@anna-ai/cli 0.1.26 → 0.1.27

package/dist/{apps-cut-BCicQFRY.js → apps-cut-DKl5I9bf.js}

@@ -8,10 +8,10 @@ import "./executa-cache-CXiEgFZY.js";
 import "./executa-publish-CkPAB34b.js";
 import "./manifest-Bljz8Y6T.js";
 import { resolveClient, withErrorHandling } from "./_lifecycle-shared-BpSOfVCP.js";
-import "./dev-3okZmzNM.js";
-import "./executa-install-DQIhVHPT.js";
+import "./dev-DGTtVCNj.js";
+import "./executa-install-BGirXLX5.js";
 import "./app-cache-Bl7cE5fm.js";
-import { resolveAppBySlugOrCache } from "./working-orchestration-Dd1ETQ3c.js";
+import { resolveAppBySlugOrCache } from "./working-orchestration-Dh1gCwGg.js";
 import { resolve } from "node:path";
 import { bold, cyan, dim, green, yellow } from "kleur/colors";
 

package/dist/{apps-discard-BoY4zMJw.js → apps-discard-zg1nu2HN.js}

@@ -8,10 +8,10 @@ import "./executa-cache-CXiEgFZY.js";
 import "./executa-publish-CkPAB34b.js";
 import "./manifest-Bljz8Y6T.js";
 import { resolveClient, withErrorHandling } from "./_lifecycle-shared-BpSOfVCP.js";
-import "./dev-3okZmzNM.js";
-import "./executa-install-DQIhVHPT.js";
+import "./dev-DGTtVCNj.js";
+import "./executa-install-BGirXLX5.js";
 import "./app-cache-Bl7cE5fm.js";
-import { resolveAppBySlugOrCache } from "./working-orchestration-Dd1ETQ3c.js";
+import { resolveAppBySlugOrCache } from "./working-orchestration-Dh1gCwGg.js";
 import { dim, green, yellow } from "kleur/colors";
 
 //#region src/commands/apps-discard.ts

package/dist/{apps-push-CixatuQG.js → apps-push-C1-QDzF8.js}

@@ -8,10 +8,10 @@ import "./executa-cache-CXiEgFZY.js";
 import { bumpVersion, bundleHash, manifestHash, rewriteVersion } from "./executa-publish-CkPAB34b.js";
 import { loadAppManifest } from "./manifest-Bljz8Y6T.js";
 import { resolveClient, withErrorHandling } from "./_lifecycle-shared-BpSOfVCP.js";
-import "./dev-3okZmzNM.js";
-import "./executa-install-DQIhVHPT.js";
+import "./dev-DGTtVCNj.js";
+import "./executa-install-BGirXLX5.js";
 import "./app-cache-Bl7cE5fm.js";
-import { installLocalBundledShims, resolveAppIdentity, resolveBundledExecutas } from "./working-orchestration-Dd1ETQ3c.js";
+import { installLocalBundledShims, resolveAppIdentity, resolveBundledExecutas } from "./working-orchestration-Dh1gCwGg.js";
 import { isExistingDir, uploadWorkingBundle } from "./app-bundle-upload-BhAYo6yj.js";
 import { resolve } from "node:path";
 import { bold, cyan, dim, green, yellow } from "kleur/colors";

package/dist/bridge-6GIQG63S.js

@@ -0,0 +1,3 @@
+import { BridgeRequestError, PINNED_RUNTIME_VERSION, PythonBridge } from "./bridge-DAY7bsje.js";
+
+export { PINNED_RUNTIME_VERSION, PythonBridge };

package/dist/{bridge-DxBd0Fl9.js → bridge-DAY7bsje.js}

@@ -9,7 +9,7 @@ import { createInterface } from "node:readline";
 * `uvx <pkg>@<version>` so end users always run the dispatcher version
 * the CLI was tested against.
 */
-const PINNED_RUNTIME_VERSION = "0.2.0a8";
+const PINNED_RUNTIME_VERSION = "0.2.0a9";
 /**
 * Throwable from a {@link RequestHandler} to send a structured JSON-RPC
 * error back to the python bridge with a stable string ``code`` (e.g.

package/dist/cli.js

@@ -470,7 +470,7 @@ program.command("validate").description("Run schema + ACL checks on a manifest+b
 	process.exit(code);
 });
 program.command("dev").description("Run a local harness (in-process dispatcher + iframe + SSE relay)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--bundle <dir>", "bundle directory (default: ./bundle)").option("--slug <slug>", "App slug (overrides manifest.slug/name)").option("--view <name>", "View name to open (default: manifest default)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (auto-detected if omitted; can also use $ANNA_NEXUS_ROOT)").option("--port <number>", "HTTP port", "5180").option("--user-id <id>", "Harness user_id", "1").option("--cwd <dir>", "Project root (default: cwd)").option("--no-watch", "Disable bundle file watcher (default: enabled)").option("--executa <spec>", "Explicit executa registration; repeatable. Spec: comma-separated key=value (dir=<path>[,tool_id=<id>][,type=python|node|go|binary][,command=\"<argv>\"]). When only `dir=` is given, the executa is auto-detected from executa.json / pyproject.toml / package.json / go.mod. Overrides directory auto-discovery under <manifest-dir>/executas/.", (val, prev) => prev ? [...prev, val] : [val]).option("--no-llm", "Disable LLM bridge (anna.llm/agent return llm_disabled)").option("--mock-llm <fixture>", "Serve canned LLM responses from a JSONL fixture").option("--llm-account <host>", "Saved account host to use (default: current)").option("--llm-app-slug <slug>", "Override the manifest slug used to register / look up the dev AnnaApp (default: manifest.slug)").option("--storage <mode>", "Storage backend: \"legacy\" (in-memory runtime_state, default) or \"aps\" (real nexus APS via /api/v1/storage/* — requires `anna-app login`).", "legacy").action(async (opts) => {
-	const { runDev, parseExecutaSpec } = await import("./dev-C5r439wM.js");
+	const { runDev, parseExecutaSpec } = await import("./dev-DVCIv8mJ.js");
 	const cwd = opts.cwd ?? process.cwd();
 	let executas;
 	if (opts.executa && opts.executa.length > 0) {
@@ -529,7 +529,7 @@ fixture.command("replay <file>").description("Dry-run replay of a harness record
 	process.exit(code);
 });
 program.command("doctor").description("Check environment for `anna-app dev` (uv, matrix-nexus, dev key)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (optional)").action(async (opts) => {
-	const { runDoctor } = await import("./doctor-giNqYnla.js");
+	const { runDoctor } = await import("./doctor-DCsBgyRg.js");
 	const code = await runDoctor({ matrixNexusRoot: opts.matrixNexusRoot });
 	process.exit(code);
 });
@@ -582,7 +582,7 @@ executa.command("register").description("Register a HARNESS AnnaApp(kind=executa
 	process.exit(code);
 });
 executa.command("install").description("Install a local-dev shim for an Executa under its minted tool_id so the Agent can discover it via 'Rediscover Local' (for distribution_type: local). Resolves the tool_id from .anna/executa.json (written by `executa publish` / `apps push`) unless --tool-id is given.").option("--dir <path>", "Executa project dir (default: CWD)").option("--tool-id <id>", "Install the shim under this exact id (default: minted id from .anna/executa.json, else executa.json tool_id)").option("--bin-dir <path>", "Install dir for the shim (default: ~/.anna/executa/bin)").option("--force", "Overwrite an existing shim of the same name", false).option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runExecutaInstall } = await import("./executa-install-DjXE_-U-.js");
+	const { runExecutaInstall } = await import("./executa-install-Cuq0Y_H4.js");
 	const code = await runExecutaInstall({
 		dir: opts.dir,
 		toolId: opts.toolId,
@@ -593,7 +593,7 @@ executa.command("install").description("Install a local-dev shim for an Executa
 	process.exit(code);
 });
 executa.command("dev").description("Run one Executa plugin in isolation (REPL or one-shot describe/invoke)").option("--dir <path>", "Executa project dir (default: CWD)").option("--spec <spec>", "Override discovery: comma-separated key=value (tool_id=...,type=...,command=\"...\")").option("--describe", "Print MANIFEST and exit", false).option("--health", "Print health and exit", false).option("--invoke <tool>", "Invoke one tool and exit").option("--args <json>", "JSON object passed as tool arguments", "{}").option("--json", "One-shot: emit compact JSON (no banners)", false).option("--no-sampling", "Hard-disable sampling reverse RPC (returns sampling_disabled)").option("--mock-sampling <fixture>", "Serve canned sampling responses from a JSONL fixture (offline)").option("--app-slug <slug>", "Forward sampling to nexus on behalf of this dev AnnaApp slug").option("--sampling-account <host>", "Saved account host for nexus sampling (default: current)").option("--no-agent", "Hard-disable agent reverse RPC (returns agent_not_granted)").option("--mock-agent <fixture>", "Serve canned agent/* responses from a JSONL fixture (offline)").option("--agent-account <host>", "Saved account host for nexus agent (default: --sampling-account or current)").option("--storage <mode>", "Storage backend: off | memory | mock | real (default: memory)").option("--mock-storage <fixture>", "Serve canned storage/* + files/* responses from a JSONL fixture").option("--storage-account <host>", "Saved account host for nexus storage (default: --sampling-account or current)").option("--storage-scopes <list>", "Comma-separated scopes for real storage tokens (default: user,app,tool)").option("--no-image", "Hard-disable image reverse RPC (returns image_not_granted)").option("--mock-image <fixture>", "Serve canned image/generate + image/edit responses from a JSONL fixture").option("--image-account <host>", "Saved account host for nexus image (default: --sampling-account or current)").option("--no-upload", "Hard-disable host/uploadFile reverse RPC (returns upload_not_granted)").option("--mock-upload <fixture>", "Serve canned host/uploadFile responses from a JSONL fixture").option("--upload-account <host>", "Saved account host for nexus uploads (default: --sampling-account or current)").action(async (opts) => {
-	const { runExecutaDev } = await import("./executa-dev-Cr9Yepph.js");
+	const { runExecutaDev } = await import("./executa-dev-BOo6xpVy.js");
 	const storageMode = opts.storage === void 0 ? void 0 : (() => {
 		const m = opts.storage;
 		if (m === "off" || m === "memory" || m === "mock" || m === "real") return m;
@@ -678,7 +678,7 @@ apps.command("push").description("Upsert the mutable working draft (manifest + b
 			process.exit(2);
 		}
 	}
-	const { runAppsPush } = await import("./apps-push-CixatuQG.js");
+	const { runAppsPush } = await import("./apps-push-C1-QDzF8.js");
 	process.exit(await runAppsPush({
 		cwd: opts.cwd,
 		manifest: opts.manifest,
@@ -697,7 +697,7 @@ apps.command("push").description("Upsert the mutable working draft (manifest + b
 	}));
 });
 apps.command("cut <version>").description("Snapshot the working draft into an immutable version (freeze deps)").option("--changelog <text>", "Override the working draft changelog for this version").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--dry-run", "Resolve target but don't cut", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (version, opts) => {
-	const { runAppsCut } = await import("./apps-cut-BCicQFRY.js");
+	const { runAppsCut } = await import("./apps-cut-DKl5I9bf.js");
 	process.exit(await runAppsCut({
 		version,
 		changelog: opts.changelog,
@@ -709,7 +709,7 @@ apps.command("cut <version>").description("Snapshot the working draft into an im
 	}));
 });
 apps.command("discard").description("Drop the mutable working draft (leaves cut versions intact)").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--dry-run", "Resolve target but don't discard", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runAppsDiscard } = await import("./apps-discard-BoY4zMJw.js");
+	const { runAppsDiscard } = await import("./apps-discard-zg1nu2HN.js");
 	process.exit(await runAppsDiscard({
 		slug: opts.slug,
 		cwd: opts.cwd,

package/dist/{dev-3okZmzNM.js → dev-DGTtVCNj.js}

@@ -49,8 +49,8 @@ async function runDev(opts) {
 		}
 		process.env.ANNA_APP_RUNTIME_STORAGE_MODE = "aps";
 	}
-	const { PythonBridge, PINNED_RUNTIME_VERSION } = await import("./bridge-hzqNFm9-.js");
-	const { HarnessServer } = await import("./server-Cp7mYV9t.js");
+	const { PythonBridge, PINNED_RUNTIME_VERSION } = await import("./bridge-6GIQG63S.js");
+	const { HarnessServer } = await import("./server-D7zabdJY.js");
 	const bridge = new PythonBridge({
 		mode,
 		matrixNexusRoot: matrixNexusRoot ?? void 0,

package/dist/dev-DVCIv8mJ.js

@@ -0,0 +1,4 @@
+import "./nexus-root-BlPwOusj.js";
+import { parseExecutaSpec, runDev } from "./dev-DGTtVCNj.js";
+
+export { parseExecutaSpec, runDev };

package/dist/{doctor-giNqYnla.js → doctor-DCsBgyRg.js}

@@ -1,5 +1,5 @@
 import { findMatrixNexusRoot, nexusSchemaDir } from "./nexus-root-BlPwOusj.js";
-import { PINNED_RUNTIME_VERSION } from "./bridge-DxBd0Fl9.js";
+import { PINNED_RUNTIME_VERSION } from "./bridge-DAY7bsje.js";
 import { resolve } from "node:path";
 import { existsSync, statSync } from "node:fs";
 import { spawnSync } from "node:child_process";

package/dist/{executa-dev-Cr9Yepph.js → executa-dev-BOo6xpVy.js}

@@ -1,5 +1,5 @@
 import "./nexus-root-BlPwOusj.js";
-import { parseExecutaSpec } from "./dev-3okZmzNM.js";
+import { parseExecutaSpec } from "./dev-DGTtVCNj.js";
 import { isAbsolute, resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";

package/dist/{executa-install-DQIhVHPT.js → executa-install-BGirXLX5.js}

@@ -1,5 +1,5 @@
 import { readExecutaIdentity } from "./executa-cache-CXiEgFZY.js";
-import { parseExecutaSpec } from "./dev-3okZmzNM.js";
+import { parseExecutaSpec } from "./dev-DGTtVCNj.js";
 import { isAbsolute, join, resolve } from "node:path";
 import { chmodSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";

package/dist/executa-install-Cuq0Y_H4.js

@@ -0,0 +1,7 @@
+import "./credentials-BTv2IfUZ.js";
+import "./nexus-root-BlPwOusj.js";
+import "./executa-cache-CXiEgFZY.js";
+import "./dev-DGTtVCNj.js";
+import { runExecutaInstall } from "./executa-install-BGirXLX5.js";
+
+export { runExecutaInstall };

package/dist/{server-Cp7mYV9t.js → server-D7zabdJY.js}

@@ -1,5 +1,5 @@
 import { canonicalHost, getAccount } from "./credentials-BTv2IfUZ.js";
-import { BridgeRequestError } from "./bridge-DxBd0Fl9.js";
+import { BridgeRequestError } from "./bridge-DAY7bsje.js";
 import { dirname, join, normalize, resolve } from "node:path";
 import { createRequire } from "node:module";
 import { createReadStream, existsSync, readFileSync, statSync, watch } from "node:fs";
@@ -200,6 +200,80 @@ var LlmBridge = class {
 		this.mintedAgent.set(ms.appSessionUuid, ms);
 		return ms;
 	}
+	/** Re-mint an agent session token by ``app_session_uuid`` via the dev
+	*  ``/dev/session/refresh`` endpoint (PAT + uuid — NO stale token needed).
+	*
+	*  This is the harness's token-free recovery path: even after the CLI
+	*  process restarted (so ``mintedAgent`` is empty) or the previous token
+	*  expired, the underlying ``AnnaAppSession`` row is still alive and the
+	*  app remembers its ``app_session_uuid``. ``refresh`` slides the idle
+	*  window and hands back a fresh short-lived token, fixing the forum
+	*  report "uuid unusable after dev restart". Throws on 404/410 (the row
+	*  is genuinely gone / revoked / idle-expired). */
+	async callRefresh(apsUuid) {
+		const acc = this.account();
+		const url = `${canonicalHost(acc.host)}/api/v1/anna-apps/dev/session/refresh`;
+		const res = await fetch(url, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({
+				pat: acc.pat,
+				app_session_uuid: apsUuid
+			})
+		});
+		if (!res.ok) {
+			const text = await res.text().catch(() => "");
+			throw new Error(`session.refresh failed: HTTP ${res.status} ${text}`);
+		}
+		const payload = await res.json();
+		return {
+			token: payload.app_session_token,
+			expiresIn: payload.expires_in || 600,
+			submode: payload.submode ?? null
+		};
+	}
+	/** Revoke an agent session by uuid via ``/dev/session/revoke`` (PAT-auth).
+	*
+	*  Token-free: works even when the session token is long expired (which
+	*  used to make the session impossible to release → quota leak). */
+	async callRevoke(apsUuid) {
+		const acc = this.account();
+		const url = `${canonicalHost(acc.host)}/api/v1/anna-apps/dev/session/revoke`;
+		const res = await fetch(url, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({
+				pat: acc.pat,
+				app_session_uuid: apsUuid
+			})
+		});
+		if (!res.ok) {
+			const text = await res.text().catch(() => "");
+			throw new Error(`session.revoke failed: HTTP ${res.status} ${text}`);
+		}
+	}
+	/** Return a live agent session token for ``apsUuid``, re-minting via
+	*  ``/dev/session/refresh`` on cache-miss or near-expiry.
+	*
+	*  Centralises the "is my token still good?" decision for every operation
+	*  that needs an ``app_session_token`` (run / cancel / delete). On success
+	*  the freshly-minted session is cached in ``mintedAgent`` so subsequent
+	*  calls in the same process reuse it until the next near-expiry check. */
+	async ensureLiveToken(apsUuid) {
+		const now = Math.floor(Date.now() / 1e3);
+		const cached = this.mintedAgent.get(apsUuid);
+		if (cached && cached.expiresAt - 30 > now) return cached;
+		const refreshed = await this.callRefresh(apsUuid);
+		const ms = {
+			appSessionToken: refreshed.token,
+			appSessionUuid: apsUuid,
+			expiresAt: Math.floor(Date.now() / 1e3) + refreshed.expiresIn,
+			isAgent: true,
+			submode: refreshed.submode ?? cached?.submode ?? null
+		};
+		this.mintedAgent.set(apsUuid, ms);
+		return ms;
+	}
 	/** Mint (or reuse) a storage_token for APS forwarding.
 	*
 	*  Server-side ``/dev/storage/mint`` issues a JWT scoped to
@@ -394,14 +468,18 @@ var LlmBridge = class {
 			}
 			case "session.run": {
 				const apsUuid = String(args.args.app_session_uuid ?? "");
-				const ms = this.mintedAgent.get(apsUuid);
-				if (!ms) return {
-					ok: false,
-					error: {
-						code: "session_expired",
-						message: "no cached session"
-					}
-				};
+				let ms;
+				try {
+					ms = await this.ensureLiveToken(apsUuid);
+				} catch (e) {
+					return {
+						ok: false,
+						error: {
+							code: "session_expired",
+							message: e.message || "session expired or revoked"
+						}
+					};
+				}
 				const sid = `dev-${++this.streamCounter}`;
 				this.pumpAgentRun({
 					host: acc.host,
@@ -422,16 +500,42 @@ var LlmBridge = class {
 					}
 				};
 			}
+			case "session.refresh": {
+				const apsUuid = String(args.args.app_session_uuid ?? "");
+				try {
+					const ms = await this.ensureLiveToken(apsUuid);
+					return {
+						ok: true,
+						result: {
+							app_session_uuid: ms.appSessionUuid,
+							expires_in: Math.max(0, ms.expiresAt - Math.floor(Date.now() / 1e3)),
+							submode: ms.submode
+						}
+					};
+				} catch (e) {
+					return {
+						ok: false,
+						error: {
+							code: "session_expired",
+							message: e.message || "session expired or revoked"
+						}
+					};
+				}
+			}
 			case "session.cancel": {
 				const apsUuid = String(args.args.app_session_uuid ?? "");
-				const ms = this.mintedAgent.get(apsUuid);
-				if (!ms) return {
-					ok: false,
-					error: {
-						code: "session_expired",
-						message: "no cached session"
-					}
-				};
+				let ms;
+				try {
+					ms = await this.ensureLiveToken(apsUuid);
+				} catch (e) {
+					return {
+						ok: false,
+						error: {
+							code: "session_expired",
+							message: e.message || "session expired or revoked"
+						}
+					};
+				}
 				const out = await this.postJson(`${canonicalHost(acc.host)}/api/v1/copilot/app/agent/cancel`, ms.appSessionToken, args.args);
 				return {
 					ok: true,
@@ -449,6 +553,22 @@ var LlmBridge = class {
 				const includeExpired = Boolean(args.args?.include_expired);
 				const rawLimit = Number(args.args?.limit ?? 50);
 				const limit = Math.max(1, Math.min(100, Number.isFinite(rawLimit) ? rawLimit : 50));
+				if (this.opts.appSlug) try {
+					const acc2 = this.account();
+					const url = new URL(`${canonicalHost(acc2.host)}/api/v1/anna-apps/dev/sessions`);
+					url.searchParams.set("pat", acc2.pat);
+					url.searchParams.set("app_slug", this.opts.appSlug);
+					url.searchParams.set("include_expired", String(includeExpired));
+					url.searchParams.set("limit", String(limit));
+					const res = await fetch(url, { method: "GET" });
+					if (res.ok) {
+						const body = await res.json();
+						return {
+							ok: true,
+							result: { sessions: body.sessions ?? [] }
+						};
+					}
+				} catch {}
 				const now = Math.floor(Date.now() / 1e3);
 				const sessions = [...this.mintedAgent.values()].filter((ms) => includeExpired || ms.expiresAt > now).slice(0, limit).map((ms) => ({
 					app_session_uuid: ms.appSessionUuid,
@@ -467,31 +587,34 @@ var LlmBridge = class {
 			}
 			case "session.delete": {
 				const apsUuid = String(args.args.app_session_uuid ?? "");
-				const ms = this.mintedAgent.get(apsUuid);
+				const cached = this.mintedAgent.get(apsUuid);
 				this.mintedAgent.delete(apsUuid);
-				if (!ms) return {
-					ok: true,
-					result: { deleted: true }
-				};
-				const url = `${canonicalHost(acc.host)}/api/v1/copilot/app/sessions/${encodeURIComponent(apsUuid)}`;
-				const res = await fetch(url, {
-					method: "DELETE",
-					headers: { authorization: `Bearer ${ms.appSessionToken}` }
-				});
-				if (!res.ok) {
-					const text = await res.text().catch(() => "");
+				if (cached && cached.expiresAt - 5 > Math.floor(Date.now() / 1e3)) {
+					const url = `${canonicalHost(acc.host)}/api/v1/copilot/app/sessions/${encodeURIComponent(apsUuid)}`;
+					const res = await fetch(url, {
+						method: "DELETE",
+						headers: { authorization: `Bearer ${cached.appSessionToken}` }
+					});
+					if (res.ok) return {
+						ok: true,
+						result: { deleted: true }
+					};
+				}
+				try {
+					await this.callRevoke(apsUuid);
+					return {
+						ok: true,
+						result: { deleted: true }
+					};
+				} catch (e) {
 					return {
 						ok: false,
 						error: {
 							code: "transport",
-							message: `HTTP ${res.status}: ${text}`
+							message: e.message
 						}
 					};
 				}
-				return {
-					ok: true,
-					result: { deleted: true }
-				};
 			}
 		}
 		if (args.ns === "image" && (args.method === "generate" || args.method === "edit")) {
@@ -872,6 +995,11 @@ var HarnessServer = class {
 				"agent",
 				"session.history"
 			],
+			[
+				"host.agent.session.refresh",
+				"agent",
+				"session.refresh"
+			],
 			[
 				"host.agent.session.delete",
 				"agent",

package/dist/{working-orchestration-Dd1ETQ3c.js → working-orchestration-Dh1gCwGg.js}

@@ -4,7 +4,7 @@ import { CliError } from "./client-D-_z1ALk.js";
 import { parseExecutaIdOverrides, readExecutasLock, substituteBundledRefs, validateBundledHandles, writeBundleToolIdSidecar, writeExecutasLock } from "./bundled-executas-B6b8gIfp.js";
 import { runExecutaPublish } from "./executa-publish-CkPAB34b.js";
 import { loadExecutaManifest } from "./manifest-Bljz8Y6T.js";
-import { runExecutaInstall } from "./executa-install-DQIhVHPT.js";
+import { runExecutaInstall } from "./executa-install-BGirXLX5.js";
 import { appCacheMatches, readAppIdentity, writeAppIdentity } from "./app-cache-Bl7cE5fm.js";
 import { join, resolve } from "node:path";
 import { dim, green, yellow } from "kleur/colors";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anna-ai/cli",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "description": "Anna App developer CLI: scaffold, validate, harness (Phase 2 MVP: init + validate).",
   "license": "MIT",
   "type": "module",
@@ -33,8 +33,8 @@
     "prepublishOnly": "pnpm lint && pnpm test && pnpm build && node scripts/check-runtime-pin.mjs && node scripts/check-sdk-pin.mjs"
   },
   "dependencies": {
-    "@anna-ai/app-runtime": "^0.7.0",
-    "@anna-ai/app-schema": "^0.9.0",
+    "@anna-ai/app-runtime": "^0.8.0",
+    "@anna-ai/app-schema": "^0.10.0",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
     "commander": "^12.1.0",

package/dist/bridge-hzqNFm9-.js

@@ -1,3 +0,0 @@
-import { BridgeRequestError, PINNED_RUNTIME_VERSION, PythonBridge } from "./bridge-DxBd0Fl9.js";
-
-export { PINNED_RUNTIME_VERSION, PythonBridge };

package/dist/dev-C5r439wM.js

@@ -1,4 +0,0 @@
-import "./nexus-root-BlPwOusj.js";
-import { parseExecutaSpec, runDev } from "./dev-3okZmzNM.js";
-
-export { parseExecutaSpec, runDev };

package/dist/executa-install-DjXE_-U-.js

@@ -1,7 +0,0 @@
-import "./credentials-BTv2IfUZ.js";
-import "./nexus-root-BlPwOusj.js";
-import "./executa-cache-CXiEgFZY.js";
-import "./dev-3okZmzNM.js";
-import { runExecutaInstall } from "./executa-install-DQIhVHPT.js";
-
-export { runExecutaInstall };