@notis_ai/cli 0.2.0-beta.186.1 → 0.2.0-beta.187.1

package/dist/base-skills/notis-cli/SKILL.md

@@ -2,8 +2,8 @@
 name: notis-cli
 description: Use when agents should work through the Notis CLI, especially to develop Notis apps locally or to access Notis, Composio, or MCP tools they do not currently have loaded directly.
 mcp_resource: true
-mcp_tool_patterns: []
-mcp_references: ["references/app-delivery.md", "references/tool-examples.md", "references/native-databases.md", "references/troubleshooting.md"]
+mcp_tool_patterns: ["LOCAL_NOTIS_GET_INTELLIGENCE_POLICY"]
+mcp_references: ["references/app-delivery.md", "references/tool-examples.md", "references/native-databases.md", "references/troubleshooting.md", "references/intelligence.md"]
 ---
 
 # Notis CLI Skill
@@ -137,3 +137,18 @@ also rewrites these links to their published URIs.
 - [Toolkit mental model](references/tool-examples.md)
 - [Native database access](references/native-databases.md)
 - [Supporting commands](references/troubleshooting.md)
+
+## Intelligence for skills and delegated work
+
+Skills request `low`, `medium`, or `high`, never a fixed model name. Discover the
+read-only `LOCAL_NOTIS_GET_INTELLIGENCE_POLICY` tool to obtain the shared `contract`
+and current mapping
+for `notis`, `codex`, or `claude_code` and the requested `level`. Resolve model and
+reasoning effort together at the start of each job; validate the selected options
+with the executing harness. Explicit invocation overrides win. A fixed-model
+harness may inherit and disclose that the level was not applied; an automated
+launcher needing an exact selection stops before side effects if policy is unavailable.
+Repository and installed skills consume that same response; neither needs a
+checkout-relative document. Record actual execution receipts, not the level name, as model provenance. Media
+engines remain separate capabilities selected by their tools. See
+[the intelligence contract](references/intelligence.md) for cross-environment details.

package/dist/base-skills/notis-cli/references/intelligence.md

@@ -0,0 +1,94 @@
+# Agent intelligence levels
+
+This is one shared contract for repository skills and account-installed skills.
+Read it from the `contract` field returned by `LOCAL_NOTIS_GET_INTELLIGENCE_POLICY`,
+directly as a native tool or through the authenticated Notis CLI. The same response
+contains current harness mappings and a `contract_revision` fingerprint. No local
+repository document is a runtime prerequisite. This bundled guide is the source
+served by that lookup, not a separate environment-specific contract.
+
+Skills request **low**, **medium**, or **high**. They never maintain model names,
+version pins, family aliases, effort tables, or price scorecards. The current
+Notis runtime policy is the source of truth, on every operating system and host.
+
+## Choosing a level
+
+| Level | Work |
+| --- | --- |
+| **low** | Bounded extraction, classification against a supplied rubric, formatting, and repetitive generation from complete inputs. |
+| **medium** | Synthesis, writing and reviewing prose from supplied evidence, and moderately complex bounded work. |
+| **high** | The skill default when unspecified: complex reasoning, investigation, coding, code review, and orchestration. |
+
+These are skill defaults, not changes to account or product defaults. The user's
+explicit instruction for this invocation wins: level, exact model, effort,
+harness, or inheritance from the current session. Preserve the scope of that
+override; never save a lasting preference unless asked. Maximum-depth requests
+are invocation overrides, not a fourth Notis level.
+
+## Resolve at execution time
+
+Discover **get current Notis intelligence policy for each harness** through the
+Notis tool catalogue. The read-only tool is `LOCAL_NOTIS_GET_INTELLIGENCE_POLICY`:
+
+```bash
+npx --package @notis_ai/cli@latest -- notis tools exec LOCAL_NOTIS_GET_INTELLIGENCE_POLICY \
+  --arguments '{"harness":"codex","level":"low"}'
+```
+
+Omit arguments to read all levels. Harness keys are `notis`, `codex`, and
+`claude_code`. A local Mac, Windows host, cloud sandbox, or CI runner uses the
+same contract. Cursor or another host must identify its actual execution engine;
+it must not pretend to be a supported harness based on installed binaries.
+
+The projection is generated from the backend native intelligence configuration and external-harness policy. It contains no
+second mapping. Weekly policy changes therefore require no skill edits.
+
+- Resolve **both model and reasoning effort**. Level names are not effort names.
+- Resolve once per delegated job; keep its `policy_revision` and selection stable
+  through claim, generation, retry and completion. A new job gets a fresh policy.
+- Explicit user choices override the selection; validate them with the executing
+  harness. Never substitute another model, buy API capacity, or change accounts
+  because a selection is unavailable.
+- Validate the request against advertised harness capabilities. Policy is not
+  evidence of entitlement, quota, installed support or successful execution.
+- Use native `intelligence_mode` when the Notis delegation interface supports it.
+  External launchers translate the returned selection into their supported options.
+- Do not downgrade or restart the main session to enforce a skill default.
+- A single-model harness can inherit its current configuration and disclose that
+  the requested level was not applied. Unknown or unavailable mappings are not
+  permission to guess a model. Automated launchers that require an exact selection
+  stop before claiming jobs or producing side effects and explain the missing policy.
+- Before this lookup is deployed, use a current runtime-injected policy if present;
+  otherwise use the transparent inheritance behavior above. Do not copy a temporary
+  model table into skills as a rollout workaround.
+
+## Modalities, product assertions and provenance
+
+Image, speech, video, embedding and provider-research engines are capabilities,
+not interchangeable text-reasoning levels. Skills discover the current native
+capability and let its backend select the engine. External scripts requiring an
+exact provider-specific identifier must resolve current supported configuration
+or take an explicit invocation override; they must not pass `low` as an engine ID.
+
+Test specs assert behavior against the current backend configuration, rather than
+freezing last month's model names. Preserve exact comparisons: derive the expected
+identifier from the owning policy or tool configuration, then compare the receipt.
+Do not weaken a routing test to merely check that some model name exists.
+
+Persist **the actual model that ran**, not an intelligence level. Resolve before
+claiming jobs when the identifier participates in a prompt hash or lease contract.
+Verify execution readback before certifying provenance; aliases and requested
+settings are not actual-model receipts. Preserve historical evidence and existing
+records. Do not rewrite an old receipt as today's policy.
+
+## Subscription execution
+
+A level chooses intelligence, not payment authority. Use the current harness's
+sub-agents or the user's subscription CLI. The existing direct-provider approval
+boundary remains in the workspace/account provider-approval policy.
+
+For subscription CLI subprocesses, remove provider API-key/base-URL variables
+from the child environment. Preserve native subscription credentials; never log
+out or rewrite account authentication to enforce a level. Check the harness's
+execution/authentication readback. Resolve only once per job, batch bounded items
+where appropriate, and keep existing concurrency and usage limits.

package/dist/sdk/src/hooks/useHandover.ts

@@ -43,9 +43,8 @@ export interface UseHandoverResult {
  * feedback button should let the user write in their own words.
  *
  * Pass `skill` to bind the work to a skill declared in `notis.config.ts`; the
- * host rejects a key the app does not declare. `autoSend` is accepted for
- * forward compatibility; today's hosts always return `drafted` and let the
- * user press send.
+ * host rejects a key the app does not declare. `autoSend` submits the prepared
+ * message on an active user gesture; background calls still open a draft.
  */
 export function useHandover(): UseHandoverResult {
   const runtime = useNotisRuntime();

package/dist/sdk/src/interactions/shortcuts.tsx

@@ -10,6 +10,7 @@ import React, {
   useState,
   type ReactNode,
 } from 'react';
+import { isInteractionElementVisible } from './visibility';
 
 export type ShortcutScope = 'app' | 'route' | 'collection' | 'detail' | 'modal';
 
@@ -215,6 +216,25 @@ function consumeShortcut(event: KeyboardEvent, definition: ShortcutDefinition):
   void definition.onTrigger(event);
 }
 
+// Apps built before collections stopped binding Escape to an empty selection
+// still register it, which swallows Escape for nothing. With collection items
+// rendered and none selected, leave Escape to the enclosing surface (the Portal
+// closes its frontmost layer, then returns to Inbox).
+function isEmptyCollectionClear(shortcut: ShortcutDefinition, ownerDocument: Document, event: KeyboardEvent): boolean {
+  if (event.key !== 'Escape' || shortcut.id !== 'collection.clear') return false;
+  const items = collectionItems(ownerDocument).filter((item) => isInteractionElementVisible(item as HTMLElement));
+  return items.length > 0 && !items.some((item) => item.getAttribute('aria-selected') === 'true');
+}
+
+/** App views render in open shadow roots, which document queries do not enter. */
+function collectionItems(root: Document | ShadowRoot): Element[] {
+  const items = Array.from(root.querySelectorAll('[data-notis-collection-item-id], [data-notis-row-id]'));
+  for (const element of Array.from(root.querySelectorAll('*'))) {
+    if (element.shadowRoot) items.push(...collectionItems(element.shadowRoot));
+  }
+  return items;
+}
+
 // Native dialogs make the background inert, but document capture listeners still
 // receive their keyboard events. Leave those events to the dialog and its controls.
 function isDialogEvent(event: KeyboardEvent): boolean {
@@ -293,7 +313,8 @@ function registerFallbackShortcut(input: Omit<ShortcutRegistration, 'id' | 'orde
         const token = chordToken(eventChord(event));
         for (const registration of applicableRegistrations(registrations.values())) {
           for (const shortcut of registration.getShortcuts()) {
-            if (shortcut.enabled === false || (editable && !shortcut.allowInEditable) || (event.repeat && !shortcut.allowRepeat)) continue;
+            if (shortcut.enabled === false || (editable && !shortcut.allowInEditable) || (event.repeat && !shortcut.allowRepeat)
+              || isEmptyCollectionClear(shortcut, ownerDocument, event)) continue;
             const match = parseShortcut(shortcut).some(
               (candidate) => candidate.sequence.length === 1 && chordToken(candidate.sequence[0]!) === token,
             );
@@ -407,6 +428,7 @@ function ShortcutProviderRoot({ children }: { children: ReactNode }) {
           .filter((shortcut) => shortcut.enabled !== false)
           .filter((shortcut) => !editable || shortcut.allowInEditable)
           .filter((shortcut) => !event.repeat || shortcut.allowRepeat)
+          .filter((shortcut) => !isEmptyCollectionClear(shortcut, document, event))
           .flatMap(parseShortcut);
         if (candidates.length === 0) continue;
 

package/dist/sdk/src/runtime.ts

@@ -310,9 +310,8 @@ export interface HandoverPayload {
    */
   skill?: string;
   /**
-   * Accepted for forward compatibility. The portal never submits a composer on
-   * the user's behalf today, so every handover resolves `drafted`; `sent` is
-   * reserved for a host that can genuinely dispatch the run.
+   * Submit on an active user gesture when the host supports immediate handover;
+   * background calls still open an editable draft.
    */
   autoSend?: boolean;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@notis_ai/cli",
-  "version": "0.2.0-beta.186.1",
+  "version": "0.2.0-beta.187.1",
   "description": "Agent-first Notis CLI for apps and generic tool execution",
   "type": "module",
   "bin": {