@moda-ai/cli 1.22.2 → 1.23.0

package/dist/{cli-g8qs2tj9.js → cli-y55bgg14.js}

@@ -6,32 +6,24 @@ import {
   MAX_RECORDED_SKIPS,
   MAX_SCANNED_FILE_BYTES,
   SKIPPED_DIRS,
+  __require,
   createCommandContext,
   embeddedTenantIdFromApiKey,
-  ensureSecretFilePermissions,
   getActiveProfile,
-  getModaPaths,
-  isAuthSessionValid,
   isEvalLikePath,
-  isLoopbackBaseUrl,
   isSecretishPath,
   isSkippedDir,
   isSkippedPathPrefix,
   isTextFile,
-  loadAuthSession,
-  loadProfileConfig,
   packSnapshot,
   redactDeep,
   resolveApiKey,
   resolveIngestUrl,
   resolveModaBaseUrl,
-  resolveSecretReference,
   resolveTenantId,
-  secretFilePathFromRef,
   shouldInventoryFile,
-  stringOption,
-  validateConfig
-} from "./cli-pwbvtes8.js";
+  stringOption
+} from "./cli-mnqa4rp6.js";
 
 // src/api-client.ts
 var REQUEST_TIMEOUT_MS = 30000;
@@ -131,1947 +123,9 @@ function resetApiRequestCount() {
   apiRequestCount = 0;
 }
 
-// src/prompts.ts
-import { execFileSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import {
-  existsSync as existsSync2,
-  lstatSync,
-  mkdirSync,
-  readFileSync,
-  readdirSync,
-  writeFileSync as writeFileSync2
-} from "node:fs";
-import { dirname, isAbsolute as isAbsolute3, join, relative, resolve as resolve3 } from "node:path";
-
-// src/prompts-ab.ts
-import { existsSync } from "node:fs";
-import { isAbsolute, resolve } from "node:path";
-var DEFAULT_SEEDS_PER_CASE = 3;
-var DEFAULT_POLL_INTERVAL_MS = 15000;
-var DEFAULT_WAIT_TIMEOUT_MS = 2 * 60 * 60 * 1000;
-var TERMINAL_RUN_STATUSES = new Set(["completed", "skipped", "error"]);
-async function runPromptAb(flags, profileOptions, context) {
-  validateConfig();
-  const tenantId = flags["tenant-id"] || resolveTenantId(profileOptions);
-  if (!tenantId) {
-    throw new Error("Missing tenant id. Run `moda init` or pass --tenant-id=<id>.");
-  }
-  const baselineSource = flags.baseline || flags["baseline-file"] || flags["baseline-key"];
-  const candidateSource = flags.candidate || flags["candidate-file"] || flags["candidate-key"];
-  if (!baselineSource || !candidateSource) {
-    throw new Error("Usage: moda prompts ab --baseline=<file|key> --candidate=<file|key> [--auto-generate|--set-id=ID|--conversations=id1,id2]");
-  }
-  if (flags.sync === "true") {
-    await runPromptSync({ ...flags, watch: "false" }, profileOptions);
-  }
-  const promptArms = {
-    prod: resolvePromptArmSpec(baselineSource, "baseline"),
-    proposed: resolvePromptArmSpec(candidateSource, "candidate")
-  };
-  const replaySetId = await ensureReplaySet(flags, tenantId, profileOptions);
-  const seedsPerCase = parsePositiveInt(flags.seeds ?? flags["seeds-per-case"], DEFAULT_SEEDS_PER_CASE, 10);
-  const assistantModel = (flags.model ?? flags["assistant-model"] ?? "").trim();
-  const enqueue = await callControlAPI(`/tenants/${encodeURIComponent(tenantId)}/replay-sets/${encodeURIComponent(replaySetId)}/run`, {
-    method: "POST",
-    body: JSON.stringify({
-      promptArms,
-      seedsPerCase,
-      assistantModel: assistantModel || undefined,
-      promotePrimary: flags["no-promote"] !== "true"
-    })
-  }, profileOptions, { timeoutMs: 120000, retries: 1 });
-  const noWait = flags.wait === "false" || flags["no-wait"] === "true";
-  if (noWait) {
-    context.output.writeData({
-      replaySetId,
-      runId: enqueue.runId,
-      status: enqueue.status,
-      message: enqueue.message ?? "Replay comparison queued"
-    });
-    return;
-  }
-  const timeoutMs = parsePositiveInt(flags.timeout, DEFAULT_WAIT_TIMEOUT_MS, 24 * 60 * 60 * 1000);
-  const pollIntervalMs = parsePositiveInt(flags["poll-interval"], DEFAULT_POLL_INTERVAL_MS, 120000);
-  const deadline = Date.now() + timeoutMs;
-  let latest = null;
-  while (Date.now() < deadline) {
-    latest = await fetchLatestRun(tenantId, replaySetId, enqueue.runId, profileOptions);
-    const status = latest.run?.status ?? "";
-    const runId = latest.run?.runId ?? "";
-    if (TERMINAL_RUN_STATUSES.has(status) && runId === enqueue.runId) {
-      break;
-    }
-    if (context.outputMode === "human") {
-      process.stderr.write(`Waiting for replay run (${status || "pending"})...
-`);
-    }
-    await sleep(pollIntervalMs);
-  }
-  if (!latest?.run || latest.run.runId !== enqueue.runId || !TERMINAL_RUN_STATUSES.has(latest.run.status)) {
-    throw new Error(`Timed out after ${timeoutMs}ms waiting for replay run ${enqueue.runId} to finish`);
-  }
-  const result = {
-    replaySetId,
-    runId: latest.run.runId,
-    status: latest.run.status,
-    verdict: formatVerdict(latest),
-    run: { ...latest.run },
-    cases: latest.cases.map((row) => ({ ...row }))
-  };
-  if (context.outputMode === "human") {
-    printHumanVerdict(result);
-  }
-  context.output.writeData(result);
-}
-function resolvePromptArmSpec(source, label, opts = {}) {
-  const trimmed = source.trim();
-  if (!trimmed) {
-    throw new Error(`Empty prompt source for ${label}`);
-  }
-  const fromDiscovery = () => {
-    const discovered = discoverPrompts();
-    const match = discovered.find((prompt) => prompt.key === trimmed) ?? discovered.find((prompt) => prompt.sourcePath === trimmed);
-    return match ? { key: match.key, content: match.content } : null;
-  };
-  const absPath = isAbsolute(trimmed) ? trimmed : resolve(process.cwd(), trimmed);
-  let key;
-  let content;
-  const preferred = opts.preferKey ? fromDiscovery() : null;
-  if (preferred) {
-    key = preferred.key;
-    content = preferred.content;
-  } else if (opts.preferKey) {
-    throw new Error(`Could not resolve prompt key '${trimmed}' — no discovered prompt matched this key`);
-  } else if (existsSync(absPath)) {
-    const parsed = parsePromptFileForAb(absPath);
-    key = parsed.key;
-    content = parsed.content;
-  } else {
-    const match = fromDiscovery();
-    if (!match) {
-      throw new Error(`Could not resolve prompt '${trimmed}' — pass a .prompt.md path or a discovered prompt key`);
-    }
-    key = match.key;
-    content = match.content;
-  }
-  const locked = readPromptLock()?.prompts[key];
-  return {
-    content,
-    prompt_version_id: locked?.versionId ?? "",
-    prompt_id: locked?.promptId ?? "",
-    prompt_label: label
-  };
-}
-async function ensureReplaySet(flags, tenantId, profileOptions) {
-  const existingSetId = (flags["set-id"] || flags["replay-set-id"] || "").trim();
-  if (existingSetId) {
-    return existingSetId;
-  }
-  const conversations = parseCsv(flags.conversations ?? flags["conversation-ids"]);
-  if (conversations.length) {
-    return createSetFromConversations(conversations, flags, tenantId, profileOptions);
-  }
-  if (flags["auto-generate"] === "false" && !existingSetId) {
-    throw new Error("Provide --set-id=, --conversations=, or allow --auto-generate (default)");
-  }
-  const caseCount = parsePositiveInt(flags.cases ?? flags["case-count"], 5, 25);
-  const lookbackDays = parsePositiveInt(flags["lookback-days"], 30, 365);
-  const name = (flags.name ?? flags["set-name"] ?? `Prompt A/B ${new Date().toISOString().slice(0, 10)}`).trim();
-  const generated = await callControlAPI(`/tenants/${encodeURIComponent(tenantId)}/replay-sets/auto-generate`, {
-    method: "POST",
-    body: JSON.stringify({ name, caseCount, lookbackDays })
-  }, profileOptions, { timeoutMs: 300000, retries: 0 });
-  if (!generated?.id) {
-    throw new Error("Auto-generate did not return a replay set id");
-  }
-  return generated.id;
-}
-async function createSetFromConversations(conversationIds, flags, tenantId, profileOptions) {
-  const name = (flags.name ?? flags["set-name"] ?? `Prompt A/B ${conversationIds.length} conv`).trim();
-  const created = await callControlAPI(`/tenants/${encodeURIComponent(tenantId)}/replay-sets`, {
-    method: "POST",
-    body: JSON.stringify({ name, description: "Created by moda prompts ab" })
-  }, profileOptions);
-  let position = 0;
-  for (const conversationId of conversationIds) {
-    const scenario = await loadScenarioFromConversation(conversationId);
-    await callControlAPI(`/tenants/${encodeURIComponent(tenantId)}/replay-sets/${encodeURIComponent(created.id)}/cases`, {
-      method: "POST",
-      body: JSON.stringify({
-        title: conversationId,
-        scenario,
-        sourceConversationId: conversationId,
-        successCriteria: [
-          "The agent understands the user request",
-          "The agent uses tools appropriately when needed",
-          "The agent provides a helpful final answer"
-        ],
-        position: position++
-      })
-    }, profileOptions);
-  }
-  return created.id;
-}
-async function loadScenarioFromConversation(conversationId) {
-  try {
-    const data = await callDataAPI(`/conversations/${encodeURIComponent(conversationId)}/context?msg_index=0&window=0`);
-    const firstUser = (data.messages ?? []).find((message) => message.role === "user" && String(message.content ?? "").trim());
-    const opening = String(firstUser?.content ?? "").trim();
-    if (opening) {
-      return `The user says: "${opening}"
-
-Replay the conversation faithfully and help them accomplish their goal.`;
-    }
-  } catch {}
-  return `Replay conversation ${conversationId}: help the user accomplish their original goal using the available tools.`;
-}
-async function fetchLatestRun(tenantId, replaySetId, runId, profileOptions) {
-  return callControlAPI(`/tenants/${encodeURIComponent(tenantId)}/replay-sets/${encodeURIComponent(replaySetId)}/runs/latest?runId=${encodeURIComponent(runId)}`, { method: "GET" }, profileOptions, { timeoutMs: 60000, retries: 2 });
-}
-function candidateOutcome(payload) {
-  const run = payload.run;
-  if (!run || run.status !== "completed")
-    return "no-run";
-  const delta = run.proposedPassCount - run.prodPassCount;
-  if (delta > 0)
-    return "candidate";
-  if (delta < 0)
-    return "baseline";
-  return "tie";
-}
-function formatVerdict(payload) {
-  const run = payload.run;
-  if (!run)
-    return "no run";
-  if (run.status === "skipped")
-    return `skipped: ${run.notes || "no reason"}`;
-  if (run.status === "error")
-    return `error: ${run.notes || "unknown error"}`;
-  if (run.status !== "completed")
-    return `status=${run.status}`;
-  const delta = run.proposedPassCount - run.prodPassCount;
-  const winner = delta > 0 ? "candidate wins" : delta < 0 ? "baseline wins" : "tie on case passes";
-  const rates = `baseline ${run.prodPassCount}/${run.caseCount} (${pct(run.prodPassRate)}), candidate ${run.proposedPassCount}/${run.caseCount} (${pct(run.proposedPassRate)})`;
-  const notes = run.notes?.trim();
-  return `${winner}; ${rates}${notes ? `; ${notes}` : ""}`;
-}
-function printHumanVerdict(result) {
-  process.stderr.write(`
-Prompt A/B replay verdict
-`);
-  process.stderr.write(`-------------------------
-`);
-  process.stderr.write(`Replay set: ${result.replaySetId}
-`);
-  process.stderr.write(`Run id:     ${result.runId}
-`);
-  process.stderr.write(`Status:     ${result.status}
-`);
-  process.stderr.write(`Verdict:    ${result.verdict}
-`);
-  if (result.cases.length) {
-    process.stderr.write(`
-Per-case:
-`);
-    for (const row of result.cases) {
-      const caseId = String(row.caseId ?? "");
-      const prod = formatPass(row.prodPass);
-      const proposed = formatPass(row.proposedPass);
-      process.stderr.write(`  ${caseId}: baseline=${prod} candidate=${proposed}
-`);
-    }
-  }
-  process.stderr.write(`
-`);
-}
-function formatPass(value) {
-  if (value === null || value === undefined)
-    return "abstained";
-  return value ? "pass" : "fail";
-}
-function pct(rate) {
-  return `${Math.round(Math.max(0, Math.min(1, rate)) * 100)}%`;
-}
-async function enqueueAndPollComparison(args, profileOptions) {
-  const enqueue = await callControlAPI(`/tenants/${encodeURIComponent(args.tenantId)}/replay-sets/${encodeURIComponent(args.replaySetId)}/run`, {
-    method: "POST",
-    body: JSON.stringify({
-      promptArms: args.promptArms,
-      seedsPerCase: args.seedsPerCase ?? DEFAULT_SEEDS_PER_CASE,
-      assistantModel: args.assistantModel || undefined,
-      promotePrimary: args.promotePrimary ?? false
-    })
-  }, profileOptions, { timeoutMs: 120000, retries: 1 });
-  const timeoutMs = args.timeoutMs ?? DEFAULT_WAIT_TIMEOUT_MS;
-  const pollIntervalMs = args.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
-  const deadline = Date.now() + timeoutMs;
-  let latest = null;
-  while (Date.now() < deadline) {
-    latest = await fetchLatestRun(args.tenantId, args.replaySetId, enqueue.runId, profileOptions);
-    const status = latest.run?.status ?? "";
-    const runId = latest.run?.runId ?? "";
-    if (TERMINAL_RUN_STATUSES.has(status) && runId === enqueue.runId) {
-      return latest;
-    }
-    args.onWaiting?.(status || "pending");
-    await sleep(pollIntervalMs);
-  }
-  if (!latest?.run || latest.run.runId !== enqueue.runId || !TERMINAL_RUN_STATUSES.has(latest.run.status)) {
-    throw new Error(`Timed out after ${timeoutMs}ms waiting for replay run ${enqueue.runId} to finish`);
-  }
-  return latest;
-}
-function parsePositiveInt(raw, fallback, max) {
-  if (!raw)
-    return fallback;
-  const parsed = Number.parseInt(raw, 10);
-  if (!Number.isFinite(parsed) || parsed < 1)
-    return fallback;
-  return Math.min(parsed, max);
-}
-function parseCsv(raw) {
-  if (!raw?.trim())
-    return [];
-  return raw.split(",").map((part) => part.trim()).filter(Boolean);
-}
-function sleep(ms) {
-  return new Promise((resolveSleep) => setTimeout(resolveSleep, ms));
-}
-
-// src/prompts-propose.ts
-import { writeFileSync } from "node:fs";
-import { isAbsolute as isAbsolute2, resolve as resolve2 } from "node:path";
-var PROPOSE_TIMEOUT_MS = 300000;
-async function runPromptPropose(positionals, flags, profileOptions, context) {
-  validateConfig();
-  const promptKey = flags["prompt-key"] || positionals[1];
-  const fromRunId = flags["from-run"] || flags["from-run-id"] || flags["run-id"];
-  const replaySetId = flags["set-id"] || flags["replay-set-id"];
-  if (!promptKey || !fromRunId || !replaySetId) {
-    throw new Error("Usage: moda prompts propose --prompt-key=<key> --from-run=<run_id> --set-id=<replay_set_id> [--max-dossiers=8] [--model=<slug>] [--out=path.prompt.md] [--gate] [--promote-on-win]");
-  }
-  const maxDossiers = parsePositiveInt2(flags["max-dossiers"], 8, 16);
-  const model = (flags.model ?? flags["revise-model"] ?? "").trim();
-  const result = await callControlAPI(`/prompts/${encodeURIComponent(promptKey)}/propose`, {
-    method: "POST",
-    body: JSON.stringify({ fromRunId, replaySetId, maxDossiers, model: model || undefined })
-  }, profileOptions, { timeoutMs: PROPOSE_TIMEOUT_MS, retries: 0 });
-  let outPath;
-  if (result.status === "proposed" && result.content && flags.out) {
-    outPath = isAbsolute2(flags.out) ? flags.out : resolve2(process.cwd(), flags.out);
-    writeFileSync(outPath, result.content, "utf8");
-  }
-  const wantGate = flags.gate === "true";
-  const promoteOnWin = flags["promote-on-win"] === "true";
-  let gate;
-  if (wantGate) {
-    if (result.status !== "proposed" || !result.content) {
-      gate = {
-        ran: false,
-        scope: "full-set",
-        scopeNote: `no candidate to gate (${result.status})`,
-        verdict: "skipped",
-        outcome: "no-run",
-        runId: null,
-        promoted: false
-      };
-    } else {
-      gate = await runGate({
-        result,
-        promptKey,
-        replaySetId,
-        flags,
-        promoteOnWin,
-        profileOptions,
-        context
-      });
-    }
-  }
-  if (context.outputMode === "human") {
-    printHuman(result, outPath, gate);
-  }
-  context.output.writeData({
-    ...result,
-    ...outPath ? { outPath } : {},
-    ...gate ? { gate } : {}
-  });
-}
-async function runGate(args) {
-  const { result, promptKey, replaySetId, flags, promoteOnWin, profileOptions, context } = args;
-  const tenantId = flags["tenant-id"] || resolveTenantId(profileOptions);
-  if (!tenantId) {
-    throw new Error("Missing tenant id for --gate. Run `moda init` or pass --tenant-id=<id>.");
-  }
-  const prodArm = resolvePromptArmSpec(promptKey, "baseline", { preferKey: true });
-  const proposedArm = {
-    content: result.content ?? "",
-    prompt_version_id: result.versionId ?? "",
-    prompt_id: "",
-    prompt_label: "candidate"
-  };
-  const seedsPerCase = parsePositiveInt2(flags.seeds ?? flags["seeds-per-case"], 3, 10);
-  const assistantModel = (flags["assistant-model"] ?? "").trim();
-  const timeoutMs = parsePositiveInt2(flags["gate-timeout"] ?? flags.timeout, 2 * 60 * 60 * 1000, 24 * 60 * 60 * 1000);
-  const pollIntervalMs = parsePositiveInt2(flags["poll-interval"], 15000, 120000);
-  const scopeNote = result.holdoutCaseIds.length ? `gated over the FULL replay set (${result.holdoutCaseIds.length} holdout case(s) could not be isolated — the run endpoint scores every case)` : "gated over the FULL replay set";
-  if (context.outputMode === "human") {
-    process.stderr.write(`
-Gating candidate for '${promptKey}' — ${scopeNote}...
-`);
-  }
-  const payload = await enqueueAndPollComparison({
-    tenantId,
-    replaySetId,
-    promptArms: { prod: prodArm, proposed: proposedArm },
-    seedsPerCase,
-    assistantModel: assistantModel || undefined,
-    promotePrimary: false,
-    timeoutMs,
-    pollIntervalMs,
-    onWaiting: context.outputMode === "human" ? (status) => process.stderr.write(`Waiting for gate run (${status})...
-`) : undefined
-  }, profileOptions);
-  const outcome = candidateOutcome(payload);
-  const gate = {
-    ran: true,
-    scope: "full-set",
-    scopeNote,
-    verdict: formatVerdict(payload),
-    outcome,
-    runId: payload.run?.runId ?? null,
-    promoted: false
-  };
-  if (promoteOnWin) {
-    if (outcome === "candidate" && result.versionId) {
-      await callControlAPI(`/prompts/${encodeURIComponent(promptKey)}/labels`, { method: "POST", body: JSON.stringify({ label: "prod", versionId: result.versionId }) }, profileOptions);
-      gate.promoted = true;
-    } else {
-      gate.promoteSkippedReason = outcome === "candidate" ? "no candidate versionId to promote" : `candidate did not strictly win (${outcome})`;
-    }
-  }
-  return gate;
-}
-function printHuman(result, outPath, gate) {
-  const w = (s) => process.stderr.write(s + `
-`);
-  if (result.status !== "proposed") {
-    w(`No candidate produced (${result.status}): ${result.note}`);
-    return;
-  }
-  w(`Proposed candidate for '${result.promptKey}'`);
-  w(`  new version:  ${result.versionId}  (unlabeled — not promoted)`);
-  w(`  base version: ${result.baseVersionId ?? "(none)"}`);
-  w(`  from run:     built from ${result.dossierCount} failure dossier(s)`);
-  if (result.changelog)
-    w(`  changelog:    ${result.changelog}`);
-  if (result.risks.length)
-    w(`  risks:        ${result.risks.map((r) => `- ${r}`).join(`
-                `)}`);
-  if (outPath)
-    w(`  written to:   ${outPath}`);
-  if (result.lowN) {
-    w("");
-    w(`  ⚠ low sample: ${result.lowN}`);
-  }
-  w("");
-  if (gate?.ran) {
-    w("Gate (automatic A/B of candidate vs baseline):");
-    w(`  scope:    ${gate.scopeNote}`);
-    w(`  verdict:  ${gate.verdict}`);
-    if (gate.runId)
-      w(`  run id:   ${gate.runId}`);
-    if (gate.promoted) {
-      w(`  promoted: candidate won — promoted version ${result.versionId} to label 'prod'`);
-    } else if (gate.promoteSkippedReason) {
-      w(`  promote:  skipped (${gate.promoteSkippedReason})`);
-    }
-    w("");
-    if (!gate.promoted) {
-      w(`  moda prompts promote ${result.promptKey} --label=prod --version=${result.versionId}`);
-    }
-    return;
-  }
-  if (gate && !gate.ran) {
-    w(`Gate not run: ${gate.scopeNote}`);
-    w("");
-  }
-  w("Next — gate on holdout cases the revision never saw, then promote if it wins:");
-  if (result.holdoutCaseIds.length) {
-    w(`  holdout cases (${result.holdoutCaseIds.length}): ${result.holdoutCaseIds.join(", ")}`);
-  } else {
-    w("  (too few failures to reserve a holdout — gate on a fresh --auto-generate set)");
-  }
-  if (outPath) {
-    w(`  moda prompts ab --baseline-key=${result.promptKey} --candidate=${outPath} --auto-generate`);
-  } else {
-    w(`  # re-run with --out=<path.prompt.md> to materialize the candidate, then:`);
-    w(`  moda prompts ab --baseline-key=${result.promptKey} --candidate=<path.prompt.md> --auto-generate`);
-  }
-  w(`  # or: moda prompts propose ... --gate --promote-on-win  (auto-A/B, promote on a strict win)`);
-  w(`  moda prompts promote ${result.promptKey} --label=prod --version=${result.versionId}`);
-}
-function parsePositiveInt2(raw, fallback, max) {
-  const n = Number.parseInt(raw ?? "", 10);
-  if (!Number.isFinite(n) || n <= 0)
-    return fallback;
-  return Math.min(n, max);
-}
-
-// src/prompts.ts
-var MODA_DIR = ".moda";
-var MANIFEST_PATH = join(MODA_DIR, "prompts.yml");
-var LOCK_PATH = join(MODA_DIR, "prompts.lock.json");
-var DEFAULT_PROMPT_PATHS = [
-  "prompts/**/*.prompt.md",
-  "prompts/**/*.prompt.json",
-  "prompts/**/*.prompt.yaml",
-  "prompts/**/*.prompt.yml"
-];
-async function runPromptsCommand(input, legacyFlags, legacyProfileOptions) {
-  const context = Array.isArray(input) ? createCommandContext({
-    command: "prompts",
-    positional: input[0],
-    positionals: input,
-    flags: legacyFlags ?? {}
-  }, {
-    commandFlags: legacyFlags ?? {},
-    outputMode: legacyFlags?.agent === "true" ? "agent" : legacyFlags?.json === "true" ? "json" : "human",
-    env: legacyProfileOptions?.env
-  }) : input;
-  const positionals = context.positionals;
-  const flags = context.flags;
-  const profileOptions = legacyProfileOptions ?? { profile: context.profile, env: context.env };
-  const subcommand = positionals[0] || "status";
-  switch (subcommand) {
-    case "init":
-      await initPrompts({ silent: true });
-      context.output.writeData({
-        manifest: MANIFEST_PATH,
-        lockfile: LOCK_PATH,
-        promptPaths: readManifest().promptPaths
-      });
-      break;
-    case "status":
-      context.output.writeData(await getPromptStatus());
-      break;
-    case "diff":
-      context.output.writeData(await getPromptStatus());
-      break;
-    case "sync":
-      await syncPrompts(flags, profileOptions, context);
-      break;
-    case "promote":
-      await promotePrompt(positionals, flags, profileOptions, context);
-      break;
-    case "ab":
-      await runPromptAb(flags, profileOptions, context);
-      break;
-    case "propose":
-      await runPromptPropose(positionals, flags, profileOptions, context);
-      break;
-    default:
-      throw new Error(`Unknown prompts command '${subcommand}'. Use init, status, diff, sync, promote, ab, or propose.`);
-  }
-}
-async function initPrompts(options = {}) {
-  mkdirSync(MODA_DIR, { recursive: true });
-  if (!existsSync2(MANIFEST_PATH)) {
-    writeFileSync2(MANIFEST_PATH, [
-      "version: 1",
-      "prompt_paths:",
-      ...DEFAULT_PROMPT_PATHS.map((path) => `  - "${path}"`),
-      ""
-    ].join(`
-`));
-  }
-  if (!options.silent) {
-    printJson({
-      manifest: MANIFEST_PATH,
-      lockfile: LOCK_PATH,
-      promptPaths: readManifest().promptPaths
-    });
-  }
-}
-async function syncPrompts(flags, profileOptions, context) {
-  if (flags.watch === "true") {
-    await watchPromptSync(flags, profileOptions);
-    return;
-  }
-  await syncPromptsOnce(flags, profileOptions, context);
-}
-async function runPromptSync(flags, profileOptions) {
-  await initPrompts({ silent: true });
-  const prompts = discoverPrompts();
-  const sourceCommit = getGitCommit();
-  const manifestHash = hashFile(MANIFEST_PATH);
-  const dryRun = flags["dry-run"] === "true";
-  const response = await callControlAPI("/prompts/sync", {
-    method: "POST",
-    body: JSON.stringify({
-      prompts: prompts.map((prompt) => ({
-        ...prompt,
-        sourceCommit,
-        manifestHash
-      })),
-      sourceCommit,
-      manifestHash,
-      dryRun
-    })
-  }, profileOptions);
-  if (!dryRun) {
-    writeLock(prompts, response.synced ?? []);
-  }
-  return { synced: response.synced ?? [], dryRun };
-}
-async function syncPromptsOnce(flags, profileOptions, context) {
-  const result = await runPromptSync(flags, profileOptions);
-  const payload = {
-    synced: result.synced,
-    lockfile: result.dryRun ? undefined : LOCK_PATH
-  };
-  if (context)
-    context.output.writeData(payload);
-  else
-    printJson(payload);
-}
-async function watchPromptSync(flags, profileOptions) {
-  console.error("Watching prompt files. Press Ctrl+C to stop.");
-  let lastSignature = "";
-  const intervalMs = Math.max(1000, Number(flags.interval ?? 2500));
-  while (true) {
-    const status = await getPromptStatus();
-    const signature = stableJson(status.prompts);
-    if (signature !== lastSignature) {
-      lastSignature = signature;
-      if (status.changed > 0 || status.new > 0 || status.deleted > 0) {
-        await syncPromptsOnce({ ...flags, watch: "false" }, profileOptions);
-      }
-    }
-    await new Promise((resolve4) => setTimeout(resolve4, intervalMs));
-  }
-}
-async function promotePrompt(positionals, flags, profileOptions, context) {
-  const key = positionals[1];
-  const label = flags.label;
-  const versionId = flags.version || flags["version-id"];
-  if (!key)
-    throw new Error("Usage: moda prompts promote <prompt_key> --label=prod --version=<version_id>");
-  if (!label)
-    throw new Error("Missing required flag: --label=dev|staging|prod");
-  if (!versionId)
-    throw new Error("Missing required flag: --version=<version_id>");
-  const response = await callControlAPI(`/prompts/${encodeURIComponent(key)}/labels`, {
-    method: "POST",
-    body: JSON.stringify({ label, versionId })
-  }, profileOptions);
-  context.output.writeData(response);
-}
-async function getPromptStatus() {
-  await initPrompts({ silent: true });
-  const prompts = discoverPrompts();
-  const lock = readLock();
-  const rows = prompts.map((prompt) => {
-    const locked = lock?.prompts[prompt.key];
-    const state = !locked ? "new" : locked.contentHash === prompt.contentHash ? "unchanged" : "changed";
-    return {
-      key: prompt.key,
-      sourcePath: prompt.sourcePath,
-      contentHash: prompt.contentHash,
-      lockedHash: locked?.contentHash ?? null,
-      versionId: locked?.versionId ?? null,
-      state
-    };
-  });
-  const discoveredKeys = new Set(prompts.map((prompt) => prompt.key));
-  for (const [key, locked] of Object.entries(lock?.prompts ?? {})) {
-    if (!discoveredKeys.has(key)) {
-      rows.push({
-        key,
-        sourcePath: locked.sourcePath,
-        contentHash: null,
-        lockedHash: locked.contentHash,
-        versionId: locked.versionId ?? null,
-        state: "deleted"
-      });
-    }
-  }
-  return {
-    manifest: MANIFEST_PATH,
-    lockfile: LOCK_PATH,
-    total: rows.length,
-    changed: rows.filter((row) => row.state === "changed").length,
-    new: rows.filter((row) => row.state === "new").length,
-    deleted: rows.filter((row) => row.state === "deleted").length,
-    prompts: rows
-  };
-}
-function discoverPrompts() {
-  const manifest = readManifest();
-  const rules = manifest.promptPaths.map((pattern) => {
-    const suffixMatch = pattern.match(/\.prompt\.(md|json|ya?ml)$/i);
-    if (!suffixMatch)
-      return null;
-    const suffix = `.prompt.${suffixMatch[1]}`;
-    const globIndex = pattern.search(/[*?[]/);
-    const baseRaw = globIndex === -1 ? dirname(pattern) : pattern.slice(0, globIndex);
-    const base = baseRaw.replace(/[\\/]+$/, "") || ".";
-    const baseAbs = isAbsolute3(base) ? base : resolve3(process.cwd(), base);
-    return { baseAbs, suffix };
-  }).filter((rule) => Boolean(rule));
-  const effectiveRules = rules.length ? rules : [
-    { baseAbs: process.cwd(), suffix: ".prompt.md" },
-    { baseAbs: process.cwd(), suffix: ".prompt.json" }
-  ];
-  const discovered = new Set;
-  for (const { baseAbs, suffix } of effectiveRules) {
-    if (!existsSync2(baseAbs))
-      continue;
-    for (const file of walk(baseAbs)) {
-      if (file.endsWith(suffix))
-        discovered.add(file);
-    }
-  }
-  return [...discovered].sort().map(parsePromptFile);
-}
-function parsePromptFile(absPath) {
-  const sourcePath = relative(process.cwd(), absPath);
-  const raw = readFileSync(absPath, "utf8");
-  if (absPath.endsWith(".json")) {
-    const parsed = JSON.parse(raw);
-    const key2 = parsed.key || keyFromPath(sourcePath);
-    const content = parsed.content || JSON.stringify(parsed.messages ?? [], null, 2);
-    return normalizePrompt({ ...parsed, key: key2, name: parsed.name || key2, sourcePath, content });
-  }
-  const { frontmatter, body } = parseFrontmatter(raw);
-  const key = frontmatter.key || keyFromPath(sourcePath);
-  return normalizePrompt({
-    key,
-    name: frontmatter.name || key,
-    description: frontmatter.description,
-    category: frontmatter.category,
-    systemPrompt: frontmatter.system_prompt || frontmatter.systemPrompt,
-    modelConfig: frontmatter.model ? { model: frontmatter.model } : undefined,
-    sourcePath,
-    content: body.trim()
-  });
-}
-function normalizePrompt(prompt) {
-  const normalized = stableJson({
-    key: prompt.key,
-    content: prompt.content,
-    systemPrompt: prompt.systemPrompt ?? null,
-    messages: prompt.messages ?? [],
-    variables: prompt.variables ?? [],
-    variablesSchema: prompt.variablesSchema ?? {},
-    modelConfig: prompt.modelConfig ?? {},
-    toolRefs: prompt.toolRefs ?? [],
-    responseSchema: prompt.responseSchema ?? null
-  });
-  return {
-    key: prompt.key,
-    name: prompt.name || prompt.key,
-    description: prompt.description,
-    sourcePath: prompt.sourcePath,
-    content: prompt.content,
-    systemPrompt: prompt.systemPrompt,
-    messages: prompt.messages,
-    variables: prompt.variables,
-    variablesSchema: prompt.variablesSchema,
-    modelConfig: prompt.modelConfig,
-    toolRefs: prompt.toolRefs,
-    responseSchema: prompt.responseSchema,
-    contentHash: sha256(normalized)
-  };
-}
-function readManifest() {
-  if (!existsSync2(MANIFEST_PATH)) {
-    return { promptPaths: DEFAULT_PROMPT_PATHS };
-  }
-  const text = readFileSync(MANIFEST_PATH, "utf8");
-  const promptPaths = [...text.matchAll(/^\s*-\s*["']?([^"'\n]+)["']?\s*$/gm)].map((match) => match[1]).filter((path) => path.includes(".prompt."));
-  return { promptPaths: promptPaths.length ? promptPaths : DEFAULT_PROMPT_PATHS };
-}
-function readPromptLock() {
-  return readLock();
-}
-function parsePromptFileForAb(absPath) {
-  const parsed = parsePromptFile(absPath);
-  return { key: parsed.key, content: parsed.content };
-}
-function readLock() {
-  if (!existsSync2(LOCK_PATH))
-    return null;
-  return JSON.parse(readFileSync(LOCK_PATH, "utf8"));
-}
-function writeLock(prompts, synced) {
-  const syncedByKey = new Map(synced.map((item) => [item.key, item]));
-  const lock = {
-    version: 1,
-    generatedAt: new Date().toISOString(),
-    prompts: Object.fromEntries(prompts.map((prompt) => {
-      const result = syncedByKey.get(prompt.key);
-      return [prompt.key, {
-        key: prompt.key,
-        sourcePath: prompt.sourcePath,
-        contentHash: prompt.contentHash,
-        promptId: result?.promptId,
-        versionId: result?.versionId
-      }];
-    }))
-  };
-  mkdirSync(dirname(LOCK_PATH), { recursive: true });
-  writeFileSync2(LOCK_PATH, `${JSON.stringify(lock, null, 2)}
-`);
-}
-function walk(dir) {
-  let entries;
-  try {
-    entries = readdirSync(dir);
-  } catch {
-    return [];
-  }
-  const files = [];
-  for (const entry of entries) {
-    if (entry === "node_modules" || entry === ".git" || entry === "dist" || entry === "build")
-      continue;
-    const fullPath = join(dir, entry);
-    let stat;
-    try {
-      stat = lstatSync(fullPath);
-    } catch {
-      continue;
-    }
-    if (stat.isSymbolicLink())
-      continue;
-    if (stat.isDirectory())
-      files.push(...walk(fullPath));
-    else if (stat.isFile())
-      files.push(fullPath);
-  }
-  return files;
-}
-function parseFrontmatter(raw) {
-  if (!raw.startsWith("---"))
-    return { frontmatter: {}, body: raw };
-  const end = raw.indexOf(`
----`, 3);
-  if (end === -1)
-    return { frontmatter: {}, body: raw };
-  const frontmatterText = raw.slice(3, end).trim();
-  const frontmatter = Object.fromEntries(frontmatterText.split(`
-`).map((line) => line.match(/^([A-Za-z0-9_-]+):\s*(.*)$/)).filter((match) => Boolean(match)).map((match) => [match[1], match[2].replace(/^["']|["']$/g, "")]));
-  return { frontmatter, body: raw.slice(end + 4) };
-}
-function keyFromPath(path) {
-  return path.replace(/^prompts\//, "").replace(/\.prompt\.(md|json|ya?ml)$/i, "").replace(/[\\/]/g, ".");
-}
-function hashFile(path) {
-  return existsSync2(path) ? sha256(readFileSync(path, "utf8")) : "";
-}
-function getGitCommit() {
-  try {
-    return execFileSync("git", ["rev-parse", "HEAD"], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-  } catch {
-    return;
-  }
-}
-function stableJson(value) {
-  return JSON.stringify(sortJson(value));
-}
-function sortJson(value) {
-  if (Array.isArray(value))
-    return value.map(sortJson);
-  if (value && typeof value === "object") {
-    return Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sortJson(item)]));
-  }
-  return value;
-}
-function sha256(input) {
-  return createHash("sha256").update(input).digest("hex");
-}
-function printJson(value) {
-  console.log(JSON.stringify(value, null, 2));
-}
-
-// src/init/rules.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname as dirname2, join as join2 } from "node:path";
-import { fileURLToPath } from "node:url";
-import { confirm } from "@inquirer/prompts";
-var PACKAGE_ROOT = join2(dirname2(fileURLToPath(import.meta.url)), "..", "..");
-var SKILLS_SOURCE_DIR = join2(PACKAGE_ROOT, "skills");
-var SKILLS = [
-  {
-    id: "moda-cli",
-    label: "moda-cli — let coding agents query Moda analytics via the CLI"
-  }
-];
-var ADAPTERS = {
-  "Claude Code": {
-    name: "Claude Code",
-    targetFor: (skillId) => ({
-      dir: join2(".claude", "skills", skillId),
-      filename: "SKILL.md"
-    }),
-    transform: (content) => content
-  },
-  Cursor: {
-    name: "Cursor",
-    targetFor: (skillId) => ({
-      dir: join2(".cursor", "rules"),
-      filename: `${skillId}.mdc`
-    }),
-    transform: claudeSkillToCursorRule
-  }
-};
-var FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/;
-var DESCRIPTION_RE = /^description:\s*(.+?)\s*$/m;
-function claudeSkillToCursorRule(skillContent) {
-  const match = FRONTMATTER_RE.exec(skillContent);
-  if (!match) {
-    return skillContent;
-  }
-  const [, frontmatter, body] = match;
-  const descMatch = DESCRIPTION_RE.exec(frontmatter);
-  const description = descMatch?.[1].trim() ?? "";
-  const cursorFrontmatter = `---
-` + `description: ${JSON.stringify(description)}
-` + `alwaysApply: false
-` + `---
-`;
-  return `${cursorFrontmatter}
-${body.replace(/^\s+/, "")}`;
-}
-function loadSkillSource(skillId) {
-  const path = join2(SKILLS_SOURCE_DIR, skillId, "SKILL.md");
-  if (!existsSync3(path)) {
-    throw new Error(`Skill source missing: ${path}`);
-  }
-  return readFileSync2(path, "utf8");
-}
-function installSkillForAgent(skill, adapter, content) {
-  const { dir, filename } = adapter.targetFor(skill.id);
-  const dirPath = join2(process.cwd(), dir);
-  const filePath = join2(dirPath, filename);
-  const relativePath = join2(dir, filename);
-  try {
-    mkdirSync2(dirPath, { recursive: true });
-    if (existsSync3(filePath)) {
-      return { agent: adapter.name, relativePath, status: "exists" };
-    }
-    writeFileSync3(filePath, adapter.transform(content));
-    return { agent: adapter.name, relativePath, status: "wrote" };
-  } catch (err) {
-    return {
-      agent: adapter.name,
-      relativePath,
-      status: "failed",
-      error: err instanceof Error ? err.message : String(err)
-    };
-  }
-}
-async function installRules(detectedAgents, options = {}) {
-  const adapters = detectedAgents.map((a) => ADAPTERS[a]).filter((a) => a !== undefined);
-  if (adapters.length === 0) {
-    if (!options.silent)
-      console.log("  No supported coding agents detected");
-    return;
-  }
-  const agentList = adapters.map((a) => a.name).join(", ");
-  const skillList = SKILLS.map((s) => `
-    • ${s.label}`).join("");
-  const shouldInstall = options.yes ? true : await confirm({
-    message: `Install Moda skills for ${agentList}?${skillList}
-  Continue?`,
-    default: true
-  });
-  if (!shouldInstall) {
-    if (!options.silent)
-      console.log("  Skipped");
-    return;
-  }
-  let wrote = 0;
-  let skipped = 0;
-  let failed = 0;
-  for (const skill of SKILLS) {
-    let content;
-    try {
-      content = loadSkillSource(skill.id);
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      console.error(`  Warning: ${message}`);
-      failed += adapters.length;
-      continue;
-    }
-    for (const adapter of adapters) {
-      const outcome = installSkillForAgent(skill, adapter, content);
-      switch (outcome.status) {
-        case "wrote":
-          if (!options.silent)
-            console.log(`  ${outcome.agent}: wrote ${outcome.relativePath}`);
-          wrote++;
-          break;
-        case "exists":
-          if (!options.silent) {
-            console.log(`  ${outcome.agent}: ${outcome.relativePath} already exists — skipping`);
-          }
-          skipped++;
-          break;
-        case "failed":
-          if (!options.silent) {
-            console.error(`  ${outcome.agent}: failed to write ${outcome.relativePath} — ${outcome.error}`);
-          }
-          failed++;
-          break;
-      }
-    }
-  }
-  const summary = [
-    wrote && `${wrote} written`,
-    skipped && `${skipped} already present`,
-    failed && `${failed} failed`
-  ].filter(Boolean).join(", ");
-  if (summary) {
-    if (!options.silent)
-      console.log(`  Done — ${summary}`);
-  }
-}
-
-// src/init/mcp.ts
-import { existsSync as existsSync4 } from "node:fs";
-import { join as join3 } from "node:path";
-import { execSync } from "node:child_process";
-function isOnPath(cmd) {
-  try {
-    execSync(`which ${cmd}`, { stdio: "pipe" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function detectAgents() {
-  const cwd = process.cwd();
-  const agents = [];
-  if (existsSync4(join3(cwd, ".claude")) || isOnPath("claude")) {
-    agents.push("Claude Code");
-  }
-  if (existsSync4(join3(cwd, ".cursor"))) {
-    agents.push("Cursor");
-  }
-  return agents;
-}
-
-// src/skills.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
-import { createHash as createHash2 } from "node:crypto";
-import {
-  existsSync as existsSync6,
-  lstatSync as lstatSync2,
-  mkdirSync as mkdirSync4,
-  readdirSync as readdirSync3,
-  readFileSync as readFileSync4,
-  writeFileSync as writeFileSync5
-} from "node:fs";
-import { basename, dirname as dirname4, join as join5, relative as relative3 } from "node:path";
-
-// src/skills-manifest.ts
-import {
-  existsSync as existsSync5,
-  mkdirSync as mkdirSync3,
-  readdirSync as readdirSync2,
-  readFileSync as readFileSync3,
-  rmdirSync,
-  unlinkSync,
-  writeFileSync as writeFileSync4
-} from "node:fs";
-import { dirname as dirname3, isAbsolute as isAbsolute4, join as join4, normalize, relative as relative2, resolve as resolve4 } from "node:path";
-var SKILLS_MANIFEST_PATH = join4(".moda", "skills.yml");
-var SKILL_SOURCE_HARNESS = "moda";
-var SKILL_SOURCE_INTEGRATION_BUNDLED = "integration-bundled";
-function readSkillsManifest(cwd) {
-  const manifestPath = join4(cwd, SKILLS_MANIFEST_PATH);
-  if (!existsSync5(manifestPath))
-    return null;
-  let text = "";
-  try {
-    text = readFileSync3(manifestPath, "utf8");
-  } catch {
-    return null;
-  }
-  return {
-    tenantId: readYamlScalar(text, "tenant_id"),
-    generationRunId: readYamlScalar(text, "generation_run_id"),
-    generationVersion: Number(readYamlScalar(text, "generation_version") || 0),
-    releaseKey: readYamlScalar(text, "release_key"),
-    statusFilter: readYamlScalar(text, "status_filter"),
-    releasedAt: readYamlScalar(text, "released_at"),
-    managedPaths: readManagedPaths(text),
-    records: readSkillRecords(text)
-  };
-}
-function manifestHeaderFrom(manifest) {
-  return {
-    tenantId: manifest?.tenantId ?? "",
-    releaseKey: manifest?.releaseKey ?? "",
-    statusFilter: manifest?.statusFilter ?? "",
-    generationRunId: manifest?.generationRunId ?? "",
-    generationVersion: manifest?.generationVersion ?? 0,
-    releasedAt: manifest?.releasedAt ?? ""
-  };
-}
-function writeSkillsManifest(cwd, header, records) {
-  const manifestPath = join4(cwd, SKILLS_MANIFEST_PATH);
-  const managedPaths = [...new Set(records.flatMap((record) => record.paths))].sort();
-  const lines = [
-    "version: 1",
-    "source: moda",
-    `tenant_id: ${yamlQuote(header.tenantId)}`,
-    `release_key: ${yamlQuote(header.releaseKey)}`,
-    `status_filter: ${yamlQuote(header.statusFilter)}`,
-    `generation_run_id: ${yamlQuote(header.generationRunId)}`,
-    `generation_version: ${header.generationVersion}`,
-    `released_at: ${yamlQuote(header.releasedAt)}`,
-    `installed_at: ${yamlQuote(new Date().toISOString())}`,
-    "managed_paths:",
-    ...managedPaths.map((path) => `  - ${yamlQuote(path)}`),
-    "skills:",
-    ...records.flatMap((record) => [
-      `  - skill_id: ${yamlQuote(record.skillId)}`,
-      `    content_hash: ${yamlQuote(record.contentHash)}`,
-      `    source: ${yamlQuote(record.source)}`,
-      "    paths:",
-      ...record.paths.map((path) => `      - ${yamlQuote(path)}`)
-    ]),
-    ""
-  ];
-  mkdirSync3(dirname3(manifestPath), { recursive: true });
-  writeFileSync4(manifestPath, lines.join(`
-`));
-}
-function upsertSkillManifestRecord(cwd, record) {
-  const manifest = readSkillsManifest(cwd);
-  const records = (manifest?.records ?? []).filter((existing) => !(existing.skillId === record.skillId && existing.source === record.source));
-  records.push(record);
-  writeSkillsManifest(cwd, manifestHeaderFrom(manifest), records);
-}
-function pruneManagedSkillPaths(cwd, managedPaths, log) {
-  let pruned = 0;
-  for (const rawPath of [...new Set(managedPaths)]) {
-    const safePath = safeManagedRelativePath(rawPath);
-    if (!safePath)
-      continue;
-    const absolutePath = absoluteManagedPath(cwd, safePath);
-    if (!absolutePath || !existsSync5(absolutePath))
-      continue;
-    try {
-      unlinkSync(absolutePath);
-      pruned++;
-      log(`  pruned ${safePath}`);
-      pruneEmptyClaudeSkillDir(cwd, safePath);
-    } catch {}
-  }
-  return pruned;
-}
-function pruneEmptyClaudeSkillDir(cwd, relativePath) {
-  if (!relativePath.startsWith(".claude/skills/") || !relativePath.endsWith("/SKILL.md"))
-    return;
-  const dir = dirname3(join4(cwd, relativePath));
-  try {
-    if (existsSync5(dir) && readdirSync2(dir).length === 0) {
-      rmdirSync(dir);
-    }
-  } catch {}
-}
-function absoluteManagedPath(cwd, relativePath) {
-  const abs = resolve4(cwd, relativePath);
-  const root = resolve4(cwd);
-  const rel = relative2(root, abs);
-  if (rel.startsWith("..") || isAbsolute4(rel))
-    return null;
-  return abs;
-}
-function safeManagedRelativePath(rawPath) {
-  if (!rawPath || rawPath.includes("\x00") || isAbsolute4(rawPath))
-    return null;
-  const normalized = normalize(rawPath).replace(/\\/g, "/");
-  if (normalized.startsWith("../") || normalized === ".." || normalized.includes("/../"))
-    return null;
-  const isClaudeSkill = normalized.startsWith(".claude/skills/") && normalized.endsWith("/SKILL.md");
-  const isCursorRule = normalized.startsWith(".cursor/rules/") && normalized.endsWith(".mdc");
-  return isClaudeSkill || isCursorRule ? normalized : null;
-}
-function readYamlScalar(text, key) {
-  const match = text.match(new RegExp(`^${key}:\\s*(.*?)\\s*$`, "m"));
-  return match ? parseYamlScalar(match[1]) : "";
-}
-function readSkillRecords(text) {
-  const records = [];
-  let inSkills = false;
-  let current = null;
-  let inPaths = false;
-  for (const line of text.split(/\r?\n/)) {
-    if (line.trim() === "skills:") {
-      inSkills = true;
-      continue;
-    }
-    if (!inSkills)
-      continue;
-    if (line.length > 0 && !line.startsWith(" "))
-      break;
-    const skillIdMatch = line.match(/^ {2}- skill_id:\s*(.*?)\s*$/);
-    if (skillIdMatch) {
-      if (current)
-        records.push(current);
-      current = {
-        skillId: parseYamlScalar(skillIdMatch[1]),
-        contentHash: "",
-        source: SKILL_SOURCE_HARNESS,
-        paths: []
-      };
-      inPaths = false;
-      continue;
-    }
-    if (!current)
-      continue;
-    const hashMatch = line.match(/^ {4}content_hash:\s*(.*?)\s*$/);
-    if (hashMatch) {
-      current.contentHash = parseYamlScalar(hashMatch[1]);
-      continue;
-    }
-    const sourceMatch = line.match(/^ {4}source:\s*(.*?)\s*$/);
-    if (sourceMatch) {
-      current.source = parseYamlScalar(sourceMatch[1]) || SKILL_SOURCE_HARNESS;
-      continue;
-    }
-    if (/^ {4}paths:\s*$/.test(line)) {
-      inPaths = true;
-      continue;
-    }
-    const pathMatch = inPaths ? line.match(/^ {6}-\s*(.*?)\s*$/) : null;
-    if (pathMatch) {
-      const value = parseYamlScalar(pathMatch[1]);
-      if (value)
-        current.paths.push(value);
-    }
-  }
-  if (current)
-    records.push(current);
-  return records;
-}
-function readManagedPaths(text) {
-  const paths = [];
-  let inManagedPaths = false;
-  for (const line of text.split(/\r?\n/)) {
-    if (line.trim() === "managed_paths:") {
-      inManagedPaths = true;
-      continue;
-    }
-    if (inManagedPaths && line.length > 0 && !line.startsWith(" "))
-      break;
-    if (!inManagedPaths)
-      continue;
-    const match = line.match(/^\s*-\s*(.*?)\s*$/);
-    if (match)
-      paths.push(parseYamlScalar(match[1]));
-  }
-  return paths.filter(Boolean);
-}
-function parseYamlScalar(raw) {
-  const value = raw.trim();
-  if (!value)
-    return "";
-  if (value.startsWith('"')) {
-    try {
-      return String(JSON.parse(value));
-    } catch {
-      return value.replace(/^"|"$/g, "");
-    }
-  }
-  return value.replace(/^'|'$/g, "");
-}
-function yamlQuote(value) {
-  return JSON.stringify(value);
-}
-
-// src/skills.ts
-var SKILLS_REQUEST_TIMEOUT_MS = 15000;
-var VALID_STATUSES = new Set(["approved", "proposed", "all"]);
-var SKILL_PROPOSALS_MANIFEST_PATH = join5(".moda", "skill-proposals.yml");
-async function fetchSkills(status) {
-  const apiKey = resolveApiKey();
-  if (!apiKey) {
-    throw new CliInputError("No Moda API key found. Run `moda init` first (or set MODA_API_KEY).");
-  }
-  const ingestUrl = resolveIngestUrl().replace(/\/$/, "");
-  const url = `${ingestUrl}/v1/skills?status=${encodeURIComponent(status)}`;
-  const controller = new AbortController;
-  const timeout = setTimeout(() => controller.abort(), SKILLS_REQUEST_TIMEOUT_MS);
-  let response;
-  try {
-    response = await fetch(url, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: controller.signal
-    });
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    throw new Error(`Network error: failed to reach ${ingestUrl} (${message})`);
-  } finally {
-    clearTimeout(timeout);
-  }
-  if (!response.ok) {
-    const body = await response.text().catch(() => "");
-    throw new Error(`Failed to fetch skills (HTTP ${response.status}): ${body.slice(0, 200)}`);
-  }
-  const data = await response.json();
-  if (!data.success) {
-    throw new Error(data.message || "Failed to fetch skills");
-  }
-  const skills = Array.isArray(data.skills) ? data.skills : [];
-  const release = data.release && typeof data.release === "object" ? data.release : null;
-  return {
-    skills,
-    tenantId: data.tenant_id || resolveTenantId() || "",
-    release,
-    releaseKey: releaseKeyFor(release, skills, status),
-    status
-  };
-}
-async function skillRunsRequest(url) {
-  const apiKey = resolveApiKey();
-  if (!apiKey) {
-    throw new CliInputError("No Moda API key found. Run `moda init` first (or set MODA_API_KEY).");
-  }
-  const controller = new AbortController;
-  const timeout = setTimeout(() => controller.abort(), SKILLS_REQUEST_TIMEOUT_MS);
-  let response;
-  try {
-    response = await fetch(url, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: controller.signal
-    });
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    throw new Error(`Network error: failed to reach ${url} (${message})`);
-  } finally {
-    clearTimeout(timeout);
-  }
-  const text = await response.text().catch(() => "");
-  if (!response.ok && response.status !== 404) {
-    throw new Error(`Failed to fetch run status (HTTP ${response.status}): ${text.slice(0, 200)}`);
-  }
-  let body = {};
-  try {
-    body = text ? JSON.parse(text) : {};
-  } catch {
-    body = {};
-  }
-  return { status: response.status, body };
-}
-async function fetchSkillRunStatus(runId) {
-  const ingestUrl = resolveIngestUrl().replace(/\/$/, "");
-  let resolvedRunId = runId;
-  if (!resolvedRunId) {
-    const list = await skillRunsRequest(`${ingestUrl}/v1/skills/runs?limit=1`);
-    const listBody = list.body;
-    const latest = Array.isArray(listBody.runs) ? listBody.runs[0] : undefined;
-    if (!latest)
-      return { run: null, events: [] };
-    resolvedRunId = latest.generation_run_id;
-    if (!resolvedRunId)
-      return { run: latest, events: [] };
-  }
-  const detail = await skillRunsRequest(`${ingestUrl}/v1/skills/runs/${encodeURIComponent(resolvedRunId)}`);
-  if (detail.status === 404) {
-    if (runId) {
-      throw new CliInputError(`No skill generation run found with id '${runId}'`);
-    }
-    return { run: null, events: [] };
-  }
-  const detailBody = detail.body;
-  return {
-    run: detailBody.run ?? null,
-    events: Array.isArray(detailBody.events) ? detailBody.events : []
-  };
-}
-var STATUS_HUMAN_EVENT_LIMIT = 10;
-function formatRunStatusHuman(run, events) {
-  const counters = run.counters ?? {};
-  const lines = [
-    run.generation_run_id && `run: ${run.generation_run_id}`,
-    `status: ${run.status || "unknown"}`,
-    run.current_stage && `stage: ${run.current_stage}`,
-    run.outcome && `outcome: ${run.outcome}`,
-    `processed: ${Number(counters.sessions_processed ?? 0)}`,
-    `failed: ${Number(counters.sessions_failed ?? 0)}`,
-    Number(counters.distilled_skills_generated ?? 0) > 0 && `distilled: ${Number(counters.distilled_skills_generated ?? 0)}`,
-    Number(counters.skills_indexed ?? 0) > 0 && `indexed: ${Number(counters.skills_indexed ?? 0)}`,
-    (run.generated_skill_ids?.length ?? 0) > 0 && `skills: ${(run.generated_skill_ids ?? []).join(", ")}`,
-    run.error && `error: ${run.error}`,
-    run.started_at && `started: ${run.started_at}`,
-    run.updated_at && `updated: ${run.updated_at}`
-  ].filter(Boolean);
-  if (events.length > 0) {
-    lines.push("recent events (newest first):");
-    for (const event of events.slice(0, STATUS_HUMAN_EVENT_LIMIT)) {
-      lines.push(`  ${[event.created_at, event.level, event.stage, event.message].filter(Boolean).join("  ")}`);
-    }
-  }
-  return lines.join(`
-`);
-}
-function writeIfChanged(filePath, content) {
-  try {
-    mkdirSync4(dirname4(filePath), { recursive: true });
-    if (existsSync6(filePath)) {
-      const current = readFileSync4(filePath, "utf8");
-      if (current === content)
-        return "unchanged";
-      writeFileSync5(filePath, content);
-      return "updated";
-    }
-    writeFileSync5(filePath, content);
-    return "wrote";
-  } catch {
-    return "failed";
-  }
-}
-async function pullSkills(options = {}) {
-  const status = options.status ?? "approved";
-  const cwd = options.cwd ?? process.cwd();
-  const log = (msg) => {
-    if (!options.silent)
-      console.log(msg);
-  };
-  const fetched = await fetchSkills(status);
-  const { skills } = fetched;
-  const summary = {
-    total: skills.length,
-    pruned: 0,
-    wrote: 0,
-    updated: 0,
-    unchanged: 0,
-    failed: 0
-  };
-  if (skills.length === 0) {
-    log("  No skills to pull yet.");
-    return summary;
-  }
-  const previousManifest = readSkillsManifest(cwd);
-  const preservedIntegrationRecords = (previousManifest?.records ?? []).filter((record) => record.source === SKILL_SOURCE_INTEGRATION_BUNDLED);
-  if (previousManifest && previousManifest.managedPaths.length > 0 && previousManifest.releaseKey !== fetched.releaseKey) {
-    const integrationPaths = new Set(preservedIntegrationRecords.flatMap((record) => record.paths));
-    const harnessPaths = previousManifest.managedPaths.filter((path) => !integrationPaths.has(path));
-    if (harnessPaths.length > 0) {
-      summary.pruned = pruneManagedSkillPaths(cwd, harnessPaths, log);
-    }
-  }
-  const agents = detectAgents();
-  const writeCursor = agents.includes("Cursor") || existsSync6(join5(cwd, ".cursor"));
-  const records = [];
-  for (const skill of skills) {
-    if (!skill.skill_id || !skill.skill_md) {
-      summary.failed++;
-      continue;
-    }
-    const safeId = basename(skill.skill_id);
-    if (!safeId || !/^[A-Za-z0-9_-]+$/.test(safeId)) {
-      summary.failed++;
-      log(`  skipped invalid skill_id: ${JSON.stringify(skill.skill_id).slice(0, 80)}`);
-      continue;
-    }
-    const claudePath = join5(cwd, ".claude", "skills", safeId, "SKILL.md");
-    const claudeStatus = writeIfChanged(claudePath, skill.skill_md);
-    const claudeRelativePath = `.claude/skills/${safeId}/SKILL.md`;
-    recordOutcome(summary, claudeStatus, log, claudeRelativePath);
-    const paths = [];
-    if (claudeStatus !== "failed")
-      paths.push(claudeRelativePath);
-    if (writeCursor) {
-      const cursorPath = join5(cwd, ".cursor", "rules", `${safeId}.mdc`);
-      const cursorStatus = writeIfChanged(cursorPath, claudeSkillToCursorRule(skill.skill_md));
-      const cursorRelativePath = `.cursor/rules/${safeId}.mdc`;
-      recordOutcome(summary, cursorStatus, log, cursorRelativePath);
-      if (cursorStatus !== "failed")
-        paths.push(cursorRelativePath);
-    }
-    if (paths.length > 0) {
-      records.push({
-        skillId: safeId,
-        contentHash: sha2562(skill.skill_md),
-        source: SKILL_SOURCE_HARNESS,
-        paths
-      });
-    }
-  }
-  writeSkillsManifest(cwd, manifestHeaderFor(fetched), [...records, ...preservedIntegrationRecords]);
-  return summary;
-}
-function recordOutcome(summary, status, log, relativePath) {
-  switch (status) {
-    case "wrote":
-      summary.wrote++;
-      log(`  wrote ${relativePath}`);
-      break;
-    case "updated":
-      summary.updated++;
-      log(`  updated ${relativePath}`);
-      break;
-    case "unchanged":
-      summary.unchanged++;
-      break;
-    case "failed":
-      summary.failed++;
-      log(`  failed ${relativePath}`);
-      break;
-  }
-}
-var SKILLS_DIR = join5(".claude", "skills");
-var SKILL_FILE = "SKILL.md";
-var MAX_SKILL_WALK_DEPTH = 4;
-async function runSkillSync(flags = {}, profileOptions = {}, options = {}) {
-  const cwd = options.cwd ?? process.cwd();
-  const dryRun = flags["dry-run"] === "true";
-  const skills = discoverLocalSkills(cwd);
-  if (skills.length === 0) {
-    return { synced: [], dryRun };
-  }
-  const sourceCommit = getGitCommit2(cwd);
-  const response = await callControlAPI("/skills/sync", {
-    method: "POST",
-    body: JSON.stringify({
-      skills: skills.map((skill) => ({
-        key: skill.key,
-        name: skill.name,
-        description: skill.description,
-        skillMd: skill.skillMd,
-        sourcePath: skill.sourcePath,
-        contentHash: skill.contentHash,
-        sourceCommit
-      })),
-      sourceCommit,
-      dryRun
-    })
-  }, profileOptions);
-  return { synced: response.synced ?? [], dryRun };
-}
-function discoverLocalSkills(cwd) {
-  const skillsRoot = join5(cwd, SKILLS_DIR);
-  if (!existsSync6(skillsRoot))
-    return [];
-  const managed = new Set(managedSkillPaths(cwd));
-  const skills = [];
-  for (const absPath of walkSkillFiles(skillsRoot, 0)) {
-    const sourcePath = relative3(cwd, absPath).replace(/\\/g, "/");
-    if (managed.has(sourcePath))
-      continue;
-    const key = basename(dirname4(absPath));
-    if (key === "moda-cli" || !/^[A-Za-z0-9_-]+$/.test(key))
-      continue;
-    let content;
-    try {
-      content = readFileSync4(absPath, "utf8");
-    } catch {
-      continue;
-    }
-    if (!content.trim())
-      continue;
-    const { name, description } = parseSkillFrontmatter(content, key);
-    skills.push({
-      key,
-      name,
-      description,
-      skillMd: content,
-      sourcePath,
-      contentHash: sha2562(content)
-    });
-  }
-  return skills.sort((a, b) => a.key.localeCompare(b.key));
-}
-function managedSkillPaths(cwd) {
-  const manifest = readSkillsManifest(cwd);
-  if (!manifest)
-    return [];
-  return manifest.managedPaths.filter((path) => path.startsWith(".claude/skills/") && path.endsWith("/SKILL.md"));
-}
-function walkSkillFiles(dir, depth) {
-  if (depth > MAX_SKILL_WALK_DEPTH)
-    return [];
-  let entries;
-  try {
-    entries = readdirSync3(dir);
-  } catch {
-    return [];
-  }
-  const files = [];
-  for (const entry of entries) {
-    const fullPath = join5(dir, entry);
-    let stat;
-    try {
-      stat = lstatSync2(fullPath);
-    } catch {
-      continue;
-    }
-    if (stat.isSymbolicLink())
-      continue;
-    if (stat.isDirectory()) {
-      files.push(...walkSkillFiles(fullPath, depth + 1));
-    } else if (stat.isFile() && entry === SKILL_FILE) {
-      files.push(fullPath);
-    }
-  }
-  return files;
-}
-function parseSkillFrontmatter(raw, fallbackKey) {
-  let name = fallbackKey;
-  let description;
-  if (raw.startsWith("---")) {
-    const end = raw.indexOf(`
----`, 3);
-    if (end !== -1) {
-      const frontmatter = raw.slice(3, end);
-      const nameMatch = frontmatter.match(/^name:\s*(.+)$/m);
-      const descMatch = frontmatter.match(/^description:\s*(.+)$/m);
-      if (nameMatch)
-        name = stripQuotes(nameMatch[1].trim()) || fallbackKey;
-      if (descMatch)
-        description = stripQuotes(descMatch[1].trim()) || undefined;
-    }
-  }
-  return { name, description };
-}
-function stripQuotes(value) {
-  return value.replace(/^["']|["']$/g, "");
-}
-function getGitCommit2(cwd) {
-  try {
-    return execFileSync2("git", ["rev-parse", "HEAD"], {
-      cwd,
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-  } catch {
-    return;
-  }
-}
-async function fetchSkillProposals(flags, profileOptions = {}) {
-  const params = new URLSearchParams;
-  if (flags["generation-run-id"])
-    params.set("generationRunId", flags["generation-run-id"]);
-  const status = flags.status ?? "ready_for_pr";
-  if (status !== "all")
-    params.set("status", status);
-  if (flags["tenant-id"])
-    params.set("tenantId", flags["tenant-id"]);
-  const suffix = params.toString() ? `?${params.toString()}` : "";
-  const response = await callControlAPI(`/skills/proposals${suffix}`, { method: "GET" }, profileOptions);
-  return Array.isArray(response.proposals) ? response.proposals : [];
-}
-async function applySkillProposal(proposalId, flags, profileOptions = {}, options = {}) {
-  const cwd = options.cwd ?? process.cwd();
-  const params = new URLSearchParams;
-  if (flags["tenant-id"])
-    params.set("tenantId", flags["tenant-id"]);
-  const suffix = params.toString() ? `?${params.toString()}` : "";
-  const proposal = await callControlAPI(`/skills/proposals/${encodeURIComponent(proposalId)}${suffix}`, { method: "GET" }, profileOptions);
-  if (!proposal.skillMd?.trim()) {
-    throw new CliInputError(`Proposal ${proposalId} does not include SKILL.md content`);
-  }
-  const safeId = safeSkillId(proposal.skillId);
-  const relativePath = `.claude/skills/${safeId}/SKILL.md`;
-  const writeStatus = writeIfChanged(join5(cwd, relativePath), proposal.skillMd);
-  if (writeStatus === "failed") {
-    throw new Error(`Failed to write ${relativePath}`);
-  }
-  writeSkillProposalManifest(cwd, proposal, relativePath);
-  let acknowledged = true;
-  let ackError;
-  try {
-    await callControlAPI(`/skills/proposals/${encodeURIComponent(proposalId)}/mark-applied${suffix}`, {
-      method: "POST",
-      body: JSON.stringify({ appliedBy: "moda-cli" })
-    }, profileOptions);
-  } catch (err) {
-    acknowledged = false;
-    ackError = err instanceof Error ? err.message : String(err);
-  }
-  return {
-    proposalId,
-    skillId: proposal.skillId,
-    path: relativePath,
-    status: writeStatus,
-    acknowledged,
-    ackError
-  };
-}
-function safeSkillId(skillId) {
-  const safeId = basename(skillId || "");
-  if (!safeId || !/^[A-Za-z0-9_-]+$/.test(safeId)) {
-    throw new CliInputError(`Invalid skill_id in proposal: ${JSON.stringify(skillId).slice(0, 80)}`);
-  }
-  return safeId;
-}
-function writeSkillProposalManifest(cwd, proposal, relativePath) {
-  const manifestPath = join5(cwd, SKILL_PROPOSALS_MANIFEST_PATH);
-  mkdirSync4(dirname4(manifestPath), { recursive: true });
-  const existing = existsSync6(manifestPath) ? readFileSync4(manifestPath, "utf8") : `applied_proposals:
-`;
-  const entry = [
-    `  - proposal_id: "${escapeYamlString(proposal.proposalId)}"`,
-    `    skill_id: "${escapeYamlString(proposal.skillId)}"`,
-    `    skill_family_id: "${escapeYamlString(proposal.skillFamilyId)}"`,
-    `    skill_version: ${Number(proposal.skillVersion || 0)}`,
-    `    generation_run_id: "${escapeYamlString(proposal.generationRunId)}"`,
-    `    clustering_run_id: "${escapeYamlString(proposal.clusteringRunId)}"`,
-    `    topic_id: "${escapeYamlString(proposal.topicId)}"`,
-    `    replay_set_id: "${escapeYamlString(proposal.replaySetId)}"`,
-    `    delta_pass_rate: ${Number(proposal.deltaPassRate || 0)}`,
-    `    path: "${escapeYamlString(relativePath)}"`,
-    `    applied_at: "${new Date().toISOString()}"`
-  ].join(`
-`);
-  const prefix = existing.endsWith(`
-`) ? existing : `${existing}
-`;
-  writeFileSync5(manifestPath, `${prefix}${entry}
-`);
-}
-function escapeYamlString(value) {
-  return String(value ?? "").replace(/\\/g, "\\\\").replace(/"/g, "\\\"");
-}
-function formatProposalRate(value) {
-  return `${(Number(value || 0) * 100).toFixed(1)}%`;
-}
-async function runSkillsCommand(input) {
-  const context = "output" in input ? input : createCommandContext({
-    command: input.command,
-    positional: input.positional,
-    positionals: input.positionals,
-    flags: input.flags
-  }, {
-    outputMode: input.flags.agent === "true" ? "agent" : input.flags.json === "true" ? "json" : "human"
-  });
-  const sub = context.positional;
-  const positionals = context.positionals ?? (sub ? [sub] : []);
-  const flags = context.flags;
-  if (sub === "gen") {
-    const result = await generateSkills(flags);
-    if (context.outputMode !== "human") {
-      context.output.writeData(result, {
-        status: Number(result.sessions_failed ?? 0) > 0 ? "error" : "success"
-      });
-    } else if (result.accepted) {
-      console.log([
-        "accepted: true",
-        result.generation_run_id && `generation_run_id: ${result.generation_run_id}`,
-        result.message && `message: ${result.message}`,
-        result.generation_run_id && `follow progress: moda skills status ${result.generation_run_id}`
-      ].filter(Boolean).join(`
-`));
-    } else {
-      console.log([
-        `processed: ${result.sessions_processed ?? 0}`,
-        `failed: ${result.sessions_failed ?? 0}`,
-        `pending: ${result.sessions_pending ?? 0}`,
-        `pending_found: ${result.pending_sessions_found ?? 0}`,
-        `distilled: ${Number(result.cluster_result?.distilled_skills_generated ?? 0)}`,
-        `indexed: ${Number(result.cluster_result?.skills_indexed ?? 0)}`,
-        result.distillation_skipped && `distillation skipped: ${result.distillation_skip_reason || "unknown"}`
-      ].filter(Boolean).join(`
-`));
-    }
-    return Number(result.sessions_failed ?? 0) > 0 ? 1 : 0;
-  }
-  if (sub === "status") {
-    const runId = positionals[1] || flags["run-id"] || undefined;
-    const { run, events } = await fetchSkillRunStatus(runId);
-    if (context.outputMode !== "human") {
-      context.output.writeData({ run, events }, { status: run?.status === "failed" ? "error" : "success" });
-    } else if (!run) {
-      console.log("No skill generation runs found yet. Start one with `moda skills gen`.");
-    } else {
-      console.log(formatRunStatusHuman(run, events));
-    }
-    return run?.status === "failed" ? 1 : 0;
-  }
-  if (sub === "proposals" && positionals[1] === "list") {
-    const proposals = await fetchSkillProposals(flags, { profile: context.profile });
-    if (flags.json === "true") {
-      console.log(JSON.stringify({ proposals }));
-    } else if (proposals.length === 0) {
-      console.log("No skill proposals found.");
-    } else {
-      for (const proposal of proposals) {
-        console.log([
-          proposal.proposalId,
-          proposal.proposalStatus,
-          `${proposal.skillId}@v${proposal.skillVersion}`,
-          `delta=${formatProposalRate(proposal.deltaPassRate)}`,
-          `baseline=${formatProposalRate(proposal.baselinePassRate)}`,
-          `candidate=${formatProposalRate(proposal.candidatePassRate)}`,
-          proposal.name
-        ].filter(Boolean).join("\t"));
-      }
-    }
-    return 0;
-  }
-  if (sub === "proposal" && positionals[1] === "apply") {
-    const proposalId = positionals[2] || flags["proposal-id"];
-    if (!proposalId) {
-      throw new CliInputError("A proposal id is required", "Usage: moda skills proposal apply <proposal-id>");
-    }
-    const result = await applySkillProposal(proposalId, flags, { profile: context.profile });
-    if (flags.json === "true") {
-      console.log(JSON.stringify(result));
-    } else {
-      console.log([
-        `${result.status} ${result.path}`,
-        result.acknowledged ? "acknowledged: true" : "acknowledged: false"
-      ].join(`
-`));
-    }
-    if (!result.acknowledged) {
-      console.error(`Warning: wrote ${result.path} but failed to acknowledge proposal ${proposalId} on the server` + (result.ackError ? ` (${result.ackError})` : "") + ". The proposal is still listed as ready — re-run `moda skills proposal apply` to acknowledge it.");
-      return 1;
-    }
-    return 0;
-  }
-  if (sub === "sync") {
-    const result = await runSkillSync(flags, { profile: context.profile, env: context.env });
-    context.output.writeData({ synced: result.synced, dryRun: result.dryRun });
-    return 0;
-  }
-  if (sub !== "pull") {
-    throw new CliInputError(sub ? `Unknown skills subcommand '${sub}'` : "A skills subcommand is required", "Usage: moda skills gen [--source=all|sdk] [--max-sessions=N] [--start-at=ISO] [--end-at=ISO] [--replay] [--replay-set-id=ID] [--reprocess-segments] [--force-reprocess] [--wait] | moda skills status [run-id] | moda skills proposals list [--status=ready_for_pr] | moda skills proposal apply <proposal-id> | moda skills pull [--status=approved|proposed|all] | moda skills sync [--dry-run]");
-  }
-  const status = (flags.status ?? "approved").toLowerCase();
-  if (!VALID_STATUSES.has(status)) {
-    throw new CliInputError(`Invalid --status '${status}'`, `Must be one of: ${[...VALID_STATUSES].join(", ")}`);
-  }
-  const summary = await pullSkills({ status, silent: context.outputMode !== "human" });
-  const parts = [
-    summary.pruned && `${summary.pruned} pruned`,
-    summary.wrote && `${summary.wrote} written`,
-    summary.updated && `${summary.updated} updated`,
-    summary.unchanged && `${summary.unchanged} unchanged`,
-    summary.failed && `${summary.failed} failed`
-  ].filter(Boolean);
-  if (context.outputMode === "human" && summary.total > 0) {
-    console.log(`  Done — ${parts.join(", ") || "no changes"}`);
-  }
-  if (context.outputMode !== "human") {
-    context.output.writeData({ status, summary });
-  }
-  return summary.failed > 0 ? 1 : 0;
-}
-async function generateSkills(flags) {
-  const apiKey = resolveApiKey();
-  if (!apiKey) {
-    throw new CliInputError("No Moda API key found. Run `moda init` first (or set MODA_API_KEY).");
-  }
-  const tenantId = flags["tenant-id"] || resolveTenantId();
-  const directHarnessUrl = flags["harness-url"] || process.env.MODA_SKILL_HARNESS_URL;
-  if (directHarnessUrl && !tenantId) {
-    throw new CliInputError("No Moda tenant id found. Run `moda init` first (or set MODA_TENANT_ID / --tenant-id).");
-  }
-  const endpoint = directHarnessUrl ? `${directHarnessUrl.replace(/\/+$/, "")}/skills/generate` : `${resolveIngestUrl().replace(/\/+$/, "")}/v1/skills/generate`;
-  const waitForCompletion = flags.wait === "true" || flags["wait-for-completion"] === "true";
-  const forceReprocess = flags["force-reprocess"] === "true";
-  const source = normalizeSkillSource(flags.source);
-  if (source === "coding_agent") {
-    console.error("Note: --source=coding-agent is deprecated for skills gen (SDK-only). The run will find no coding-agent sessions; use --source=all or --source=sdk.");
-  }
-  const body = compactObject({
-    tenant_id: tenantId || undefined,
-    max_sessions: parsePositiveInt3(flags["max-sessions"], 0),
-    lookback_hours: parsePositiveInt3(flags["lookback-hours"], 0),
-    start_at: flags["start-at"] || undefined,
-    end_at: flags["end-at"] || undefined,
-    clustering_run_id: flags["clustering-run-id"] || undefined,
-    replay_set_id: flags["replay-set-id"] || flags["eval-set-id"] || undefined,
-    run_clustering: flags["no-clustering"] !== "true",
-    source,
-    clustering_timeout_seconds: parsePositiveInt3(flags["clustering-timeout-seconds"], 7200),
-    clustering_poll_seconds: parsePositiveInt3(flags["clustering-poll-seconds"], 15),
-    max_cluster_pct: parseOptionalFloat(flags["max-cluster-pct"]),
-    reprocess_segments: flags["reprocess-segments"] === "true" || forceReprocess,
-    run_replay: flags.replay === "true" && flags["no-replay"] !== "true",
-    max_traces: parsePositiveInt3(flags["max-traces"], 0),
-    improve_candidates: flags["improve-candidates"] === "true",
-    improvement_rounds: parsePositiveInt3(flags["improvement-rounds"], 2),
-    force_reprocess: forceReprocess,
-    wait_for_completion: waitForCompletion
-  });
-  const headers = {
-    Authorization: `Bearer ${apiKey}`,
-    "Content-Type": "application/json"
-  };
-  if (tenantId)
-    headers["X-Moda-Tenant-Id"] = tenantId;
-  const response = await fetch(endpoint, {
-    method: "POST",
-    headers,
-    body: JSON.stringify(body)
-  });
-  if (!response.ok) {
-    const text = await response.text().catch(() => "");
-    throw new Error(`Failed to generate skills (HTTP ${response.status}): ${text.slice(0, 200)}`);
-  }
-  return await response.json();
-}
-function parsePositiveInt3(value, fallback) {
-  if (!value)
-    return fallback;
-  const parsed = Number.parseInt(value, 10);
-  return Number.isFinite(parsed) && parsed >= 0 ? parsed : fallback;
-}
-function parseOptionalFloat(value) {
-  if (!value)
-    return;
-  const parsed = Number.parseFloat(value);
-  return Number.isFinite(parsed) ? parsed : undefined;
-}
-function compactObject(input) {
-  return Object.fromEntries(Object.entries(input).filter(([, value]) => value !== undefined));
-}
-function normalizeSkillSource(value) {
-  const normalized = (value || "all").toLowerCase().replace(/-/g, "_");
-  if (["all", "sdk", "coding_agent"].includes(normalized))
-    return normalized;
-  return "all";
-}
-function releaseKeyFor(release, skills, status) {
-  if (release?.generation_run_id)
-    return `${status}:run:${release.generation_run_id}`;
-  if (Number(release?.generation_version || 0) > 0) {
-    return `${status}:version:${Number(release?.generation_version)}`;
-  }
-  return `${status}:legacy:${sha2562(JSON.stringify(skills.map((skill) => ({
-    skill_id: skill.skill_id,
-    hash: sha2562(skill.skill_md || "")
-  })).sort((a, b) => a.skill_id.localeCompare(b.skill_id))))}`;
-}
-function manifestHeaderFor(fetched) {
-  const release = fetched.release;
-  return {
-    tenantId: fetched.tenantId,
-    releaseKey: fetched.releaseKey,
-    statusFilter: fetched.status,
-    generationRunId: release?.generation_run_id || "",
-    generationVersion: Number(release?.generation_version || 0),
-    releasedAt: release?.released_at || ""
-  };
-}
-function sha2562(input) {
-  return createHash2("sha256").update(input).digest("hex");
-}
-
 // src/harness-remote.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync9 } from "node:fs";
-import { join as join8 } from "node:path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join3 } from "node:path";
 
 // src/markdown-terminal.ts
 function shouldColorTerminalOutput(opts = {}) {
@@ -2213,23 +267,23 @@ function collapseBlankRuns(lines) {
 }
 
 // src/harness-report.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash } from "node:crypto";
 import {
-  existsSync as existsSync7,
-  lstatSync as lstatSync3,
-  mkdirSync as mkdirSync5,
-  readFileSync as readFileSync5,
-  writeFileSync as writeFileSync6
+  existsSync,
+  lstatSync,
+  mkdirSync,
+  readFileSync,
+  writeFileSync
 } from "node:fs";
-import { basename as basename2, dirname as dirname5, join as join6, relative as relative4, resolve as resolve5 } from "node:path";
-import { confirm as confirm2 } from "@inquirer/prompts";
+import { basename, dirname, join, relative, resolve } from "node:path";
+import { confirm } from "@inquirer/prompts";
 var HARNESS_REPORT_SCHEMA_VERSION = "harness_report.v0.1";
 var HARNESS_REPORT_VALIDATION_SCHEMA_VERSION = "harness_report_validation.v0.1";
 var HARNESS_REPORT_APPROVAL_SCHEMA_VERSION = "harness_report_approval.v0.1";
-var HARNESS_REPORT_PATH = join6(".moda", "harness-report.json");
-var HARNESS_REPORT_MARKDOWN_PATH = join6(".moda", "HARNESS_REPORT.md");
-var HARNESS_REPORT_VALIDATION_PATH = join6(".moda", "harness-report-validation.json");
-var HARNESS_REPORT_APPROVAL_PATH = join6(".moda", "harness-report-approval.json");
+var HARNESS_REPORT_PATH = join(".moda", "harness-report.json");
+var HARNESS_REPORT_MARKDOWN_PATH = join(".moda", "HARNESS_REPORT.md");
+var HARNESS_REPORT_VALIDATION_PATH = join(".moda", "harness-report-validation.json");
+var HARNESS_REPORT_APPROVAL_PATH = join(".moda", "harness-report-approval.json");
 var HARNESS_GRAPH_ARRAY_FIELDS = [
   "agentFamilies",
   "runtimeAgents",
@@ -2682,7 +736,7 @@ async function approveHarnessReport(options) {
     if (!options.interactive || process.stdin.isTTY !== true) {
       throw new CliInputError("Harness report approval requires an interactive confirmation or --yes.", "Review the report, then run `moda harness approve --yes`.");
     }
-    const approved = await confirm2({
+    const approved = await confirm({
       message: [
         "Approve this harness report for Moda sync?",
         `${report.summary.runtimeAgentCount} runtime agent(s), ${report.summary.artifactCount} artifact(s), ${report.claims.length} cited claim(s).`
@@ -2701,9 +755,9 @@ async function approveHarnessReport(options) {
     approved: true,
     approvedAt: new Date().toISOString(),
     approvedBy,
-    reportPath: normalizePath(relative4(options.rootDir, options.reportPath)) || HARNESS_REPORT_PATH
+    reportPath: normalizePath(relative(options.rootDir, options.reportPath)) || HARNESS_REPORT_PATH
   };
-  writeJson(join6(options.rootDir, HARNESS_REPORT_APPROVAL_PATH), approval);
+  writeJson(join(options.rootDir, HARNESS_REPORT_APPROVAL_PATH), approval);
   return { report, validation, approval };
 }
 function loadHarnessReportForSync(rootDir, reportPath) {
@@ -2713,13 +767,13 @@ function loadHarnessReportForSync(rootDir, reportPath) {
     throw new CliInputError("Harness report validation failed; cannot sync.", validation.errors.slice(0, 5).join(`
 `));
   }
-  const approvalPath = join6(rootDir, HARNESS_REPORT_APPROVAL_PATH);
-  const approval = existsSync7(approvalPath) ? JSON.parse(readFileSync5(approvalPath, "utf8")) : null;
+  const approvalPath = join(rootDir, HARNESS_REPORT_APPROVAL_PATH);
+  const approval = existsSync(approvalPath) ? JSON.parse(readFileSync(approvalPath, "utf8")) : null;
   const approved = approval?.schemaVersion === HARNESS_REPORT_APPROVAL_SCHEMA_VERSION && approval.reportId === report.reportId && approval.reportHash === hashHarnessReport(report) && approval.approved === true;
   return { report, validation, approval, approved };
 }
 function readHarnessReport(reportPath) {
-  return normalizeHarnessReport(JSON.parse(readFileSync5(reportPath, "utf8")));
+  return normalizeHarnessReport(JSON.parse(readFileSync(reportPath, "utf8")));
 }
 function normalizeHarnessReport(value) {
   const report = cloneJson(value);
@@ -3306,18 +1360,18 @@ function limitReportEvidence(claims, citations) {
   };
 }
 function resolveHarnessReportPath(rootDir, value) {
-  return resolve5(rootDir, value && value !== "true" ? value : HARNESS_REPORT_PATH);
+  return resolve(rootDir, value && value !== "true" ? value : HARNESS_REPORT_PATH);
 }
 function writeHarnessReportArtifacts(options) {
   const written = [];
-  writeJson(join6(options.rootDir, HARNESS_REPORT_PATH), options.report);
+  writeJson(join(options.rootDir, HARNESS_REPORT_PATH), options.report);
   written.push(HARNESS_REPORT_PATH);
-  writeJson(join6(options.rootDir, HARNESS_REPORT_VALIDATION_PATH), options.validation);
+  writeJson(join(options.rootDir, HARNESS_REPORT_VALIDATION_PATH), options.validation);
   written.push(HARNESS_REPORT_VALIDATION_PATH);
   if (options.markdown) {
-    const markdownPath = join6(options.rootDir, HARNESS_REPORT_MARKDOWN_PATH);
-    mkdirSync5(dirname5(markdownPath), { recursive: true });
-    writeFileSync6(markdownPath, renderHarnessReportMarkdown(options.report, options.validation));
+    const markdownPath = join(options.rootDir, HARNESS_REPORT_MARKDOWN_PATH);
+    mkdirSync(dirname(markdownPath), { recursive: true });
+    writeFileSync(markdownPath, renderHarnessReportMarkdown(options.report, options.validation));
     written.push(HARNESS_REPORT_MARKDOWN_PATH);
   }
   return written;
@@ -3391,10 +1445,10 @@ function hashHarnessReport(report) {
   return hashStableJson(report);
 }
 function hashStableJson(value) {
-  return createHash3("sha256").update(JSON.stringify(sortJson2(value))).digest("hex");
+  return createHash("sha256").update(JSON.stringify(sortJson(value))).digest("hex");
 }
 function graphForReport(graph) {
-  return sortJson2({
+  return sortJson({
     ...graph,
     scan: {
       ...graph.scan,
@@ -3443,14 +1497,14 @@ function upsertCitation(citations, citationIndex, evidence, rootDir) {
 function citationExcerpt(rootDir, path, line) {
   if (isUnsafeCitationPath(path))
     return {};
-  const absPath = resolve5(rootDir, path);
-  if (!isInside(rootDir, absPath) || !existsSync7(absPath))
+  const absPath = resolve(rootDir, path);
+  if (!isInside(rootDir, absPath) || !existsSync(absPath))
     return {};
   try {
-    const stat = lstatSync3(absPath);
+    const stat = lstatSync(absPath);
     if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 128 * 1024)
       return {};
-    const lines = readFileSync5(absPath, "utf8").split(/\r?\n/);
+    const lines = readFileSync(absPath, "utf8").split(/\r?\n/);
     const selected = line ? lines[line - 1] : lines.find((candidate) => candidate.trim().length > 0);
     if (!selected)
       return {};
@@ -3588,17 +1642,17 @@ function validateCitation(citation, rootDir, errors, warnings, options) {
     errors.push(`Citation ${citation.id} points to an unsafe path.`);
     return;
   }
-  const absPath = resolve5(rootDir, citation.path);
+  const absPath = resolve(rootDir, citation.path);
   if (!isInside(rootDir, absPath)) {
     errors.push(`Citation ${citation.id} points outside the harness root.`);
     return;
   }
-  if (!existsSync7(absPath)) {
+  if (!existsSync(absPath)) {
     errors.push(`Citation ${citation.id} file does not exist: ${citation.path}.`);
     return;
   }
   try {
-    const stat = lstatSync3(absPath);
+    const stat = lstatSync(absPath);
     if (stat.isSymbolicLink())
       errors.push(`Citation ${citation.id} points to a symlink.`);
     if (stat.isDirectory()) {
@@ -3607,7 +1661,7 @@ function validateCitation(citation, rootDir, errors, warnings, options) {
     }
     if (!stat.isFile())
       errors.push(`Citation ${citation.id} does not point to a file.`);
-    const lines = readFileSync5(absPath, "utf8").split(/\r?\n/);
+    const lines = readFileSync(absPath, "utf8").split(/\r?\n/);
     if (citation.line !== undefined) {
       const lineCount = lines.length;
       if (citation.line < 1 || citation.line > lineCount) {
@@ -3651,24 +1705,24 @@ function isUnsafeCitationPath(path) {
   return path.startsWith("/") || path.includes("..") || path.split(/[\\/]/).some((part) => part === "..") || isSecretishPath2(path);
 }
 function isSecretishPath2(path) {
-  const name = basename2(path).toLowerCase();
+  const name = basename(path).toLowerCase();
   if (name === ".env.example" || name === ".env.sample" || name === ".env.template" || name === ".env.defaults" || /^\.env\..*(example|sample|template)$/.test(name)) {
     return false;
   }
   return name === ".env" || name.startsWith(".env.") || name.includes("secret") || name.includes("private-key") || name.endsWith(".pem");
 }
 function isInside(rootDir, absPath) {
-  const rel = relative4(resolve5(rootDir), resolve5(absPath));
+  const rel = relative(resolve(rootDir), resolve(absPath));
   return rel === "" || !rel.startsWith("..") && !rel.startsWith("/");
 }
 function writeJson(path, value) {
-  mkdirSync5(dirname5(path), { recursive: true });
-  writeFileSync6(path, `${JSON.stringify(value, null, 2)}
+  mkdirSync(dirname(path), { recursive: true });
+  writeFileSync(path, `${JSON.stringify(value, null, 2)}
 `);
 }
 function stableId(prefix, input) {
   const slug = input.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "").slice(0, 64);
-  const digest = createHash3("sha256").update(input).digest("hex").slice(0, 12);
+  const digest = createHash("sha256").update(input).digest("hex").slice(0, 12);
   if (!slug)
     return `${prefix}_${digest}`;
   return slug.length >= 64 ? `${prefix}_${slug.slice(0, 51)}_${digest}` : `${prefix}_${slug}`;
@@ -3676,11 +1730,11 @@ function stableId(prefix, input) {
 function titleFromId(id) {
   return id.replace(/^[a-z]+_/, "").split(/[_\-/]+/).filter(Boolean).map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join(" ") || id;
 }
-function sortJson2(value) {
+function sortJson(value) {
   if (Array.isArray(value))
-    return value.map((item) => sortJson2(item));
+    return value.map((item) => sortJson(item));
   if (value && typeof value === "object") {
-    return Object.fromEntries(Object.entries(value).filter(([, item]) => item !== undefined).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sortJson2(item)]));
+    return Object.fromEntries(Object.entries(value).filter(([, item]) => item !== undefined).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sortJson(item)]));
   }
   return value;
 }
@@ -3692,19 +1746,19 @@ function normalizePath(path) {
 }
 
 // src/harness.ts
-import { createHash as createHash4 } from "node:crypto";
-import { execFileSync as execFileSync3, spawn } from "node:child_process";
+import { createHash as createHash2 } from "node:crypto";
+import { execFileSync, spawn } from "node:child_process";
 import { homedir } from "node:os";
 import {
-  existsSync as existsSync9,
-  lstatSync as lstatSync5,
-  mkdirSync as mkdirSync7,
-  readFileSync as readFileSync7,
-  readdirSync as readdirSync4,
-  writeFileSync as writeFileSync8
+  existsSync as existsSync3,
+  lstatSync as lstatSync3,
+  mkdirSync as mkdirSync3,
+  readFileSync as readFileSync3,
+  readdirSync,
+  writeFileSync as writeFileSync3
 } from "node:fs";
-import { basename as basename5, delimiter, dirname as dirname8, join as join7, relative as relative6, resolve as resolve8, sep } from "node:path";
-import { confirm as confirm3, select } from "@inquirer/prompts";
+import { basename as basename4, delimiter, dirname as dirname4, join as join2, relative as relative3, resolve as resolve4, sep } from "node:path";
+import { confirm as confirm2, select } from "@inquirer/prompts";
 
 // src/analyst-tui.ts
 class AnalystTui {
@@ -3995,8 +2049,8 @@ function stripAnsi2(value) {
 }
 
 // src/harness-artifact-bodies.ts
-import { existsSync as existsSync8, lstatSync as lstatSync4, readFileSync as readFileSync6, realpathSync } from "node:fs";
-import { basename as basename3, dirname as dirname6, isAbsolute as isAbsolute5, relative as relative5, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync2, lstatSync as lstatSync2, readFileSync as readFileSync2, realpathSync } from "node:fs";
+import { basename as basename2, dirname as dirname2, isAbsolute, relative as relative2, resolve as resolve2 } from "node:path";
 var MAX_SCANNED_FILE_BYTES2 = 512 * 1024;
 var SNAPSHOT_BUDGET_SKIP_REASONS = new Set([
   "file too large for harness scan",
@@ -4016,7 +2070,7 @@ function isSecretishPath3(path) {
   return normalized.includes(".env") || normalized.endsWith(".pem") || normalized.endsWith(".key") || normalized.includes("/secrets/") || normalized.includes("/credentials/");
 }
 function isOutsideRoot(rel) {
-  return rel === "" || rel === ".." || rel.startsWith("../") || isAbsolute5(rel);
+  return rel === "" || rel === ".." || rel.startsWith("../") || isAbsolute(rel);
 }
 function walkAncestorDirs(fromAbs, rootAbs, maxDepth = 8) {
   const dirs = [];
@@ -4025,7 +2079,7 @@ function walkAncestorDirs(fromAbs, rootAbs, maxDepth = 8) {
     dirs.push(cursor);
     if (normalizePath2(cursor) === normalizePath2(rootAbs))
       break;
-    const parent = dirname6(cursor);
+    const parent = dirname2(cursor);
     if (parent === cursor)
       break;
     cursor = parent;
@@ -4033,16 +2087,16 @@ function walkAncestorDirs(fromAbs, rootAbs, maxDepth = 8) {
   return dirs;
 }
 function readBoundedRepoText(absPath, rootDir) {
-  if (!existsSync8(absPath))
+  if (!existsSync2(absPath))
     return;
-  const rel = normalizePath2(relative5(rootDir, absPath));
+  const rel = normalizePath2(relative2(rootDir, absPath));
   if (isOutsideRoot(rel))
     return;
   if (isSecretishPath3(rel))
     return;
   let stat;
   try {
-    stat = lstatSync4(absPath);
+    stat = lstatSync2(absPath);
   } catch {
     return;
   }
@@ -4052,20 +2106,20 @@ function readBoundedRepoText(absPath, rootDir) {
   if (!isTextFile2(rel))
     return;
   try {
-    if (isOutsideRoot(normalizePath2(relative5(realpathSync(rootDir), realpathSync(absPath))))) {
+    if (isOutsideRoot(normalizePath2(relative2(realpathSync(rootDir), realpathSync(absPath))))) {
       return;
     }
   } catch {
     return;
   }
   try {
-    return readFileSync6(absPath, "utf8");
+    return readFileSync2(absPath, "utf8");
   } catch {
     return;
   }
 }
 function readRepoRelativeText(rootDir, relPath) {
-  return readBoundedRepoText(resolve6(rootDir, relPath), rootDir);
+  return readBoundedRepoText(resolve2(rootDir, relPath), rootDir);
 }
 function isDedicatedToolFilePath(path) {
   return /(^|\/)tools?\//i.test(path) && /\.(ts|tsx|js|mjs|py)$/i.test(path);
@@ -4106,14 +2160,14 @@ function annotatedSourceCandidates(sourcePath, annotation) {
   const explicitSourcePath = normalizePath2(sourcePath) !== normalizePath2(annotation.evidence.path);
   if (!explicitSourcePath) {
     return [
-      resolve6(annotation.rootDir, sourcePath),
-      resolve6(dirname6(annotation.sourceAbsPath), sourcePath),
+      resolve2(annotation.rootDir, sourcePath),
+      resolve2(dirname2(annotation.sourceAbsPath), sourcePath),
       annotation.sourceAbsPath
     ];
   }
-  const rootAbs = resolve6(annotation.rootDir);
-  const candidates = walkAncestorDirs(dirname6(annotation.sourceAbsPath), rootAbs).map((dir) => resolve6(dir, sourcePath));
-  candidates.push(resolve6(annotation.rootDir, sourcePath));
+  const rootAbs = resolve2(annotation.rootDir);
+  const candidates = walkAncestorDirs(dirname2(annotation.sourceAbsPath), rootAbs).map((dir) => resolve2(dir, sourcePath));
+  candidates.push(resolve2(annotation.rootDir, sourcePath));
   return candidates;
 }
 function readAnnotatedSourceText(sourcePath, annotation) {
@@ -4136,7 +2190,7 @@ function resolveAnnotatedSourcePath(sourcePath, annotation) {
     seen.add(candidate);
     if (readBoundedRepoText(candidate, annotation.rootDir) === undefined)
       continue;
-    const rel = normalizePath2(relative5(annotation.rootDir, candidate));
+    const rel = normalizePath2(relative2(annotation.rootDir, candidate));
     if (!isOutsideRoot(rel))
       return rel;
   }
@@ -4150,7 +2204,7 @@ function readPromptOrToolBody(type, sourcePath, annotation) {
     return;
   if (type === "prompt" || isDedicatedToolFilePath(sourcePath))
     return text;
-  return extractToolBodyFromText(text, first(annotation.values.name) ?? basename3(sourcePath)) ?? text;
+  return extractToolBodyFromText(text, first(annotation.values.name) ?? basename2(sourcePath)) ?? text;
 }
 function extractToolBody(file, tool) {
   const text = file.text ?? readRepoRelativeText(file.rootDir, file.path);
@@ -4194,9 +2248,9 @@ function readSourcePathRelativeToEvidence(artifact, rootDir) {
   const evidencePath = firstEvidencePath(artifact);
   if (!evidencePath)
     return;
-  const rootAbs = resolve6(rootDir);
-  for (const dir of walkAncestorDirs(dirname6(resolve6(rootDir, evidencePath)), rootAbs)) {
-    const text = readBoundedRepoText(resolve6(dir, artifact.sourcePath), rootDir);
+  const rootAbs = resolve2(rootDir);
+  for (const dir of walkAncestorDirs(dirname2(resolve2(rootDir, evidencePath)), rootAbs)) {
+    const text = readBoundedRepoText(resolve2(dir, artifact.sourcePath), rootDir);
     if (text !== undefined)
       return text;
   }
@@ -4225,8 +2279,8 @@ function enrichScanCaptureMetadata(graph) {
 }
 
 // src/harness-candidates.ts
-import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync7 } from "node:fs";
-import { basename as basename4, dirname as dirname7, extname, resolve as resolve7 } from "node:path";
+import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { basename as basename3, dirname as dirname3, extname, resolve as resolve3 } from "node:path";
 var EXCERPT_MAX_CHARS = 240;
 var MAX_CANDIDATES_PER_FILE_PER_SIGNAL = 20;
 var MIN_PROMPT_LITERAL_CHARS = 160;
@@ -4544,7 +2598,7 @@ function detectAdjacentStringBlocks(file, out) {
 }
 var PROMPT_MODULE_NAME_HINT = /(^|[._-])(system[._-]?)?prompts?([._-]|$)/i;
 function detectPromptModule(file, out) {
-  const base = basename4(file.path, extname(file.path));
+  const base = basename3(file.path, extname(file.path));
   if (!PROMPT_MODULE_NAME_HINT.test(base))
     return;
   out.push({
@@ -4607,12 +2661,12 @@ function detectPromptFile(file, out) {
   const ext = extname(file.path).toLowerCase();
   if (!PROMPT_DOC_EXTENSIONS.has(ext))
     return;
-  const base = basename4(file.path).toLowerCase();
+  const base = basename3(file.path).toLowerCase();
   if (NON_PROMPT_DOC_BASENAMES.has(base))
     return;
   if (/(^|\/)(docs?|documentation|examples?|\.github)\//i.test(file.path))
     return;
-  const dir = dirname7(file.path);
+  const dir = dirname3(file.path);
   const nameHint = PROMPT_NAME_HINT.test(base);
   const dirHint = AGENTIC_DIR_HINT.test(dir);
   const score = instructionScore(file.text.slice(0, 20000));
@@ -4677,7 +2731,7 @@ function detectHarnessCandidatesInFiles(files) {
 function detectHarnessCandidates(rootDir) {
   const startedAt = Date.now();
   const skipped = [];
-  const root = resolve7(rootDir);
+  const root = resolve3(rootDir);
   const inventory = inventoryFiles(root, skipped, {
     includeFile: (path) => PROMPT_DOC_EXTENSIONS.has(extname(path).toLowerCase())
   });
@@ -4703,9 +2757,9 @@ function detectHarnessCandidates(rootDir) {
   return redactDeep(report);
 }
 function writeHarnessCandidatesReport(report, outPath) {
-  const target = resolve7(outPath);
-  mkdirSync6(dirname7(target), { recursive: true });
-  writeFileSync7(target, `${JSON.stringify(report, null, 2)}
+  const target = resolve3(outPath);
+  mkdirSync2(dirname3(target), { recursive: true });
+  writeFileSync2(target, `${JSON.stringify(report, null, 2)}
 `, "utf8");
   return target;
 }
@@ -5039,17 +3093,17 @@ function wrapLine(text, width, indent) {
 }
 
 // src/harness.ts
-var MODA_DIR2 = ".moda";
-var HARNESS_PATH = join7(MODA_DIR2, "harness.json");
-var HARNESS_SUMMARY_PATH = join7(MODA_DIR2, "HARNESS.md");
-var SYNC_STATE_PATH = join7(MODA_DIR2, "sync-state.json");
+var MODA_DIR = ".moda";
+var HARNESS_PATH = join2(MODA_DIR, "harness.json");
+var HARNESS_SUMMARY_PATH = join2(MODA_DIR, "HARNESS.md");
+var SYNC_STATE_PATH = join2(MODA_DIR, "sync-state.json");
 var SCHEMA_VERSION = "harness.v0.1";
 var REPORT_JSON_BEGIN = "MODA_HARNESS_REPORT_JSON_BEGIN";
 var REPORT_JSON_END = "MODA_HARNESS_REPORT_JSON_END";
 var EXTERNAL_ANALYST_ADAPTERS = ["claude", "codex", "cursor"];
 async function runHarnessCommand(context) {
   const subcommand = context.positionals[0] ?? "scan";
-  const rootDir = resolve8(context.cwd, context.flags.path ?? ".");
+  const rootDir = resolve4(context.cwd, context.flags.path ?? ".");
   const selectedAgentId = selectedRuntimeAgentId(context.flags);
   const tenant = resolveHarnessTenant(context.flags, context);
   const scanPlan = buildCommandScanPlan(context, rootDir);
@@ -5100,7 +3154,7 @@ async function runHarnessCommand(context) {
           throw new CliInputError("Harness report is not approved; refusing to sync.", "Run `moda harness validate-report`, review the report, then run `moda harness approve --yes` before syncing.");
         }
         const syncGraph2 = graphForReport(report.graph);
-        const sourceCommit2 = report.source.sourceCommit ?? getGitCommit3(rootDir);
+        const sourceCommit2 = report.source.sourceCommit ?? getGitCommit(rootDir);
         const localGraphHash2 = hashStableJson(syncGraph2);
         const plan2 = createHarnessSyncPlan({
           context,
@@ -5156,7 +3210,7 @@ async function runHarnessCommand(context) {
           report: {
             reportId: report.reportId,
             reportHash,
-            path: normalizePath3(relative6(rootDir, reportPath)) || ".moda/harness-report.json"
+            path: normalizePath3(relative3(rootDir, reportPath)) || ".moda/harness-report.json"
           },
           validation,
           approval: {
@@ -5180,7 +3234,7 @@ async function runHarnessCommand(context) {
         pathWasExplicit: context.flags.path !== undefined
       });
       const syncGraph = graphForSync(graph);
-      const sourceCommit = getGitCommit3(rootDir);
+      const sourceCommit = getGitCommit(rootDir);
       const localGraphHash = hashStableJson2(syncGraph);
       const plan = createHarnessSyncPlan({
         context,
@@ -5272,6 +3326,23 @@ async function runHarnessCommand(context) {
         message: "Starting Moda Analyst harness analysis.",
         elapsed_ms: Date.now() - context.startedAt
       });
+      if (context.flags["github-actions"] === "true") {
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-7t3cncnt.js");
+        const result = await runGithubActionsAnalyze(rootDir, {
+          writeReport: (report2) => {
+            const normalized = normalizeHarnessReport(report2);
+            const validation2 = validateHarnessReport(normalized, rootDir);
+            writeHarnessReportArtifacts({
+              rootDir,
+              report: normalized,
+              validation: validation2,
+              markdown: context.outputMode === "human"
+            });
+          }
+        });
+        context.output.writeData({ schema: "harness_github_actions.v0.1", ...result });
+        return { exitCode: result.status === "completed" ? 0 : 1 };
+      }
       if (isRemoteHarnessAnalyze(context)) {
         return runRemoteHarnessAnalyst({ context, rootDir, scanPlan, tenant });
       }
@@ -5309,7 +3380,7 @@ async function runHarnessCommand(context) {
       const report = createHarnessReport({
         graph,
         rootDir,
-        sourceCommit: getGitCommit3(rootDir),
+        sourceCommit: getGitCommit(rootDir),
         analystAdapter: "local-scan"
       });
       const validation = validateHarnessReport(report, rootDir);
@@ -5373,7 +3444,7 @@ async function runHarnessCommand(context) {
         report: {
           reportId: approval.report.reportId,
           reportHash: hashHarnessReport(approval.report),
-          path: normalizePath3(relative6(rootDir, reportPath)) || ".moda/harness-report.json"
+          path: normalizePath3(relative3(rootDir, reportPath)) || ".moda/harness-report.json"
         },
         validation: approval.validation,
         approval: approval.approval
@@ -5393,9 +3464,9 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Missing output path for --out.", "Usage: moda harness candidates --out=<file>");
       }
       if (outFlag && !context.dryRun) {
-        written.push(writeHarnessCandidatesReport(report, resolve8(context.cwd, outFlag)));
+        written.push(writeHarnessCandidatesReport(report, resolve4(context.cwd, outFlag)));
       }
-      writeHumanProgress(context, `Harness candidates: ${report.stats.candidateCount} candidates across ` + `${report.stats.filesWithCandidates} files (${report.stats.filesScanned} scanned, ` + `${report.stats.filesPerSecond.toLocaleString()} files/sec).`);
+      writeHumanProgress(context, `Harness candidates: ${report.stats.candidateCount} candidates across ${report.stats.filesWithCandidates} files (${report.stats.filesScanned} scanned, ${report.stats.filesPerSecond.toLocaleString()} files/sec).`);
       context.output.writeData({ scanPlan, ...report, written, dryRun: context.dryRun });
       return { exitCode: 0 };
     }
@@ -5441,8 +3512,8 @@ async function runHarnessCommand(context) {
       return { exitCode: 0 };
     }
     case "status": {
-      const manifestPath = join7(rootDir, HARNESS_PATH);
-      const graph = existsSync9(manifestPath) ? readHarnessGraph(manifestPath) : scanHarness({
+      const manifestPath = join2(rootDir, HARNESS_PATH);
+      const graph = existsSync3(manifestPath) ? readHarnessGraph(manifestPath) : scanHarness({
         rootDir,
         tenantId: tenant?.tenantId,
         tenantSource: tenant?.source
@@ -5452,7 +3523,7 @@ async function runHarnessCommand(context) {
       const remoteRun = readRemoteRunState(rootDir);
       context.output.writeData({
         manifest: HARNESS_PATH,
-        exists: existsSync9(manifestPath),
+        exists: existsSync3(manifestPath),
         summary: summarizeHarness(graph),
         graphHash: currentGraphHash,
         remoteRun: remoteRun ? {
@@ -5587,14 +3658,14 @@ async function runExternalHarnessAnalyst(options) {
       reportPath: HARNESS_REPORT_PATH
     }));
   }
-  const timeoutMs = numericEnv("MODA_HARNESS_ANALYST_TIMEOUT_MS", 20 * 60 * 1000);
+  const timeoutMs = numericEnv("MODA_HARNESS_ANALYST_TIMEOUT_MS", 1200000);
   try {
     const result = await runExternalAnalystWithRetries(invocation, {
       cwd: options.rootDir,
       env: buildExternalAnalystEnv(options.context.env),
       inheritedOutput,
       timeoutMs,
-      maxBuffer: 20 * 1024 * 1024,
+      maxBuffer: 20971520,
       progress: inheritedOutput && !options.context.quiet || options.context.outputMode === "agent-stream",
       progressToStderr: inheritedOutput && !options.context.quiet && !analystTui,
       streamEvents: invocation.streamEvents,
@@ -5704,8 +3775,8 @@ function buildExternalAnalystEnv(env) {
   return next;
 }
 function readExternalAnalystReport(rootDir, result, adapter) {
-  const reportPath = resolve8(rootDir, HARNESS_REPORT_PATH);
-  if (existsSync9(reportPath))
+  const reportPath = resolve4(rootDir, HARNESS_REPORT_PATH);
+  if (existsSync3(reportPath))
     return repairExternalAnalystReport(readHarnessReport(reportPath), rootDir);
   const output = [
     result.stdout,
@@ -5791,12 +3862,12 @@ function repairCitationLines(report, rootDir) {
     if (citation.type !== "file" && citation.type !== "generated_doc" || !citation.path || !citation.excerpt)
       continue;
     const excerpt = citation.excerpt;
-    const candidatePath = resolve8(rootDir, citation.path);
-    if (!existsSync9(candidatePath))
+    const candidatePath = resolve4(rootDir, citation.path);
+    if (!existsSync3(candidatePath))
       continue;
     let text;
     try {
-      text = readFileSync7(candidatePath, "utf8");
+      text = readFileSync3(candidatePath, "utf8");
     } catch {
       continue;
     }
@@ -6015,7 +4086,7 @@ async function runExternalAnalystWithRetries(invocation, options) {
         process.stderr.write(`${renderHarnessProgress(message)}
 `);
       if (options.backoffMs > 0)
-        await sleep2(options.backoffMs);
+        await sleep(options.backoffMs);
     }
     lastResult = await runExternalAnalystProcess(invocation, options);
     if (!isRetryableExternalAnalystFailure(lastResult))
@@ -6036,7 +4107,7 @@ function externalAnalystMaxAttempts(adapter) {
   const defaultRetries = adapter === "claude" ? 2 : 1;
   return 1 + numericEnvAllowZero("MODA_HARNESS_ANALYST_RETRIES", defaultRetries);
 }
-function sleep2(ms) {
+function sleep(ms) {
   return new Promise((resolveSleep) => setTimeout(resolveSleep, ms));
 }
 function recordExternalAgentTextChunk(text, tui) {
@@ -6336,13 +4407,13 @@ async function runCodingAgent(options) {
     stream,
     mode: options.mode
   });
-  const timeoutMs = options.timeoutMs ?? numericEnv("MODA_HARNESS_ANALYST_TIMEOUT_MS", 20 * 60 * 1000);
+  const timeoutMs = options.timeoutMs ?? numericEnv("MODA_HARNESS_ANALYST_TIMEOUT_MS", 1200000);
   const result = await runExternalAnalystWithRetries(invocation, {
     cwd: options.rootDir,
     env: buildExternalAnalystEnv(options.env ?? process.env),
     inheritedOutput: false,
     timeoutMs,
-    maxBuffer: 20 * 1024 * 1024,
+    maxBuffer: 20971520,
     progress: Boolean(options.onProgress) || Boolean(options.progressToStderr),
     progressToStderr: options.progressToStderr ?? false,
     streamEvents: stream,
@@ -6483,10 +4554,10 @@ function listAnalystPreflightPaths(rootDir) {
 }
 function readGitTrackedPaths(rootDir) {
   try {
-    return execFileSync3("git", ["ls-files", "-co", "--exclude-standard"], {
+    return execFileSync("git", ["ls-files", "-co", "--exclude-standard"], {
       cwd: rootDir,
       encoding: "utf8",
-      maxBuffer: 4 * 1024 * 1024
+      maxBuffer: 4194304
     }).split(/\r?\n/).filter(Boolean);
   } catch {
     return [];
@@ -6497,10 +4568,10 @@ function readDirectoryPreflightPaths(rootDir) {
   const stack = ["."];
   while (stack.length > 0 && paths.length < 2000) {
     const current = stack.pop() ?? ".";
-    const absolute = current === "." ? rootDir : join7(rootDir, current);
+    const absolute = current === "." ? rootDir : join2(rootDir, current);
     let entries;
     try {
-      entries = readdirSync4(absolute);
+      entries = readdirSync(absolute);
     } catch {
       continue;
     }
@@ -6508,10 +4579,10 @@ function readDirectoryPreflightPaths(rootDir) {
       const child = current === "." ? entry : `${current}/${entry}`;
       if (shouldSkipPreflightPath(child))
         continue;
-      const childAbsolute = join7(rootDir, child);
+      const childAbsolute = join2(rootDir, child);
       let stat;
       try {
-        stat = lstatSync5(childAbsolute);
+        stat = lstatSync3(childAbsolute);
       } catch {
         continue;
       }
@@ -6536,7 +4607,7 @@ function shouldSkipPreflightPath(path) {
   return isSecretishPath(normalized);
 }
 function isManifestLikePath(path) {
-  const name = basename5(path).toLowerCase();
+  const name = basename4(path).toLowerCase();
   return /^(package\.json|pyproject\.toml|requirements.*\.txt|uv\.lock|poetry\.lock|pnpm-lock\.yaml|bun\.lockb?|yarn\.lock|cargo\.toml|go\.mod|deno\.json|turbo\.json|langgraph\.json|agents\.json|config\.(ts|js|json|yaml|yml|toml))$/.test(name);
 }
 function isDocLikePath(path) {
@@ -6566,15 +4637,15 @@ function resolveAnalystCommand(adapter) {
   return findOnPath("cursor-agent") || findOnPath("cursor-cli") || findOnPath("cursor") || findOnPath("/Applications/Cursor.app/Contents/Resources/app/bin/cursor");
 }
 function cursorSubcommandArgs(command, args) {
-  const name = basename5(command);
+  const name = basename4(command);
   return name === "cursor" || name === "cursor-cli" ? ["agent", ...args] : args;
 }
 function findOnPath(command) {
-  if (command.includes("/") && existsSync9(command))
+  if (command.includes("/") && existsSync3(command))
     return command;
   for (const dir of (process.env.PATH ?? "").split(delimiter).filter(Boolean)) {
-    const candidate = join7(dir, command);
-    if (existsSync9(candidate))
+    const candidate = join2(dir, command);
+    if (existsSync3(candidate))
       return candidate;
   }
   return;
@@ -6587,7 +4658,7 @@ function truncateText(value, maxLength) {
   return compact.length > maxLength ? `${compact.slice(0, maxLength - 1)}...` : compact;
 }
 function scanHarness(options = {}) {
-  const rootDir = resolve8(options.rootDir ?? process.cwd());
+  const rootDir = resolve4(options.rootDir ?? process.cwd());
   const skipped = [];
   const files = inventoryFiles(rootDir, skipped);
   const annotations = files.flatMap((file) => parseAnnotations(file));
@@ -6595,7 +4666,7 @@ function scanHarness(options = {}) {
   const readPlan = buildHarnessReadPlan(rootDir, options.pathWasExplicit === true);
   const graph = {
     schemaVersion: SCHEMA_VERSION,
-    harnessId: stableId2("harness", repo.name || basename5(rootDir) || "repo"),
+    harnessId: stableId2("harness", repo.name || basename4(rootDir) || "repo"),
     tenant: options.tenantId ? {
       tenantId: options.tenantId,
       source: options.tenantSource ?? "scan_option"
@@ -6650,11 +4721,11 @@ function collectSnapshotInputs(rootDir, maxFiles, maxTextBytes) {
   const inputs = [];
   let inventoryFileCount = 0;
   let inventoryTextBytes = 0;
-  function walk2(current) {
-    const path = normalizePath3(relative6(rootDir, current)) || ".";
+  function walk(current) {
+    const path = normalizePath3(relative3(rootDir, current)) || ".";
     let stat;
     try {
-      stat = lstatSync5(current);
+      stat = lstatSync3(current);
     } catch {
       return;
     }
@@ -6665,8 +4736,8 @@ function collectSnapshotInputs(rootDir, maxFiles, maxTextBytes) {
     if (stat.isDirectory()) {
       if (path !== "." && (isSkippedDir(path) || isSkippedPathPrefix(path)))
         return;
-      for (const entry of readdirSync4(current).sort())
-        walk2(join7(current, entry));
+      for (const entry of readdirSync(current).sort())
+        walk(join2(current, entry));
       return;
     }
     if (!stat.isFile())
@@ -6689,7 +4760,7 @@ function collectSnapshotInputs(rootDir, maxFiles, maxTextBytes) {
     let text = "";
     if (isTextFile(path)) {
       try {
-        text = readFileSync7(current, "utf8");
+        text = readFileSync3(current, "utf8");
         inventoryTextBytes += Buffer.byteLength(text, "utf8");
       } catch {
         return;
@@ -6698,21 +4769,21 @@ function collectSnapshotInputs(rootDir, maxFiles, maxTextBytes) {
     inputs.push({ path, text, byteSize: stat.size });
     inventoryFileCount += 1;
   }
-  walk2(rootDir);
+  walk(rootDir);
   return inputs;
 }
 function buildSourceSnapshot(rootDir) {
-  const root = resolve8(rootDir);
+  const root = resolve4(rootDir);
   const maxFiles = numericEnv("MODA_HARNESS_MAX_FILES", DEFAULT_MAX_INVENTORY_FILES);
   const maxTextBytes = numericEnv("MODA_HARNESS_MAX_TEXT_BYTES", DEFAULT_MAX_INVENTORY_TEXT_BYTES);
   const inputs = collectSnapshotInputs(root, maxFiles, maxTextBytes);
   const repo = detectRepo(root, inputs.map((input) => ({
     path: input.path,
-    absPath: join7(root, input.path),
+    absPath: join2(root, input.path),
     rootDir: root,
     text: input.text
   })));
-  const gitCommit = getGitCommit3(root);
+  const gitCommit = getGitCommit(root);
   return packSnapshot(inputs, {
     repoName: repo.name,
     ...gitCommit ? { gitCommit } : {},
@@ -6722,7 +4793,7 @@ function buildSourceSnapshot(rootDir) {
 }
 function buildCommandScanPlan(context, rootDir) {
   const explicitPath = context.flags.path !== undefined;
-  const rel = normalizePath3(relative6(context.cwd, rootDir)) || ".";
+  const rel = normalizePath3(relative3(context.cwd, rootDir)) || ".";
   const scope = explicitPath && rel !== "." ? "narrow" : "broad";
   const machineReadable = context.outputMode !== "human";
   const approvalRequired = context.positional === "analyze" && scope === "broad" && !context.yes;
@@ -6759,7 +4830,7 @@ async function approveScanIfNeeded(scanPlan, options = {}) {
       willSkip: scanPlan.readPlan.willSkip
     }));
   }
-  const approved = await confirm3({
+  const approved = await confirm2({
     message: options.message ?? "Scan this project to build a Moda harness manifest?",
     default: true
   });
@@ -6785,7 +4856,7 @@ async function confirmHarnessDelete(context, idOrKey) {
       resume_command: ["moda", "harness", "delete", idOrKey, "--yes"]
     }, "Re-run with `--yes` to confirm the deletion.");
   }
-  const approved = await confirm3({ message, default: false });
+  const approved = await confirm2({ message, default: false });
   if (!approved) {
     throw new CliInputError("Harness delete was not approved.", "Re-run with `--yes` to skip the prompt, or leave the harness in place.");
   }
@@ -6807,7 +4878,7 @@ function writeHumanBlock(context, message) {
 function buildHarnessReadPlan(rootDir, pathWasExplicit) {
   return {
     scope: pathWasExplicit ? "narrow" : "broad",
-    rootPaths: [normalizePath3(relative6(rootDir, rootDir)) || "."],
+    rootPaths: [normalizePath3(relative3(rootDir, rootDir)) || "."],
     willRead: [
       "package manifests",
       "source files under the selected path",
@@ -6925,11 +4996,11 @@ async function syncHarnessWithRemote(context, body) {
   }, profileOptions);
 }
 function readHarnessSyncState(rootDir) {
-  const path = join7(rootDir, SYNC_STATE_PATH);
-  if (!existsSync9(path))
+  const path = join2(rootDir, SYNC_STATE_PATH);
+  if (!existsSync3(path))
     return;
   try {
-    const parsed = JSON.parse(readFileSync7(path, "utf8"));
+    const parsed = JSON.parse(readFileSync3(path, "utf8"));
     if (!isRecord3(parsed) || parsed.schemaVersion !== "sync_state.v0.1") {
       return;
     }
@@ -6939,9 +5010,9 @@ function readHarnessSyncState(rootDir) {
   }
 }
 function writeHarnessSyncState(rootDir, state) {
-  const path = join7(rootDir, SYNC_STATE_PATH);
-  mkdirSync7(dirname8(path), { recursive: true });
-  writeFileSync8(path, `${JSON.stringify(state, null, 2)}
+  const path = join2(rootDir, SYNC_STATE_PATH);
+  mkdirSync3(dirname4(path), { recursive: true });
+  writeFileSync3(path, `${JSON.stringify(state, null, 2)}
 `);
   return SYNC_STATE_PATH;
 }
@@ -6953,11 +5024,11 @@ function selectedRuntimeAgentId(flags) {
   return;
 }
 function loadOrScanHarness(rootDir, tenant, context) {
-  const manifestPath = join7(rootDir, HARNESS_PATH);
-  if (existsSync9(manifestPath))
+  const manifestPath = join2(rootDir, HARNESS_PATH);
+  if (existsSync3(manifestPath))
     return readHarnessGraph(manifestPath);
   if (context) {
-    writeHarnessNotice(context, `No ${HARNESS_PATH} found; showing a live scan of ${rootDir}. ` + "This is local scan output, NOT synced or account data. " + "Run `moda harness scan` to persist it and `moda harness sync` to upload it.");
+    writeHarnessNotice(context, `No ${HARNESS_PATH} found; showing a live scan of ${rootDir}. This is local scan output, NOT synced or account data. Run \`moda harness scan\` to persist it and \`moda harness sync\` to upload it.`);
   }
   return scanHarness({
     rootDir,
@@ -7010,43 +5081,43 @@ var FRESHER_REPORT_MAX_DIRS = 4000;
 function findFresherHarnessReports(rootDir) {
   let rootMtimeMs = 0;
   try {
-    rootMtimeMs = lstatSync5(join7(rootDir, HARNESS_REPORT_PATH)).mtimeMs;
+    rootMtimeMs = lstatSync3(join2(rootDir, HARNESS_REPORT_PATH)).mtimeMs;
   } catch {
     rootMtimeMs = 0;
   }
   const fresher = [];
   let visited = 0;
-  const walk2 = (dir, depth) => {
+  const walk = (dir, depth) => {
     if (depth > FRESHER_REPORT_MAX_DEPTH || visited >= FRESHER_REPORT_MAX_DIRS)
       return;
     visited += 1;
     let entries;
     try {
-      entries = readdirSync4(dir, { withFileTypes: true });
+      entries = readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
       if (!entry.isDirectory() || entry.name.startsWith(".") || SKIPPED_DIRS.has(entry.name))
         continue;
-      const child = join7(dir, entry.name);
+      const child = join2(dir, entry.name);
       try {
-        const candidate = lstatSync5(join7(child, HARNESS_REPORT_PATH));
+        const candidate = lstatSync3(join2(child, HARNESS_REPORT_PATH));
         if (candidate.isFile() && candidate.mtimeMs > rootMtimeMs) {
           fresher.push({
-            path: normalizePath3(relative6(rootDir, join7(child, HARNESS_REPORT_PATH))),
+            path: normalizePath3(relative3(rootDir, join2(child, HARNESS_REPORT_PATH))),
             mtimeMs: candidate.mtimeMs
           });
         }
       } catch {}
-      walk2(child, depth + 1);
+      walk(child, depth + 1);
     }
   };
-  walk2(rootDir, 1);
+  walk(rootDir, 1);
   return fresher.sort((a, b) => b.mtimeMs - a.mtimeMs);
 }
 function warnFresherSubdirHarnessReports(context, rootDir, explicitReport) {
-  const explicitReportPath = explicitReport && explicitReport !== "true" ? normalizePath3(relative6(rootDir, resolve8(rootDir, explicitReport))) : undefined;
+  const explicitReportPath = explicitReport && explicitReport !== "true" ? normalizePath3(relative3(rootDir, resolve4(rootDir, explicitReport))) : undefined;
   if (explicitReportPath && explicitReportPath !== normalizePath3(HARNESS_REPORT_PATH))
     return;
   let fresher;
@@ -7058,18 +5129,18 @@ function warnFresherSubdirHarnessReports(context, rootDir, explicitReport) {
   if (fresher.length === 0)
     return;
   const newest = fresher[0];
-  const subdir = normalizePath3(dirname8(dirname8(newest.path)));
-  const rootState = existsSync9(join7(rootDir, HARNESS_REPORT_PATH)) ? `older ${HARNESS_REPORT_PATH}` : `no ${HARNESS_REPORT_PATH}`;
-  writeHarnessNotice(context, `A fresher harness report exists at ${newest.path} (this directory has ${rootState}). ` + `If you meant that report, re-run with --path=${subdir}.`);
+  const subdir = normalizePath3(dirname4(dirname4(newest.path)));
+  const rootState = existsSync3(join2(rootDir, HARNESS_REPORT_PATH)) ? `older ${HARNESS_REPORT_PATH}` : `no ${HARNESS_REPORT_PATH}`;
+  writeHarnessNotice(context, `A fresher harness report exists at ${newest.path} (this directory has ${rootState}). If you meant that report, re-run with --path=${subdir}.`);
 }
 function readHarnessGraph(manifestPath) {
-  return JSON.parse(readFileSync7(manifestPath, "utf8"));
+  return JSON.parse(readFileSync3(manifestPath, "utf8"));
 }
 function writeHarnessArtifacts(graph, rootDir, options = {}) {
-  const modaDir = join7(rootDir, MODA_DIR2);
-  mkdirSync7(modaDir, { recursive: true });
-  const manifestPath = join7(rootDir, HARNESS_PATH);
-  writeFileSync8(manifestPath, `${JSON.stringify(graph, null, 2)}
+  const modaDir = join2(rootDir, MODA_DIR);
+  mkdirSync3(modaDir, { recursive: true });
+  const manifestPath = join2(rootDir, HARNESS_PATH);
+  writeFileSync3(manifestPath, `${JSON.stringify(graph, null, 2)}
 `);
   const written = [HARNESS_PATH];
   if (options.summary) {
@@ -7078,9 +5149,9 @@ function writeHarnessArtifacts(graph, rootDir, options = {}) {
   return written;
 }
 function writeHarnessSummary(graph, rootDir) {
-  const summaryPath = join7(rootDir, HARNESS_SUMMARY_PATH);
-  mkdirSync7(dirname8(summaryPath), { recursive: true });
-  writeFileSync8(summaryPath, renderHarnessMarkdown(graph));
+  const summaryPath = join2(rootDir, HARNESS_SUMMARY_PATH);
+  mkdirSync3(dirname4(summaryPath), { recursive: true });
+  writeFileSync3(summaryPath, renderHarnessMarkdown(graph));
   return HARNESS_SUMMARY_PATH;
 }
 function renderHarnessMarkdown(graph) {
@@ -7176,7 +5247,7 @@ function renderFrameworkAndProviderLines(graph) {
   return lines;
 }
 function graphForSync(graph) {
-  return sortJson3({
+  return sortJson2({
     ...graph,
     scan: {
       ...graph.scan,
@@ -7187,19 +5258,19 @@ function graphForSync(graph) {
   });
 }
 function hashStableJson2(value) {
-  return hashText(JSON.stringify(sortJson3(value)));
+  return hashText(JSON.stringify(sortJson2(value)));
 }
-function sortJson3(value) {
+function sortJson2(value) {
   if (Array.isArray(value))
-    return value.map((item) => sortJson3(item));
+    return value.map((item) => sortJson2(item));
   if (value && typeof value === "object") {
-    return Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sortJson3(item)]));
+    return Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sortJson2(item)]));
   }
   return value;
 }
-function getGitCommit3(rootDir) {
+function getGitCommit(rootDir) {
   try {
-    return execFileSync3("git", ["rev-parse", "HEAD"], {
+    return execFileSync("git", ["rev-parse", "HEAD"], {
       cwd: rootDir,
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
@@ -7221,15 +5292,15 @@ function explainAgent(graph, agent) {
 }
 function inventoryFiles(rootDir, skipped, options = {}) {
   const files = [];
-  const rootReal = resolve8(rootDir);
+  const rootReal = resolve4(rootDir);
   const maxFiles = numericEnv("MODA_HARNESS_MAX_FILES", DEFAULT_MAX_INVENTORY_FILES);
   const maxTextBytes = numericEnv("MODA_HARNESS_MAX_TEXT_BYTES", DEFAULT_MAX_INVENTORY_TEXT_BYTES);
   let textBytes = 0;
-  function walk2(current) {
-    const rel = normalizePath3(relative6(rootReal, current)) || ".";
+  function walk(current) {
+    const rel = normalizePath3(relative3(rootReal, current)) || ".";
     let stat;
     try {
-      stat = lstatSync5(current);
+      stat = lstatSync3(current);
     } catch {
       recordSkipped(skipped, { path: rel, reason: "stat failed" });
       return;
@@ -7243,8 +5314,8 @@ function inventoryFiles(rootDir, skipped, options = {}) {
         recordSkipped(skipped, { path: rel, reason: "ignored directory" });
         return;
       }
-      for (const entry of readdirSync4(current).sort()) {
-        walk2(join7(current, entry));
+      for (const entry of readdirSync(current).sort()) {
+        walk(join2(current, entry));
       }
       return;
     }
@@ -7275,7 +5346,7 @@ function inventoryFiles(rootDir, skipped, options = {}) {
         recordSkipped(skipped, { path: rel, reason: "scan text budget exceeded" });
       } else {
         try {
-          item.text = readFileSync7(current, "utf8");
+          item.text = readFileSync3(current, "utf8");
           textBytes += Buffer.byteLength(item.text, "utf8");
         } catch {
           recordSkipped(skipped, { path: rel, reason: "text read failed" });
@@ -7284,7 +5355,7 @@ function inventoryFiles(rootDir, skipped, options = {}) {
     }
     files.push(item);
   }
-  walk2(rootReal);
+  walk(rootReal);
   return files;
 }
 function shouldSkipDirectory(rel) {
@@ -7330,7 +5401,7 @@ function numericEnvAllowZero(name, fallback) {
 function detectRepo(rootDir, files) {
   const packageJson = files.find((file) => file.path === "package.json");
   const pyproject = files.find((file) => file.path === "pyproject.toml");
-  const name = packageJson?.text ? safePackageName(packageJson.text) ?? basename5(rootDir) : pyproject?.text ? safeTomlName(pyproject.text) ?? basename5(rootDir) : basename5(rootDir);
+  const name = packageJson?.text ? safePackageName(packageJson.text) ?? basename4(rootDir) : pyproject?.text ? safeTomlName(pyproject.text) ?? basename4(rootDir) : basename4(rootDir);
   const packageManagers = [
     files.some((file) => file.path === "bun.lock" || file.path === "bun.lockb") ? "bun" : null,
     files.some((file) => file.path === "pnpm-lock.yaml") ? "pnpm" : null,
@@ -7442,7 +5513,7 @@ function runtimeAgentFromAnnotation(annotation) {
     kind: "runtime_agent",
     purpose: first2(values.purpose) ?? first2(values.description),
     familyId: first2(values.family),
-    root: normalizePath3(first2(values.root) ?? dirname8(annotation.evidence.path)),
+    root: normalizePath3(first2(values.root) ?? dirname4(annotation.evidence.path)),
     entrypointIds: values.entrypoint ?? [stableId2("entry", annotation.evidence.path)],
     channelAdapterIds: values.channel ?? [],
     artifactIds: [...values.artifact ?? [], ...values.prompt ?? [], ...values.tool ?? []],
@@ -7582,7 +5653,7 @@ function maybeAddPromptArtifact(graph, file) {
   if (!isPrompt)
     return;
   const id = stableId2("prompt", file.path);
-  const text = file.text ?? readFileSync7(file.absPath, "utf8");
+  const text = file.text ?? readFileSync3(file.absPath, "utf8");
   upsertArtifact(graph, {
     id,
     type: "prompt",
@@ -7604,7 +5675,7 @@ function maybeAddSkillArtifact(graph, file) {
   upsertArtifact(graph, {
     id: stableId2("skill", file.path),
     type: "skill",
-    name: titleFromId2(basename5(file.path).replace(/\.(md|mdc)$/i, "")),
+    name: titleFromId2(basename4(file.path).replace(/\.(md|mdc)$/i, "")),
     scope: "global",
     sourcePath: file.path,
     contentHash: hashText(file.text ?? ""),
@@ -7647,7 +5718,7 @@ function inferRuntimeAgent(file, graph) {
     return null;
   if (!/\.(ts|tsx|js|mjs|py)$/i.test(file.path))
     return null;
-  if (basename5(file.path) === "__init__.py")
+  if (basename4(file.path) === "__init__.py")
     return null;
   const loweredPath = file.path.toLowerCase();
   const loweredText = file.text.toLowerCase();
@@ -7678,7 +5749,7 @@ function inferRuntimeAgent(file, graph) {
     name: titleFromId2(file.path.replace(/\.(ts|tsx|js|mjs|py)$/i, "")),
     kind: "runtime_agent",
     purpose: inferAgentPurpose(file),
-    root: normalizePath3(dirname8(file.path)),
+    root: normalizePath3(dirname4(file.path)),
     entrypointIds: [entryId],
     channelAdapterIds: channelIds,
     artifactIds,
@@ -7754,7 +5825,7 @@ function inferArtifactsForFile(file, graph) {
       return false;
     if (artifact.sourcePath === file.path)
       return true;
-    const base = basename5(artifact.sourcePath);
+    const base = basename4(artifact.sourcePath);
     if (text.includes(base) || text.includes(artifact.sourcePath))
       return true;
     if (artifact.type === "tool") {
@@ -8401,7 +6472,7 @@ function upsertDeployment(graph, next) {
 }
 function contentHashForAnnotatedSource(sourcePath, annotation) {
   const bodyAnnotation = annotation;
-  const rootCandidate = resolve8(annotation.rootDir, sourcePath);
+  const rootCandidate = resolve4(annotation.rootDir, sourcePath);
   const candidates = [
     rootCandidate,
     ...annotatedSourceCandidates(sourcePath, bodyAnnotation).filter((c) => c !== rootCandidate)
@@ -8418,14 +6489,14 @@ function contentHashForAnnotatedSource(sourcePath, annotation) {
   return;
 }
 function readSmallTextFileForHash(absPath, rootDir) {
-  if (!existsSync9(absPath))
+  if (!existsSync3(absPath))
     return;
-  const rel = normalizePath3(relative6(rootDir, absPath));
+  const rel = normalizePath3(relative3(rootDir, absPath));
   if (isSecretishPath(rel))
     return;
   let stat;
   try {
-    stat = lstatSync5(absPath);
+    stat = lstatSync3(absPath);
   } catch {
     return;
   }
@@ -8435,7 +6506,7 @@ function readSmallTextFileForHash(absPath, rootDir) {
   if (!isTextFile(rel))
     return;
   try {
-    return readFileSync7(absPath, "utf8");
+    return readFileSync3(absPath, "utf8");
   } catch {
     return;
   }
@@ -8519,13 +6590,13 @@ function titleFromId2(id) {
   return id.replace(/^(agent|family|channel|prompt|tool|skill|eval|identity|deploy|entry|env)_/, "").split(/[_/.-]+/).filter(Boolean).map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join(" ") || id;
 }
 function promptNameFromPath(path) {
-  return titleFromId2(basename5(path).replace(/\.(prompt\.)?(md|json|ya?ml)$/i, ""));
+  return titleFromId2(basename4(path).replace(/\.(prompt\.)?(md|json|ya?ml)$/i, ""));
 }
 function normalizePath3(path) {
   return path.split(sep).join("/");
 }
 function hashText(text) {
-  return createHash4("sha256").update(text).digest("hex");
+  return createHash2("sha256").update(text).digest("hex");
 }
 
 // src/harness-remote.ts
@@ -8536,7 +6607,7 @@ var MIN_REMOTE_POLL_DELAY_MS = 250;
 var REMOTE_POLL_MAX_CONSECUTIVE_FAILURES = 4;
 var REMOTE_UPLOAD_TIMEOUT_MS = 120000;
 var REMOTE_STATUS_TIMEOUT_MS = 30000;
-var HARNESS_REMOTE_RUN_STATE_PATH = join8(".moda", "harness-remote-run.json");
+var HARNESS_REMOTE_RUN_STATE_PATH = join3(".moda", "harness-remote-run.json");
 function isRemoteHarnessAnalyze(context) {
   const flag = context.flags.remote;
   const noRemote = context.flags["no-remote"] ?? context.flags.no_remote;
@@ -8551,11 +6622,11 @@ function isRemoteHarnessAnalyze(context) {
   return env !== "" && env !== "0" && env !== "false";
 }
 function readRemoteRunState(rootDir) {
-  const path = join8(rootDir, HARNESS_REMOTE_RUN_STATE_PATH);
-  if (!existsSync10(path))
+  const path = join3(rootDir, HARNESS_REMOTE_RUN_STATE_PATH);
+  if (!existsSync4(path))
     return;
   try {
-    const parsed = JSON.parse(readFileSync8(path, "utf8"));
+    const parsed = JSON.parse(readFileSync4(path, "utf8"));
     if (!parsed || typeof parsed.run_id !== "string" || parsed.run_id.length === 0)
       return;
     return {
@@ -8569,8 +6640,8 @@ function readRemoteRunState(rootDir) {
 }
 function writeRemoteRunState(rootDir, state) {
   try {
-    mkdirSync8(join8(rootDir, ".moda"), { recursive: true });
-    writeFileSync9(join8(rootDir, HARNESS_REMOTE_RUN_STATE_PATH), `${JSON.stringify(state, null, 2)}
+    mkdirSync4(join3(rootDir, ".moda"), { recursive: true });
+    writeFileSync4(join3(rootDir, HARNESS_REMOTE_RUN_STATE_PATH), `${JSON.stringify(state, null, 2)}
 `);
   } catch {}
 }
@@ -8666,7 +6737,7 @@ async function pollRemoteAnalyzeUntilDone(options) {
         message: `Status poll failed (${consecutiveFailures}/${REMOTE_POLL_MAX_CONSECUTIVE_FAILURES}); retrying.`,
         elapsed_ms: Date.now() - context.startedAt
       });
-      await sleep2(Math.min(delay, Math.max(deadline - Date.now(), MIN_REMOTE_POLL_DELAY_MS)));
+      await sleep(Math.min(delay, Math.max(deadline - Date.now(), MIN_REMOTE_POLL_DELAY_MS)));
       if (signal?.aborted)
         return last;
       delay = Math.min(delay * 2, capMs);
@@ -8686,7 +6757,7 @@ async function pollRemoteAnalyzeUntilDone(options) {
       message: `Server-side analysis status: ${last?.status ?? "running"}.`,
       elapsed_ms: Date.now() - context.startedAt
     });
-    await sleep2(Math.min(delay, remaining));
+    await sleep(Math.min(delay, remaining));
     if (signal?.aborted)
       return last;
     delay = Math.min(delay * 2, capMs);
@@ -8906,872 +6977,4 @@ async function remoteAnalyzeFetch(url, apiKey, init, timeoutMs) {
   return response.json();
 }
 
-// src/doctor.ts
-import { createHash as createHash5 } from "node:crypto";
-import { existsSync as existsSync11, readFileSync as readFileSync9, statSync } from "node:fs";
-import { join as join9 } from "node:path";
-async function runDoctorCommand(context) {
-  const report = await buildDoctorReport(context, {
-    offline: context.flags.offline === "true"
-  });
-  if (context.outputMode === "human") {
-    if (!context.quiet)
-      console.log(renderDoctorHuman(report));
-    return { exitCode: 0 };
-  }
-  context.output.writeData(report, {
-    status: report.summary.fail > 0 ? "error" : "success",
-    ...doctorAgentWriteOptions(report, "doctor")
-  });
-  return { exitCode: 0 };
-}
-async function runStatusCommand(context) {
-  const report = await buildDoctorReport(context, {
-    offline: context.flags.offline === "true" || context.flags.online !== "true"
-  });
-  const topBroken = firstBrokenCheck(report.checks);
-  const statusPayload = {
-    schemaVersion: "status.v0.1",
-    generatedAt: report.generatedAt,
-    status: report.summary.status,
-    activeProfile: report.profile.active,
-    auth: {
-      apiKey: resolveApiKey() ? "configured" : "missing"
-    },
-    workspace: {
-      tenantId: resolveTenantId() ?? null,
-      baseUrl: resolveModaBaseUrl(),
-      ingestUrl: resolveIngestUrl()
-    },
-    dataFlow: checkStatus(report.checks, "cloud_data_flow"),
-    harness: checkStatus(report.checks, "harness_manifest_current"),
-    harnessSync: checkStatus(report.checks, "harness_sync_state_present"),
-    harnessReport: checkStatus(report.checks, "harness_report_approved_synced"),
-    shadowSpark: checkStatus(report.checks, "shadow_spark_workspace_health"),
-    prompts: checkStatus(report.checks, "prompts_discovered"),
-    skills: checkStatus(report.checks, "skills_discovered"),
-    topBrokenCheck: topBroken ? {
-      id: topBroken.id,
-      status: topBroken.status,
-      severity: topBroken.severity,
-      nextCommand: topBroken.nextCommand
-    } : null,
-    nextCommands: report.nextCommands.slice(0, 3)
-  };
-  if (context.outputMode === "human") {
-    if (!context.quiet)
-      console.log(renderStatusHuman(statusPayload));
-    return { exitCode: 0 };
-  }
-  context.output.writeData(statusPayload, {
-    status: report.summary.fail > 0 ? "error" : "success",
-    ...doctorAgentWriteOptions(report, "status")
-  });
-  return { exitCode: 0 };
-}
-async function buildDoctorReport(context, options) {
-  const checks = [];
-  const profileConfig = loadProfileConfig({ env: context.env });
-  const activeProfile = getActiveProfile({ profile: context.profile, env: context.env });
-  const paths = getModaPaths({ env: context.env });
-  const profileOptions = { profile: context.profile, env: context.env };
-  const apiKey = resolveApiKey(profileOptions);
-  const tenantId = resolveTenantId(profileOptions);
-  const baseUrl = resolveModaBaseUrl(profileOptions);
-  const ingestUrl = resolveIngestUrl(profileOptions);
-  checks.push({
-    id: "active_profile_resolves",
-    group: "config",
-    title: "Active profile resolves",
-    status: activeProfile ? "pass" : "fail",
-    severity: activeProfile ? "info" : "critical",
-    evidence: [
-      { label: "active_profile", value: profileConfig.active_profile },
-      { label: "environment", value: activeProfile.environment }
-    ],
-    remediation: activeProfile ? undefined : "Create or select a Moda profile.",
-    nextCommand: activeProfile ? undefined : "moda profiles list"
-  });
-  checks.push({
-    id: "api_key_resolves",
-    group: "config",
-    title: "API key resolves",
-    status: apiKey ? "pass" : "fail",
-    severity: apiKey ? "info" : "critical",
-    evidence: [{ label: "source", value: apiKey ? "environment/profile/config" : "none" }],
-    remediation: apiKey ? undefined : "Authenticate and create a tenant API key.",
-    nextCommand: apiKey ? undefined : "moda init"
-  });
-  checks.push({
-    id: "tenant_resolves",
-    group: "config",
-    title: "Tenant/workspace resolves",
-    status: tenantId ? "pass" : "warning",
-    severity: tenantId ? "info" : "warning",
-    evidence: [{ label: "tenant_id", value: tenantId ? "configured" : "missing" }],
-    remediation: tenantId ? undefined : "Select a tenant during init or set MODA_TENANT_ID.",
-    nextCommand: tenantId ? undefined : "moda init"
-  });
-  checks.push(authTokenCheck(context, Boolean(apiKey)));
-  checks.push(configPermissionCheck(paths.legacyConfigPath));
-  if (activeProfile.api_key_ref) {
-    const secretPath = secretFilePathFromRef(activeProfile.api_key_ref);
-    if (secretPath)
-      checks.push(secretPermissionCheck(secretPath));
-    checks.push({
-      id: "profile_api_key_ref_resolves",
-      group: "config",
-      title: "Profile API key reference resolves",
-      status: resolveSecretReference(activeProfile.api_key_ref) ? "pass" : "warning",
-      severity: "warning",
-      evidence: [{ label: "api_key_ref", value: activeProfile.api_key_ref }],
-      remediation: "Create or update the profile API key reference.",
-      nextCommand: "moda profiles create"
-    });
-  }
-  checks.push(urlCheck("base_url_valid", "config", "Base URL is valid", baseUrl));
-  checks.push(urlCheck("ingest_url_valid", "config", "Ingest URL is valid", ingestUrl));
-  checks.push(localBaseUrlCheck(activeProfile.environment, baseUrl));
-  const manifestPath = join9(context.cwd, ".moda", "harness.json");
-  const manifestExists = existsSync11(manifestPath);
-  checks.push({
-    id: "harness_manifest_exists",
-    group: "harness",
-    title: "Harness manifest exists",
-    status: manifestExists ? "pass" : "warning",
-    severity: manifestExists ? "info" : "warning",
-    evidence: [{ label: "path", value: ".moda/harness.json" }],
-    remediation: manifestExists ? undefined : "Run `moda harness scan --summary` to scan the project and write a harness manifest.",
-    nextCommand: manifestExists ? undefined : "moda harness scan --summary"
-  });
-  checks.push(harnessCurrentCheck(context.cwd, manifestPath, manifestExists, tenantId));
-  checks.push(harnessSyncStateCheck(context.cwd));
-  checks.push(harnessReportStateCheck(context.cwd));
-  checks.push(discoveryCheck("prompts_discovered", "harness", "Prompts are discovered", context.cwd, [
-    "prompts",
-    ".moda/prompts.yml"
-  ], "moda prompts init"));
-  checks.push(discoveryCheck("skills_discovered", "harness", "Skills are discovered", context.cwd, [
-    "skills",
-    ".claude/skills",
-    ".cursor/rules"
-  ], "moda skills pull"));
-  checks.push(discoveryCheck("evals_discovered", "harness", "Evals/tests are discovered", context.cwd, [
-    "evals",
-    "tests",
-    "__tests__"
-  ]));
-  checks.push(sdkInitializationCheck(context.cwd));
-  checks.push(validationEventPathCheck(ingestUrl));
-  if (options.offline || !apiKey) {
-    checks.push(...offlineCloudChecks(options.offline));
-  } else {
-    checks.push(...await cloudDataFlowChecks(ingestUrl, apiKey));
-  }
-  const nextCommands = nextCommandsForChecks(checks);
-  const summary = summarizeChecks(checks);
-  return {
-    schemaVersion: "doctor.v0.1",
-    generatedAt: new Date().toISOString(),
-    profile: {
-      active: activeProfile.name,
-      requested: context.profile
-    },
-    summary,
-    checks,
-    nextCommands,
-    fixPlan: checks.filter((check) => check.status === "fail" || check.status === "warning").map((check) => ({
-      checkId: check.id,
-      command: check.nextCommand,
-      action: check.remediation ?? "Review this diagnostic."
-    }))
-  };
-}
-function authTokenCheck(context, hasApiKey) {
-  const session = loadAuthSession({
-    profile: context.profile,
-    env: context.env,
-    includeExpired: true
-  });
-  const valid = isAuthSessionValid(session);
-  if (!valid && hasApiKey) {
-    return {
-      id: "auth_token_valid",
-      group: "config",
-      title: "Browser auth token is valid",
-      status: "skipped",
-      severity: "info",
-      evidence: [{ label: "reason", value: "api key configured" }]
-    };
-  }
-  return {
-    id: "auth_token_valid",
-    group: "config",
-    title: "Browser auth token is valid",
-    status: valid ? "pass" : "warning",
-    severity: valid ? "info" : "warning",
-    evidence: [
-      { label: "token", value: session ? "present" : "missing" },
-      ...session ? [{ label: "expires_at", value: new Date(session.expires_at * 1000).toISOString() }] : []
-    ],
-    remediation: valid ? undefined : "Refresh browser authentication.",
-    nextCommand: valid ? undefined : "moda init"
-  };
-}
-function configPermissionCheck(path) {
-  if (!existsSync11(path)) {
-    return {
-      id: "config_file_permissions",
-      group: "config",
-      title: "Config file permissions",
-      status: "skipped",
-      severity: "info",
-      evidence: [{ label: "path", value: path }]
-    };
-  }
-  const permission = ensureSecretFilePermissions(path);
-  return {
-    id: "config_file_permissions",
-    group: "config",
-    title: "Config file permissions",
-    status: permission.secure ? "pass" : "fail",
-    severity: permission.secure ? "info" : "critical",
-    evidence: [
-      { label: "path", value: path },
-      { label: "mode", value: permission.mode ?? "unknown" }
-    ],
-    remediation: permission.secure ? undefined : "Restrict config file permissions to the current user."
-  };
-}
-function secretPermissionCheck(path) {
-  const permission = ensureSecretFilePermissions(path);
-  return {
-    id: "secret_file_permissions",
-    group: "config",
-    title: "Secret file permissions",
-    status: permission.secure ? "pass" : "fail",
-    severity: permission.secure ? "info" : "critical",
-    evidence: [
-      { label: "path", value: path },
-      { label: "mode", value: permission.mode ?? "unknown" }
-    ],
-    remediation: permission.secure ? undefined : "Restrict secret file permissions to the current user."
-  };
-}
-function urlCheck(id, group, title, value) {
-  let valid = false;
-  try {
-    const parsed = new URL(value);
-    valid = parsed.protocol === "http:" || parsed.protocol === "https:";
-  } catch {
-    valid = false;
-  }
-  return {
-    id,
-    group,
-    title,
-    status: valid ? "pass" : "fail",
-    severity: valid ? "info" : "critical",
-    evidence: [{ label: "url", value }],
-    remediation: valid ? undefined : "Configure a valid http(s) URL.",
-    nextCommand: valid ? undefined : "moda profiles create"
-  };
-}
-function localBaseUrlCheck(environment, baseUrl) {
-  if (environment !== "local") {
-    return {
-      id: "local_base_url_frontend",
-      group: "config",
-      title: "Local base URL targets the frontend",
-      status: "skipped",
-      severity: "info",
-      evidence: [{ label: "environment", value: environment }]
-    };
-  }
-  let port = null;
-  let loopback = false;
-  try {
-    const parsed = new URL(baseUrl);
-    loopback = isLoopbackBaseUrl(baseUrl);
-    port = parsed.port || (parsed.protocol === "https:" ? "443" : "80");
-  } catch {
-    return {
-      id: "local_base_url_frontend",
-      group: "config",
-      title: "Local base URL targets the frontend",
-      status: "fail",
-      severity: "critical",
-      evidence: [{ label: "base_url", value: baseUrl }],
-      remediation: "Set the local profile base URL to the frontend origin (http://localhost:3000).",
-      nextCommand: "moda profiles create local --environment local --base-url http://localhost:3000"
-    };
-  }
-  const looksLikeBackend = loopback && (port === "3001" || port === "3002");
-  if (looksLikeBackend) {
-    return {
-      id: "local_base_url_frontend",
-      group: "config",
-      title: "Local base URL targets the frontend",
-      status: "warning",
-      severity: "warning",
-      evidence: [
-        { label: "base_url", value: baseUrl },
-        { label: "port", value: port ?? "unknown" }
-      ],
-      remediation: "Local CLI auth and control APIs are served by the frontend. " + "Use http://localhost:3000 (or your worktree frontend port), not the backend :3001.",
-      nextCommand: "moda profiles create local --environment local --base-url http://localhost:3000 --use"
-    };
-  }
-  if (!loopback) {
-    return {
-      id: "local_base_url_frontend",
-      group: "config",
-      title: "Local base URL targets the frontend",
-      status: "warning",
-      severity: "warning",
-      evidence: [{ label: "base_url", value: baseUrl }],
-      remediation: "Local profile should use a loopback frontend URL (http://localhost:3000). " + "Activate with `moda profiles use local` or set MODA_PROFILE=local.",
-      nextCommand: "moda profiles use local"
-    };
-  }
-  return {
-    id: "local_base_url_frontend",
-    group: "config",
-    title: "Local base URL targets the frontend",
-    status: "pass",
-    severity: "info",
-    evidence: [{ label: "base_url", value: baseUrl }]
-  };
-}
-function harnessCurrentCheck(cwd, manifestPath, manifestExists, tenantId) {
-  if (!manifestExists) {
-    return {
-      id: "harness_manifest_current",
-      group: "harness",
-      title: "Harness manifest matches scanner output",
-      status: "skipped",
-      severity: "info",
-      evidence: [{ label: "reason", value: "manifest missing" }],
-      nextCommand: "moda harness scan --summary"
-    };
-  }
-  try {
-    const current = scanHarness({
-      rootDir: cwd,
-      scannerVersion: "doctor",
-      tenantId,
-      tenantSource: tenantId ? "env_or_config" : undefined
-    });
-    const saved = JSON.parse(readFileSync9(manifestPath, "utf8"));
-    const savedHash = stableGraphHash(saved);
-    const currentHash = stableGraphHash(current);
-    const matches = savedHash === currentHash;
-    return {
-      id: "harness_manifest_current",
-      group: "harness",
-      title: "Harness manifest matches scanner output",
-      status: matches ? "pass" : "warning",
-      severity: matches ? "info" : "warning",
-      evidence: [
-        { label: "saved_hash", value: savedHash.slice(0, 12) },
-        { label: "current_hash", value: currentHash.slice(0, 12) },
-        ...matches ? [] : [{ label: "diff", value: "Manifest hash differs from fresh scanner output." }]
-      ],
-      remediation: matches ? undefined : "Refresh the local harness manifest.",
-      nextCommand: matches ? undefined : "moda harness scan --summary"
-    };
-  } catch (err) {
-    return {
-      id: "harness_manifest_current",
-      group: "harness",
-      title: "Harness manifest matches scanner output",
-      status: "fail",
-      severity: "critical",
-      evidence: [{ label: "error", value: err instanceof Error ? err.message : String(err) }],
-      remediation: "Regenerate the harness manifest.",
-      nextCommand: "moda harness scan --summary"
-    };
-  }
-}
-function harnessSyncStateCheck(cwd) {
-  const state = readHarnessSyncState(cwd);
-  if (!state) {
-    return {
-      id: "harness_sync_state_present",
-      group: "harness",
-      title: "Harness sync state exists",
-      status: "warning",
-      severity: "warning",
-      evidence: [{ label: "path", value: ".moda/sync-state.json" }],
-      remediation: "Sync the harness graph so Moda can correlate local state with cloud state.",
-      nextCommand: "moda harness sync --dry-run"
-    };
-  }
-  return {
-    id: "harness_sync_state_present",
-    group: "harness",
-    title: "Harness sync state exists",
-    status: "pass",
-    severity: "info",
-    evidence: [
-      { label: "updated_at", value: state.updatedAt },
-      { label: "profile", value: state.profile },
-      { label: "harness_id", value: state.harnessId },
-      { label: "remote_version_id", value: state.remote.versionId || "none" }
-    ]
-  };
-}
-function harnessReportStateCheck(cwd) {
-  const reportPath = join9(cwd, HARNESS_REPORT_PATH);
-  if (!existsSync11(reportPath)) {
-    return {
-      id: "harness_report_approved_synced",
-      group: "harness",
-      title: "Harness analyst report is approved and synced",
-      status: "warning",
-      severity: "warning",
-      evidence: [{ label: "path", value: HARNESS_REPORT_PATH }],
-      remediation: "Run a Moda Analyst pass so the harness graph has cited evidence before cloud sync.",
-      nextCommand: "moda harness analyze --summary"
-    };
-  }
-  try {
-    const report = readHarnessReport(reportPath);
-    const validation = validateHarnessReport(report, cwd);
-    const reportHash = hashHarnessReport(report);
-    const evidence = [
-      { label: "path", value: HARNESS_REPORT_PATH },
-      { label: "report_hash", value: reportHash.slice(0, 12) },
-      { label: "validation", value: validation.status }
-    ];
-    if (validation.status !== "pass") {
-      return {
-        id: "harness_report_approved_synced",
-        group: "harness",
-        title: "Harness analyst report is approved and synced",
-        status: "fail",
-        severity: "critical",
-        evidence: [
-          ...evidence,
-          { label: "errors", value: validation.errors.slice(0, 3).join(" | ") || "validation failed" }
-        ],
-        remediation: "Regenerate or fix the harness report before approving or syncing.",
-        nextCommand: "moda harness analyze --summary"
-      };
-    }
-    const approval = readHarnessReportApproval(cwd);
-    const approved = approval?.schemaVersion === HARNESS_REPORT_APPROVAL_SCHEMA_VERSION && approval.reportId === report.reportId && approval.reportHash === reportHash && approval.approved === true;
-    evidence.push({ label: "approval", value: approved ? "approved" : approval ? "stale_or_invalid" : "missing" });
-    if (approval && !approved) {
-      return {
-        id: "harness_report_approved_synced",
-        group: "harness",
-        title: "Harness analyst report is approved and synced",
-        status: "fail",
-        severity: "critical",
-        evidence,
-        remediation: "Approval no longer matches the current report. Review and approve the report again.",
-        nextCommand: "moda harness approve --yes"
-      };
-    }
-    if (!approved) {
-      return {
-        id: "harness_report_approved_synced",
-        group: "harness",
-        title: "Harness analyst report is approved and synced",
-        status: "warning",
-        severity: "warning",
-        evidence,
-        remediation: "Review and approve the validated harness report before syncing.",
-        nextCommand: "moda harness approve --yes"
-      };
-    }
-    const state = readHarnessSyncState(cwd);
-    const synced = state?.source === "approved_report" && state.report?.reportHash === reportHash;
-    evidence.push({ label: "sync", value: synced ? "synced" : "not_synced_to_this_report" }, ...state?.report?.reportHash ? [{ label: "sync_report_hash", value: state.report.reportHash.slice(0, 12) }] : []);
-    return {
-      id: "harness_report_approved_synced",
-      group: "harness",
-      title: "Harness analyst report is approved and synced",
-      status: synced ? "pass" : "warning",
-      severity: synced ? "info" : "warning",
-      evidence,
-      remediation: synced ? undefined : "Sync the approved harness report so Moda cloud has the same harness graph.",
-      nextCommand: synced ? undefined : "moda harness sync --from-report .moda/harness-report.json"
-    };
-  } catch (err) {
-    return {
-      id: "harness_report_approved_synced",
-      group: "harness",
-      title: "Harness analyst report is approved and synced",
-      status: "fail",
-      severity: "critical",
-      evidence: [
-        { label: "path", value: HARNESS_REPORT_PATH },
-        { label: "error", value: err instanceof Error ? err.message : String(err) }
-      ],
-      remediation: "Regenerate the harness report.",
-      nextCommand: "moda harness analyze --summary"
-    };
-  }
-}
-function readHarnessReportApproval(cwd) {
-  const approvalPath = join9(cwd, HARNESS_REPORT_APPROVAL_PATH);
-  if (!existsSync11(approvalPath))
-    return null;
-  try {
-    return JSON.parse(readFileSync9(approvalPath, "utf8"));
-  } catch {
-    return {
-      schemaVersion: HARNESS_REPORT_APPROVAL_SCHEMA_VERSION,
-      reportId: "unreadable",
-      reportHash: "unreadable",
-      approved: true,
-      approvedAt: "",
-      approvedBy: "local-human",
-      reportPath: HARNESS_REPORT_PATH
-    };
-  }
-}
-function discoveryCheck(id, group, title, cwd, relativePaths, nextCommand) {
-  const found = relativePaths.filter((path) => existsSync11(join9(cwd, path)));
-  return {
-    id,
-    group,
-    title,
-    status: found.length > 0 ? "pass" : "warning",
-    severity: found.length > 0 ? "info" : "warning",
-    evidence: [{ label: "paths", value: found.length > 0 ? found.join(", ") : "none" }],
-    remediation: found.length > 0 ? undefined : `Expected one of: ${relativePaths.join(", ")}.`,
-    nextCommand: found.length > 0 ? undefined : nextCommand
-  };
-}
-function sdkInitializationCheck(cwd) {
-  const candidates = ["src", "app", "agent_harness"];
-  let detected = false;
-  for (const candidate of candidates) {
-    const path = join9(cwd, candidate);
-    if (!existsSync11(path))
-      continue;
-    try {
-      const stat = statSync(path);
-      detected ||= stat.isDirectory() || stat.isFile();
-    } catch {}
-  }
-  return {
-    id: "sdk_initialization_detected",
-    group: "harness",
-    title: "SDK initialization is detectable",
-    status: detected ? "warning" : "skipped",
-    severity: "warning",
-    evidence: [{ label: "status", value: detected ? "code present, instrumentation not verified" : "no source candidates" }],
-    remediation: "Use the generated integration guide to add Moda SDK instrumentation.",
-    nextCommand: "moda init"
-  };
-}
-function validationEventPathCheck(ingestUrl) {
-  return {
-    id: "validation_event_path_defined",
-    group: "cloud",
-    title: "Validation event path is defined",
-    status: "pass",
-    severity: "info",
-    evidence: [{ label: "path", value: `${ingestUrl.replace(/\/+$/, "")}/v1/otel/validation` }]
-  };
-}
-function offlineCloudChecks(isOffline) {
-  const status = isOffline ? "skipped" : "warning";
-  const evidence = [{ label: "mode", value: isOffline ? "offline" : "missing api key" }];
-  const remediation = isOffline ? "Rerun without --offline to check Moda Cloud." : "Configure an API key before checking cloud data flow.";
-  const nextCommand = isOffline ? "moda doctor --online" : "moda init";
-  return [
-    {
-      id: "cloud_api_reachable",
-      group: "cloud",
-      title: "Moda Cloud API is reachable",
-      status,
-      severity: "warning",
-      evidence,
-      remediation,
-      nextCommand
-    },
-    {
-      id: "ingest_endpoint_reachable",
-      group: "cloud",
-      title: "Moda ingest endpoint is reachable",
-      status,
-      severity: "warning",
-      evidence,
-      remediation,
-      nextCommand
-    },
-    {
-      id: "recent_data_flow",
-      group: "cloud",
-      title: "Recent traces/logs/runs exist",
-      status,
-      severity: "warning",
-      evidence,
-      remediation,
-      nextCommand
-    },
-    {
-      id: "cloud_data_flow",
-      group: "cloud",
-      title: "Moda Cloud data flow",
-      status,
-      severity: "warning",
-      evidence,
-      remediation,
-      nextCommand
-    }
-  ];
-}
-async function cloudDataFlowChecks(ingestUrl, apiKey) {
-  let overview;
-  let cloudApiCheck;
-  try {
-    overview = await callDataAPI("/overview?days_back=1");
-    cloudApiCheck = {
-      id: "cloud_api_reachable",
-      group: "cloud",
-      title: "Moda Cloud API is reachable",
-      status: "pass",
-      severity: "info",
-      evidence: [{ label: "overview", value: "reachable" }]
-    };
-  } catch (err) {
-    const error = err instanceof Error ? err.message : String(err);
-    return [
-      {
-        id: "cloud_api_reachable",
-        group: "cloud",
-        title: "Moda Cloud API is reachable",
-        status: "warning",
-        severity: "warning",
-        evidence: [{ label: "error", value: error }],
-        remediation: "Check API key and base URL.",
-        nextCommand: "moda doctor --offline"
-      },
-      {
-        id: "ingest_endpoint_reachable",
-        group: "cloud",
-        title: "Moda ingest endpoint is reachable",
-        status: "skipped",
-        severity: "warning",
-        evidence: [{ label: "reason", value: "cloud API unreachable" }]
-      },
-      {
-        id: "recent_data_flow",
-        group: "cloud",
-        title: "Recent traces/logs/runs exist",
-        status: "skipped",
-        severity: "warning",
-        evidence: [{ label: "reason", value: "overview unavailable" }]
-      },
-      {
-        id: "cloud_data_flow",
-        group: "cloud",
-        title: "Moda Cloud data flow",
-        status: "warning",
-        severity: "warning",
-        evidence: [{ label: "error", value: error }],
-        remediation: "Check API key, base URL, and whether data has reached Moda.",
-        nextCommand: "moda doctor --offline"
-      }
-    ];
-  }
-  const ingestCheck = await ingestReachabilityCheck(ingestUrl, apiKey);
-  const recentCheck = recentDataFlowCheck(overview);
-  const cloudStatus = cloudApiCheck.status === "pass" && ingestCheck.status === "pass" && recentCheck.status === "pass" ? "pass" : "warning";
-  return [
-    cloudApiCheck,
-    ingestCheck,
-    recentCheck,
-    {
-      id: "cloud_data_flow",
-      group: "cloud",
-      title: "Moda Cloud data flow",
-      status: cloudStatus,
-      severity: cloudStatus === "pass" ? "info" : "warning",
-      evidence: [
-        { label: "cloud_api", value: cloudApiCheck.status },
-        { label: "ingest", value: ingestCheck.status },
-        { label: "recent_data", value: recentCheck.status }
-      ],
-      remediation: cloudStatus === "pass" ? undefined : "Check API key, ingest URL, and whether data has reached Moda.",
-      nextCommand: cloudStatus === "pass" ? undefined : "moda doctor --offline"
-    }
-  ];
-}
-async function ingestReachabilityCheck(ingestUrl, apiKey) {
-  const url = `${ingestUrl.replace(/\/+$/, "")}/`;
-  try {
-    const response = await fetch(url, {
-      method: "GET",
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(1e4)
-    });
-    return {
-      id: "ingest_endpoint_reachable",
-      group: "cloud",
-      title: "Moda ingest endpoint is reachable",
-      status: "pass",
-      severity: "info",
-      evidence: [
-        { label: "url", value: url },
-        { label: "http_status", value: String(response.status) }
-      ]
-    };
-  } catch (err) {
-    return {
-      id: "ingest_endpoint_reachable",
-      group: "cloud",
-      title: "Moda ingest endpoint is reachable",
-      status: "warning",
-      severity: "warning",
-      evidence: [{ label: "error", value: err instanceof Error ? err.message : String(err) }],
-      remediation: "Check the configured ingest URL and network reachability.",
-      nextCommand: "moda profiles create"
-    };
-  }
-}
-function recentDataFlowCheck(overview) {
-  const data = isRecord4(overview) ? overview : {};
-  const conversations = numberAt(data, ["conversations", "total"]);
-  const toolFailures = numberAt(data, ["tool_failures", "total"]);
-  const recentActivity = Array.isArray(data.recent_activity) ? data.recent_activity : [];
-  const lastEventAt = lastActivityTimestamp(recentActivity);
-  const hasData = conversations > 0 || toolFailures > 0 || Boolean(lastEventAt);
-  return {
-    id: "recent_data_flow",
-    group: "cloud",
-    title: "Recent traces/logs/runs exist",
-    status: hasData ? "pass" : "warning",
-    severity: hasData ? "info" : "warning",
-    evidence: [
-      { label: "conversations", value: String(conversations) },
-      { label: "tool_failures", value: String(toolFailures) },
-      { label: "last_event_at", value: lastEventAt ?? "none" }
-    ],
-    remediation: hasData ? undefined : "No recent Moda data was visible in the overview window.",
-    nextCommand: hasData ? undefined : "moda hooks install --agent=all"
-  };
-}
-function numberAt(value, path) {
-  let cursor = value;
-  for (const key of path) {
-    if (!isRecord4(cursor))
-      return 0;
-    cursor = cursor[key];
-  }
-  return typeof cursor === "number" && Number.isFinite(cursor) ? cursor : 0;
-}
-function lastActivityTimestamp(items) {
-  const timestamps = items.map((item) => isRecord4(item) && typeof item.timestamp === "string" ? item.timestamp : undefined).filter((item) => Boolean(item)).sort();
-  return timestamps.at(-1);
-}
-function summarizeChecks(checks) {
-  const fail = checks.filter((check) => check.status === "fail").length;
-  const warning = checks.filter((check) => check.status === "warning").length;
-  const skipped = checks.filter((check) => check.status === "skipped").length;
-  const pass = checks.filter((check) => check.status === "pass").length;
-  return {
-    status: fail > 0 ? "fail" : warning > 0 ? "warning" : "pass",
-    pass,
-    warning,
-    fail,
-    skipped
-  };
-}
-function nextCommandsForChecks(checks) {
-  return [...new Set(checks.filter((check) => check.status === "fail" || check.status === "warning").map((check) => check.nextCommand).filter((command) => Boolean(command)))];
-}
-function firstBrokenCheck(checks) {
-  return checks.find((check) => check.status === "fail") ?? checks.find((check) => check.status === "warning");
-}
-function checkStatus(checks, id) {
-  return checks.find((check) => check.id === id)?.status ?? "skipped";
-}
-function doctorAgentWriteOptions(report, command) {
-  const broken = report.checks.filter((check) => check.status === "fail" || check.status === "warning");
-  return {
-    summary: `${command} completed with status ${report.summary.status}: ${report.summary.fail} failing checks and ${report.summary.warning} warnings.`,
-    findings: broken.slice(0, 16).map((check) => ({
-      id: check.id,
-      title: check.title,
-      status: check.status,
-      severity: check.severity,
-      description: check.remediation ?? `Doctor check ${check.id} is ${check.status}.`,
-      evidence_ref_ids: [`doctor:${check.id}`]
-    })),
-    evidenceRefs: report.checks.map((check) => ({
-      id: `doctor:${check.id}`,
-      kind: "doctor_check",
-      label: check.title,
-      status: check.status
-    })),
-    recommendedActions: report.fixPlan.slice(0, 16).map((item, index) => ({
-      id: `doctor_action_${index + 1}_${item.checkId}`,
-      title: item.action,
-      command: item.command,
-      rationale: `Doctor check ${item.checkId} is not passing.`,
-      mutability: item.command ? agentMutabilityForCommand(item.command) : "unknown",
-      requires_approval: item.command ? agentCommandRequiresApproval(item.command) : true
-    })),
-    nextCommands: report.nextCommands.slice(0, 16).map((nextCommand) => ({
-      command: nextCommand,
-      purpose: agentPurposeForCommand(nextCommand),
-      mutability: agentMutabilityForCommand(nextCommand),
-      requires_approval: agentCommandRequiresApproval(nextCommand)
-    })),
-    warnings: broken.filter((check) => check.status === "warning").slice(0, 16).map((check) => `${check.title}: ${check.remediation ?? check.status}`)
-  };
-}
-function agentMutabilityForCommand(command) {
-  if (/\bsync\b/.test(command))
-    return "sync";
-  if (/\b(init|install|approve|pull|gen|promote|remove)\b/.test(command))
-    return "write";
-  return "read";
-}
-function agentCommandRequiresApproval(command) {
-  return agentMutabilityForCommand(command) !== "read" && !command.includes("--dry-run");
-}
-function agentPurposeForCommand(command) {
-  if (command.includes("doctor"))
-    return "Re-run Moda diagnostics.";
-  if (command.includes("harness approve"))
-    return "Approve the validated harness report after review.";
-  if (command.includes("harness sync"))
-    return "Sync harness state to Moda Cloud.";
-  if (command.includes("harness scan"))
-    return "Refresh the local harness manifest.";
-  if (command.includes("init"))
-    return "Run Moda onboarding.";
-  return "Inspect or repair Moda setup.";
-}
-function stableGraphHash(graph) {
-  return createHash5("sha256").update(JSON.stringify(sortJson4({
-    ...graph,
-    scan: {
-      ...graph.scan,
-      createdAt: undefined,
-      scannerVersion: undefined,
-      skipped: undefined
-    }
-  }))).digest("hex");
-}
-function sortJson4(value) {
-  if (Array.isArray(value))
-    return value.map((item) => sortJson4(item));
-  if (value && typeof value === "object") {
-    return Object.fromEntries(Object.entries(value).filter(([, item]) => item !== undefined).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sortJson4(item)]));
-  }
-  return value;
-}
-function isRecord4(value) {
-  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-
-export { ApiError, callDataAPI, callControlAPI, getApiRequestCount, resetApiRequestCount, runPromptsCommand, initPrompts, runPromptSync, claudeSkillToCursorRule, installRules, detectAgents, SKILL_SOURCE_INTEGRATION_BUNDLED, readSkillsManifest, upsertSkillManifestRecord, runSkillSync, runSkillsCommand, shouldColorTerminalOutput, terminalStyles, stripAnsi, renderMarkdownForTerminal, HARNESS_REPORT_PATH, HARNESS_REPORT_APPROVAL_PATH, validateHarnessReport, readHarnessReport, hashHarnessReport, hashStableJson, startRemoteAnalyze, pollRemoteAnalyzeUntilDone, renderInitBanner, renderInitStep, renderInitNote, renderInitSetupPlan, renderInitComplete, runHarnessCommand, describeCodingAgentEvent, isDeterministicLocalAnalyst, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, summarizeHarness, readHarnessSyncState, describeSyncIdentity, describeSyncTenantLabel, graphForSync, runDoctorCommand, runStatusCommand, buildDoctorReport };
+export { ApiError, callDataAPI, callControlAPI, getApiRequestCount, resetApiRequestCount, shouldColorTerminalOutput, terminalStyles, stripAnsi, renderMarkdownForTerminal, HARNESS_REPORT_APPROVAL_SCHEMA_VERSION, HARNESS_REPORT_PATH, HARNESS_REPORT_APPROVAL_PATH, validateHarnessReport, readHarnessReport, hashHarnessReport, hashStableJson, startRemoteAnalyze, pollRemoteAnalyzeUntilDone, renderDoctorHuman, renderStatusHuman, renderInitBanner, renderInitStep, renderInitNote, renderInitSetupPlan, renderInitComplete, runHarnessCommand, describeCodingAgentEvent, isDeterministicLocalAnalyst, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, scanHarness, summarizeHarness, buildSourceSnapshot, readHarnessSyncState, describeSyncIdentity, describeSyncTenantLabel, graphForSync };