@anna-ai/cli 0.1.28 → 0.1.30

package/dist/{publish-BYWuujP3.js → publish-NTT1Libd.js}

@@ -1,15 +1,15 @@
 import "./credentials-BTv2IfUZ.js";
-import "./apps-CCdtLmxQ.js";
+import "./apps-73pdBAFE.js";
 import { CliError } from "./client-D-_z1ALk.js";
-import "./bundled-executas-B6b8gIfp.js";
-import "./executas-CK3er6f9.js";
-import "./executa-cache-CXiEgFZY.js";
-import { runExecutaPublish } from "./executa-publish-CkPAB34b.js";
-import "./manifest-Bljz8Y6T.js";
-import { withErrorHandling } from "./_lifecycle-shared-BpSOfVCP.js";
-import "./app-cache-Bl7cE5fm.js";
-import "./app-bundle-upload-BhAYo6yj.js";
-import { runAppsPublish } from "./apps-publish-Dgi4lBlu.js";
+import { withErrorHandling } from "./_lifecycle-shared-CUK2CE76.js";
+import "./bundled-executas-_H1A9M50.js";
+import "./executas-BhFed1B-.js";
+import "./executa-cache-Do1D7xC0.js";
+import { runExecutaPublish } from "./executa-publish-Xmm4DMO9.js";
+import "./manifest-CMc7RM57.js";
+import "./app-cache-BqnTkxUw.js";
+import "./app-bundle-upload-CPf_nGou.js";
+import { runAppsPublish } from "./apps-publish-B-ZVNmgn.js";
 import { resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { red, yellow } from "kleur/colors";

package/dist/{sampling-BcML4teS.js → sampling-Cc0qaj8a.js}

@@ -20,8 +20,43 @@ var SamplingBridge = class {
 	}
 	async createMessage(req) {
 		if (this.opts.mode === "off") throw withCode(new Error("sampling disabled — rerun without `--no-sampling`"), -32008);
-		if (this.opts.mode === "mock") return this.mockMessage(req);
-		return this.realMessage(req);
+		validateResponseFormat(req);
+		const { effective, downgraded } = this.negotiateResponseFormat(req);
+		const result = this.opts.mode === "mock" ? this.mockMessage(req) : await this.realMessage(req, effective);
+		if (req.responseFormat) result._meta = {
+			...result._meta ?? {},
+			responseFormat: {
+				requested: req.responseFormat.type,
+				applied: effective?.type ?? null,
+				structuredValid: isParseableJson(result.content?.text),
+				downgraded
+			}
+		};
+		return result;
+	}
+	/**
+	* Local stand-in for the nexus gate's capability negotiation. With
+	* `simulateUnsupportedResponseFormat` the bridge behaves like a model
+	* without `supports_structured_output`; otherwise everything is
+	* "supported" (mock fixtures decide what comes back anyway).
+	*/
+	negotiateResponseFormat(req) {
+		let effective = req.responseFormat;
+		let downgraded = false;
+		if (effective?.type === "json_schema" && this.opts.simulateUnsupportedResponseFormat) {
+			const on = req.onUnsupported ?? "error";
+			if (on === "error") {
+				const err = withCode(new Error("model 'mock-model' does not support json_schema response format (simulated)"), -32010);
+				throw err;
+			}
+			if (on === "json_object") effective = { type: "json_object" };
+			else effective = void 0;
+			downgraded = true;
+		}
+		return {
+			effective,
+			downgraded
+		};
 	}
 	mockMessage(req) {
 		const content = collectContent(req);
@@ -69,10 +104,11 @@ var SamplingBridge = class {
 		};
 		return this.cachedSession;
 	}
-	async realMessage(req) {
+	async realMessage(req, effectiveResponseFormat) {
 		const acc = this.account();
 		const session = await this.mint();
 		const body = mcpToCompleteBody(req);
+		if (effectiveResponseFormat) body.response_format = effectiveResponseFormat;
 		const res = await fetch(`${canonicalHost(acc.host)}/api/v1/copilot/app/complete`, {
 			method: "POST",
 			headers: {
@@ -93,6 +129,59 @@ function withCode(err, code) {
 	err.rpcCode = code;
 	return err;
 }
+const RF_TYPES = new Set(["json_object", "json_schema"]);
+const RF_ON_UNSUPPORTED = new Set([
+	"error",
+	"json_object",
+	"text"
+]);
+const RF_MAX_SCHEMA_BYTES = 32 * 1024;
+const RF_MAX_SCHEMA_DEPTH = 8;
+const RF_MAX_SCHEMA_NODES = 512;
+const RF_NAME_RE = /^[a-zA-Z0-9_-]{1,64}$/;
+function invalid(message) {
+	return withCode(new Error(message), -32004);
+}
+/** Same hard limits the platform enforces — local dev fails identically. */
+function validateResponseFormat(req) {
+	const on = req.onUnsupported;
+	if (on != null && !RF_ON_UNSUPPORTED.has(on)) throw invalid(`'onUnsupported' must be one of ${[...RF_ON_UNSUPPORTED].sort().join(", ")}`);
+	const rf = req.responseFormat;
+	if (rf == null) return;
+	if (typeof rf !== "object" || Array.isArray(rf)) throw invalid("'responseFormat' must be an object");
+	if (!RF_TYPES.has(rf.type)) throw invalid(`responseFormat.type must be one of ${[...RF_TYPES].sort().join(", ")}`);
+	if (rf.type === "json_schema") {
+		const js = rf.json_schema;
+		if (js == null || typeof js !== "object" || Array.isArray(js)) throw invalid("responseFormat.json_schema must be an object");
+		if (typeof js.name !== "string" || !RF_NAME_RE.test(js.name)) throw invalid("json_schema.name must match ^[a-zA-Z0-9_-]{1,64}$");
+		if (js.strict !== void 0 && typeof js.strict !== "boolean") throw invalid("json_schema.strict must be a bool");
+		const schema = js.schema;
+		if (schema == null || typeof schema !== "object" || Array.isArray(schema)) throw invalid("json_schema.schema must be an object");
+		enforceSchemaLimits(schema);
+	}
+}
+function enforceSchemaLimits(schema) {
+	const raw = JSON.stringify(schema);
+	if (Buffer.byteLength(raw, "utf8") > RF_MAX_SCHEMA_BYTES) throw invalid(`json_schema.schema too large (> ${RF_MAX_SCHEMA_BYTES} bytes)`);
+	let nodes = 0;
+	const walk = (node, depth) => {
+		if (depth > RF_MAX_SCHEMA_DEPTH) throw invalid(`json_schema nesting too deep (> ${RF_MAX_SCHEMA_DEPTH})`);
+		nodes += 1;
+		if (nodes > RF_MAX_SCHEMA_NODES) throw invalid(`json_schema too many nodes (> ${RF_MAX_SCHEMA_NODES})`);
+		if (Array.isArray(node)) for (const v of node) walk(v, depth + 1);
+		else if (node !== null && typeof node === "object") for (const v of Object.values(node)) walk(v, depth + 1);
+	};
+	walk(schema, 0);
+}
+function isParseableJson(text) {
+	if (typeof text !== "string") return false;
+	try {
+		JSON.parse(text);
+		return true;
+	} catch {
+		return false;
+	}
+}
 /** Collect a single string view of a sampling request — used for mock matching. */
 function collectContent(req) {
 	const parts = [];

package/dist/{server-F_VA-5tS.js → server-DtnMLKQS.js}

@@ -1,5 +1,5 @@
 import { canonicalHost, getAccount } from "./credentials-BTv2IfUZ.js";
-import { BridgeRequestError } from "./bridge-DAY7bsje.js";
+import { BridgeRequestError } from "./bridge-DXH59CmP.js";
 import { dirname, join, normalize, resolve } from "node:path";
 import { createRequire } from "node:module";
 import { createReadStream, existsSync, readFileSync, statSync, watch } from "node:fs";

package/dist/{storage-CKTmE87u.js → storage-C95wApr2.js}

@@ -1,5 +1,5 @@
 import { canonicalHost } from "./credentials-BTv2IfUZ.js";
-import { hostOf, requireAccount, withCode } from "./dev-account-CGo8k9_2.js";
+import { hostOf, requireAccount, withCode } from "./dev-account-WXEjIE16.js";
 import { resolve } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 

package/dist/{token-Cg7BZGp6.js → token-hGGfoge2.js}

@@ -1,6 +1,6 @@
 import "./credentials-BTv2IfUZ.js";
 import "./client-D-_z1ALk.js";
-import { resolveClient, withErrorHandling } from "./_lifecycle-shared-BpSOfVCP.js";
+import { resolveClient, withErrorHandling } from "./_lifecycle-shared-CUK2CE76.js";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";
 
 //#region src/api/tokens.ts

package/dist/{working-orchestration-Pjm4YC_U.js → working-orchestration-CX0ONKIq.js}

@@ -1,11 +1,11 @@
 import { canonicalHost } from "./credentials-BTv2IfUZ.js";
-import { createApp, findAppBySlug, getApp } from "./apps-CCdtLmxQ.js";
+import { createApp, findAppBySlug, getApp } from "./apps-73pdBAFE.js";
 import { CliError } from "./client-D-_z1ALk.js";
-import { parseExecutaIdOverrides, readExecutasLock, substituteBundledRefs, validateBundledHandles, writeBundleToolIdSidecar, writeExecutasLock } from "./bundled-executas-B6b8gIfp.js";
-import { runExecutaPublish } from "./executa-publish-CkPAB34b.js";
-import { loadExecutaManifest } from "./manifest-Bljz8Y6T.js";
-import { runExecutaInstall } from "./executa-install-BHQpOskj.js";
-import { appCacheMatches, readAppIdentity, writeAppIdentity } from "./app-cache-Bl7cE5fm.js";
+import { parseExecutaIdOverrides, readExecutasLock, substituteBundledRefs, validateBundledHandles, writeBundleToolIdSidecar, writeExecutasLock } from "./bundled-executas-_H1A9M50.js";
+import { runExecutaPublish } from "./executa-publish-Xmm4DMO9.js";
+import { loadExecutaManifest } from "./manifest-CMc7RM57.js";
+import { runExecutaInstall } from "./executa-install-A-BgavhA.js";
+import { appCacheMatches, readAppIdentity, writeAppIdentity } from "./app-cache-BqnTkxUw.js";
 import { join, resolve } from "node:path";
 import { dim, green, yellow } from "kleur/colors";
 import { homedir } from "node:os";
@@ -174,24 +174,40 @@ async function resolveAppIdentity(params) {
 	const found = await findAppBySlug(client, manifest.slug);
 	let appId;
 	let serverSlug;
+	let serverHandle;
 	let firstPublish = false;
 	if (found) {
 		appId = found.id;
 		serverSlug = found.slug;
+		serverHandle = typeof found.handle === "string" ? found.handle : void 0;
 	} else {
 		if (dryRun) {
 			if (!json) console.log(yellow(`[dry-run] would create AnnaApp slug=${manifest.slug}`));
 			return null;
 		}
-		const created = await createApp(client, {
-			slug: manifest.slug,
-			name: manifest.name,
-			category: manifest.category,
-			tagline: manifest.tagline,
-			description: manifest.description
-		});
+		let created;
+		try {
+			created = await createApp(client, {
+				slug: manifest.slug,
+				name: manifest.name,
+				category: manifest.category,
+				tagline: manifest.tagline,
+				description: manifest.description
+			});
+		} catch (e) {
+			if (e instanceof CliError && e.status === 409) {
+				const body = e.body;
+				const code = body?.detail?.code;
+				if (code === "HANDLE_REQUIRED") throw new CliError("you must set a developer handle before creating an app.\n  Run:  anna-app account set-handle <handle>\n  Your apps will then publish as @<handle>/" + manifest.slug + ".", 5, {
+					status: 409,
+					body
+				});
+			}
+			throw e;
+		}
 		appId = created.id;
 		serverSlug = created.slug;
+		serverHandle = typeof created.handle === "string" ? created.handle : void 0;
 		firstPublish = true;
 	}
 	writeAppIdentity(cwd, {
@@ -199,6 +215,7 @@ async function resolveAppIdentity(params) {
 		host: canonicalHost(host),
 		app_id: appId,
 		slug: serverSlug,
+		handle: serverHandle,
 		first_published_at: cached?.first_published_at ?? new Date().toISOString()
 	});
 	return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anna-ai/cli",
-  "version": "0.1.28",
+  "version": "0.1.30",
   "description": "Anna App developer CLI: scaffold, validate, harness (Phase 2 MVP: init + validate).",
   "license": "MIT",
   "type": "module",

package/dist/apps-publish-Do7M5je3.js

@@ -1,14 +0,0 @@
-import "./credentials-BTv2IfUZ.js";
-import "./apps-CCdtLmxQ.js";
-import "./client-D-_z1ALk.js";
-import "./bundled-executas-B6b8gIfp.js";
-import "./executas-CK3er6f9.js";
-import "./executa-cache-CXiEgFZY.js";
-import "./executa-publish-CkPAB34b.js";
-import "./manifest-Bljz8Y6T.js";
-import "./_lifecycle-shared-BpSOfVCP.js";
-import "./app-cache-Bl7cE5fm.js";
-import "./app-bundle-upload-BhAYo6yj.js";
-import { runAppsPublish } from "./apps-publish-Dgi4lBlu.js";
-
-export { runAppsPublish };

package/dist/bridge-6GIQG63S.js

@@ -1,3 +0,0 @@
-import { BridgeRequestError, PINNED_RUNTIME_VERSION, PythonBridge } from "./bridge-DAY7bsje.js";
-
-export { PINNED_RUNTIME_VERSION, PythonBridge };

package/dist/dev-CQkCFVXu.js

@@ -1,4 +0,0 @@
-import "./nexus-root-BlPwOusj.js";
-import { parseExecutaSpec, runDev } from "./dev-DXODERsf.js";
-
-export { parseExecutaSpec, runDev };

package/dist/executa-install-Bvf_Lvvg.js

@@ -1,7 +0,0 @@
-import "./credentials-BTv2IfUZ.js";
-import "./nexus-root-BlPwOusj.js";
-import "./executa-cache-CXiEgFZY.js";
-import "./dev-DXODERsf.js";
-import { runExecutaInstall } from "./executa-install-BHQpOskj.js";
-
-export { runExecutaInstall };

package/dist/executa-publish-IXWSwva0.js

@@ -1,9 +0,0 @@
-import "./credentials-BTv2IfUZ.js";
-import "./client-D-_z1ALk.js";
-import "./executas-CK3er6f9.js";
-import "./executa-cache-CXiEgFZY.js";
-import { runExecutaPublish } from "./executa-publish-CkPAB34b.js";
-import "./manifest-Bljz8Y6T.js";
-import "./_lifecycle-shared-BpSOfVCP.js";
-
-export { runExecutaPublish };