@notis_ai/cli 0.2.6 → 0.2.8

package/skills/notis-apps/cli.md

@@ -232,6 +232,21 @@ Examples:
 - `npx --package @notis_ai/cli@latest -- notis apps publish --confirm-ready`
 - `npx --package @notis_ai/cli@latest -- notis apps publish ./my-app --confirm-ready`
 
+### `npx --package @notis_ai/cli@latest -- notis apps duplicate [dir]`
+
+Duplicate an app into an independent copy with its own databases.
+
+When to use: When the same app should run for a second purpose - a notes app for blog drafts alongside one for bookmarks. The copy shares no data with the source.
+
+Options:
+- `--app-id <id>` — App to duplicate. Defaults to the app this project is linked to.
+- `--name <name>` — Name for the duplicate (default: the source name followed by "copy").
+- `--copy-documents <mode>` — Which rows to copy: 'declared' (default, the starter content a fresh install would have), 'all', or 'none'.
+
+Examples:
+- `npx --package @notis_ai/cli@latest -- notis apps duplicate --name "Blog"`
+- `npx --package @notis_ai/cli@latest -- notis apps duplicate --app-id abc123 --name "Bookmarks" --copy-documents none`
+
 ### `npx --package @notis_ai/cli@latest -- notis apps doctor [dir]`
 
 Check project health and readiness.

package/skills/notis-cli/SKILL.md

@@ -49,9 +49,9 @@ Treat the Notis CLI the same way you would treat a Composio-style tool router fl
 
 Use this section when the goal is to create or update a Notis app from a local workspace.
 
-Notis apps are Vite + React projects using `@notis/sdk`. The workflow is init or pull, dev, build, verify, create/link, deploy.
+Notis apps are Vite + React projects using `@notis/sdk`. The workflow is init or pull, dev, build, verify, create/link, deploy, then an explicitly confirmed Store submission when requested.
 
-Important: `deploy` means updating the installed app artifact for the current user or team. To list an app in the public Notis App Store, the owner opens the app details page in the Notis Portal, sets visibility to Team or Public, then uses Publish/Update. The CLI does not publish to the store; the backend opens the registry PR using a service token.
+Important: `deploy` only updates the installed app artifact for the current user or team. Store submission is a separate, user-gated step. After the user explicitly confirms that the current App Details page and Store listing are ready, `apps publish --confirm-ready` submits the matching deployed version through the backend review flow.
 
 ### App development workflow
 
@@ -74,6 +74,8 @@ Important: `deploy` means updating the installed app artifact for the current us
    - `npx --package @notis_ai/cli@latest -- notis apps deploy`
 9. Check project health:
    - `npx --package @notis_ai/cli@latest -- notis apps doctor`
+10. Only after the user explicitly approves the current Store preview, submit the deployed version:
+   - `npx --package @notis_ai/cli@latest -- notis apps publish --confirm-ready`
 
 ### App development rules
 
@@ -82,7 +84,8 @@ Important: `deploy` means updating the installed app artifact for the current us
 - Link before `deploy`, or pass `--app-id <id>` when intentionally deploying without writing local link state.
 - Use `npx --package @notis_ai/cli@latest -- notis apps doctor` to diagnose configuration or dependency issues.
 - Use `npx --package @notis_ai/cli@latest -- notis apps list` to discover existing app IDs before linking.
-- For App Store publishing, do not use the CLI. The user opens the app details page in the Notis Portal, sets visibility to Team or Public, then uses Publish/Update. The backend opens the registry PR on their behalf using a service token. Do not invent any CLI store-publish command.
+- Never treat deploy approval as Store approval. Set visibility to Team or Public first, then run `apps publish --confirm-ready` only after the user explicitly confirms the current App Details page and Store listing.
+- `apps publish --confirm-ready` submits the deployed snapshot through the same backend review flow as App Details. It must reject missing confirmation, incomplete listing media, a local/deployed version mismatch, private visibility, or an existing pending review.
 
 ### App development command reference
 
@@ -96,9 +99,10 @@ Important: `deploy` means updating the installed app artifact for the current us
 - `npx --package @notis_ai/cli@latest -- notis apps link` -- associate the project with a remote app
 - `npx --package @notis_ai/cli@latest -- notis apps deploy` -- upload the artifact and editable source snapshot to the linked installed app in Notis
 - `npx --package @notis_ai/cli@latest -- notis apps deploy --direct` -- deploy directly to Supabase storage, bypassing the backend server (auto-fallback when server is down)
+- `npx --package @notis_ai/cli@latest -- notis apps publish --confirm-ready` -- submit the matching deployed version for Team or Public Store review after explicit user confirmation
 - `npx --package @notis_ai/cli@latest -- notis apps doctor` -- run project diagnostics
 
-App Store publishing is portal-only — there is no CLI publish command.
+App Details remains the visual review surface and offers the same Publish/Update action. The CLI command is for agents completing an already approved submission; it does not weaken the separate confirmation gate.
 
 If the task is specifically about app structure, runtime behavior, or database/view packaging, pair this skill with the `notis-apps` skill. Use `notis-cli` for the command workflow and `notis-apps` for the product/runtime contract.
 

package/skills/notis-onboarding/BRIEF.md

@@ -0,0 +1,93 @@
+You are onboarding someone to Notis from inside their coding agent. You already
+have a shell and an authenticated Notis CLI, so you do the setup for them and
+report what you did.
+
+Run every Notis operation as:
+
+```bash
+npx --package @notis_ai/cli@latest -- notis tools exec <TOOL> --arguments '<json>'
+```
+
+Never invent tool names. `notis tools search "<what you need>"` finds them.
+
+## 1. Collect the basics
+
+The fields onboarding collects, wherever it runs. Both the conversational
+onboarding assistant and the CLI brief reference this partial so the two paths
+can never quietly collect different things.
+
+All of these land through `LOCAL_NOTIS_SAVE_USER_SETTINGS`: `full_name` on the
+user row, the rest merged into the `settings` blob.
+
+| Field | Setting key | What it is for |
+|---|---|---|
+| First name | `full_name` | How Notis addresses the user. Deduce from the email before asking. |
+| Occupation / role | `position` | Tailors examples and suggestions. |
+| Language | `language` | The language Notis replies in. |
+| Time zone | `timezone` | Anchors every scheduled and time-relative request. Ask; never guess silently. |
+| Attribution | `attribution` | Where they heard about Notis. Asked once, never again. |
+
+Rules that hold on every surface:
+
+* Ask one question at a time. A wall of questions reads as a form, and people
+  abandon forms.
+* Skip anything already known or confidently deducible, and say what you deduced
+  rather than asking the user to confirm a blank.
+* Save as soon as you have the basics rather than batching to the end — a user who
+  drops out halfway should not lose what they already told you.
+
+
+You are in a terminal, so there is no phone number to infer a country from. Take
+the language and time zone from the shell environment if you can read them, state
+what you inferred, and let the user correct you. Then save:
+
+```bash
+npx --package @notis_ai/cli@latest -- notis tools exec LOCAL_NOTIS_SAVE_USER_SETTINGS \
+  --arguments '{"full_name":"...","position":"...","language":"...","timezone":"..."}'
+```
+
+## 2. Connect one app, then immediately read from it
+
+Ask what they use day to day. Gmail, Google Calendar, Notion, Slack, Linear, and
+their CRM are the common answers. For each:
+
+```bash
+npx --package @notis_ai/cli@latest -- notis tools link <toolkit>
+```
+
+Give the user the returned URL and wait. Confirm with `notis tools toolkits`.
+
+Then — and this is the step that makes onboarding land — run one read-only action
+through the connection and show them the actual result: today's calendar events,
+their most recent email threads, the databases in their Notion. A connected
+integration is a claim; their own data on screen is proof.
+
+If they connect nothing, fall back to installing a public app:
+`LOCAL_NOTIS_LIST_PUBLIC_APP_STORE`, then `LOCAL_NOTIS_INSTALL_APP` with
+`destination_type="personal"`.
+
+## 3. Finish onboarding
+
+**Do this. It is not optional.**
+
+```bash
+npx --package @notis_ai/cli@latest -- notis tools exec LOCAL_NOTIS_COMPLETE_TUTORIAL --arguments '{}'
+```
+
+Until this runs, every message the user sends on every channel is routed to the
+onboarding assistant — so an agent that collects everything and skips this leaves
+them permanently stuck talking to an onboarding bot.
+
+Verify with `LOCAL_NOTIS_GET_INTEGRATIONS_STATUS` and tell them what is connected.
+
+## What this plan does not include
+
+Do **not** call `LOCAL_NOTIS_INSERT_REMINDER` or any automation tool during
+onboarding. Reminders, automations, voice, and the messaging channels are paid
+features; calling them here fails at the worst possible moment. If the user asks
+for a reminder or a recurring task, say plainly that it needs an upgrade and offer
+`LOCAL_NOTIS_GET_SUBSCRIPTION_STATUS` so they can see their plan.
+
+What they *do* have: 1,000+ integrations through this CLI, skills that sync to
+their coding agents, long-term memory, notes and databases, and the ability to
+build Notis apps from this machine.

package/src/cli.js

@@ -5,7 +5,13 @@ import { Command } from 'commander';
 import { COMMAND_SPECS, GROUP_SUMMARIES } from './command-specs/index.js';
 import { OutputManager } from './runtime/output.js';
 import { asCliError } from './runtime/errors.js';
-import { resolveRuntimeProfile, workspacePath } from './runtime/profiles.js';
+import { reportCliCommand } from './runtime/telemetry.js';
+import {
+  DEFAULT_PROFILE,
+  resolveOutputMode,
+  resolveRuntimeProfile,
+  workspacePath,
+} from './runtime/profiles.js';
 
 // Read the version from package.json: the publish pipeline bumps the manifest
 // (scripts/release-utils.js applyVersion), so a hardcoded string here goes
@@ -68,10 +74,39 @@ function buildRuntime(globalOptions, spec) {
     ...runtime,
     cliVersion: CLI_VERSION,
     color: globalOptions.color !== false,
+    quiet: Boolean(globalOptions.quiet),
+    verbose: Boolean(globalOptions.verbose),
     workspacePath,
   };
 }
 
+function buildErrorRuntime(globalOptions) {
+  try {
+    return {
+      ...resolveRuntimeProfile(globalOptions, {
+        requireAuth: false,
+        includeDebugEntitlementOverride: false,
+      }),
+      cliVersion: CLI_VERSION,
+      color: globalOptions.color !== false,
+      quiet: Boolean(globalOptions.quiet),
+      verbose: Boolean(globalOptions.verbose),
+      workspacePath,
+    };
+  } catch {
+    return {
+      profileName: globalOptions.profile || DEFAULT_PROFILE,
+      apiBase: null,
+      outputMode: resolveOutputMode(globalOptions),
+      cliVersion: CLI_VERSION,
+      color: globalOptions.color !== false,
+      quiet: Boolean(globalOptions.quiet),
+      verbose: Boolean(globalOptions.verbose),
+      workspacePath,
+    };
+  }
+}
+
 function attachSpec(program, parentMap, spec, specs) {
   const parent = ensureParentCommand(program, parentMap, spec.command_path.slice(0, -1));
   const leaf = spec.command_path[spec.command_path.length - 1];
@@ -96,6 +131,7 @@ function attachSpec(program, parentMap, spec, specs) {
   }
 
   command.action(async (...raw) => {
+    const startedAt = Date.now();
     const commanderCommand = raw[raw.length - 1];
     const argumentValues = raw.slice(0, -1);
     const globalOptions = commanderCommand.optsWithGlobals();
@@ -118,15 +154,24 @@ function attachSpec(program, parentMap, spec, specs) {
         output,
       });
       process.exitCode = typeof exitCode === 'number' ? exitCode : 0;
+      await reportCliCommand({
+        spec,
+        runtime,
+        result: process.exitCode === 0 ? 'success' : 'failed',
+        durationMs: Date.now() - startedAt,
+        error: process.exitCode === 0 ? null : { exitCode: process.exitCode },
+      });
     } catch (error) {
-      const runtime = {
-        ...resolveRuntimeProfile(globalOptions, { requireAuth: false }),
-        cliVersion: CLI_VERSION,
-        color: globalOptions.color !== false,
-        workspacePath,
-      };
+      const runtime = buildErrorRuntime(globalOptions);
       const output = new OutputManager(runtime);
       const cliError = asCliError(error);
+      await reportCliCommand({
+        spec,
+        runtime,
+        result: 'failed',
+        durationMs: Date.now() - startedAt,
+        error: cliError,
+      });
       process.exitCode = output.emitError({
         command: spec.command_path.join(' '),
         error: cliError,

package/src/command-specs/apps.js

@@ -32,6 +32,7 @@ import {
   collectArtifactFiles,
   collectSourceFiles,
   resolveConfiguredAppSkills,
+  normalizeAppCapabilities,
   directDeploy,
   pullAppSource,
 } from '../runtime/app-platform.js';
@@ -66,6 +67,7 @@ const ENSURE_DEV_APP_INSTALLATION_TOOL = 'LOCAL_NOTIS_ENSURE_DEV_APP_INSTALLATIO
 const GET_APP_TOOL = 'LOCAL_NOTIS_GET_APP';
 const LIST_APPS_TOOL = 'LOCAL_NOTIS_LIST_APPS';
 const CREATE_APP_TOOL = 'LOCAL_NOTIS_CREATE_APP';
+const DUPLICATE_APP_TOOL = 'LOCAL_NOTIS_DUPLICATE_APP';
 const SAVE_APP_FILES_TOOL = 'LOCAL_NOTIS_SAVE_APP_FILES';
 
 // ---------------------------------------------------------------------------
@@ -377,22 +379,35 @@ function assertHarnessResult(result, route, databaseSlugs) {
       details: error,
     });
   }
-  for (const databaseSlug of databaseSlugs) {
-    const seen = (result.runtimeCalls || []).some(
-      (call) =>
-        call?.op === 'callTool' &&
-        localNotisToolSlug(call?.args?.name) === 'LOCAL_NOTIS_DATABASE_QUERY' &&
-        call?.args?.arguments?.database_slug === databaseSlug,
-    );
-    if (!seen) {
+  const declaredDatabaseSet = new Set(databaseSlugs);
+  const databaseQueries = (result.runtimeCalls || []).filter(
+    (call) =>
+      call?.op === 'callTool'
+      && localNotisToolSlug(call?.args?.name) === 'LOCAL_NOTIS_DATABASE_QUERY',
+  );
+  for (const call of databaseQueries) {
+    const databaseSlug = call?.args?.arguments?.database_slug;
+    if (databaseSlug && !declaredDatabaseSet.has(databaseSlug)) {
       assertions.push({
         ok: false,
-        code: 'missing_database_query',
-        message: `Route "${route.slug}" did not call LOCAL_NOTIS_DATABASE_QUERY for "${databaseSlug}".`,
+        code: 'undeclared_database_query',
+        message: `Route "${route.slug}" queried undeclared database "${databaseSlug}".`,
         details: { databaseSlug },
       });
     }
   }
+  const collectionDatabase = route?.collection?.database;
+  if (
+    collectionDatabase
+    && !databaseQueries.some((call) => call?.args?.arguments?.database_slug === collectionDatabase)
+  ) {
+    assertions.push({
+      ok: false,
+      code: 'missing_collection_database_query',
+      message: `Collection route "${route.slug}" did not query "${collectionDatabase}".`,
+      details: { databaseSlug: collectionDatabase },
+    });
+  }
   return assertions;
 }
 
@@ -440,6 +455,7 @@ function buildManifestForDev(appConfig) {
       css: 'bundle/app.css',
     },
     databases: appConfig.databases || [],
+    capabilities: normalizeAppCapabilities(appConfig.capabilities),
     tools: appConfig.tools || [],
     skills: (appConfig.skills || []).map((skill) => ({
       key: skill.key,
@@ -485,9 +501,9 @@ export async function ensureDevInstall({
   let linkedState = readLinkedState(projectDir);
   if (linkedState?.app_id) {
     const linkedApp = await getAccessibleApp(ctx.runtime, linkedState.app_id, runTool);
-    if (!linkedApp || linkedApp.manifest?.is_dev === true) {
+    if (linkedApp?.manifest?.is_dev === true) {
       const { app_id: legacyDevAppId, linked_at: _linkedAt, deployed_at: _deployedAt, version: _version, ...rest } = linkedState;
-      const devAppId = linkedState.dev_app_id || (linkedApp ? legacyDevAppId : null);
+      const devAppId = linkedState.dev_app_id || legacyDevAppId;
       linkedState = {
         ...rest,
         ...(devAppId ? { dev_app_id: devAppId } : {}),
@@ -930,7 +946,9 @@ async function appsBuildHandler(ctx) {
     throw usageError(`Project has problems:\n${problems.map((p) => `  - ${p}`).join('\n')}`);
   }
 
-  const { manifest } = await buildArtifact(projectDir);
+  const { manifest } = await buildArtifact(projectDir, {
+    stdio: ctx.output.isMachineMode() ? 'pipe' : 'inherit',
+  });
 
   return ctx.output.emitSuccess({
     command: ctx.spec.command_path.join(' '),
@@ -963,7 +981,9 @@ async function appsVerifyHandler(ctx) {
   }
 
   if (!ctx.options.skipBuild) {
-    await buildArtifact(projectDir);
+    await buildArtifact(projectDir, {
+      stdio: ctx.output.isMachineMode() ? 'pipe' : 'inherit',
+    });
   }
 
   const manifest = readManifest(projectDir);
@@ -1175,7 +1195,9 @@ async function appsScreenshotHandler(ctx) {
   }
 
   if (!ctx.options.skipBuild) {
-    await buildArtifact(projectDir);
+    await buildArtifact(projectDir, {
+      stdio: ctx.output.isMachineMode() ? 'pipe' : 'inherit',
+    });
   }
 
   const manifest = readManifest(projectDir);
@@ -1364,16 +1386,25 @@ async function appsScreenshotHandler(ctx) {
   }
 }
 
+export function buildLinkedAppState(existingState, appId, linkedAt = new Date().toISOString()) {
+  return {
+    ...(existingState?.dev_app_id ? { dev_app_id: existingState.dev_app_id } : {}),
+    ...(existingState?.dev_linked_at ? { dev_linked_at: existingState.dev_linked_at } : {}),
+    app_id: appId,
+    linked_at: linkedAt,
+  };
+}
+
 async function appsLinkHandler(ctx) {
   const projectDir = resolveProjectDir(ctx.args.dir || '.');
   const appId = ctx.args.appId;
 
   await assertLinkTarget(ctx.runtime, appId);
 
-  writeLinkedState(projectDir, {
-    app_id: appId,
-    linked_at: new Date().toISOString(),
-  });
+  writeLinkedState(
+    projectDir,
+    buildLinkedAppState(readLinkedState(projectDir), appId),
+  );
 
   return ctx.output.emitSuccess({
     command: ctx.spec.command_path.join(' '),
@@ -1442,7 +1473,9 @@ async function appsDeployHandler(ctx) {
 
   // Build if needed
   if (!ctx.options.skipBuild) {
-    await buildArtifact(projectDir);
+    await buildArtifact(projectDir, {
+      stdio: ctx.output.isMachineMode() ? 'pipe' : 'inherit',
+    });
   }
 
   // Direct deploy mode: upload to Supabase storage directly
@@ -1539,6 +1572,67 @@ function deployedAppVersion(app) {
   return Number.isFinite(parsed) ? parsed : 0;
 }
 
+async function appsDuplicateHandler(ctx) {
+  const projectDir = resolveProjectDir(ctx.args.dir || '.');
+  // Either target an app explicitly, or duplicate whatever this project is
+  // linked to, so `notis apps duplicate` works from inside a project.
+  const appId = requireLinkedAppId(projectDir, ctx.options.appId);
+  const idempotencyKey = nextIdempotencyKey(ctx.globalOptions);
+
+  const copyDocuments = ctx.options.copyDocuments || 'declared';
+  if (!['declared', 'all', 'none'].includes(copyDocuments)) {
+    throw usageError("--copy-documents must be one of: declared, all, none.");
+  }
+
+  const result = await runToolCommand({
+    runtime: ctx.runtime,
+    toolName: DUPLICATE_APP_TOOL,
+    arguments_: {
+      app_id: appId,
+      ...(ctx.options.name ? { name: ctx.options.name } : {}),
+      copy_documents: copyDocuments,
+    },
+    mutating: true,
+    idempotencyKey,
+  });
+
+  const payload = result.payload || {};
+  if (payload.status === 'error') {
+    throw usageError(`Could not duplicate app ${appId}: ${payload.message || 'unknown error'}`);
+  }
+
+  const duplicated = payload.app || {};
+  if (!duplicated.id) {
+    throw usageError(`Could not duplicate app ${appId}: the backend did not return an app id.`);
+  }
+
+  const data = {
+    app_id: duplicated.id,
+    name: duplicated.name,
+    slug: duplicated.slug,
+    duplicated_from_app_id: payload.duplicated_from_app_id || appId,
+    copied_document_count: payload.copied_document_count ?? 0,
+    portal_url: payload.portal_url,
+    idempotency_key: idempotencyKey,
+    // The duplicate owns brand new databases; nothing is shared with the source.
+    databases: (payload.databases || []).map((database) => ({
+      id: database.id,
+      slug: database.slug,
+      name: database.name,
+    })),
+  };
+
+  return ctx.output.emitSuccess({
+    command: ctx.spec.command_path.join(' '),
+    data,
+    humanSummary: `Duplicated app ${appId} as ${duplicated.name || duplicated.id}`,
+    hints: payload.portal_url
+      ? [{ command: payload.portal_url, reason: 'Open the duplicated app in Portal' }]
+      : [],
+    meta: { mutating: true, idempotency_key: idempotencyKey },
+  });
+}
+
 async function appsPublishHandler(ctx) {
   if (ctx.options.confirmReady !== true) {
     throw usageError(
@@ -1652,10 +1746,20 @@ async function appsDoctorHandler(ctx) {
       ? `Found ${problems.length} problems:\n${problems.map((p) => `  - ${p}`).join('\n')}`
       : warnings.length
         ? `Healthy with ${warnings.length} warnings:\n${warnings.map((w) => `  - ${w}`).join('\n')}`
-        : `Project is healthy.${linkedState ? ` Linked to ${linkedState.app_id}.` : ' Not linked.'}`,
+        : `Project is healthy.${doctorLinkSummary(linkedState)}`,
   });
 }
 
+export function doctorLinkSummary(linkedState) {
+  if (linkedState?.app_id) {
+    return ` Linked to app ${linkedState.app_id}.`;
+  }
+  if (linkedState?.dev_app_id) {
+    return ` Local development app ${linkedState.dev_app_id} is active.`;
+  }
+  return ' Not linked.';
+}
+
 // ---------------------------------------------------------------------------
 // Command specs
 // ---------------------------------------------------------------------------
@@ -1919,6 +2023,35 @@ export const appsCommandSpecs = [
     backend_call: { type: 'http', name: 'portal_apps/publish' },
     handler: appsPublishHandler,
   },
+  {
+    command_path: ['apps', 'duplicate'],
+    summary: 'Duplicate an app into an independent copy with its own databases.',
+    when_to_use:
+      'When the same app should run for a second purpose - a notes app for blog drafts alongside one for bookmarks. The copy shares no data with the source.',
+    args_schema: {
+      arguments: [
+        { token: '[dir]', key: 'dir', description: 'Project directory (default: current dir).' },
+      ],
+      options: [
+        { flags: '--app-id <id>', description: 'App to duplicate. Defaults to the app this project is linked to.' },
+        { flags: '--name <name>', description: 'Name for the duplicate (default: the source name followed by "copy").' },
+        {
+          flags: '--copy-documents <mode>',
+          description:
+            "Which rows to copy: 'declared' (default, the starter content a fresh install would have), 'all', or 'none'.",
+        },
+      ],
+    },
+    examples: [
+      'notis apps duplicate --name "Blog"',
+      'notis apps duplicate --app-id abc123 --name "Bookmarks" --copy-documents none',
+    ],
+    mutates: true,
+    idempotent: false,
+    require_auth: true,
+    backend_call: { type: 'tool', name: DUPLICATE_APP_TOOL },
+    handler: appsDuplicateHandler,
+  },
   {
     command_path: ['apps', 'doctor'],
     summary: 'Check project health and readiness.',