@notis_ai/cli 0.2.0-beta.196.1 → 0.2.0-beta.198.1

package/dist/base-skills/notis-apps/SKILL.md

@@ -84,9 +84,10 @@ from deploying an installed Space and requires the user's explicit authority.
 Existing report rows render through `<ReportFrame>` in their database's view.
 Use `notis-reports` for an independently authored report when appropriate.
 
-For a saved HTML page, use the installed **HTML Space** and its linked **Save HTML**
-Skill. That Skill owns the row-first upload-and-attach workflow. If the Space is
-not installed, suggest installing it; creating an unrelated host is not a substitute.
+Saved HTML pages and reports are notes in **Notis Notes**: save them with the
+**Save HTML** Skill that comes with Notes, which owns the row-first
+upload-and-attach workflow (see `notis-reports`). If Notes is not installed,
+suggest installing it; creating an unrelated host is not a substitute.
 
 [Context sharing](references/context.md) keeps selected text and annotations as
 unsent reference context. Page context, memory hits and source content are not

package/dist/base-skills/notis-apps/references/sdk.md

@@ -34,7 +34,7 @@ for loading/error/empty states and explicit read caching.
 
 | Component | Contract |
 | --- | --- |
-| `<DocumentPage recordKey>` | The full page of a record that is the view's main content (a note, a document): breadcrumb, Saving or Saved, '...' menu, cover, icon, title, meta strip, properties that save automatically, collaborative body. Slots `breadcrumb`, `actions`, `menuItems`, `aboveBody`, `belowBody`; toggles `share` (off by default), `header`, `meta`, `properties`, `width`; `onSaved`; `layout` to rearrange its parts. Pair with `DocumentPageSkeleton` and `usePrefetchRecord()`. Until the Notis CLI you build with exports it (`spaces build` replaces the Space's `packages/sdk` with the CLI's own SDK, and older ones have no `DocumentPage`, so the import fails the build), reach the same host page through `useNotisRuntime().ui?.DocumentPage` and fall back to `DocumentEditor` when it is missing, as the Notes Spaces do in `lib/document-page.tsx`. |
+| `<DocumentPage recordKey>` | The full page of a record that is the view's main content (a note, a document): breadcrumb, Saving or Saved, '...' menu, cover, icon, title, meta strip, properties that save automatically, collaborative body. Slots `breadcrumb`, `actions`, `menuItems`, `aboveBody`, `belowBody`; toggles `share` (off by default, never offered for a report record), `header`, `meta`, `properties`, `width`; `viewer: 'html'` opens a record whose one stored `.html` file is the page (such as an HTML page saved in Notis Notes) full height under the toolbar, without header, meta, properties or body editor; `onSaved`; `layout` to rearrange its parts. Pair with `DocumentPageSkeleton` and `usePrefetchRecord()`. Until the Notis CLI you build with exports it (`spaces build` replaces the Space's `packages/sdk` with the CLI's own SDK, and older ones have no `DocumentPage`, so the import fails the build), reach the same host page through `useNotisRuntime().ui?.DocumentPage` and fall back to `DocumentEditor` when it is missing, as the Notes Spaces do in `lib/document-page.tsx`. |
 | `<DocumentEditor recordKey>` | Native collaborative body, properties, images and attachments. With separate properties use `showProperties={false}`. |
 | `<RecordProperties recordKey>` | Native revision-checked property editing. |
 | `<HtmlFrame recordKey>` | Attached HTML under viewer CSP and an opaque-origin sandbox. Source cannot relax that boundary. |
@@ -44,6 +44,8 @@ for loading/error/empty states and explicit read caching.
 The published Space declares the database binding; the server rechecks record
 scope and binding revision. A Site exposes read-only body/property snapshots and
 HTML for its pinned record, including a declared non-collection record param.
+A report row (`<ReportFrame>`) cannot be shared as a Site; a report saved as an
+HTML file can.
 It has no upload, collaboration credential, authoring controls or sharing mutation.
 Preview source does not gain live record editing. No app-owned credentials or
 filesystem URLs belong in component props.

package/dist/base-skills/notis-apps/references/views.md

@@ -127,7 +127,7 @@ because a pending main view cannot yet open one.
 ## Rendering and memory
 
 Choose [memory](memory.md) deliberately. `chrome: 'hidden'` is for full-screen
-presentations such as the HTML Space; ordinary collection views keep Portal chrome.
+presentations; ordinary collection views keep Portal chrome.
 A Space whose published view hides chrome starts hidden from each person's sidebar,
 like Skill review Spaces; it stays reachable by link and search, and each person
 can show it from the sidebar's hidden Spaces list or the Space's menu.

package/dist/base-skills/notis-cli/SKILL.md

@@ -38,11 +38,13 @@ The CLI bundles this `notis-cli` base skill and refreshes its canonical copy und
 
 A profile is one account paired with one API endpoint. Profiles live side by side; switching between them never signs any of them out.
 
-- `npx --package @notis_ai/cli@latest -- notis profile list` — every profile on this machine, with its endpoint, user, and whether it is signed in. The active one is marked.
-- `npx --package @notis_ai/cli@latest -- notis profile use <name>` — change which account subsequent commands run as.
-- `npx --package @notis_ai/cli@latest -- notis --profile <name> <command>` — run a single command as another account without changing the active one.
-- `npx --package @notis_ai/cli@latest -- notis login --profile <name>` — add an account. The existing profiles keep their credentials.
-- `npx --package @notis_ai/cli@latest -- notis logout` — sign out of the active profile only; pass `--all-profiles` to clear every one.
+Notis Desktop signs the CLI in for every account saved in the app, one profile each. `default` keeps its name; each added account gets a profile named after its email with `@` turned into `-` (for example `flo-mindtheflo.com`), and Beta Desktop adds `-beta`. Switching accounts in Desktop never changes the active profile. Only the active profile's skills are linked into Claude Code, Codex and Cursor; every other account's skills sync into their own folder. Signing an account out of Desktop signs it out of the CLI on this computer and removes the profile and skills Desktop made for it. If that was the active profile, the CLI switches to the account Desktop opens next; with no other signed-in Desktop account it stays signed out. Profiles made with `notis login` are never removed or picked automatically.
+
+- `npx --package @notis_ai/cli@latest -- notis profile list`: every profile on this machine, with its endpoint, user, and whether it is signed in. The active one is marked.
+- `npx --package @notis_ai/cli@latest -- notis profile use <name>`: change which account subsequent commands run as, and link that account's skills into the agent folders straight away.
+- `npx --package @notis_ai/cli@latest -- notis --profile <name> <command>`: run a single command as another account without changing the active one.
+- `npx --package @notis_ai/cli@latest -- notis login --profile <name>`: add an account. The existing profiles keep their credentials.
+- `npx --package @notis_ai/cli@latest -- notis logout`: sign this computer out of the active profile only; the account stays signed in on other computers. Pass `--all-profiles` to clear every profile on this computer.
 
 Read the profile before acting on the user's data. `notis whoami` reports the account and endpoint a command will hit; if that is not the account the user meant, switch profiles rather than proceeding.
 

package/dist/base-skills/notis-query/references/documents.md

@@ -48,9 +48,10 @@ uncertain upload retries only the identical byte/intent request; it never replac
 an existing shared retry object. Preserve previous files unless the user asked
 for their removal.
 
-For HTML pages, use the installed HTML Space's linked Save HTML Skill, which owns
-its complete save/update/sharing workflow. Suggest installing that Space when
-absent. Deliver its record view link, not the raw file storage location.
+For HTML pages and reports, use the Save HTML Skill that comes with Notis Notes,
+which owns their complete save/update/sharing workflow (see `notis-reports`).
+Suggest installing Notis Notes when absent. Deliver the note's Notes link, not the
+raw file storage location.
 
 ## Fresh memory evidence
 

package/dist/sdk/src/components/DocumentPage.tsx

@@ -3,7 +3,7 @@
 import { useCallback, useRef, type CSSProperties, type ReactElement } from 'react';
 import { useNotisRuntime } from '../provider';
 import { DocumentEditor } from './DocumentEditor';
-import { ShareControl } from './RecordComponents';
+import { HtmlFrame, ShareControl } from './RecordComponents';
 import { Skeleton } from './Skeleton';
 import type { NotisDocumentPageProps } from '../runtime';
 
@@ -69,6 +69,7 @@ export function DocumentPageSkeleton({ width = 'standard', className, label }: {
  * Shown by hosts that predate DocumentPage: the same record, with the editor these hosts already have.
  * menuItems show as plain toolbar buttons and onSaved is called when a save finishes (title null);
  * layout, header parts, meta and width options other than the column are not available there.
+ * With viewer 'html' the host's HtmlFrame replaces the editor.
  */
 function DocumentPageFallback(props: NotisDocumentPageProps) {
   const t = useCopy();
@@ -99,12 +100,13 @@ function DocumentPageFallback(props: NotisDocumentPageProps) {
         style={{ background: 'none', border: 0, padding: '4px 8px', borderRadius: 6, cursor: item.disabled ? 'default' : 'pointer', font: 'inherit', fontSize: 13,
           color: item.destructive ? 'hsl(var(--destructive))' : 'hsl(var(--muted-foreground))', opacity: item.disabled ? 0.5 : 1 }}>{item.label}</button>)}
     </div> : null}
+    {props.viewer === 'html' ? <HtmlFrame recordKey={recordKey} /> :
     <div style={{ ...columnStyle(width), padding: '24px 16px 96px', display: 'flex', flexDirection: 'column', gap: 20 }}>
       {aboveBody}
       <DocumentEditor recordKey={recordKey} variant={props.header === false ? 'body' : 'full'} showProperties={props.properties !== 'hidden'}
         readOnly={readOnly} onDirtyChange={props.onDirtyChange} onSavingChange={savingChange} />
       {belowBody}
-    </div>
+    </div>}
   </div>;
 }
 
@@ -114,7 +116,8 @@ function DocumentPageFallback(props: NotisDocumentPageProps) {
  * automatically, and the collaborative body with presence. The host (Portal) draws it and keeps one
  * save queue for the whole record. Files open in their viewer under the header; HTML and reports show
  * only the toolbar (breadcrumb, actions, Share, '...' menu) above their frame, with no header, meta,
- * properties, aboveBody or belowBody.
+ * properties, aboveBody or belowBody. `viewer: 'html'` opens a record whose one stored `.html` file is
+ * the page (for example a note that keeps a saved HTML report) the same way.
  *
  * ```tsx
  * if (params.note) return <DocumentPage recordKey={params.note}

package/dist/sdk/src/runtime.ts

@@ -331,6 +331,11 @@ export interface NotisDocumentPageProps extends NotisRecordProps {
   belowBody?: ReactNode;
   /** Column width: standard (900px, as Beta), wide (1200px) or full. */
   width?: 'standard' | 'wide' | 'full';
+  /**
+   * 'html': the record's one stored `.html` file is the page. It opens full height under the toolbar,
+   * like an HTML record, without the header, meta, properties or body editor.
+   */
+  viewer?: 'html';
   readOnly?: boolean;
   onDirtyChange?: (dirty: boolean) => void;
   onSavingChange?: (saving: boolean) => void;
@@ -442,8 +447,8 @@ export interface HandoverResult {
  * The user's cloud computer, as far as an app may see it.
  *
  * `exists` is false when the user has never had a sandbox provisioned. A
- * `status` of anything other than `'running'` means the VM is asleep; reading
- * these facts never wakes it.
+ * `status` is the last observed VM state; `freshness` and `observed_at` describe
+ * its age. Reading these facts never wakes the VM.
  */
 export interface CloudComputerSandboxFacts {
   exists: boolean;
@@ -451,6 +456,8 @@ export interface CloudComputerSandboxFacts {
   provider: string | null;
   created_at: string | null;
   updated_at: string | null;
+  observed_at?: string | null;
+  freshness?: 'fresh' | 'stale' | 'unknown';
 }
 
 /**
@@ -465,6 +472,7 @@ export interface CloudComputerCliAuthFacts {
   authenticated: boolean | null;
   account: string | null;
   checked_at: string | null;
+  freshness?: 'fresh' | 'stale' | 'unknown';
   reason: string | null;
 }
 

package/dist/skill-sync/index.js

@@ -1,6 +1,7 @@
 // src/runtime/skill-sync/index.ts
 import { createHash as createHash4 } from "node:crypto";
-import { join } from "node:path";
+import { promises as fs3 } from "node:fs";
+import { dirname, join } from "node:path";
 
 // src/runtime/skill-sync/types.ts
 var DEFAULT_AGENT_TARGETS = {
@@ -113,8 +114,16 @@ function previousNativeState(state, skill) {
 function nativeLocalReady(skill, local) {
   return Boolean(local?.nativeFilesCurrent && local.folderHash === local.nativeBaseFolderHash && local.cloudId === skill.id && local.nativeScope === skill.native_scope && sameNativeReference(local.nativeReference, skill.native_reference));
 }
-function nativeLinkRows(response, locals) {
-  return response.skills.map((skill) => isNativeSkill(skill) && !nativeLocalReady(skill, locals.find((row) => row.name === skill.name)) ? { ...skill, status: "disabled" } : skill);
+function pendingLegacyUpgrade(skill, local, state) {
+  if (!isNativeSkill(skill) || !local || local.nativeReference || local.cloudId) return false;
+  const previous = previousNativeState(state, skill);
+  return Boolean(previous && !previous.nativeReference);
+}
+function nativeLinkRows(response, locals, state) {
+  return response.skills.map((skill) => {
+    const local = locals.find((row) => row.name === skill.name);
+    return isNativeSkill(skill) && !nativeLocalReady(skill, local) && !(state && pendingLegacyUpgrade(skill, local, state)) ? { ...skill, status: "disabled" } : skill;
+  });
 }
 function retainMissingNativeState(previous, next) {
   const present = new Set(Object.values(next.skills).map((row) => row.cloudId));
@@ -896,7 +905,12 @@ async function replaceSkillDirectoryAtomically(skillDir, populateDir, preserve)
     }
     await populateDir(stagingDir);
     if (preserve && await pathExists(skillDir)) {
-      await preserveUnmanagedFiles(skillDir, stagingDir, preserve.previouslyApplied, preserve.native);
+      await preserveUnmanagedFiles(
+        skillDir,
+        stagingDir,
+        preserve.previouslyApplied,
+        preserve.native && !preserve.legacyBaseline
+      );
     }
     if (preserve?.native) {
       const markerPath = path.join(stagingDir, NATIVE_IDENTITY_FILE);
@@ -993,7 +1007,9 @@ async function writeCloudSkillToDisk(skill, bundleBytes, paths = DEFAULT_SYNC_PA
   const preserve = {
     previouslyApplied: options.previouslyApplied,
     expectedFolderHash: options.expectedFolderHash,
-    native: isNativeSkill(skill)
+    native: isNativeSkill(skill),
+    // An unchanged legacy folder upgrading in place: shared files take the cloud version.
+    legacyBaseline: isNativeSkill(skill) && options.legacyBaseline === true && options.expectedFolderHash !== void 0
   };
   if (bundleBytes?.length) {
     const bundlePath = path.join(
@@ -1560,6 +1576,44 @@ var DEFAULT_RUN_SKILL_SYNC_DEPS = {
   removeForeignAccountSymlinks,
   updateAgentTargets
 };
+var MIRROR_ONLY_DEPS = {
+  removeForeignAccountSymlinks: async () => 0,
+  removeAllSymlinksForSkill: async () => 0,
+  syncSymlinks: async () => ({ linked: 0, removed: 0, skipped: 0, verifiedAgentLinks: {} })
+};
+async function forgetOtherAccountsAgentLinks(paths) {
+  const usersDir = dirname(dirname(paths.syncStatePath));
+  let entries;
+  try {
+    entries = await fs3.readdir(usersDir, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const statePath = join(usersDir, entry.name, ".notis-sync.json");
+    if (statePath === paths.syncStatePath) continue;
+    let state = null;
+    try {
+      state = JSON.parse(await fs3.readFile(statePath, "utf8"));
+    } catch {
+      continue;
+    }
+    if (!state || typeof state !== "object" || !state.skills || typeof state.skills !== "object") continue;
+    let changed = false;
+    for (const skill of Object.values(state.skills)) {
+      if (skill && typeof skill === "object" && "verifiedAgentLinks" in skill) {
+        delete skill.verifiedAgentLinks;
+        changed = true;
+      }
+    }
+    if (!changed) continue;
+    const temporaryPath = `${statePath}.${process.pid}.${Date.now()}.tmp`;
+    await fs3.writeFile(temporaryPath, `${JSON.stringify(state, null, 2)}
+`, "utf8");
+    await fs3.rename(temporaryPath, statePath);
+  }
+}
 function isolatedLinkOptions(paths) {
   if (!paths.isolatedNamespace && !paths.homeDir) return void 0;
   const root = paths.isolatedNamespace ? join(paths.syncRoot, "environments", paths.isolatedNamespace, "agents") : paths.homeDir;
@@ -1647,6 +1701,10 @@ function buildSyncState(pullResponse, localSkills, lastSyncedAt, verifiedAgentLi
       const localSkill = localSkillMap.get(skill.name);
       const appliedCloudFolderHash = appliedRevisions[skill.name];
       const appliedFileList = appliedFiles[skill.name];
+      if (pendingLegacyUpgrade(skill, localSkill, previousState)) {
+        const { nativeUnavailable: _unavailable, ...previous } = previousNativeState(previousState, skill);
+        return [skill.name, { ...previous, verifiedAgentLinks: verifiedAgentLinks[skill.name] ?? {} }];
+      }
       if (isNativeSkill(skill) && !nativeLocalReady(skill, localSkill)) {
         const previous = previousNativeState(previousState, skill);
         return [skill.name, { ...previous || {
@@ -1710,7 +1768,7 @@ function buildLocalSymlinkCandidates(pullResponse, localSkills, previousState) {
       status: "active"
     };
   });
-  return [...nativeLinkRows(pullResponse, localSkills), ...localOnlySkills];
+  return [...nativeLinkRows(pullResponse, localSkills, previousState), ...localOnlySkills];
 }
 function isEmptySyncState(state) {
   return state.lastSyncedAt === null && Object.keys(state.skills).length === 0;
@@ -1746,6 +1804,7 @@ async function writePulledSkillsToScopedMirror(pullResponse, localSkills, previo
   for (const cloudSkill of selectCloudSkillsToApply(pullResponse.skills)) {
     const local = localSkillMap.get(cloudSkill.name);
     const acknowledged = isNativeSkill(cloudSkill) && local && acknowledgedNative.get(cloudSkill.id) === local.folderHash;
+    const legacyBaseline = Boolean(local && pendingLegacyUpgrade(cloudSkill, local, previousState) && previousNativeState(previousState, cloudSkill)?.folderHash === local.folderHash);
     if (!acknowledged && !shouldWriteCloudSkill(cloudSkill, localSkillMap, previousState)) {
       if (isNativeSkill(cloudSkill) && !nativeLocalReady(cloudSkill, local)) {
         failures.push({ name: cloudSkill.name, error: "Local native Skill changes were retained; resolve the version or identity conflict before using them." });
@@ -1758,7 +1817,8 @@ async function writePulledSkillsToScopedMirror(pullResponse, localSkills, previo
         // What the last write put there. Everything else in the folder was
         // produced locally and survives this one.
         previouslyApplied: previousNativeState(previousState, skill)?.appliedFiles,
-        ...isNativeSkill(skill) && local ? { expectedFolderHash: local.folderHash } : {}
+        ...isNativeSkill(skill) && local ? { expectedFolderHash: local.folderHash } : {},
+        ...legacyBaseline ? { legacyBaseline } : {}
       }),
       onWarning: warnSkillSync
     });
@@ -1827,7 +1887,7 @@ async function materializeCloudSkillsForLocalShell(serverUrl, jwt, dependencies
   }
   if (relinkSkillNames.size > 0) {
     const relinked = await deps.syncSymlinks(
-      nativeLinkRows(pullResponse, finalLocalSkills).filter((skill) => relinkSkillNames.has(skill.name)),
+      nativeLinkRows(pullResponse, finalLocalSkills, previousState).filter((skill) => relinkSkillNames.has(skill.name)),
       syncPaths.skillsDir,
       { ...isolatedLinkOptions(syncPaths), removeUndesired: false }
     );
@@ -1864,7 +1924,8 @@ async function materializeCloudSkillsForLocalShell(serverUrl, jwt, dependencies
   for (const [name, previous] of Object.entries(previousState.skills)) {
     if (!previous.nativeReference && !previous.nativeUnavailable) continue;
     const current = pullResponse.skills.find((skill) => skill.id === previous.cloudId);
-    if (!current || !nativeLocalReady(current, finalLocalSkills.find((local) => local.name === current.name))) {
+    const local = current && finalLocalSkills.find((row) => row.name === current.name);
+    if (!current || !nativeLocalReady(current, local) && !pendingLegacyUpgrade(current, local, previousState)) {
       removed += await deps.removeAllSymlinksForSkill(name, syncPaths.skillsDir, isolatedLinkOptions(syncPaths));
     }
   }
@@ -1950,9 +2011,11 @@ async function deactivateDeletedAgentSkills(serverUrl, jwt, pullResponse, previo
   return deactivated;
 }
 async function runSkillSync(serverUrl, jwt, dependencies = {}, options = {}) {
+  const linkAgentFolders = options.linkAgentFolders !== false;
   const deps = {
     ...DEFAULT_RUN_SKILL_SYNC_DEPS,
-    ...dependencies
+    ...dependencies,
+    ...linkAgentFolders ? {} : MIRROR_ONLY_DEPS
   };
   const syncSettings = await deps.fetchSyncSettings(
     serverUrl,
@@ -1991,13 +2054,16 @@ async function runSkillSync(serverUrl, jwt, dependencies = {}, options = {}) {
     syncPaths.skillsDir,
     isolatedLinkOptions(syncPaths)
   );
+  if (linkAgentFolders && !syncPaths.isolatedNamespace) {
+    await forgetOtherAccountsAgentLinks(syncPaths);
+  }
   const cloudCuratedSkillNames = new Set(
     pullResponse.skills.filter((skill) => skill.source === "curated").map((skill) => skill.name)
   );
   const protectedSkillNames = /* @__PURE__ */ new Set([...cloudCuratedSkillNames, ...BASE_SKILL_NAMES]);
   const scopedState = withoutBaseSkillState(await deps.readSyncState(syncPaths));
   const assignmentFailures = [];
-  const deactivated = !syncPaths.isolatedNamespace && syncSettings.agent_targets_conditional_updates === true ? await deactivateDeletedAgentSkills(
+  const deactivated = linkAgentFolders && !syncPaths.isolatedNamespace && syncSettings.agent_targets_conditional_updates === true ? await deactivateDeletedAgentSkills(
     serverUrl,
     jwt,
     pullResponse,
@@ -2019,7 +2085,7 @@ async function runSkillSync(serverUrl, jwt, dependencies = {}, options = {}) {
       protectedSkillNames
     });
   }
-  if (!syncPaths.isolatedNamespace) {
+  if (linkAgentFolders && !syncPaths.isolatedNamespace) {
     await deps.gatherTopLevelLocalSkills(syncPaths, { protectedSkillNames });
   }
   const localSkills = (await deps.scanLocalSkills(syncPaths)).filter((skill) => !BASE_SKILL_NAMES.has(skill.name));