@moda-ai/cli 1.13.3 → 1.13.5

package/dist/cli.js

@@ -238,9 +238,11 @@ Init flags:
   --yes                            Accept all defaults (non-interactive)
   --analyst=auto|claude|codex|cursor|local-scan
                                    Choose harness analyst adapter
-  --remote                         Run harness analysis server-side (Moda-hosted):
-                                   upload a safe source snapshot; no local agent
-                                   (also MODA_HARNESS_REMOTE=1)
+  --remote                         Run harness analysis server-side (Moda-hosted,
+                                   the default): upload a safe source snapshot; no
+                                   local coding agent required
+  --local                          Run harness analysis with a LOCAL coding agent
+                                   instead of server-side (opt out of remote)
   --tui                            Show full-screen analyst dashboard in human TTYs
   --no-tui                         Show raw external analyst output
   --sdk-integrate                  Run your coding agent to install the Moda SDK and instrument LLM calls

package/dist/harness-remote.js

@@ -27,7 +27,18 @@ export function isRemoteHarnessAnalyze(context) {
     // The CLI normalizes numeric flag values to numbers, so `--remote=1` arrives
     // as the number 1 rather than the string '1'; accept every truthy spelling.
     const flag = context.flags.remote;
-    if (flag === true || flag === 1 || flag === 'true' || flag === '1' || flag === 'yes')
+    // An explicit local opt-out (`--local` / `--no-remote` / `--remote=false|0`)
+    // wins over the `MODA_HARNESS_REMOTE` env, so callers that force local — the
+    // `moda init` local path and its remote-failure fallback — stay local even
+    // when the env is set. `no-remote` may arrive kebab- or snake-cased depending
+    // on the caller (real CLI parsing snake-cases; internal callers do not).
+    const noRemote = context.flags['no-remote'] ?? context.flags.no_remote;
+    const local = context.flags.local;
+    const isTruthy = (v) => v === true || v === 1 || v === 'true' || v === '1' || v === 'yes';
+    const isFalsy = (v) => v === false || v === 0 || v === 'false' || v === '0' || v === 'no';
+    if (isFalsy(flag) || isTruthy(noRemote) || isTruthy(local))
+        return false;
+    if (isTruthy(flag))
         return true;
     const env = (context.env.MODA_HARNESS_REMOTE ?? '').trim().toLowerCase();
     return env !== '' && env !== '0' && env !== 'false';

package/dist/init/index.d.ts

@@ -28,4 +28,10 @@ export interface InitRunOptions {
     onEvent?: (event: InitProgressEvent) => void;
 }
 export declare function runInit(flags: Record<string, unknown>, options?: InitRunOptions): Promise<InitResult>;
+/**
+ * Onboarding runs harness discovery SERVER-SIDE by default so the customer
+ * needs no local coding agent. Opt out with `--local`, `--no-remote`, or
+ * `--remote=false` to use a local coding-agent analyst instead.
+ */
+export declare function resolveHarnessRemote(flags: Record<string, unknown>): boolean;
 //# sourceMappingURL=index.d.ts.map

package/dist/init/index.js

@@ -85,7 +85,12 @@ export async function runInit(flags, options = {}) {
     // --tenant-id flag wins over MODA_TENANT_ID; the source drives the
     // env-shadow warning so we don't warn when the env var was the selection.
     const tenantIdFlag = stringFlag(flagValue(flags, 'tenant-id', 'tenant_id'));
-    const tenantIdEnv = process.env.MODA_TENANT_ID;
+    // Normalize the env var the same way as the flag: an empty/whitespace
+    // MODA_TENANT_ID (e.g. `export MODA_TENANT_ID=`, or a harness that blanks it
+    // to clear an inherited value) means "unset", not an explicit empty-id
+    // selection — otherwise the exact-id match below fails with
+    // "No organization with id ''" instead of auto-selecting a sole org.
+    const tenantIdEnv = stringFlag(process.env.MODA_TENANT_ID);
     const { apiKey, tenantName } = await selectTenantAndCreateKey({
         tenantId: tenantIdFlag ?? tenantIdEnv,
         tenantIdSource: tenantIdFlag ? 'flag' : tenantIdEnv ? 'env' : undefined,
@@ -97,17 +102,14 @@ export async function runInit(flags, options = {}) {
     log(renderInitNote(`Active workspace: ${tenantName}`));
     emit('workspace', `Active workspace: ${tenantName}`, 'completed');
     phases.push({ id: 'workspace', title: 'Workspace & Profile', status: 'completed', details: tenantName });
-    // Step 4: Harness analyst report. When the user passes `--remote`, Moda runs
-    // the analyst server-side (uploading a safe source snapshot) so no local
-    // coding agent is required; otherwise the local analyst runs as before.
-    const remote = isTruthyFlag(flagValue(flags, 'remote'));
-    log(renderInitStep(4, 7, 'Harness Discovery', remote
-        ? 'Moda runs the harness analyst server-side and writes cited local artifacts.'
-        : 'Moda Analyst investigates the harness and writes cited local artifacts.'));
-    emit('harness', remote
-        ? 'Running Moda-hosted harness discovery.'
-        : 'Running Moda Analyst harness discovery.');
-    const harnessResult = await runHarnessCommand(createCommandContext({
+    // Step 4: Harness analyst report. Onboarding runs the analyst SERVER-SIDE by
+    // default (Moda uploads a safe source snapshot and runs the agent on its own
+    // infra) so the customer needs no local coding agent. Opt out with `--local`
+    // (or `--remote=false`) to run a local coding-agent analyst instead. If the
+    // remote run fails (service/network), we fall back to the local analyst so
+    // onboarding never hard-fails.
+    const remote = resolveHarnessRemote(flags);
+    const runAnalyze = (useRemote) => runHarnessCommand(createCommandContext({
         command: 'harness',
         positional: 'analyze',
         positionals: ['analyze'],
@@ -122,14 +124,44 @@ export async function runInit(flags, options = {}) {
             json: json || agent,
             agent,
             analyst: stringFlag(flags.analyst) ?? 'auto',
-            remote,
+            // Pass the remote/local decision EXPLICITLY. `commandFlags` drops
+            // `remote: false`, so a bare `remote: useRemote` would leave the child
+            // with no signal and it would re-derive remoteness from
+            // `MODA_HARNESS_REMOTE` — silently overriding `--local` and the
+            // remote-failure fallback below. `--no-remote` survives (it's `true`)
+            // and takes precedence over the env in `isRemoteHarnessAnalyze`.
+            remote: useRemote ? true : undefined,
+            'no-remote': useRemote ? undefined : true,
             quiet: true,
             progress: true,
             'no-telemetry': true,
         }),
     }));
+    log(renderInitStep(4, 7, 'Harness Discovery', remote
+        ? 'Moda runs the harness analyst server-side and writes cited local artifacts.'
+        : 'Moda Analyst investigates the harness and writes cited local artifacts.'));
+    emit('harness', remote
+        ? 'Running Moda-hosted harness discovery.'
+        : 'Running Moda Analyst harness discovery.');
+    let harnessResult;
+    try {
+        harnessResult = await runAnalyze(remote);
+    }
+    catch (error) {
+        // A remote failure (service down, upload error) must not sink onboarding —
+        // fall back to the local analyst path. If the caller pinned `--remote`
+        // explicitly, respect that and surface the failure.
+        if (remote && !isTruthyFlag(flagValue(flags, 'remote'))) {
+            warn(renderInitNote(`Server-side harness discovery unavailable (${error instanceof Error ? error.message : String(error)}); falling back to local analyst.`, 'warning'));
+            emit('harness', 'Server-side discovery failed; falling back to local analyst.', 'warning');
+            harnessResult = await runAnalyze(false);
+        }
+        else {
+            throw error;
+        }
+    }
     if (harnessResult.exitCode !== 0) {
-        throw new CliInputError('Moda Analyst produced a harness report that did not pass validation.', 'Review .moda/harness-report-validation.json, then rerun `moda init --analyst=claude|cursor|codex` or `moda harness analyze --analyst=local-scan --summary`.');
+        throw new CliInputError('Moda Analyst produced a harness report that did not pass validation.', 'Review .moda/harness-report-validation.json, then rerun `moda init --local --analyst=claude|cursor|codex` or `moda harness analyze --analyst=local-scan --summary`.');
     }
     log(renderInitNote('Wrote or verified .moda/harness-report.json, .moda/harness.json, and .moda/HARNESS.md'));
     if (human)
@@ -628,9 +660,12 @@ async function shouldIntegrateSdk(flags, yes) {
 function parseOptionalBoolean(value) {
     if (value === undefined)
         return undefined;
-    if (value === true || value === 'true' || value === '1' || value === 'yes')
+    // The CLI parser normalizes numeric-looking flag values to numbers, so
+    // `--remote=1` arrives as number 1 and `--remote=0` as number 0 (not the
+    // string spellings); accept both alongside the string/boolean forms.
+    if (value === true || value === 1 || value === 'true' || value === '1' || value === 'yes')
         return true;
-    if (value === false || value === 'false' || value === '0' || value === 'no')
+    if (value === false || value === 0 || value === 'false' || value === '0' || value === 'no')
         return false;
     return undefined;
 }
@@ -639,6 +674,21 @@ function isTruthyFlag(value) {
     // number 1), so accept the numeric `1` alongside the string spellings.
     return value === true || value === 1 || value === 'true' || value === '1' || value === 'yes';
 }
+/**
+ * Onboarding runs harness discovery SERVER-SIDE by default so the customer
+ * needs no local coding agent. Opt out with `--local`, `--no-remote`, or
+ * `--remote=false` to use a local coding-agent analyst instead.
+ */
+export function resolveHarnessRemote(flags) {
+    if (isTruthyFlag(flagValue(flags, 'local')))
+        return false;
+    if (isTruthyFlag(flagValue(flags, 'no-remote', 'no_remote')))
+        return false;
+    const remote = parseOptionalBoolean(flagValue(flags, 'remote'));
+    if (remote !== undefined)
+        return remote;
+    return true;
+}
 function flagValue(flags, ...keys) {
     for (const key of keys) {
         if (flags[key] !== undefined)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.13.3",
+  "version": "1.13.5",
   "description": "CLI for Moda - AI agent analytics and observability",
   "type": "module",
   "bin": {

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-07-06T18:51:44.915Z",
-  "cli_version": "1.13.3",
+  "bundled_at": "2026-07-06T22:15:52.641Z",
+  "cli_version": "1.13.5",
   "skills": [
     {
       "id": "integration-node-anthropic",