@anna-ai/cli 0.1.16 → 0.1.19

package/dist/{apps-Bt9CT5Sl.js → apps-ClgEOdKD.js}

@@ -1,5 +1,5 @@
 import { getAccount } from "./credentials-BTv2IfUZ.js";
-import { listDevApps } from "./dev-app-cache-DAHcq46m.js";
+import { listDevApps } from "./dev-app-cache-3Pfesngr.js";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";
 
 //#region src/commands/apps.ts

package/dist/bridge-B3Vwr4cg.js

@@ -0,0 +1,3 @@
+import { BridgeRequestError, PINNED_RUNTIME_VERSION, PythonBridge } from "./bridge-mkb_EM-y.js";
+
+export { PINNED_RUNTIME_VERSION, PythonBridge };

package/dist/{bridge-nqQ3-j-t.js → bridge-mkb_EM-y.js}

@@ -9,17 +9,39 @@ import { createInterface } from "node:readline";
 * `uvx <pkg>@<version>` so end users always run the dispatcher version
 * the CLI was tested against.
 */
-const PINNED_RUNTIME_VERSION = "0.2.0a3";
+const PINNED_RUNTIME_VERSION = "0.2.0a6";
+/**
+* Throwable from a {@link RequestHandler} to send a structured JSON-RPC
+* error back to the python bridge with a stable string ``code`` (e.g.
+* ``"llm_disabled"``, ``"provider_error"``). The python side decodes the
+* code from ``error.data.errorCode``.
+*/
+var BridgeRequestError = class extends Error {
+	constructor(code, message, details) {
+		super(message);
+		this.code = code;
+		this.details = details;
+	}
+};
 var PythonBridge = class {
 	proc = null;
 	nextId = 1;
 	pending = new Map();
+	requestHandlers = new Map();
 	readyPromise = null;
 	closed = false;
 	constructor(opts) {
 		this.opts = opts;
 	}
 	/**
+	* Register a handler for an outbound python→node RPC method (e.g.
+	* ``host.llm.complete``). Subsequent registrations for the same method
+	* replace the previous handler.
+	*/
+	onRequest(method, handler) {
+		this.requestHandlers.set(method, handler);
+	}
+	/**
 	* Build the default launch command from `opts.mode`. uvx by default; for
 	* `nexus-source` mode, `matrixNexusRoot` must be set.
 	*/
@@ -93,6 +115,10 @@ var PythonBridge = class {
 					resolve$1();
 					return;
 				}
+				if (typeof env$1.method === "string") {
+					this.handleIncomingRequest(env$1);
+					return;
+				}
 				this.handleResponse(env$1);
 			});
 			this.proc.on("error", (e) => reject(e));
@@ -102,6 +128,58 @@ var PythonBridge = class {
 		});
 		await this.readyPromise;
 	}
+	async handleIncomingRequest(env) {
+		const method = env.method;
+		const id = env.id;
+		if (id == null) return;
+		const params = env.params ?? {};
+		const handler = this.requestHandlers.get(method);
+		if (!handler) {
+			this.writeFrame({
+				jsonrpc: "2.0",
+				id,
+				error: {
+					code: -32601,
+					message: `method not found: ${method}`
+				}
+			});
+			return;
+		}
+		try {
+			const result = await handler(params);
+			this.writeFrame({
+				jsonrpc: "2.0",
+				id,
+				result: result ?? {}
+			});
+		} catch (e) {
+			if (e instanceof BridgeRequestError) this.writeFrame({
+				jsonrpc: "2.0",
+				id,
+				error: {
+					code: -32e3,
+					message: e.message,
+					data: {
+						errorCode: e.code,
+						...e.details ?? {}
+					}
+				}
+			});
+			else this.writeFrame({
+				jsonrpc: "2.0",
+				id,
+				error: {
+					code: -32603,
+					message: e.message,
+					data: { errorCode: "internal_error" }
+				}
+			});
+		}
+	}
+	writeFrame(env) {
+		if (!this.proc) return;
+		this.proc.stdin.write(`${JSON.stringify(env)}\n`);
+	}
 	handleResponse(env) {
 		const id = env.id;
 		if (id == null) return;
@@ -143,4 +221,4 @@ var PythonBridge = class {
 };
 
 //#endregion
-export { PINNED_RUNTIME_VERSION, PythonBridge };
+export { BridgeRequestError, PINNED_RUNTIME_VERSION, PythonBridge };

package/dist/cli.js

@@ -450,8 +450,8 @@ program.command("validate").description("Run schema + ACL checks on a manifest+b
 	const code = printResult(result);
 	process.exit(code);
 });
-program.command("dev").description("Run a local harness (in-process dispatcher + iframe + SSE relay)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--bundle <dir>", "bundle directory (default: ./bundle)").option("--slug <slug>", "App slug (overrides manifest.slug/name)").option("--view <name>", "View name to open (default: manifest default)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (auto-detected if omitted; can also use $ANNA_NEXUS_ROOT)").option("--port <number>", "HTTP port", "5180").option("--user-id <id>", "Harness user_id", "1").option("--cwd <dir>", "Project root (default: cwd)").option("--no-watch", "Disable bundle file watcher (default: enabled)").option("--executa <spec>", "Explicit executa registration; repeatable. Spec: comma-separated key=value (dir=<path>[,tool_id=<id>][,type=python|node|go|binary][,command=\"<argv>\"]). When only `dir=` is given, the executa is auto-detected from executa.json / pyproject.toml / package.json / go.mod. Overrides directory auto-discovery under <manifest-dir>/executas/.", (val, prev) => prev ? [...prev, val] : [val]).option("--no-llm", "Disable LLM bridge (anna.llm/agent return llm_disabled)").option("--mock-llm <fixture>", "Serve canned LLM responses from a JSONL fixture").option("--llm-account <host>", "Saved account host to use (default: current)").option("--llm-app-slug <slug>", "Override the manifest slug used to register / look up the dev AnnaApp (default: manifest.slug)").action(async (opts) => {
-	const { runDev, parseExecutaSpec } = await import("./dev-BRlFgo2I.js");
+program.command("dev").description("Run a local harness (in-process dispatcher + iframe + SSE relay)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--bundle <dir>", "bundle directory (default: ./bundle)").option("--slug <slug>", "App slug (overrides manifest.slug/name)").option("--view <name>", "View name to open (default: manifest default)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (auto-detected if omitted; can also use $ANNA_NEXUS_ROOT)").option("--port <number>", "HTTP port", "5180").option("--user-id <id>", "Harness user_id", "1").option("--cwd <dir>", "Project root (default: cwd)").option("--no-watch", "Disable bundle file watcher (default: enabled)").option("--executa <spec>", "Explicit executa registration; repeatable. Spec: comma-separated key=value (dir=<path>[,tool_id=<id>][,type=python|node|go|binary][,command=\"<argv>\"]). When only `dir=` is given, the executa is auto-detected from executa.json / pyproject.toml / package.json / go.mod. Overrides directory auto-discovery under <manifest-dir>/executas/.", (val, prev) => prev ? [...prev, val] : [val]).option("--no-llm", "Disable LLM bridge (anna.llm/agent return llm_disabled)").option("--mock-llm <fixture>", "Serve canned LLM responses from a JSONL fixture").option("--llm-account <host>", "Saved account host to use (default: current)").option("--llm-app-slug <slug>", "Override the manifest slug used to register / look up the dev AnnaApp (default: manifest.slug)").option("--storage <mode>", "Storage backend: \"legacy\" (in-memory runtime_state, default) or \"aps\" (real nexus APS via /api/v1/storage/* — requires `anna-app login`).", "legacy").action(async (opts) => {
+	const { runDev, parseExecutaSpec } = await import("./dev-D8o7xi0W.js");
 	const cwd = opts.cwd ?? process.cwd();
 	let executas;
 	if (opts.executa && opts.executa.length > 0) {
@@ -479,7 +479,8 @@ program.command("dev").description("Run a local harness (in-process dispatcher +
 		noLlm: opts.llm === false,
 		mockLlm: opts.mockLlm,
 		llmAccount: opts.llmAccount,
-		llmAppSlug: opts.llmAppSlug
+		llmAppSlug: opts.llmAppSlug,
+		storageMode: opts.storage
 	});
 	process.exit(code);
 });
@@ -509,7 +510,7 @@ fixture.command("replay <file>").description("Dry-run replay of a harness record
 	process.exit(code);
 });
 program.command("doctor").description("Check environment for `anna-app dev` (uv, matrix-nexus, dev key)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (optional)").action(async (opts) => {
-	const { runDoctor } = await import("./doctor-C8MWfLt8.js");
+	const { runDoctor } = await import("./doctor-CgJYokiR.js");
 	const code = await runDoctor({ matrixNexusRoot: opts.matrixNexusRoot });
 	process.exit(code);
 });
@@ -535,7 +536,7 @@ program.command("whoami").description("Show the current account (and any others)
 	process.exit(code);
 });
 program.command("apps:list").description("List dev apps installed for the current PAT").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runAppsList } = await import("./apps-Bt9CT5Sl.js");
+	const { runAppsList } = await import("./apps-ClgEOdKD.js");
 	const code = await runAppsList({
 		account: opts.account,
 		json: opts.json
@@ -570,7 +571,7 @@ executa.command("register").description("Register a standalone executa with nexu
 	process.exit(code);
 });
 executa.command("dev").description("Run one Executa plugin in isolation (REPL or one-shot describe/invoke)").option("--dir <path>", "Executa project dir (default: CWD)").option("--spec <spec>", "Override discovery: comma-separated key=value (tool_id=...,type=...,command=\"...\")").option("--describe", "Print MANIFEST and exit", false).option("--health", "Print health and exit", false).option("--invoke <tool>", "Invoke one tool and exit").option("--args <json>", "JSON object passed as tool arguments", "{}").option("--json", "One-shot: emit compact JSON (no banners)", false).option("--no-sampling", "Hard-disable sampling reverse RPC (returns sampling_disabled)").option("--mock-sampling <fixture>", "Serve canned sampling responses from a JSONL fixture (offline)").option("--app-slug <slug>", "Forward sampling to nexus on behalf of this dev AnnaApp slug").option("--sampling-account <host>", "Saved account host for nexus sampling (default: current)").option("--no-agent", "Hard-disable agent reverse RPC (returns agent_not_granted)").option("--mock-agent <fixture>", "Serve canned agent/* responses from a JSONL fixture (offline)").option("--agent-account <host>", "Saved account host for nexus agent (default: --sampling-account or current)").option("--storage <mode>", "Storage backend: off | memory | mock | real (default: memory)").option("--mock-storage <fixture>", "Serve canned storage/* + files/* responses from a JSONL fixture").option("--storage-account <host>", "Saved account host for nexus storage (default: --sampling-account or current)").option("--storage-scopes <list>", "Comma-separated scopes for real storage tokens (default: user,app,tool)").option("--no-image", "Hard-disable image reverse RPC (returns image_not_granted)").option("--mock-image <fixture>", "Serve canned image/generate + image/edit responses from a JSONL fixture").option("--image-account <host>", "Saved account host for nexus image (default: --sampling-account or current)").option("--no-upload", "Hard-disable host/uploadFile reverse RPC (returns upload_not_granted)").option("--mock-upload <fixture>", "Serve canned host/uploadFile responses from a JSONL fixture").option("--upload-account <host>", "Saved account host for nexus uploads (default: --sampling-account or current)").action(async (opts) => {
-	const { runExecutaDev } = await import("./executa-dev-4FZ7AJHR.js");
+	const { runExecutaDev } = await import("./executa-dev-BeC6a8S8.js");
 	const storageMode = opts.storage === void 0 ? void 0 : (() => {
 		const m = opts.storage;
 		if (m === "off" || m === "memory" || m === "mock" || m === "real") return m;

package/dist/dev-D8o7xi0W.js

@@ -0,0 +1,3 @@
+import { parseExecutaSpec, runDev } from "./dev-b1j-dEM2.js";
+
+export { parseExecutaSpec, runDev };

package/dist/{dev-app-cache-DAHcq46m.js → dev-app-cache-3Pfesngr.js}

@@ -1,6 +1,6 @@
 import { canonicalHost } from "./credentials-BTv2IfUZ.js";
 import { dirname, join, resolve } from "node:path";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 
 //#region src/dev-app-cache.ts
 const CACHE_DIR = ".anna";
@@ -28,6 +28,20 @@ function writeDevAppCache(cwd, entry) {
 	mkdirSync(dirname(p), { recursive: true });
 	writeFileSync(p, JSON.stringify(entry, null, 2) + "\n", "utf-8");
 }
+/** Delete the local dev-app cache file.
+*
+*  Used by the LLM bridge's recovery flow: when `/dev/session/mint`
+*  returns 404 with "app slug ... not found", the cache is stale (the
+*  nexus DB no longer has the row this cache asserts is registered).
+*  Invalidating forces the next `ensureDevAppRegistered` call to
+*  re-POST `/dev/apps/register`. Idempotent: a missing file is a no-op.
+*/
+function invalidateDevAppCache(cwd) {
+	const p = cachePath(cwd);
+	if (existsSync(p)) try {
+		unlinkSync(p);
+	} catch {}
+}
 /** Call POST /api/v1/anna-apps/dev/apps/register. Idempotent server-side. */
 async function registerDevApp(args) {
 	const url = `${canonicalHost(args.host)}/api/v1/anna-apps/dev/apps/register`;
@@ -172,4 +186,4 @@ async function ensureDevExecutaRegistered(args) {
 }
 
 //#endregion
-export { ensureDevAppRegistered, ensureDevExecutaRegistered, listDevApps, readDevAppCache, readDevExecutaCache, registerDevApp, registerDevExecuta, writeDevAppCache, writeDevExecutaCache };
+export { ensureDevAppRegistered, ensureDevExecutaRegistered, invalidateDevAppCache, listDevApps, readDevAppCache, readDevExecutaCache, registerDevApp, registerDevExecuta, writeDevAppCache, writeDevExecutaCache };

package/dist/dev-app-cache-CZ1UjMz0.js

@@ -0,0 +1,4 @@
+import "./credentials-BTv2IfUZ.js";
+import { ensureDevAppRegistered, ensureDevExecutaRegistered, invalidateDevAppCache, listDevApps, readDevAppCache, readDevExecutaCache, registerDevApp, registerDevExecuta, writeDevAppCache, writeDevExecutaCache } from "./dev-app-cache-3Pfesngr.js";
+
+export { ensureDevAppRegistered, ensureDevExecutaRegistered, invalidateDevAppCache };

package/dist/{dev-C6v5yRV2.js → dev-b1j-dEM2.js}

@@ -31,8 +31,20 @@ async function runDev(opts) {
 	}
 	const matrixNexusRoot = await resolveMatrixNexusRoot(opts.matrixNexusRoot, cwd);
 	const mode = matrixNexusRoot ? "nexus-source" : "uvx";
-	const { PythonBridge, PINNED_RUNTIME_VERSION } = await import("./bridge-AJilXBw2.js");
-	const { HarnessServer } = await import("./server-D8R6ppOp.js");
+	const storageMode = opts.storageMode === "aps" ? "aps" : "legacy";
+	if (opts.storageMode && opts.storageMode !== "legacy" && opts.storageMode !== "aps") {
+		console.error(red(`✗ --storage must be "legacy" or "aps", got "${opts.storageMode}"`));
+		return 2;
+	}
+	if (storageMode === "aps") {
+		if (opts.noLlm || opts.mockLlm) {
+			console.error(red("✗ --storage aps requires a real LLM bridge (PAT on disk); drop --no-llm / --mock-llm or switch back to --storage legacy."));
+			return 2;
+		}
+		process.env.ANNA_APP_RUNTIME_STORAGE_MODE = "aps";
+	}
+	const { PythonBridge, PINNED_RUNTIME_VERSION } = await import("./bridge-B3Vwr4cg.js");
+	const { HarnessServer } = await import("./server-BgJGmEpv.js");
 	const bridge = new PythonBridge({
 		mode,
 		matrixNexusRoot: matrixNexusRoot ?? void 0,
@@ -75,7 +87,9 @@ async function runDev(opts) {
 		manifest
 	});
 	if (llm === null) return 2;
+	llm.storageMode = storageMode;
 	console.log(`  llm bridge        ${dim(llm.mode === "off" ? "disabled (--no-llm)" : llm.mode === "mock" ? `mock (${opts.mockLlm})` : `real${opts.llmAccount ? ` [${opts.llmAccount}]` : ""} → app_slug=${llm.appSlug}`)}`);
+	console.log(`  storage backend   ${dim(storageMode === "aps" ? "aps (real nexus APS via /api/v1/storage/*)" : "legacy (in-memory runtime_state)")}`);
 	const server = new HarnessServer({
 		slug,
 		manifest,
@@ -123,7 +137,7 @@ async function runDev(opts) {
 */
 async function resolveRealLlm(args) {
 	const { getAccount } = await import("./credentials-DDqx6XMQ.js");
-	const { ensureDevAppRegistered } = await import("./dev-app-cache-DGF2Kuzd.js");
+	const { ensureDevAppRegistered } = await import("./dev-app-cache-CZ1UjMz0.js");
 	const acc = getAccount(args.account);
 	if (!acc) {
 		console.error(red("✗ no developer PAT on disk — run `anna-app login --host <nexus-url>` first.\n  (or use `--no-llm` / `--mock-llm <fixture>` to develop offline.)"));
@@ -134,22 +148,35 @@ async function resolveRealLlm(args) {
 		return null;
 	}
 	const manifest = args.manifest;
+	const registerInput = {
+		slug: args.appSlug,
+		name: manifest.name,
+		category: manifest.category,
+		tagline: manifest.tagline
+	};
 	try {
 		const entry = await ensureDevAppRegistered({
 			cwd: args.cwd,
 			host: acc.host,
 			pat: acc.pat,
-			input: {
-				slug: args.appSlug,
-				name: manifest.name,
-				category: manifest.category,
-				tagline: manifest.tagline
-			}
+			input: registerInput
 		});
 		return {
 			mode: "real",
 			account: args.account,
-			appSlug: entry.slug
+			appSlug: entry.slug,
+			onAppSlugNotFound: async () => {
+				const { invalidateDevAppCache } = await import("./dev-app-cache-CZ1UjMz0.js");
+				invalidateDevAppCache(args.cwd);
+				const fresh = getAccount(args.account);
+				if (!fresh) throw new Error("PAT not found while re-registering dev app — run `anna-app login` again");
+				await ensureDevAppRegistered({
+					cwd: args.cwd,
+					host: fresh.host,
+					pat: fresh.pat,
+					input: registerInput
+				});
+			}
 		};
 	} catch (e) {
 		console.error(red(`✗ failed to register dev app on nexus: ${e.message}`));

package/dist/{doctor-C8MWfLt8.js → doctor-CgJYokiR.js}

@@ -1,4 +1,4 @@
-import { PINNED_RUNTIME_VERSION } from "./bridge-nqQ3-j-t.js";
+import { PINNED_RUNTIME_VERSION } from "./bridge-mkb_EM-y.js";
 import { dirname, isAbsolute, resolve } from "node:path";
 import { existsSync, statSync } from "node:fs";
 import { spawnSync } from "node:child_process";

package/dist/{executa-dev-4FZ7AJHR.js → executa-dev-BeC6a8S8.js}

@@ -1,4 +1,4 @@
-import { parseExecutaSpec } from "./dev-C6v5yRV2.js";
+import { parseExecutaSpec } from "./dev-b1j-dEM2.js";
 import { isAbsolute, resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";
@@ -34,7 +34,7 @@ async function runExecutaDev(opts) {
 	const oneShot = !!(opts.describe || opts.health || opts.invoke);
 	const quiet = oneShot && (opts.json ?? false);
 	const { getAccount } = await import("./credentials-DDqx6XMQ.js");
-	const { ensureDevExecutaRegistered } = await import("./dev-app-cache-DGF2Kuzd.js");
+	const { ensureDevExecutaRegistered } = await import("./dev-app-cache-CZ1UjMz0.js");
 	const needsRealMint = !opts.noSampling && !opts.mockSampling || !opts.noAgent && !opts.mockAgent || !opts.noImage && !opts.mockImage || !opts.noUpload && !opts.mockUpload || opts.storage === "real";
 	let effectiveAppSlug = opts.appSlug;
 	let autoRegistered = false;

package/dist/{server-D8R6ppOp.js → server-BgJGmEpv.js}

@@ -1,4 +1,5 @@
 import { canonicalHost, getAccount } from "./credentials-BTv2IfUZ.js";
+import { BridgeRequestError } from "./bridge-mkb_EM-y.js";
 import { dirname, join, normalize, resolve } from "node:path";
 import { createRequire } from "node:module";
 import { createReadStream, existsSync, readFileSync, statSync, watch } from "node:fs";
@@ -12,6 +13,10 @@ import { setTimeout as setTimeout$1 } from "node:timers/promises";
 var LlmBridge = class {
 	mintedAuto = new Map();
 	mintedAgent = new Map();
+	/** Single shared storage_token per LlmBridge instance — scope is per
+	*  ``(user, app)`` server-side, not per-window, so caching one is
+	*  correct. Re-minted automatically before expiry. */
+	mintedStorage = null;
 	mocks = [];
 	streamCounter = 0;
 	constructor(opts) {
@@ -30,10 +35,30 @@ var LlmBridge = class {
 		}
 	}
 	/** Returns true iff this bridge handles `(ns, method)` (i.e. the harness
-	*  should NOT forward it to the in-process Python dispatcher). */
+	*  should NOT forward it to the in-process Python dispatcher).
+	*
+	*  Storage handling depends on ``storageMode``:
+	*  - ``legacy`` (default): the bridge does NOT claim storage; the Python
+	*    dispatcher implements ``anna.storage.*`` against the in-memory
+	*    ``runtime_state`` dict. Pre-APS parity, works fully offline.
+	*  - ``aps``: the bridge claims storage and forwards to real nexus APS
+	*    via ``/api/v1/storage/*`` with a Bearer ``storage_token``. */
+	handles(ns, method) {
+		if (ns === "llm" && (method === "complete" || method === "embed")) return true;
+		if (ns === "agent" && method.startsWith("session.")) return true;
+		if (ns === "image" && (method === "generate" || method === "edit")) return true;
+		if (ns === "upload" && (method === "inline" || method === "negotiate" || method === "confirm")) return true;
+		if (ns === "storage" && this.opts.storageMode === "aps" && this.opts.mode === "real" && (method === "get" || method === "set" || method === "delete" || method === "list")) return true;
+		return false;
+	}
+	/** Back-compat static alias — older code paths still call
+	*  ``LlmBridge.handles(ns, method)`` without an instance. Returns the
+	*  legacy (no-storage) decision since options aren't available here. */
 	static handles(ns, method) {
-		if (ns === "llm" && method === "complete") return true;
+		if (ns === "llm" && (method === "complete" || method === "embed")) return true;
 		if (ns === "agent" && method.startsWith("session.")) return true;
+		if (ns === "image" && (method === "generate" || method === "edit")) return true;
+		if (ns === "upload" && (method === "inline" || method === "negotiate" || method === "confirm")) return true;
 		return false;
 	}
 	/** Resolve the active account or throw with a friendly message. */
@@ -90,12 +115,65 @@ var LlmBridge = class {
 		this.mintedAgent.set(ms.appSessionUuid, ms);
 		return ms;
 	}
+	/** Mint (or reuse) a storage_token for APS forwarding.
+	*
+	*  Server-side ``/dev/storage/mint`` issues a JWT scoped to
+	*  ``(user, app)`` with ``allowed_scopes ⊆ {user, app, tool}`` and a
+	*  configurable TTL (default 600s) + ``max_calls`` budget (default 200).
+	*  We re-mint when within 30s of expiry; budget exhaustion currently
+	*  surfaces as an HTTP 401/403 which propagates back to the iframe.
+	*
+	*  Per-app, not per-window: the token doesn't carry a window or
+	*  session uuid — storage scopes are ``user``/``app``/``tool``, not
+	*  ``window``. Caching one per LlmBridge instance is correct. */
+	async mintStorage() {
+		const cached = this.mintedStorage;
+		if (cached && cached.expiresAt - 30 > Math.floor(Date.now() / 1e3)) return cached;
+		const acc = this.account();
+		const slug = this.requireAppSlug();
+		const body = {
+			pat: acc.pat,
+			app_slug: slug,
+			ttl_seconds: 600,
+			max_calls: 200
+		};
+		const url = `${canonicalHost(acc.host)}/api/v1/anna-apps/dev/storage/mint`;
+		const res = await fetch(url, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify(body)
+		});
+		if (!res.ok) {
+			const text = await res.text().catch(() => "");
+			throw new Error(`storage.mint failed: HTTP ${res.status} ${text}`);
+		}
+		const payload = await res.json();
+		const ms = {
+			storageToken: payload.storage_token,
+			expiresAt: Math.floor(Date.now() / 1e3) + (payload.expires_in || 600),
+			allowedScopes: payload.allowed_scopes ?? [
+				"user",
+				"app",
+				"tool"
+			]
+		};
+		this.mintedStorage = ms;
+		return ms;
+	}
 	/** Throws a friendly error if no appSlug was wired into the bridge. */
 	requireAppSlug() {
 		if (!this.opts.appSlug) throw new Error("llm bridge has no app_slug — the harness must register the dev app via POST /api/v1/anna-apps/dev/apps/register before minting sessions. (Run `anna-app login` once, then `anna-app dev` will auto-register the manifest slug.)");
 		return this.opts.appSlug;
 	}
 	async callMint(host, body) {
+		return this._callMintOnce(
+			host,
+			body,
+			/*retryOnAppNotFound=*/
+			true
+);
+	}
+	async _callMintOnce(host, body, retryOnAppNotFound) {
 		const url = `${canonicalHost(host)}/api/v1/anna-apps/dev/session/mint`;
 		const res = await fetch(url, {
 			method: "POST",
@@ -104,6 +182,19 @@ var LlmBridge = class {
 		});
 		if (!res.ok) {
 			const text = await res.text().catch(() => "");
+			if (retryOnAppNotFound && res.status === 404 && /app slug .* not found/.test(text) && typeof this.opts.onAppSlugNotFound === "function") {
+				try {
+					await this.opts.onAppSlugNotFound();
+				} catch (hookErr) {
+					throw new Error(`session.mint failed: HTTP 404 ${text}\n  recovery hook failed: ${hookErr.message}`);
+				}
+				return this._callMintOnce(
+					host,
+					body,
+					/*retryOnAppNotFound=*/
+					false
+);
+			}
 			throw new Error(`session.mint failed: HTTP ${res.status} ${text}`);
 		}
 		return await res.json();
@@ -194,6 +285,14 @@ var LlmBridge = class {
 				result
 			};
 		}
+		if (args.ns === "llm" && args.method === "embed") {
+			const ms = await this.mintComplete(args.windowUuid);
+			const result = await this.postJson(`${canonicalHost(acc.host)}/api/v1/copilot/app/embed`, ms.appSessionToken, args.args);
+			return {
+				ok: true,
+				result
+			};
+		}
 		if (args.ns === "agent") switch (args.method) {
 			case "session.create": {
 				const ms = await this.mintAgent(args.args);
@@ -290,6 +389,121 @@ var LlmBridge = class {
 				};
 			}
 		}
+		if (args.ns === "image" && (args.method === "generate" || args.method === "edit")) {
+			const ms = await this.mintComplete(args.windowUuid);
+			const result = await this.postJson(`${canonicalHost(acc.host)}/api/v1/copilot/app/image/${args.method}`, ms.appSessionToken, args.args);
+			return {
+				ok: true,
+				result
+			};
+		}
+		if (args.ns === "upload") {
+			const ms = await this.mintComplete(args.windowUuid);
+			const path = args.method === "inline" ? "/api/v1/copilot/app/upload" : args.method === "negotiate" ? "/api/v1/copilot/app/upload/negotiate" : args.method === "confirm" ? "/api/v1/copilot/app/upload/confirm" : null;
+			if (path != null) {
+				const result = await this.postJson(`${canonicalHost(acc.host)}${path}`, ms.appSessionToken, args.args);
+				return {
+					ok: true,
+					result
+				};
+			}
+		}
+		if (args.ns === "storage") {
+			const sm = await this.mintStorage();
+			const a = args.args;
+			const base = `${canonicalHost(acc.host)}/api/v1/storage`;
+			if (args.method === "get") {
+				const qs = new URLSearchParams();
+				qs.set("key", String(a.key ?? ""));
+				if (a.scope) qs.set("scope", String(a.scope));
+				const res = await fetch(`${base}/kv?${qs.toString()}`, {
+					method: "GET",
+					headers: { authorization: `Bearer ${sm.storageToken}` }
+				});
+				if (res.status === 404) return {
+					ok: true,
+					result: {
+						value: null,
+						exists: false
+					}
+				};
+				if (!res.ok) {
+					const text = await res.text().catch(() => "");
+					throw new Error(`storage.get HTTP ${res.status}: ${text}`);
+				}
+				const entry = await res.json();
+				if (entry.exists === void 0) entry.exists = true;
+				return {
+					ok: true,
+					result: entry
+				};
+			}
+			if (args.method === "set") {
+				const qs = new URLSearchParams();
+				if (a.scope) qs.set("scope", String(a.scope));
+				const body = {
+					key: a.key,
+					value: a.value
+				};
+				if (a.if_match !== void 0) body.if_match = a.if_match;
+				if (a.metadata !== void 0) body.metadata = a.metadata;
+				if (a.tags !== void 0) body.tags = a.tags;
+				if (a.ttl_seconds !== void 0) body.ttl_seconds = a.ttl_seconds;
+				const res = await fetch(`${base}/kv?${qs.toString()}`, {
+					method: "PUT",
+					headers: {
+						"content-type": "application/json",
+						authorization: `Bearer ${sm.storageToken}`
+					},
+					body: JSON.stringify(body)
+				});
+				if (!res.ok) {
+					const text = await res.text().catch(() => "");
+					throw new Error(`storage.set HTTP ${res.status}: ${text}`);
+				}
+				return {
+					ok: true,
+					result: await res.json()
+				};
+			}
+			if (args.method === "delete") {
+				const qs = new URLSearchParams();
+				qs.set("key", String(a.key ?? ""));
+				if (a.if_match !== void 0) qs.set("if_match", String(a.if_match));
+				if (a.scope) qs.set("scope", String(a.scope));
+				const res = await fetch(`${base}/kv?${qs.toString()}`, {
+					method: "DELETE",
+					headers: { authorization: `Bearer ${sm.storageToken}` }
+				});
+				if (!res.ok) {
+					const text = await res.text().catch(() => "");
+					throw new Error(`storage.delete HTTP ${res.status}: ${text}`);
+				}
+				return {
+					ok: true,
+					result: await res.json()
+				};
+			}
+			if (args.method === "list") {
+				const qs = new URLSearchParams();
+				if (a.prefix !== void 0) qs.set("prefix", String(a.prefix));
+				if (a.cursor !== void 0) qs.set("cursor", String(a.cursor));
+				if (a.limit !== void 0) qs.set("limit", String(a.limit));
+				if (a.scope) qs.set("scope", String(a.scope));
+				const res = await fetch(`${base}/list?${qs.toString()}`, {
+					method: "GET",
+					headers: { authorization: `Bearer ${sm.storageToken}` }
+				});
+				if (!res.ok) {
+					const text = await res.text().catch(() => "");
+					throw new Error(`storage.list HTTP ${res.status}: ${text}`);
+				}
+				return {
+					ok: true,
+					result: await res.json()
+				};
+			}
+		}
 		return {
 			ok: false,
 			error: {
@@ -434,6 +648,105 @@ var HarnessServer = class {
 		this.cfg = cfg;
 		this.bridge = bridge;
 		this.llmBridge = cfg.llm ? new LlmBridge(cfg.llm) : null;
+		const HOST_OUTBOUND_ROUTES = [
+			[
+				"host.llm.complete",
+				"llm",
+				"complete"
+			],
+			[
+				"host.llm.embed",
+				"llm",
+				"embed"
+			],
+			[
+				"host.agent.session.create",
+				"agent",
+				"session.create"
+			],
+			[
+				"host.agent.session.run",
+				"agent",
+				"session.run"
+			],
+			[
+				"host.agent.session.cancel",
+				"agent",
+				"session.cancel"
+			],
+			[
+				"host.agent.session.history",
+				"agent",
+				"session.history"
+			],
+			[
+				"host.agent.session.delete",
+				"agent",
+				"session.delete"
+			],
+			[
+				"host.image.generate",
+				"image",
+				"generate"
+			],
+			[
+				"host.image.edit",
+				"image",
+				"edit"
+			],
+			[
+				"host.upload.inline",
+				"upload",
+				"inline"
+			],
+			[
+				"host.upload.negotiate",
+				"upload",
+				"negotiate"
+			],
+			[
+				"host.upload.confirm",
+				"upload",
+				"confirm"
+			],
+			[
+				"host.storage.get",
+				"storage",
+				"get"
+			],
+			[
+				"host.storage.set",
+				"storage",
+				"set"
+			],
+			[
+				"host.storage.delete",
+				"storage",
+				"delete"
+			],
+			[
+				"host.storage.list",
+				"storage",
+				"list"
+			]
+		];
+		for (const [hostMethod, ns, dispatchMethod] of HOST_OUTBOUND_ROUTES) this.bridge.onRequest(hostMethod, async (params) => {
+			if (this.llmBridge == null) throw new BridgeRequestError("llm_disabled", "harness started without an LlmBridge (use --no-llm to suppress this path or `anna-app login` for a real bridge)");
+			const out = await this.llmBridge.dispatch({
+				windowUuid: this.sessionId ?? "harness",
+				ns,
+				method: dispatchMethod,
+				args: params,
+				onEvent: (kind, payload) => {
+					this.llmEventQueue.push({
+						event: kind,
+						payload
+					});
+				}
+			});
+			if (out.ok) return out.result;
+			throw new BridgeRequestError(out.error.code, out.error.message);
+		});
 	}
 	async listen() {
 		if (this.cfg.executas && this.cfg.executas.length > 0) await this.bridge.call("executas.register", { executas: this.cfg.executas.map((e) => ({
@@ -577,7 +890,7 @@ var HarnessServer = class {
 				}
 			});
 		}
-		if (this.llmBridge != null && LlmBridge.handles(parsed.ns, parsed.method)) {
+		if (this.llmBridge != null && this.llmBridge.handles(parsed.ns, parsed.method)) {
 			const out = await this.llmBridge.dispatch({
 				windowUuid: this.sessionId ?? "harness",
 				ns: parsed.ns,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anna-ai/cli",
-  "version": "0.1.16",
+  "version": "0.1.19",
   "description": "Anna App developer CLI: scaffold, validate, harness (Phase 2 MVP: init + validate).",
   "license": "MIT",
   "type": "module",

package/dist/bridge-AJilXBw2.js

@@ -1,3 +0,0 @@
-import { PINNED_RUNTIME_VERSION, PythonBridge } from "./bridge-nqQ3-j-t.js";
-
-export { PINNED_RUNTIME_VERSION, PythonBridge };

package/dist/dev-BRlFgo2I.js

@@ -1,3 +0,0 @@
-import { parseExecutaSpec, runDev } from "./dev-C6v5yRV2.js";
-
-export { parseExecutaSpec, runDev };

package/dist/dev-app-cache-DGF2Kuzd.js

@@ -1,4 +0,0 @@
-import "./credentials-BTv2IfUZ.js";
-import { ensureDevAppRegistered, ensureDevExecutaRegistered, listDevApps, readDevAppCache, readDevExecutaCache, registerDevApp, registerDevExecuta, writeDevAppCache, writeDevExecutaCache } from "./dev-app-cache-DAHcq46m.js";
-
-export { ensureDevAppRegistered, ensureDevExecutaRegistered };