@anna-ai/cli 0.1.35 → 0.1.37

package/dist/{app-bundle-upload-DmVKWAj9.js → app-bundle-upload-B6TJeyOq.js}

@@ -1,6 +1,6 @@
 import { finalizeBundle, finalizeWorkingBundle, getBundle, initBundle, initWorkingBundle, uploadBundleFile, uploadWorkingBundleFile } from "./apps-DlVsVHQ5.js";
 import { CliError } from "./client-D-_z1ALk.js";
-import { canonicalize } from "./executa-publish-kh4Ucd3o.js";
+import { canonicalize } from "./executa-publish-DueD_0hh.js";
 import { join, relative, sep } from "node:path";
 import { readFileSync, readdirSync, statSync } from "node:fs";
 import { createHash } from "node:crypto";

package/dist/{apps-cut-MjSe2ph7.js → apps-cut-Cc0XCFm3.js}

@@ -7,13 +7,13 @@ import { readExecutaIdentity } from "./executa-cache-BFoUtb4J.js";
 import { readExecutasLock, writeExecutasLock } from "./bundled-executas-rSIkaA6-.js";
 import { loadAppManifest, loadExecutaManifest } from "./manifest-CAF3_r1T.js";
 import "./executas-CvQY_w2U.js";
-import "./executa-publish-kh4Ucd3o.js";
+import "./executa-publish-DueD_0hh.js";
 import "./binary-upload-CKMU5Rfw.js";
 import { uploadExecutaBinaries } from "./executa-upload-binaries-DURJTXRI.js";
-import "./dev-GUFWek03.js";
-import "./executa-install-Dz7hBUsn.js";
+import "./dev-DBk4WVRp.js";
+import "./executa-install-C_n6Kd04.js";
 import "./app-cache-Cr3tKbux.js";
-import { resolveAppBySlugOrCache } from "./working-orchestration-D7cW2Bf2.js";
+import { resolveAppBySlugOrCache } from "./working-orchestration-BR6kmngc.js";
 import { resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { bold, cyan, dim, green, yellow } from "kleur/colors";

package/dist/{apps-discard-BWLVVMu7.js → apps-discard-CUmXXvm1.js}

@@ -7,13 +7,13 @@ import "./executa-cache-BFoUtb4J.js";
 import "./bundled-executas-rSIkaA6-.js";
 import "./manifest-CAF3_r1T.js";
 import "./executas-CvQY_w2U.js";
-import "./executa-publish-kh4Ucd3o.js";
+import "./executa-publish-DueD_0hh.js";
 import "./binary-upload-CKMU5Rfw.js";
 import "./executa-upload-binaries-DURJTXRI.js";
-import "./dev-GUFWek03.js";
-import "./executa-install-Dz7hBUsn.js";
+import "./dev-DBk4WVRp.js";
+import "./executa-install-C_n6Kd04.js";
 import "./app-cache-Cr3tKbux.js";
-import { resolveAppBySlugOrCache } from "./working-orchestration-D7cW2Bf2.js";
+import { resolveAppBySlugOrCache } from "./working-orchestration-BR6kmngc.js";
 import { dim, green, yellow } from "kleur/colors";
 
 //#region src/commands/apps-discard.ts

package/dist/{apps-publish-B7reDBe1.js → apps-publish-DnU-B7YF.js}

@@ -6,12 +6,12 @@ import "./executa-cache-BFoUtb4J.js";
 import "./bundled-executas-rSIkaA6-.js";
 import "./manifest-CAF3_r1T.js";
 import "./executas-CvQY_w2U.js";
-import "./executa-publish-kh4Ucd3o.js";
+import "./executa-publish-DueD_0hh.js";
 import "./binary-upload-CKMU5Rfw.js";
 import "./executa-upload-binaries-DURJTXRI.js";
 import "./app-cache-Cr3tKbux.js";
 import "./listing-meta-CtVtyaWu.js";
-import "./app-bundle-upload-DmVKWAj9.js";
-import { runAppsPublish } from "./apps-publish--EmBa0zN.js";
+import "./app-bundle-upload-B6TJeyOq.js";
+import { runAppsPublish } from "./apps-publish-bcqO88S0.js";
 
 export { runAppsPublish };

package/dist/{apps-publish--EmBa0zN.js → apps-publish-bcqO88S0.js}

@@ -4,10 +4,10 @@ import { CliError } from "./client-D-_z1ALk.js";
 import { resolveClient, withErrorHandling } from "./_lifecycle-shared-RyiRITI5.js";
 import { parseExecutaIdOverrides, readExecutasLock, substituteBundledRefs, validateBundledHandles, writeBundleToolIdSidecar, writeExecutasLock } from "./bundled-executas-rSIkaA6-.js";
 import { loadAppManifest } from "./manifest-CAF3_r1T.js";
-import { bumpVersion, bundleHash, manifestHash, rewriteVersion, runExecutaPublish } from "./executa-publish-kh4Ucd3o.js";
+import { bumpVersion, bundleHash, manifestHash, rewriteVersion, runExecutaPublish } from "./executa-publish-DueD_0hh.js";
 import { appCacheMatches, readAppIdentity, writeAppIdentity } from "./app-cache-Cr3tKbux.js";
 import { syncAppListingMeta } from "./listing-meta-CtVtyaWu.js";
-import { isExistingDir, uploadAppBundle } from "./app-bundle-upload-DmVKWAj9.js";
+import { isExistingDir, uploadAppBundle } from "./app-bundle-upload-B6TJeyOq.js";
 import { resolve } from "node:path";
 import { bold, cyan, dim, green, yellow } from "kleur/colors";
 

package/dist/{apps-push-CkJ1gtpy.js → apps-push-CFDmMwaR.js}

@@ -7,15 +7,15 @@ import "./executa-cache-BFoUtb4J.js";
 import "./bundled-executas-rSIkaA6-.js";
 import { loadAppManifest } from "./manifest-CAF3_r1T.js";
 import "./executas-CvQY_w2U.js";
-import { bumpVersion, bundleHash, manifestHash, rewriteVersion } from "./executa-publish-kh4Ucd3o.js";
+import { bumpVersion, bundleHash, manifestHash, rewriteVersion } from "./executa-publish-DueD_0hh.js";
 import "./binary-upload-CKMU5Rfw.js";
 import "./executa-upload-binaries-DURJTXRI.js";
-import "./dev-GUFWek03.js";
-import "./executa-install-Dz7hBUsn.js";
+import "./dev-DBk4WVRp.js";
+import "./executa-install-C_n6Kd04.js";
 import "./app-cache-Cr3tKbux.js";
-import { installLocalBundledShims, resolveAppIdentity, resolveBundledExecutas } from "./working-orchestration-D7cW2Bf2.js";
+import { installLocalBundledShims, resolveAppIdentity, resolveBundledExecutas } from "./working-orchestration-BR6kmngc.js";
 import { syncAppListingMeta } from "./listing-meta-CtVtyaWu.js";
-import { isExistingDir, uploadWorkingBundle } from "./app-bundle-upload-DmVKWAj9.js";
+import { isExistingDir, uploadWorkingBundle } from "./app-bundle-upload-B6TJeyOq.js";
 import { resolve } from "node:path";
 import { bold, cyan, dim, green, yellow } from "kleur/colors";
 

package/dist/{apps-release-J-Sjkoym.js → apps-release-CX7FtoOH.js}

@@ -59,7 +59,7 @@ async function runAppsRelease(opts) {
 		if (!target) {
 			if (opts.allowCreate) {
 				if (!opts.json) console.log(yellow(`version ${opts.version} not found remotely; running 'apps publish' first (--allow-create)…`));
-				const { runAppsPublish } = await import("./apps-publish-B7reDBe1.js");
+				const { runAppsPublish } = await import("./apps-publish-DnU-B7YF.js");
 				const code = await runAppsPublish({
 					cwd: opts.cwd,
 					account: opts.account,

package/dist/{bridge-Dvck0e9c.js → bridge-C_Vpmwag.js}

@@ -9,7 +9,7 @@ import { createInterface } from "node:readline";
 * `uvx <pkg>@<version>` so end users always run the dispatcher version
 * the CLI was tested against.
 */
-const PINNED_RUNTIME_VERSION = "0.2.0a12";
+const PINNED_RUNTIME_VERSION = "0.2.0a14";
 /**
 * Throwable from a {@link RequestHandler} to send a structured JSON-RPC
 * error back to the python bridge with a stable string ``code`` (e.g.

package/dist/bridge-D_J1ql-k.js

@@ -0,0 +1,3 @@
+import { BridgeRequestError, PINNED_RUNTIME_VERSION, PythonBridge } from "./bridge-C_Vpmwag.js";
+
+export { PINNED_RUNTIME_VERSION, PythonBridge };

package/dist/cli.js

@@ -145,6 +145,10 @@ function hostApiAllows(manifest, ns, method) {
 		const declared = (manifest.required_executas?.length ?? 0) + (manifest.optional_executas?.length ?? 0);
 		return declared > 0;
 	}
+	if (ns === "credentials" && (method === "list_accounts" || method === "get_token")) {
+		const providers = grants.credentials;
+		return !!providers && providers.length > 0;
+	}
 	const methods = grants[ns];
 	if (!methods || methods.length === 0) return false;
 	if (methods.includes("*")) return true;
@@ -470,7 +474,7 @@ program.command("validate").description("Run schema + ACL checks on a manifest+b
 	process.exit(code);
 });
 program.command("dev").description("Run a local harness (in-process dispatcher + iframe + SSE relay)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--bundle <dir>", "bundle directory (default: ./bundle)").option("--slug <slug>", "App slug (overrides manifest.slug/name)").option("--view <name>", "View name to open (default: manifest default)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (auto-detected if omitted; can also use $ANNA_NEXUS_ROOT)").option("--port <number>", "HTTP port", "5180").option("--user-id <id>", "Harness user_id", "1").option("--cwd <dir>", "Project root (default: cwd)").option("--no-watch", "Disable bundle file watcher (default: enabled)").option("--executa <spec>", "Explicit executa registration; repeatable. Spec: comma-separated key=value (dir=<path>[,tool_id=<id>][,type=python|node|go|binary][,command=\"<argv>\"]). When only `dir=` is given, the executa is auto-detected from executa.json / pyproject.toml / package.json / go.mod. Overrides directory auto-discovery under <manifest-dir>/executas/.", (val, prev) => prev ? [...prev, val] : [val]).option("--no-llm", "Disable LLM bridge (anna.llm/agent return llm_disabled)").option("--mock-llm <fixture>", "Serve canned LLM responses from a JSONL fixture").option("--llm-account <host>", "Saved account host to use (default: current)").option("--llm-app-slug <slug>", "Override the manifest slug used to register / look up the dev AnnaApp (default: manifest.slug)").option("--storage <mode>", "Storage backend: \"legacy\" (in-memory runtime_state, default) or \"aps\" (real nexus APS via /api/v1/storage/* — requires `anna-app login`).", "legacy").action(async (opts) => {
-	const { runDev, parseExecutaSpec } = await import("./dev-CZLOk2qE.js");
+	const { runDev, parseExecutaSpec } = await import("./dev-CgOVdKgK.js");
 	const cwd = opts.cwd ?? process.cwd();
 	let executas;
 	if (opts.executa && opts.executa.length > 0) {
@@ -529,7 +533,7 @@ fixture.command("replay <file>").description("Dry-run replay of a harness record
 	process.exit(code);
 });
 program.command("doctor").description("Check environment for `anna-app dev` (uv, matrix-nexus, dev key)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (optional)").action(async (opts) => {
-	const { runDoctor } = await import("./doctor-C3Nx8E2L.js");
+	const { runDoctor } = await import("./doctor-jwjNoAwf.js");
 	const code = await runDoctor({ matrixNexusRoot: opts.matrixNexusRoot });
 	process.exit(code);
 });
@@ -592,7 +596,7 @@ executa.command("register").description("Register a HARNESS AnnaApp(kind=executa
 	process.exit(code);
 });
 executa.command("install").description("Install a local-dev shim for an Executa under its minted tool_id so the Agent can discover it via 'Rediscover Local' (for distribution_type: local). Resolves the tool_id from .anna/executa.json (written by `executa publish` / `apps push`) unless --tool-id is given.").option("--dir <path>", "Executa project dir (default: CWD)").option("--tool-id <id>", "Install the shim under this exact id (default: minted id from .anna/executa.json, else executa.json tool_id)").option("--bin-dir <path>", "Install dir for the shim (default: ~/.anna/executa/bin)").option("--force", "Overwrite an existing shim of the same name", false).option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runExecutaInstall } = await import("./executa-install-nOFLBwxv.js");
+	const { runExecutaInstall } = await import("./executa-install-CgB-pvR9.js");
 	const code = await runExecutaInstall({
 		dir: opts.dir,
 		toolId: opts.toolId,
@@ -603,7 +607,7 @@ executa.command("install").description("Install a local-dev shim for an Executa
 	process.exit(code);
 });
 executa.command("dev").description("Run one Executa plugin in isolation (REPL or one-shot describe/invoke)").option("--dir <path>", "Executa project dir (default: CWD)").option("--spec <spec>", "Override discovery: comma-separated key=value (tool_id=...,type=...,command=\"...\")").option("--describe", "Print MANIFEST and exit", false).option("--health", "Print health and exit", false).option("--invoke <tool>", "Invoke one tool and exit").option("--args <json>", "JSON object passed as tool arguments", "{}").option("--json", "One-shot: emit compact JSON (no banners)", false).option("--no-sampling", "Hard-disable sampling reverse RPC (returns sampling_disabled)").option("--mock-sampling <fixture>", "Serve canned sampling responses from a JSONL fixture (offline)").option("--sampling-unsupported-format", "Simulate a model without json_schema support — exercises responseFormat onUnsupported branches (-32010 / downgrade)").option("--app-slug <slug>", "Forward sampling to nexus on behalf of this dev AnnaApp slug").option("--sampling-account <host>", "Saved account host for nexus sampling (default: current)").option("--no-agent", "Hard-disable agent reverse RPC (returns agent_not_granted)").option("--mock-agent <fixture>", "Serve canned agent/* responses from a JSONL fixture (offline)").option("--agent-account <host>", "Saved account host for nexus agent (default: --sampling-account or current)").option("--storage <mode>", "Storage backend: off | memory | mock | real (default: memory)").option("--mock-storage <fixture>", "Serve canned storage/* + files/* responses from a JSONL fixture").option("--storage-account <host>", "Saved account host for nexus storage (default: --sampling-account or current)").option("--storage-scopes <list>", "Comma-separated scopes for real storage tokens (default: user,app,tool)").option("--no-image", "Hard-disable image reverse RPC (returns image_not_granted)").option("--mock-image <fixture>", "Serve canned image/generate + image/edit responses from a JSONL fixture").option("--image-account <host>", "Saved account host for nexus image (default: --sampling-account or current)").option("--no-upload", "Hard-disable host/uploadFile reverse RPC (returns upload_not_granted)").option("--mock-upload <fixture>", "Serve canned host/uploadFile responses from a JSONL fixture").option("--upload-account <host>", "Saved account host for nexus uploads (default: --sampling-account or current)").action(async (opts) => {
-	const { runExecutaDev } = await import("./executa-dev-CAw5X64R.js");
+	const { runExecutaDev } = await import("./executa-dev-BOYF0I4H.js");
 	const storageMode = opts.storage === void 0 ? void 0 : (() => {
 		const m = opts.storage;
 		if (m === "off" || m === "memory" || m === "mock" || m === "real") return m;
@@ -666,7 +670,7 @@ apps.command("publish").description("Publish or update an Anna App (manifest.jso
 		console.error(`✗ --bump must be patch|minor|major (got: ${opts.bump})`);
 		process.exit(2);
 	}
-	const { runAppsPublish } = await import("./apps-publish-B7reDBe1.js");
+	const { runAppsPublish } = await import("./apps-publish-DnU-B7YF.js");
 	process.exit(await runAppsPublish({
 		cwd: opts.cwd,
 		manifest: opts.manifest,
@@ -700,7 +704,7 @@ apps.command("push").description("Upsert the mutable working draft (manifest + b
 			process.exit(2);
 		}
 	}
-	const { runAppsPush } = await import("./apps-push-CkJ1gtpy.js");
+	const { runAppsPush } = await import("./apps-push-CFDmMwaR.js");
 	process.exit(await runAppsPush({
 		cwd: opts.cwd,
 		manifest: opts.manifest,
@@ -720,7 +724,7 @@ apps.command("push").description("Upsert the mutable working draft (manifest + b
 	}));
 });
 apps.command("cut <version>").description("Snapshot the working draft into an immutable version (freeze deps)").option("--changelog <text>", "Override the working draft changelog for this version").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--dry-run", "Resolve target but don't cut", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (version, opts) => {
-	const { runAppsCut } = await import("./apps-cut-MjSe2ph7.js");
+	const { runAppsCut } = await import("./apps-cut-Cc0XCFm3.js");
 	process.exit(await runAppsCut({
 		version,
 		changelog: opts.changelog,
@@ -732,7 +736,7 @@ apps.command("cut <version>").description("Snapshot the working draft into an im
 	}));
 });
 apps.command("discard").description("Drop the mutable working draft (leaves cut versions intact)").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--dry-run", "Resolve target but don't discard", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runAppsDiscard } = await import("./apps-discard-BWLVVMu7.js");
+	const { runAppsDiscard } = await import("./apps-discard-CUmXXvm1.js");
 	process.exit(await runAppsDiscard({
 		slug: opts.slug,
 		cwd: opts.cwd,
@@ -742,7 +746,7 @@ apps.command("discard").description("Drop the mutable working draft (leaves cut
 	}));
 });
 apps.command("release <version>").description("Freeze & publish an existing remote version (go live)").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--allow-create", "If the version isn't on the server, run 'apps publish' first, then release", false).option("--dry-run", "Resolve target + pre-flight but don't publish", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (version, opts) => {
-	const { runAppsRelease } = await import("./apps-release-J-Sjkoym.js");
+	const { runAppsRelease } = await import("./apps-release-CX7FtoOH.js");
 	process.exit(await runAppsRelease({
 		version,
 		slug: opts.slug,
@@ -868,7 +872,7 @@ executa.command("publish").description("Mint or update an Executa (executa.json
 		console.error(`✗ --bump must be patch|minor|major (got: ${opts.bump})`);
 		process.exit(2);
 	}
-	const { runExecutaPublish } = await import("./executa-publish-B_7k1gOf.js");
+	const { runExecutaPublish } = await import("./executa-publish-2lAhRQvN.js");
 	process.exit(await runExecutaPublish({
 		cwd: opts.cwd,
 		manifest: opts.manifest,
@@ -996,7 +1000,7 @@ program.command("publish").description("Auto-detect cwd and publish (apps publis
 		console.error(`✗ --bump must be patch|minor|major (got: ${opts.bump})`);
 		process.exit(2);
 	}
-	const { runTopLevelPublish } = await import("./publish-DwIJWl46.js");
+	const { runTopLevelPublish } = await import("./publish-BQL5NDnd.js");
 	process.exit(await runTopLevelPublish({
 		cwd: opts.cwd,
 		bump: opts.bump,

package/dist/dev-CgOVdKgK.js

@@ -0,0 +1,4 @@
+import "./nexus-root-BlPwOusj.js";
+import { parseExecutaSpec, runDev } from "./dev-DBk4WVRp.js";
+
+export { parseExecutaSpec, runDev };

package/dist/{dev-GUFWek03.js → dev-DBk4WVRp.js}

@@ -49,8 +49,8 @@ async function runDev(opts) {
 		}
 		process.env.ANNA_APP_RUNTIME_STORAGE_MODE = "aps";
 	}
-	const { PythonBridge, PINNED_RUNTIME_VERSION } = await import("./bridge-CzeSuRRL.js");
-	const { HarnessServer } = await import("./server-BHWGGZsf.js");
+	const { PythonBridge, PINNED_RUNTIME_VERSION } = await import("./bridge-D_J1ql-k.js");
+	const { HarnessServer } = await import("./server-Cg13x19g.js");
 	const bridge = new PythonBridge({
 		mode,
 		matrixNexusRoot: matrixNexusRoot ?? void 0,

package/dist/{doctor-C3Nx8E2L.js → doctor-jwjNoAwf.js}

@@ -1,5 +1,5 @@
 import { findMatrixNexusRoot, nexusSchemaDir } from "./nexus-root-BlPwOusj.js";
-import { PINNED_RUNTIME_VERSION } from "./bridge-Dvck0e9c.js";
+import { PINNED_RUNTIME_VERSION } from "./bridge-C_Vpmwag.js";
 import { resolve } from "node:path";
 import { existsSync, statSync } from "node:fs";
 import { spawnSync } from "node:child_process";

package/dist/{executa-dev-CAw5X64R.js → executa-dev-BOYF0I4H.js}

@@ -1,5 +1,5 @@
 import "./nexus-root-BlPwOusj.js";
-import { parseExecutaSpec } from "./dev-GUFWek03.js";
+import { parseExecutaSpec } from "./dev-DBk4WVRp.js";
 import { isAbsolute, resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";

package/dist/{executa-install-Dz7hBUsn.js → executa-install-C_n6Kd04.js}

@@ -1,5 +1,5 @@
 import { readExecutaIdentity } from "./executa-cache-BFoUtb4J.js";
-import { parseExecutaSpec } from "./dev-GUFWek03.js";
+import { parseExecutaSpec } from "./dev-DBk4WVRp.js";
 import { isAbsolute, join, resolve } from "node:path";
 import { chmodSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";

package/dist/executa-install-CgB-pvR9.js

@@ -0,0 +1,7 @@
+import "./credentials-BTv2IfUZ.js";
+import "./nexus-root-BlPwOusj.js";
+import "./executa-cache-BFoUtb4J.js";
+import "./dev-DBk4WVRp.js";
+import { runExecutaInstall } from "./executa-install-C_n6Kd04.js";
+
+export { runExecutaInstall };

package/dist/{executa-publish-B_7k1gOf.js → executa-publish-2lAhRQvN.js}

@@ -4,7 +4,7 @@ import "./_lifecycle-shared-RyiRITI5.js";
 import "./executa-cache-BFoUtb4J.js";
 import "./manifest-CAF3_r1T.js";
 import "./executas-CvQY_w2U.js";
-import { runExecutaPublish } from "./executa-publish-kh4Ucd3o.js";
+import { runExecutaPublish } from "./executa-publish-DueD_0hh.js";
 import "./binary-upload-CKMU5Rfw.js";
 import "./executa-upload-binaries-DURJTXRI.js";
 

package/dist/{executa-publish-kh4Ucd3o.js → executa-publish-DueD_0hh.js}

@@ -205,6 +205,7 @@ async function runExecutaPublish(opts) {
 		else await updateMyTool(client, executaId, {
 			name: manifest.name,
 			description: manifest.description,
+			version: manifest.version,
 			...distributionPayload(manifest.distribution)
 		});
 		if (!isSkill && manifest.distribution?.binaryArtifacts && opts.freeze !== false) {

package/dist/{publish-DwIJWl46.js → publish-BQL5NDnd.js}

@@ -6,13 +6,13 @@ import "./executa-cache-BFoUtb4J.js";
 import "./bundled-executas-rSIkaA6-.js";
 import "./manifest-CAF3_r1T.js";
 import "./executas-CvQY_w2U.js";
-import { runExecutaPublish } from "./executa-publish-kh4Ucd3o.js";
+import { runExecutaPublish } from "./executa-publish-DueD_0hh.js";
 import "./binary-upload-CKMU5Rfw.js";
 import "./executa-upload-binaries-DURJTXRI.js";
 import "./app-cache-Cr3tKbux.js";
 import "./listing-meta-CtVtyaWu.js";
-import "./app-bundle-upload-DmVKWAj9.js";
-import { runAppsPublish } from "./apps-publish--EmBa0zN.js";
+import "./app-bundle-upload-B6TJeyOq.js";
+import { runAppsPublish } from "./apps-publish-bcqO88S0.js";
 import { resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { red, yellow } from "kleur/colors";

package/dist/{server-BHWGGZsf.js → server-Cg13x19g.js}

@@ -1,5 +1,5 @@
 import { canonicalHost, getAccount } from "./credentials-BTv2IfUZ.js";
-import { BridgeRequestError } from "./bridge-Dvck0e9c.js";
+import { BridgeRequestError } from "./bridge-C_Vpmwag.js";
 import { dirname, join, normalize, resolve } from "node:path";
 import { createRequire } from "node:module";
 import { createReadStream, existsSync, readFileSync, statSync, watch } from "node:fs";

package/dist/test/index.d.ts

@@ -16,6 +16,8 @@ interface HostApi {
   storage?: string[];
   prefs?: string[];
   window?: string[];
+  /** Provider ids (e.g. "google") — NOT method names. */
+  credentials?: string[];
 }
 interface ManifestForAcl {
   required_executas?: Array<{

package/dist/test/index.js

@@ -7,7 +7,8 @@ const NAMESPACED = {
 	fs: true,
 	storage: true,
 	prefs: true,
-	window: true
+	window: true,
+	credentials: true
 };
 function deriveAcl(manifest) {
 	const ha = manifest.ui?.host_api ?? {};
@@ -26,8 +27,12 @@ function deriveAcl(manifest) {
 		for (const r of [...manifest.required_executas ?? [], ...manifest.optional_executas ?? []]) if (r.tool_id) allowedTools.add(r.tool_id);
 	}
 	if (allowedTools.size > 0 || toolsWildcard) allowed.add("tools.invoke");
+	if ((ha.credentials ?? []).length > 0) {
+		allowed.add("credentials.list_accounts");
+		allowed.add("credentials.get_token");
+	}
 	for (const ns of Object.keys(NAMESPACED)) {
-		if (ns === "tools") continue;
+		if (ns === "tools" || ns === "credentials") continue;
 		for (const method of ha[ns] ?? []) allowed.add(`${ns}.${method}`);
 	}
 	return {

package/dist/{working-orchestration-D7cW2Bf2.js → working-orchestration-BR6kmngc.js}

@@ -3,8 +3,8 @@ import { createApp, findAppBySlug, getApp } from "./apps-DlVsVHQ5.js";
 import { CliError } from "./client-D-_z1ALk.js";
 import { parseExecutaIdOverrides, readExecutasLock, substituteBundledRefs, validateBundledHandles, writeBundleToolIdSidecar, writeExecutasLock } from "./bundled-executas-rSIkaA6-.js";
 import { loadExecutaManifest } from "./manifest-CAF3_r1T.js";
-import { runExecutaPublish } from "./executa-publish-kh4Ucd3o.js";
-import { runExecutaInstall } from "./executa-install-Dz7hBUsn.js";
+import { runExecutaPublish } from "./executa-publish-DueD_0hh.js";
+import { runExecutaInstall } from "./executa-install-C_n6Kd04.js";
 import { appCacheMatches, readAppIdentity, writeAppIdentity } from "./app-cache-Cr3tKbux.js";
 import { join, resolve } from "node:path";
 import { dim, green, yellow } from "kleur/colors";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anna-ai/cli",
-  "version": "0.1.35",
+  "version": "0.1.37",
   "description": "Anna App developer CLI: scaffold, validate, harness (Phase 2 MVP: init + validate).",
   "license": "MIT",
   "type": "module",
@@ -33,8 +33,8 @@
     "prepublishOnly": "pnpm lint && pnpm test && pnpm build && node scripts/check-runtime-pin.mjs && node scripts/check-sdk-pin.mjs"
   },
   "dependencies": {
-    "@anna-ai/app-runtime": "^0.10.0",
-    "@anna-ai/app-schema": "^0.12.0",
+    "@anna-ai/app-runtime": "^0.12.0",
+    "@anna-ai/app-schema": "^0.15.0",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
     "commander": "^12.1.0",

package/dist/bridge-CzeSuRRL.js

@@ -1,3 +0,0 @@
-import { BridgeRequestError, PINNED_RUNTIME_VERSION, PythonBridge } from "./bridge-Dvck0e9c.js";
-
-export { PINNED_RUNTIME_VERSION, PythonBridge };

package/dist/dev-CZLOk2qE.js

@@ -1,4 +0,0 @@
-import "./nexus-root-BlPwOusj.js";
-import { parseExecutaSpec, runDev } from "./dev-GUFWek03.js";
-
-export { parseExecutaSpec, runDev };

package/dist/executa-install-nOFLBwxv.js

@@ -1,7 +0,0 @@
-import "./credentials-BTv2IfUZ.js";
-import "./nexus-root-BlPwOusj.js";
-import "./executa-cache-BFoUtb4J.js";
-import "./dev-GUFWek03.js";
-import { runExecutaInstall } from "./executa-install-Dz7hBUsn.js";
-
-export { runExecutaInstall };