@anna-ai/cli 0.1.39 → 0.1.41

package/dist/{apps-cut-PyNqcXFx.js → apps-cut-Crx0WrpZ.js}

@@ -10,10 +10,10 @@ import "./executas-CvQY_w2U.js";
 import "./executa-publish-DueD_0hh.js";
 import "./binary-upload-CKMU5Rfw.js";
 import { uploadExecutaBinaries } from "./executa-upload-binaries-DURJTXRI.js";
-import "./dev-CXCK6G1l.js";
-import "./executa-install-aCwM1hO0.js";
+import "./dev-DEGmXqc_.js";
+import "./executa-install-jSVVx6oh.js";
 import "./app-cache-Cr3tKbux.js";
-import { resolveAppBySlugOrCache } from "./working-orchestration-CQJEJkV_.js";
+import { resolveAppBySlugOrCache } from "./working-orchestration-oFZwsWqQ.js";
 import { resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { bold, cyan, dim, green, yellow } from "kleur/colors";

package/dist/{apps-discard-CTheELlR.js → apps-discard-Bmj0-j_T.js}

@@ -10,10 +10,10 @@ import "./executas-CvQY_w2U.js";
 import "./executa-publish-DueD_0hh.js";
 import "./binary-upload-CKMU5Rfw.js";
 import "./executa-upload-binaries-DURJTXRI.js";
-import "./dev-CXCK6G1l.js";
-import "./executa-install-aCwM1hO0.js";
+import "./dev-DEGmXqc_.js";
+import "./executa-install-jSVVx6oh.js";
 import "./app-cache-Cr3tKbux.js";
-import { resolveAppBySlugOrCache } from "./working-orchestration-CQJEJkV_.js";
+import { resolveAppBySlugOrCache } from "./working-orchestration-oFZwsWqQ.js";
 import { dim, green, yellow } from "kleur/colors";
 
 //#region src/commands/apps-discard.ts

package/dist/{apps-push-DhUwaJrr.js → apps-push-CnZdmaYm.js}

@@ -10,10 +10,10 @@ import "./executas-CvQY_w2U.js";
 import { bumpVersion, bundleHash, manifestHash, rewriteVersion } from "./executa-publish-DueD_0hh.js";
 import "./binary-upload-CKMU5Rfw.js";
 import "./executa-upload-binaries-DURJTXRI.js";
-import "./dev-CXCK6G1l.js";
-import "./executa-install-aCwM1hO0.js";
+import "./dev-DEGmXqc_.js";
+import "./executa-install-jSVVx6oh.js";
 import "./app-cache-Cr3tKbux.js";
-import { installLocalBundledShims, resolveAppIdentity, resolveBundledExecutas } from "./working-orchestration-CQJEJkV_.js";
+import { installLocalBundledShims, resolveAppIdentity, resolveBundledExecutas } from "./working-orchestration-oFZwsWqQ.js";
 import { syncAppListingMeta } from "./listing-meta-CtVtyaWu.js";
 import { isExistingDir, uploadWorkingBundle } from "./app-bundle-upload-B6TJeyOq.js";
 import { resolve } from "node:path";

package/dist/{bridge-BTMm5SiP.js → bridge-Bnpq2I_T.js}

@@ -9,7 +9,7 @@ import { createInterface } from "node:readline";
 * `uvx <pkg>@<version>` so end users always run the dispatcher version
 * the CLI was tested against.
 */
-const PINNED_RUNTIME_VERSION = "0.2.0a16";
+const PINNED_RUNTIME_VERSION = "0.2.0a18";
 /**
 * Throwable from a {@link RequestHandler} to send a structured JSON-RPC
 * error back to the python bridge with a stable string ``code`` (e.g.

package/dist/bridge-CL8HLo-I.js

@@ -0,0 +1,3 @@
+import { BridgeRequestError, PINNED_RUNTIME_VERSION, PythonBridge } from "./bridge-Bnpq2I_T.js";
+
+export { PINNED_RUNTIME_VERSION, PythonBridge };

package/dist/cli.js

@@ -473,8 +473,8 @@ program.command("validate").description("Run schema + ACL checks on a manifest+b
 	const code = printResult(result);
 	process.exit(code);
 });
-program.command("dev").description("Run a local harness (in-process dispatcher + iframe + SSE relay)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--bundle <dir>", "bundle directory (default: ./bundle)").option("--slug <slug>", "App slug (overrides manifest.slug/name)").option("--view <name>", "View name to open (default: manifest default)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (auto-detected if omitted; can also use $ANNA_NEXUS_ROOT)").option("--port <number>", "HTTP port", "5180").option("--user-id <id>", "Harness user_id", "1").option("--cwd <dir>", "Project root (default: cwd)").option("--no-watch", "Disable bundle file watcher (default: enabled)").option("--executa <spec>", "Explicit executa registration; repeatable. Spec: comma-separated key=value (dir=<path>[,tool_id=<id>][,type=python|node|go|binary][,command=\"<argv>\"]). When only `dir=` is given, the executa is auto-detected from executa.json / pyproject.toml / package.json / go.mod. Overrides directory auto-discovery under <manifest-dir>/executas/.", (val, prev) => prev ? [...prev, val] : [val]).option("--no-llm", "Disable LLM bridge (anna.llm/agent return llm_disabled)").option("--mock-llm <fixture>", "Serve canned LLM responses from a JSONL fixture").option("--llm-account <host>", "Saved account host to use (default: current)").option("--llm-app-slug <slug>", "Override the manifest slug used to register / look up the dev AnnaApp (default: manifest.slug)").option("--storage <mode>", "Storage backend: \"legacy\" (in-memory runtime_state, default) or \"aps\" (real nexus APS via /api/v1/storage/* — requires `anna-app login`).", "legacy").action(async (opts) => {
-	const { runDev, parseExecutaSpec } = await import("./dev-NBsx_AGR.js");
+program.command("dev").description("Run a local harness (in-process dispatcher + iframe + SSE relay)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--bundle <dir>", "bundle directory (default: ./bundle)").option("--slug <slug>", "App slug (overrides manifest.slug/name)").option("--view <name>", "View name to open (default: manifest default)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (auto-detected if omitted; can also use $ANNA_NEXUS_ROOT)").option("--port <number>", "HTTP port", "5180").option("--user-id <id>", "Harness user_id", "1").option("--cwd <dir>", "Project root (default: cwd)").option("--no-watch", "Disable bundle file watcher (default: enabled)").option("--executa <spec>", "Explicit executa registration; repeatable. Spec: comma-separated key=value (dir=<path>[,tool_id=<id>][,type=python|node|go|binary][,command=\"<argv>\"]). When only `dir=` is given, the executa is auto-detected from executa.json / pyproject.toml / package.json / go.mod. Overrides directory auto-discovery under <manifest-dir>/executas/.", (val, prev) => prev ? [...prev, val] : [val]).option("--no-llm", "Disable LLM bridge (anna.llm/agent return llm_disabled)").option("--mock-llm <fixture>", "Serve canned LLM responses from a JSONL fixture").option("--llm-account <host>", "Saved account host to use (default: current)").option("--llm-app-slug <slug>", "Override the manifest slug used to register / look up the dev AnnaApp (default: manifest.slug)").option("--storage <mode>", "Storage backend: \"legacy\" (in-memory runtime_state, default) or \"aps\" (real nexus APS via /api/v1/storage/* — requires `anna-app login`).", "legacy").option("--web <mode>", "Web backend: \"local\" (keyless ddgs + stdlib fetcher, free, default) or \"real\" (platform web service via /api/v1/copilot/app/web/* — production provider chain + normal CU billing; requires `anna-app login`).", "local").action(async (opts) => {
+	const { runDev, parseExecutaSpec } = await import("./dev-C0sHLKn_.js");
 	const cwd = opts.cwd ?? process.cwd();
 	let executas;
 	if (opts.executa && opts.executa.length > 0) {
@@ -503,7 +503,8 @@ program.command("dev").description("Run a local harness (in-process dispatcher +
 		mockLlm: opts.mockLlm,
 		llmAccount: opts.llmAccount,
 		llmAppSlug: opts.llmAppSlug,
-		storageMode: opts.storage
+		storageMode: opts.storage,
+		webMode: opts.web
 	});
 	process.exit(code);
 });
@@ -533,7 +534,7 @@ fixture.command("replay <file>").description("Dry-run replay of a harness record
 	process.exit(code);
 });
 program.command("doctor").description("Check environment for `anna-app dev` (uv, matrix-nexus, dev key)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (optional)").action(async (opts) => {
-	const { runDoctor } = await import("./doctor-BAyE1WAT.js");
+	const { runDoctor } = await import("./doctor-Dm6TNsq6.js");
 	const code = await runDoctor({ matrixNexusRoot: opts.matrixNexusRoot });
 	process.exit(code);
 });
@@ -596,7 +597,7 @@ executa.command("register").description("Register a HARNESS AnnaApp(kind=executa
 	process.exit(code);
 });
 executa.command("install").description("Install a local-dev shim for an Executa under its minted tool_id so the Agent can discover it via 'Rediscover Local' (for distribution_type: local). Resolves the tool_id from .anna/executa.json (written by `executa publish` / `apps push`) unless --tool-id is given.").option("--dir <path>", "Executa project dir (default: CWD)").option("--tool-id <id>", "Install the shim under this exact id (default: minted id from .anna/executa.json, else executa.json tool_id)").option("--bin-dir <path>", "Install dir for the shim (default: ~/.anna/executa/bin)").option("--force", "Overwrite an existing shim of the same name", false).option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runExecutaInstall } = await import("./executa-install-RBG-DOAY.js");
+	const { runExecutaInstall } = await import("./executa-install-Q8zSREKQ.js");
 	const code = await runExecutaInstall({
 		dir: opts.dir,
 		toolId: opts.toolId,
@@ -607,7 +608,7 @@ executa.command("install").description("Install a local-dev shim for an Executa
 	process.exit(code);
 });
 executa.command("dev").description("Run one Executa plugin in isolation (REPL or one-shot describe/invoke)").option("--dir <path>", "Executa project dir (default: CWD)").option("--spec <spec>", "Override discovery: comma-separated key=value (tool_id=...,type=...,command=\"...\")").option("--describe", "Print MANIFEST and exit", false).option("--health", "Print health and exit", false).option("--invoke <tool>", "Invoke one tool and exit").option("--args <json>", "JSON object passed as tool arguments", "{}").option("--json", "One-shot: emit compact JSON (no banners)", false).option("--no-sampling", "Hard-disable sampling reverse RPC (returns sampling_disabled)").option("--mock-sampling <fixture>", "Serve canned sampling responses from a JSONL fixture (offline)").option("--sampling-unsupported-format", "Simulate a model without json_schema support — exercises responseFormat onUnsupported branches (-32010 / downgrade)").option("--app-slug <slug>", "Forward sampling to nexus on behalf of this dev AnnaApp slug").option("--sampling-account <host>", "Saved account host for nexus sampling (default: current)").option("--no-agent", "Hard-disable agent reverse RPC (returns agent_not_granted)").option("--mock-agent <fixture>", "Serve canned agent/* responses from a JSONL fixture (offline)").option("--agent-account <host>", "Saved account host for nexus agent (default: --sampling-account or current)").option("--storage <mode>", "Storage backend: off | memory | mock | real (default: memory)").option("--mock-storage <fixture>", "Serve canned storage/* + files/* responses from a JSONL fixture").option("--storage-account <host>", "Saved account host for nexus storage (default: --sampling-account or current)").option("--storage-scopes <list>", "Comma-separated scopes for real storage tokens (default: user,app,tool)").option("--no-image", "Hard-disable image reverse RPC (returns image_not_granted)").option("--mock-image <fixture>", "Serve canned image/generate + image/edit responses from a JSONL fixture").option("--image-account <host>", "Saved account host for nexus image (default: --sampling-account or current)").option("--no-upload", "Hard-disable host/uploadFile reverse RPC (returns upload_not_granted)").option("--mock-upload <fixture>", "Serve canned host/uploadFile responses from a JSONL fixture").option("--upload-account <host>", "Saved account host for nexus uploads (default: --sampling-account or current)").action(async (opts) => {
-	const { runExecutaDev } = await import("./executa-dev-bx27DUJ7.js");
+	const { runExecutaDev } = await import("./executa-dev-CnWCz6Of.js");
 	const storageMode = opts.storage === void 0 ? void 0 : (() => {
 		const m = opts.storage;
 		if (m === "off" || m === "memory" || m === "mock" || m === "real") return m;
@@ -704,7 +705,7 @@ apps.command("push").description("Upsert the mutable working draft (manifest + b
 			process.exit(2);
 		}
 	}
-	const { runAppsPush } = await import("./apps-push-DhUwaJrr.js");
+	const { runAppsPush } = await import("./apps-push-CnZdmaYm.js");
 	process.exit(await runAppsPush({
 		cwd: opts.cwd,
 		manifest: opts.manifest,
@@ -724,7 +725,7 @@ apps.command("push").description("Upsert the mutable working draft (manifest + b
 	}));
 });
 apps.command("cut <version>").description("Snapshot the working draft into an immutable version (freeze deps)").option("--changelog <text>", "Override the working draft changelog for this version").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--dry-run", "Resolve target but don't cut", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (version, opts) => {
-	const { runAppsCut } = await import("./apps-cut-PyNqcXFx.js");
+	const { runAppsCut } = await import("./apps-cut-Crx0WrpZ.js");
 	process.exit(await runAppsCut({
 		version,
 		changelog: opts.changelog,
@@ -736,7 +737,7 @@ apps.command("cut <version>").description("Snapshot the working draft into an im
 	}));
 });
 apps.command("discard").description("Drop the mutable working draft (leaves cut versions intact)").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--dry-run", "Resolve target but don't discard", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runAppsDiscard } = await import("./apps-discard-CTheELlR.js");
+	const { runAppsDiscard } = await import("./apps-discard-Bmj0-j_T.js");
 	process.exit(await runAppsDiscard({
 		slug: opts.slug,
 		cwd: opts.cwd,

package/dist/dev-C0sHLKn_.js

@@ -0,0 +1,4 @@
+import "./nexus-root-BlPwOusj.js";
+import { parseExecutaSpec, runDev } from "./dev-DEGmXqc_.js";
+
+export { parseExecutaSpec, runDev };

package/dist/{dev-CXCK6G1l.js → dev-DEGmXqc_.js}

@@ -49,8 +49,20 @@ async function runDev(opts) {
 		}
 		process.env.ANNA_APP_RUNTIME_STORAGE_MODE = "aps";
 	}
-	const { PythonBridge, PINNED_RUNTIME_VERSION } = await import("./bridge-5PPeIq2g.js");
-	const { HarnessServer } = await import("./server-B2N6MuQJ.js");
+	const webMode = opts.webMode === "real" ? "real" : "local";
+	if (opts.webMode && opts.webMode !== "local" && opts.webMode !== "real") {
+		console.error(red(`✗ --web must be "local" or "real", got "${opts.webMode}"`));
+		return 2;
+	}
+	if (webMode === "real") {
+		if (opts.noLlm || opts.mockLlm) {
+			console.error(red("✗ --web real requires a real LLM bridge (PAT on disk); drop --no-llm / --mock-llm or switch back to --web local."));
+			return 2;
+		}
+		process.env.ANNA_APP_RUNTIME_WEB_MODE = "real";
+	}
+	const { PythonBridge, PINNED_RUNTIME_VERSION } = await import("./bridge-CL8HLo-I.js");
+	const { HarnessServer } = await import("./server-3aUfxWXU.js");
 	const bridge = new PythonBridge({
 		mode,
 		matrixNexusRoot: matrixNexusRoot ?? void 0,
@@ -112,8 +124,10 @@ async function runDev(opts) {
 	});
 	if (llm === null) return 2;
 	llm.storageMode = storageMode;
+	llm.webMode = webMode;
 	console.log(`  llm bridge        ${dim(llm.mode === "off" ? "disabled (--no-llm)" : llm.mode === "mock" ? `mock (${opts.mockLlm})` : `real${opts.llmAccount ? ` [${opts.llmAccount}]` : ""} → app_slug=${llm.appSlug}`)}`);
 	console.log(`  storage backend   ${dim(storageMode === "aps" ? "aps (real nexus APS via /api/v1/storage/*)" : "legacy (in-memory runtime_state)")}`);
+	console.log(`  web backend       ${dim(webMode === "real" ? "real (platform web service via /api/v1/copilot/app/web/* — normal CU billing)" : "local (keyless ddgs + stdlib SSRF fetcher, unbilled)")}`);
 	const server = new HarnessServer({
 		slug,
 		manifest,

package/dist/{doctor-BAyE1WAT.js → doctor-Dm6TNsq6.js}

@@ -1,5 +1,5 @@
 import { findMatrixNexusRoot, nexusSchemaDir } from "./nexus-root-BlPwOusj.js";
-import { PINNED_RUNTIME_VERSION } from "./bridge-BTMm5SiP.js";
+import { PINNED_RUNTIME_VERSION } from "./bridge-Bnpq2I_T.js";
 import { resolve } from "node:path";
 import { existsSync, statSync } from "node:fs";
 import { spawnSync } from "node:child_process";

package/dist/{executa-dev-bx27DUJ7.js → executa-dev-CnWCz6Of.js}

@@ -1,5 +1,5 @@
 import "./nexus-root-BlPwOusj.js";
-import { parseExecutaSpec } from "./dev-CXCK6G1l.js";
+import { parseExecutaSpec } from "./dev-DEGmXqc_.js";
 import { isAbsolute, resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";
@@ -88,7 +88,7 @@ async function runExecutaDev(opts) {
 		scopes: opts.storageScopes ? opts.storageScopes.split(",").map((s) => s.trim()).filter(Boolean) : void 0,
 		pluginName: parsed.tool_id
 	});
-	const { ExecutaRunner } = await import("./runner-Bka_coxb.js");
+	const { ExecutaRunner } = await import("./runner-Dq3cluPM.js");
 	const { ImageBridge } = await import("./image-B4UrufYH.js");
 	const image = opts.noImage ? new ImageBridge({ mode: "off" }) : opts.mockImage ? new ImageBridge({
 		mode: "mock",

package/dist/executa-install-Q8zSREKQ.js

@@ -0,0 +1,7 @@
+import "./credentials-BTv2IfUZ.js";
+import "./nexus-root-BlPwOusj.js";
+import "./executa-cache-BFoUtb4J.js";
+import "./dev-DEGmXqc_.js";
+import { runExecutaInstall } from "./executa-install-jSVVx6oh.js";
+
+export { runExecutaInstall };

package/dist/{executa-install-aCwM1hO0.js → executa-install-jSVVx6oh.js}

@@ -1,5 +1,5 @@
 import { readExecutaIdentity } from "./executa-cache-BFoUtb4J.js";
-import { parseExecutaSpec } from "./dev-CXCK6G1l.js";
+import { parseExecutaSpec } from "./dev-DEGmXqc_.js";
 import { isAbsolute, join, resolve } from "node:path";
 import { chmodSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";

package/dist/{runner-Bka_coxb.js → runner-Dq3cluPM.js}

@@ -204,7 +204,11 @@ var ExecutaRunner = class {
 	async handleReverse(env) {
 		const id = env.id;
 		const method = env.method;
-		const params = env.params ?? {};
+		let params = env.params ?? {};
+		if (params.context !== void 0) {
+			const { context: _context,...rest } = params;
+			params = rest;
+		}
 		const respond = (body) => {
 			if (id === void 0 || id === null) return;
 			if (!this.proc) return;

package/dist/{server-B2N6MuQJ.js → server-3aUfxWXU.js}

@@ -1,5 +1,5 @@
 import { canonicalHost, getAccount } from "./credentials-BTv2IfUZ.js";
-import { BridgeRequestError } from "./bridge-BTMm5SiP.js";
+import { BridgeRequestError } from "./bridge-Bnpq2I_T.js";
 import { dirname, join, normalize, resolve } from "node:path";
 import { createRequire } from "node:module";
 import { createReadStream, existsSync, readFileSync, statSync, watch } from "node:fs";
@@ -99,6 +99,15 @@ const VALID_STORAGE_SCOPES = new Set([
 	"app",
 	"tool"
 ]);
+/** ``anna.web.*`` methods forwarded to ``/api/v1/copilot/app/web/*`` when
+*  ``webMode === "real"``. Mirrors matrix-nexus ``copilot_app.py`` routes;
+*  wire shapes are identical to the iframe HOST API (app-web-search §2). */
+const WEB_REAL_METHODS = new Set([
+	"search",
+	"fetch",
+	"image_search",
+	"image_fetch"
+]);
 var LlmBridge = class {
 	mintedAuto = new Map();
 	mintedAgent = new Map();
@@ -139,6 +148,7 @@ var LlmBridge = class {
 		if (ns === "upload" && (method === "inline" || method === "negotiate" || method === "confirm")) return true;
 		if (ns === "storage" && this.opts.storageMode === "aps" && this.opts.mode === "real" && STORAGE_APS_METHODS.has(method)) return true;
 		if (ns === "files" && this.opts.storageMode === "aps" && this.opts.mode === "real" && Object.prototype.hasOwnProperty.call(FILES_APP_ROUTES, method)) return true;
+		if (ns === "web" && this.opts.webMode === "real" && this.opts.mode === "real" && WEB_REAL_METHODS.has(method)) return true;
 		return false;
 	}
 	/** Back-compat static alias — older code paths still call
@@ -373,6 +383,10 @@ var LlmBridge = class {
 				message: "harness started with --no-llm"
 			}
 		};
+		if (args.ns === "agent" && args.method === "session.catalog") return {
+			ok: true,
+			result: this.localSessionCatalog()
+		};
 		if (this.opts.mode === "mock") return this.dispatchMock(args);
 		try {
 			return await this.dispatchReal(args);
@@ -386,6 +400,35 @@ var LlmBridge = class {
 			};
 		}
 	}
+	/**
+	* Local answer for `agent.session.catalog` (both mock and real modes).
+	*
+	* Keep the registry list in sync with matrix-nexus
+	* `src/services/app_tool_registry.py` (drift-checked there against the
+	* platform-tools Reference section). The harness is permissive by
+	* design — `declared_in_manifest` / `user_granted` are always true
+	* because `anna-app dev` registers the full dev grant bundle.
+	*/
+	localSessionCatalog() {
+		const registry = [{
+			name: "web_search",
+			description: "Search the public web (or news) and return concise, provider-agnostic snippets.",
+			dev_safe: true
+		}];
+		const names = registry.map((t) => t.name);
+		return {
+			platform_tools: registry.map((t) => ({
+				...t,
+				declared_in_manifest: true,
+				user_granted: true,
+				eligible: true
+			})),
+			inherit_host_tools_granted: true,
+			manifest_declared: names,
+			user_granted: names,
+			_dev_note: "local harness catalog — permissive dev grants; production eligibility reflects your manifest ui.host_api.agent.tools and the user's Permissions modal (blocked_by: manifest|user_grant)"
+		};
+	}
 	async dispatchMock(args) {
 		const content = String(args.args?.content ?? args.args?.messages ?? "");
 		const entry = this.mocks.find((m) => m.ns === args.ns && m.method === args.method && (!m.match?.contentIncludes || content.includes(m.match.contentIncludes))) ?? this.mocks.find((m) => m.ns === args.ns && m.method === args.method);
@@ -661,6 +704,14 @@ var LlmBridge = class {
 				};
 			}
 		}
+		if (args.ns === "web" && WEB_REAL_METHODS.has(args.method)) {
+			const ms = await this.mintComplete(args.windowUuid);
+			const result = await this.postJson(`${canonicalHost(acc.host)}/api/v1/copilot/app/web/${args.method}`, ms.appSessionToken, args.args);
+			return {
+				ok: true,
+				result
+			};
+		}
 		if (args.ns === "storage") {
 			const sm = await this.mintStorage();
 			const a = args.args;
@@ -1248,6 +1299,11 @@ var HarnessServer = class {
 				"agent",
 				"session.list"
 			],
+			[
+				"host.agent.session.catalog",
+				"agent",
+				"session.catalog"
+			],
 			[
 				"host.image.generate",
 				"image",
@@ -1317,6 +1373,26 @@ var HarnessServer = class {
 				"host.storage.files_delete",
 				"storage",
 				"files_delete"
+			],
+			[
+				"host.web.search",
+				"web",
+				"search"
+			],
+			[
+				"host.web.fetch",
+				"web",
+				"fetch"
+			],
+			[
+				"host.web.image_search",
+				"web",
+				"image_search"
+			],
+			[
+				"host.web.image_fetch",
+				"web",
+				"image_fetch"
 			]
 		];
 		for (const [hostMethod, ns, dispatchMethod] of HOST_OUTBOUND_ROUTES) this.bridge.onRequest(hostMethod, async (params) => {

package/dist/{working-orchestration-CQJEJkV_.js → working-orchestration-oFZwsWqQ.js}

@@ -4,7 +4,7 @@ import { CliError } from "./client-D-_z1ALk.js";
 import { parseExecutaIdOverrides, readExecutasLock, substituteBundledRefs, validateBundledHandles, writeBundleToolIdSidecar, writeExecutasLock } from "./bundled-executas-rSIkaA6-.js";
 import { loadExecutaManifest } from "./manifest-CAF3_r1T.js";
 import { runExecutaPublish } from "./executa-publish-DueD_0hh.js";
-import { runExecutaInstall } from "./executa-install-aCwM1hO0.js";
+import { runExecutaInstall } from "./executa-install-jSVVx6oh.js";
 import { appCacheMatches, readAppIdentity, writeAppIdentity } from "./app-cache-Cr3tKbux.js";
 import { join, resolve } from "node:path";
 import { dim, green, yellow } from "kleur/colors";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anna-ai/cli",
-  "version": "0.1.39",
+  "version": "0.1.41",
   "description": "Anna App developer CLI: scaffold, validate, harness (Phase 2 MVP: init + validate).",
   "license": "MIT",
   "type": "module",
@@ -33,8 +33,8 @@
     "prepublishOnly": "pnpm lint && pnpm test && pnpm build && node scripts/check-runtime-pin.mjs && node scripts/check-sdk-pin.mjs"
   },
   "dependencies": {
-    "@anna-ai/app-runtime": "^0.13.0",
-    "@anna-ai/app-schema": "^0.17.0",
+    "@anna-ai/app-runtime": "^0.14.0",
+    "@anna-ai/app-schema": "^0.18.0",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
     "commander": "^12.1.0",

package/dist/bridge-5PPeIq2g.js

@@ -1,3 +0,0 @@
-import { BridgeRequestError, PINNED_RUNTIME_VERSION, PythonBridge } from "./bridge-BTMm5SiP.js";
-
-export { PINNED_RUNTIME_VERSION, PythonBridge };

package/dist/dev-NBsx_AGR.js

@@ -1,4 +0,0 @@
-import "./nexus-root-BlPwOusj.js";
-import { parseExecutaSpec, runDev } from "./dev-CXCK6G1l.js";
-
-export { parseExecutaSpec, runDev };

package/dist/executa-install-RBG-DOAY.js

@@ -1,7 +0,0 @@
-import "./credentials-BTv2IfUZ.js";
-import "./nexus-root-BlPwOusj.js";
-import "./executa-cache-BFoUtb4J.js";
-import "./dev-CXCK6G1l.js";
-import { runExecutaInstall } from "./executa-install-aCwM1hO0.js";
-
-export { runExecutaInstall };