@notis_ai/cli 0.2.7 → 0.2.9

package/src/runtime/telemetry.js

@@ -0,0 +1,92 @@
+const ERROR_CATEGORIES = new Map([
+  [2, 'usage'],
+  [3, 'auth'],
+  [4, 'network'],
+  [5, 'conflict'],
+  [6, 'backend'],
+  [7, 'unexpected'],
+  [8, 'payment'],
+]);
+
+export function cliDurationBucket(durationMs) {
+  if (durationMs < 1_000) return 'under_1s';
+  if (durationMs < 5_000) return '1s_to_5s';
+  if (durationMs < 30_000) return '5s_to_30s';
+  return 'over_30s';
+}
+
+export function cliBackendKind(spec) {
+  const value = String(spec?.backend_call?.type || '').toLowerCase();
+  if (value === 'tool') return 'tool';
+  if (value === 'http') return 'http';
+  if (value === 'local') return 'local';
+  if (value.includes('health')) return 'health';
+  if (value.includes('local')) return 'local';
+  return 'other';
+}
+
+export function buildCliTelemetryPayload({
+  spec,
+  runtime,
+  result,
+  durationMs,
+  error,
+}) {
+  return {
+    command_id: spec.command_path.join('.'),
+    backend_kind: cliBackendKind(spec),
+    result,
+    error_category: result === 'failed'
+      ? (ERROR_CATEGORIES.get(Number(error?.exitCode)) || 'unexpected')
+      : 'none',
+    duration_bucket: cliDurationBucket(durationMs),
+    cli_version: runtime.cliVersion,
+    agent_mode: Boolean(runtime.agentMode),
+  };
+}
+
+export async function reportCliCommand({
+  spec,
+  runtime,
+  result,
+  durationMs,
+  error = null,
+  fetchImpl = globalThis.fetch,
+}) {
+  // Backend tool calls emit authoritative surface/tool telemetry server-side.
+  // This client event exists only for local commands that otherwise leave no
+  // observable runtime boundary.
+  if (
+    cliBackendKind(spec) !== 'local'
+    || !runtime?.jwt
+    || !runtime?.apiBase
+    || typeof fetchImpl !== 'function'
+  ) {
+    return false;
+  }
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), 1_500);
+  try {
+    const response = await fetchImpl(`${runtime.apiBase}/cli_telemetry`, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${runtime.jwt}`,
+        'Content-Type': 'application/json',
+        'X-Notis-CLI-Version': runtime.cliVersion,
+      },
+      body: JSON.stringify(buildCliTelemetryPayload({
+        spec,
+        runtime,
+        result,
+        durationMs,
+        error,
+      })),
+      signal: controller.signal,
+    });
+    return response.ok;
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timeout);
+  }
+}

package/src/runtime/transport.js

@@ -3,11 +3,14 @@ import { createReadStream } from 'node:fs';
 import { CliError, EXIT_CODES } from './errors.js';
 import {
   DEFAULT_PROFILE,
+  credentialIsExpired,
   getProfile,
+  getJwtSubject,
   isJwtExpired,
   loadConfig,
 } from './profiles.js';
 import { createExpiredAuthError, createInvalidAuthHints } from './desktop-auth.js';
+import { refreshOAuthCredential } from './oauth.js';
 
 function escapeMultipartHeaderValue(value) {
   return String(value ?? '')
@@ -122,6 +125,18 @@ function normalizeBackendError(status, payload, runtime) {
     });
   }
 
+  if (status === 402) {
+    // Distinct from auth on purpose: an agent that sees an auth exit code will
+    // loop trying to re-authenticate, when the actual fix is to add credit.
+    return new CliError({
+      code: 'payment_required',
+      message,
+      exitCode: EXIT_CODES.payment,
+      details: payload || {},
+      hints: payload?.hints || [],
+    });
+  }
+
   if (status >= 400 && status < 500) {
     return new CliError({
       code: 'usage_error',
@@ -142,22 +157,37 @@ function normalizeBackendError(status, payload, runtime) {
   });
 }
 
-function reloadJwtFromConfig(runtime) {
-  if (runtime.credentialSource === 'env') {
+function reloadJwtFromConfig(runtime, loadedProfile = null) {
+  if (runtime.credentialKind === 'env' || runtime.credentialKind === 'oauth') {
     return false;
   }
   const profileName = runtime.profileName || DEFAULT_PROFILE;
-  let profile;
-  try {
-    profile = getProfile(loadConfig(), profileName);
-  } catch {
-    return false;
+  let profile = loadedProfile;
+  if (!profile) {
+    try {
+      profile = getProfile(loadConfig(runtime.worktreeRuntime), profileName);
+    } catch {
+      return false;
+    }
   }
   const nextJwt = typeof profile.jwt === 'string' && profile.jwt ? profile.jwt : null;
   if (!nextJwt || nextJwt === runtime.jwt) {
     return false;
   }
+  const expectedUserId = runtime.worktreeRuntime?.expected_user_id;
+  if (expectedUserId && getJwtSubject(nextJwt) !== expectedUserId) {
+    throw new CliError({
+      code: 'dev_runtime_identity_mismatch',
+      message: 'The refreshed scoped dev credential does not belong to this worktree test user',
+      exitCode: EXIT_CODES.auth,
+      hints: [
+        { message: 'Restart ./dev.sh to restore the approved worktree identity.' },
+        { message: `Expected user: ${expectedUserId}` },
+      ],
+    });
+  }
   runtime.jwt = nextJwt;
+  runtime.credentialKind = runtime.worktreeRuntime ? 'worktree' : 'desktop';
   runtime.desktopAppName = profile.desktop_app_name;
   runtime.desktopPid = profile.desktop_pid;
   return true;
@@ -175,8 +205,25 @@ export async function httpRequest({
   // token. Each CLI request only consumes the newest access token it synced to
   // disk, avoiding refresh-token races between independent CLI processes and
   // the running desktop session.
-  reloadJwtFromConfig(runtime);
-  if (requireAuth && isJwtExpired(runtime.jwt)) {
+  let currentProfile;
+  if (runtime.credentialKind === 'oauth') {
+    if (requireAuth && credentialIsExpired(runtime, {
+      oauth_access_expires_at: runtime.oauthAccessExpiresAt,
+    })) {
+      await refreshOAuthCredential(runtime);
+    }
+    currentProfile = getProfile(
+      loadConfig(runtime.worktreeRuntime),
+      runtime.profileName,
+    );
+  } else {
+    currentProfile = getProfile(
+      loadConfig(runtime.worktreeRuntime),
+      runtime.profileName,
+    );
+    reloadJwtFromConfig(runtime, currentProfile);
+  }
+  if (requireAuth && credentialIsExpired(runtime, currentProfile)) {
     throw createExpiredAuthError(runtime);
   }
 
@@ -235,7 +282,9 @@ export async function httpRequest({
     }
 
     if (response.status === 401) {
-      const refreshed = reloadJwtFromConfig(runtime) && !isJwtExpired(runtime.jwt);
+      const refreshed = runtime.credentialKind === 'oauth'
+        ? await refreshOAuthCredential(runtime)
+        : reloadJwtFromConfig(runtime) && !isJwtExpired(runtime.jwt);
       if (refreshed) {
         if (requireAuth && runtime.jwt) {
           headers.Authorization = `Bearer ${runtime.jwt}`;
@@ -260,7 +309,13 @@ export async function httpRequest({
     clearTimeout(timeout);
 
     if (!response.ok) {
-      if (response.status === 401 && isJwtExpired(runtime.jwt)) {
+      if (
+        response.status === 401
+        && credentialIsExpired(
+          runtime,
+          getProfile(loadConfig(runtime.worktreeRuntime), runtime.profileName),
+        )
+      ) {
         throw createExpiredAuthError(runtime);
       }
       throw normalizeBackendError(response.status, payload, runtime);

package/template/.harness/index.html.tmpl

@@ -107,6 +107,33 @@
     const apiBase = {{API_BASE}};
     const jwt = {{JWT}};
     const fixtures = {{FIXTURES}};
+
+    /**
+     * Resolves the canned response for one tool call.
+     *
+     * A plain `"TOOL_NAME"` key answers every call to that tool. An app that
+     * reaches several databases through a single tool needs to vary the
+     * payload per call, so a key may also be scoped to one argument with
+     * `"TOOL_NAME#arg=value"` — for example
+     * `"LOCAL_NOTIS_DATABASE_QUERY#database_slug=notes"`. Scoped keys are
+     * checked first; the unscoped key stays the fallback.
+     */
+    function lookupToolFixture(name, args) {
+      const tools = fixtures && fixtures.tools;
+      if (!tools) return undefined;
+      for (const key of Object.keys(tools)) {
+        const sep = key.indexOf('#');
+        if (sep === -1 || key.slice(0, sep) !== name) continue;
+        const scope = key.slice(sep + 1);
+        const eq = scope.indexOf('=');
+        if (eq === -1) continue;
+        if (String(args[scope.slice(0, eq)]) === scope.slice(eq + 1)) {
+          return tools[key];
+        }
+      }
+      return Object.prototype.hasOwnProperty.call(tools, name) ? tools[name] : undefined;
+    }
+
     const status = document.getElementById('harness-status');
     const setStatus = (msg, color = '#0f0') => {
       status.textContent = `harness: ${msg}`;
@@ -197,8 +224,9 @@
         },
         callTool: async (name, args) => {
           record('callTool', { name, arguments: args || {} });
-          if (fixtures && fixtures.tools && Object.prototype.hasOwnProperty.call(fixtures.tools, name)) {
-            return structuredClone(fixtures.tools[name]);
+          const fixture = lookupToolFixture(name, args || {});
+          if (fixture !== undefined) {
+            return structuredClone(fixture);
           }
           return { ok: true, result: null };
         },

package/template/packages/sdk/src/config.ts

@@ -62,6 +62,20 @@ export const NOTIS_APP_CATEGORIES = [
 
 export type NotisAppCategory = typeof NOTIS_APP_CATEGORIES[number];
 
+export interface NotisAppDatabaseConfig {
+  /** Database slug, as declared by the app. */
+  slug: string;
+  /**
+   * Ship this database's rows to everyone who installs the app.
+   *
+   * Off by default: declaring a database publishes its STRUCTURE, never its
+   * content. Turn it on only for starter content that every installer should
+   * receive - a default folder tree, a set of templates - and never for a
+   * database that accumulates the author's own data.
+   */
+  seedDocuments?: boolean;
+}
+
 export interface NotisAppAuthor {
   name: string;
   handle?: string;
@@ -106,6 +120,19 @@ export const NOTIS_APP_ACCENTS = [
 
 export type NotisAppAccent = typeof NOTIS_APP_ACCENTS[number];
 
+export interface NotisAppCapabilities {
+  /**
+   * Read every database in the workspace, not only the ones this app declares
+   * in `databases` or created itself.
+   *
+   * An app runtime is otherwise sandboxed to its own databases, so a catalog or
+   * explorer app sees an empty list without this. `'read'` is the only accepted
+   * value and it never grants writes: `LOCAL_NOTIS_DATABASE_UPSERT_*` stays
+   * bound to the app's own databases.
+   */
+  workspaceDatabases?: 'read';
+}
+
 export interface NotisAppConfig {
   /** URL-safe app slug. Existing apps may still use a display name here. */
   name: string;
@@ -128,7 +155,17 @@ export interface NotisAppConfig {
   /** @deprecated Add release entries to the root CHANGELOG.md instead. */
   versionNotes?: string;
   screenshots?: NotisAppScreenshotConfig[];
-  databases?: string[];
+  /**
+   * Databases this app owns. A bare string publishes structure only; use the
+   * object form to opt a database into shipping its rows to installers.
+   */
+  databases?: (string | NotisAppDatabaseConfig)[];
+  /**
+   * Extra permissions the app asks for at install time. Everything here widens
+   * what the app can reach beyond its own data, so each one is surfaced to the
+   * user before they install.
+   */
+  capabilities?: NotisAppCapabilities;
   routes?: NotisRouteConfig[];
   tools?: string[];
   skills?: NotisAppSkillConfig[];

package/dist/scaffolds/notis-affiliate-prospects/CHANGELOG.md

@@ -1,7 +0,0 @@
-# Changelog
-
-## [Affiliate recruiting control center] - 2026-07-23
-
-- Added the campaign dashboard, measurable affiliate pipeline, and priority queue.
-- Added responsive prospect and segment views.
-- Added local fixtures for every recruiting segment so the app can be tested before installation.

package/dist/scaffolds/notis-affiliate-prospects/README.md

@@ -1,20 +0,0 @@
-# Affiliate Prospects
-
-Local-first Notis app for monitoring the affiliate recruiting pipeline.
-
-The app is intentionally a read-only campaign surface. Notis automations and Codex workers own
-discovery, enrichment, outreach preparation, analytics reconciliation, and record updates. This
-keeps one source of truth while avoiding business logic in the UI.
-
-## Routes
-
-- Dashboard: KPIs, pipeline, priority queue, and segment coverage.
-- Prospects: responsive reference table for every lead and next action.
-- Segments: scorecards linked to the source-controlled segment playbooks.
-
-## Data
-
-The deployed app references `affiliate_prospects_1` and `affiliate_outreach_events_1`. Their
-canonical schema is documented in `campaign/affiliate-network/data-schema.md`. During local
-development the app uses deterministic mock prospects so it can be reviewed before any workspace
-installation.

package/dist/scaffolds/notis-affiliate-prospects/app/globals.css

@@ -1,42 +0,0 @@
-@tailwind base;
-@tailwind components;
-@tailwind utilities;
-
-.affiliate-app-shell {
-  container-type: inline-size;
-  padding: clamp(1rem, 2.5cqi, 2rem);
-  max-width: 1440px;
-  margin-inline: auto;
-}
-
-.affiliate-stat-grid {
-  display: grid;
-  grid-template-columns: repeat(auto-fit, minmax(min(180px, 100%), 1fr));
-}
-
-.affiliate-dashboard-grid {
-  display: grid;
-  grid-template-columns: minmax(0, 1fr);
-}
-
-@container (min-width: 940px) {
-  .affiliate-dashboard-grid {
-    grid-template-columns: minmax(0, 1.55fr) minmax(300px, 0.75fr);
-  }
-}
-
-.affiliate-data-table {
-  min-width: 900px;
-}
-
-@media (max-width: 767px) {
-  .affiliate-desktop-table {
-    display: none;
-  }
-}
-
-@media (min-width: 768px) {
-  .affiliate-mobile-cards {
-    display: none;
-  }
-}

package/dist/scaffolds/notis-affiliate-prospects/app/layout.tsx

@@ -1,7 +0,0 @@
-import type { ReactNode } from 'react';
-import '@notis/sdk/styles.css';
-import './globals.css';
-
-export default function AppShell({ children }: { children: ReactNode }) {
-  return children;
-}

package/dist/scaffolds/notis-affiliate-prospects/app/page.tsx

@@ -1,248 +0,0 @@
-'use client';
-
-import { useEffect, useMemo, useState } from 'react';
-import { useNotisNavigation, useTopBarSearch } from '@notis/sdk';
-import {
-  ArrowClockwiseIcon,
-  ArrowRightIcon,
-  CheckCircleIcon,
-  CurrencyDollarIcon,
-  FunnelIcon,
-  PaperPlaneTiltIcon,
-  SparkleIcon,
-  UsersThreeIcon,
-} from '@phosphor-icons/react';
-
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card';
-import {
-  PIPELINE,
-  SEGMENTS,
-  compactNumber,
-  money,
-  statusTone,
-  type AffiliateProspect,
-} from '@/lib/affiliate-data';
-import { useAffiliateProspects } from '@/lib/notis-tools';
-
-export default function DashboardPage() {
-  const { prospects, loading, error, refetch } = useAffiliateProspects();
-  const navigation = useNotisNavigation();
-  const [search, setSearch] = useState('');
-  const { setLoading } = useTopBarSearch({
-    value: search,
-    onChange: setSearch,
-    placeholder: 'Filter affiliate prospects…',
-  });
-  useEffect(() => setLoading(loading), [loading, setLoading]);
-
-  const filtered = useMemo(() => {
-    const query = search.trim().toLowerCase();
-    if (!query) return prospects;
-    return prospects.filter((prospect) =>
-      [prospect.name, prospect.company, prospect.segment, prospect.status, prospect.source]
-        .join(' ')
-        .toLowerCase()
-        .includes(query),
-    );
-  }, [prospects, search]);
-
-  const metrics = useMemo(() => {
-    const qualified = prospects.filter((p) => p.fitScore >= 75 && p.status !== 'Disqualified').length;
-    const active = prospects.filter((p) => p.status === 'Activated').length;
-    const conversations = prospects.filter((p) =>
-      ['Replied', 'Interested', 'Applied', 'Activated'].includes(p.status),
-    ).length;
-    const mrr = prospects.reduce((sum, p) => sum + p.attributedMrr, 0);
-    return { qualified, active, conversations, mrr };
-  }, [prospects]);
-
-  const priority = useMemo(
-    () =>
-      [...filtered]
-        .filter((p) => !p.optedOut && !['Activated', 'Disqualified'].includes(p.status))
-        .sort((a, b) => b.fitScore - a.fitScore)
-        .slice(0, 6),
-    [filtered],
-  );
-
-  const segmentRows = useMemo(
-    () =>
-      SEGMENTS.map((segment) => {
-        const rows = prospects.filter((p) => p.segment === segment.name);
-        const engaged = rows.filter((p) => ['Replied', 'Interested', 'Applied', 'Activated'].includes(p.status)).length;
-        return { ...segment, total: rows.length, engaged };
-      }).sort((a, b) => b.total - a.total),
-    [prospects],
-  );
-
-  return (
-    <main data-store-screenshot="dashboard" className="affiliate-app-shell space-y-6">
-      <header className="flex flex-wrap items-start justify-between gap-4">
-        <div>
-          <div className="flex items-center gap-2 text-xs font-medium text-muted-foreground">
-            <SparkleIcon size={14} weight="fill" />
-            Affiliate recruiting control center
-          </div>
-          <h1 className="mt-1 text-2xl font-semibold tracking-tight">Campaign dashboard</h1>
-          <p className="mt-1 max-w-2xl text-sm text-muted-foreground">
-            One place to source, qualify, contact, and activate affiliates—while Notis watches the
-            pipeline and local Codex workers do the heavy research.
-          </p>
-        </div>
-        <button
-          type="button"
-          onClick={refetch}
-          className="inline-flex min-h-11 items-center gap-2 rounded-md border border-border bg-background px-3 text-sm text-muted-foreground transition hover:bg-muted hover:text-foreground"
-        >
-          <ArrowClockwiseIcon className={loading ? 'animate-spin' : ''} size={16} />
-          Refresh
-        </button>
-      </header>
-
-      {error ? (
-        <div className="rounded-lg border border-destructive/20 bg-destructive/10 px-4 py-3 text-sm text-destructive">
-          {error.message}
-        </div>
-      ) : null}
-
-      <section className="affiliate-stat-grid gap-3">
-        <Metric icon={UsersThreeIcon} label="Prospects" value={compactNumber(prospects.length)} />
-        <Metric icon={FunnelIcon} label="Qualified" value={compactNumber(metrics.qualified)} />
-        <Metric icon={PaperPlaneTiltIcon} label="Conversations" value={compactNumber(metrics.conversations)} />
-        <Metric icon={CheckCircleIcon} label="Activated" value={compactNumber(metrics.active)} />
-        <Metric icon={CurrencyDollarIcon} label="Attributed MRR" value={money(metrics.mrr)} />
-      </section>
-
-      <section className="affiliate-dashboard-grid gap-4">
-        <Card>
-          <CardHeader className="flex-row items-center justify-between">
-            <div>
-              <CardTitle>Priority queue</CardTitle>
-              <p className="mt-1 text-xs text-muted-foreground">Highest-fit prospects needing a next action.</p>
-            </div>
-            <button
-              type="button"
-              onClick={() => navigation.toRoute('/prospects')}
-              className="inline-flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground"
-            >
-              All prospects <ArrowRightIcon size={13} />
-            </button>
-          </CardHeader>
-          <CardContent>
-            {loading && !prospects.length ? (
-              <p className="py-8 text-center text-sm text-muted-foreground">Loading the pipeline…</p>
-            ) : priority.length ? (
-              <div className="divide-y divide-border">
-                {priority.map((prospect) => <PriorityRow key={prospect.id} prospect={prospect} />)}
-              </div>
-            ) : (
-              <p className="rounded-lg border border-dashed border-border py-8 text-center text-sm text-muted-foreground">
-                No prospects need attention.
-              </p>
-            )}
-          </CardContent>
-        </Card>
-
-        <Card>
-          <CardHeader>
-            <CardTitle>Pipeline</CardTitle>
-            <p className="text-xs text-muted-foreground">Current distribution across recruiting stages.</p>
-          </CardHeader>
-          <CardContent className="space-y-3">
-            {PIPELINE.slice(0, 9).map((status) => {
-              const count = prospects.filter((p) => p.status === status).length;
-              const width = prospects.length ? Math.max((count / prospects.length) * 100, count ? 4 : 0) : 0;
-              return (
-                <div key={status}>
-                  <div className="mb-1 flex items-center justify-between text-xs">
-                    <span className="text-muted-foreground">{status}</span>
-                    <span className="font-medium tabular-nums">{count}</span>
-                  </div>
-                  <div className="h-1.5 overflow-hidden rounded-full bg-muted">
-                    <div className="h-full rounded-full bg-primary/70" style={{ width: `${width}%` }} />
-                  </div>
-                </div>
-              );
-            })}
-          </CardContent>
-        </Card>
-      </section>
-
-      <Card>
-        <CardHeader className="flex-row items-center justify-between">
-          <div>
-            <CardTitle>Segment coverage</CardTitle>
-            <p className="mt-1 text-xs text-muted-foreground">Where the campaign is deep—and where sourcing should run next.</p>
-          </div>
-          <button
-            type="button"
-            onClick={() => navigation.toRoute('/segments')}
-            className="inline-flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground"
-          >
-            Playbooks <ArrowRightIcon size={13} />
-          </button>
-        </CardHeader>
-        <CardContent>
-          <div className="grid grid-cols-1 gap-3 sm:grid-cols-2 xl:grid-cols-4">
-            {segmentRows.map((segment) => (
-              <div key={segment.name} className="rounded-lg border border-border p-3">
-                <p className="text-sm font-medium">{segment.short}</p>
-                <p className="mt-1 text-xs text-muted-foreground">{segment.source}</p>
-                <div className="mt-3 flex items-end justify-between">
-                  <span className="text-2xl font-semibold tabular-nums">{segment.total}</span>
-                  <span className="text-xs text-muted-foreground">{segment.engaged} engaged</span>
-                </div>
-              </div>
-            ))}
-          </div>
-        </CardContent>
-      </Card>
-    </main>
-  );
-}
-
-function Metric({
-  icon: Icon,
-  label,
-  value,
-}: {
-  icon: typeof UsersThreeIcon;
-  label: string;
-  value: string;
-}) {
-  return (
-    <Card className="p-4">
-      <div className="flex items-center justify-between gap-3">
-        <div>
-          <p className="text-xs text-muted-foreground">{label}</p>
-          <p className="mt-1 text-2xl font-semibold tabular-nums">{value}</p>
-        </div>
-        <div className="rounded-lg bg-muted p-2 text-muted-foreground">
-          <Icon size={18} />
-        </div>
-      </div>
-    </Card>
-  );
-}
-
-function PriorityRow({ prospect }: { prospect: AffiliateProspect }) {
-  return (
-    <div className="flex flex-wrap items-center gap-3 py-3 first:pt-0 last:pb-0">
-      <div className="flex min-w-0 flex-1 items-center gap-3">
-        <div className="flex h-9 w-9 shrink-0 items-center justify-center rounded-full bg-muted text-xs font-semibold">
-          {prospect.name.split(/\s+/).slice(0, 2).map((part) => part[0]).join('')}
-        </div>
-        <div className="min-w-0">
-          <p className="truncate text-sm font-medium">{prospect.name}</p>
-          <p className="truncate text-xs text-muted-foreground">
-            {prospect.company || prospect.segment} · {prospect.nextAction || 'Review qualification'}
-          </p>
-        </div>
-      </div>
-      <span className={`rounded-full px-2 py-1 text-[11px] font-medium ${statusTone(prospect.status)}`}>
-        {prospect.status}
-      </span>
-      <span className="w-12 text-right text-sm font-semibold tabular-nums">{prospect.fitScore}</span>
-    </div>
-  );
-}