@anna-ai/cli 0.1.51 → 0.1.52

package/dist/{apps-cut-L7T8b5RS.js → apps-cut-BLtUBokD.js}

@@ -6,7 +6,7 @@ import { readExecutaIdentity } from "./executa-cache-BFoUtb4J.js";
 import { readExecutasLock, writeExecutasLock } from "./bundled-executas-BRyQkI9u.js";
 import { loadAppManifest, loadExecutaManifest } from "./manifest-BCHiC184.js";
 import { uploadExecutaBinaries } from "./executa-upload-binaries-D0JWYOtK.js";
-import { resolveAppBySlugOrCache } from "./working-orchestration-BRU7FV-b.js";
+import { resolveAppBySlugOrCache } from "./working-orchestration-BPMFemcH.js";
 import { resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { bold, cyan, dim, green, yellow } from "kleur/colors";

package/dist/{apps-cut-35wivw1Z.js → apps-cut-eOVb1-0y.js}

@@ -10,10 +10,10 @@ import "./executas-CvQY_w2U.js";
 import "./executa-publish-BuakG1RK.js";
 import "./binary-upload-DVhQ0uY0.js";
 import "./executa-upload-binaries-D0JWYOtK.js";
-import "./dev-BB1oS-1o.js";
-import "./executa-install-n1oRAoYJ.js";
+import "./dev-uagVfV9Y.js";
+import "./executa-install-u0nXcyy7.js";
 import "./app-cache-Cr3tKbux.js";
-import "./working-orchestration-BRU7FV-b.js";
-import { runAppsCut } from "./apps-cut-L7T8b5RS.js";
+import "./working-orchestration-BPMFemcH.js";
+import { runAppsCut } from "./apps-cut-BLtUBokD.js";
 
 export { runAppsCut };

package/dist/{apps-discard-CKA_m7Yw.js → apps-discard-7ERq2pmS.js}

@@ -10,10 +10,10 @@ import "./executas-CvQY_w2U.js";
 import "./executa-publish-BuakG1RK.js";
 import "./binary-upload-DVhQ0uY0.js";
 import "./executa-upload-binaries-D0JWYOtK.js";
-import "./dev-BB1oS-1o.js";
-import "./executa-install-n1oRAoYJ.js";
+import "./dev-uagVfV9Y.js";
+import "./executa-install-u0nXcyy7.js";
 import "./app-cache-Cr3tKbux.js";
-import { resolveAppBySlugOrCache } from "./working-orchestration-BRU7FV-b.js";
+import { resolveAppBySlugOrCache } from "./working-orchestration-BPMFemcH.js";
 import { dim, green, yellow } from "kleur/colors";
 
 //#region src/commands/apps-discard.ts

package/dist/{apps-grants-B5MpWhSO.js → apps-grants-DVoSb6-r.js}

@@ -49,12 +49,17 @@ async function runAppsGrants(opts) {
 			const executas = perms.executas ?? [];
 			if (executas.length > 0) {
 				console.log(bold(cyan("bundled executa grants")));
+				let sawStorageGrant = false;
 				for (const ex of executas) {
 					console.log(`  ${String(ex.name ?? ex.executa_id)}:`);
 					const sections = executaGrantSections(ex);
 					if (Object.keys(sections).length === 0) console.log(dim("    (no grants configured)"));
-					else for (const [k, v] of Object.entries(sections)) console.log(`    ${k}: ${JSON.stringify(v)}`);
+					else for (const [k, v] of Object.entries(sections)) {
+						if (k === "storage_grant") sawStorageGrant = true;
+						console.log(`    ${k}: ${JSON.stringify(v)}`);
+					}
 				}
+				if (sawStorageGrant) console.log(dim("  storage scopes: user, tool (platform-fixed; scope=app is Host-API only)"));
 			}
 			const missing = perms.missing ?? [];
 			if (missing.length > 0) {

package/dist/{apps-publish-CUJILNOt.js → apps-publish-AdXryRYo.js}

@@ -10,13 +10,13 @@ import "./executas-CvQY_w2U.js";
 import "./executa-publish-BuakG1RK.js";
 import "./binary-upload-DVhQ0uY0.js";
 import "./executa-upload-binaries-D0JWYOtK.js";
-import "./dev-BB1oS-1o.js";
-import "./executa-install-n1oRAoYJ.js";
+import "./dev-uagVfV9Y.js";
+import "./executa-install-u0nXcyy7.js";
 import "./app-cache-Cr3tKbux.js";
-import "./working-orchestration-BRU7FV-b.js";
-import "./apps-cut-L7T8b5RS.js";
+import "./working-orchestration-BPMFemcH.js";
+import "./apps-cut-BLtUBokD.js";
 import "./listing-meta-rIni8tjd.js";
-import "./apps-push-d1C0eePp.js";
-import { runAppsPublish } from "./apps-publish-CGfzN7tI.js";
+import "./apps-push-DZ1LHDJW.js";
+import { runAppsPublish } from "./apps-publish-BzaoSyFn.js";
 
 export { runAppsPublish };

package/dist/{apps-publish-CGfzN7tI.js → apps-publish-BzaoSyFn.js}

@@ -2,8 +2,8 @@ import { listVersions } from "./apps-BRBufSyX.js";
 import { resolveClient, withErrorHandling } from "./_lifecycle-shared-_9BzQ9Y2.js";
 import { loadAppManifest } from "./manifest-BCHiC184.js";
 import { bumpVersion } from "./executa-publish-BuakG1RK.js";
-import { runAppsCut } from "./apps-cut-L7T8b5RS.js";
-import { runAppsPush } from "./apps-push-d1C0eePp.js";
+import { runAppsCut } from "./apps-cut-BLtUBokD.js";
+import { runAppsPush } from "./apps-push-DZ1LHDJW.js";
 import { resolve } from "node:path";
 import { bold, cyan, dim, green, yellow } from "kleur/colors";
 

package/dist/{apps-push-d1C0eePp.js → apps-push-DZ1LHDJW.js}

@@ -3,7 +3,7 @@ import { CliError } from "./client-sMzq2PWG.js";
 import { resolveClient, withErrorHandling } from "./_lifecycle-shared-_9BzQ9Y2.js";
 import { loadAppManifest } from "./manifest-BCHiC184.js";
 import { bumpVersion, bundleHash, canonicalize, manifestHash, rewriteVersion } from "./executa-publish-BuakG1RK.js";
-import { installLocalBundledShims, resolveAppIdentity, resolveBundledExecutas } from "./working-orchestration-BRU7FV-b.js";
+import { installLocalBundledShims, resolveAppIdentity, resolveBundledExecutas } from "./working-orchestration-BPMFemcH.js";
 import { syncAppListingMeta } from "./listing-meta-rIni8tjd.js";
 import { join, relative, resolve, sep } from "node:path";
 import { readFileSync, readdirSync, statSync } from "node:fs";

package/dist/{apps-push-BcYNGSYx.js → apps-push-WBfD0JyE.js}

@@ -10,11 +10,11 @@ import "./executas-CvQY_w2U.js";
 import "./executa-publish-BuakG1RK.js";
 import "./binary-upload-DVhQ0uY0.js";
 import "./executa-upload-binaries-D0JWYOtK.js";
-import "./dev-BB1oS-1o.js";
-import "./executa-install-n1oRAoYJ.js";
+import "./dev-uagVfV9Y.js";
+import "./executa-install-u0nXcyy7.js";
 import "./app-cache-Cr3tKbux.js";
-import "./working-orchestration-BRU7FV-b.js";
+import "./working-orchestration-BPMFemcH.js";
 import "./listing-meta-rIni8tjd.js";
-import { runAppsPush } from "./apps-push-d1C0eePp.js";
+import { runAppsPush } from "./apps-push-DZ1LHDJW.js";
 
 export { runAppsPush };

package/dist/{apps-release-DxRHjEYJ.js → apps-release-DAV-DB_Q.js}

@@ -59,7 +59,7 @@ async function runAppsRelease(opts) {
 		if (!target) {
 			if (opts.allowCreate) {
 				if (!opts.json) console.log(yellow(`version ${opts.version} not found remotely; running 'apps publish' first (--allow-create)…`));
-				const { runAppsPublish } = await import("./apps-publish-CUJILNOt.js");
+				const { runAppsPublish } = await import("./apps-publish-AdXryRYo.js");
 				const code = await runAppsPublish({
 					cwd: opts.cwd,
 					account: opts.account,

package/dist/cli.js

@@ -111,18 +111,132 @@ function validateManifestSchema(bundle, manifest) {
 		message: `${e.message ?? "invalid"}${e.params ? " " + JSON.stringify(e.params) : ""}`
 	}));
 }
-const ANNA_CALL_RE = /\banna\.([a-z]+)\.([a-zA-Z_][a-zA-Z0-9_]*)\s*\(/g;
+/**
+* Blank out string-literal and comment contents (same length, newlines
+* kept, so offsets/line numbers stay exact). Template interpolation bodies
+* (`${…}`) are code and are preserved. Regex literals are NOT recognised
+* (the `/` division ambiguity): a quote delimiter inside one can at worst
+* blank the rest of that line — quoted strings cannot span lines — which
+* errs toward missing a call, never toward a false report.
+*/
+function stripStringsAndComments(source) {
+	const out = source.split("");
+	const n = source.length;
+	const blank = (idx) => {
+		const ch = out[idx];
+		if (ch !== "\n" && ch !== "\r") out[idx] = " ";
+	};
+	const stack = [{
+		kind: "code",
+		braces: 0
+	}];
+	let i = 0;
+	while (i < n) {
+		const top = stack[stack.length - 1];
+		const c = source[i];
+		if (top.kind === "tpl") {
+			if (c === "\\") {
+				blank(i);
+				if (i + 1 < n) blank(i + 1);
+				i += 2;
+				continue;
+			}
+			if (c === "`") {
+				blank(i);
+				stack.pop();
+				i++;
+				continue;
+			}
+			if (c === "$" && source[i + 1] === "{") {
+				i += 2;
+				stack.push({
+					kind: "code",
+					braces: 0
+				});
+				continue;
+			}
+			blank(i);
+			i++;
+			continue;
+		}
+		const next = source[i + 1];
+		if (c === "/" && next === "/") {
+			while (i < n && source[i] !== "\n") {
+				blank(i);
+				i++;
+			}
+			continue;
+		}
+		if (c === "/" && next === "*") {
+			blank(i);
+			blank(i + 1);
+			i += 2;
+			while (i < n && !(source[i] === "*" && source[i + 1] === "/")) {
+				blank(i);
+				i++;
+			}
+			if (i < n) {
+				blank(i);
+				blank(i + 1);
+				i += 2;
+			}
+			continue;
+		}
+		if (c === "'" || c === "\"") {
+			blank(i);
+			i++;
+			while (i < n && source[i] !== c && source[i] !== "\n") {
+				if (source[i] === "\\") {
+					blank(i);
+					i++;
+					if (i < n) blank(i);
+					i++;
+					continue;
+				}
+				blank(i);
+				i++;
+			}
+			if (i < n && source[i] === c) {
+				blank(i);
+				i++;
+			}
+			continue;
+		}
+		if (c === "`") {
+			blank(i);
+			stack.push({ kind: "tpl" });
+			i++;
+			continue;
+		}
+		if (c === "{") {
+			top.braces++;
+			i++;
+			continue;
+		}
+		if (c === "}") {
+			if (top.braces > 0) top.braces--;
+			else if (stack.length > 1) stack.pop();
+			i++;
+			continue;
+		}
+		i++;
+	}
+	return out.join("");
+}
+const ANNA_CALL_RE = /\banna\s*\.\s*([a-z]+)\s*\.\s*([a-zA-Z_][a-zA-Z0-9_]*)\s*\(/g;
 function scanHostApiCalls(files) {
 	const out = [];
 	for (const f of files) {
-		const lines = f.content.split("\n");
-		for (let i = 0; i < lines.length; i++) {
-			const line = lines[i];
-			ANNA_CALL_RE.lastIndex = 0;
-			let m;
-			while ((m = ANNA_CALL_RE.exec(line)) !== null) out.push({
+		const code = stripStringsAndComments(f.content);
+		ANNA_CALL_RE.lastIndex = 0;
+		let m;
+		let line = 1;
+		let cursor = 0;
+		while ((m = ANNA_CALL_RE.exec(code)) !== null) {
+			for (; cursor < m.index; cursor++) if (code.charCodeAt(cursor) === 10) line++;
+			out.push({
 				file: f.path,
-				line: i + 1,
+				line,
 				ns: m[1],
 				method: m[2]
 			});
@@ -237,7 +351,17 @@ function validateUiSectionStatic(manifest) {
 	const cspOverrides = ui.csp_overrides ?? {};
 	const badDirectives = Object.keys(cspOverrides).filter((d) => !CSP_OVERRIDABLE_DIRECTIVES.has(d)).sort();
 	if (badDirectives.length) errors.push(`csp_overrides 含不允许的 directive: ${JSON.stringify(badDirectives)}`);
-	for (const d of ["script-src", "style-src"]) for (const v of cspOverrides[d] ?? []) if (v !== "'self'" && !v.startsWith("'sha256-") && !v.startsWith("'nonce-")) errors.push(`csp_overrides[${d}] 仅允许 'self' / 'sha256-...' / 'nonce-...': ${v}`);
+	for (const d of ["script-src", "style-src"]) {
+		const literals = d === "script-src" ? ["'self'", "'wasm-unsafe-eval'"] : ["'self'"];
+		for (const v of cspOverrides[d] ?? []) if (!literals.includes(v) && !v.startsWith("'sha256-") && !v.startsWith("'nonce-")) {
+			const allowed = [
+				...literals,
+				"'sha256-...'",
+				"'nonce-...'"
+			].join(" / ");
+			errors.push(`csp_overrides[${d}] 仅允许 ${allowed}: ${v}`);
+		}
+	}
 	return errors;
 }
 
@@ -473,8 +597,8 @@ program.command("validate").description("Run schema + ACL checks on a manifest+b
 	const code = printResult(result);
 	process.exit(code);
 });
-program.command("dev").description("Run a local harness (in-process dispatcher + iframe + SSE relay)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--bundle <dir>", "bundle directory (default: ./bundle)").option("--slug <slug>", "App slug (overrides manifest.slug/name)").option("--view <name>", "View name to open (default: manifest default)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (auto-detected if omitted; can also use $ANNA_NEXUS_ROOT)").option("--port <number>", "HTTP port", "5180").option("--user-id <id>", "Harness user_id", "1").option("--cwd <dir>", "Project root (default: cwd)").option("--no-watch", "Disable bundle file watcher (default: enabled)").option("--executa <spec>", "Explicit executa registration; repeatable. Spec: comma-separated key=value (dir=<path>[,tool_id=<id>][,type=python|node|go|binary][,command=\"<argv>\"]). When only `dir=` is given, the executa is auto-detected from executa.json / pyproject.toml / package.json / go.mod. Overrides directory auto-discovery under <manifest-dir>/executas/.", (val, prev) => prev ? [...prev, val] : [val]).option("--no-llm", "Disable LLM bridge (anna.llm/agent return llm_disabled)").option("--mock-llm <fixture>", "Serve canned LLM responses from a JSONL fixture").option("--llm-account <host>", "Saved account host to use (default: current)").option("--llm-app-slug <slug>", "Override the manifest slug used to register / look up the dev AnnaApp (default: manifest.slug)").option("--storage <mode>", "Storage backend: \"legacy\" (in-memory runtime_state, default) or \"aps\" (real nexus APS via /api/v1/storage/* — requires `anna-app login`).", "legacy").option("--web <mode>", "Web backend: \"local\" (keyless ddgs + stdlib fetcher, free, default) or \"real\" (platform web service via /api/v1/copilot/app/web/* — production provider chain + normal CU billing; requires `anna-app login`).", "local").action(async (opts) => {
-	const { runDev, parseExecutaSpec } = await import("./dev-DAkNdyJ-.js");
+program.command("dev").description("Run a local harness (in-process dispatcher + iframe + SSE relay)").option("--manifest <path>", "manifest.json path", "manifest.json").option("--bundle <dir>", "bundle directory (default: ./bundle)").option("--slug <slug>", "App slug (overrides manifest.slug/name)").option("--view <name>", "View name to open (default: manifest default)").option("--matrix-nexus-root <path>", "matrix-nexus checkout (auto-detected if omitted; can also use $ANNA_NEXUS_ROOT)").option("--port <number>", "HTTP port", "5180").option("--user-id <id>", "Harness user_id", "1").option("--cwd <dir>", "Project root (default: cwd)").option("--no-watch", "Disable bundle file watcher (default: enabled)").option("--executa <spec>", "Explicit executa registration; repeatable. Spec: comma-separated key=value (dir=<path>[,tool_id=<id>][,type=python|node|go|binary][,command=\"<argv>\"]). When only `dir=` is given, the executa is auto-detected from executa.json / pyproject.toml / package.json / go.mod. Overrides directory auto-discovery under <manifest-dir>/executas/.", (val, prev) => prev ? [...prev, val] : [val]).option("--no-llm", "Disable LLM bridge (anna.llm/agent return llm_disabled)").option("--mock-llm <fixture>", "Serve canned LLM responses from a JSONL fixture").option("--llm-account <host>", "Saved account host to use (default: current)").option("--llm-app-slug <slug>", "Override the manifest slug used to register / look up the dev AnnaApp (default: manifest.slug)").option("--storage <mode>", "Storage backend: \"legacy\" (in-memory runtime_state, default) or \"aps\" (real nexus APS via /api/v1/storage/* — requires `anna-app login`).", "legacy").option("--no-strict-caps", "Downgrade the production-parity storage capability gate to a warning (by default, storage/* fails with -32021 when host_capabilities declares no aps.* entry — exactly like production).").option("--web <mode>", "Web backend: \"local\" (keyless ddgs + stdlib fetcher, free, default) or \"real\" (platform web service via /api/v1/copilot/app/web/* — production provider chain + normal CU billing; requires `anna-app login`).", "local").action(async (opts) => {
+	const { runDev, parseExecutaSpec } = await import("./dev-CQIZHt7u.js");
 	const cwd = opts.cwd ?? process.cwd();
 	let executas;
 	if (opts.executa && opts.executa.length > 0) {
@@ -504,6 +628,7 @@ program.command("dev").description("Run a local harness (in-process dispatcher +
 		llmAccount: opts.llmAccount,
 		llmAppSlug: opts.llmAppSlug,
 		storageMode: opts.storage,
+		strictCaps: opts.strictCaps !== false,
 		webMode: opts.web
 	});
 	process.exit(code);
@@ -597,7 +722,7 @@ executa.command("register").description("Register a HARNESS AnnaApp(kind=executa
 	process.exit(code);
 });
 executa.command("install").description("Install a local-dev shim for an Executa under its minted tool_id so the Agent can discover it via 'Rediscover Local' (for distribution_type: local). Resolves the tool_id from .anna/executa.json (written by `executa publish` / `apps push`) unless --tool-id is given.").option("--dir <path>", "Executa project dir (default: CWD)").option("--tool-id <id>", "Install the shim under this exact id (default: minted id from .anna/executa.json, else executa.json tool_id)").option("--bin-dir <path>", "Install dir for the shim (default: ~/.anna/executa/bin)").option("--force", "Overwrite an existing shim of the same name", false).option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runExecutaInstall } = await import("./executa-install-DKMwLq-V.js");
+	const { runExecutaInstall } = await import("./executa-install-Dnerah9u.js");
 	const code = await runExecutaInstall({
 		dir: opts.dir,
 		toolId: opts.toolId,
@@ -608,7 +733,7 @@ executa.command("install").description("Install a local-dev shim for an Executa
 	process.exit(code);
 });
 executa.command("dev").description("Run one Executa plugin in isolation (REPL or one-shot describe/invoke)").option("--dir <path>", "Executa project dir (default: CWD)").option("--spec <spec>", "Override discovery: comma-separated key=value (tool_id=...,type=...,command=\"...\")").option("--describe", "Print MANIFEST and exit", false).option("--health", "Print health and exit", false).option("--invoke <tool>", "Invoke one tool and exit").option("--args <json>", "JSON object passed as tool arguments", "{}").option("--json", "One-shot: emit compact JSON (no banners)", false).option("--no-sampling", "Hard-disable sampling reverse RPC (returns sampling_disabled)").option("--mock-sampling <fixture>", "Serve canned sampling responses from a JSONL fixture (offline)").option("--sampling-unsupported-format", "Simulate a model without json_schema support — exercises responseFormat onUnsupported branches (-32010 / downgrade)").option("--app-slug <slug>", "Forward sampling to nexus on behalf of this dev AnnaApp slug").option("--sampling-account <host>", "Saved account host for nexus sampling (default: current)").option("--no-agent", "Hard-disable agent reverse RPC (returns agent_not_granted)").option("--mock-agent <fixture>", "Serve canned agent/* responses from a JSONL fixture (offline)").option("--agent-account <host>", "Saved account host for nexus agent (default: --sampling-account or current)").option("--storage <mode>", "Storage backend: off | memory | mock | real (default: memory)").option("--mock-storage <fixture>", "Serve canned storage/* + files/* responses from a JSONL fixture").option("--storage-account <host>", "Saved account host for nexus storage (default: --sampling-account or current)").option("--storage-scopes <list>", "Comma-separated scopes for real storage tokens (default: user,app,tool)").option("--no-image", "Hard-disable image reverse RPC (returns image_not_granted)").option("--mock-image <fixture>", "Serve canned image/generate + image/edit responses from a JSONL fixture").option("--image-account <host>", "Saved account host for nexus image (default: --sampling-account or current)").option("--no-upload", "Hard-disable host/uploadFile reverse RPC (returns upload_not_granted)").option("--mock-upload <fixture>", "Serve canned host/uploadFile responses from a JSONL fixture").option("--upload-account <host>", "Saved account host for nexus uploads (default: --sampling-account or current)").action(async (opts) => {
-	const { runExecutaDev } = await import("./executa-dev-ONm9di1H.js");
+	const { runExecutaDev } = await import("./executa-dev-BeYhrj-n.js");
 	const storageMode = opts.storage === void 0 ? void 0 : (() => {
 		const m = opts.storage;
 		if (m === "off" || m === "memory" || m === "mock" || m === "real") return m;
@@ -671,7 +796,7 @@ apps.command("publish").description("Publish an Anna App version (composite: pus
 		console.error(`✗ --bump must be patch|minor|major (got: ${opts.bump})`);
 		process.exit(2);
 	}
-	const { runAppsPublish } = await import("./apps-publish-CUJILNOt.js");
+	const { runAppsPublish } = await import("./apps-publish-AdXryRYo.js");
 	process.exit(await runAppsPublish({
 		cwd: opts.cwd,
 		manifest: opts.manifest,
@@ -705,7 +830,7 @@ apps.command("push").description("Upsert the mutable working draft (manifest + b
 			process.exit(2);
 		}
 	}
-	const { runAppsPush } = await import("./apps-push-BcYNGSYx.js");
+	const { runAppsPush } = await import("./apps-push-WBfD0JyE.js");
 	process.exit(await runAppsPush({
 		cwd: opts.cwd,
 		manifest: opts.manifest,
@@ -725,7 +850,7 @@ apps.command("push").description("Upsert the mutable working draft (manifest + b
 	}));
 });
 apps.command("cut <version>").description("Snapshot the working draft into an immutable version (freeze deps)").option("--changelog <text>", "Override the working draft changelog for this version").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--dry-run", "Resolve target but don't cut", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (version, opts) => {
-	const { runAppsCut } = await import("./apps-cut-35wivw1Z.js");
+	const { runAppsCut } = await import("./apps-cut-eOVb1-0y.js");
 	process.exit(await runAppsCut({
 		version,
 		changelog: opts.changelog,
@@ -737,7 +862,7 @@ apps.command("cut <version>").description("Snapshot the working draft into an im
 	}));
 });
 apps.command("discard").description("Drop the mutable working draft (leaves cut versions intact)").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--dry-run", "Resolve target but don't discard", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (opts) => {
-	const { runAppsDiscard } = await import("./apps-discard-CKA_m7Yw.js");
+	const { runAppsDiscard } = await import("./apps-discard-7ERq2pmS.js");
 	process.exit(await runAppsDiscard({
 		slug: opts.slug,
 		cwd: opts.cwd,
@@ -747,7 +872,7 @@ apps.command("discard").description("Drop the mutable working draft (leaves cut
 	}));
 });
 apps.command("release <version>").description("Freeze & publish an existing remote version (go live)").option("--slug <slug>", "App slug (default: resolve from .anna/app.json cache)").option("--cwd <dir>", "Project root for identity cache (default: cwd)").option("--allow-create", "If the version isn't on the server, run 'apps publish' first, then release", false).option("--dry-run", "Resolve target + pre-flight but don't publish", false).option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (version, opts) => {
-	const { runAppsRelease } = await import("./apps-release-DxRHjEYJ.js");
+	const { runAppsRelease } = await import("./apps-release-DAV-DB_Q.js");
 	process.exit(await runAppsRelease({
 		version,
 		slug: opts.slug,
@@ -795,7 +920,7 @@ apps.command("versions <slug>").description("List all server versions of one Ann
 	}));
 });
 apps.command("grants <slug>").description("Show currently granted scopes/quota for one Anna App").option("--account <host>", "Saved account host (default: current)").option("--json", "Emit machine-readable JSON", false).action(async (slug, opts) => {
-	const { runAppsGrants } = await import("./apps-grants-B5MpWhSO.js");
+	const { runAppsGrants } = await import("./apps-grants-DVoSb6-r.js");
 	process.exit(await runAppsGrants({
 		slug,
 		account: opts.account,
@@ -1001,7 +1126,7 @@ program.command("publish").description("Auto-detect cwd and publish (apps publis
 		console.error(`✗ --bump must be patch|minor|major (got: ${opts.bump})`);
 		process.exit(2);
 	}
-	const { runTopLevelPublish } = await import("./publish-CIaosgo4.js");
+	const { runTopLevelPublish } = await import("./publish-4C5_TgyZ.js");
 	process.exit(await runTopLevelPublish({
 		cwd: opts.cwd,
 		bump: opts.bump,

package/dist/dev-CQIZHt7u.js

@@ -0,0 +1,4 @@
+import "./nexus-root-BlPwOusj.js";
+import { parseExecutaSpec, runDev } from "./dev-uagVfV9Y.js";
+
+export { parseExecutaSpec, runDev };

package/dist/{dev-BB1oS-1o.js → dev-uagVfV9Y.js}

@@ -62,7 +62,7 @@ async function runDev(opts) {
 		process.env.ANNA_APP_RUNTIME_WEB_MODE = "real";
 	}
 	const { PythonBridge, PINNED_RUNTIME_VERSION } = await import("./bridge-nv-le8ff.js");
-	const { HarnessServer } = await import("./server-poDjwty-.js");
+	const { HarnessServer } = await import("./server-CBx61J7s.js");
 	const bridge = new PythonBridge({
 		mode,
 		matrixNexusRoot: matrixNexusRoot ?? void 0,
@@ -125,8 +125,10 @@ async function runDev(opts) {
 	if (llm === null) return 2;
 	llm.storageMode = storageMode;
 	llm.webMode = webMode;
+	llm.appManifest = manifest;
+	llm.strictStorageCaps = opts.strictCaps !== false;
 	console.log(`  llm bridge        ${dim(llm.mode === "off" ? "disabled (--no-llm)" : llm.mode === "mock" ? `mock (${opts.mockLlm})` : `real${opts.llmAccount ? ` [${opts.llmAccount}]` : ""} → app_slug=${llm.appSlug}`)}`);
-	console.log(`  storage backend   ${dim(storageMode === "aps" ? "aps (real nexus APS via /api/v1/storage/*)" : "legacy (in-memory runtime_state)")}`);
+	console.log(`  storage backend   ${dim(storageMode === "aps" ? `aps (real nexus APS via /api/v1/storage/*) · caps gate ${opts.strictCaps !== false ? "strict (production parity)" : "warn-only (--no-strict-caps)"}` : "legacy (in-memory runtime_state)")}`);
 	console.log(`  web backend       ${dim(webMode === "real" ? "real (platform web service via /api/v1/copilot/app/web/* — normal CU billing)" : "local (keyless ddgs + stdlib SSRF fetcher, unbilled)")}`);
 	const server = new HarnessServer({
 		slug,

package/dist/{executa-dev-ONm9di1H.js → executa-dev-BeYhrj-n.js}

@@ -1,5 +1,5 @@
 import "./nexus-root-BlPwOusj.js";
-import { parseExecutaSpec } from "./dev-BB1oS-1o.js";
+import { parseExecutaSpec } from "./dev-uagVfV9Y.js";
 import { isAbsolute, resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";

package/dist/executa-install-Dnerah9u.js

@@ -0,0 +1,7 @@
+import "./credentials-BTv2IfUZ.js";
+import "./nexus-root-BlPwOusj.js";
+import "./executa-cache-BFoUtb4J.js";
+import "./dev-uagVfV9Y.js";
+import { runExecutaInstall } from "./executa-install-u0nXcyy7.js";
+
+export { runExecutaInstall };

package/dist/{executa-install-n1oRAoYJ.js → executa-install-u0nXcyy7.js}

@@ -1,5 +1,5 @@
 import { readExecutaIdentity } from "./executa-cache-BFoUtb4J.js";
-import { parseExecutaSpec } from "./dev-BB1oS-1o.js";
+import { parseExecutaSpec } from "./dev-uagVfV9Y.js";
 import { isAbsolute, join, resolve } from "node:path";
 import { chmodSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { bold, cyan, dim, green, red, yellow } from "kleur/colors";

package/dist/{publish-CIaosgo4.js → publish-4C5_TgyZ.js}

@@ -10,14 +10,14 @@ import "./executas-CvQY_w2U.js";
 import { runExecutaPublish } from "./executa-publish-BuakG1RK.js";
 import "./binary-upload-DVhQ0uY0.js";
 import "./executa-upload-binaries-D0JWYOtK.js";
-import "./dev-BB1oS-1o.js";
-import "./executa-install-n1oRAoYJ.js";
+import "./dev-uagVfV9Y.js";
+import "./executa-install-u0nXcyy7.js";
 import "./app-cache-Cr3tKbux.js";
-import "./working-orchestration-BRU7FV-b.js";
-import "./apps-cut-L7T8b5RS.js";
+import "./working-orchestration-BPMFemcH.js";
+import "./apps-cut-BLtUBokD.js";
 import "./listing-meta-rIni8tjd.js";
-import "./apps-push-d1C0eePp.js";
-import { runAppsPublish } from "./apps-publish-CGfzN7tI.js";
+import "./apps-push-DZ1LHDJW.js";
+import { runAppsPublish } from "./apps-publish-BzaoSyFn.js";
 import { resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { red, yellow } from "kleur/colors";

package/dist/{server-poDjwty-.js → server-CBx61J7s.js}

@@ -9,6 +9,71 @@ import { createServer } from "node:http";
 import { WebSocketServer } from "ws";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 
+//#region src/executa/storage-caps.ts
+/**
+* APS storage declaration predicates — TS mirror of the canonical Python
+* module `matrix-nexus/packages/anna-app-core/src/anna_app_core/storage_decl.py`
+* (design aps-authorization-simplification.md §4.3).
+*
+* ⚠️ The constant tables below are diffed against the Python source by
+* `scripts/check-storage-caps-sync.mjs` in CI — change BOTH sides together.
+*/
+/** Plugin-side storage_token mint trigger set (bare "aps" = historic umbrella). */
+const PLUGIN_STORAGE_CAPS = [
+	"aps.kv",
+	"aps.files",
+	"aps"
+];
+const APS_SCOPE_PREFIX = "aps.scope.";
+const STORAGE_SCOPES = new Set([
+	"user",
+	"app",
+	"tool"
+]);
+const STORAGE_MODES = new Set([
+	"r",
+	"w",
+	"rw"
+]);
+/** Whether a `host_capabilities` set triggers plugin-side storage_token
+*  minting. Wide convergence: `aps.scope.*` counts the same as
+*  `aps.kv`/`aps.files` (forum #284). */
+function declaresPluginStorage(caps) {
+	for (const c of caps) {
+		if (PLUGIN_STORAGE_CAPS.includes(c)) return true;
+		if (c.startsWith(APS_SCOPE_PREFIX)) return true;
+	}
+	return false;
+}
+/** Extract `host_capabilities` from a manifest-like object (list or
+*  `{cap: bool}` dict form). */
+function extractHostCapabilities(manifest) {
+	const raw = manifest?.host_capabilities ?? manifest?.hostCapabilities;
+	if (Array.isArray(raw)) return raw.map(String);
+	if (raw && typeof raw === "object") return Object.entries(raw).filter(([, v]) => !!v).map(([k]) => k);
+	return [];
+}
+/** Whether a full manifest declares plugin storage via EITHER form: legacy
+*  aps.* capability strings or the structured schema-3 `storage` entry. */
+function manifestDeclaresPluginStorage(manifest) {
+	if (!manifest) return false;
+	if (declaresPluginStorage(extractHostCapabilities(manifest))) return true;
+	const storage = manifest.storage;
+	if (storage && typeof storage === "object" && !Array.isArray(storage)) {
+		const s = storage;
+		if (s.kv || s.files) return true;
+		if (s.scopes && typeof s.scopes === "object") {
+			for (const [scope, mode] of Object.entries(s.scopes)) if (STORAGE_SCOPES.has(scope) && STORAGE_MODES.has(String(mode))) return true;
+		}
+	}
+	return false;
+}
+/** Production-parity error body for an unminted storage_token (matrix host
+*  `src/executa/storage.py` wording, verbatim) + a local-only fix hint. */
+const STORAGE_TOKEN_MISSING_ERROR = "-32021: storage_token missing — host did not authorize storage for this invoke";
+const STORAGE_CAPS_HINT = "hint: declare \"aps.kv\" (KV) / \"aps.files\" (Files) in host_capabilities; the platform will not mint a plugin storage_token without them (docs: executa-storage)";
+
+//#endregion
 //#region src/harness/llm-bridge.ts
 /** APS-mode ``storage`` methods the bridge forwards to ``/api/v1/storage/*``.
 *  ``get/set/delete/list`` are the KV family; ``files_*`` are the object/blob
@@ -117,6 +182,30 @@ var LlmBridge = class {
 	mintedStorage = null;
 	mocks = [];
 	streamCounter = 0;
+	warnedStorageCaps = false;
+	/** Production-parity storage caps gate (aps-authorization-simplification
+	*  §4.3): in prod, no `storage_token` is minted unless the manifest
+	*  declares storage — the invoke fails with `-32021` BEFORE scope
+	*  evaluation. Enforced for non-self scopes (`user`/`tool`) and the
+	*  executa reverse-RPC `files_*` family; iframe self app-scope needs no
+	*  capability declaration in prod either. */
+	assertStorageCaps(method, a) {
+		const manifest = this.opts.appManifest;
+		if (!manifest) return;
+		const scope = String(a?.scope ?? "app");
+		const reverseRpcFiles = method.startsWith("files_");
+		if (scope === "app" && !reverseRpcFiles) return;
+		if (manifestDeclaresPluginStorage(manifest)) return;
+		if (this.opts.strictStorageCaps === false) {
+			if (!this.warnedStorageCaps) {
+				this.warnedStorageCaps = true;
+				console.warn(`\n⚠ [storage-caps] ${STORAGE_TOKEN_MISSING_ERROR}\n⚠ [storage-caps] ${STORAGE_CAPS_HINT}\n⚠ [storage-caps] proceeding anyway (--no-strict-caps) — this WILL fail in production
+`);
+			}
+			return;
+		}
+		throw new Error(`${STORAGE_TOKEN_MISSING_ERROR}\n${STORAGE_CAPS_HINT}`);
+	}
 	constructor(opts) {
 		this.opts = opts;
 		if (opts.mode === "mock" && opts.mockFile) {
@@ -740,6 +829,7 @@ var LlmBridge = class {
 			};
 		}
 		if (args.ns === "storage") {
+			this.assertStorageCaps(args.method, args.args);
 			const sm = await this.mintStorage();
 			const a = args.args;
 			const base = `${canonicalHost(acc.host)}/api/v1/storage`;

package/dist/{working-orchestration-BRU7FV-b.js → working-orchestration-BPMFemcH.js}

@@ -4,7 +4,7 @@ import { CliError } from "./client-sMzq2PWG.js";
 import { parseExecutaIdOverrides, readExecutasLock, substituteBundledRefs, validateBundledHandles, writeBundleToolIdSidecar, writeExecutasLock } from "./bundled-executas-BRyQkI9u.js";
 import { loadExecutaManifest } from "./manifest-BCHiC184.js";
 import { manifestSyncNote, runExecutaPublish } from "./executa-publish-BuakG1RK.js";
-import { runExecutaInstall } from "./executa-install-n1oRAoYJ.js";
+import { runExecutaInstall } from "./executa-install-u0nXcyy7.js";
 import { appCacheMatches, readAppIdentity, writeAppIdentity } from "./app-cache-Cr3tKbux.js";
 import { join, resolve } from "node:path";
 import { dim, green, yellow } from "kleur/colors";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anna-ai/cli",
-  "version": "0.1.51",
+  "version": "0.1.52",
   "description": "Anna App developer CLI: scaffold, validate, harness (Phase 2 MVP: init + validate).",
   "license": "MIT",
   "type": "module",
@@ -30,7 +30,8 @@
     "lint": "tsc --noEmit",
     "check:runtime-pin": "node scripts/check-runtime-pin.mjs",
     "check:sdk-pin": "node scripts/check-sdk-pin.mjs",
-    "prepublishOnly": "pnpm lint && pnpm test && pnpm build && node scripts/check-runtime-pin.mjs && node scripts/check-sdk-pin.mjs"
+    "check:storage-caps": "node scripts/check-storage-caps-sync.mjs",
+    "prepublishOnly": "pnpm lint && pnpm test && pnpm build && node scripts/check-runtime-pin.mjs && node scripts/check-sdk-pin.mjs && node scripts/check-storage-caps-sync.mjs"
   },
   "dependencies": {
     "@anna-ai/app-runtime": "^0.16.0",

package/templates/minimal/manifest.json

@@ -1,6 +1,5 @@
 {
   "schema": 2,
-  "permissions": ["tools.invoke", "storage.read", "storage.write"],
   "required_executas": [
     {
       "tool_id": "__TOOL_ID__"

package/dist/dev-DAkNdyJ-.js

@@ -1,4 +0,0 @@
-import "./nexus-root-BlPwOusj.js";
-import { parseExecutaSpec, runDev } from "./dev-BB1oS-1o.js";
-
-export { parseExecutaSpec, runDev };

package/dist/executa-install-DKMwLq-V.js

@@ -1,7 +0,0 @@
-import "./credentials-BTv2IfUZ.js";
-import "./nexus-root-BlPwOusj.js";
-import "./executa-cache-BFoUtb4J.js";
-import "./dev-BB1oS-1o.js";
-import { runExecutaInstall } from "./executa-install-n1oRAoYJ.js";
-
-export { runExecutaInstall };