@moda-ai/cli 1.22.1 → 1.23.0

package/dist/harness-sync-limits.d.ts

@@ -1,8 +0,0 @@
-/**
- * Maximum serialized harness graph size accepted by the backend sync endpoint.
- * Must match `MAX_HARNESS_SYNC_GRAPH_BYTES` in
- * `apps/moda-backend/src/harnesses/harness-sync-limits.ts`.
- */
-export declare const MAX_HARNESS_SYNC_GRAPH_BYTES = 2000000;
-export declare function assertHarnessGraphSyncSize(graph: unknown): void;
-//# sourceMappingURL=harness-sync-limits.d.ts.map

package/dist/harness-sync-limits.js

@@ -1,21 +0,0 @@
-import { CliInputError } from './errors.js';
-/**
- * Maximum serialized harness graph size accepted by the backend sync endpoint.
- * Must match `MAX_HARNESS_SYNC_GRAPH_BYTES` in
- * `apps/moda-backend/src/harnesses/harness-sync-limits.ts`.
- */
-export const MAX_HARNESS_SYNC_GRAPH_BYTES = 2_000_000;
-export function assertHarnessGraphSyncSize(graph) {
-    if (!graph || typeof graph !== 'object' || Array.isArray(graph)) {
-        throw new CliInputError('Harness graph must be an object before sync.');
-    }
-    const graphBytes = Buffer.byteLength(JSON.stringify(graph), 'utf8');
-    if (graphBytes > MAX_HARNESS_SYNC_GRAPH_BYTES) {
-        throw new CliInputError(`Harness graph is too large to sync (${graphBytes.toLocaleString()} bytes; limit ${MAX_HARNESS_SYNC_GRAPH_BYTES.toLocaleString()}).`, [
-            'Run `moda harness analyze --path=<agent-dir>` to narrow the harness root.',
-            'Reduce captured prompt/tool bodies if the graph grew too large.',
-            'Split multiple agent roots into separate harness syncs per tenant.',
-        ].join('\n'));
-    }
-}
-//# sourceMappingURL=harness-sync-limits.js.map

package/dist/harness.d.ts

@@ -1,463 +0,0 @@
-import { type AnalystTuiEvent } from './analyst-tui.js';
-import type { CommandContext } from './command-context.js';
-import type { HarnessReport } from './harness-report.js';
-declare const SCHEMA_VERSION = "harness.v0.1";
-export interface HarnessEvidence {
-    path: string;
-    reason: string;
-    /**
-     * 1-based line where the cited item is defined. Optional in general, but
-     * required for `prompt` and `tool` artifacts so downstream prompt/tool
-     * optimization can retrieve the exact source text of every enumerated item.
-     */
-    line?: number;
-}
-export interface HarnessDetection {
-    confidence: number;
-    evidence: HarnessEvidence[];
-}
-export interface HarnessRepo {
-    root: string;
-    name: string;
-    packageManagers: string[];
-    languages: string[];
-    remoteHash?: string;
-}
-export interface HarnessScanMetadata {
-    createdAt: string;
-    scannerVersion: string;
-    mode: 'permissioned' | 'dry-run';
-    rootPaths: string[];
-    readPlan: HarnessScanReadPlan;
-    skipped: Array<{
-        path: string;
-        reason: string;
-    }>;
-    /** True when the scan dropped files due to size/budget caps or snapshot limits. */
-    truncated?: boolean;
-    /** Human-readable reasons the scan is partial (budget skips, upload cap, etc.). */
-    truncationReasons?: string[];
-    /** Prompt/tool artifacts still missing a captured body after hydration. */
-    incompleteArtifactCount?: number;
-}
-export interface HarnessScanReadPlan {
-    scope: 'broad' | 'narrow';
-    rootPaths: string[];
-    willRead: string[];
-    willSkip: string[];
-    skipsSecretFiles: boolean;
-    followsSymlinks: boolean;
-    uploadsSourceByDefault: boolean;
-}
-export interface HarnessTenantContext {
-    tenantId: string;
-    source: 'flag' | 'env_or_config' | 'scan_option';
-}
-export interface HarnessAgentFamily extends HarnessDetection {
-    id: string;
-    name: string;
-    description?: string;
-    runtimeAgentIds: string[];
-    sharedArtifactIds: string[];
-}
-export interface HarnessRuntimeAgent extends HarnessDetection {
-    id: string;
-    name: string;
-    kind: 'runtime_agent';
-    purpose?: string;
-    familyId?: string;
-    root: string;
-    entrypointIds: string[];
-    channelAdapterIds: string[];
-    artifactIds: string[];
-    identityNamespaceIds: string[];
-    deploymentIds: string[];
-    frameworkIds: string[];
-    modelProviderIds: string[];
-}
-export interface HarnessDeveloperAgentAdapter extends HarnessDetection {
-    id: string;
-    name: string;
-    kind: 'developer_agent_adapter';
-    sourcePath: string;
-}
-export interface HarnessChannelAdapter extends HarnessDetection {
-    id: string;
-    name: string;
-    kind: string;
-    sourcePath?: string;
-}
-export type HarnessArtifactType = 'entrypoint' | 'prompt' | 'tool' | 'skill' | 'eval' | 'retrieval_index' | 'memory' | 'guardrail' | 'model_config' | 'unknown';
-export interface HarnessArtifact extends HarnessDetection {
-    id: string;
-    type: HarnessArtifactType;
-    name: string;
-    scope: 'agent' | 'shared' | 'global';
-    sourcePath?: string;
-    contentHash?: string;
-    ownedByAgentId?: string;
-    usedByAgentIds: string[];
-    /**
-     * The actual usable content of the artifact, captured so downstream
-     * consumers (prompt optimization, tool optimization) can use it without
-     * re-reading the repo: the full prompt text for `prompt`, the signature +
-     * docstring/description for `tool`, the rule for `guardrail`, the assertion
-     * for `eval`, the config values for `model_config`, etc.
-     */
-    body?: string;
-}
-export interface HarnessIdentityNamespace extends HarnessDetection {
-    id: string;
-    name: string;
-    kind: string;
-    canonicalId?: string;
-    sourcePath?: string;
-}
-export interface HarnessEnvironment extends HarnessDetection {
-    id: string;
-    name: string;
-    kind: string;
-    sourcePath?: string;
-}
-export interface HarnessAgentFramework extends HarnessDetection {
-    id: string;
-    name: string;
-    kind: string;
-    packageNames: string[];
-    runtimeAgentIds: string[];
-}
-export interface HarnessModelProvider extends HarnessDetection {
-    id: string;
-    name: string;
-    kind: string;
-    packageNames: string[];
-    runtimeAgentIds: string[];
-    envVars: string[];
-    modelHints: string[];
-}
-export interface HarnessDeployment extends HarnessDetection {
-    id: string;
-    name: string;
-    environmentId?: string;
-    sourcePath?: string;
-}
-export interface HarnessRelationship {
-    type: 'uses_artifact' | 'owns_artifact' | 'shares_artifact_with' | 'invoked_by_channel' | 'deployed_as' | 'runs_in_environment' | 'resolves_identity_to' | 'covered_by_eval' | 'emits_telemetry';
-    from: string;
-    to: string;
-    artifactId?: string;
-    evidence: HarnessEvidence[];
-}
-export interface HarnessUnknown {
-    id: string;
-    question: string;
-    candidateIds: string[];
-    evidence: HarnessEvidence[];
-}
-export interface HarnessGraph {
-    schemaVersion: typeof SCHEMA_VERSION;
-    harnessId: string;
-    tenant?: HarnessTenantContext;
-    repo: HarnessRepo;
-    scan: HarnessScanMetadata;
-    agentFamilies: HarnessAgentFamily[];
-    runtimeAgents: HarnessRuntimeAgent[];
-    developerAgentAdapters: HarnessDeveloperAgentAdapter[];
-    channelAdapters: HarnessChannelAdapter[];
-    artifacts: HarnessArtifact[];
-    identityNamespaces: HarnessIdentityNamespace[];
-    environments: HarnessEnvironment[];
-    agentFrameworks: HarnessAgentFramework[];
-    modelProviders: HarnessModelProvider[];
-    deployments: HarnessDeployment[];
-    relationships: HarnessRelationship[];
-    unknowns: HarnessUnknown[];
-}
-export interface FileInventoryItem {
-    path: string;
-    absPath: string;
-    rootDir: string;
-    text?: string;
-}
-interface ScanOptions {
-    rootDir?: string;
-    dryRun?: boolean;
-    scannerVersion?: string;
-    tenantId?: string;
-    tenantSource?: HarnessTenantContext['source'];
-    pathWasExplicit?: boolean;
-}
-export interface HarnessSummary {
-    schemaVersion: string;
-    harnessId: string;
-    tenantId?: string;
-    runtimeAgentCount: number;
-    agentFamilyCount: number;
-    sharedArtifactCount: number;
-    channelAdapterCount: number;
-    identityNamespaceCount: number;
-    agentFrameworkCount: number;
-    modelProviderCount: number;
-    deploymentCount: number;
-    unknownCount: number;
-}
-interface HarnessSyncResponse {
-    tenantId: string;
-    harnessId: string;
-    harnessKey: string;
-    versionId: string;
-    graphHash: string;
-    changed: boolean;
-    dryRun: boolean;
-    reportHash?: string | null;
-    reportValidationStatus?: string | null;
-    counts: Record<string, number>;
-}
-interface HarnessSyncPlan {
-    endpoint: '/api/harnesses/sync';
-    resource: 'harness';
-    source: 'local_scan' | 'approved_report';
-    profile: string;
-    tenantId?: string;
-    rootPath: string;
-    sourceCommit?: string;
-    harnessId: string;
-    localGraphHash: string;
-    counts: Record<string, number>;
-    uploads: string[];
-    localWrites: string[];
-    privacy: string[];
-}
-export interface HarnessSyncState {
-    schemaVersion: 'sync_state.v0.1';
-    updatedAt: string;
-    resource: 'harness';
-    source: HarnessSyncPlan['source'];
-    profile: string;
-    tenantId?: string;
-    rootPath: string;
-    sourceCommit?: string;
-    harnessId: string;
-    localGraphHash: string;
-    report?: {
-        reportId: string;
-        reportHash: string;
-        validationStatus: string;
-    };
-    remote: HarnessSyncResponse;
-    summary: HarnessSummary;
-    uploads: string[];
-    privacy: string[];
-    written: string[];
-}
-type HarnessAnalystAdapter = 'claude' | 'codex' | 'cursor' | 'local-scan';
-type ExternalHarnessAnalystAdapter = Exclude<HarnessAnalystAdapter, 'local-scan'>;
-export type CodingAgentMode = 'read-only' | 'write';
-export declare function runHarnessCommand(context: CommandContext): Promise<{
-    exitCode: number;
-}>;
-/** Scan plan (scope, approval, read plan) built for every harness command run. */
-export type HarnessCommandScanPlan = ReturnType<typeof buildCommandScanPlan>;
-interface HarnessAnalyzePayload {
-    scanPlan: HarnessCommandScanPlan;
-    summary: HarnessSummary | Record<string, unknown>;
-    report: unknown;
-    validation: {
-        status: string;
-        warnings?: unknown[];
-        errors?: unknown[];
-    };
-    written: string[];
-    dryRun: boolean;
-}
-export declare function writeHarnessAnalyzeResult(context: CommandContext, payload: HarnessAnalyzePayload): void;
-/**
- * Emit one `artifact` lifecycle event per written file, classifying report vs
- * graph artifacts. Shared by the local-scan, external-analyst, and remote
- * analyze paths.
- */
-export declare function emitWrittenArtifacts(context: CommandContext, written: string[], description: string): void;
-export declare function repairExternalAnalystReport(report: HarnessReport, rootDir: string): HarnessReport;
-/**
- * A parsed coding-agent stream event handed to `onAgentEvent` consumers.
- * Extends the analyst TUI event with an optional `detail` (file path or
- * command extracted from tool input) so callers can render richer one-line
- * progress cards. The analyst TUI ignores the extra field.
- */
-export type CodingAgentEvent = AnalystTuiEvent & {
-    detail?: string;
-};
-/**
- * Translate a parsed coding-agent stream event into a one-line progress card
- * ("editing src/llm/client.ts", "running bun add moda-ai", trimmed agent text).
- * Returns undefined for low-signal events (system noise) so they never reach
- * the user. Shared by the init progress board (via sdk-integration) and the
- * agent-stream analyst progress events below.
- */
-export declare function describeCodingAgentEvent(event: CodingAgentEvent): string | undefined;
-/**
- * Map a parsed analyst stream event to the `progress` agent event the CLI
- * writes in agent-stream mode. Tool/command events get a `tool_use` phase so
- * downstream consumers (the hosted analyze runner's progress parser counts
- * phases starting with "tool") can track tool-call activity; agent text gets
- * the generic `analyst` phase. Low-signal events map to undefined.
- */
-export declare function analystEventProgress(event: CodingAgentEvent): {
-    phase: string;
-    message: string;
-} | undefined;
-export declare function sleep(ms: number): Promise<void>;
-export declare function summarizeInvalidAnalystReport(report: unknown): Record<string, unknown>;
-/**
- * The analyst spellings that select the deterministic local scanner (no LLM,
- * no remote analyze). Shared by `normalizeAnalystAdapter` and `moda init`'s
- * `resolveHarnessRemote` so the set cannot drift between the two.
- */
-export declare function isDeterministicLocalAnalyst(raw: string | undefined): boolean;
-export type CodingAgentAdapter = ExternalHarnessAnalystAdapter;
-export interface CodingAgentRun {
-    adapter: CodingAgentAdapter;
-    command: string;
-    status: number | null;
-    stdout: string;
-    stderr: string;
-    timedOut: boolean;
-    failedToStart: boolean;
-}
-/** Coding-agent CLIs found on PATH, ranked best-first (claude > codex > cursor). */
-export declare function detectAvailableCodingAgents(): Array<{
-    adapter: CodingAgentAdapter;
-    command: string;
-}>;
-export declare function codingAgentDisplayName(adapter: CodingAgentAdapter): string;
-/** Spawn an installed coding-agent CLI with a prompt; capture its output. */
-export declare function runCodingAgent(options: {
-    adapter: CodingAgentAdapter;
-    prompt: string;
-    rootDir: string;
-    mode: CodingAgentMode;
-    env?: NodeJS.ProcessEnv;
-    stream?: boolean;
-    timeoutMs?: number;
-    progressToStderr?: boolean;
-    onProgress?: (message: string, phase?: string) => void;
-    /**
-     * Receive parsed agent stream events incrementally while output stays
-     * buffered. Requires the streaming invocation, so passing it defaults
-     * `stream` to true when not set explicitly.
-     */
-    onAgentEvent?: (event: CodingAgentEvent) => void;
-}): Promise<CodingAgentRun>;
-export declare function truncateText(value: string, maxLength: number): string;
-export declare function scanHarness(options?: ScanOptions): HarnessGraph;
-export declare function summarizeHarness(graph: HarnessGraph): HarnessSummary;
-/** One repo-relative source file included in a {@link SourceSnapshot}. */
-export interface SourceSnapshotFile {
-    path: string;
-    text: string;
-}
-/**
- * A safe, bounded source snapshot uploaded to Moda for server-side ("Moda-hosted")
- * harness analysis. Built by reusing the same permissioned inventory the local
- * scanner uses, so it inherits every safety property already implemented in
- * `inventoryFiles`: secret-bearing files are skipped, symlinks are skipped, and
- * the per-file (512KB) plus whole-scan (12k-file / 48MB) budgets bound the size.
- * Only files whose text was actually read are included; `truncated` records
- * whether any file was dropped for exceeding a size/budget cap.
- */
-export interface SourceSnapshot {
-    repo: {
-        name: string;
-        root: '.';
-    };
-    files: SourceSnapshotFile[];
-    truncated: boolean;
-    fileCount: number;
-    byteCount: number;
-    gitCommit?: string;
-}
-/**
- * Build a safe source snapshot of `rootDir` by reusing the permissioned
- * `inventoryFiles` walk (secret-skip, symlink-skip, 512KB/file, 12k-file/48MB
- * caps) plus `detectRepo`/`getGitCommit`. Only files with text content are
- * included; `truncated` is set when the scan dropped any file for a size/budget
- * cap so the server knows the snapshot is incomplete.
- */
-export declare function buildSourceSnapshot(rootDir: string): SourceSnapshot;
-declare function buildCommandScanPlan(context: CommandContext, rootDir: string): {
-    scope: 'broad' | 'narrow';
-    root: string;
-    approval: {
-        required: boolean;
-        granted: boolean;
-        reason: string;
-    };
-    readPlan: HarnessScanReadPlan;
-};
-export declare function writeHumanProgress(context: CommandContext, message: string): void;
-export declare function readHarnessSyncState(rootDir: string): HarnessSyncState | undefined;
-/**
- * The identity a sync-style upload will actually authenticate as, resolved
- * with the same precedence as the API call itself (MODA_API_KEY env wins over
- * the active profile / legacy config). Used for the pre-upload
- * "Syncing as <credential> → tenant <id>" banner so a shadowed or stale key
- * is visible BEFORE data lands in the wrong tenant.
- *
- * The destination tenant is derived from the WINNING KEY itself (signed CLI
- * keys embed their tenant, and the server resolves the destination from the
- * key alone) — never from flag/env/profile config, which is exactly what a
- * shadowing stale key disagrees with. When the key does not embed a tenant,
- * the config-resolved id is returned with `tenantSource: 'config'` so
- * callers must label it unverified. Best-effort: never throws (a broken
- * MODA_PROFILE must not abort onboarding).
- */
-export declare function describeSyncIdentity(options?: {
-    profile?: string;
-    env?: NodeJS.ProcessEnv;
-}): {
-    credential: string;
-    tenantId?: string;
-    /** 'api-key' = decoded from the winning key (authoritative); 'config' = flag/env/profile fallback (unverified). */
-    tenantSource?: 'api-key' | 'config';
-} | undefined;
-/**
- * Human tenant label for the identity banner: key-derived ids are printed
- * bare; config-derived ids are explicitly marked unverified so the banner
- * never asserts a destination the server might not use.
- */
-export declare function describeSyncTenantLabel(identity: {
-    tenantId?: string;
-    tenantSource?: 'api-key' | 'config';
-}): string;
-/**
- * Reports in subdirectories that are FRESHER than the root's
- * `.moda/harness-report.json` (a missing root report counts as infinitely
- * old). Catches the `--path` trap: `harness analyze --path=<subdir>` writes
- * `<subdir>/.moda/harness-report.json`, and a later root-level
- * `harness approve`/`sync` silently targets the stale (or absent) root report.
- * Newest first.
- */
-export declare function findFresherHarnessReports(rootDir: string): Array<{
-    path: string;
-    mtimeMs: number;
-}>;
-export declare function writeHarnessArtifacts(graph: HarnessGraph, rootDir: string, options?: {
-    summary?: boolean;
-}): string[];
-export declare function graphForSync(graph: HarnessGraph): HarnessGraph;
-/**
- * Bounded repo walk shared by `harness scan`, snapshot upload, and the static
- * candidates pre-pass: skips ignored/secret-bearing paths and symlinks,
- * enforces the file-count and text-byte budgets, and reads text for known
- * text extensions plus any file admitted by `options.includeFile`.
- * `options.includeFile` widens (ORs with) the default inventory predicate and
- * also opts its files into text reading — it can never re-admit secret-bearing
- * or oversized files, which are rejected before the predicate runs.
- */
-export declare function inventoryFiles(rootDir: string, skipped: HarnessScanMetadata['skipped'], options?: {
-    includeFile?: (relPath: string) => boolean;
-}): FileInventoryItem[];
-export declare function numericEnv(name: string, fallback: number): number;
-export declare function numericEnvAllowZero(name: string, fallback: number): number;
-export {};
-//# sourceMappingURL=harness.d.ts.map