@anna-ai/cli 0.1.30 → 0.1.32

package/dist/cli.js

@@ -470,7 +470,7 @@ program.command("validate").description("Run schema + ACL checks on a manifest+b
 	process.exit(code);
 });
 program.command("dev").description("Run a local harness (in-process dispatcher + iframe + SSE relay)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--bundle <dir>", "bundle directory (default: ./bundle)").option("--slug <slug>", "App slug (overrides manifest.slug/name)").option("--view <name>", "View name to open (default: manifest default)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (auto-detected if omitted; can also use $ANNA_NEXUS_ROOT)").option("--port <number>", "HTTP port", "5180").option("--user-id <id>", "Harness user_id", "1").option("--cwd <dir>", "Project root (default: cwd)").option("--no-watch", "Disable bundle file watcher (default: enabled)").option("--executa <spec>", "Explicit executa registration; repeatable. Spec: comma-separated key=value (dir=<path>[,tool_id=<id>][,type=python|node|go|binary][,command=\"<argv>\"]). When only `dir=` is given, the executa is auto-detected from executa.json / pyproject.toml / package.json / go.mod. Overrides directory auto-discovery under <manifest-dir>/executas/.", (val, prev) => prev ? [...prev, val] : [val]).option("--no-llm", "Disable LLM bridge (anna.llm/agent return llm_disabled)").option("--mock-llm <fixture>", "Serve canned LLM responses from a JSONL fixture").option("--llm-account <host>", "Saved account host to use (default: current)").option("--llm-app-slug <slug>", "Override the manifest slug used to register / look up the dev AnnaApp (default: manifest.slug)").option("--storage <mode>", "Storage backend: \"legacy\" (in-memory runtime_state, default) or \"aps\" (real nexus APS via /api/v1/storage/* — requires `anna-app login`).", "legacy").action(async (opts) => {
-	const { runDev, parseExecutaSpec } = await import("./dev-C9VpI_AL.js");
+	const { runDev, parseExecutaSpec } = await import("./dev-C3yWhzAp.js");
 	const cwd = opts.cwd ?? process.cwd();
 	let executas;
 	if (opts.executa && opts.executa.length > 0) {
@@ -505,7 +505,7 @@ program.command("dev").description("Run a local harness (in-process dispatcher +
 });
 const fixture = program.command("fixture").description("Inspect / replay harness recordings (Phase 6)");
 fixture.command("verify <file>").description("Schema + invariant checks on a harness JSONL recording").option("--json", "Emit machine-readable JSON", false).action(async (file, opts) => {
-	const { runFixtureVerify } = await import("./fixture-BJqc1IfX.js");
+	const { runFixtureVerify } = await import("./fixture-BUKQYR5e.js");
 	const code = await runFixtureVerify({
 		file,
 		json: opts.json
@@ -513,7 +513,7 @@ fixture.command("verify <file>").description("Schema + invariant checks on a har
 	process.exit(code);
 });
 fixture.command("summarize <file>").description("Print a human-readable digest of a harness recording").option("--json", "Emit machine-readable JSON", false).action(async (file, opts) => {
-	const { runFixtureSummarize } = await import("./fixture-BJqc1IfX.js");
+	const { runFixtureSummarize } = await import("./fixture-BUKQYR5e.js");
 	const code = await runFixtureSummarize({
 		file,
 		json: opts.json
@@ -521,7 +521,7 @@ fixture.command("summarize <file>").description("Print a human-readable digest o
 	process.exit(code);
 });
 fixture.command("replay <file>").description("Dry-run replay of a harness recording (Phase 6 MVP)").option("--manifest <path>", "manifest.json path", "manifest.json").action(async (file, opts) => {
-	const { runFixtureReplay } = await import("./fixture-BJqc1IfX.js");
+	const { runFixtureReplay } = await import("./fixture-BUKQYR5e.js");
 	const code = await runFixtureReplay({
 		file,
 		manifest: opts.manifest
@@ -529,12 +529,12 @@ fixture.command("replay <file>").description("Dry-run replay of a harness record
 	process.exit(code);
 });
 program.command("doctor").description("Check environment for `anna-app dev` (uv, matrix-nexus, dev key)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (optional)").action(async (opts) => {
-	const { runDoctor } = await import("./doctor-DnCYaREu.js");
+	const { runDoctor } = await import("./doctor-VrfEkedz.js");
 	const code = await runDoctor({ matrixNexusRoot: opts.matrixNexusRoot });
 	process.exit(code);
 });
 program.command("login").description("Device-flow login against a nexus host; saves a PAT to ~/.config/anna/credentials.json").requiredOption("--host <url>", "nexus base URL, e.g. https://nexus.example.com").option("--no-browser", "Do not open a browser window automatically", false).action(async (opts) => {
-	const { runLogin } = await import("./login-CslsHbsq.js");
+	const { runLogin } = await import("./login-DhgBgsfx.js");
 	const code = await runLogin({
 		host: opts.host,
 		noBrowser: opts.browser === false
@@ -542,7 +542,7 @@ program.command("login").description("Device-flow login against a nexus host; sa
 	process.exit(code);
 });
 program.command("logout").description("Remove a saved PAT entry").option("--host <url>", "Account to remove (default: current)").option("--all", "Remove every saved account", false).action(async (opts) => {
-	const { runLogout } = await import("./logout-B4_b9ZL0.js");
+	const { runLogout } = await import("./logout-VYDkLYAx.js");
 	const code = await runLogout({
 		host: opts.host,
 		all: opts.all
@@ -550,13 +550,13 @@ program.command("logout").description("Remove a saved PAT entry").option("--host
 	process.exit(code);
 });
 program.command("whoami").description("Show the current account (and any others)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runWhoami } = await import("./whoami-ChzwOaN2.js");
+	const { runWhoami } = await import("./whoami-C_x26b_k.js");
 	const code = await runWhoami({ json: opts.json });
 	process.exit(code);
 });
 const account = program.command("account").description("Manage your developer account (handle / namespace)");
 account.command("set-handle <handle>").description("Set or rename your developer handle — the @handle namespace your apps publish under (@handle/slug). Required before creating your first app.").option("--host <url>", "Account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (handle, opts) => {
-	const { runAccountSetHandle } = await import("./account-B6n0XkpV.js");
+	const { runAccountSetHandle } = await import("./account-bqao7Gp5.js");
 	const code = await runAccountSetHandle({
 		handle,
 		account: opts.host,
@@ -576,7 +576,7 @@ executa.command("init <dir>").description("Scaffold a standalone Executa plugin
 		console.error(`✗ unknown template "${opts.template}" — expected python | node | go`);
 		process.exit(2);
 	}
-	const { runExecutaInit } = await import("./executa-init-BCqJUZXT.js");
+	const { runExecutaInit } = await import("./executa-init-D-kWINZ3.js");
 	const code = runExecutaInit({
 		targetDir: dir,
 		slug,
@@ -587,12 +587,12 @@ executa.command("init <dir>").description("Scaffold a standalone Executa plugin
 	process.exit(code);
 });
 executa.command("register").description("Register a HARNESS AnnaApp(kind=executa) so `executa dev --storage real` (and agent / sampling / image / upload real-mode flows) can mint tokens for a local executa subprocess. Does NOT publish the executa itself — use `executa publish` for that. Lists/deletes via `apps list` / `apps delete`.").requiredOption("--tool-id <id>", "Executa tool_id (matches executa.json tool_id / executable_name)").option("--slug <slug>", "App slug (default: executa-<tool_id>; must be lowercase + hyphens)").option("--name <name>", "Human-readable display name (default: <tool_id>)").option("--account <host>", "Saved account host (default: current)").action(async (opts) => {
-	const { runExecutaRegister } = await import("./executa-register-CMmlKyKB.js");
+	const { runExecutaRegister } = await import("./executa-register-D5kvSSz_.js");
 	const code = await runExecutaRegister(opts);
 	process.exit(code);
 });
 executa.command("install").description("Install a local-dev shim for an Executa under its minted tool_id so the Agent can discover it via 'Rediscover Local' (for distribution_type: local). Resolves the tool_id from .anna/executa.json (written by `executa publish` / `apps push`) unless --tool-id is given.").option("--dir <path>", "Executa project dir (default: CWD)").option("--tool-id <id>", "Install the shim under this exact id (default: minted id from .anna/executa.json, else executa.json tool_id)").option("--bin-dir <path>", "Install dir for the shim (default: ~/.anna/executa/bin)").option("--force", "Overwrite an existing shim of the same name", false).option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runExecutaInstall } = await import("./executa-install-Bc1WRrWu.js");
+	const { runExecutaInstall } = await import("./executa-install-Cyid8R7r.js");
 	const code = await runExecutaInstall({
 		dir: opts.dir,
 		toolId: opts.toolId,
@@ -603,7 +603,7 @@ executa.command("install").description("Install a local-dev shim for an Executa
 	process.exit(code);
 });
 executa.command("dev").description("Run one Executa plugin in isolation (REPL or one-shot describe/invoke)").option("--dir <path>", "Executa project dir (default: CWD)").option("--spec <spec>", "Override discovery: comma-separated key=value (tool_id=...,type=...,command=\"...\")").option("--describe", "Print MANIFEST and exit", false).option("--health", "Print health and exit", false).option("--invoke <tool>", "Invoke one tool and exit").option("--args <json>", "JSON object passed as tool arguments", "{}").option("--json", "One-shot: emit compact JSON (no banners)", false).option("--no-sampling", "Hard-disable sampling reverse RPC (returns sampling_disabled)").option("--mock-sampling <fixture>", "Serve canned sampling responses from a JSONL fixture (offline)").option("--sampling-unsupported-format", "Simulate a model without json_schema support — exercises responseFormat onUnsupported branches (-32010 / downgrade)").option("--app-slug <slug>", "Forward sampling to nexus on behalf of this dev AnnaApp slug").option("--sampling-account <host>", "Saved account host for nexus sampling (default: current)").option("--no-agent", "Hard-disable agent reverse RPC (returns agent_not_granted)").option("--mock-agent <fixture>", "Serve canned agent/* responses from a JSONL fixture (offline)").option("--agent-account <host>", "Saved account host for nexus agent (default: --sampling-account or current)").option("--storage <mode>", "Storage backend: off | memory | mock | real (default: memory)").option("--mock-storage <fixture>", "Serve canned storage/* + files/* responses from a JSONL fixture").option("--storage-account <host>", "Saved account host for nexus storage (default: --sampling-account or current)").option("--storage-scopes <list>", "Comma-separated scopes for real storage tokens (default: user,app,tool)").option("--no-image", "Hard-disable image reverse RPC (returns image_not_granted)").option("--mock-image <fixture>", "Serve canned image/generate + image/edit responses from a JSONL fixture").option("--image-account <host>", "Saved account host for nexus image (default: --sampling-account or current)").option("--no-upload", "Hard-disable host/uploadFile reverse RPC (returns upload_not_granted)").option("--mock-upload <fixture>", "Serve canned host/uploadFile responses from a JSONL fixture").option("--upload-account <host>", "Saved account host for nexus uploads (default: --sampling-account or current)").action(async (opts) => {
-	const { runExecutaDev } = await import("./executa-dev-0XdBPTDy.js");
+	const { runExecutaDev } = await import("./executa-dev-B5Uz982M.js");
 	const storageMode = opts.storage === void 0 ? void 0 : (() => {
 		const m = opts.storage;
 		if (m === "off" || m === "memory" || m === "mock" || m === "real") return m;
@@ -641,14 +641,14 @@ executa.command("dev").description("Run one Executa plugin in isolation (REPL or
 });
 const apps = program.command("apps").description("Anna App publish lifecycle commands");
 apps.command("list").description("List the Anna Apps you authored, with lifecycle status").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runAppsList } = await import("./apps-BpJ-TvHP.js");
+	const { runAppsList } = await import("./apps-dvknZYI2.js");
 	process.exit(await runAppsList({
 		account: opts.account,
 		json: opts.json
 	}));
 });
 apps.command("rename-slug <new-slug>").description("Rename an app's public slug (DRAFT/REJECTED, never-published, zero installs only). Updates local app.json + .anna/app.json on success.").option("--cwd <dir>", "Project root (default: cwd)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (newSlug, opts) => {
-	const { runAppsRenameSlug } = await import("./apps-rename-slug-Bp-nQ_6I.js");
+	const { runAppsRenameSlug } = await import("./apps-rename-slug-D2BrWasG.js");
 	process.exit(await runAppsRenameSlug({
 		newSlug,
 		cwd: opts.cwd,
@@ -666,7 +666,7 @@ apps.command("publish").description("Publish or update an Anna App (manifest.jso
 		console.error(`✗ --bump must be patch|minor|major (got: ${opts.bump})`);
 		process.exit(2);
 	}
-	const { runAppsPublish } = await import("./apps-publish-3wbhXfAg.js");
+	const { runAppsPublish } = await import("./apps-publish-Djpw5cfG.js");
 	process.exit(await runAppsPublish({
 		cwd: opts.cwd,
 		manifest: opts.manifest,
@@ -699,7 +699,7 @@ apps.command("push").description("Upsert the mutable working draft (manifest + b
 			process.exit(2);
 		}
 	}
-	const { runAppsPush } = await import("./apps-push-Bh8zwT--.js");
+	const { runAppsPush } = await import("./apps-push-B3wZr9B4.js");
 	process.exit(await runAppsPush({
 		cwd: opts.cwd,
 		manifest: opts.manifest,
@@ -718,7 +718,7 @@ apps.command("push").description("Upsert the mutable working draft (manifest + b
 	}));
 });
 apps.command("cut <version>").description("Snapshot the working draft into an immutable version (freeze deps)").option("--changelog <text>", "Override the working draft changelog for this version").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--dry-run", "Resolve target but don't cut", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (version, opts) => {
-	const { runAppsCut } = await import("./apps-cut-C5SH9qZN.js");
+	const { runAppsCut } = await import("./apps-cut-8870xpk-.js");
 	process.exit(await runAppsCut({
 		version,
 		changelog: opts.changelog,
@@ -730,7 +730,7 @@ apps.command("cut <version>").description("Snapshot the working draft into an im
 	}));
 });
 apps.command("discard").description("Drop the mutable working draft (leaves cut versions intact)").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--dry-run", "Resolve target but don't discard", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runAppsDiscard } = await import("./apps-discard-CfdkwUZ_.js");
+	const { runAppsDiscard } = await import("./apps-discard-hVZxAQyj.js");
 	process.exit(await runAppsDiscard({
 		slug: opts.slug,
 		cwd: opts.cwd,
@@ -740,7 +740,7 @@ apps.command("discard").description("Drop the mutable working draft (leaves cut
 	}));
 });
 apps.command("release <version>").description("Freeze & publish an existing remote version (go live)").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--allow-create", "If the version isn't on the server, run 'apps publish' first, then release", false).option("--dry-run", "Resolve target + pre-flight but don't publish", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (version, opts) => {
-	const { runAppsRelease } = await import("./apps-release-DNlN_8gz.js");
+	const { runAppsRelease } = await import("./apps-release-DZK30eF_.js");
 	process.exit(await runAppsRelease({
 		version,
 		slug: opts.slug,
@@ -751,18 +751,19 @@ apps.command("release <version>").description("Freeze & publish an existing remo
 		json: opts.json
 	}));
 });
-apps.command("sync-meta").description("Push mutable store metadata (name/tagline/…) from the manifest").option("--cwd <dir>", "Project root (default: cwd)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--dry-run", "Print the metadata diff but don't PATCH", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runAppsSyncMeta } = await import("./apps-sync-meta-DdPnXuIU.js");
+apps.command("sync-meta").description("Push mutable store metadata (name/tagline/…) from the manifest").option("--cwd <dir>", "Project root (default: cwd)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--logo <path>", "Local logo file to upload (overrides app.json logo_file)").option("--dry-run", "Print the metadata diff but don't PATCH", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
+	const { runAppsSyncMeta } = await import("./apps-sync-meta-BOb6J_wz.js");
 	process.exit(await runAppsSyncMeta({
 		cwd: opts.cwd,
 		manifest: opts.manifest,
+		logo: opts.logo,
 		dryRun: opts.dryRun,
 		account: opts.account,
 		json: opts.json
 	}));
 });
 apps.command("submit-review [slug]").description("Move an app into review (DRAFT/REJECTED → PENDING_REVIEW)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (slug, opts) => {
-	const { runAppsSubmitReview } = await import("./apps-submit-review-DH-bzbDZ.js");
+	const { runAppsSubmitReview } = await import("./apps-submit-review-DMFQI8JZ.js");
 	process.exit(await runAppsSubmitReview({
 		slug,
 		cwd: opts.cwd,
@@ -771,7 +772,7 @@ apps.command("submit-review [slug]").description("Move an app into review (DRAFT
 	}));
 });
 apps.command("status <slug>").description("Show server-known state for one Anna App").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (slug, opts) => {
-	const { runAppsStatus } = await import("./apps-status-5DV9cY4A.js");
+	const { runAppsStatus } = await import("./apps-status-Ca6MdXZd.js");
 	process.exit(await runAppsStatus({
 		slug,
 		account: opts.account,
@@ -779,7 +780,7 @@ apps.command("status <slug>").description("Show server-known state for one Anna
 	}));
 });
 apps.command("versions <slug>").description("List all server versions of one Anna App").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (slug, opts) => {
-	const { runAppsVersions } = await import("./apps-versions-vGihRRje.js");
+	const { runAppsVersions } = await import("./apps-versions-D1lixrmM.js");
 	process.exit(await runAppsVersions({
 		slug,
 		account: opts.account,
@@ -787,7 +788,7 @@ apps.command("versions <slug>").description("List all server versions of one Ann
 	}));
 });
 apps.command("grants <slug>").description("Show currently granted scopes/quota for one Anna App").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (slug, opts) => {
-	const { runAppsGrants } = await import("./apps-grants-BtXXiuJt.js");
+	const { runAppsGrants } = await import("./apps-grants-DnXCnkH5.js");
 	process.exit(await runAppsGrants({
 		slug,
 		account: opts.account,
@@ -795,7 +796,7 @@ apps.command("grants <slug>").description("Show currently granted scopes/quota f
 	}));
 });
 apps.command("unpublish <slug>").description("Flip a PUBLISHED app back to APPROVED (private)").option("--yes", "Acknowledge the destructive operation", false).option("--confirm <slug>", "Slug confirmation (must match target)").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (slug, opts) => {
-	const { runAppsUnpublish } = await import("./apps-destructive-PY0wKjqu.js");
+	const { runAppsUnpublish } = await import("./apps-destructive-B6RFjokU.js");
 	process.exit(await runAppsUnpublish({
 		slug,
 		yes: opts.yes,
@@ -805,7 +806,7 @@ apps.command("unpublish <slug>").description("Flip a PUBLISHED app back to APPRO
 	}));
 });
 apps.command("archive <slug>").description("Archive an Anna App (hides it from end users)").option("--yes", "Acknowledge the destructive operation", false).option("--confirm <slug>", "Slug confirmation (must match target)").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (slug, opts) => {
-	const { runAppsArchive } = await import("./apps-destructive-PY0wKjqu.js");
+	const { runAppsArchive } = await import("./apps-destructive-B6RFjokU.js");
 	process.exit(await runAppsArchive({
 		slug,
 		yes: opts.yes,
@@ -815,7 +816,7 @@ apps.command("archive <slug>").description("Archive an Anna App (hides it from e
 	}));
 });
 apps.command("unarchive <slug>").description("Restore an archived Anna App back to APPROVED").option("--yes", "Acknowledge the operation", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (slug, opts) => {
-	const { runAppsUnarchive } = await import("./apps-destructive-PY0wKjqu.js");
+	const { runAppsUnarchive } = await import("./apps-destructive-B6RFjokU.js");
 	process.exit(await runAppsUnarchive({
 		slug,
 		yes: opts.yes,
@@ -824,7 +825,7 @@ apps.command("unarchive <slug>").description("Restore an archived Anna App back
 	}));
 });
 apps.command("delete <slug>").description("Hard-delete an Anna App (refused by server if installs exist)").option("--yes", "Acknowledge the destructive operation", false).option("--confirm <slug>", "Slug confirmation (must match target)").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (slug, opts) => {
-	const { runAppsDelete } = await import("./apps-destructive-PY0wKjqu.js");
+	const { runAppsDelete } = await import("./apps-destructive-B6RFjokU.js");
 	process.exit(await runAppsDelete({
 		slug,
 		yes: opts.yes,
@@ -834,14 +835,14 @@ apps.command("delete <slug>").description("Hard-delete an Anna App (refused by s
 	}));
 });
 executa.command("list").description("List Executas owned by the current PAT").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runExecutaList } = await import("./executa-reads-CjIr8BuD.js");
+	const { runExecutaList } = await import("./executa-reads-BXDJWWw6.js");
 	process.exit(await runExecutaList({
 		account: opts.account,
 		json: opts.json
 	}));
 });
 executa.command("status <ref>").description("Show server-known state for one Executa (slug or tool_id)").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (ref, opts) => {
-	const { runExecutaStatus } = await import("./executa-reads-CjIr8BuD.js");
+	const { runExecutaStatus } = await import("./executa-reads-BXDJWWw6.js");
 	process.exit(await runExecutaStatus({
 		ref,
 		account: opts.account,
@@ -849,7 +850,7 @@ executa.command("status <ref>").description("Show server-known state for one Exe
 	}));
 });
 executa.command("versions <ref>").description("List immutable version snapshots for one Executa").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (ref, opts) => {
-	const { runExecutaVersions } = await import("./executa-reads-CjIr8BuD.js");
+	const { runExecutaVersions } = await import("./executa-reads-BXDJWWw6.js");
 	process.exit(await runExecutaVersions({
 		ref,
 		account: opts.account,
@@ -865,7 +866,7 @@ executa.command("publish").description("Mint or update an Executa (executa.json
 		console.error(`✗ --bump must be patch|minor|major (got: ${opts.bump})`);
 		process.exit(2);
 	}
-	const { runExecutaPublish } = await import("./executa-publish-9XQRncyN.js");
+	const { runExecutaPublish } = await import("./executa-publish-DI_6M_ea.js");
 	process.exit(await runExecutaPublish({
 		cwd: opts.cwd,
 		manifest: opts.manifest,
@@ -878,7 +879,7 @@ executa.command("publish").description("Mint or update an Executa (executa.json
 	}));
 });
 executa.command("unpublish <slug>").description("Flip an Executa's visibility back to private").option("--yes", "Acknowledge the destructive operation", false).option("--confirm <slug>", "Slug confirmation (must match target)").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (slug, opts) => {
-	const { runExecutaUnpublish } = await import("./executa-destructive-8iSnfmcn.js");
+	const { runExecutaUnpublish } = await import("./executa-destructive-Bz7vWxEO.js");
 	process.exit(await runExecutaUnpublish({
 		slug,
 		yes: opts.yes,
@@ -888,7 +889,7 @@ executa.command("unpublish <slug>").description("Flip an Executa's visibility ba
 	}));
 });
 executa.command("yank <ref>").description("Hard-delete one Executa version (<slug>@<version>)").option("--yes", "Acknowledge the destructive operation", false).option("--confirm <slug>", "Slug confirmation (must match target)").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (ref, opts) => {
-	const { runExecutaYank } = await import("./executa-destructive-8iSnfmcn.js");
+	const { runExecutaYank } = await import("./executa-destructive-Bz7vWxEO.js");
 	process.exit(await runExecutaYank({
 		ref,
 		yes: opts.yes,
@@ -898,7 +899,7 @@ executa.command("yank <ref>").description("Hard-delete one Executa version (<slu
 	}));
 });
 executa.command("delete <slug>").description("Hard-delete an Executa").option("--yes", "Acknowledge the destructive operation", false).option("--confirm <slug>", "Slug confirmation (must match target)").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (slug, opts) => {
-	const { runExecutaDelete } = await import("./executa-destructive-8iSnfmcn.js");
+	const { runExecutaDelete } = await import("./executa-destructive-Bz7vWxEO.js");
 	process.exit(await runExecutaDelete({
 		slug,
 		yes: opts.yes,
@@ -923,7 +924,7 @@ executa.command("cache-clear").description("Delete the local `.anna/executa.json
 });
 const token = program.command("token").description("Manage developer PATs (list / revoke / scopes)");
 token.command("list").description("List the caller's PATs (most-recent first)").option("--include-revoked", "Also show revoked PATs", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runTokenList } = await import("./token-hGGfoge2.js");
+	const { runTokenList } = await import("./token-uedeaAy7.js");
 	process.exit(await runTokenList({
 		includeRevoked: opts.includeRevoked,
 		account: opts.account,
@@ -936,7 +937,7 @@ token.command("revoke <id>").description("Revoke one of the caller's PATs by id"
 		console.error(`✗ token id must be a positive integer (got: ${id})`);
 		process.exit(2);
 	}
-	const { runTokenRevoke } = await import("./token-hGGfoge2.js");
+	const { runTokenRevoke } = await import("./token-uedeaAy7.js");
 	process.exit(await runTokenRevoke({
 		id: idNum,
 		account: opts.account,
@@ -944,7 +945,7 @@ token.command("revoke <id>").description("Revoke one of the caller's PATs by id"
 	}));
 });
 token.command("scopes").description("Print the available PAT scope catalogue").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runTokenScopes } = await import("./token-hGGfoge2.js");
+	const { runTokenScopes } = await import("./token-uedeaAy7.js");
 	process.exit(await runTokenScopes({
 		account: opts.account,
 		json: opts.json
@@ -959,7 +960,7 @@ program.command("publish").description("Auto-detect cwd and publish (apps publis
 		console.error(`✗ --bump must be patch|minor|major (got: ${opts.bump})`);
 		process.exit(2);
 	}
-	const { runTopLevelPublish } = await import("./publish-NTT1Libd.js");
+	const { runTopLevelPublish } = await import("./publish-GpvkaBIx.js");
 	process.exit(await runTopLevelPublish({
 		cwd: opts.cwd,
 		bump: opts.bump,

package/dist/dev-C3yWhzAp.js

@@ -0,0 +1,4 @@
+import "./nexus-root-BlPwOusj.js";
+import { parseExecutaSpec, runDev } from "./dev-Re6NyNDS.js";
+
+export { parseExecutaSpec, runDev };

package/dist/{dev-aWkfWGLD.js → dev-Re6NyNDS.js}

@@ -49,8 +49,8 @@ async function runDev(opts) {
 		}
 		process.env.ANNA_APP_RUNTIME_STORAGE_MODE = "aps";
 	}
-	const { PythonBridge, PINNED_RUNTIME_VERSION } = await import("./bridge-CmoKMMcG.js");
-	const { HarnessServer } = await import("./server-DtnMLKQS.js");
+	const { PythonBridge, PINNED_RUNTIME_VERSION } = await import("./bridge-CzHB_IsQ.js");
+	const { HarnessServer } = await import("./server-BMcGaUTy.js");
 	const bridge = new PythonBridge({
 		mode,
 		matrixNexusRoot: matrixNexusRoot ?? void 0,
@@ -161,7 +161,7 @@ async function runDev(opts) {
 */
 async function resolveRealLlm(args) {
 	const { getAccount } = await import("./credentials-Chkoidh5.js");
-	const { ensureDevAppRegistered } = await import("./dev-app-cache-CP2P8SCZ.js");
+	const { ensureDevAppRegistered } = await import("./dev-app-cache-Dv1dZ_bw.js");
 	const acc = getAccount(args.account);
 	if (!acc) {
 		console.error(red("✗ no developer PAT on disk — run `anna-app login --host <nexus-url>` first.\n  (or use `--no-llm` / `--mock-llm <fixture>` to develop offline.)"));
@@ -190,7 +190,7 @@ async function resolveRealLlm(args) {
 			account: args.account,
 			appSlug: entry.slug,
 			onAppSlugNotFound: async () => {
-				const { invalidateDevAppCache } = await import("./dev-app-cache-CP2P8SCZ.js");
+				const { invalidateDevAppCache } = await import("./dev-app-cache-Dv1dZ_bw.js");
 				invalidateDevAppCache(args.cwd);
 				const fresh = getAccount(args.account);
 				if (!fresh) throw new Error("PAT not found while re-registering dev app — run `anna-app login` again");

package/dist/{doctor-DnCYaREu.js → doctor-VrfEkedz.js}

@@ -1,5 +1,5 @@
 import { findMatrixNexusRoot, nexusSchemaDir } from "./nexus-root-BlPwOusj.js";
-import { PINNED_RUNTIME_VERSION } from "./bridge-DXH59CmP.js";
+import { PINNED_RUNTIME_VERSION } from "./bridge-CbjqAm0H.js";
 import { resolve } from "node:path";
 import { existsSync, statSync } from "node:fs";
 import { spawnSync } from "node:child_process";

package/dist/{executa-dev-0XdBPTDy.js → executa-dev-B5Uz982M.js}

@@ -1,5 +1,5 @@
 import "./nexus-root-BlPwOusj.js";
-import { parseExecutaSpec } from "./dev-aWkfWGLD.js";
+import { parseExecutaSpec } from "./dev-Re6NyNDS.js";
 import { isAbsolute, resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";
@@ -35,7 +35,7 @@ async function runExecutaDev(opts) {
 	const oneShot = !!(opts.describe || opts.health || opts.invoke);
 	const quiet = oneShot && (opts.json ?? false);
 	const { getAccount } = await import("./credentials-Chkoidh5.js");
-	const { ensureDevExecutaRegistered } = await import("./dev-app-cache-CP2P8SCZ.js");
+	const { ensureDevExecutaRegistered } = await import("./dev-app-cache-Dv1dZ_bw.js");
 	const needsRealMint = !opts.noSampling && !opts.mockSampling || !opts.noAgent && !opts.mockAgent || !opts.noImage && !opts.mockImage || !opts.noUpload && !opts.mockUpload || opts.storage === "real";
 	let effectiveAppSlug = opts.appSlug;
 	let autoRegistered = false;
@@ -57,7 +57,7 @@ async function runExecutaDev(opts) {
 			}
 		}
 	}
-	const { SamplingBridge } = await import("./sampling-Cc0qaj8a.js");
+	const { SamplingBridge } = await import("./sampling-XBIEYU4A.js");
 	const simulateUnsupportedResponseFormat = opts.samplingUnsupportedFormat;
 	const sampling = opts.noSampling ? new SamplingBridge({ mode: "off" }) : opts.mockSampling ? new SamplingBridge({
 		mode: "mock",
@@ -69,7 +69,7 @@ async function runExecutaDev(opts) {
 		appSlug: effectiveAppSlug,
 		simulateUnsupportedResponseFormat
 	}) : new SamplingBridge({ mode: "off" });
-	const { AgentBridge } = await import("./agent-J2bELWfv.js");
+	const { AgentBridge } = await import("./agent-CzPryLi6.js");
 	const agent = opts.noAgent ? new AgentBridge({ mode: "off" }) : opts.mockAgent ? new AgentBridge({
 		mode: "mock",
 		mockFile: opts.mockAgent
@@ -78,7 +78,7 @@ async function runExecutaDev(opts) {
 		account: opts.agentAccount ?? opts.samplingAccount,
 		appSlug: effectiveAppSlug
 	}) : new AgentBridge({ mode: "off" });
-	const { StorageBridge } = await import("./storage-C95wApr2.js");
+	const { StorageBridge } = await import("./storage-BkF4XyI0.js");
 	const storageMode = opts.storage ?? (opts.mockStorage ? "mock" : "memory");
 	const storage = new StorageBridge({
 		mode: storageMode,
@@ -88,8 +88,8 @@ async function runExecutaDev(opts) {
 		scopes: opts.storageScopes ? opts.storageScopes.split(",").map((s) => s.trim()).filter(Boolean) : void 0,
 		pluginName: parsed.tool_id
 	});
-	const { ExecutaRunner } = await import("./runner-DVu-o_U8.js");
-	const { ImageBridge } = await import("./image-Bdi4Hu0m.js");
+	const { ExecutaRunner } = await import("./runner-BxYjAmih.js");
+	const { ImageBridge } = await import("./image-BLPyUbGQ.js");
 	const image = opts.noImage ? new ImageBridge({ mode: "off" }) : opts.mockImage ? new ImageBridge({
 		mode: "mock",
 		mockFile: opts.mockImage
@@ -98,7 +98,7 @@ async function runExecutaDev(opts) {
 		account: opts.imageAccount ?? opts.samplingAccount,
 		appSlug: effectiveAppSlug
 	}) : new ImageBridge({ mode: "off" });
-	const { HostUploadBridge } = await import("./host_upload-sfo4UHlR.js");
+	const { HostUploadBridge } = await import("./host_upload-BVzAqvX1.js");
 	const hostUpload = opts.noUpload ? new HostUploadBridge({ mode: "off" }) : opts.mockUpload ? new HostUploadBridge({
 		mode: "mock",
 		mockFile: opts.mockUpload

package/dist/{executa-install-A-BgavhA.js → executa-install-BW9jjY7u.js}

@@ -1,5 +1,5 @@
 import { readExecutaIdentity } from "./executa-cache-Do1D7xC0.js";
-import { parseExecutaSpec } from "./dev-aWkfWGLD.js";
+import { parseExecutaSpec } from "./dev-Re6NyNDS.js";
 import { isAbsolute, join, resolve } from "node:path";
 import { chmodSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";

package/dist/executa-install-Cyid8R7r.js

@@ -0,0 +1,7 @@
+import "./credentials-BTv2IfUZ.js";
+import "./nexus-root-BlPwOusj.js";
+import "./executa-cache-Do1D7xC0.js";
+import "./dev-Re6NyNDS.js";
+import { runExecutaInstall } from "./executa-install-BW9jjY7u.js";
+
+export { runExecutaInstall };

package/dist/{executa-publish-Xmm4DMO9.js → executa-publish-Ah6J7jYd.js}

@@ -3,7 +3,7 @@ import { CliError } from "./client-D-_z1ALk.js";
 import { resolveClient, withErrorHandling } from "./_lifecycle-shared-CUK2CE76.js";
 import { commitDraft, createDraft, getMySkill, getMyTool, listToolVersions, publishToolVersion, setSkillVisibility, setToolVisibility, updateMySkill, updateMyTool } from "./executas-BhFed1B-.js";
 import { executaCacheMatches, invalidateExecutaCache, mintIdempotencyKey, readExecutaIdentity, writeExecutaIdentity } from "./executa-cache-Do1D7xC0.js";
-import { loadExecutaManifest } from "./manifest-CMc7RM57.js";
+import { loadExecutaManifest } from "./manifest-DOMrcdCK.js";
 import { join, relative, resolve, sep } from "node:path";
 import { readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import { bold, cyan, dim, green, yellow } from "kleur/colors";

package/dist/{executa-publish-9XQRncyN.js → executa-publish-DI_6M_ea.js}

@@ -3,7 +3,7 @@ import "./client-D-_z1ALk.js";
 import "./_lifecycle-shared-CUK2CE76.js";
 import "./executas-BhFed1B-.js";
 import "./executa-cache-Do1D7xC0.js";
-import { runExecutaPublish } from "./executa-publish-Xmm4DMO9.js";
-import "./manifest-CMc7RM57.js";
+import { runExecutaPublish } from "./executa-publish-Ah6J7jYd.js";
+import "./manifest-DOMrcdCK.js";
 
 export { runExecutaPublish };

package/dist/listing-meta-BlY7XMrw.js

@@ -0,0 +1,117 @@
+import { patchApp, uploadAppLogo, uploadAppScreenshot } from "./apps-DlVsVHQ5.js";
+import { CliError } from "./client-D-_z1ALk.js";
+import { extname, resolve } from "node:path";
+import { existsSync, readFileSync } from "node:fs";
+
+//#region src/publish/listing-meta.ts
+const IMAGE_CONTENT_TYPES = {
+	".svg": "image/svg+xml",
+	".png": "image/png",
+	".jpg": "image/jpeg",
+	".jpeg": "image/jpeg",
+	".webp": "image/webp",
+	".gif": "image/gif"
+};
+function imageContentType(path) {
+	return IMAGE_CONTENT_TYPES[extname(path).toLowerCase()] ?? "application/octet-stream";
+}
+/**
+* A listing asset is "remote" (forwarded verbatim) when it's an absolute
+* http(s) URL or an inline `data:` URI. Anything else is treated as a
+* project-relative local file to be uploaded to the CDN — same split the logo
+* uses between `logoUrl` and `logoFile`.
+*/
+function isRemoteAsset(src) {
+	return /^https?:\/\//i.test(src) || src.startsWith("data:");
+}
+/**
+* Build the metadata payload from the manifest (only defined fields). The
+* logo is handled separately and never appears here when sourced from a file.
+*/
+function buildMeta(manifest) {
+	const meta = {};
+	const add = (key, value) => {
+		if (value !== void 0 && value !== null && value !== "") meta[key] = value;
+	};
+	add("name", manifest.name);
+	add("category", manifest.category);
+	add("tagline", manifest.tagline);
+	add("description", manifest.description);
+	add("cover_url", manifest.coverUrl);
+	add("homepage_url", manifest.homepageUrl);
+	add("support_url", manifest.supportUrl);
+	add("privacy_url", manifest.privacyUrl);
+	add("pricing_model", manifest.pricingModel);
+	return meta;
+}
+/**
+* Sync the app's store-listing metadata (and logo) from the local manifest.
+*
+* Returns a plan/result. When `dryRun` is set, no network calls are made and
+* the returned object reflects what *would* be sent.
+*/
+async function syncAppListingMeta(client, appId, manifest, opts) {
+	const meta = buildMeta(manifest);
+	const localLogo = opts.logoOverride ?? manifest.logoFile;
+	let logoUpload;
+	if (localLogo) {
+		const logoPath = resolve(opts.cwd, localLogo);
+		if (!existsSync(logoPath)) throw new CliError(`logo file not found: ${logoPath}`, 4);
+		logoUpload = { source: localLogo };
+	} else if (manifest.logoUrl) meta.logo_url = manifest.logoUrl;
+	const screenshotSources = manifest.screenshots ?? [];
+	const screenshotPlan = screenshotSources.map((src) => {
+		const remote = isRemoteAsset(src);
+		if (!remote && !existsSync(resolve(opts.cwd, src))) throw new CliError(`screenshot file not found: ${resolve(opts.cwd, src)}`, 4);
+		return {
+			source: src,
+			remote
+		};
+	});
+	const localScreenshots = screenshotPlan.filter((s) => !s.remote);
+	const noop = Object.keys(meta).length === 0 && !logoUpload && screenshotSources.length === 0;
+	if (opts.dryRun || noop) {
+		if (screenshotSources.length > 0) meta.screenshots = screenshotSources;
+		return {
+			meta,
+			logoUpload,
+			screenshotUploads: localScreenshots.length > 0 ? localScreenshots.map((s) => ({ source: s.source })) : void 0,
+			noop
+		};
+	}
+	const screenshotUploads = [];
+	const finalScreenshots = [];
+	for (const item of screenshotPlan) {
+		if (item.remote) {
+			finalScreenshots.push(item.source);
+			continue;
+		}
+		const shotPath = resolve(opts.cwd, item.source);
+		const bytes = readFileSync(shotPath);
+		const blob = new Blob([new Uint8Array(bytes)], { type: imageContentType(shotPath) });
+		const res = await uploadAppScreenshot(client, appId, blob);
+		finalScreenshots.push(res.screenshot_url);
+		screenshotUploads.push({
+			source: item.source,
+			screenshot_url: res.screenshot_url
+		});
+	}
+	if (finalScreenshots.length > 0) meta.screenshots = finalScreenshots;
+	if (Object.keys(meta).length > 0) await patchApp(client, appId, meta);
+	if (logoUpload) {
+		const logoPath = resolve(opts.cwd, logoUpload.source);
+		const bytes = readFileSync(logoPath);
+		const blob = new Blob([new Uint8Array(bytes)], { type: imageContentType(logoPath) });
+		const res = await uploadAppLogo(client, appId, blob);
+		logoUpload.logo_url = res.logo_url;
+	}
+	return {
+		meta,
+		logoUpload,
+		screenshotUploads: screenshotUploads.length > 0 ? screenshotUploads : void 0,
+		noop
+	};
+}
+
+//#endregion
+export { syncAppListingMeta };