/cli",
-  "version": "0.2.0-beta.177.1",
+  "version": "0.2.0-beta.179.1",
   "description": "Agent-first Notis CLI for apps and generic tool execution",
   "type": "module",
   "bin": {

package/skills/notis-apps/cli.md

@@ -28,7 +28,7 @@ change the package release label, check resource compatibility and deploy as a n
 
 ## Reports
 
-For a record-owned report, use `reports init → build → verify/preview → save` instead of the app deployment workflow above. Author exactly one route, select an existing app-owned database, and supply a readable context file. Revisions preserve the record ID and require its freshly read revision. See the product `notis-reports` skill for source recovery, ownership and readback. These commands do not deploy the owning app or publish a Store listing.
+For a standalone live report, use `reports init → build → verify/preview → save` instead of the app deployment workflow above. Author exactly one route with kind: report, declare its tools, and supply a readable context file. No installed app or database is required. Revisions preserve the record ID and require its freshly read revision. See the product `notis-reports` skill for source recovery, ownership and readback. These commands do not deploy an app or publish a Store listing.
 
 ## Commands
 
@@ -229,85 +229,71 @@ Examples:
 
 ### `npx --package @notis_ai/cli@latest -- notis reports init <name> [dir]`
 
-Init a record-owned SDK report locally.
+Init a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
-
-Options:
-- `--from <slug>` — Start from a published Store app listed by `notis apps scaffolds list`. Downloads its source from the public app registry.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis apps scaffolds list`
-- `npx --package @notis_ai/cli@latest -- notis reports init "Mind the Flo"`
-- `npx --package @notis_ai/cli@latest -- notis reports init "My CRM" --from databases`
-- `npx --package @notis_ai/cli@latest -- notis reports init "My App" ~/code/my-app`
+- `npx --package @notis_ai/cli@latest -- notis reports init "Weekly report" ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports build [dir]`
 
-Build a record-owned SDK report locally.
+Build a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports build`
-- `npx --package @notis_ai/cli@latest -- notis reports build ./my-app`
+- `npx --package @notis_ai/cli@latest -- notis reports build ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports verify [dir]`
 
-Verify a record-owned SDK report locally.
+Verify a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Options:
 - `--routes <slugs>` — Comma-separated route slugs. Default: every route in manifest.
 - `--port <n>` — Loopback port. Default: auto-pick.
 - `--skip-build` — Skip notis apps build; reuse existing .notis/output/.
 - `--mode <mode>` — stub | live. Default stub. Live posts to /portal_views/runtime_query with the CLI JWT and fails routes whose runtime calls all errored.
-- `--listing` — Ignored for reports; saving a report does not publish a Store listing.
 - `--no-browser` — Start the harness server and print URLs; do not drive agent-browser.
 - `--keep-open` — Leave server + browser session running after report (for manual triage).
+- `--document-id <id>` — Saved report for live verification.
+- `--expected-revision <revision>` — Saved report revision for live verification.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports verify`
-- `npx --package @notis_ai/cli@latest -- notis reports verify --routes notes`
-- `npx --package @notis_ai/cli@latest -- notis reports verify --mode live`
-- `npx --package @notis_ai/cli@latest -- notis reports verify --no-browser  # start the harness, drive agent-browser yourself`
+- `npx --package @notis_ai/cli@latest -- notis reports verify ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports preview [dir]`
 
-Preview a record-owned SDK report locally. Keeps the preview server and browser session open.
+Preview a standalone live SDK report.
 
-When to use: Author an independent report without deploying its owning app.
+When to use: Author a private standalone document using the shared view runtime; no app or database is required.
 
 Options:
 - `--routes <slugs>` — Comma-separated route slugs. Default: every route in manifest.
 - `--port <n>` — Loopback port. Default: auto-pick.
 - `--skip-build` — Skip notis apps build; reuse existing .notis/output/.
 - `--mode <mode>` — stub | live. Default stub. Live posts to /portal_views/runtime_query with the CLI JWT and fails routes whose runtime calls all errored.
-- `--listing` — Ignored for reports; saving a report does not publish a Store listing.
 - `--no-browser` — Start the harness server and print URLs; do not drive agent-browser.
 - `--keep-open` — Leave server + browser session running after report (for manual triage).
+- `--document-id <id>` — Saved report for live verification.
+- `--expected-revision <revision>` — Saved report revision for live verification.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports preview`
-- `npx --package @notis_ai/cli@latest -- notis reports preview --routes notes`
-- `npx --package @notis_ai/cli@latest -- notis reports preview --mode live`
-- `npx --package @notis_ai/cli@latest -- notis reports preview --no-browser  # start the harness, drive agent-browser yourself`
+- `npx --package @notis_ai/cli@latest -- notis reports preview ./weekly-report`
 
 ### `npx --package @notis_ai/cli@latest -- notis reports save [dir]`
 
-Build, verify and save a report into an app-owned database record.
+Build, verify and save a standalone live report document.
 
-When to use: Persist an independently authored report, not an app release.
+When to use: Persist an independently owned report, not an app release.
 
 Options:
-- `--database-id <id>` — Required. Owning app database.
-- `--document-id <id>` — Existing record to update or attach to.
-- `--attach` — Attach to an existing non-view record.
-- `--expected-revision <revision>` — Fresh view revision (0 for a record without a view).
-- `--title <title>` — Required, including updates. Record title.
+- `--document-id <id>` — Existing report document to update.
+- `--expected-revision <revision>` — Current saved report revision; required for updates.
+- `--title <title>` — Required, including updates. Document title.
 - `--context-file <file>` — Required. UTF-8 readable report content and structure.
-- `--properties-file <file>` — JSON database property values keyed by name.
 
 Examples:
-- `npx --package @notis_ai/cli@latest -- notis reports save ./weekly-report --database-id <id> --title "Weekly review" --context-file ./context.md`
+- `npx --package @notis_ai/cli@latest -- notis reports save ./weekly-report --title "Weekly review" --context-file ./context.md`

package/src/command-specs/apps.js

@@ -276,6 +276,9 @@ function assertHarnessResult(result, route, databaseSlugs, mode = 'stub', capabi
     });
   }
   if (mode === 'live') {
+    if (runtimeCalls.some(call => call?.ok == null)) {
+      assertions.push({ ok: false, code: 'runtime_calls_pending', message: 'Live verification ended before every started runtime call settled.' });
+    }
     // In live mode an app that catches every failed call and renders its error
     // state still mounts cleanly, so the render assertions above all pass. Only
     // the recorded outcomes reveal that nothing real came back.
@@ -379,7 +382,7 @@ async function appsListHandler(ctx) {
   });
 }
 
-async function appsInitHandler(ctx) {
+export async function appsInitHandler(ctx) {
   const projectDir = ctx.args.dir
     ? resolveProjectDir(ctx.args.dir)
     : defaultAppProjectDir(slugify(ctx.args.name));
@@ -504,7 +507,7 @@ async function appsCreateHandler(ctx) {
   });
 }
 
-async function appsBuildHandler(ctx) {
+export async function appsBuildHandler(ctx) {
   const projectDir = resolveProjectDir(ctx.args.dir || '.');
   const problems = detectProjectProblems(projectDir);
   if (problems.length) {
@@ -563,13 +566,15 @@ async function closeHarnessResources(sessionNames, testServer, rawOutputDir = nu
   }
 }
 
-async function appsVerifyHandler(ctx) {
+export async function appsVerifyHandler(ctx) {
   const projectDir = resolveProjectDir(ctx.args.dir || '.');
   const problems = detectProjectProblems(projectDir);
   if (problems.length) {
     throw usageError(`Project has problems:\n${problems.map((p) => `  - ${p}`).join('\n')}`);
   }
 
+  const appConfig = await loadAppConfig(projectDir);
+  const isReport = appConfig.kind === 'report';
   const mode = ctx.options.mode || 'stub';
   if (!['stub', 'live'].includes(mode)) {
     throw usageError('--mode must be either "stub" or "live".');
@@ -586,8 +591,10 @@ async function appsVerifyHandler(ctx) {
     if (!ctx.runtime.jwt) {
       throw usageError('Live verify mode requires CLI auth. Run notis login and retry.');
     }
-    linkedState = readLinkedState(projectDir, linkedStateProfileKey(ctx.runtime));
-    if (!linkedState?.app_id) {
+    if (isReport) {
+      if (!ctx.options.documentId || !/^\d+$/.test(String(ctx.options.expectedRevision ?? ''))) throw usageError('Live report verification requires --document-id and --expected-revision of the saved report.');
+    } else linkedState = readLinkedState(projectDir, linkedStateProfileKey(ctx.runtime));
+    if (!isReport && !linkedState?.app_id) {
       throw usageError('Live verify mode requires a linked app. Run `notis apps link <app-id> .` first.');
     }
   }
@@ -599,8 +606,7 @@ async function appsVerifyHandler(ctx) {
   }
 
   const manifest = readManifest(projectDir);
-  const appConfig = await loadAppConfig(projectDir);
-  const listing = inspectListingReadiness(projectDir, appConfig);
+  const listing = isReport ? { ready: true, errors: [], warnings: [] } : inspectListingReadiness(projectDir, appConfig);
   // Store readiness is a publish concern, not a render concern. Verify reports
   // it so the gaps stay visible while the app is still being built; only
   // --listing (and `apps publish`) turn it back into a hard gate.
@@ -609,7 +615,7 @@ async function appsVerifyHandler(ctx) {
   }
   const listingWarnings = [
     ...[...listing.errors, ...listing.warnings].map((message) => `Store readiness: ${message}`),
-    ...findUnknownScreenshotScenarios(projectDir, resolveListingScreenshots(projectDir, appConfig)),
+    ...(isReport ? [] : findUnknownScreenshotScenarios(projectDir, resolveListingScreenshots(projectDir, appConfig))),
   ];
   const routes = routeSelection(manifest, parseRouteSlugs(ctx.options.routes));
   const port = parsePort(ctx.options.port) || await getAvailablePort();
@@ -635,6 +641,7 @@ async function appsVerifyHandler(ctx) {
         slug: appSlug,
         projectDir,
         appId: linkedState?.app_id || 'harness-app',
+        resource: isReport ? { kind: 'report', id: ctx.options.documentId || 'preview', revision: Number(ctx.options.expectedRevision || 0) } : undefined,
       }],
       port,
       harness: {
@@ -708,7 +715,8 @@ async function appsVerifyHandler(ctx) {
         const result = await runHarnessRoute({
           url,
           sessionName: browserSessionName,
-          timeoutMs: Number.parseInt(ctx.globalOptions.timeoutMs || '', 10) || 10_000,
+          timeoutMs: Number.parseInt(ctx.globalOptions.timeoutMs || '', 10) || (mode === 'live' ? 90_000 : 10_000),
+          waitForRuntime: mode === 'live',
           snapshotPath,
         });
         const assertions = assertHarnessResult(
@@ -766,11 +774,7 @@ async function appsVerifyHandler(ctx) {
       },
       summary,
       results,
-      listing: {
-        ready: listing.ready,
-        gated: ctx.options.listing === true,
-        problems: listing.errors,
-      },
+      ...(!isReport ? { listing: { ready: listing.ready, gated: ctx.options.listing === true, problems: listing.errors } } : {}),
     };
 
     if (!keepOpen) await cleanup();
@@ -931,6 +935,7 @@ async function appsScreenshotHandler(ctx) {
         sessionName: captureSessionName,
         screenshotPath: browserScreenshotPath,
         focusSelector: ctx.options.raw ? null : focus,
+        frameContent: !ctx.options.raw,
         width,
         height,
         timeoutMs: Number.parseInt(ctx.globalOptions.timeoutMs || '', 10) || 15_000,
@@ -945,7 +950,7 @@ async function appsScreenshotHandler(ctx) {
             height,
             accent: appConfig.accent,
             seed: appConfig.name || manifest.app?.name || appSlug,
-            focused: Boolean(focus),
+            focused: Boolean(result.framing?.focus_selector),
             theme: theme || 'light',
           });
         } catch (error) {

package/src/command-specs/reports.js

@@ -1,82 +1,93 @@
-import { readFileSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { appsCommandSpecs } from './apps.js';
-import { buildArtifact, prepareAppRelease, resolveProjectDir } from '../runtime/app-platform.js';
+import { readFileSync, writeFileSync, rmSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { appsCommandSpecs, appsInitHandler, appsBuildHandler, appsVerifyHandler } from './apps.js';
+import { buildArtifact, prepareAppRelease, resolveProjectDir, loadAppConfig } from '../runtime/app-platform.js';
 import { nextIdempotencyKey, runToolCommand } from './helpers.js';
 import { usageError, EXIT_CODES } from '../runtime/errors.js';
 
-const reuse = (command, name = command) => {
-  const spec = appsCommandSpecs.find(item => item.command_path.join(' ') === `apps ${command}`);
-  return {
-    ...spec,
+async function assertReportProject(ctx) {
+  const dir = resolveProjectDir(ctx.args.dir || '.');
+  if ((await loadAppConfig(dir)).kind !== 'report') throw usageError('Set kind: "report" in notis.config.ts. Reports have no app installation or owned resources.');
+  return dir;
+}
+
+async function initReport(ctx) {
+  const dir = resolveProjectDir(ctx.args.dir || `./${ctx.args.name.toLowerCase().replace(/[^a-z0-9]+/g, '-')}`);
+  const result = await appsInitHandler({ ...ctx, args: { ...ctx.args, dir }, options: {}, output: { emitSuccess: value => value } });
+  writeFileSync(join(dir, 'notis.config.ts'), `import { defineNotisApp } from '@notis/sdk/config';
+export default defineNotisApp({
+  kind: 'report', name: ${JSON.stringify(ctx.args.name)},
+  routes: [{ path: '/', slug: 'home', name: 'Report', default: true }],
+  tools: [],
+});
+`);
+  writeFileSync(join(dir, 'app/page.tsx'), `'use client';
+import { useNotis, NotisCommentBoundary } from '@notis/sdk';
+export default function Report() {
+  const { app } = useNotis();
+  return <NotisCommentBoundary><main className="notis-app-shell space-y-6">
+    <h1 className="text-2xl font-semibold">{app?.name || 'Report'}</h1>
+    <p className="text-muted-foreground">Your report is ready to build.</p>
+  </main></NotisCommentBoundary>;
+}
+`);
+  rmSync(join(dir, 'CHANGELOG.md'), { force: true });
+  return ctx.output.emitSuccess({ ...result, command: 'reports init', hints: [
+    { command: `cd ${dir} && npm install`, reason: 'Install dependencies' },
+    { command: `notis reports build ${dir}`, reason: 'Build the standalone report' },
+  ] });
+}
+
+const localReportCommand = (command, name = command) => {
+  const app = appsCommandSpecs.find(item => item.command_path.join(' ') === `apps ${command}`);
+  return { ...app, command_path: ['reports', name],
+    summary: `${name[0].toUpperCase() + name.slice(1)} a standalone live SDK report.`,
+    when_to_use: 'Author a private standalone document using the shared view runtime; no app or database is required.',
+    args_schema: { ...app.args_schema, options: [...(app.args_schema.options || []).filter(option => !['--listing', '--from <slug>'].includes(option.flags)), ...(command === 'verify' ? [{ flags: '--document-id <id>', description: 'Saved report for live verification.' }, { flags: '--expected-revision <revision>', description: 'Saved report revision for live verification.' }] : [])] },
+    examples: [`notis reports ${name} ${command === 'init' ? '"Weekly report" ./weekly-report' : './weekly-report'}`],
     handler: async ctx => {
-      const output = new Proxy(ctx.output, {
-        get(target, key) {
-          if (key === 'emitSuccess') return result => {
-            const value = { ...result, warnings: (result.warnings || []).filter(warning => !warning.startsWith('Store readiness:')) };
-            if (value.data?.listing) { value.data = { ...value.data }; delete value.data.listing; }
-            return target.emitSuccess(value);
-          };
-          const value = Reflect.get(target, key);
-          return typeof value === 'function' ? value.bind(target) : value;
-        },
-      });
-      return spec.handler({ ...ctx, options: { ...ctx.options, listing: false, ...(name === 'preview' ? { keepOpen: true } : {}) }, output });
-    },
-    command_path: ['reports', name],
-    summary: `${name[0].toUpperCase() + name.slice(1)} a record-owned SDK report locally.${name === 'preview' ? ' Keeps the preview server and browser session open.' : ''}`,
-    args_schema: {
-      ...spec.args_schema,
-      options: (spec.args_schema?.options || []).map(option => option.flags === '--listing'
-        ? { ...option, description: 'Ignored for reports; saving a report does not publish a Store listing.' }
-        : option),
+      if (command === 'init') return initReport(ctx);
+      await assertReportProject(ctx);
+      return (command === 'build' ? appsBuildHandler : appsVerifyHandler)({ ...ctx, options: { ...ctx.options, ...(name === 'preview' ? { keepOpen: true } : {}) } });
     },
-    examples: (spec.examples || []).filter(example => !example.includes('--listing')).map(example => example.replace(`apps ${command}`, `reports ${name}`)),
-    when_to_use: 'Author an independent report without deploying its owning app.',
   };
 };
 export const reportsCommandSpecs = [
-  reuse('init'), reuse('build'), reuse('verify'), reuse('verify', 'preview'),
+  localReportCommand('init'), localReportCommand('build'), localReportCommand('verify'), localReportCommand('verify', 'preview'),
   {
     command_path: ['reports', 'save'],
-    summary: 'Build, verify and save a report into an app-owned database record.',
-    when_to_use: 'Persist an independently authored report, not an app release.',
+    summary: 'Build, verify and save a standalone live report document.',
+    when_to_use: 'Persist an independently owned report, not an app release.',
     args_schema: {
       arguments: [{ token: '[dir]', key: 'dir', description: 'Report source directory.' }],
       options: [
-        { flags: '--database-id <id>', description: 'Required. Owning app database.' },
-        { flags: '--document-id <id>', description: 'Existing record to update or attach to.' },
-        { flags: '--attach', description: 'Attach to an existing non-view record.' },
-        { flags: '--expected-revision <revision>', description: 'Fresh view revision (0 for a record without a view).' },
-        { flags: '--title <title>', description: 'Required, including updates. Record title.' },
+        { flags: '--document-id <id>', description: 'Existing report document to update.' },
+        { flags: '--expected-revision <revision>', description: 'Current saved report revision; required for updates.' },
+        { flags: '--title <title>', description: 'Required, including updates. Document title.' },
         { flags: '--context-file <file>', description: 'Required. UTF-8 readable report content and structure.' },
-        { flags: '--properties-file <file>', description: 'JSON database property values keyed by name.' },
       ],
     },
-    examples: ['notis reports save ./weekly-report --database-id <id> --title \"Weekly review\" --context-file ./context.md'], mutates: true, idempotent: true,
+    examples: ['notis reports save ./weekly-report --title \"Weekly review\" --context-file ./context.md'], mutates: true, idempotent: true,
     backend_call: { type: 'tool', name: 'LOCAL_NOTIS_SAVE_REPORT' },
     async handler(ctx) {
-      const dir = resolveProjectDir(ctx.args.dir || '.');
-      if (!ctx.options.databaseId || !ctx.options.title || !ctx.options.contextFile) throw usageError('--database-id, --title and --context-file are required.');
-      if (ctx.options.documentId && (!/^\d+$/.test(String(ctx.options.expectedRevision ?? '')) || !Number.isSafeInteger(Number(ctx.options.expectedRevision)))) throw usageError('--expected-revision is required for update/attach.');
-      if (ctx.options.attach && !ctx.options.documentId) throw usageError('--attach requires --document-id.');
+      const dir = await assertReportProject(ctx);
+      if (!ctx.options.title || !ctx.options.contextFile) throw usageError('--title and --context-file are required.');
+      if (ctx.options.documentId && (!/^\d+$/.test(String(ctx.options.expectedRevision ?? '')) || !Number.isSafeInteger(Number(ctx.options.expectedRevision)))) throw usageError('--expected-revision is required for update.');
       const context = readFileSync(resolve(ctx.options.contextFile), 'utf8');
-      const properties = ctx.options.propertiesFile ? JSON.parse(readFileSync(resolve(ctx.options.propertiesFile), 'utf8')) : {};
       await buildArtifact(dir, { stdio: ctx.output.isMachineMode() ? 'pipe' : 'inherit' });
       const release = prepareAppRelease(dir);
       try {
         if (release.manifest.routes?.length !== 1) throw usageError('Reports require exactly one SDK route.');
         let verification;
-        const verify = appsCommandSpecs.find(item => item.command_path.join(' ') === 'apps verify');
-        const exit = await verify.handler({ ...ctx, args: { dir: release.projectDir }, options: { skipBuild: true, mode: 'stub' }, output: { ...ctx.output, isMachineMode: () => true, emitSuccess: value => { verification = value; } } });
+        const exit = await appsVerifyHandler({ ...ctx, args: { dir: release.projectDir }, options: { skipBuild: true, mode: 'stub' }, output: { ...ctx.output, isMachineMode: () => true, emitSuccess: value => { verification = value; } } });
         if (exit !== EXIT_CODES.ok || verification?.data?.status !== 'passed') throw usageError('Report verification failed; nothing saved.');
         const files = { ...release.files, ...Object.fromEntries(Object.entries(release.sourceFiles).map(([path, data]) => [`source/${path}`, data])) };
         const result = await runToolCommand({ runtime: { ...ctx.runtime, timeoutMs: Math.max(ctx.runtime.timeoutMs || 0, 90000) }, toolName: 'LOCAL_NOTIS_SAVE_REPORT', mutating: true,
           idempotencyKey: nextIdempotencyKey(ctx.globalOptions), arguments_: {
-            operation: ctx.options.attach ? 'attach' : ctx.options.documentId ? 'update' : 'create',
-            database_id: ctx.options.databaseId, title: ctx.options.title, properties,
+            operation: ctx.options.documentId ? 'update' : 'create',
+            title: ctx.options.title,
             ...(ctx.options.documentId ? { document_id: ctx.options.documentId, expected_revision: Number(ctx.options.expectedRevision) } : {}),
-            report: { schema: 'notis-report/v2', context, artifact: { manifest: release.manifest, files, encoding: 'base64' } },
+            report: { schema: 'notis-report/v3', context, artifact: { manifest: release.manifest, files, encoding: 'base64' } },
           } });
         if (!result?.payload?.document?.id || !result.payload.document.view_revision) throw usageError('Save returned no record identity. Read back before retrying; the outcome may be unknown.');
         return ctx.output.emitSuccess({ command: 'reports save', data: result.payload });