@moda-ai/cli 1.22.2 → 1.23.1

package/dist/{cli-qszcpda3.js → cli-ysegdrm5.js}

@@ -1,10 +1,12 @@
+import {
+  authFetch,
+  getCachedLoginContext
+} from "./cli-c4se7a5d.js";
 import {
   CliAccessError,
   CliInputError,
   CliInputRequiredError,
-  authFetch,
   embeddedTenantIdFromApiKey,
-  getCachedLoginContext,
   getModaDir,
   loadCliConfig,
   resolveApiKeyFromActiveProfile,
@@ -13,7 +15,7 @@ import {
   resolveTenantIdFromActiveProfile,
   saveCliConfig,
   writeSecretJsonFile
-} from "./cli-pwbvtes8.js";
+} from "./cli-mnqa4rp6.js";
 
 // src/init/tenant.ts
 import { randomUUID } from "node:crypto";

package/dist/cli.js

@@ -1,9 +1,15 @@
 #!/usr/bin/env node
+import {
+  buildDoctorReport,
+  runDoctorCommand,
+  runPromptsCommand,
+  runSkillsCommand,
+  runStatusCommand
+} from "./cli-rbftde0m.js";
 import {
   ApiError,
   HARNESS_REPORT_APPROVAL_PATH,
   HARNESS_REPORT_PATH,
-  buildDoctorReport,
   callControlAPI,
   callDataAPI,
   getApiRequestCount,
@@ -14,17 +20,21 @@ import {
   readHarnessSyncState,
   renderMarkdownForTerminal,
   resetApiRequestCount,
-  runDoctorCommand,
   runHarnessCommand,
-  runPromptsCommand,
-  runSkillsCommand,
-  runStatusCommand,
   shouldColorTerminalOutput,
   stripAnsi,
   summarizeHarness,
   terminalStyles,
   validateHarnessReport
-} from "./cli-g8qs2tj9.js";
+} from "./cli-y55bgg14.js";
+import {
+  authFetch,
+  clearAuthSession,
+  isAuthSessionValid,
+  loadAuthSession,
+  login,
+  revokeCliSessionToken
+} from "./cli-c4se7a5d.js";
 import {
   AGENT_ERROR_CODES,
   CliAccessError,
@@ -43,8 +53,6 @@ import {
   VERSION,
   __require,
   assertValidProfileName,
-  authFetch,
-  clearAuthSession,
   clearStoredApiKeyCredentials,
   createCliOutput,
   createCommandContext,
@@ -53,11 +61,8 @@ import {
   getModaDir,
   getModaPaths,
   isApiLikeError,
-  isAuthSessionValid,
   isNetworkLikeError,
-  loadAuthSession,
   loadProfileConfig,
-  login,
   resolveApiKey,
   resolveApiKeyFromActiveProfile,
   resolveIngestUrl,
@@ -65,7 +70,6 @@ import {
   resolveOutputMode,
   resolveSecretReference,
   resolveTenantId,
-  revokeCliSessionToken,
   safeWriteStderr,
   safeWriteStdout,
   secretFilePathFromRef,
@@ -74,7 +78,7 @@ import {
   validateConfig,
   wasOutputCancelled,
   writeSecretJsonFile
-} from "./cli-pwbvtes8.js";
+} from "./cli-mnqa4rp6.js";
 
 // src/cli.ts
 import { z as z2 } from "zod";
@@ -4436,7 +4440,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result",
     handler: async (context) => {
-      const { runInit } = await import("./index-6h0nc1r5.js");
+      const { runInit } = await import("./index-t89mvn32.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",
@@ -4477,7 +4481,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runProvision } = await import("./provision-j5gq8cvx.js");
+      const { runProvision } = await import("./provision-hm1ppwj6.js");
       return runProvision(context, {
         resumeCommand: buildResumeCommand("provision", context.rawFlags)
       });

package/dist/harness-github-actions-7t3cncnt.js

@@ -0,0 +1,95 @@
+import {
+  buildSourceSnapshot
+} from "./cli-y55bgg14.js";
+import"./cli-mnqa4rp6.js";
+
+// src/harness-github-actions.ts
+var DEFAULT_MODA_GITHUB_URL = "https://moda-github.modas.workers.dev";
+var DEFAULT_GHA_AUDIENCE = "https://moda.dev/github-actions";
+
+class GithubActionsAnalyzeError extends Error {
+}
+async function requestOidcToken(env, audience, fetchImpl) {
+  const requestUrl = env.ACTIONS_ID_TOKEN_REQUEST_URL;
+  const requestToken = env.ACTIONS_ID_TOKEN_REQUEST_TOKEN;
+  if (!requestUrl || !requestToken) {
+    throw new GithubActionsAnalyzeError("GitHub Actions OIDC is unavailable. Ensure the workflow sets `permissions: id-token: write`.");
+  }
+  const url = `${requestUrl}${requestUrl.includes("?") ? "&" : "?"}audience=${encodeURIComponent(audience)}`;
+  const response = await fetchImpl(url, { headers: { Authorization: `Bearer ${requestToken}` } });
+  if (!response.ok) {
+    throw new GithubActionsAnalyzeError(`Failed to obtain GitHub OIDC token (${response.status}).`);
+  }
+  const body = await response.json();
+  if (!body.value)
+    throw new GithubActionsAnalyzeError("GitHub OIDC token response was empty.");
+  return body.value;
+}
+async function runGithubActionsAnalyze(rootDir, deps = {}) {
+  const env = deps.env ?? process.env;
+  const fetchImpl = deps.fetchImpl ?? fetch;
+  const buildSnapshot = deps.buildSnapshot ?? buildSourceSnapshot;
+  const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const base = (env.MODA_GITHUB_URL || DEFAULT_MODA_GITHUB_URL).replace(/\/+$/, "");
+  const audience = env.MODA_GHA_AUDIENCE || DEFAULT_GHA_AUDIENCE;
+  const oidcToken = await requestOidcToken(env, audience, fetchImpl);
+  const exchangeRes = await fetchImpl(`${base}/gha/exchange`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ oidcToken })
+  });
+  if (!exchangeRes.ok) {
+    throw new GithubActionsAnalyzeError(`Moda OIDC exchange failed (${exchangeRes.status}).`);
+  }
+  const exchange = await exchangeRes.json();
+  const authHeader = { Authorization: `Bearer ${exchange.token}`, "Content-Type": "application/json" };
+  const snapshot = buildSnapshot(rootDir);
+  const analyzeRes = await fetchImpl(`${base}/gha/analyze`, {
+    method: "POST",
+    headers: authHeader,
+    body: JSON.stringify({ snapshot })
+  });
+  if (!analyzeRes.ok) {
+    throw new GithubActionsAnalyzeError(`Hosted analysis submission failed (${analyzeRes.status}).`);
+  }
+  const { analysisRunId } = await analyzeRes.json();
+  const maxAttempts = deps.maxPollAttempts ?? 60;
+  const intervalMs = deps.pollIntervalMs ?? 15000;
+  let status = "running";
+  let report;
+  let validation;
+  for (let attempt = 0;attempt < maxAttempts; attempt += 1) {
+    const pollRes = await fetchImpl(`${base}/gha/analyze/${encodeURIComponent(analysisRunId)}`, { headers: { Authorization: authHeader.Authorization } });
+    if (!pollRes.ok)
+      throw new GithubActionsAnalyzeError(`Hosted analysis poll failed (${pollRes.status}).`);
+    const polled = await pollRes.json();
+    status = polled.status;
+    report = polled.report;
+    validation = polled.validation;
+    if (status === "completed" || status === "failed")
+      break;
+    await sleep(intervalMs);
+  }
+  const validationPassed = Boolean(report?.graph) && (validation?.valid === true || validation?.status === "pass");
+  if (status === "completed" && report && deps.writeReport) {
+    await deps.writeReport(report);
+  }
+  let synced = false;
+  if (status === "completed" && validationPassed && exchange.capabilities.includes("sync") && report) {
+    const syncRes = await fetchImpl(`${base}/gha/sync`, {
+      method: "POST",
+      headers: authHeader,
+      body: JSON.stringify({ analysisRunId })
+    });
+    if (!syncRes.ok)
+      throw new GithubActionsAnalyzeError(`Harness sync failed (${syncRes.status}).`);
+    synced = true;
+  }
+  return { analysisRunId, status, synced, capabilities: exchange.capabilities, validationPassed };
+}
+export {
+  runGithubActionsAnalyze,
+  GithubActionsAnalyzeError,
+  DEFAULT_MODA_GITHUB_URL,
+  DEFAULT_GHA_AUDIENCE
+};

package/dist/{index-6h0nc1r5.js → index-t89mvn32.js}

@@ -2,17 +2,22 @@ import {
   SKILL_SOURCE_INTEGRATION_BUNDLED,
   buildDoctorReport,
   claudeSkillToCursorRule,
+  detectAgents,
+  initPrompts,
+  installRules,
+  readSkillsManifest,
+  runPromptSync,
+  runSkillSync,
+  upsertSkillManifestRecord
+} from "./cli-rbftde0m.js";
+import {
   codingAgentDisplayName,
   describeCodingAgentEvent,
   describeSyncIdentity,
   describeSyncTenantLabel,
-  detectAgents,
   detectAvailableCodingAgents,
-  initPrompts,
-  installRules,
   isDeterministicLocalAnalyst,
   pollRemoteAnalyzeUntilDone,
-  readSkillsManifest,
   renderInitBanner,
   renderInitComplete,
   renderInitNote,
@@ -20,25 +25,24 @@ import {
   renderInitStep,
   runCodingAgent,
   runHarnessCommand,
-  runPromptSync,
-  runSkillSync,
   startRemoteAnalyze,
-  stripAnsi,
-  upsertSkillManifestRecord
-} from "./cli-g8qs2tj9.js";
+  stripAnsi
+} from "./cli-y55bgg14.js";
 import {
   selectTenantAndCreateKey
-} from "./cli-qszcpda3.js";
+} from "./cli-ysegdrm5.js";
+import {
+  loadToken,
+  login
+} from "./cli-c4se7a5d.js";
 import {
   CliAuthError,
   CliInputError,
   VERSION,
   createCommandContext,
-  loadToken,
-  login,
   resolveIngestUrl,
   resolveModaBaseUrl
-} from "./cli-pwbvtes8.js";
+} from "./cli-mnqa4rp6.js";
 
 // src/init/index.ts
 import { existsSync as existsSync6, mkdirSync as mkdirSync5, readdirSync as readdirSync4, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "node:fs";

package/dist/{provision-j5gq8cvx.js → provision-hm1ppwj6.js}

@@ -1,13 +1,15 @@
 import {
   selectTenantAndCreateKey
-} from "./cli-qszcpda3.js";
+} from "./cli-ysegdrm5.js";
+import {
+  loadAuthSession
+} from "./cli-c4se7a5d.js";
 import {
   CliAuthError,
-  loadAuthSession,
   resolveIngestUrl,
   resolveModaBaseUrl,
   stringOption
-} from "./cli-pwbvtes8.js";
+} from "./cli-mnqa4rp6.js";
 
 // src/provision.ts
 async function runProvision(context, options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.22.2",
+  "version": "1.23.1",
   "description": "CLI for Moda - AI agent analytics and observability",
   "type": "module",
   "bin": {

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-07-22T22:34:35.167Z",
-  "cli_version": "1.22.2",
+  "bundled_at": "2026-07-24T21:28:41.121Z",
+  "cli_version": "1.23.1",
   "skills": [
     {
       "id": "integration-node-anthropic",